Static | ZeroBOX

PE Compile Time

2021-07-11 18:59:33

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
)`\x17\x03Th\x19| 0x00002000 0x000143bc 0x00014400 7.99808064518
.text 0x00018000 0x000068c0 0x00006a00 6.08678225185
.rsrc 0x00020000 0x00010e78 0x00011000 3.99819702439
.reloc 0x00032000 0x0000000c 0x00000200 0.0980041756627
0x00034000 0x00000010 0x00000200 0.142635768149

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00020168 0x00010828 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40
RT_GROUP_ICON 0x00030990 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x000309a4 0x000002e8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x00030c8c 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x434000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
Q]s@;_<
P~MOZD
;ta1y(
<[rvD/
4FHmE`
e@EE+n
YR VZNo
y)J[o"Nt1
{kgn|K
Jhs@'u
|C#\t :
U.I({ULh6%
.Ubn9K#L
y]$S]`
LD~3qr
LT*=s"
M;,4=^
9AHbE`=
)}pqdf
j4p.8/
yqI7It
_CNtXj
L&1C+@b
^=%)Bt
sm.R@)~
t2Bu.X
jXv?[D5(}
FH6$s]
oC$.>o
F9TeYS
aTe]&
B_.xrRN
L` >&u<Gq
G)O+^8
C|Qogt
*M<XS!
W?(Sa@KhG
z]nTxv
lOM$W4!
FJG9NO(3
tQwB9g
9h1k_&
xj|I_o
R:oh3~1o=
s'x_4
nHQ\Uq
F]oqz!o
;$R->=
!Xm:5`n
EkE&&E
8S<#h3
*KC2 S
t.,b>W
WG7qTx
N'bpsC
=QD%Z
5fYb[O
kKo\J&$g
/\&OZ.
@9%-X~
zR^^cr
sS+"C:
Ax/_T_2
;8Ne.u
OfbfyB
Nfg+LTw)[
]*+d~]
`Y//42
vTQ9cH
oB[i$
Z'n<I'n-9
/5V,Q_
Sq#K="
,ux,fX
F?6AJ[
Fqx4dc
M/ax!;
Iv4r?
kpobWu
v""l"o
*s7k2K
'/#<Y#
amdNnhH
sZ#Sh`~
#S>8Y6
5f^[w)3
rYVes_P
v:\$~i
qheO'V
w0Q_2wx
`*>4g]
GfYx_F
j4"a&f
N`G#Lp
aHuq;;
0EqdOA
j$dtiJ
kM7^.&
NJ'im=d
%\&xC(
#oVxG]
Fjb8:L
dO]cNx
[fqm"bJ_
;76IJf_
>;qsu;
Njj13oz+
Zr<r$"T0
t.:5L+d
y5vqke
4qDkBE
q[.8'OD
k<kK.=R
93uqSo
J>Pi,>_h
&zT@^,
hPX\
e~<<&t
7@e{L:
N<14VCBVy
/A#u+;
|mZO2s
V>fUsE~_:
G"Y}n3;4
)qT"XC4
V5Wd-"
kMH&uoH^
LvJTu^B
*+eQP?
jL*L'f@
@#AN>ky
W~ks8v
:Q RZ[N
Zu/f|>,
n,Dg$a0
Vl"sx#{L
0-u7ZYy
$$N.xD
F>cFBa_c
Ez}{OW*
o[L9`p
x")s.y
<JB|}*j
6M#hf=
9D^|Gv
ru8V.N
,K,^1I
uh[N-?
<ej.A{
2VnZD\
sMfNgU6
`"nf)1
mp*m06
0&l!m
fWl,Yi
9=w".+F,wF
-[[GzL7
*LDZ 8
Cjca8C
ht/ Z E
_CorExeMain
mscoree.dll
v4.0.30319
#Strings
#Strings
#Schema
93-I.
GRx?jF
mscorlib
SuppressIldasmAttribute
System.Runtime.CompilerServices
<Module>
RhBrXUkqZumXXcUJoLGMuopkBAfK8SDA|EC|5W0"blEdj;o3uRS7"
RIpTCdUfjFIvRcEgPFbfOPnwtIkKp??b5NKO~#h&bKrt/Fy9MKs0!
