Static | ZeroBOX

PE Compile Time

2068-01-20 19:38:57

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0002aad4 0x0002ac00 6.34379532654
.rsrc 0x0002e000 0x0005b662 0x0005b800 4.46410566319
.reloc 0x0008a000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00088ca0 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00088ca0 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00088ca0 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00088ca0 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00088ca0 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00088ca0 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00088ca0 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x00089108 0x00000068 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x00089170 0x00000306 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x00089478 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
PQAeS~
~4[C)v
gg}V++
jL&&Zl66A~??
Sb11?*
tX,,.4
RRMv;;a
MMUf33
PPDx<<
cB!!0
~~Gz==
fD""~T**
Vd22Nt::
xxoJ%%r\..$8
tt!>
ppB|>>
aa_j55
UUxP((z
&jL&6Zl6?A~?
~=Gz=d
"fD"*~T*
2Vd2:Nt:
x%oJ%.r\.
t!>K
a5_j5W
$/G^gd4X
p]jxr!n
_)^7z7=
*:8aj%hx
'M|&I\
kkA[k5AgB
AQLG9
YF"WcP
!'&85y
8Q[~,r
,k]l-?
mWLlQT8nP
%|:jW
Ud]ur?
}jI|1&t
/.!|xZ
T'K\w
=&&jL66Zl??A~
g99KrJJ
==Gzdd
""fD**~T
22Vd::Nt
$$lH\\
77Ynmm
%%oJ..r\
!>KK
55_jWW
IAS|]\
L&&jl66Z~??A
Oh44\Q
sb11S*
uB!!c
D""fT**~;
;d22Vt::N
J%%o\..r8
AqDqtd!
:uSd&,;mk
[T:$6.
[.:$6g
j_FbT~
h4,8$@_
2\tHlWB
DBRfhn M
,$=(1
Y_c
Y_c
_bj_!
Y_daT
Y_b`
,.oq
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3ajSystem.CodeDom.MemberAttributes, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089mSystem.Globalization.CultureInfo, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089fSystem.Drawing.Size, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
ISystem, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.CodeDom.MemberAttributes
value__
System.Globalization.CultureInfo
m_isReadOnly
compareInfo
textInfo
numInfo
dateTimeInfo
calendar
m_dataItem
cultureID
m_name
m_useUserOverride
System.Globalization.CompareInfo
System.Globalization.TextInfo%System.Globalization.NumberFormatInfo'System.Globalization.DateTimeFormatInfo&System.Globalization.GregorianCalendar
System.Globalization.CompareInfo
m_name
win32LCID
culture
m_SortVersion
System.Globalization.SortVersion
System.Globalization.TextInfo
m_listSeparator
m_isReadOnly
m_cultureName
customCultureName
m_nDataItem
m_useUserOverride
m_win32LangID
%System.Globalization.NumberFormatInfo"
numberGroupSizes
currencyGroupSizes
percentGroupSizes
positiveSign
negativeSign
numberDecimalSeparator
numberGroupSeparator
currencyGroupSeparator
currencyDecimalSeparator
currencySymbol
ansiCurrencySymbol
nanSymbol
positiveInfinitySymbol
negativeInfinitySymbol
percentDecimalSeparator
percentGroupSeparator
percentSymbol
perMilleSymbol
nativeDigits
m_dataItem
numberDecimalDigits
currencyDecimalDigits
currencyPositivePattern
currencyNegativePattern
numberNegativePattern
percentPositivePattern
percentNegativePattern
percentDecimalDigits
digitSubstitution
isReadOnly
m_useUserOverride
m_isInvariant
validForParseAsNumber
validForParseAsCurrency
Infinity
-Infinity
'System.Globalization.DateTimeFormatInfo+
m_name
amDesignator
pmDesignator
dateSeparator
generalShortTimePattern
generalLongTimePattern
timeSeparator
monthDayPattern
dateTimeOffsetPattern
calendar
firstDayOfWeek
calendarWeekRule
fullDateTimePattern
abbreviatedDayNames
m_superShortDayNames
dayNames
abbreviatedMonthNames
monthNames
genitiveMonthNamesm_genitiveAbbreviatedMonthNames
leapYearMonthNames
longDatePattern
shortDatePattern
yearMonthPattern
longTimePattern
shortTimePattern
allYearMonthPatterns
allShortDatePatterns
allLongDatePatterns
allShortTimePatterns
allLongTimePatterns
m_eraNames
m_abbrevEraNames
m_abbrevEnglishEraNames
optionalCalendars
m_isReadOnly
formatFlags
CultureID
m_useUserOverride
bUseCalendarInfo
nDataItem
m_isDefaultCalendar
m_dateWords
&System.Globalization.GregorianCalendar
(System.Globalization.DateTimeFormatFlags
dddd, dd MMMM yyyy
MM/dd/yyyy
yyyy MMMM
HH:mm:ss
(System.Globalization.DateTimeFormatFlags
value__
&System.Globalization.GregorianCalendar
m_type
m_currentEraValue
twoDigitYearMax
Calendar+m_currentEraValue
Calendar+m_isReadOnly
Calendar+twoDigitYearMax
+System.Globalization.GregorianCalendarTypes
+System.Globalization.GregorianCalendarTypes
value__
yyyy-MM-dd
hh:mm tt
h:mm tt
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Size
height
v4.0.30319
#Strings
")#.#j#q#
((3(G(T(a(
*-*>*D*K*Q*Y*_*d*k*r*|*
-'-0-9-U-^-h-r-w-~-
.(...9.A.^.l.
