Static | ZeroBOX

PE Compile Time

2070-04-21 22:27:41

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
Bh@)\x1aR{z 0x00002000 0x00004890 0x00004a00 7.98925768636
.text 0x00008000 0x000086e0 0x00008800 5.89850858164
.rsrc 0x00012000 0x00001740 0x00001800 5.8164038503
.reloc 0x00014000 0x0000000c 0x00000200 0.0980041756627
0x00016000 0x00000010 0x00000200 0.122275881259

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00012160 0x000010a8 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of @.DBF, block length 4096, next free block index 40, next free block 2525332869, next used block 4285822068
RT_GROUP_ICON 0x00013208 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0001321c 0x00000334 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x00013550 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x416000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
vE@[M\
02]T"N5
"tH>Z|
~*tm4
t|jStx
a%9TW.Ug
viwQ%_
DP%1cw|<
R;`.Ya
W!9h]?
PP2,f/
9QaeU2
E(KWPJ
@8_n6k
2mV{R2
aYZ0L^
Lg3uov
GvhoP>z
>waYJNP
hm/`b U
or{)=V
y)S%!61
^Ny>" 9
.eF"t.L
?XVf$:
>!k#)p
5qW~9)d
|,A1@Ow
nYw ?!
al]-d5
Jnf:ZL
Hb.;mgU
)+9jR2(
>*B`U*
}(,-HN
gZM@qT
>h+h/[
RYZ 3!w!a8
X6WQZ ^\
3/a82
_CorExeMain
mscoree.dll
v4.0.30319
#Strings
#Strings
#Schema
isdfujjdsf.exe
<Module>
CNWBSiiaWFHfQNVnoaVCdWNRcPIcb'Xn0;PiX4?n*|K}`!=v2zx"f"
yhbzJDsdEPQnRvhNYebkbkSLBcuGkAvGV9[+U)4,yjt19}i{bhG>
.cctor
qejrHkVjzbwQJRtJBeNFGyBCNAunk8(:99xY 8f4F!F^4fP6:8|w#
ftjyJQBCHsKXmybbBNwfYltSUGZH{g,]jRtiC6,ac5nZ(:3;#<)v
UPjvDGQsvJTvXRmBNiZbhjPBaWCl- klN='Ghg85nFB-8,u:`3kP)
GXbwwxlWHqpNoxJJKWZZTtfWbLCrb(eMUF5L9D1?/j+2Brjy\^Vb*
WOYuiQOHGOaqBfekRqoqCHRXLnyAb>a! !Ap#0[V!W/x?6]>:%'eW)
KjYFuhjSqjqKaZHPatupGHbZsTCCN"#Z$14nE ]*6f3$)]`xb1{n"
JSUyzbwUsqYmIGslebyLHKRSCCAil_@/*7V9(f! 8KMu+:#TX<bX+
zQdfnKkiDQqEWDpSARwcHAKQdCxZbG7U?~W/f8N9b=J`sTO>HKYX})
VirtualProtect
kernel32.dll
WuQGtEiboSJorYhraZbzAcJmwWigJiz@-,$&@x9h%"&<uFh|=*Oj!
SdKBPqDOHBNObAzicIJPVVdFxZNBblLVTMK<:tH6]Ac>n~F01z-~L*
mscorlib
ValueType
System
NyHkbTHGiHXnSGYjckdDnPZQDjPJvPZo`Rk')!hj_QW3</1-dh<S!
AIwbGymieWbRZkTyGTLXrcwWoydCApLU29CxS)v6dCgH@07ma#u9R!
