Static | ZeroBOX

PE Compile Time

2021-08-16 09:37:32

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000fb550 0x000fb600 6.67065543575
.rsrc 0x000fe000 0x00000604 0x00000800 3.42870779739
.reloc 0x00100000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x000fe090 0x00000374 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000fe414 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
v4.0.30319
#Strings
get_ParamArray0
ThreadSafeObjectProvider`1
get_Label1
set_Label1
m_Form1
get_Form1
set_Form1
get_Button1
set_Button1
get_RadioButton1
set_RadioButton1
get_ProgressBar1
set_ProgressBar1
Cursor1
m_Form2
get_Form2
set_Form2
get_RadioButton2
set_RadioButton2
m_Form3
get_Form3
set_Form3
m_Form4
get_Form4
set_Form4
m_Form5
get_Form5
set_Form5
<Module>
B________________________B
get_IAF
set_IAF
S____________________________S
Dispose__Instance__
Create__Instance__
ProjectData
DialogsLib
mscorlib
Microsoft.VisualBasic
get_NullTextRead
Form2_Load
IAF_Load
add_Load
InstallerSplash_Load
get_IsDisposed
m_FormBeingCreated
Synchronized
set_IsSingleInstance
CreateInstance
get_GetInstance
defaultInstance
instance
GetHashCode
set_AutoScaleMode
AuthenticationMode
ShutdownMode
get_Message
IDisposable
Hashtable
RuntimeTypeHandle
GetTypeFromHandle
set_ShutdownStyle
set_FlatStyle
FontStyle
set_Name
CheckForSyncLockOnValueType
GetType
get_Culture
set_Culture
resourceCulture
WindowsFormsApplicationBase
ButtonBase
ApplicationSettingsBase
Dispose
Reverse
DebuggerBrowsableState
EditorBrowsableState
ThreadStaticAttribute
STAThreadAttribute
CompilerGeneratedAttribute
DesignerGeneratedAttribute
GuidAttribute
HelpKeywordAttribute
GeneratedCodeAttribute
DebuggerNonUserCodeAttribute
DebuggableAttribute
DebuggerBrowsableAttribute
EditorBrowsableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
StandardModuleAttribute
HideModuleNameAttribute
DebuggerStepThroughAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
DebuggerHiddenAttribute
AssemblyFileVersionAttribute
MyGroupCollectionAttribute
AssemblyDescriptionAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
get_ArrayAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
AccessedThroughPropertyAttribute
ToByte
get_AliceBlue
get_Value
set_Value
m_ThreadStaticValue
WithEventsValue
GetObjectValue
Remove
StateMachineAttribu.exe
set_Size
set_AutoSize
set_ClientSize
System.Threading
NewLateBinding
System.Runtime.Versioning
get_UseCompatibleTextRendering
GetResourceString
ToString
Substring
disposing
System.Drawing
m_InstallerSplash
get_InstallerSplash
set_InstallerSplash
get_Length
Button1_Click
ProgressBar1_Click
add_Click
remove_Click
System.ComponentModel
ContainerControl
ObjectFlowControl
get_FileSystem
set_MainForm
OnCreateMainForm
resourceMan
System.ComponentModel.Design
set_Icon
MessageBoxIcon
get_Application
MyApplication
set_Location
System.Configuration
System.Globalization
System.Reflection
ControlCollection
TargetInvocationException
InvalidOperationException
get_InnerException
ArgumentException
RadioButton
add_Shutdown
CultureInfo
Bitmap
set_TabStop
ProgressBar
Linear
InvokeMember
m_AppObjectProvider
m_UserObjectProvider
m_ComputerObjectProvider
m_MyWebServicesObjectProvider
m_MyFormsObjectProvider
sender
Binder
get_ResourceManager
ComponentResourceManager