020B0N0\0j0u0
142>2F2O2f2
3&3L3\3
!6!D!N!Y!e!r!{!
""&"L#T#
$#$+$m$}$
*&++,1,
struct2_10
struct4_10
smethod_10
callSite_10
byte_10
string_10
uint_10
list_10
get_Field10
set_Field10
Struct10
FieldRoot10
A0A1921388656C77D3E750EBD6C8435A34FDF020
struct2_20
struct4_20
callSite_20
Field20
FieldRoot20
struct2_30
struct2_40
struct2_50
struct2_60
E2C02D3FCD42A11EF79A650BE638F8660F435F70
struct2_70
F07CFA057E3309BA0631C1BE14F21F9F5C5B7780
struct2_80
struct2_90
D27D4E80CA8671E62A0B335F57B28EE888173FB0
struct10_0
<>c__DisplayClass12_0_0
<>c__DisplayClass16_0_0
<>c__DisplayClass0_0
struct0_0
struct11_0
get_GClass1_0
<>c__DisplayClass1_0
gclass1_0
struct1_0
fieldRoot1_0
<>c__DisplayClass12_0
<>c__DisplayClass2_0
struct2_0
struct14_0
fieldRoot14_0
struct4_0
struct15_0
struct5_0
<>c__DisplayClass16_0
struct16_0
struct6_0
struct17_0
struct7_0
fieldRoot7_0
fieldRoot18_0
<>c__DisplayClass8_0
struct8_0
struct9_0
<>o__0
hmac_0
func_0
proc_0
smethod_0
image_0
ienumerable_0
safeFileHandle_0
module_0
type_0
callSite_0
byte_0
string_0
ulong_0
match_0
bool_0
random_0
action_0
exception_0
iblockCipher_0
igcmMultiplier_0
handler_0
icontainer_0
keyParameter_0
javaScriptSerializer_0
intptr_0
callArgs_0
accountDetails_0
icipherParameters_0
idataObject_0
object_0
uint_0
ilist_0
dictionary_0
Delegate0
get_<>h__TransparentIdentifier0
GClass0
Struct0
B2584DE556E20675F12C3E7F2ABA74C51A636701
F1947BB7AEA2CC95AFA8C6448C1960AECBCD0C01
struct2_11
struct4_11
smethod_11
callSite_11
byte_11
string_11
uint_11
list_11
get_Field11
set_Field11
Struct11
FieldRoot11
struct2_21
callSite_21
Field21
FieldRoot21
struct2_31
<>o__31
FieldRoot31
struct2_41
struct2_51
struct2_61
struct2_71
struct2_81
struct2_91
HMACSHA1
AC1672D29BE8D8BA3FE4AEA33E6198FBA1809DD1
C0E9378140E4A1EC21B43695DE87A52CD89C3FD1
<>c__DisplayClass12_1
struct2_1
struct4_1
struct5_1
<>c__DisplayClass16_1
struct6_1
struct8_1
struct9_1
<>o__1
func_1
smethod_1
callSite_1
byte_1
string_1
ulong_1
bool_1
handler_1
object_1
uint_1
ilist_1
Func`1
Nullable`1
IEnumerable`1
IOrderedEnumerable`1
CallSite`1
ICollection`1
EqualityComparer`1
IEnumerator`1
IList`1
ChannelFactory`1
get_Field1
set_Field1
button1
get_<>h__TransparentIdentifier1
GClass1
Struct1
FieldRoot1
struct2_12
struct4_12
smethod_12
callSite_12
string_12
uint_12
list_12
get_Field12
set_Field12
Struct12
FieldRoot12
struct2_22
callSite_22
Field22
struct2_32
ConvertFromUtf32
Microsoft.Win32
ToUInt32
ReadInt32
ToInt32
FieldRoot32
struct2_42
struct2_52
struct2_62
struct2_72
struct2_82
struct2_92
BA7336D11DAB63838E8533632E5FDB09BA648EC2
C5E2CAAEA57309BB93A829ADB40408ED10E6A5D2
PBKDF2
struct2_2
struct4_2
struct5_2
struct9_2
func_2
smethod_2
callSite_2
byte_2
string_2
ulong_2
bool_2
handler_2
uint_2
ilist_2
<>f__AnonymousType0`2
<>f__AnonymousType1`2
<>f__AnonymousType2`2
Func`2
KeyValuePair`2
Dictionary`2
get_Field2
set_Field2
<>h__TransparentIdentifier2
Class2
Struct2
struct2_13
struct4_13
smethod_13
callSite_13
string_13
uint_13
list_13
get_Field13
set_Field13
Struct13
FieldRoot13
struct2_23
callSite_23
Field23
FieldRoot23
struct2_33
F99FBC3147BC28F31CDAA13E1E65A1C44173DF43
struct2_43
struct2_53
B60173D627667FF5701BEB37AC8FB506F428D263
struct2_63
struct2_73
struct2_83
struct2_93
EFAAE56E99875E15F0C09E8E3E5942EE4DF4DDE3
struct2_3
struct4_3
struct5_3
struct9_3
func_3
smethod_3
callSite_3
byte_3
string_3
bool_3
uint_3
ilist_3
Func`3
Action`3
get_Field3
set_Field3
Class3
Struct3
FieldRoot3
A11C38A4CCF7F9DB74C8C62873E8485621D4FC14
struct2_14
struct4_14
smethod_14
callSite_14
list_14
get_Field14
set_Field14
Struct14
FieldRoot14
struct2_24
callSite_24
Field24
FieldRoot24
struct2_34
struct2_44
struct2_54
struct2_64
ToInt64
E6832BDFC0E651B78E80182B276C2D02103EBD74
struct2_74