HjHnBIYhtKFleKdOfevNELYNfHsuA8U%ah+d?<Aq(6No7 'fFF@Yc'
auqsKfCIHyvXsNIhFMJSJKBfjDKguiMyJj`$I$4v'V>rJ`fM*W)C
ROKOtYBaaUkMznjCmrRvpLuFzKNk8cnP!Z%sLmwQ#^UUMNaq<3t9"
tGedFKiMrqMAzJtiJAjvYuOanWEZAKmC00H#=GF?$Uav/YWW45(Dj*
nnFKtveALfwCYHpuKRXIbCRETAvHOadHyO#V]u!#*MnjD>?rHTAJ"
YDbtqQcLTTjiSuEwXyDoYiaSpCPr2UGQ%*yZHM&z(}x%<?RM)%ml"
UERHauGfiDNrDyccHPbboXQmvnTzlFvO?T(;xw5^CQxA#/JB?B(!)
HnsAqEdxccBKefocmTXbbTFuDbEC^?X6,_1S!#0/C%ah|K +G`<x
ivISAGoyiHiUbdvXxEnCOfvIFOdr3h!ft)GS6X81Mtw1:jHQ2_Bs3
Object
GIhbmQyGfacfUEJyXGCveIOyEujFD\]3tc;o]ubFiU>+5C^\EVg]
HeYfuTWDLYhNAvGkuZINbPclbpKDA8*+]jt!Jb!\^sEU!ZB7_]y`L"
FGuYzvEEjWuRzrSLIelrbLKRDfpU\31/SM6s#f!,e<'6 g}%\qS*,
Stream
System.IO
qtRawYWUqchjODSeIeESXoGSzkrw"<'=Nb5S5c8XT1D6~ajxh7)w"
CAhJrQbLOksbxGitlObzTorIbWVo@<33l;c~y3GKHcY;,"RG-$8P*
iFHAtllQYGmtdpPtOOVhFVfJgeJpw+HkKe:)`q"E 9%>y'vw`gV2#
nreuRZZUsftBDMeKGDnIfoJcjbnCA}z,3l)lm I`"##zM2FU~y(E"*
wYWlXZqeipWzoBEIBSLwInfPFSNt&tL%tGP{=?1c0rxJ1Sf]l:G|$
XPnJITzFtecIljBXBlTbXOcIPpwKADM?+V!W"?l#UL`8!:i'qR511(
wqRMVjAZFSAMWMzIhEnhBvjymLZJo8RfeTv)Ph>3z67Z$bf&WY=t"
UvpMQElZOSkoEDiwGiTbBRgEfhzZ@>Cx!}`<%[X:nEX^5DL=TaH7$
WRSpaBVJiVYJkylKySfHEENcabIBA)*l*'9NQ^~]o_2{A|3h\Q/*D#
iPEdmHSCOjdsXehqRhOKhmciNVXm5y#M2+T`O_bm*STxrYG[94ND"
dwSVBwSOCfKjOxFcxgSJjDxcvlLSA{&TD&B0RYIfA9yO4^RzAe5~2#
swVWFlRypLbZyKitTbTGdEkyxodv;'dfOIhGP0 ;|5pN0| U$w]j!
YVJznixGzYNgHhszeOakfjpEGZWk-kbmIq$'d8Rg/{I`MkaQdjTN!
UFeQrqFcvucDZriDOEBqjwBRgTyFBYa@E8OF/Yh(^FpHi3$'Ho99!
CjisHuDcKsXHXHEZWycdZMOmgni8M1#cKK+\01zP^acy"4bKla#
ivzxhpTnwusAzNcXiagDDwlHjVGaAeC[sU<%I?8k3vp]c)jhG^!zF$
xzahvMHXUqpJDOhehNOcFYnVulPRAi@cEZeDf/4"#(mQTH_<9v`3%-
zhHNmPAaJToObaHXzTzmpHwXLZVrS}2mp4F@J4OEe29K(ei_t>Rx"
LwQmEIkEXdStVslqEVqvGIOXGdOd+rEi6,vKW%<y MP-W^}zXZxR
rpiXQQPkmzIwDitOEXfLYJUMVOvX;=m2VAvmAS^<S)Rq+v~p:Rc_$
WCalanAMSnzqgOPMxHPqwspPvrLHprS;]<l2a*;J[-ARK#qw\(:N!
iuQTmOoyQrowYPBftpAgdMWNOQYT(g<mX65x ODNX,OtFc?Fjh8h%
TLshJcuWFxqjKyVkmcKsPTcmZMRIP;,}a&H~{&4Au(KY?#Y]Kx@G!