UapmndpbqHqQxPaFibWwwzGbxHAF:SmS5?W|4O}2#JYSwSd{q"+X
Assembly
System.Reflection
nKQTSsNuMBGycIsEWaQClQBigZUf"WXX=)2bn<c%Obj(LLaliC^i!
Decrypt
GCHandle
System.Runtime.InteropServices
Resolve
ResolveEventArgs
System
Decompress
.cctor
wKdnUtioMvsOmzUHJCkWFYCeEkKl5WqyOu$-g]3!{r4DJY84I~$6$
GIPruzRGjcJwrtLSnboIteArNtsbbN[(o#|AZ0]A%#V=;9'u=+gy
jzMbFExYjZRYwtKeqUjIcDAKmqXDEzM]4uTPBRTi2"(nb9g6';>4!
RyRWzovnOfXcoOseRQNddEdWrScj%f:+e]P\]DAj*Wh-31qyj;Wx!
TLOBWvifxcaVyFWhsWcCzKfZlmLHA6V^8UPSoG0$a!Mg5Cf0;r$IB'
TVPRXpESjmYpBENCzQxfvfPlXjSL@c`BG#F&U@#"z),x=DkNW<$z$
inBoObrNZiXDOgSMkKlmUIWsFAcxw<t5eyHr9#Bi9|5^/^fV7X#c#
tMPELmgkYjUbNxnUWDFAHrwkVNsaAInVv]C~#7q@?_Z^L Fq,9-JC'
wCOXparlQMGzKtfnmpMhXjcqRawNU/zy?8c~P |^m"Qx\1Zk9a"7'
cFQwRJDmKhJkZgInfgBRKkSKMgqgAas@:\3l|CyJ\i $))BsVn$Y7+
VirtualProtect
kernel32.dll
oYyNQEFCuaTXHVRvahoJXTgUPLnM_29'`-h*eX$h~/9*V0z Bq!_(
DataType
ValueType
BitDecoder
Decode
BitTreeDecoder
Models
NumBitLevels
ReverseDecode
Decoder
Object
Stream
System.IO
ReleaseStream
Normalize
DecodeDirectBits
LzmaDecoder
m_IsMatchDecoders
m_IsRep0LongDecoders
m_IsRepDecoders
m_IsRepG0Decoders
m_IsRepG1Decoders
m_IsRepG2Decoders
m_LenDecoder
m_LiteralDecoder
m_OutWindow
m_PosDecoders
m_PosSlotDecoder
m_RangeDecoder
m_RepLenDecoder
_solid
m_DictionarySize
m_DictionarySizeCheck
m_PosAlignDecoder
m_PosStateMask
SetDictionarySize
SetLiteralProperties
SetPosBitsProperties
SetDecoderProperties
GetLenToPosState
LenDecoder
m_LowCoder
m_MidCoder
m_Choice
m_Choice2
m_HighCoder
m_NumPosStates
Create
LiteralDecoder
m_Coders
m_NumPosBits
m_NumPrevBits
m_PosMask
GetState
DecodeNormal
DecodeWithMatchByte
Decoder2
m_Decoders
OutWindow
_buffer
_stream
_streamPos
_windowSize
CopyBlock
PutByte
GetByte
UpdateChar
UpdateMatch
UpdateRep
UpdateShortRep
IsCharState
ArGbtGACPEliJjwauxiIarTEBqpOAv[xkPBn~@?v8kIOuVmazH*M!"
ptnXCYojpnImGgBGgeizEVfFbUFqA_Aw`<8/7u&:>Cn5&(OfA4]+B4
mtABATrhetXfJvRdZDqzYgQaFzukAKL)`;i(iR\7c$4bw?jJq[/`"
APXESbcBzkcouhSdHpePZkfhmqJzBqfZ;M*9*ksTDezM3pcO;w)B#
RorPPtfTZyvCQbGUgeiAxUYcVayF6>iByiTh7upwShis@kALEx]*!
dAyXktBrasCulcRkkSCBtrhhjWKEJ,_=t2K;/1!R&QLRRki/25"
yJtTShPxYXFfrvdCZfPawBKrWxxHa1K<a)tfjZg3Sn>?*eY^/8O{
JarBlitZKUhCHENglFcbhtAmefSeb\C A&]!HZj0]nqu_{]U'o&e0%
tQwNbvsNLEUVNXCPzYLhInHLsIYH9#;Zs,QVRp+#c4;2s#bhtAN;!