struct2_84
CC9B0BE7CC81E6E768BBAEA767671637C4186194
struct2_4
struct4_4
struct5_4
struct9_4
func_4
smethod_4
callSite_4
byte_4
string_4
bool_4
uint_4
list_4
Func`4
get_Field4
set_Field4
Class4
Struct4
FieldRoot4
struct2_15
struct4_15
smethod_15
callSite_15
list_15
get_Field15
set_Field15
Struct15
struct2_25
Field25
FieldRoot25
struct2_35
struct2_45
struct2_55
C2971D0AE646966BFAFA33210D1BE654AF3D6465
E03C37A4F59E4EA33D3CEAD7C1326613A25BA565
struct2_65
struct2_75
struct2_85
D5B7247C497788CF0031CEB06E3DF77A45FEF59F1E49633DC7159816D64759B5
A11E160DFC1397BA7730A32E02FD62F274AB9AD5
ACCB5F3FDE51B1A9F18FE2A278BD8801DA1FFFF5
struct2_5
struct4_5
struct5_5
func_5
smethod_5
callSite_5
byte_5
string_5
bool_5
uint_5
list_5
Func`5
get_Field5
set_Field5
Class5
Struct5
FieldRoot5
struct2_16
struct4_16
callSite_16
get_Field16
set_Field16
Struct16
ReadInt16
FieldRoot16
struct2_26
Field26
FieldRoot26
A6FEEDD5FBF645054FCF775CA50E17F3E6EF7736
struct2_36
FFD4A9D3EBC9579EAFBCD75EF230114680F7CE46
struct2_46
HMACSHA256
AesGcm256
struct2_56
C44BDDFBECAED1E8F560492E4DF3044F3801D766
struct2_66
struct2_76
struct2_86
C61B1941CF756EB7551F7C661743802362728B785ADC22E860D269713DFB01A6
E133F92A36565913F43C43D5DE9415B4992DE5A6
F035477938599056B1C472B9F229B4A8986757E6
struct2_6
struct4_6
func_6
smethod_6
callSite_6
byte_6
string_6
bool_6
uint_6
list_6
get_Field6
set_Field6
Struct6
struct2_17
struct4_17
<>o__17
callSite_17
get_Field17
set_Field17
Struct17
FieldRoot17
m8DC4C11B84C0327
struct2_27
FieldRoot27
struct2_37
struct2_47
struct2_57
struct2_67
struct2_77
struct2_87
D0983042D95200EF872CE222B9F6D795FBB04297
C8802131694421C098A337F55C529E616E885AA7
FBEC5F83C90889541C7D0805D870B6A96C9DEAA7
B68637EF60D499620B99E336C59E4865FFC4C5D7
struct2_7
struct4_7
func_7
smethod_7
callSite_7
byte_7
string_7
bool_7
uint_7
list_7
get_Field7
set_Field7
Struct7
FieldRoot7
C356AFF1A01C2B0DA472E584C8E3C8F875B9A24280435D42836A77B19F5A8C18
struct2_18
struct4_18
callSite_18
get_Field18
set_Field18
FieldRoot18
struct2_28
FieldRoot28
struct2_38
C67354802E45CAE21E8A1F57CE74D796E2FD6248
A5973E9500596D448CBD1E32982878633523F848
struct2_48
DAC3F508ADA82102AD9869CD048CD35B6825EF58
struct2_58
struct2_68
struct2_78
struct2_88
F6E134A014906F2507E90572158D53F4917B6998
A1839B3A899D54409AF70C4D212453C0F51266D8
get_UTF8
struct2_8
struct4_8
<>o__8
smethod_8
callSite_8
byte_8
string_8
bool_8
uint_8
list_8
get_Field8
set_Field8
Struct8
FieldRoot8
B2774D297B41112275DB54427652E13AF6CA4519
struct2_19
struct4_19
callSite_19
Field19
FieldRoot19
struct2_29
FieldRoot29
struct2_39
struct2_49
struct2_59
struct2_69
struct2_79
struct2_89
ECA738DA30CE696F0878B212788649C855B644A9
C339947D942CADA052AE115B609D06936EDCABA9
EEF2698B46126B32AF67C4B255CCEAF86BF7EAB9
D2C08D52CD4D64502709221AC4885A302BBA66C9
struct2_9
struct4_9
smethod_9
callSite_9
byte_9
string_9
uint_9
list_9
get_Field9
set_Field9
Struct9
FieldRoot9
<Module>
<PrivateImplementationDetails>
AD5071CDFF0971C8D1D2E96D9FA1929A42B5F62A
m8DC4C0EF06BFB3A
AFC30671B88A177B30A9B766E01C4C7E0AB0F66A
E14CAF7CA07BA82E38081EBA7118DE36C7D9D5AA
D9119AE5A2BED447A871599200E3FEE5E47CDDBA
F259ECDD8E94D02B4683FCEF1B0FBEB5CE1ED0EA
DC070AB3B89665EFC300DA8B15A371232D1744FA
F25ED98FF6ABE8B1F6363AFB35EBB6751100656B
CFE2B638DFA2FF3B01CA4B37C96D1CBFB622787B
BCA4D8125FBF8689ABCB012DFB857BF8596468AB
E436208D8F87982EF722238D01E4ABC43E3093BB
AF6A04C4065882344DEDD7EAEE3C09FF4884DCCB
BerkeleyDB
DATA_BLOB
E43F6BA634642FB90FEEE1A8F9905E957741960C
F49D3586B53A5336F99B198CE3B03A60629A485C
E1F5EE5E040344021F4DBDBE0101F397FE23585C
D7C3A551D0BDB83F88A5B9966FAC331CF46C7E5C
EF2894F34E8CBE76DB8193CA4F4B737908977A7C
D9C221237B647EC215A7BCDED447349810E6BF9C
B8DB0CB599EDD82A386D1A154FB3EB9235513DAD