HOtMLjYXCnAAclSCRVJtiPqftRESbh$8O$'hix';GR+1'9SK#Yb!;
mfYsTgMYxbkNETdLKELySebAYDyNWVlH}$43=q`r'@|Du_Pmn0$U$
KopVZmGpfJmDpjkEtbqyXFZHmtdT:}gns-~,BT=J/'[iA}f<Ni-=%
ZeOLoBQJwSnqzPCArTWWjRXwwBfFlWl\VNE?0$Crb@kxNWg:mYa0!
tSRdyHTyegdbJsRjcnFCYMdwHNnH=X`7r',,o[dAyaM5+Rd;A-\,#
ohZVDoIbhWbMbKlvdNjLdXbSJbqhAYu|v{-bit~OQeoq$-)0Cp)OA,
ySmTEHwJfgcGDxYBhQEdpRasciGWie3~>0/wyh)j{0U!$\G}}9=8#
NOyIVsavioXJwObgVcQtUYGuONpv~6_^C;t/qxa*N_JNQP\tG@UO$
bxIxRtGxBeHbeyDwRxsYrjbTDmTW"(~~*I-`I? m7$0$/B;W+w7H/
ncrcYQfquaWrsrEuECcFQbEhoNIFAAhS<R?i_5g?V-,#1OV7^;@m'%
YnZVThCBaNCZBiTwgYpoWkxmdDPiP~|#,n}AL'jw MuLuvGmAYTk
MGcfGwgTRJhpWSVwWTMAqaLMjxAtA'+S\mS<!ZSvOZ?tpTvYtj*=P#
BBKHmWhHXpohNkdiFQTRsJznftSZ^~%]N,6\A$^DG"b@5#W?qIRn&
NsIQYqWrtaGBTcGpZHQrJSQNSVZz6HRbc+<?knP1wi4Zc7@22xWH&
KurhNifonKOazDNOSgdCxgjREadAA>5C+1 q,|,O}Lz']J_m(J?^s$
VQJatpTDcPHfRacrpiIunFRiuPZTAD9v[,%-srylOwoy%{`T%A:8Y"
IcSQDOXsCPxgJeDuXjJjfJWReXNhx:e#2f(#AMLQSVJ?;[nwB(n>
sSpMjYnUNsdPquvXDHmcWPEjDxdkAm{M)[[DqzOHy--&'(Rr?BVa%
hTJLybEaBbjTLJnCLNxWheaCbXPbb5nf1[JUr5v'e$~bstrQARn%d"
HKvUBwpCnNbcvHlOhLNEBIBEwcpHA@yi-7)i18Y3*e-Kr0<z'23hc$
uwBaKyOoYiZApAkhjESQnoDAtQSuI?f~Cz*-"lIN8Qi\`!g4lPJL#
rwwfMjNZEYKXyNbiMiNQStHirXetux9)9>8\+8A9Lm0>#rzfg^Di$
rZYEAyZCcsDQEAUyNqHGGDqKqUpj]R|0_4o#k4Bz]e+Y86iiLAmt
RrugMYqJXSBlmiAHIPayvLrrqVYjA-2?NZ=U`f CPt<Ds"2p_uNHp#
MJDYLUhkunVsfhFmfaoHDVHhTeJk-9Dp>,B3?tU"9qq?PEZ#y%R<"
vxLStgXmeuINtbgpiRqknJYDtjoUAaj'kU1V]7vM<e[CCN7R0p39[-
YyrfTdFdIXbFzHHzICOlKEwAbahIAfA{C92jTXzEr^ux'Y8+]lYwE!
rUhSOgSnaDUxkmJTaZOaxEEYIvmSGE #Kx`?PP/IuF_jO4(Vl,w2"
jUJTBwhSgLAqVZAtVNqJDkOHuVbeGd?@GwLF4'+N%S-R)nTQF]i%!
