Static | ZeroBOX

PE Compile Time

2105-02-15 10:02:42

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
c }Da\x7fP\x7f 0x00002000 0x000062f0 0x00006400 7.99140215075
.text 0x0000a000 0x00009148 0x00009200 5.91493051638
.rsrc 0x00014000 0x000016e0 0x00001800 5.61743809926
.reloc 0x00016000 0x0000000c 0x00000200 0.0980041756627
0x00018000 0x00000010 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00014130 0x000010a8 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of @.DBF, block length 4096, next free block index 40, next free block 4283124555, next used block 3783492483
RT_GROUP_ICON 0x000151d8 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x000151ec 0x00000304 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000154f0 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x418000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
((t@U|
/~X;8
+Aww~"r}
i"'Fa7
j Jm`KN
m3h*mh
=qMDbk
:;r5)>
Xy9;F-
5kD! fB88
M dD.|
a+1EIT
Hd!^Mz
&O%Qr`
z`v92F
0QS>sc>
,Fm)A}
wD/e8uj;
hvEjQ0
KdD^/(
@;AJTQ6
ey7ksmXM
OJF"-2W#
;H?6uV
20@J5#
nx5f)y{
rh6:a"
+3!b=L
(9#/K&
6IsL~L
#t0;#h
Q@16T7
mJ`2
b<d<=jRz
Jf8O3
bGN<&F
[?cp/4
m)+C0m
-4QU@g~
9S),b%
/M$OsA
PAp8[#c
n:WIf|
}m-sX<
xQsP-%
;_[t_&
o!!4a]K
.YRMT`.
nb!I1D2
fv^z"J
|Z}5E/g@zx
@+]%&8
.Fn^8
_CorExeMain
mscoree.dll
v4.0.30319
#Strings
#Strings
#Schema
kserow3.exe
mscorlib
SuppressIldasmAttribute
System.Runtime.CompilerServices
<Module>
jKYIPZclhtmyDyvuiBRvNowmcEBcASGLJn{Le5G05"ai+,5f/q&L6)
xFRTvUiOYxnIWsdPABSPhyWWTQFFcQ0BHGD<?]h(q>6b%>ebX>jt!
tsXzoYHuTDATldmxOfPCAuErzQZk]@lw`HV`z)Wok,~pTXHB"?+g!
Assembly
System.Reflection
JsnshDuPpqEFMhcJttUfEeznyKqhA-H;}`?]$[2#)}>a6C["(_EbA,
.cctor
FToFQnlCMxGjBMAaKHIAJEYxtnZNRhA:?q%8Ofb0twFX<'%DK;aX$
VirtualProtect
kernel32.dll
ZPdCHXHVouKVYzHypHOcJHyOfqfX+Um:<b~?='!;e5/vKvFsJGG,"
sPEQqAjIvOGUgYKlpegXHgAzAznoCd-z~oca)Ro085iC))H~qU=>"
System
RuntimeTypeHandle
HGAyZOeEPkpxXLsiUenrSfrYsUzT`34J6E5v{{-Ltc8sC | <8r5+
Module
mtvaefZLuyZmYzamfbSiwSxAhVHEm&;{I2+5Cv23[)A=[cT4R3`o
WLnXdGyjXZBNINkbQHRSUwXdDbGO@Xep~/^r2phntOv^RdZ-(mLP!
ulQSTKAvcWpxuGZbffQmwkpyVguXE]28P0@u%K}w2*G) ;au=9AC'
zgEbeqNQceBvDGgAFNqdcNoKEdXvYJ2wqPcGeoL@lHH1g*h52KT !
zsjabjhmaVIcHAcmZxSXIICFBfbcb*;ukOW(o)?N`CaZ@VtZF-/"=%
jkstFTbPHfqPpgmOPmADOrSIjKFN$\iF#/I!,-4uoztlv`<^x4Rt&
qKNjowgaHoAzrwTUuytHEMeNHUXDk^jW7$A/wXw362EQ!d8VHZTO!