GENERIC_READ
FILE_SHARE_READ
FILE_FLAG_OVERLAPPED
FILE_END
A3279DE853608939FB27BF8A7900668FE4B4001E
CEFF1F4F40E59138EFA05958AAA2AD990A77459E
EB0366AB5C372AF9FF9A1D47FE33951E7465A1AE
AA7820238BCEEC23154F71C00E50A233F669F9DE
AEA0566D2B17F368D9E5ACF7AEA531BE522A3ADE
INVALID_HANDLE
CRYPTPROTECT_LOCAL_MACHINE
FILE_ATTRIBUTE_OFFLINE
FILE_SHARE_NONE
FILE_SHARE_DELETE
GENERIC_WRITE
FILE_SHARE_WRITE
INVALID_HANDLE_VALUE
FILE_ATTRIBUTES_ARCHIVE
C0050E350917BAEECB8A64BE3F699EED3E78F00F
E903916027011F16B1E90BE039148BA6D9D0E55F
FC8BBE44A1E3FDF23D5754F93C5D333E9047FA6F
f8DC4C11B84BCEDF
FILE_FLAG_NO_BUFFERING
UNICODE_STRING
OPEN_EXISTING
TRUNCATE_EXSTING
STATUS_INFO_LENGTH_MISMATCH
FILE_FLAG_WRITE_THROUGH
MultiplyH
get_ASCII
FILE_ATTRIBUTE_NORMAL
FILE_FLAG_OPEN_NO_CALL
FILE_ATTRIBUTE_SYSTEM
FILE_FLAG_SEQUENTIAL_SCAN
FILE_ATTRIBUTE_HIDDEN
FILE_BEGIN
BCRYPT_INIT_AUTH_MODE_INFO_VERSION
get_JSON
FromJSON
ToJSON
FILE_FLAG_DELETE_ON
BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO
BCRYPT_OAEP_PADDING_INFO
BCRYPT_PSS_PADDING_INFO
System.IO
CRYPTPROTECT_LOCAL_USER
INVALID_SET_FILE_POINTER
ThrowExceptionForHR
FILE_FLAG_POSIX_SEMANTICS
DESKTOPVERTRES
DELEGATES
SYSTEM_INFORMATION_CLASS
OBJECT_INFORMATION_CLASS
FILE_FLAG_RANDOM_ACCESS
STATUS_SUCCESS
NT_STATUS
CREATE_ALWAYS
OPEN_ALWAYS
CRYPTPROTECT_PROMPTSTRUCT
BCRYPT_KEY_LENGTHS_STRUCT
FILE_CURRENT
FILE_FLAG_OPEN_REPARSE_POINT
get_IV
set_IV
ParametersWithIV
CREATE_NEW
STATUS_BUFFER_OVERFLOW
FILE_ATTRIBUTE_READONLY
FILE_ATTRIBUTE_TEMPORARY
value__
get_Data
set_Data
cbData
pbData
EncryptedData
cbAuthData
pbAuthData
cryptUnprotectData
GetData
PropertyData
get_data
SetQuota
mscorlib
DecryptBlob
GetMac
System.Collections.Generic
FindProc
RcHdrFd
get_Id
set_Id
get_SessionId
GetProcessById
cbThatWereRead
cbToRead
FileMapRead
set_MaxBytesPerRead
VirtualMemoryRead
CreateThread
Form1_Load
add_Load
GetDecoded
SHA1Managed
AesManaged
set_Enabled
pOverlapped
get_TimeGenerated
get_encrypted
pvReserved
System.Collections.Specialized
isValid
get_IsInvalid
<<>h__TransparentIdentifier0>i__Field
<<>h__TransparentIdentifier1>i__Field
<data>i__Field
<encrypted>i__Field
<file>i__Field
<match>i__Field
pszAlgField
TrimEnd
ReadToEnd
Append
set_IsBackground
ResolveMethod
fMoveMethod
method
Clipboard
masterPassword
password
NetworkInterface
Replace
IsNullOrWhiteSpace
Sequence
cbNonce
pbNonce
GetNonce
hObjectSource
source
GetHashCode
set_Mode
set_AutoScaleMode
fShareMode
dwShareMode
PaddingMode
CryptoStreamMode
X509CertificateValidationMode
set_CertificateValidationMode
set_TransferMode
CipherMode
SecurityMode
SelectSingleNode
XmlNode
xmlNode
get_Unicode
get_BigEndianUnicode
set_Message
ShowMessage
message
get_CurrentInputLanguage
AddRange
EndInvoke
BeginInvoke
ReadContextTable
ExpandEnvironmentVariable
IEnumerable
IDisposable
ToDouble
get_Handle
RuntimeFieldHandle
SafeHandle
SafeFileHandle
ModuleHandle
RuntimeTypeHandle
DuplicateHandle
GetTypeFromHandle
DangerousGetHandle
handle
Rectangle
hTemplateFile
WinApiFile
PathToFile
get_file
profile
FileScannerRule
ProcessModule
get_ManifestModule
DLLName
get_Name
set_Name
fieldName
lpDeviceName
tableName
get_FileName
set_FileName
ModuleFileName
lpFileName
GetTempFileName
sFileName
GetFileName
fileName
get_MachineName
get_ScopeName
get_EnglishName
get_FullName
ItemName
get_AlgorithmName
get_UserDomainName
FunctionName
get_UserName
ChromeGetName
ExportName
get_DisplayName
AreSame
filename
DateTime
get_CreationTime
Spulebane
ReadLine
AppendLine
get_NewLine
Combine
AesFastEngine
LocalMachine
OperationContextScope
get_Type
set_Type
ChangeType
FileType
ValueType
ResolveType
MessageCredentialType
set_ClientCredentialType
ExpressionType
GetType
get_PropertyType
Compare
System.Core
get_Culture