LWXFeHnHaUgEvAUQMSpdbLmDRjCkA@ypWR7=;#Di`4F8Eq>fgV/5N$
MsTWxbeZJQXOMoJXlkwktNgwNCKDxEf/EKtVcd)/DY\Y_STGo#Z=
FpeDWZvRnquPpsVxGfrOuobzFphCAvp5H-]vk*@[$e,n(X`}=WIQZ!
hHvkhqKSOsXvDDkjQSYeZVPiGenHm6];}n5\9'f8{[-n"!'n$-&U"
KcrKEXucZsATyfIwbHAOtTBoYEeIP8w~Dcz8[<y(0k )\}2'UzOL!
bqrlBkPeRiyLVYdWFaBPAdGRutmmA5jAb]xQ~]'F2R)-~lY_~ZIN1$
WIPAmzHdKrdVqnRUjPGTMjNdjlPHb|RV=wGE>A+11|f1dHtA'W&AH/
NQbSzIOJPwsSqBUAzsHTigOONCkK-#;Pj2Gh/uoPIPm94&uLD4ua!
hskcCyKcVDlPJHGFjBmQfVEftEFAAOWG0{P!#P0>@>L?E1bFxoFO^'
oDjdzxWTneliGBzrHpiSvpkjotsOYGOM9<>qk;l'%_'91RM=w$e9(
qlfSOswakRtSgCzwYDPAzqsVMtpW=]y>7%&[~^3_~K+%pbyMvcI/&
kFIZDZtvSUanDcTkdlWKLlDYWyVjIQ\JBu^:2?2#(m(Cv_jF:%7|$
cIrSuhtLKlFOWWrlURacQfUyUwQs7Z3Yq)=#9V90d?^7IOR)$y&:5
CYVtSwgFMBhsBAjADAtWUGUUaNxkA~m%iQa7889|?r~F]LBXjv',w$
LpsgFESHFSpEfCHoAeKpctiFKqVhAl/;`:0L8RDENXgV`c&u >=/<$
FknCwgbFRrrtfLZmzHEtaZyaksghA#q G$C~P5Qu<N9W!;_Na5KFa&
GeYGeMcOBfSxpTvaLAigOvltIdXib2(`wR_2J&?&CyiD[Jm$CyR1-0
fVHGCZKZigbgvfVFRkVyDIgdGHmBAq6ZZ%XH9E=}:1#^:@[03,FB1&
iXWZosDnjFIzQwZUzhNlgnkBWCis9cZw99v_F_b/78oFbCykx'@M&
KGyOMxGLVrKCTgUZbjhbBquehRyedwbPY>^Xe|R"`!5C]@[;y*/2!
qvJIbxKeLuLFZKkQhtWcqkxvBRfY=S-W*pJnaF%-~#?V$}=M5\EI%
AnnbFqqItXVAvVNXQBhIhRlqgSLCAnQC0( yghZ{\MzRMXy+QyPZZ!
UqXQoXygdCPDtjhCjxyOgtnPHCokJ*v4d?5,j013ON}]R*PIF'Ia!
kBTJKyVYCQCXCXGmyhmNzzYIdIxbGFf2o>B98RtL)ai(?u1`PO88
DkffyNbACfgPzQtvFRkoTjHqYNYv@kuQD_wR ~g6K,!_wdtjCpB7!
tfyIbyEMrahJaCmvlUEApkZqDITy_AK"}|DU1n]Y>,&\)z;'?tJ2%
frJnFPSdySwaTAYrHiONyqhlEaaDAGkF6))F"d"dM`e6`:%1U_=Cq*
IkAXkCRZZQTVgZzKDsLInzimibQvV7^O%?6PvH ;V'>z8d5I;S,8'
ABIrdeWYvtPBrRCIKMPhHTMccfyJf723q%>WW`"+M%'\9#4r;,"q"
HvUgJJAPMlunzOCgmOJXXCidjXEfAB6@>#vQP1&qbzcK@dQ`u5XOJ$
AIkBWdbBcKeyNjOlHDffrDhyBfVHA'0CZs5~{vARCi/!iSGQ?qs<M!
kkREWVdZtDLWtSbvPpIOzXpCfOAgAu/>r4SH/f-1`QEjx2!YU8'jv*
XpmQecXNqbELyrXAXNCBrHySPsXtKx)kE8$Z9VUll)0v@T Kh*>
QqfgTNJlFTmnoSCbdGhMVyMgjNXsA`6c2`_*rvOeO)o}yJlo'/~!Z%
VxaqLAPQbowkEpXUejONLDxtYeUi:H=_T%D qKN,A^3s@mxS_F<L!