DFaQaDstubyVXqDYsjnxbvVPpNTeb_nZ`qigYiT9~L7_IAg=LkbN
gXRAVyqxGXjjhbyQLVHwiSkqXqzuA5cZpiAaH#?*kUF02BGd{]3q=-
NIbGGoDOSyWtOzdbsPRdQhkxbUFcL_*:%T+ob8QmUP;P~RGa]]z[
lImFtGNGgXxJErDmFOegEdXYoNXB7@>'y)@@_,6Ax3)hC#'(FI2n
TojtZDtXqSCzpjhruomBVIQELUjhb`W0f)I*dv9~"=/e)Lz!^H15%
mIQEustVxTsllWANtSggaqqVxMfJ?0zvwud9lk{Hn0$b&5Gy^s1H!
mdekEBtCNiyVRxgrpIffCpaQGBUJ]9]}vQ-2sgR9'aGDi~=/rzV[!
ResolveEventArgs
YyYAFDfgXXASaGOTTYEruMsRnTycZNK\pMUY!pKt#0j)s=(djKE5!
EzsGwXFuRpBgmNchQbrathxFJRsWtf12>tOBi>=(p7ZS==W{Pt3:"
dWknbvrXvtZIGlcYWhqRNgaNrtMy(d*,mu^IGXB1kd^{vXBG'M+-"
ValueType
yHbcpEeDdmCcufeVBiokAOXIRQHBeuQwSjKP{_ga]1:1MG1XNt(f\,
smAtZdFOugxiAPpsrWfkaiiidmBk9}Tu_vBu7,z-0W(> &y?&1'x"
nqScaAKVuaqqtLfKCGHhkANDAlvBAW"^9DxNG_7A:F-pFq2uB:sC]#
llzVULABlxJTNBeeXKiYYizcMWFQ&3,TjD'}cN~ZZEnQja'oWdZp!
HnjYmslyXEqpeqBxWcJepdzAkprB'C(pG9M3HIGyx;\*j1dg%qS !
DHmqTjBBieuxHaLRMPtBntgIvctF` iU,f!+/,! Ir+<8coeRg*W!
TEMxYpvnEYutUKGGjiaJGEQVcSlZAd1B8;?(%\]rA)>WOxN|rJN&M%
qdizIjobRjleKYnpwrhUwUGGWStN}/Ml J;`&/hj0e9_r({)\~=K$
QExmBzZcKVoVJLDRMDZvnTXbJXWdF;yIGnR7Z9|#;b8v[K}>mvF"!
xlXiWNaPlUpVVjcZftlftRgBwEjb1QIo@s2Cq~~&o<*A*OFRHq`'
UpPdXzzaGDVcdfVlFhwdXXJWZdFLLT\@Y*9xzoEP1yPc${88PdO`$
Object
zaafllecaEOKcRRYgYpULwltizPGA/$O1(TwW2:{)H`]a@-^WWyV@&
aYPFkHtpWMrtotYrRjPhLTiPRUZAyl'/YKqJY`Sk|U>_@2j#E~2?
nSQNDUdkGcoXfdIIYHQsgwAdboVK +)8-*=FmEAnC0BfYAyZWgMv#
Stream
System.IO
yupXaGfqLIOsYzxbENsaSrTNhYaw{B{ex<A)x1%$&$Rc@YD+TtV (
bcOezijWBRfPcvbtoiWkXbwiqzlJCM^eS Pl-?//Yeeainfu{Yez
MXZqhmpiTXLaXaptRFtrveGbAEJFl@Iu3?W@>z0?7,ZzCAV7wfj0!