get_InvariantCulture
Capture
MethodBase
GetImageBase
ModuleBase
ReadOnlyCollectionBase
ButtonBase
WebResponse
GetResponse
Dispose
toParse
Reverse
get_ServiceCertificate
Create
CreateDelegate
MulticastDelegate
Terminate
get_ThreadState
SetApartmentState
set_WindowState
FormWindowState
Delete
CallSite
FileMapWrite
VirtualMemoryWrite
Remote
DynamicAttribute
STAThreadAttribute
CompilerGeneratedAttribute
UnverifiableCodeAttribute
DebuggableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
TargetFrameworkAttribute
SuppressIldasmAttribute
ExtensionAttribute
AssemblyFileVersionAttribute
AssemblyDescriptionAttribute
DataMemberAttribute
EnumMemberAttribute
UnmanagedFunctionPointerAttribute
FlagsAttribute
CompilationRelaxationsAttribute
DataContractAttribute
ServiceContractAttribute
OperationContractAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
DebuggerDisplayAttribute
ParamArrayAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
FileMapExecute
Compute
ReadByte
ToByte
ProcessByte
get_Value
GatherValue
get_HasValue
GetValue
SetValue
ReadContextValue
cbToMove
cbDistanceToMove
Remove
Spulebane.exe
get_Size
set_Size
cbSize
get_MacSize
macSize
set_MaxReceivedMessageSize
ChangeSize
lpFileSize
get_HashSize
set_BlockSize
GetBlockSize
set_MaxBufferPoolSize
MonitorSize
set_ClientSize
GetUpdateOutputSize
GetOutputSize
newSize
set_KeySize
Serialize
Deserialize
SuppressFinalize
Synchronize
Resize
SizeOf
get_ItemOf
IndexOf
outOff
keyOff
outBuf
get_Png
System.Threading
set_Padding
OrderByDescending
NetTcpBinding
GetEncoding
System.Drawing.Imaging
System.Runtime.Versioning
FromBase64String
DownloadString
SourceString
DestinationString
ToString
GetString
OctetString
hexString
Substring
fDisposing
disposing
System.Drawing
EventLog
scannerArg
Search
get_match
pDistanceToMoveHigh
dwFileOffsetHigh
ComputeHash
DLLPath
levelDbPath
dbPath
get_ExecutablePath
get_FilePath
set_FilePath
profilePath
GetFolderPath
lpTargetPath
rootPath
nWidth
get_Length
get_FileLength
set_FileLength
MaximumLength
dwMinLength
SystemInformationLength
ObjectInformationLength
set_MaxJsonLength
ReturnLength
set_MaxStringContentLength
get_RowLength
dwMaxLength
set_MaxArrayLength
EndsWith
StartsWith
set_MaxDepth
PtrToStringUni
StringToHGlobalUni
PtrToStringAnsi
AsyncCallback
callback
IsLoopback
PreCheck
TransformFinalBlock
ProcessBlock
CanLoadFromDisk
AllocHGlobal
FreeHGlobal
get_Local
Marshal
X509CertificateRecipientClientCredential
DoFinal
ConstantTimeAreEqual
cbLabel
pbLabel
m10del
m20del
m30del
m11del
m21del
m12del
m22del
m13del
m23del
m14del
m24del
m15del
m25del
m16del
m26del
m17del
m27del
m18del
m28del
m19del
m29del
System.ServiceModel
System.ComponentModel
CreateChannel
IContextChannel
maxLevel
System.Xml
ContainerControl
FieldRootReaderSql
get_BaseStream
GetResponseStream
CryptoStream
MemoryStream
Program
get_Item
set_Item
get_Is64BitOperatingSystem
SymmetricAlgorithm
KeyedHashAlgorithm
algorithm
Random
bottom
ICryptoTransform
RootNum
rowNum
pDataIn
op_LessThan
IsLittleEndian
TimeSpan
keyLen
CaptureScreen
get_PrimaryScreen
get_Token
set_Token
get_MetadataToken
get_IsOpen
get_FileVersion
dwInfoVersion
GetWindowsVersion
Application
get_Authentication
X509ServiceCertificateAuthentication
get_Location
set_Location
ObjectDataInformation
SystemRegistryQuotaInformation
SystemBasicInformation
ObjectBasicInformation
QueryLimitedInformation
SystemPerformanceInformation
SystemProcessorPerformanceInformation
SystemLookasideInformation
SystemHandleInformation
ObjectNameInformation
ObjectTypeInformation
System.Net.NetworkInformation
ObjectAllInformation
SystemInformation
SystemExceptionInformation
SystemProcessInformation
UnicastIPAddressInformation
GatewayIPAddressInformation