NETVtLkwkKPmRuOBHIrbixLxtoYAAnrp7R0]kR_lY9hh;M{I\5?R%(
RnpfbfaKdnNptyRZKFPsELxdJXeAAD3mqSO~;;IeH5:ZV%12_e2B['
bPQbzOdHkWMOjeVvPFPfESOsztspYTJMbwm&FX/G6(VjEfvD=/=U"
HxkeobbogadBYwzHyxXlemdFjyqG|G&11OYUA(!"/N9Q6(K1Li~m$
xMcmEuEAOQahQZEPZbglCfGMiDGxqY&i"tfSvSz^%>~=o(4%d>`B"
NcNrCuFEHZDcMbSKpEKUaKDxyuvAAR620C8%ZTyj"U+ET^bdpq*B}'
EkKNJcLFzGoHQDNRJuwWpepGetihAH!|4U&h_0ZhD:@>/'D/EnKs $
yZVFoKJNxdEimFgCWkMiUDuQxeewAw|lkb'A5eUEc 8N4}Y6EvOX1$
CIUpIhRinJLNlluxRbJiIxngXhpfh!fmwv=,ZT[G*hFkUZ1_Gne!!
GivUcyZVpwanslgsTWEPwDSdiXEj+Tu`s8O(G[U=|E-hp"/:3&X8"
UAoLsDVxcmINizBZmHDVdvNnUOFE<MS'Lf}j_NU9Nj1!VuGMG!FT
KEORDIQYbgprQWtZoFQmbrHYhPqk@Ph:T~_u91+pB-?DKb">|G(7#
QZUxDvfTuBGhseVGcMrxoeIegnay0-lq}iTG#RO)[Vs`w=k~UYXi$
sbxWqlXPmruakAAEywMEiimTftOWk_S)o!VNmy(!4ne90Q"1xA!"!
YLrFrreKhgELYLtxQPnUFoqYOpHl'`{)[OaXIHZfFC^x:LU$BZ2x!
JAegxbdNRPGjluLWihDHpHbOKfmfbD$aYyZ0!2G?QpV3>>`>Ch%_W+
XSutCMJJiGnzbyJUamRoJxKIRHvVhem@j,H3Fo}TK\ybRwL8^0s1%
eIuJYPioKOMJWqxXTSzQlClDBjFv5EMB@ wRpT`r/LrUJ,&5p1B<$
bRRCEtPeawOFNrAjpftvCIsrSZghwT5VKlyK"vPy+[ 1KrIIQ!/H!
hcdAWqHJMYmUIKAEOOPNfDbISNcnAKK=ReG'!fZ~aP#424\+5%"-Q*
ZUSXCKOpDUHYzqDOFQiLpjjyRFxjn'4N)%cFHtIGv2`ZlA:kYfE:!
lSghaTEgHTIjIlTcypQHWdzUztKD7]9"m%s@JFv(+P]ef4^m<O@b!
cNrHIJlhnHENzhEqjiMalsrAwQxKAy,w+v!5;:Vu2b}YP8mSiLnSg"
VZmzTiADOESoseiXOSKRGIhIsfEn~HU#9M#:T}_-('tFuFb141tX#
rRteJKGuCckJdfbIktYGopPKoXwEAWyk|zK3JA>mjurULR7mdV\19$
XiQczatFmwRWlXUMVPsmVmDDsXqMjLT]Uo"y]4MN:`Xuqwd4-r!;#
BXimZodDqpFfakAVjXzRMxvhlXSJARr9xu [&cK&IZ#IybVciCYl~&
TbRLqLyiWdrYpWiTPJXSdRQAxgCCBTHp6?!l$(O)}C`<BkgBDAh2!