addedHandler
ShutdownEventHandler
System.CodeDom.Compiler
Windows8NEWinstaller
IContainer
get_User
get_Computer
ServerComputer
MyComputer
set_ForeColor
set_BackColor
set_UseVisualStyleBackColor
SetProjectError
set_Cursor
get_WaitCursor
set_UseWaitCursor
Activator
.cctor
Monitor
System.Diagnostics
Microsoft.VisualBasic.Devices
get_WebServices
MyWebServices
Microsoft.VisualBasic.ApplicationServices
System.Runtime.InteropServices
Microsoft.VisualBasic.CompilerServices
System.Runtime.CompilerServices
Microsoft.VisualBasic.MyServices
System.Resources
Windows8NEWinstaller.My.Resources
Windows8NEWinstaller.Form1.resources
Windows8NEWinstaller.Form2.resources
Windows8NEWinstaller.IAF.resources
Windows8NEWinstaller.InstallerSplash.resources
Windows8NEWinstaller.Resources.resources
DebuggingModes
set_EnableVisualStyles
BindingFlags
get_Settings
AutoSaveSettings
MySettings
EventArgs
ReferenceEquals
get_Controls
System.Windows.Forms
get_Forms
MyForms
set_AutoScaleDimensions
System.Collections
MessageBoxButtons
RuntimeHelpers
SystemColors
Cursors
components
FileExists
addedHandlerLockObject
GetObject
MyProject
LateGet
get_ControlLightLight
GraphicsUnit
get_SaveMySettingsOnExit
set_SaveMySettingsOnExit
get_Default
SetCompatibleTextRenderingDefault
DialogResult
InitializeComponent
set_Font
Convert
SuspendLayout
ResumeLayout
PerformLayout
set_Text
StateMachineAttribu
set_TabIndex
MessageBox
set_ControlBox
Windows8NEWinstaller.My
ToCharArray
ContainsKey
get_Assembly
MySettingsProperty
get_Navy
FileSystemProxy
WrapNonExceptionThrows
Windows8NEWinstaller
Copyright
2018
$9daf70c2-1b94-4671-b135-7ca8946c919f
1.0.0.0
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
Button1
RadioButton1
RadioButton2
Label1
ProgressBar1
MyTemplate
11.0.0.0
3System.Resources.Tools.StronglyTypedResourceBuilder
16.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
16.7.0.0
System.Windows.Forms.Form
Create__Instance__
Dispose__Instance__
My.MyProject.Forms
4System.Web.Services.Protocols.SoapHttpClientProtocol
Create__Instance__
Dispose__Instance__
My.Computer
My.Application
My.User
My.Forms
My.WebServices
My.Settings
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aBj
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
h&-53,F
jddp[Z#'1~{vH
_`x):0
}~/%D(
OXRXTC
UrXRRVG
UrrXR$QQPLq
OrrrXR$"
JUUUOL! 
gb]@<<6
kX|cPv\I
wwwwgh
wwwwwv
uA?DOU[WH
MEu DP[
KF|@P\
\P@|FK
\PD uEKM
.;6++(&$
1<76++'&
JHW\UOD?Au
1=;;6++)%#
<;76++)%#
=<<7++))%
=<<77++'%
=<<76+))##
==<;7+++'##
=<;76+))##
=<<6++)'#
=<;76+))#
==<;66+)'#
=<<66++(%
~~zyy44410..""
iifdcbb__
wxxwww
xxwwwwxx
wtDDDLh
tDDDLDD
tDDDFLllx
gcccex
^^^a__c
^a`accc
xlc`^}
ZYJHKNr
evy{yxg
l\\\c}
ecfxyx
d]^^^^c
l]_ccgc_ca|
gadged^\
dgll}l]blh
dll}}}^
@FFFGGGOOE
%BPPPPPPPQO
!!&()D
!&&()Q
!&!#$*
|||uuu
}}}rrrgggIIIjjj
stuoop
uvwtvw
C|P>qN
A=9@9;
MHFKGF
NKKHHH
Bvxv{uxxp
777]ddd
EAAAr...
?mG;zqh'
.'Gw99
yTstTr
<j9>Xrrp
?m31yk[
:p>|lD
:dS"HQ RbL
&'efbtvp:
)jpyy9
CS:95e
C.Q_J,m
rYwO$Ev
3~h3\l
!2e.+{
B(LH(J
>FDrg_
boVrQt8;
IVaaX^
0b<g=]
\0D40*4
&~wq>@U
Fn+_k^$3$e
Cl81|b
t,]^^n
OiV-"&
/qxJtN)
EEYTt]
OedTkp
k@{I9J
M &n=|X
q^}9&@
zzHq|]
G@/z#1
`naaQ|
st,@V'
Q8=62& }]
Clnl`c}
ip$\n+&
~_UbfC)L
b4xI(I
6MpY0]/Y
""MfJ"
Au"8'{;;
$J7N@@
YC>Uc<H
ULNNbrr
2JO@z9<
5,//cuu
sss33333sss3
, @@P0
D0PAA `@N
>U[\\<
&&&0??