ZNoKBYBVsMbXdpCTLAVGdOrPWOKtA4KK#:$)]>b+ky)VXMd'un`nt+
xDdVCgmCsYrqGAmFOnDXcOICDrEAWTfJO3FWYeo<UN3/lVT~#Ks&
HMqDtdjGKnPIjcbsMhHkaQJjIVAiBps1eUNv~i+5D E^D*;n#Xv6!(
QddtZZSuZReBeEmcTAUjdNatbfgBJm/S>T$-R(|roKRp\A%`e_a<
NTueaOcaoXkEBvNNCuABEztximHw~`?oj Q?n)n6]80X~<>OeqOJ%
tOUfCKEfUeWdjRSfnZUaNBVysyAz&5x~vQS`=KaVT[s2WqRzU}50#
exOipjHhPWTcsUAgYyDyrQCppoAFo2d,a27C4>5-SKZ$ Q:Tc_X0!
zryLtFkbiIbPIZxqEafVdbnHXicY :*`4GxS:dB6h/l?dy)u'UW2!
RHHNBemNpCGqAaeKDEDPEExHwHlrBx}28ewVY4[j_&`b6#x<5m'cW$
mAqtBAbhLgrNDVFbVjEwGOrOjdOkAYQeh|+3D(X BF9b:Vw>e#Dm'6
IixIfVsGmxVcuCvHLnYEIUdyVFdGVIxRF*VuJx"2sQ-q>~l)kP;Y
ktkdFsChrABIbWGhtVdcAgVFskccA({O%{DMu@ZW$2gY98q&<LQUQ&
hcjaQxYokPkGavrkDGkvAUOsrdQKe0Y,]~Y(|AOI8mdhk?0\7g9l#
yNjhnZKnwlSihDnJQbMibyQJPOsWG-3*T rcQ{mNv!j@Szy4%)g4"
CJbqqQxcEDIfUwRYtuVIpFNgSpCnLrQKn;a+f_J&Cx,09DeN*'(~(
ibAxYXvOiJVgbVWYhQklQXPJHcDnon)8L?gGHs%(t~,Q7ylx87m<&
zAJiesWkbKiSrHYQGbjSfybmVBpdA$~XW=4@q>ZS]fRxa!E;[o^Y>"
jpdrTDVWjHbxsvHtTBfdnNxMeyhtmD{-T,v Xu&t]5F7"}_WLSy^"
GUpGGIUXdOgOjuipOJPrGbTIKQTrd~Y2xp8o'7a}U=|TM6>Zp:(t"
JigNuqMYYctKqChfzPyfkTpjAVfk>~/(E`Vhs+IS67ocMTk"g2, #
BqwLmMAlfsBaBlHimDGYBrnJpgpWA6j }\VS33U-Fi[9XB&{"BCP{$
KDrmcHjFpIXItAhMNtNUUgckvBPrX\KI>!7EJ#3GvF'ZLv6eO\Il"
BhTaEZeongLMtKZsaaULfTXKcjmKJ-+N4S:qE~c*:COvJLa^!U&c#
HdEjEcRVVEbDQfvdXvbRHUZZyZFc8pOSv%!bUkVkI%rSht0hlkN0
GQYgxuNEfEKXzElYUlwdxyXDTOUd~"6gwBDStnCPDL` S(*$JRr]"
GCPANjohfkcOmDgKAyNmLgzmkvYXAV(XjUc<oE'i=U!t< [oSWGYT#
bMHdfjpLxTChrIOGRcdRfgQfJzGSB;QLY_}>5r3MVf#z5#RONdG(-&
XLdebSASjRohkjGmyVKYDaLJCWfOb'sK,xJDq%35&p]Q$6v}~Db854
pQplKAwNSQnvfITAYcqqPjwhGqsV&k=@pIM|:&C=#n@"Wn2oUc4*%
EXXIRukYlmBRbSFInEQOefcdUeoSAnUJxygD?&D=HJvobNU9KqiO7#
FpfAJTaKSsOcupTIbkKHeEcdOLaDAlYAX6B)b]?Odv!_v*F>/gflG%
IecpnavVQAKnhyeayEwgAbrpiRoj|2uWwm>+z+}Yo?y%,%i71gq(!