XhownOaTKmgHLXzocaIWzDVSqLuJT c5-,tgea2r#(Ymx370`iuk!
isPeDVancCRjpDppDIwKjvRDQCSOcyyd2JJ99Z=<SG{D&Rlcl`Xn`+
iloVfhVaWTlGNiYRzmxEeKbDChzTuyeoK*%6\@+v(f9k1hik-+W5+
FqAZtxxovWADmvcYMkisnsXtEZqG^d0f}7"/DB;63V8w Y*t,Tjm$
OSRzviPZiAEXqVqKwpYlqkIodtMr)A`&/LD9hR,_H8U<F1"@Q3$L%
qhNHAiXnKUtjRdaJCrbgXbwkuFHF[Ft|5#gV_K|"MKP}ep;wi=NB
Process
System.Diagnostics
NQqjkOHucERArsDQRmNmkAiOZGiq:NosR-Le:\eJG^B\ s1k%JqE"
xjKKygCEfnJYNsFPMPZkiedjcpHGA1FDGe"D" 6?h[\f22yKg&$kZ+
InGPpSkZdQTGfYSLpbPjjtBcQKNyAn$)YF?&"v^,<%hahkQo>[~AX&
dSSIrfOsXQrtujxPBBAomjZnyBVDo,BBOl=cX3yWWC!'$eU{9;ZD!
LMdbjAaLgZjqfHjBYMKpBDECPUnSAf4sax_>{f;Ke{8H0kCz68hg1"
lBibylLDpOCHGFfHdFfdaeMaZLCK{7&$kxHwjZ'n!]&jk$/|UlpV!
AepHzOCCsnEmPHHvYMcmKKZzVbzFAF"swv PEES83^o4U/7Jx])ys*
Encoding
System.Text
DxfTQFJBRglWsIFaGidpZVXkAdSfn2&#z#haw5;>eRX[Od}B*l-3!
uEOBOCDYNYslRDWilxkVHeUAPCwhAON^R2K<@za#7Ri(Q?p"dX<N"'
UqKlEpItneZRIinaGAfnpqfXnkPABa}VZ`;;jTry/E*rq(Icaae*
KFqYhqdVcZLCMEcogvhRSNuulSMQ\2(sqKyA|V#h2Sk["PhQ5>E\'
jQcUaiFlrQyMTLELNUDpRerdiCxd}E1HETC]4Ib~'-xfyB:u/(*S
WebRequest
System.Net
YldCnwTWRqvreWnKISdPcwavmXOV+PmO[#(0EI[j+2\=x133ETU#%
HttpWebRequest
FElWKXLHHHxynJRfuHMNpnwUsWpdxW1dhdz)P"S4Ms]%`WAQ6(;c
WebResponse
KGxcuYuNqzgDCewRJwbgWQaGrKHpApJa3Ta3[,LRauZrk9Qz=j'L`$
LwziAEXJMwmyNsgocYqdeTJzUFybFSCDlDjP32(I/CNR1&t"qr<9
Random
JZXhuVDGZZRkMOATUPxwaLpErtVD!-^K@V0>x`:-g4jrmCb)P}:4!