.=5333G
LNenRpp&
C9p*BxD
IDAT`(
cKK'"wC
Cv*@H?
3gNO-/
fffbt@)
a<&A5j:
&87!`
u#mT2l
X,b~~^---m
I211A)
333X^^n
GrYVi4u
"VWW133
X,^Y[[
>3~/*
|>oe3iV
$lNJUw
@-m"0[
Y]Fjr1L{5
?CAG7tg#@H
a2RJHB #&
}wV_r|?
~ccc8t
D7HMD$
fD!K(@H
o_zM)ez
tifsss^)
]Z\Z\Y___h
|ss3X[]mq.
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
hSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATx^\
5#[.&U
i lrpJ(
*fE#,S
yi?g<n$
w*[:7t
U_h%lwc
|[d[qC
~+ g<+
am2>K]
pj:Y0x
q/v*
I!^O/6
pzu&{e
D~;sBQt
$]oiET
Cs&.`i
b6k*pj
NBhi,
{o@e8{
C'J%Sq
bY,,/Y`
.e_sY-
o(R)wPy
)Fr@Pb
}E};\r
2N#aP<
;7~C+]
u.-aN7(
J!%Gmu
!9,P9f
<RB!UT
>CAs*4
G[sI p
)@Pzcms
[Mq-r0XFE
liFvP^
F>[eQf
4q]2_N;
2y"]+]
C:tF<a
ft-F%
K{/iKG
bK8#i
,rLby9
o!%W?2
m*PpR!A
*/b.56
oI:.,m
F_|cN*T_
~5!$fc
B]((OY
4$=BgK
YAUl_hg
j/(a6v
`[Kw3[
&e_W>Bc
G>8e{MQ
\8b-.x
!G& hS
r[:*Vd
aw8*%NC
q[)GJ+
GN.b,<hw
:*"L]3
drp?s
POI'No
m;`qaFr
\$:km'mLQ
5T{& 3
8JDZOk
;}gM0r
yLv}}K'
#v,k05_
NVLH7i
+c8!Cg
P&djSoV
5%6y}$
e9Up!h
q%Lb@2
`\=ZN>
fm7MIR,"N
46cx^s
xfP3*6
_di/ys
PZ5S[1
<_3n.J
+/Q>dk
}<z;z Y
=fbX6Z
U!s{FXL
C:.H_&
]kvk'a
Y`2c)/
7`&uOm
T,5v~9F
1d7"-P
n[hs_= *
baLY)
7}7%9H~
R.D_s'
Gg?Qsi
{__Rfh
z@W060
Iy^X,f
;MO|!t
\5N*7 X
DsGhW
\r~,"K
aA':?J
J%MK[IOW
xT{ZiE
.?4I1f
-6,4zuS
EFv/0d5Lpf:
*i3]cK[
@Qp-@i
sT.kVR[P
y39>sE3
k3;3Yvg~
P'7<19
|;3m^A,
`!]43(
A<9 $mDw
d9})&&Rm:
%RW? d
<v:#}k
T;7/0b
G$gJ8B
(v$u?h
7^:6;o
GRPKr<LhW
(w`W(QSL
;K[j^F
&1"(I3
<?msj:
Dgw'g|
`K=EY~
:iq<0H
."nB2]b
>/UnhR+
zd?w'{9D
n@Ku=Z%
Vv=pxm
mPTQsH}w
.uK#Tskh
m2THG&
g z\JGt
55CT-MG
^qU6aH
*7ucn"
vMUg=CP
4J.65'
'Lm%ym#
't__,O
JJ=iQ
~{Tw5"
35c!,_
>J=TU%p
yOZEXG
G~xlNacWU
>V(X.B
J$e9#}"b
'_dY$bJ
@bMXy yL
o:(KfM
]%v^9p0%8
q+4sXK
A\nHs7G
?=5xii
F|GF2o3uO
/rFB:b
dS(i;+
s!;EHw
<c)2FS
nM%;j,
68CLOr
9Y}piFk_
<-H%lN
D1D<gv
ZERW7(
`DWgMwwAn
=Iwl{
iIZ@VQ
2-\htv
-3*RL7I
T?X&Iac
f-mhPvW
/& lH
kkLK87
\"s7OPf
S7$PGy
F?yov
*'ml9`
F6P!A>
L}dFP$
Lf<TZEQ
1tNKZY
D6U[*(
EjPKi@
uRV#7f
d9_iE_$
EI8}\I_U)X
#j'M/a
Z9]~kb
2Yv5g<o
D?dK_a+
{{.~5M
eAr6#d
+42OC2K.
