Static | ZeroBOX

PE Compile Time

2054-10-01 18:39:06

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
\x06 5CN!9q 0x00002000 0x00003b68 0x00003c00 7.98607034798
.text 0x00006000 0x00007f70 0x00008000 6.03669647549
.rsrc 0x0000e000 0x00010ea0 0x00011000 5.4328222037
.reloc 0x00020000 0x0000000c 0x00000200 0.0980041756627
0x00022000 0x00000010 0x00000200 0.122275881259

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0000e15c 0x00010828 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40
RT_GROUP_ICON 0x0001e984 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0001e998 0x0000031c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x0001ecb4 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x422000 _CorExeMain

!This program cannot be run in DOS mode.
5CN!9qh;
`.rsrc
@.reloc
sY.}yA
y.ZKz6
CvGc#s#
m"Qf%n
$"j/M{,
$-uFP6
T[jvp%A
z\Dp?T6
jIpM<
oR&1h,La
;S~UG5
O'67sd
L,._-e
`K,)z@
m7Xl2vk
v<W}qk|
5v,^nw
pE6r-
~'8`<~
x_/o8X
4\y]C
/D}a:7,
^A^T4ox
TWc2Pb
`Gc?jT
[$%; _
r:Z >*
\+,a88
)C4Z @
HEWPZ 7
.,UE%&
y"Ba8x
&Z )~%
2x,/Z
Lwla8!
_CorExeMain
mscoree.dll
v4.0.30319
#Strings
#Strings
#Schema
cxzzxcv.exe
<Module>
dScxklZKcBxgtutIgQpfGNaCTnGiuBk/y28C`&K[:jsjQF~Yl\)A!
mscorlib
Assembly
System.Reflection
GqdBErCoaGIEjRnQhwldwUXeqdiEAxZGhEJ13N#&IIhYwU/Dj5MPa&
.cctor
ttDoaeSgdRzFkbIslNEzQYFimiVE3zL" 8[><Y_5#)?#[faz9OZP!
pNuReZMbmWgBmLgMmEWOtvpAMLDf?EI>N'#(D]m@(H_)dXES!B!l!
GMhhFVZtmLaBcOUOHoPoHOSsTbrFV}kU^'(Wj?M^"l)=i5hp1@Q\!
xrAqEsMPxQOWmkPEGUjdHoiSjUFL?Gl^E&z[xx5Eu@\I&_)s6m%`$
xDqdHIZultVeJtdIZHjvbMPhjCcFAe2Sanl75qRl"&nt$!_m`I\X_'
ResolveEventArgs
System
SQdTeAZvAosfHhYYLukxwYdnqtVCHiDX5z5?^KncBQ:gy$5~Q1|W
VirtualProtect
kernel32.dll
anFmqIjQxDfdofxNmeROZPnxIAgqsf4&D;_,h,AY*DK<f[-]ep^5$
egDxdiIroRpyoLrJoUQAMtqORVJH?vd,CtONdqoRD'/vp%h5t%X1"
ValueType
oekkOMjdhNUGimLDnFKcWDgBuuEgUW9/r"&KNzIE*pylC^,uv1hX
TJzUazSTHRRBjvhRAyIKwUbNhVzh~@}zq|L_nT1SF@hQb*0KR9Su
HMmmchweoQwRIDtUgKsyeUoByMgk%D9}W7/8hc0Rd>S\[#71){>"#
mpqAnvAnnTbIQLznxJwEFKTGjZlNQ7YUg^/C`B~;fgsi<4\%N4Q;$
tpGXhHqzwXSEyIPwwSRpaLhXuzjP?=jIZ>CsVv33h_K'8&_m4_WA2
FzNZrROEdhBKuJMMdjlFNtmthIvxJB@h+#lIk%*ti<;GN+>[Cn7*$
HLTiqPmNNUPBdDnNUBavfEuzaWUv8;ngh QZ|^;V~djFYS_{a#~9!