uUkfrOLqIdxzkjSyYqZchNtpyQpm=w gR2:|YIacMw4` }SE/("G"
yEZZeLjCpIJrgDQuOUTDKBlHKawjU;TN<m%3#6,(R3RxftH N2u$"
WHlpvaeaVXRRtiRPSeEGxBCLfKNBTY'qO_kb<bfKN^-S#79@<3<~
hskhMGYgHWEtyTdMScTffpFccaLFb{{/*JV]'Jk*!HJvhEVM2G&`z#
DrPpzxTopZakcpzxyLbUDkrYMCMv-)fIw3B"4q1_kqac/2LQdJNZ,
DEVHwhGfGHUPmhCjhRdBDNnNJUwh^tJP,FNq4NWY[]Q2LnPcR4gr
SRNdHJOoTmjrnOdcRlsdknPHEBeEA2WXJP%10]sYhj['iO1E%JT"s#
xvGBSNepRPahQBrlGJkVXimeLipIBm`NZ|KgdbgL\UqT(Q!}ut*3s(
JEbhDuOfrTITbklRmCbrJXSsmleAv^5B`8O]hRj}5+/!3xR|Xu(2
XiarKdRfEoeLNHvRWamSqsZzYtNlAD=u%U2rTql#*OR^5G<9`S{9n%
DsAprEuTREDQGxeBTdcTfRqGyktwA8*H925;fVH0|shbS#El,!/!O$
WMDjrQXiUFchkuNaEeCYYWXMDLuB'@9s?|3!)Y,C-BvK^TlPX)~l
qOutGghYiBVahCbxZaryJAJNtKriw},GeU@JN|"ZEl-c @&'#{3y
TgathbxCfQuzgDeXcFnqbNEQODkqApWEss*,Q'A:qBfk']I6-6s#;+
BETGrOkzzaGSQbhXiiSWIMZyNJTnA\(Vqbegm/66awZmnL0-p_4n\"
QDJFeWiRJnBEwmJdGHmWPOIybkZsAp'8=4^bfY>q}RcDM|>Bt& Ex"
hdIIRkAMESVTeOJhlVgIdAVbAIhmAqDnxCXb@PRmMb3/$A#6F_/#Q)
XHbRzpiZPTDTZeiShnRprBDuRlIdr>wjSY!\x<D3!KU[e]'j1X:*!
AssemblyTrademarkAttribute
AssemblyCopyrightAttribute
AssemblyProductAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
AssemblyFileVersionAttribute
ComVisibleAttribute
AssemblyCompanyAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
RuntimeCompatibilityAttribute
CompilationRelaxationsAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
AssemblyTitleAttribute
STAThreadAttribute
UInt32
GCHandleType
Module
GetExecutingAssembly
get_ManifestModule
get_Target
LoadModule
ResolveSignature
AppDomain
get_CurrentDomain
ResolveEventHandler
add_AssemblyResolve
GetTypes
ResolveMethod
MethodBase
GetParameters
ParameterInfo
Invoke
Encoding
System.Text
get_UTF8
get_Name
AssemblyName
get_FullName
String
ToUpperInvariant
GetBytes
GetEntryAssembly
GetManifestResourceStream
Buffer
BlockCopy
get_Length
Convert
ToBase64String
MemoryStream
ReadByte
RuntimeHelpers
InitializeArray
RuntimeFieldHandle
GetTypeFromHandle
RuntimeTypeHandle
GetElementType
CreateInstance
GetString
Intern
op_Equality
get_Module
get_FullyQualifiedName
get_Chars
Marshal
GetHINSTANCE
IntPtr
op_Explicit
gsdfsfsd
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
1.0.1.02
asdfasdasf
WrapNonExceptionThrows
fdsfds
2:T;2:T|2:T
2:T`2:T
ALm4ALmwALm
ALmf>Hh!IY~
2:TC2:T
2:T"1:T
ALmHALm
2:Tz2:T
ALm?ALm
5=X<5<W
2:Tl2:T
ALm7ALm
5=Y+4=X
2:T(2:T
ALm/ALm
2:Tu2:T
ALm'ALm
4=WI3<V
2:Tk3;S
ALm"ALm
2:T32:T
2:Ta2;U
2:TI2:T
2:TW1;R
2:TH2:T
2:TN85X
2:T/2:T
2:TE*=P
ALmuALm
2:T=-1J
ALmkALm
2:T5BMn]ALm
5=X>4<W
$)=#';
%*?X#&:
&*?X$(<
&+@!$)=
4<Vp9D`
&+@-$)=
3<V}7?[
&*@4$)=
&*@<$)=
%*?E$(=
6>[!1:T
%*?O%)>
5>Y(3:S
*/Fq3;V
5=X24;V
ALm|CNp
2:TO6=V
ALmsALm
2:TC.2Q
ALmhALm
2:T;0:W
ALm^ALm
2:T33:T
ALmTALm
2:T+3;U
ALmKALm
2:T$2:U
ALmBALm
ALm9ALm
ALm2ALm
ALm*ALm
2:Ty2:T
ALm ALm
'+@?$)=
%)=y',E
ALmdALm
5>Y#19T
&*?H$(=
&,A1%*?