hifyxCAfuHtgkCzeBcxeSVaVrPKW?5=E|Db*@i$g~Q|Yh/dgnP"%&
WebClient
jhuqKiUpvBONcmghHaUvvSaejAcdce&KhVyhu#'i}/|s2gV;uec4
HQOdEebILKnubmkQmfGsMIWmQHYgNH>Uko&!n3C*4Sc$W8|H/B80"
NarDoIcAfTWcryAZGRtAbspfDiGDAN`Oavsh1zOE4y6#q<f;O;{Db"
FyCMvkKzYXpEeGRMTglVekAKHEIcb0sbocld^\DWPp:2Gp?wLj~Qf"
lFtMSXRPLISjOoqslyUmJabLeKuBAm^$zP&%4\}Z3k[ohRIj9d'PA&
XzskxBCACfyfdISQNNjVttZYDTXjh,(oHHBD3co:?zxl'=uHT:T3"
TrsgNNEUgfoOGcuDGJePyAKeGgRkBp7}z-ZH7Q-9HkNL3&tJ~:5s#1
JyLbzFCxTHVuZmNsCZemxtSlBiYhApc#3rLw^:}PK@S`1CGWv/imB$
JFZkHNYkQBuqZEWHSIHaGJagOwUCnrpY@0Y"~in`\drf;n2\wfzW
ufIwyPtlRygJVNCPXcaeiBAgdOygA(QR NyHB&;F4F-#Q[){BSpZ7#
GmhsSPeQnsQojSYZUpiNUoXuhLUoJA/+p?sa[(e#X<be[jnNQ0?h'
qYPYUqCzhzhtlPHFFMAJRcEnCPABAiG'%?LT&s9G9j>Z%UxJ@(LMx%
HttpWebResponse
BPwHjtzZEdnaVATMKQXdzgAFYXzR-0"=[(EF/&dyFF\'1bq8:~TU#
GwERCFFtlsCWDQHmjCFlVuqtKapsPLTzx1-yi0%2J"}-t*xUQnsA)
StreamReader
BOrfbNJXgAFLYbjXxQpIWLQhMTBvAb4qq0O)WpT30Q|Cg*TV#edhf%
sUqrafHBSDGXgTddJBLUjfDdPMhXA3b7*=zZrR0;'Y7TVxN(fGn51#
DklFvBqJXffqLoSKJEeNAeFTEbzdb@kWyzk<jY1fP*`x*0)GRf8"C,
TextReader
cTjejwHJGkiAsuEJwdxaWKQrlZfzM{W{=M'@ P=I8:y&a]0Ra`G}%
GdhINcppBbKIeSwzJjvoYraXSBgg6 VYv_K92~7vQZX114")@pE5
FGKwGyMaGdhTLlEUHBwRVQTxQciy4o%QmJ;zy74$0llG|nrD*}m !
tQNCpDhfnfShadbhpqTubTBpwAWEAQx!CvFsYw9wZkwC'QKfL;+`j!
sNeWsHKbJyLtQxnNqDQTFkFUmOuos|[o244PyCRg?D}^DUZ>DbS"%
lslfrHGmIyAsSjRzEamXciDJAMZwAt"]L`-d5 )=UkHy!lk@'tpy!
jfvRllHqCNDKgHPTjitBgEphiUtFbg9uAE:x6LV Q:#wMFN|U14~;,
giskhFKfLxdELkuVSXdBhENKORkNAcD}S:!dbyNX$M%RSGrH4Z-)k%
mXsGVtiDHDUcaNBwrevdvhqpdQXvq*S)1a=X|<YF\ ,Q1H(/{r#*"
mCBpHcglajYVaqoGRQsUljXvXJoeU2hcSumWIjOEMAtvD*c?M:qK
luUraJTMbsDNJHqfpIqbZpPXYKyTAEJ@*l9#3U\ XOuU#7c94+ALu5
lzTJEJwbgaGSlIuiBAqBrLwkWUOwk$H4p?hYKFC\JcfK\9sSgT88!
HwCjKTnweBTyXbqezrwigCzNKriC#`Fuf=C^xdTYuMs1yO-[8FuA
YafehnDZDiFfqTeiUkNOYsnaZOkaADfOCGKr0wsS@k1h8YJs$gtL3'
dfFZCGqwwebEnloIXDLCAcXbTSyCAw1|`pH7;Qdk{kv@BXJCDy6$c!