!MGf/.
;9^qv)
zW5nR
W\]4nvo
Jv.*^u(Q
@t?5`^
f:uu}'
)5{s#
1qN49hE
A/E9b1f
)\IV`L
R<x;I^
F`|sr5!
*'Mw{)=7
z-GTK[a\
>yE?~b
kkag]=<
tMaeOJ
I#8PUP
AE9@K0O
_c#ydN
/)rE&.%
ndWncY
KsGCM6
~?{I(
Gp|}!IEL
8c+I?T
IDAT.V
O{UVwtf
_TI6+k
Y"bW3-rI
w_~Db9
h"9Y^!
'YX6vA
S>k<F|8{
4@(y-tI
JZUQg!
MZtEwWzU
Kev"SM
ibO6Z&I
VBtQ8[
")VmnU
"']u65
w.Ft)Td
Z_3tvk
RBsH_>
=YWA3S:AL
++Hx}U
b]e7P$
'd_`bV
3NNJ!{
p0x=!y
>[B"$[
s<^{_2
.{>t"G
/Jf<):
)o\6Z}
#Lo31$
Us-|=mV
%nfn?K
-tb!RB
I`MHp"
47k[@9
';_YmU
QX^?z]
ut5uB&W0{T
oe)IWcz
@B%WmD
:Z*4Zu
zFBD7`)PfA4
;)PJJf
ew&c36
bTNvR^
c|*B,Q
uVowTC
0ti(2!l
qpZSZ@l
8#HIpx
:fLz?}^
o&>%F`
PEnQ*'
CyWW@NZl
QCr'Lm
;.OZz^_
8)PL&cN
E7.UE<%]
<9r#2X
$Mh1e9
LES33
J;>51n
0)[nXN
79^O?Ae
cpdkn"
S8(D:&U
ex$"[Z
vMM]Nr
76^d*=b
*VQc?
$Lv7O&j
j(5JZp
&^7i[B
\fXaa
z} gfavfhr
I23oAV
mEwNEq
^bu5,@
0gnRD6
\0fs1=&
2G)6]
aNDgd;
70Xvk\
f}$9z<uW
QfMtD|
oJrvF6
c\D&=
wDl& 'I
Hj+gTN
Vk;ZvA
cT_|Lw
7$[sd~
F\O'@*j%
o<=ui9
QL"%6M
9PuI{O
U}YC#,
a2:bLB
TE*P!i
+j'Rc/
\} %9CR
"%HQRA
yW3 *h
{ZE\$4F,
(q49MU
74vKjL
J%u5=j
5p=H"$
YZ"}Tk
3j/PbS
[Mfz$M
~<p0G1
O>2&]h
F3@NC%v
t7YWlC
J[@{?y
/JJo>/>
lwzx,vU
`W'c[dk
!n)4qz
U7BD7
(qDd@|
>1`o&2
&&2_Pr
;GP*)[
W&/,?7d
t/E07H
Q[jMG.
UH2r*&
YE}Vz.jh
5N@E]
2"\CtM1
.%N82c
'k$8~
S_3iE?
^Z6oz#
"Al9 !U
NMdx{5
[*>@H#
!AkqM6L
H44~5T
zMaf]7
9G`|kl\)?
%,eE.x
/XQS^6
G;K=#kJ>[6'
!qIr7
>C+=|h
7nXB$Z
cjCdEQ
<&B&BA}
b#P9Uy
Xw|$?l
@u9QB.
=2XovQs
F]k!u]5f
3g.mF{i$R
:MWs)`#@-
6P{A{]
7Be:@Q
)M^Jjo
'aov*]
~0N@Q0
mqt(]<rN
doJb!3
y6Tac!
myPeOB^
@Bz|SO
`IAJ!o
r 18T@,
L:Xv]J0$
Rnz7t+
!6MdwG
h7}e:9
t,1MsC
C,sntw
%Uv=Rs{
dgIp#yU$\
x!Drt1
kqMsr|
oC!s@
C#SR+ltQ
2\Is>
QS\2>F6
;w!$qG
Z N{a
l~W<fn
sp!JQ\{e
P z7.S
z&C&wSz
Gw9"/"
Md2hnl1K
F^"G,0_LL
v?Kwx{d
Um`Xk_
DdoiVY
@|%kX@D
C!,.J2CY
%n]ZB{Rx
(p,Yj[
j&@?ZU
8tGSB\OU
ymP5b%
Fr%Rt^
_&:2ik
R%C{gu
G;nZ"g
(qtyI:
pUMHLe
;n%>L
:=5P}O
AE<d,t
4$!Qcu
|$<aBG
|GK`<,~\o
S8Z"7!
