Static | ZeroBOX

PE Compile Time

2023-12-13 20:49:34

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00008334 0x00008400 6.23716885566
.rsrc 0x0000c000 0x00000600 0x00000600 3.93966769491
.reloc 0x0000e000 0x0000000c 0x00000200 0.0815394123432

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x0000c090 0x000002dc LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x0000c37c 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
3jv;
GT(ae 5
>"af +e
cy5f &x
Yf S`g
te IN<
$ae JP
aef <8
a n6' Yfe
lmXf s
_*aef
\~ qb
Xefe o
cf o_N
'a Ew"
Xe g x
%aff O
07aef
Yfe ]f
Y /<?a
%Ye nh
cf HV7
Xef G
l*Xe `
n#Xf e
a* f|$
Ye* 3*
_b`})
_d})
V}%'Ibz
EN;w@S
v4.0.30319
#Strings
Ldc_I4_0
Ldloc_0
Stloc_0
Ldarg_0
Ldc_I4_M1
Ldloc_1
Stloc_1
ReadInt32
Ldloc_2
Stloc_2
Ldloc_3
Stloc_3
Ldc_I4
Conv_I4
Ldc_I4_5
ReadUInt16
get_UTF8
<Module>
System.IO
Ldloc_S
Stloc_S
Brfalse_S
Bne_Un_S
get_IV
set_IV
GenerateIV
DownloadData
GetData
mscorlib
get_Millisecond
DefineMethod
GetMethod
OpCode
CryptoStreamMode
DynamicInvoke
EndInvoke
BeginInvoke
IDisposable
Hashtable
RuntimeTypeHandle
GetTypeFromHandle
DefineDynamicModule
get_Name
GetName
AssemblyName
DateTime
DefineType
CreateType
ValueType
SecurityProtocolType
SetReturnType
GetType
MethodBase
Dispose
CreateDelegate
MulticastDelegate
GuidAttribute
DebuggableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
AssemblyFileVersionAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
DefaultMemberAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
ReadByte
LegalBlockSizesValue
LegalKeySizesValue
add_ResourceResolve
Qmlmpwsbt.exe
set_BlockSize
get_InputBlockSize
get_OutputBlockSize
set_KeySize
System.Threading
Encoding
System.Runtime.Versioning
FromBase64String
ReadString
GetString
BinarySearch
get_Length
Qnuvtvfli
Newobj
AsyncCallback
TransformFinalBlock
TransformBlock
DeclareLocal
DefineLabel
MarkLabel
set_SecurityProtocol
GetManifestResourceStream
get_BaseStream
CryptoStream
MemoryStream
Program
get_Item
System
SymmetricAlgorithm
Random
get_CanReuseTransform
ICryptoTransform
AppDomain
get_CurrentDomain
Action
System.Reflection
set_Position
InvalidOperationException
StringComparison
CopyTo
MethodInfo
ConstructorInfo
InvokeMember
BinaryReader
MethodBuilder
ModuleBuilder
TypeBuilder
LocalBuilder
ParameterBuilder
AssemblyBuilder
Binder
Buffer
ServicePointManager
ParameterModifier
ResolveEventHandler
DefineParameter
GetILGenerator
.cctor
GetConstructor
Monitor
CreateDecryptor
CreateEncryptor
System.Diagnostics
System.Runtime.InteropServices
System.Runtime.CompilerServices
OpCodes
DebuggingModes
GetTypes
MethodAttributes
TypeAttributes
ParameterAttributes
NextBytes
KeySizes
BindingFlags
ResolveEventArgs
get_CanTransformMultipleBlocks
Equals
System.Collections
get_Chars
SetParameters
AssemblyBuilderAccess
Concat
Format
Qmlmpwsbt
Object
System.Net
System.Reflection.Emit
IAsyncResult
WebClient
Convert
Callvirt
System.Text
get_Now
ToCharArray
get_Key
set_Key
GetPublicKey
GenerateKey
System.Security.Cryptography
get_Assembly
GetExecutingAssembly
BlockCopy
WrapNonExceptionThrows
$123617bc-ca4b-4076-a316-cb026ec51bbe
1.0.0.0
.NETFramework,Version=v4.5
FrameworkDisplayName
.NET Framework 4.5
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
tn3qL4bpy1b8PY/hhnDwNI2qpHfqPo7miX2iHIbwoGrtKZrFlnf8NoHonD/+Ppfbo3H1N63liGGiNJPbrGr8KpbliW3tItjjgHDGF4bqgnDxYKThkVDgK4bCl2v0E4LqgWj8YIThkVvXOo7h3k33P4b8qmKiCYblgVftKYrqgj/YP4e/gmHtBLPrlm3tMozq3mP8L7zHkHbrPo3woWv0Oorq3lf8L6flkWWiadW03DCiGpD3gGn7N5rXgHbvPpG/tm30K4/hpHfqPo7miX3cI5Poinb8KdjmhGb8N5Xp3nf0NIjhkWHqLw==
DefineDynamicAssembly
TripleDES
Rijndael
System.Security.Cryptography.
, System.Security.Cryptography.Algorithms
Could not load type {0}
Create
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
FileDescription
FileVersion
1.0.0.0
InternalName
Qmlmpwsbt.exe
LegalCopyright
LegalTrademarks
OriginalFilename
Qmlmpwsbt.exe
ProductName
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
No antivirus signatures available.
No IRMA results available.