QhnbTTiQFBWHijdWsVwloKjygRnpRKCB!9u2VdU73~IiI4m;SHI9#
AIvheZjSnjBZiwQYzuyHdoFSkqtWD'KmV?YC ~,E94m?'^K^'3D7&
EGJOQbyRecbGwhQsXNlEuIqkRnqF^5ZJe,[Ga/{W7s@#@23UiF*j!
FZQMfmyEiGJpRXegcIoAxWSSrNwMFRvXG ]Q\4+%^/cG`'g'flgV!
Object
rPynKIUyBqvXNaBiqbTOjwovtAyhGyu"DfIBi&<5wY"]'OSA/,SH!
mxHdlyDJtnMuXAQRKkGCnIIXTooFBU 0u9Y2Q"S6+T#{+BF#B`[Oc-
tGhPmOnPjZedMkAoFcLfXDluXLzbC7$D3S'BVEOw-IJ,JZ><M^>P
Stream
System.IO
ABdphfJpVdAhFfhINljxyKQRWTfPAxvg(M#rBMI^!q2ds[&nDP^`u'
KBmXbMiWsrxdPXQQCuCzcgqvKtJh\UA2!L?GKO'<B!AHeu(y)M%
YNDDnzfELonCXHcqDJsqrmxDvTGjA>uvi/ErLg)tGwmB9wrWC^Bht!
mPEjWlRUdfwXElRsHmzWuxeKiZBQ,MX-eBRqS+V],,NA-LsA8z+F'
vLvSlFfNNHlxUpCPjBYFuFXRhxHdM%=^%/%r6?:]B:9F8SP4%CnV!
GbYLxbtJGlqPtWqeoZgswnUKUqQtfY%?wKang0eB8I5i*Q;2lsXh'
MKqXeYGnIuPKYWxLAuPwSIDDnwhT48}mh<jrEP|><4+L]?6Tz1?E%
BxFrMqaEFOxXqGHiVgmIdlxopnFh>lZ($s'&!_*bO$4Avc_}aU\/!
jnmgFrycmpErJbhkHzWouyMRuhWXMvS&Oe51;=v! UvnOrAzx !b$
pnwijzPFkJcpsbxxZazWXsMVqxuS$$7YTtiW Y"A%S}gvI9REqR
PenDmFJailJUGNYCLPMWhIXSHhkw^l5NX0Q3 ~H6h\TL'R1>8(fi"
eZLdBqWAzocIgMGJpVhjQlUctgXTIg-M9@buO<al#~3ioYPF$(d9"
fUqUhpyELcqqSTfBdqEPgRbspjrtA%E?&=]Du(|Vn@c>W!wUo4&5-
pMxXHpaOiAutMAXybWcRTfvoiWRJM:,PwAic%Mx)#1(zHmh$$M&J%
ZEaqzPPcacCoRhVXsAlnByZEjqsLBT9k]))6KyGzztp=UUd/`m}Y($
hGyEpfbfGaanuvdXOzzhHDRWPprvA{*Kc]PI+EIO+*^D;ES+!h!E7/
ctAzqqBGmECKZbdPOfAcnexKTDigug%,OB'"Nv~ge;x{oqB/VDs\!
yaDxoCizTtLUvccDmPqpIQgeJfYhGhVE|"Pf;:e]ozE'mZ71A2~M!
gKsVhBQpzDiLwKfvvMnfordNqtvm=ym?p*`KRnS>\]yiTkm}@UZU%
zuuTvcqaILgnwcmpTfIdIZamxkMfbKgC Y9g2!u]={5x2SCRyW(I-&
ssYwFkbBmrhiukxagAHTrwDDmRNy3|lGka4eCKUY[Sod-6k)6%:T"
uQRaFOBMIDaeHfHfJtCXACMECxywA9'FZ+/d6S<5ok^\@_2tj=@&#
biBtLMesgXmCjflusLyVjBrNbolg77@elMEK#G=A<M}4DAEWp/;m!
yiItshCMtKDPSlUzNPvZbDviFRVAk/w(5)l/|[~*P(@jG{<af2l/
ImxXhzklaHAoOuAWeHlKQTDxJHrGn;aVQ{2iDVH{JBoTddHVi'/&!