ALmqALm
6>Y*08S
%*?Q$(=
&+@1%*>
ALm<ALm
5=X108S
%*?Z$(=
5=X9%.B
%*>d$(<
%)>l$(<
ALm+ALm
4=XA &1
%)>m$(<
ALmbALm
%)>w$(<
4<WSHSr
&+@8&*@
6B]`Pm
&+@<&*?
ALmoALm
'+A#&+@
ALm;BMn
*,Ch18R
07OA18Q
3>YB.2I
2;UA2;U
2;UA2;U
2;UA2;U
2;UA2;U
2;UA2;U
2;UB3<V
:LkK.3M
AMnyBMn
>JjU>Hg
3;Vv2;U
3;UQ19S
5>Y.5=X
5>Y(5=X
4=WI3<V
5=Y-5>Z
4<WQ4<Wt4<Wv4<Wu4<Wu4<Wv4<W`4=X)i
5=Y*3<V|3;V
5=Y3'+E
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
DIRECTOR_CHAIR_ICON_190872
VS_VERSION_INFO
StringFileInfo
000004B0
Comments
dfgfdgfdgfdfd
CompanyName
fdsdfssdf
FileDescription
dfgdfgdfgfd
FileVersion
1.0.1.1
InternalName
LegalCopyright
LegalTrademarks
OriginalFilename
ProductName
ProductVersion
1.0.1.1
Assembly Version
1.0.1.1
VarFileInfo
Translation
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Variant.Cerbu.107196
FireEye Generic.mg.ab709667f7fda587
CAT-QuickHeal Clean
ALYac Gen:Variant.Cerbu.107196
Cylance Unsafe
VIPRE Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Clean
BitDefender Gen:Variant.Cerbu.107196
K7GW Clean
Cybereason malicious.636bdc
Arcabit Clean
BitDefenderTheta Gen:NN.ZemsilF.34790.lu0@aKo!t5d
Cyren Clean
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of MSIL/GenKryptik.EWGN
Baidu Clean
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
Alibaba Trojan:MSIL/GenKryptik.5a8ba9f3
NANO-Antivirus Clean
ViRobot Clean
Tencent Clean
Ad-Aware Gen:Variant.Cerbu.107196
Sophos Mal/Generic-S
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Generic.ch
CMC Clean
Emsisoft Gen:Variant.Cerbu.107196 (B)
SentinelOne Static AI - Malicious PE
Jiangmin Clean
Webroot Clean
Avira Clean
MAX malware (ai score=87)
Antiy-AVL Trojan/Generic.ASMalwS.203F2E3
Kingsoft Clean
Gridinsoft Trojan.Heur!.03013281
Microsoft Trojan:Win32/Wacatac.B!ml
SUPERAntiSpyware Clean
ZoneAlarm Clean
GData Gen:Variant.Cerbu.107196
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis Clean
McAfee Artemis!AB709667F7FD
TACHYON Clean
VBA32 CIL.StupidPInvoker-1.Heur
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Clean
Yandex Clean
Ikarus Trojan-Spy.MSIL.Agent
MaxSecure Trojan.Malware.300983.susgen
Fortinet Clean
AVG FileRepMalware
Avast FileRepMalware
CrowdStrike win/malicious_confidence_90% (W)
Qihoo-360 Win32/Trojan.Generic.HgIASYMA
No IRMA results available.