LafAKxzDAKzBLUPKoXrIKcVFHpUg'S$83=|%#GzpX~[^VrQ6Z:df
qaBMkSSJnbzLVMnKsqeuknYjwLyesV`bJNdc_[p%1<=g(9aVieAI
AwYngfwRNgIPVoxctQTerppAHYtvZ/dW=#ohGVZ2ou9`,,q"ntV='
VuhPArKEGoBBYizpXsbDpASzkVHNAp,*pg=0#m-n*a18?QX%DKb`f%
HANhwQElfnauMCARDJBaAFMnJfkD!VT{<>wGki~'#X0!A%AF]@1i
BfeTvxxaLpPmmMaOeqdSgfCIvFMtBV"u{3(Tkk0k>jQ]4h/X+d~F*
TjKbSkTjTyiZBLlbpwoFnnSQCLZy#1:u7VvJ[)^'FSwYr4oD66H>%
JXMTBrJkeBZISWfuCGnbmVygAbwz~j4-G9jI@lby|IDA/=_q/?,[#
FqRKWxWRoqMmQBUTvmFxHmpyGtxqTMR#5)D$5u1H8@U<i}@qcWoW$
UysSGnVtARTVRrdPmmDCePlqfswvjk5|;,<bD^VdU'W@,),*U mm,
PqpUCEywKPMhxUeuvqGzEEqjVzqrE"00`kXP,%]{?Y:b=B(dUA'
OPSbQWbVFMPoQOaIfhcVCjkjlARHByta<&_tNtL<JP]"p<#9A{6F!
XTTnVdAYHjUhATuCDniVfRReeBHtVnZVe'Np=["88hN:yjm>ySv<*
rTkFbWeXFVDPFbYOcQewLRfCswwmBU:9ajYx!bn'<%!~q_(lY_j$u,
fNXPLhdcBlnNOygwDoSeAPlJaFNgA'B-9Qi CgXG>Uh35P`f)1Jb!
arZqsYbqiMGIJHMXRPGNJagdPamiAoF@iP2ku#8#X4jzxNtE"i>MC-
lKNPcGJieLIVVeplLpKmNKTYTKYvA*"8s'><C6H(b]/2d+oT%p4<F/
tKbbSXdYuncOqnxkaoGBpBSnTCFe?$S,0UzQG[ai@ewC0E~Pmz8w
aZCfjMxAjjOECfGXUdmnFtleajfLgpN/ruxJg'h(-NfyCZF5(Ys1!
RSkQljtpoPFHkZogQkqyQrElBUWtrHUG +e_!fA,N$\y=*%r3*>@-
ChnIJJaxOOsUbyaYPAgNnqtmYxrI06"!VCP\2GgumF|X%c1U5'EZ!
MArhlAHwFYgVsinBhFRkXXpcewPXj}]ABR|XH`" Y>3x9WF5yE5T$
jXWrIZuIqyVQIonKNDqswwrvAVLCA5ND266SqUr);3V8y[(s$iXM:'
PWThoPnwjvYIdxmZlCQmUiMuwFpiXG:7-s_&]ru;C#uZeGD#"w2e#
xEDXsLmFDnIUtHNOUzCrZFwJmnirCm+ndSr)y)E+tDBBiTj5R(-C%
jqAedKgMLmbZNlfTjAKSwAfFaEdGA(rbu2]aZAn>Ad6K0nW@;lH1>!
DyUdeTJfRKgsCxfGveJbrsDSOKcgbPJ !X(-:UPm8f(smDgV6PK-!
NpGYSXSgrnhPIYUGBxezakCTFRxRT72FbF{o;d+pbxV?}^7H)%$2"
ZHLJBNuoEtcOCeyWEiuLBFmzeyenVD<h4=W2i4>C32^a*lvGM$M=&
njGcVyktysBvvlKanFcwRKUjgxLFA_M@!M/%Y3ky@"(,[#,`z? G>-
VqJIVPzpOlpDFAFuoasWAjWrEsOHA<]~z-S/f,Ud(da[;tt4x(k4b$
gZKSajbfcwIlToEhDcCkjVqJIsle*d`P]}3S4%$}fEJks7Z#tv{S
dBndggnsFVIPVSfYKeXXyrvafFur(0M"Os/)+8p?Tt8\V~?m,'9("
QsWMdVsCbFzuHWNqfWvjBzlWoBthln7p+5n[\=dN&R[|}62y:i5^!