CAiloIxCzJEsSVgvVxrBsQtbQohkJS_[%? :RBZ|[?>Q#(oo=0M<"
hExDzKfSUdlurssKtcMdHpJsacAXA}j?g!M0nM/mn]Fw0*YMdS Y##
iwcuXWViDRRnyfAXJGfzjqpUYoQkA=iSP06!Ndk$*k`>=Pq*]fk~j$
VlKFhYKpCQwqgCTvchQzgoyWQTUxnlVS2j;pjq[Xv]5|eZswdh!$"
UAyTjYdmBzvUaGBZfDSiJTuMSmxlAjQK3h6?:32&1D6C(Hy8/0TUC7
oUPcggKvNIdcRAJzeRXBZwTMraZebo|P _Bs2rm$~VU%6!lurl8 N-
rkdoRZddeQsxVfxWpWjEMGSgcwaqa!C)+/9Or"1JUR[|v^8J3%kS)
NtunWRqERoDPCpbTqTokKEVPAJVbA|;Wq<q"!?`#R=DumM9tlB%-)#
JYiOZOAFjXfYDlxSVFHCvMPjGtDc'e[BN:r#SMti$Tj^Xy|'A4I\
LIJnkTWVUeovoCuuyRiVzPzqwjVx-bF?R'B!K"]_demy]6] C41!0
GGWCdVEvgTZeiMtGGKBuzyQzRHgcA2m4URDsM6("\*rL@i*1B*1R?)
QkQdPhjsPkeyZBsTBqDbEmTydswspN^ZU]2|&Q%Fh):raNnP}UOL!
BsvQFBuGPlxbCoHHzlrkEDZCEUHt!J zv3-hW{#!OH3Wug>\lLz^"
MNekowjXkzXWwbihgZNphIjlabOh#bWY7_t/Y#]?=Ac\;=J)gCfk!
OrhNPtBqJepWlLeyrIKKWMAaYLEYD)utG&:%EtQ'TI}X:J:rU0W-(
iMbMDhJegXGSIBqWYtUIezcJKXGL,YM0[4cYzPVhOdBPjYW=|>nm!
zjqYJpwoGlUFpAuXvRdNBEvyqwNSm6(DuL5nA-#o`lg1\x@C;uc-'
SJgmAwqyHOEWGfzKwkFXxbKzOYrFJG|&7yK2D\8/9_3Y2%,~,0Wo!
sFjkmpEPFrFQNmSfkTYccfuOOXnq3Bk}kvUhs'|MS&iD_8K1!Z\C$
tSMYBtEIxqNGqivVEEOTpkYUDMRn3A!4sK4A})kvaTp6fZ;%HhHr#
aCIBtEmNQyHMmjhTRluDmnQpoLTk,1-xbkf+K6(y#V63:V;6E]=>#
JcspiGmRxVPAlPSIBiqBXXKGBnvm`w&e-&/Ax~/o|Zp _L+6Bw$;(
rxnBIjWFQIfNBCquddhYpMfNrbhIsOE67#86N9-%]MsSnKkYZ$sM"
UfxJIGjDkpQopAivFjkJcwqenawf:[_bv[Z+e4slI{-Q>3:7Ig$*!
mYwLeucRirNZqpJnAnVXkpcogvpeuIK4"1BRm8;CHq'c6k-GSkA#!