ObjectInformation
SetInformation
SystemInterruptInformation
SystemTimeOfDayInformation
QueryInformation
UnaryOperation
BinaryOperation
VirtualMemoryOperation
System.Globalization
System.Runtime.Serialization
System.Web.Script.Serialization
Action
op_Subtraction
System.Reflection
PropertyDataCollection
InputLanguageCollection
ProcessModuleCollection
NameValueCollection
MatchCollection
ControlCollection
UnicastIPAddressInformationCollection
GatewayIPAddressInformationCollection
GroupCollection
WebHeaderCollection
ManagementObjectCollection
EventLogEntryCollection
connection
fCreationDisposition
dwCreationDisposition
CallingConvention
SearchOption
searchOption
FileNotFoundException
DllNotFoundException
MissingMethodException
ArgumentOutOfRangeException
DataLengthException
ArgumentNullException
InvalidOperationException
CryptoException
ArgumentException
InvalidCipherTextException
exception
System.ServiceModel.Description
forEncryption
StringComparison
Button
Unknown
CompareTo
FieldInfo
MethodInfo
FileInfo
fileInfo
TimeZoneInfo
CultureInfo
FileSystemInfo
FileVersionInfo
GetVersionInfo
MemberInfo
CSharpArgumentInfo
DirectoryInfo
PropertyInfo
DeviceCap
dwNumberOfBytesToMap
Bitmap
FromHbitmap
MessageSecurityOverTcp
hwndApp
Microsoft.CSharp
System.Linq
<<>h__TransparentIdentifier0>j__TPar
<<>h__TransparentIdentifier1>j__TPar
<data>j__TPar
<encrypted>j__TPar
<file>j__TPar
<match>j__TPar
szDataDescr
Asn1Der
InvokeMember
GetMember
GetSerialNumber
MessageHeader
CreateHeader
AddressHeader
XmlReader
StreamReader
XmlTextReader
BinaryReader
SHA1CryptoServiceProvider
MD5CryptoServiceProvider
TripleDESCryptoServiceProvider
IFormatProvider
StringBuilder
SpecialFolder
sender
Microsoft.CSharp.RuntimeBinder
CallSiteBinder
aBuffer
buffer
Integer
ManagementObjectSearcher
IBlockCipher
IAeadBlockCipher
GcmBlockCipher
ObjectIdentifier
IGcmMultiplier
Tables8kGcmMultiplier
EventHandler
caller
IContainer
IPv4Helper
FileHelper
SystemInfoHelper
CryptoHelper
ToUpper
CurrentUser
CloseBrowser
KeyParameter
get_FilePointer
set_FilePointer
MoveFilePointer
GetDelegateForFunctionPointer
adapter
BitConverter
ToLower
JavaScriptSerializer
set_UseVisualStyleBackColor
GetHRForLastWin32Error
IEnumerator
ManagementObjectEnumerator
GetEnumerator
.cctor
connector
InvokeConstructor
DeviceMonitor
CreateDecryptor
IntPtr
set_ReaderQuotas
XmlDictionaryReaderQuotas
System.Diagnostics
GetFields
get_TotalSeconds
FromSeconds
get_Milliseconds
get_Bounds
GetGraphicCards
GetAllNetworkInterfaces
System.Runtime.InteropServices
System.Runtime.CompilerServices
Form1.resources
aR3nbf8dQp2feLmk31.lSfgApatkdxsVcGcrktoFd.resources
Spulebane.g.resources
DebuggingModes
get_ChildNodes
AvailableLanguages
get_InstalledInputLanguages
Matches
EnumerateDirectories
GetDirectories
get_Entries
GetIPProperties
get_Properties
IPInterfaceProperties
GetProperties
ExpandEnvironmentVariables
Microsoft.Win32.SafeHandles
EnumerateFiles
GetFiles
profiles
get_Modules
EnableVisualStyles
NumberStyles
GetSubKeyNames
expires
ListOfProcesses
get_UnicastAddresses
get_GatewayAddresses
StripQuotes
fFlagsAndAttributes
dwFlagsAndAttributes
lpSecurityAttributes
FromMinutes
encryptedBytes
WriteAllBytes
inBytes
HexToBytes
chiperBytes
ProcessBytes
GetBytes
outBytes
GetLogicalDrives
CSharpArgumentInfoFlags
CSharpBinderFlags
ProcessAccessFlags
CryptProtectFlags
dwPromptFlags
dwFlags
configs
Strings
get_Settings
OnGetSettings
settings
CallArgs
EventArgs
browserPaths
AddMonths
get_Ticks
System.Threading.Tasks
get_Credentials
ClientCredentials
Equals
System.ServiceModel.Channels
AccountDetails
get_Controls
ListOfPrograms
System.Windows.Forms
ParseDiscordTokens
domains
Contains
set_AutoScaleDimensions
System.Web.Extensions