EuaSevoJGEhPQdXwZkarTAbzknGB~iKn?*zN_o<(2#>9?#21W"wU
HKSdlFnCjSSsTEFGPFxlgCxmGBUPA4Ob&fu8I`E>V-r~*k_^We)<j"
HoEfpQgkdeuJYyAltfUkarVWbkQSApot}fC~WqXV M{QFq[G0hKJ<#
wiInTmGZfSfvEENYDWDnogVYRzzsmaDH*%23b=!>~n-ZXM9nV/G;,
xHjHIkeRcbfxfVbCdTVNbCZbxSIc~e+&TlO3/$]7:U+ux4PWbW!
ecVbAUiVCXkmTSCcTLDqdEYBaYfncEK8jnM@8P3!XhY`HW \z{%I '
rEGdAgNiiMITvyUewkcdcMfzYweqMP#C}n\3xH3$M;W&);o7]*Hu&
ynUKSofdPgqMmjevdwmpixnEbnUo[JXFc%=2/\4}MMg"Wg7UXn$N*
uyfvUJxqbEQjXaoUVqWMSdSlhPSk*fu*Vs,uV'n9ohtqnxhDuOz5!
yhcxeSOceuSlhbrbifxUzSJtlfLSmu,9X<Fi?/,\UowG/zS`&(<D$
vyagKEGefQAlpacMjRZJRWXFIPnCb[?YJ0\QK:Uybkx0#SV2`zfjE#
RZDqTkUjlUsjKkAbNOgfMMTKaQKgAZPr|U$)wjy|R(OJQk?%nJ4\`%
kwUglCWsfineGsXDGJzRiqHEcfGkwFfuHb=S&&l)GzTX8$kNPw8##
FywcIQCfIsqelkuaRnSepMxlWszNAR!CVTRszIGoO==|6SVHu7,WE#
DhQoopBpbUayQdLJwtktoJFyOOfh264EMZZK6sBmZb=$w/1%kj1L"
ustvTUrKWxTMMmjvEXtSUcQLJnbHM_]erU28IN^O#y-^-92F@dc_"
rWsUCKdzfkXNxHASjNSyWYWzgmjekAELteoU[lI>XtcF1RdT*_3Q
cytwsdJGefRyzVDlljFwkpqWLDdCA/)* cMnOK"A-faU)fu9QBNJ('
sDKocJrWLfZsXrzrprwDTSGJMdsJqs>U6Y#6?^6>$aQe4XRl\hPK%
fSyEWugkNXRJnmGTPHjmfSWiYIdcA39K|iS(-'n)3'#PcE?%h1YT9)
SpTXPaiYRXmrqZuocYEyUYZSTIKAJ"H;Xi)Zic}r;W8H+~hh{J%1
hukibbTPBbdfsCdNVtgPLdsnlMkz75?ao(\4][&\5->YSb;EmNiC#
HMjlrfMcgSisDhqHabKEjmHReRoDA^47K=6iYPod"W-Y\|X}%:`9}"
njhNBhnHOXpktIPWQBqlfkpjoDupAO u#_& ZHG21<%f79g$? yx 9
TjXgAiEAMdDIilqIENniqLoHCWFev%zy*n:aFVy_5*z#*EVr6X`K
moYoDJUnMLUaZorLbBLyVcCHEDtcA &nBn-'6v"V>oP[J+78!|/JY)
kOtuGlfJrmtKAcIupcfHDjBQBVyDb$au-w5?$IR&+,yG;5VQ@'8Lu,
sjIkJuTkBoZlWxKyMBYNwdFtyfqGc8x?q%2v?Nb5|et%FG8*,A,&!
yzuetrKvQLIByNUENBFpxUwhafTRA"#Su=f?TXH{DXZ)R^kN[?&G|$
heybJRAevufPDMBizoBjkbWhcYXEs3Z[HD,Io[V\T=c]qWHl,iFb
ohhejueGkXOeVoZQLoVcxJYTxfFX7ho,mol[v=dQ(N:!IIQrzU<e!