sritLWOZWODKxdVoNLFStNwfDkMO}cU|j*BVz'5X_iP~:t7u?74-(
obJRcfMSzHEWkcuFEZMVDZrWgiQj q<\W'Qdz|q=7)4<!6>,'A5r$
KAgpXXKKnyfCYFuyvJeKvhvEbYlx#vm6XF[wMjNK%c *)@s{L2iu#
CGtNMhINAoWcOexOYlIYRteeCvsXP|ID}-Ml;y0but6Bt+FAkw/Y$
owDVdMdpMpxGdpoScBBDToxOaCVV3'6[#HeZqD&_9^]V)VlmD!3v'
zYskbIhjVOYUCJUKbVgaKrUEsfaOCW}{0ud'%0<N|![3(kVV0M!/%
XnLfoyUufEKpIblczWDOZWNNvyYS'o#,M)5qH_~a1Uah'@R8+O<^$
WLQRzwNQxAAWYNbVQlIPqkJksBPtNPO}q@S>TVJYN;C6x36#c!)
aLJGHlagcfpupZrYCoEzCaCalzpACNZS|$E"uNy-i!(36tAL0C_3
EjaaBeJvfDxMpNhXpAOUxCDyQJKzA-Savk>su+^iD=!gJavhfWZ^v$
LPahqnJFRSuzgzgiynvURibTpZGUB0 [&:bZ@?UcY"Y{Nwx/T:xN!
bBYxcXitlhxnWeJHnXFEwGwHpmXR -Z?p= M"",-;<;#E!/kRp,b+
tuNhXBskvDoxosrOdbPjINNjoZMh,'~Y23:srA7cHvm ?I#%QcN""
OEXglvzCYNRKCrVboFZpPyAamYYT8#FkQOI42Ld`IoY22yb^U|x##
IFvKpeproHtCQBFPzjanieVRPEBeA~AYs(&_}Z2f_l%GmW5g2<(!J+
TLpmEtNgGNIrRHRiqFLnILooKgZiA\eG#U!tH:5'|XAAdM$L=;Ukh"
rFZJQBQULIoyBwCVuEfXOwvrubaX1BXf|z_D4=XAWn [x(L=I{e5$
qQfGjhSiHsuTUZNIZuRIrtjKvROH_H5tg~7X&$:@Ujp[rOqQbI8+"
KrGowYYdigCfLgSjMiYpDMSJnFdcA<)J=L2RA3&6Z_]N`b Nz6tim#
RjXfaAFGFpRrxaYecduUzStQBUXFLUFqXTUx]Hku*{eQ4ABKFp|;!
uaoSwkZBVGtnWWKOckUpaEqLzMN;3'3!}+#1L9DDHe bS8II=h)
mQXpNhKbTCNBUOcltbHmdjotaffzAi(vf144:b)v{4,CZg'AmU&Yk$
tYKjStvosGzncFAoDYcBKwvLWxfI]fLC5A-/'/yp$Aj2)H>$TZ$&$
tVQXsijoeuqMhsJbuzEabftIErVL?cX+}C*q]7g9G s/s%1_pdR`!
ldllmggSmSjDhZUIUABGXFmweFEAA$\59cwH j#}hP0NtBW:Y}d[v$
AQXIIHzDAJtmcNDBgDggyBXQwiUv)et4H{@XH];4JPSK}Q5p0yBY
MvSKAvsZIUfgCDByiEKBEaHZKpyxA6ST!=%I:fI 6>gm&-~58ZVys-
aAoFzuEioOnZvEreHbiRQZKftUxYA1$A3 ]/GZh7$;}?M5'HVIf@&*
YpQiVqMVKmoICxIgqZDZxYYauuvy'0LVK'-lu-4Jqws`O0,d](G*1
rcmDKvPFrqpUkmQhtAgAimtuawwAAibE0o|ki=d&i3a*{%?7=;]g~!