System.Linq.Expressions
System.Text.RegularExpressions
iterations
System.Collections
StringSplitOptions
searchPatterns
patterns
get_Groups
get_Chars
get_Headers
get_OutgoingMessageHeaders
scanners
RuntimeHelpers
GetBrowsers
get_Parameters
AeadParameters
ICipherParameters
parameters
GetProcessors
SystemInformationClass
ObjectInformationClass
TestClass
fDesiredAccess
dwDesiredAccess
FileMapAllAccess
FileMapAccess
get_Success
success
CreateProcess
GetCurrentProcess
GetDefaultIPv4Address
IPAddress
get_Address
get_BaseAddress
lpBaseAddress
EndpointAddress
address
DataFormats
get_Objects
System.Net.Sockets
Supports
get_Exists
DomainExists
Extembus
get_OperationalStatus
get_TotalDays
Arrays
get_Keys
Concat
AppendFormat
ImageFormat
IDataObject
GetDataObject
ManagementBaseObject
hFileMappingObject
hObject
Asn1DerObject
ManagementObject
object
Select
Distinct
pPromptStruct
typemdt
System.Net
Target
nHeight
get_Lenght
set_Lenght
op_Explicit
IsDigit
set_RecursionLimit
WaitForExit
cbSalt
globalSalt
entrySalt
get_Default
SetCompatibleTextRenderingDefault
GetValueOrDefault
FirstOrDefault
get_Result
IAsyncResult
DialogResult
result
WebClient
System.Management
XmlElement
get_DocumentElement
dwIncrement
SqlStatement
Environment
XmlDocument
NetworkInterfaceComponent
InitializeComponent
get_Current
Content
IRemoteEndpoint
get_Count
set_MaxNameTableCharCount
FieldRootRoot
szPrompt
StringDecrypt
ThreadStart
TrimStart
Convert
nXDest
nYDest
WebRequest
XmlNodeList
ToList
pDataOut
set_Timeout
set_SendTimeout
set_CloseTimeout
set_ReceiveTimeout
set_OpenTimeout
SuspendLayout
ResumeLayout
output
StringExt
UserExt
MoveNext
System.Text
set_Text
GetAssociatedText
associatedText
ReadAllText
get_InnerText
chiperText
cbMacContext
pbMacContext
OperationContext
ciphertext
partIv
StartNew
dwFileOffsetLow
get_Now
GetConsoleWindow
CaptureWindow
ShowWindow
nCmdShow
ucchMax
set_TabIndex
nIndex
GetIndex
rowIndex
MessageBox
OrderBy
get_IsPartialBlockOkay
oldArray
InitializeArray
ToArray
FromBase64CharArray
ToCharArray
get_Key
set_Key
OpenSubKey
chromeKey
stringKey
masterKey
GetKey
RegistryKey
System.Security.Cryptography
get_Assembly
GetCallingAssembly
GetExecutingAssembly
assembly
get_AddressFamily
SelectMany
BlockCopy
FileMapCopy
pOptionalEntropy
entropy
CollectMemory
get_Factory
TaskFactory
ChannelFactory
get_Directory
baseDirectory
CreateDirectory
profilesDirectory
EventLogEntry
Registry
set_Opacity
op_Equality
op_Inequality
set_Priority
ThreadPriority
System.ServiceModel.Security
System.Security
get_Security
set_Security
NetTcpSecurity
CreateDnsIdentity
EndpointIdentity
IsNullOrEmpty
<Module>{FA9A31FA-B8C1-45D4-9D0D-619E6D023370}
<PrivateImplementationDetails>{62F727B7-2709-4873-A698-1B6E5B84050F}
cbWRVD
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
Rubaiyat App
WrapNonExceptionThrows
39.55.12
Group Corp. 2005
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4>
!\{ file = {file}, data = {data} }
<Anonymous Type>n
Q\{ <>h__TransparentIdentifier0 = {<>h__TransparentIdentifier0}, match = {match} }
<Anonymous Type>v
Y\{ <>h__TransparentIdentifier1 = {<>h__TransparentIdentifier1}, encrypted = {encrypted} }
<Anonymous Type>
FieldRoot8T
Namespace
exampleNs
Field1
Field2,
FieldRoot9T
Namespace
exampleNs
Field3
Field4
Field5
Field6
Field8
Field9-
FieldRootAcT
Namespace
exampleNs-
FieldRoot10T
Namespace
exampleNs
Field7-
FieldRoot11T
Namespace
exampleNs-
FieldRoot12T
Namespace
exampleNs-
FieldRoot14T
Namespace
exampleNs-
FieldRoot16T
Namespace
exampleNs-
FieldRoot17T
Namespace
exampleNs-
FieldRoot18T
Namespace
exampleNs
Field10
Field11
Field12
Field13
Field14
Field15,
FieldRoot1T
Namespace
exampleNs
Field16
Field18,
FieldRoot3T
Namespace
exampleNs,
FieldRoot4T
Namespace