ZBtoYicSRvNhiBjFWEWtpnDKKvyw@MgE}IKBK`$,t46+KcsdPYP&#
vwvuzTjAyCVqYLGATIWoHbrVUSplAWiy(|9/"n=+J+2Bb{a[ED\Zq%
WiIliAtMiMbQeyirOiIRoPtrGTyGAb7xaTM#/xMW:9 x4)-G(U:t{+
dSAUdQJksoqkLfzSUASRIwAhHiRR?e%kN;|Q/a0[?n):ABRTK[rF#
qZbRoJDHlrDcogHklIOEruwlJVbtEoQh2dm@m>I_V7ur^&=_k^%c$
lveCnvpWPqpQsrDuSSbrxCNvCeRvC g!ss$n;Ia9$='07C?:?QGT$
sfOthEdcJszhwbxBdIAQBCdBdpcCAcVb}>/{n{YE3"6Q##'DM2-ak)
GJZDPwiObgPyrxsdmRHLDbDPjtbCApj`:Q$sI]K,]<gItrLXBrm'?$
ZUCrQtHnKsCLjKZFgzsOideIAHzVA8Kzfo1@FKH bX:3,E8;"n/6{/
rZrZMVXaheqySSGodtVqGDVnqpew_eOJ)<) *?4rfIqPI}@^skK((
VejtUHRpvnLGDWryNvWJRXUsQPQq`UWdj-63$Z/FR9#*v~|D/HD%3
qZrecgQMUiGSwfvUhntzIuoiAiUcAg|$mI@)d?j$c5DiW/}x3Wu^}!
dPRmBnsGVmjnCoDyuRQbFIGWiyPYciLru_XNM 2/?wiH5+NXbUax"
DnZIpLtzImJGROzsBknDLPfKryEO2JNshOExM4|Ylq|af8^{\i,8%
HUUDVcConpGAQfWrfHtKvprrGElYbb|:+kL;;/@+PpO`o(:uyfC\[(
PoLsNfADvjAjUfKOVtcbKekCGrrsApC8V_?V&i9t^:BZK: =mt0sw*
DUsvDrRBewrcKFkbCtBStAMWceXk<A?i+j</oUJD(*6gPyJbDoJ'!
heLDZyiFEqCsCfhiaYthueKmDPtbYat"pi2#P%_mkCPdMq;2"+r>
CAXOJWVJjxgQtLomjBcgMSmAEKnL|-8-'%J&AY,%^"&4 *x,R@<o$
Process
System.Diagnostics
hzdbhqBMqcmiHrOUiGIujYAotUEVAudq(mC-(9 0L`w#<12:;yPR/
FPJHWyqHCjdGGGZqGXvNcGkesYYdV):bqU1:*qn\0Pnj~Jc0i/Xz!
RzRpMwoLuLAmQbOAxghIGMRRHtACb<3j0A33,LK2+"|7/[\Nv+S,L4
tFHwqPVRtTokSOXufcPwceMKotJW$t-A`7Bc6"-D>=E\7o{bRQE4/
XHpFrbFTpuYfCLWHZEQIgakYRrWFAH,C"c]f=/;6}#t)|!]Oc!y6D%
CBwjrRJaupvjDaUmAtQaixFwgFdyA)C_q4e?=uwLm4=T'mC]fS|c]#
Encoding
System.Text
NTQHzYbAaHMlPigmxofefYFzSHjGL&Z:vEBinPxU57yM=$7%/V9F"
OjryodajHSMlIZcxFVoPxvMMMvhpX6UgCC_LxWNsJ;dwlimVla}n!
qvXTIbMNRntaMtwsGlOdKNeGtNXtChJ2m6L@;{>7UW|BO3Xo@xMv'
SeztXCsTAZlKAULdhXBvvrgUKMDlzOsE-IGtV[P)uEani]!o~X-Z!
reAbfkzbuxCZfmiRVEOBHPWBSwaJq:VAm/AEgd/3H8hB>jd\JpaU!
WebRequest
System.Net
xYffCfORjilApNlgsiRYUiTkBqrVk{ud/+%isLq!\i;f!vvF}?B(%
HttpWebRequest
pniOFAIDZzQksfktbIzoMGfPNDFU{$"VX44ziAk|As=5=1Z,h%Bf#
WebResponse
AIrcpIAMLDAqvXkEfvgMTEvYdGWhb:oS}D:bX~EqZCPKSR>b,+#8!/
LTQAPuFVoRTjOKQRqsPoVNmJuJrfAv^XnYEj1<GHnj%=DsJj=L6<c$
Random
DzaTwziyuMDoBYxLsJnlOLhRYLSRRly3 -;7'U3!|%&k310&FR+X+
RDnDXHFlftnAazfGGifDqYfIhQmsDO[%XN@Sg3I a%Xa#= 3>`Lo#
WebClient
gXsvjfYTujwtdYqgyYIaFIZEdJXFOH,e3VG=Y}A%HA{<}et#^Y89!