YeLgxxGlqSYIOHgJBCYuKKFJKdSi'PXU3%;*6tbLq\nhI8L0v~lF!
leBxydUaTnsXurNVmmRsYPkQZyML5r+ac;#:Qh9UeT/`Is',)aeT'
ALSrqPpTyDPbojUmgeYeTxjKAvLph@<uP5c()y!eskyFA&rk`Qz6#
System.Windows.Forms
KVNEffbAvWIUIHSuJcdbAWuIcEhPA\<6O]PjU`Dd2|Yd=$TR,VzK5%
TIEhwiAJKYSFmKCmZfEEGpfWRYobbj')=&jcLlVYU`94)':"On~wM$
FyFRrVSWtchskerpbwZmbCcUnRCrbNVmD3p?Eks8/eW)bAoGtBX|'
EventArgs
OnLoad
sIeRwMeJLlhIZRWEdJevTFpvzSyF("/BD,9J7=\=x-aTCG>}e$)s#
YwwBFNVnwLnhmYLCRFoDduEnqFIEA<\*jj< $tI]O#%X3v8w#ob6|#
NgslaRjGYRaiaBfeqivwVqfZqrBIAH_C5BUTb%*MC((o;, ;E`sQR%
oqNPCVoOGoUZCucDhoUeRXvKfLZQ9(8jb<YDGL"-aJc-[knO67V\*
uCQiSAxwlFGtaENvnPHZpjZmgUlU/!LF>$E/v(_2!MwxExuBKD`q#
NCawChZkdGolGHgojqodqNguhKqH+9 gGFOWlSfT51O$Agbe[?g@!
JdGYYntDcILzbJbMwfoJVVigBjMdAp/tH3EIAZ/?md~W9<[rQ9i0+%
esGkgtcoclnaCaNGDKEhiByGbNGfSx6(Eu{:$}:CR-B0S9Q;'3#h
zWSPICyUTScXtSnhmDTDwKwOiMjXKM\\l#MzD|yJzaQf@!ce@@-,'
JPJoomMJqecpXhtKYXCjdkyvKotWZ'Pa,1<7/yf+Q!zb*5;?7S67&
:r)eCL3EQ|+,4iTW\aa/:TC\!
HrsJsHXNKDaKQXcwFHrlLdFpHCXBA)^[n8`$4\Sp-%E!$oC|pm-Ib#
ResourceManager
System.Resources
vzjqmpyqylzpSFnHFuHoyqQDTSeP,P}w,);=?G1Rx2|2@c(Zv\d&)
CultureInfo
System.Globalization
dARUPhTVXJeqclqVpEULbQiIkqDj}-jL7<WD% ?%,@u`<,3_JKFX$
XMGEuNBawXloAAnCZxugeeuWiiBGbz2'mDQi,LGTJYNZ9yq&I|5/p$
mvjGkMYodkijFadBMJyHvGKvMwIb[,ZSaLM;aEm?gta>Y_%*':[N
GSSUYtmZXhUaRJNjioYYtXtvWOTG0#JlG?*Lm,^@+5/!CHs7a^it$
lghPhMPtsTRcEXkwoPknUjAICEfT,|E9n&0Qxar_LAm!<E26X<|k*
Settings
cxzzxcv.Properties
ApplicationSettingsBase
System.Configuration
FLLcXVGbAjlDSWOhHaYeEkYocWMeb:PJZv> Xuf4)X$!l&!CX_~_#%
JqfNEdddlzAVGcuHLsaoOMmRCprWA0(q4o(&qER^M"fJw^9hWdsQe'
Default
cxzzxcv
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
RuntimeCompatibilityAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
AssemblyTitleAttribute
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
STAThreadAttribute
GeneratedCodeAttribute
System.CodeDom.Compiler
DebuggerNonUserCodeAttribute
CompilerGeneratedAttribute
EditorBrowsableAttribute
System.ComponentModel
EditorBrowsableState
:r)eCL3EQ|\+\,4iTW\\aa/:TC\\!.resources
GTfXRSUsOOdMRSHbItAkCOaySSnb
MethodInfo
Environment
GetTypeFromHandle
RuntimeTypeHandle
String
GetMethod
FailFast
Concat
MethodBase
Invoke
Equals
ParameterizedThreadStart
System.Threading
Thread
set_IsBackground
Debugger
IsLogging
get_CurrentThread
get_IsAlive
get_IsAttached
MemoryStream
ReadByte
get_Length
UInt32
AppDomain
get_CurrentDomain
ResolveEventHandler
add_AssemblyResolve
RuntimeHelpers
InitializeArray
RuntimeFieldHandle
get_FullName
get_Name
op_Equality
get_Module
Module