A!T0Ae
uny,?1
=43##l
FYA-nc
*e5T!AS
wk}SO<8=
MBgS/M>3
Pqx^~J
r+D!*,
m NREw
Ezyq'b
f}w^UR
a5A3;C$
}CR}&k
)OG-z~W
k9Ii@[
*MELB2*
?IcJa
Fy/T$AC5~U
ygP!7I
[A/xmq
"I';*
\W%D]an
MkkV*S
k-VBlW/k
cR^oXF
1"<EJq
bYI+Tu
'{\f3
vYw!V#
frmE1#
RwCe*S
vh.Cq)
eU-j#^
#5!fj+
2%T*A#
%4sF0Ss
'0wl.bi
o*Hh:~
(k:G#?p
^:`:Q/
8iE0K>n!
J}i?D`
&ecOk'
DYMKOx
D$<C}S
tx]g+7`&
PX>JL&
e[+DxM
&`xR([
umR46uCe
l\L V(
t?+QYdX
/?t::Aoy
{%Bw={
"uqj.^v
&ymN^\!S4
0j=p%S
pw75&k
w1l&>_Ph
$&nUNH
_{U=8:
=o;qzGQO
;C<^1
_"cJeZ
5Avf5I
T8QmUT,5bO5
[&M`.SQ
/emZw"Sa
f6U*;Z
^k3 !M
1bYWkm
{X)zd0
W!P`9
`O{`AJc
2?p`X~nQm
er^>FuJ
Li|et|
!4Wa#F
THjmL8
o69}K%[Q]
g6o3[P
}VrYz/F
v]e7PWmU
UWfrmz
uXLV\c
yl.GJ}
-owzm>
^A2&r|(
a3Hjghq
|P82J
KSDHxj3+
!g,x}'
T-|&Ao
[*9OHo~
u=ue2[
t')GYg
=n"fF>{=}
xK\a:_j
}Kf&%o
N_=)
ip--RY
h0_ozw|Q
^Sic_2k
GaPL*StB
jhXrJq
**;I_K
JAeZN8
]$d1Z>
9zPDH
W%%_^{
U$)Wj1
j/P~iQ
!<PumU
{?6'Ol
0&X`("
0Gd."v
$$%]xb
_wrm{^
f=`^^U
B@ytNY
$.\nUl!j
#K2WYn
n!p&E&
]PQT0v
,q(ZR
Izf$#A
kq{2u7
A LdB*
n~dn;R
ubwq0rE
sDhr<5
jq,u][7
5Nu]SW
RqpVJ8
~-~Rkb
`s]*?UX
n&W;n(*
Im7zVw
9>vdXB
Ov)!vw
2@'"^"2
S"xm9k
.z.!B+
[Z,N!b
:q%X&dwv
\d!(9!
H_ zb?
RSM{:z
Us=d6)
g>pk*y.L
(-RlUj
u, 0@]
`RoQ[kBZ
Vua*#>
RCu9us[
wBu6Us
mf{eyx
R>?uj
xm[~"#[
;\+Y7*
fLZHTQ'
b)\gdkd*'hO
7}'>Zx
UFp,]`<
"Lh,Tf
@yDmwP/
UjT]p=
mvF){%
5Hr=.\
6+*Oe7
IU/E\1
3]0fuk
Ce66[R
/yC=-kr.
%\+PKQo
3&#]>V
+D7ueQ
8BL[o%f<
<YTm`e
;e6JWb
2HHo(u
: ':zr
3];5/0
]uMT?T
(m~4mV
~XIXbTK
it4uM&
X4pTl`
e6+s]J|
:\HG}
rsclx'.
5j @H5
!P3AU8
IE`.#\2
.gC\w"
&&bLBQM
(}7kR;
n<93jY
n.d<sC}#
JgIDf1
e<t\$+z
sBwO$s
:_(tu+t"
3bJIwFu=
m6!b"v
;c`"kRb
<,%=wP6iTQ=-
~# 'c
O`^S#3
x?:csD
^r,*Uu,t
28ecvVh
ap4\~)=
_c"vZ#
Ol|1?.