FVeGxbXHIsglHfWswcuwuHosDlkD41/6g\;:a 6gk4I/Yc@\qfM9!
PdneSLittjEUsCfvsOqluFITrqR\/O't~s7zj5g{W'Xqu||=ZC#
SxfFZlcDEiVktNOepyIaItWCkefjAL>/^$ZP@;?"MBa;hBiu>bs+I#
KvhehAgPAtuWoRMdcxfHuYjSIoZC+k }iE4"_~#nd?""h&h'DXh(
eYyNVQqosDHjDTzroEdnQskSlMoL?f=j@"DC'h20)Wkj/kvcr @W'
QXSifEFTCgujaOQlepqfQTQHcZYfz*h3'+exY/sZo*yQiP^F>_ZC!
cpomcAllJKAtuBhtiBTgucRRjHIEb,iE}TMdDLAuCMyO<]$gDX%Xj"
QCwvXTOhhcloHsoBAOvrHfHcFtpkA`pAjD,N1(/ZHq%TcEwD@$sMg$
kmObIrgIKvplAEigfpFnWPWFgrdYbWV)zSK0t7u6@}s,-)1#LS+[[1
XYjoznpfHljCUnETWhGesqFLGrCDD{]QsEu!Yy~&H|zY3UuIxhPP
TREdySmGsiAeAtTBXeYKcbsYgnxeb\yDAP@Ge3E,0$n\l#b[7pJ;I-
RetDYJBRuKnXfyxaBACKzShTqDhZA^j72pKBSR%6aCaRx6\dE-f|*(
aCEyPOANUIuQWLXOoQaTcPfvjRtv(/<jdD4F<#|B@t?$CL((C"lg,
HttpWebResponse
DPaGvHESflZqEwXwkCGnKMmzFiZLAp5/o2bd(&7J&(S7!q9#q90"B)
HPjPymEpMYPDhGcZTGNiAcNfVpoKAV'/75?zFnxmVh~BN8}}zI5D (
StreamReader
HTTjXdikqKVspbIdOGNTiFpXUtWvLQvP};BsdFM)?cThJ\,KV,v^$
wySOtcRcEiMLXmKGXNspbdOOGNpp;28q&4L+sdNJiVzx9?q!!TU"&
XQVDkJfgImFIyzwCSOnDCOLhnBaYAZx<I~L*\}F$3,P^,]n':q2^"0
TextReader
xFpAiUgyjgZCCWWaXpjlUyEUApmIMn/dv9AQ_|44-cPSMV!-Rf 5$
TYnkwbTVSyleCOdPCFriuCgIppqAlhQ,[_H0[kq@=-BN"C~Cl;E+
qIGgVsmgDnQESVgktYIrBcAKIhvN$"4U532a \L#2]"bQ:#)\5tO$
wfUxJoDklQAZHJJhxitSQEDWHJVeA?2Rn[8>O6zFttAiqvc<\2^`7"
ZNkgJHKdIJMCGlpCVPGJOliwfeXNA)4m|x]y4l~r"wBJ:I0e$W/X'&
cuEqGKlAbQSKPkloURhSnURgJkLO3Jt-'%EIH#4vm?v$rn{!"YSF%
GSeBodFnUJywSEFdJkRRTxTwVnHA>+~!/tcH+"=D\,;AtZ"c#T{S
RFfgDojkXPllNiERSGXHakTOcjRHAH$ 2"eN'h&F@*Dd!8==#0EJh$
cBLHRIutrhBBICneKvnDvBbLMIVJA(Cj46Q&9_N+'IOV7S%8Wdth@$
OKZkNbHVIcSqjxIDZIxMUTsAeDST<:Fg*#W0c<a:k:~q!H2cf,P'+
aYfYTYMHiBVbQNGDEHxsXayqHiHlym9:Fr1YDxj )jNn%o!U(:x0$
NdKXBOqELOFbNOdycFMMJOIWhUPIAfN`2tUS0D,%)>7IZ&-lZ'FWn%
ibSWUAhVOcXGrHVlwOlaUoriulEgGL2rxQ>\a\{F:o_#aCpW1{Hj!