get_FullyQualifiedName
get_Chars
Marshal
GetHINSTANCE
IntPtr
op_Explicit
Buffer
BlockCopy
HttpWebResponse
System.Net
StreamReader
Encoding
System.Text
get_UTF8
Convert
FromBase64String
GetString
Replace
WebRequest
Create
HttpWebRequest
GetResponse
WebResponse
TextReader
ReadToEnd
GetResponseStream
get_CharacterSet
GetEncoding
IsNullOrWhiteSpace
op_Inequality
ExpandEnvironmentVariables
Combine
Random
ToString
Process
FileStream
FileMode
FileAccess
IDisposable
Dispose
Exception
GetType
GetCurrentProcess
Control
set_Visible
set_ShowInTaskbar
set_Opacity
Registry
Microsoft.Win32
GetValue
set_UserAgent
SetValue
WebClient
DownloadData
Application
EnableVisualStyles
SetCompatibleTextRenderingDefault
get_Assembly
SettingsBase
Synchronized
WrapNonExceptionThrows
cxzzxcv
Copyright cxzzxcv
$1fa35186-72de-42e1-91e2-a4e7bbcfb031
1.33.1.2
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
3System.Resources.Tools.StronglyTypedResourceBuilder
16.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
16.8.1.0
@HU+BJW)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX(CJW-BJW-CKX(CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)BKX)@HU+@HU
@HUxAIV
@HUx@HU
@HUyAIV
@HUy@HU
@HUyAIV
@HUyAIV
@HUyBJW
@HUy@IV
@HUyBJW
@HUy@IV
@HUyBJW
@HUy@IV
@HUyBJW
@HUy@IV
@HUyBJW
@HUy@IV
@HUyBJW
@HUy@IV
@HUyBJW
@HUy@IV
@HUyBJW
@HUy@IV
@HUyBJW
@HUy@IV
@HUyBJW
@HUy@IV
@HUyBJW
@HUy@IV
@HUyBJW
@HUy@IV
@HUyBJW
@HUy@IV
@HUyBJW
@HUy@IV
@HUyAIV
@HUy@IV
@HUwAIV
@HUw@HU
@HU BJW+BJW)BJW)BJW)BJW)BJW)BJW)BJW)BJW)BJW)BJW)BJW)BJW)BJW)BJW)BJW)BJW)BJW)BJW)BJW)BJW)BJW)BJW)BJW)BJW)BJW)BJW)BJW)BJW)BJW)BJW)BJW)BJW)BJW)BJW)BJW)BJW)BJW)BJW)BJW)BJW(BJW-BJW-BJW(BJW)BJW)BJW)BJW)BJW)BKW)BKW)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)CKX)BKX+@HU KVb
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
GetEnvironmentVariable
_ENABLE_PROFILING
?usSystem.DecodingernaSystem.Decodingme=
System.Decoding
%USRCARCAERPRCARCAROFRCARCAILE%
ApRCApDRCAata\RoaRCAming
FAASD.FAASDscFAASDr
aWindows.FormsHR0cHM6Ly9pcGxWindows.FormsvZ2dlci5vcmcvMURBaWindows.FormsXQ3
Windows.Forms
aHEncodeGetUTF8R0cHM6EncodeGetUTF8Ly9kZXBlbmRzdEncodeGetUTF8GFyLmJhciEncodeGetUTF88=
EncodeGetUTF8
aHREncodeGetUTF80cHM6Ly9pbmhpYmlEncodeGetUTF80aW9uY2xvdGhpbmcEncodeGetUTF8uYmFyLw=EncodeGetUTF8=
p9_System.Encoding5
System.Encoding
p9_System.Encoding4
NikeAdidaseVhLTm5Ba2ZKbNikeAdidasGk3TThNTjNaazIweHNikeAdidasBlZFQ4eTQyNNikeAdidasEg=
NikeAdidas
EncodeGetUTF8aHR0cEncodeGetUTF8HM6Ly9zb2Z0d2FyZSEncodeGetUTF81zZXJ2aWNlcy5iYXEncodeGetUTF8Iv
p9_System.Encoding1