B#(@]^&b
1hTZ]=
a8{'GFM
IF]2If
l&@WR4
iR~P,P#!
Gl=E
OniOuqq
xf:kvV
9!T63i
O!2.@)
> HwKV
m@+?b(
rZxBmXk
akO|k1
."1Fh*
6jlZ"?
wmE>OO
{}.Bvr
NOp<Q*
Sg&y^Y
a`F+%W
.qUPf%
0&Gw-36I
poqOZnW%
-[$c|t
km.D_'"
?Ep0Yz
fh^;pc
|%STYQP
=d'iT<
>R}vqq/
'V`$Cl
C/]WbB&:l
TJ@Bj<
=+]\.?5
>ob_[M\
:)>@Lx
:Nb;I&U
W|WVozB
7G$6Jp
d4qd.S
5\d-DD
tH^B
JM$yy#`#0
>y?+}Nf
$LbV9"2
G^A2Cf
TaJ%HS
21<yu
B&U55t
=?\(=_=
>-NF]Kh
gux>W/
Nt$K{.
\2[dF<
)buRk~
[P9iT-
pP`Qwx
^s,?*g
YCe7@6
,/PWA{PN
06'N/H
2]B1*@
!@*`.S
;||CPf
d ]BXI
?)2 RY
a7y1O^w
5fDmecuED
L31+^2
#zB "kK
r6by<NX
<e]{'(
gwTO*V
L7'_7#
O-Y:>|j:
-|>~TN
*vg55_X
E{'`)n
}'z31%T;b
KU4!c}6
Q!u4kLm
~NT$^;
Bg#,Xk-
SN]K*
6^K"2^
y!K_rv
\j0)f
lWfLg|
Zq8mEI
IK.nSx
}_[Jx{
&7U^ak Af
3Ei4G4
Ik*e -w~
N6L {|
TUWR?
+K~A V
"Qv ^
R)rO*[
p:5GA:
,L?nRM
y%#w@$
'KbsU,
O_k@mw
oZ;A7{N
=]0~PHQ
[fe9]r
a30a21
-9%__a
jUkw.Dz
B]K4`2
6@Dwgg8g
QmLkW*C
C=2^GH
3\ #0K
<39+TH
WT7A{e]O{
n2^;sn+
C-U*)i
9HDG'@]
zB[->m
"\L]/1
RAR7aUe
`l`BT*
WyuK{j
q#5~z3
j~@!E
x}l\6=xPvM
fe]C7 0
Xccgf<_
1s.FK:
gQOvMe
/?1?:>
k{ReQF
to^c>~g
k3`)Pc
C<yvh`KXa
=4E$aS
nalP'!/??
;({{Yp
X(W\VhV
@2?2]lP
/A*vJq
0|1 'T
?o,7qr;
#z"g,r
7=T#It
-%&u>
SIK*m=
GUzfoN
6P@C"0
!k&{Igj
_HpWQc
XWC=5 ;I
Vx5@fV
x\ %i
(B6S<f
bp<MWB
p-N+y]RO
=es]b1u
b;4~`f<
E79h%b
A-Y&aD[
H@NZHI
XwXHk)
6AL8DqW)r:
jte*%(z
GPO3z"
#MTZ
;\9T2C
TEuG+A
2c{Mz8
5%indj
%.zt^p
e{~8dW
i2bdbI
FdL[wf
CIpE1"
7z<\^.
c.:D3b G
&bKNo$
.9BP!n
X5Y$r"
=;I%)]
qdi7L$
pzloBCqv
<n/bK"
.3]g7Wa6
tR[H=q4
Q/|@0
PBWb><b1T
5'yjmW
} ^[<}
EZ;Y!B
[*uB=
xT?p-`
pjyZ[-
bWuXQdn
t9D:%N
,[@?P)O
-0N@We
75<Dl+d
QbKlZ,#
><$_0{
_O#FFY
y/Dl1J
CMIntZ
YE=d*A^
XU};5v]
xdwTK>
gosw[r?
zHoLkm
)t:4Z0
6MG_r{
!G4=d3C
`m^<,U
t//\:I
'klKO}
?o/ZlV
;?iZ>3[
sMELAO
FFTaQC
AJE?R
]UN\!<
uGlIr{
-i<i^$
@$y3`)
mEgmnV*?