exampleNs
exampleTUwSystem.ServiceModel.SessionMode, System.ServiceModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SessionMode
FieldRoot5T
Namespace
exampleNs,
FieldRoot7T
Namespace
exampleNs
Field17
_CorExeMain
mscoree.dll
3%%%@^^^g^^^g]]]hwww
NNN{OOOzOOOz
0^^^gfffvzzz
,&&&>]]]huuu
'(((;]]]hzzz
&CCCHppp
",,,6jjjr
'UUUUwww
-JPCBA
5,,,?:::X:::b888iCCC
:::m888j888i&&&S
#222J@@@oJJJ
***=BBBuppp
'???huuu
6E`ER[l
$FN&8V
<<<1///ZONN}ecd
:;;Jbbb
JJJRmml
&&&7BBBB>=>M>==V:89P///G
<<<4aaat
PPO$hhg
"dddW~}}
$$$(#!"/
==<7MVM_RZRn
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
\tdata
$this.SnapToGrid
$this.TrayLargeIcon
$this.Icon
$this.Locked
$this.DrawGrid
progressBar1.Modifiers
$this.Localizable
$this.Language
$this.GridSize
$this.TrayHeight
progressBar1.Locked
#"$"%"&"'"(")"+*10204376MLNLOLPLQLRLSLTLULVLWLXLYLZL[L\L]L^L_L`LaLbLcLdLeLfLgLhLiLnm
{{ file = {0}, data = {1} }}
{{ <>h__TransparentIdentifier0 = {0}, match = {1} }}
{{ <>h__TransparentIdentifier1 = {0}, encrypted = {1} }}
ToString
EnumerateDirectories
2a5583aca2535aad03d3989b4fac929b
localhost
Field3
GetFiles
ExpandEnvironmentVariable
Field2
Field1
FullName
Replace
Directory
IsNullOrWhiteSpace
Distinct
ParseDiscordTokens
isValid
AppendLine
LogsCloud
AddRange
45.66.231.158:8080
button1
System
Announcers
FV40ACQFNSomHjU6PAMFBjQ9Hh0MAA1dEDglFTwmcBcNOEFdBj0wAxQoBioWAw8RPBkTXSJfLyAuIUJO
JRQsKS8AISskJhhcIwEnBjIMSxgPODw+LzstPCcncVc=
{0}{1}{2}
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
Rubaiyat App
CompanyName
FileDescription
FileVersion
39.55.12
InternalName
Spulebane.exe
LegalCopyright
Group Corp. 2005
OriginalFilename
Spulebane.exe
ProductName
ProductVersion
39.55.12
Assembly Version
37.40.78.0
Antivirus Signature
Bkav W32.AIDetectMalware.CS
Lionic Clean
tehtris Generic.Malware
ClamAV Clean
CMC Clean
CAT-QuickHeal Trojan.MsilFC.S33577317
Skyhigh Clean
ALYac Gen:Variant.Jalapeno.15277
Cylance Unsafe
Zillya Trojan.RedLine.Win32.11940
Sangfor Clean
K7AntiVirus Clean
Alibaba Clean
K7GW Clean
Cybereason malicious.ce5e09
Baidu Clean
VirIT Trojan.Win32.MSIL_Heur.A
Paloalto Clean
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 a variant of MSIL/Spy.RedLine.A
APEX Malicious
Avast Win32:PWSX-gen [Trj]
Cynet Clean
Kaspersky HEUR:Trojan-Spy.MSIL.Stealer.gen
BitDefender Gen:Variant.Jalapeno.15277
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Gen:Variant.Jalapeno.15277
Tencent Malware.Win32.Gencirc.11c36045
TACHYON Trojan-Spy/W32.DN-InfoStealer.550912
Sophos Troj/Redline-F
F-Secure Trojan.TR/Spy.RedLine.avuvz
DrWeb Trojan.PWS.RedLine.181
VIPRE Gen:Variant.Jalapeno.15277
TrendMicro Clean
McAfeeD Clean
Trapmine suspicious.low.ml.score
FireEye Generic.mg.99c32c0ce5e09149
Emsisoft Gen:Variant.Jalapeno.15277 (B)
SentinelOne Static AI - Suspicious PE
GData Gen:Variant.Jalapeno.15277
Jiangmin TrojanSpy.MSIL.ddde
Webroot Clean
Varist W32/MSIL_Troj.DEJ.gen!Eldorado
Avira TR/Spy.RedLine.avuvz
Antiy-AVL Trojan[Spy]/MSIL.RedLine
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Trojan.Jalapeno.D3BAD
SUPERAntiSpyware Trojan.Agent/Gen-Redline
ZoneAlarm HEUR:Trojan-Spy.MSIL.Stealer.gen
Microsoft Trojan:MSIL/RedLine.KAO!MTB
Google Detected
AhnLab-V3 Trojan/Win.Malware-gen.C5624890
Acronis Clean
McAfee Clean
MAX malware (ai score=84)
VBA32 TScope.Trojan.MSIL
Malwarebytes Spyware.RedLineStealer
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall Clean
Rising Spyware.RedLine!8.197D6 (C64:YzY0OgyNzhFvYLK/yQ)
Yandex Clean
Ikarus Trojan-Spy.MSIL.Redline
MaxSecure Trojan.Malware.73709669.susgen
Fortinet Clean
BitDefenderTheta Clean
AVG Win32:PWSX-gen [Trj]
DeepInstinct MALICIOUS
CrowdStrike win/malicious_confidence_100% (D)
alibabacloud Clean
No IRMA results available.