p9_System.Encoding2
p9_System.Encoding3
aHSystem.WindowsR0cHM6Ly9pcGxSystem.WindowsvZ2dlci5vcmcvMWJzWSystem.WindowsnE3
System.Windows
p9_System.Encoding6
p9_System.Encoding7
SystemInitHKSystemInitEY_CURSystemInitRENT_SystemInitUSER\SofSystemInittware\BSystemInitrowserSystemInitDeat\BrowsSystemIniterOfSystemInitDea
SystemInit
CSystemInit:\ProSystemInitgram FilSystemInites (x8SystemInit6)\BrSystemInitowseSystemInitrDeat\BrSystemInitowserOSystemInitfDea\chrSystemInitom.eSystemInitxe
:r)eCL3EQ|\+\,4iTW\\aa/:TC\\!
BIKE_SHOP_ICON_192642(
VS_VERSION_INFO
StringFileInfo
000004B0
Comments
sdgsdsfdsdffsd
CompanyName
sdgsdsfdsdffsd
FileDescription
sdgsdsfdsdffsd
FileVersion
1.1.1.0
InternalName
LegalCopyright
LegalTrademarks
sdgsdsfdsdffsd
OriginalFilename
ProductName
ProductVersion
1.1.1.0
Assembly Version
1.1.1.0
VarFileInfo
Translation
Antivirus Signature
Bkav Clean
Lionic Trojan.MSIL.Stealer.l!c
Elastic malicious (high confidence)
Cynet Clean
FireEye Generic.mg.e54f5c8fcefa6b19
CAT-QuickHeal Clean
McAfee RDN/Generic.grp
Cylance Unsafe
VIPRE Clean
Sangfor Suspicious.Win32.Save.a
CrowdStrike win/malicious_confidence_100% (W)
BitDefender Trojan.GenericKD.46987100
K7GW Trojan-Downloader ( 0058275a1 )
K7AntiVirus Trojan-Downloader ( 0058275a1 )
Baidu Clean
Cyren Clean
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of MSIL/TrojanDownloader.Agent.IUB
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Kaspersky HEUR:Trojan-PSW.MSIL.Reline.gen
Alibaba TrojanPSW:MSIL/Reline.0ba3f175
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Trojan.GenericKD.46987100
Rising Clean
Ad-Aware Trojan.GenericKD.46987100
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
CMC Clean
Emsisoft Clean
SentinelOne Static AI - Malicious PE
GData Win32.Trojan.Ilgergop.PJ6CUN
Jiangmin Clean
Webroot W32.Trojan.Gen
Avira Clean
MAX malware (ai score=84)
Antiy-AVL Trojan/Generic.ASMalwS.240D73C
Kingsoft Win32.Heur.KVMH008.a.(kcloud)
Gridinsoft Trojan.Win32.Downloader.ns
Arcabit Trojan.Generic.D2CCF75C
SUPERAntiSpyware Clean
Microsoft Trojan:Win32/AgentTesla!ml
AhnLab-V3 Clean
Acronis Clean
BitDefenderTheta Gen:NN.ZemsilF.34142.hu0@aShN2dk
ALYac Clean
TACHYON Clean
VBA32 CIL.StupidPInvoker-1.Heur
Malwarebytes Malware.AI.3987535869
Panda Clean
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002H0DIH21
Tencent Clean
Yandex Clean
Ikarus Win32.Outbreak
MaxSecure Clean
Fortinet MSIL/Agent.IUB!tr.dldr
AVG FileRepMalware
Cybereason malicious.194c1d
Avast FileRepMalware
No IRMA results available.