1)WDV{4
akt(IV|Y
vGCg:g
`{6F<b
!6Nv`j;
}7$dsp}
q~"?@NA
u7t;4r2D8
wN`2 -
GXUN:i6
S# *@H
T\1uLKE&
VpBkL+
pw!Nzi
4omvRs3 *uo
?%@y*i
-{bgS X
7Pz]LpE2n
a{M8 Y0bB)
(Ano]"
lj2j"gEr'
=5 -Z]
9K0I:/
e#"2lX?
++IDAT
c#9=F5
4v[Nts
}}'jM!q^
IBn$o(
Vne8Pc
c#d]#[
{q8O=G
O/CgpQ
|EuF1<
fks$^%
\yV=<j
j=qO-h
/q\mjla
C2gQ0T
Vt\MWy
r>,JjljqH
&>mly[!
7iq^m7
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
[3X_fmt
Windows8NEWinstaller.Resources
NullTextRead
4E756C6C5465787452656164
654256714338767462
Microsoft Sans Serif
Button1
00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000E302000000C000100800
Start Installing windows!
$this.Icon
Windows 8 installer restoration project by windowsio and MrGoldDoge (now known as Everyone)
System.Reflection.Assembly
GetTypes
Windows8NEWinstaller
RadioButton1
delete bcd entry (not format but close
RadioButton2
dual-boot
Segoe UI Semibold
Label1
Windows 8
ProgressBar1
InstallerSplash
Installer Splash
C:\win8\setup.exe
Windows 8 (setup) has been detected in C:\win8 IF THIS IS NOT CORRECT PRESS NO. PRESSING YES may HARM YOUR PC
Success! (or not ;()
Windows 8 NOT FOUND in C:\win8.
Login Error
WinForms_RecursiveFormCreate
WinForms_SeeInnerException
Property can only be set to Nothing
$this.Icon
NullTextRead
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
FileDescription
Windows8NEWinstaller
FileVersion
1.0.0.0
InternalName
StateMachineAttribu.exe
LegalCopyright
Copyright
2018
LegalTrademarks
OriginalFilename
StateMachineAttribu.exe
ProductName
Windows8NEWinstaller
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic malicious (high confidence)
DrWeb Trojan.PackedNET.1000
MicroWorld-eScan Trojan.GenericKDZ.77109
FireEye Generic.mg.815a3dbde4d501e9
CAT-QuickHeal Clean
Qihoo-360 HEUR/QVM03.0.503B.Malware.Gen
ALYac Clean
Cylance Clean
VIPRE Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Clean
BitDefender Trojan.GenericKDZ.77109
K7GW Clean
Cybereason malicious.95445a
Arcabit Clean
BitDefenderTheta Clean
Cyren W32/MSIL_Kryptik.FFL.gen!Eldorado
Symantec Scr.Malcode!gdn30
ESET-NOD32 a variant of MSIL/Kryptik.ACLK
Zoner Clean
TrendMicro-HouseCall Clean
Paloalto Clean
ClamAV Clean
Kaspersky Clean
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Tencent Clean
Ad-Aware Trojan.GenericKDZ.77109
TACHYON Clean
Emsisoft Trojan.GenericKDZ.77109 (B)
Comodo Clean
F-Secure Clean
Baidu Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Generic.fh
CMC Clean
Sophos ML/PE-A
Ikarus Trojan.Inject
Jiangmin Clean
Webroot Clean
Avira Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Microsoft Trojan:Win32/AgentTesla!ml
SUPERAntiSpyware Clean
ZoneAlarm Clean
GData Trojan.GenericKDZ.77109
Cynet Malicious (score: 100)
AhnLab-V3 Trojan/Win.PWSX-gen.C4593401
Acronis Clean
McAfee AgentTesla-FDCD!815A3DBDE4D5
MAX malware (ai score=87)
VBA32 Malware-Cryptor.MSIL.AgentTesla.Heur
Malwarebytes Spyware.TelegramBot
Panda Clean
APEX Malicious
Rising Clean
Yandex Clean
SentinelOne Static AI - Malicious PE
eGambit Clean
Fortinet MSIL/GenKryptik.FIXI!tr
AVG Win32:PWSX-gen [Trj]
Avast Win32:PWSX-gen [Trj]
CrowdStrike win/malicious_confidence_80% (D)
MaxSecure Trojan.Malware.300983.susgen
No IRMA results available.