OeCnphJumINjBRsVIqyexMSKNnfU6]8sc&-UJo*:~)+'EoS6!UI&5
SAMmrzsQtCiTxBoBNHRrFULmYjawAJYB(eM_Y@r_e>#@F<9h~_49}/
u$SKRV'tBczC8H#JDOaZfTls$
Attribute
kserow3
CompilationRelaxationsAttribute
RuntimeCompatibilityAttribute
DebuggableAttribute
DebuggingModes
AssemblyTitleAttribute
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
System.Runtime.InteropServices
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
UInt32
IntPtr
op_Explicit
GetTypeFromHandle
get_Module
Marshal
GetHINSTANCE
get_FullyQualifiedName
String
get_Chars
MemoryStream
ReadByte
get_Length
RuntimeHelpers
InitializeArray
RuntimeFieldHandle
Buffer
BlockCopy
get_UTF8
GetString
Intern
GetElementType
CreateInstance
AppDomain
get_CurrentDomain
ResolveEventHandler
add_AssemblyResolve
get_FullName
get_Name
op_Equality
Replace
GetType
GetCurrentProcess
ToString
Convert
FromBase64String
Registry
Microsoft.Win32
GetValue
Create
set_UserAgent
GetResponse
SetValue
DownloadData
Concat
Combine
WriteAllBytes
Exception
GetResponseStream
get_CharacterSet
IsNullOrWhiteSpace
GetEncoding
ReadToEnd
op_Inequality
Substring
Environment
ExpandEnvironmentVariables
Discord Link : v1.0.0-custom
WrapNonExceptionThrows
kserow3
1.0.0.0
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
yyyk|||
%}}}
|||i{{{
}}}%qqq
SSSVqqq
tttv000
aaah___
bbbO
wwwv///
|||S!!!
|||i|||
444h888
y???z~~~
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
kserow3
CompanyName
kserow3
FileDescription
kserow3
FileVersion
1.0.0.0
InternalName
kserow3.exe
LegalCopyright
LegalTrademarks
OriginalFilename
kserow3.exe
ProductName
kserow3
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic malicious (high confidence)
MicroWorld-eScan Clean
FireEye Generic.mg.9f34928ecd64f71c
CAT-QuickHeal Clean
ALYac Clean
Cylance Unsafe
VIPRE Clean
Sangfor Suspicious.Win32.Save.a
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
CrowdStrike win/malicious_confidence_80% (D)
Baidu Clean
Cyren Clean
Symantec Clean
ESET-NOD32 a variant of MSIL/TrojanDownloader.Agent.IWU
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky VHO:Trojan-Spy.MSIL.Stealer.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Clean
Ad-Aware Clean
TACHYON Clean
Sophos Generic ML PUA (PUA)
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Generic.kc
CMC Clean
Emsisoft Clean
Ikarus Clean
GData Clean
Jiangmin Clean
Webroot Clean
Avira Clean
Antiy-AVL Trojan/Generic.ASMalwS.206CC5A
Kingsoft Clean
Gridinsoft Trojan.Heur!.03011281
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/Sabsik.FL.B!ml
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis Clean
McAfee Clean
MAX Clean
VBA32 CIL.HeapOverride.Heur
Malwarebytes Trojan.Crypt.MSIL.Generic
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
SentinelOne Static AI - Malicious PE
eGambit Unsafe.AI_Score_99%
Fortinet Clean
BitDefenderTheta Gen:NN.ZemsilF.34218.eu0@aiBjd5
AVG Win32:PWSX-gen [Trj]
Avast Win32:PWSX-gen [Trj]
MaxSecure Clean
No IRMA results available.