RrNaFBJREAKnefDbhrCENMXjgXMeB:\|~f>B^T?/7~]O!}NLPi$-f/
oFKGtDuwOsIgdlCeQfOxjrflTpRhAA$`{#wD%5g3ka(!rQ:q/y1:4$
PC_"^:t)3=$i;Y2SH2\Xb&A81
Attribute
isdfujjdsf
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
RuntimeCompatibilityAttribute
DebuggableAttribute
DebuggingModes
AssemblyTitleAttribute
System.Reflection
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
System.Runtime.InteropServices
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
MemoryStream
ReadByte
get_Length
UInt32
RuntimeHelpers
InitializeArray
RuntimeFieldHandle
get_UTF8
GetString
String
Intern
GetTypeFromHandle
RuntimeTypeHandle
GetElementType
CreateInstance
Buffer
BlockCopy
get_Module
Module
get_FullyQualifiedName
get_Chars
Marshal
GetHINSTANCE
IntPtr
op_Explicit
Replace
GetType
GetCurrentProcess
ToString
Thread
System.Threading
Convert
FromBase64String
Registry
Microsoft.Win32
GetValue
Create
set_UserAgent
GetResponse
SetValue
DownloadData
Concat
Combine
WriteAllBytes
Console
WriteLine
ReadKey
ConsoleKeyInfo
Exception
GetResponseStream
get_CharacterSet
IsNullOrWhiteSpace
GetEncoding
ReadToEnd
op_Inequality
Substring
Environment
ExpandEnvironmentVariables
Discord Link : v1.0.0-custom
WrapNonExceptionThrows
isdfujjdsf
1.0.0.1
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
}}}mSSS
hhh xxxkxxx
DDDZDDDZ
cccI***q
\!!!9~~~:
cccxqqq
///S&&&K
DDDYMMMj!!!
vvvAqqqA|||
wKKK.~~~
JJJhLLL
y xyyy
|||mQQQ
777jBBBY
Yqqqjaaa
pppiGGGi
xxx1ssswqqq
zmmmz999
|||l***
|||h|||
aaa?aaa
;HHHo
]mmmm```
444gPPP
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
13OUTPUT-ONLINEPNGTOOLS(
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
isdfujjdsf
CompanyName
isdfujjdsf
FileDescription
isdfujjdsf
FileVersion
1.0.0.1
InternalName
isdfujjdsf.exe
LegalCopyright
LegalTrademarks
OriginalFilename
isdfujjdsf.exe
ProductName
isdfujjdsf
ProductVersion
1.0.0.1
Assembly Version
1.0.0.1
Antivirus Signature
Bkav Clean
Lionic Trojan.MSIL.ClipBanker.7!c
Elastic malicious (high confidence)
Cynet Malicious (score: 100)
CMC Clean
CAT-QuickHeal Clean
ALYac Clean
Malwarebytes Clean
VIPRE Clean
Sangfor Suspicious.Win32.Save.a
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
CrowdStrike win/malicious_confidence_70% (D)
Baidu Clean
Cyren Clean
Symantec Clean
ESET-NOD32 a variant of MSIL/TrojanDownloader.Agent.IWU
APEX Malicious
Avast Win32:TrojanX-gen [Trj]
ClamAV Clean
Kaspersky HEUR:Trojan-Banker.MSIL.ClipBanker.gen
Alibaba Clean
NANO-Antivirus Clean
SUPERAntiSpyware Clean
MicroWorld-eScan Clean
Tencent Clean
Ad-Aware Clean
Emsisoft Clean
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Infected.kh
FireEye Generic.mg.5e30cd05f19ca715
Sophos Generic ML PUA (PUA)
SentinelOne Static AI - Malicious PE
Jiangmin Clean
Webroot Clean
Avira Clean
MAX Clean
Antiy-AVL Clean
Kingsoft Win32.Heur.KVMH008.a.(kcloud)
Microsoft Trojan:Win32/Sabsik.FL.B!ml
Gridinsoft Trojan.Heur!.03011281
Arcabit Clean
ViRobot Clean
ZoneAlarm Clean
GData Clean
AhnLab-V3 Clean
Acronis Clean
McAfee Artemis!5E30CD05F19C
TACHYON Clean
VBA32 CIL.StupidPInvoker-1.Heur
Cylance Unsafe
Zoner Clean
TrendMicro-HouseCall Clean
Rising Clean
Yandex Clean
Ikarus Clean
MaxSecure Clean
Fortinet Clean
BitDefenderTheta Gen:NN.ZemsilF.34170.du0@ae0EN1m
AVG Win32:TrojanX-gen [Trj]
Panda Clean
No IRMA results available.