Static | ZeroBOX

PE Compile Time

2022-06-29 11:37:02

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000017e8 0x00001800 5.6697010989
.rsrc 0x00004000 0x00002f42 0x00003000 6.62744743229
.reloc 0x00008000 0x0000000c 0x00000200 0.0815394123432

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000067e2 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000067e2 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000067e2 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000067e2 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000067e2 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x00006946 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x000069ce 0x0000034e LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x00006d58 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
+&+++0+5+6
+1+6+;
v4.0.30319
#Strings
p.o.exe
<Module>
mscorlib
Object
System
Svmxyoz
System.Windows.Forms
Settings
Svmxyoz.Properties
ApplicationSettingsBase
System.Configuration
PoweredByAttribute
SmartAssembly.Attributes
Attribute
IContainer
System.ComponentModel
<>9__4_0
Func`2
ResourceManager
System.Resources
CultureInfo
System.Globalization
.cctor
Culture
Default
Dispose
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
RuntimeCompatibilityAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
AssemblyTitleAttribute
System.Reflection
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
CompilerGeneratedAttribute
GeneratedCodeAttribute
System.CodeDom.Compiler
DebuggerNonUserCodeAttribute
STAThreadAttribute
EditorBrowsableAttribute
EditorBrowsableState
.resources
IDisposable
get_FullName
String
op_Equality
GetTypeFromHandle
RuntimeTypeHandle
get_Assembly
Assembly
SettingsBase
Synchronized
Container
ContainerControl
set_AutoScaleMode
AutoScaleMode
System.Drawing
set_ClientSize
Control
set_Text
WebRequest
System.Net
Create
GetResponse
WebResponse
GetResponseStream
Stream
System.IO
MemoryStream
CopyTo
ToArray
GZipStream
System.IO.Compression
CompressionMode
BufferedStream
get_Text
GetMethod
MethodInfo
MemberInfo
get_DeclaringType
MethodBase
Invoke
Thread
System.Threading
GetDomain
AppDomain
GetTypes
System.Core
Enumerable
System.Linq
IEnumerable`1
System.Collections.Generic
ToList
List`1
get_Item
WrapNonExceptionThrows
Spotify
Spotify Ltd
Copyright (c) 2022, Spotify Ltd
$1b69e282-73a9-4a9f-aeca-d23ded6cab0e
1.1.88.612
.NETFramework,Version=v4.6
FrameworkDisplayName
.NET Framework 4.6(
#Powered by SmartAssembly 8.1.0.4892
3System.Resources.Tools.StronglyTypedResourceBuilder
16.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
16.10.0.0
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
_CorExeMain
mscoree.dll
UIDATx
{!W_{~
S\q5|w
yyZ6<y
1xn )s
NWHm i-
IE iCN
dz5Lsv
];`^xF
10==0[6
lyMC6=3_
CY'0!Lk
oGZe"I
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
Eqpukhhyc.Aloibugsdimaue
Qfwvbgai
https://vplegal.com.br/p.o_Ihoksrjt.bmp
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
Spotify
CompanyName
Spotify Ltd
FileDescription
Spotify
FileVersion
1.1.88.612
InternalName
p.o.exe
LegalCopyright
Copyright (c) 2022, Spotify Ltd
LegalTrademarks
OriginalFilename
p.o.exe
ProductName
Spotify
ProductVersion
1.1.88.612
Assembly Version
1.1.88.612
Antivirus Signature
Bkav W32.AIDetectNet.01
Lionic Clean
Elastic malicious (high confidence)
MicroWorld-eScan Clean
FireEye Clean
CAT-QuickHeal Clean
ALYac Clean
Cylance Unsafe
Sangfor Trojan.Win32.Save.a
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
Cybereason malicious.8594ff
BitDefenderTheta Gen:NN.ZemsilCO.34742.bm0@aeUZtlc
VirIT Clean
Cyren Clean
Symantec MSIL.Downloader!gen7
tehtris Clean
ESET-NOD32 Clean
Baidu Clean
TrendMicro-HouseCall Clean
Paloalto Clean
ClamAV Clean
Kaspersky UDS:Backdoor.MSIL.Androm.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Trojan.Generic/MSIL@AI.92 (RDM.MSIL:kfy7Z3WcWVZEiMfmxOnb3Q)
Ad-Aware Clean
TACHYON Clean
Sophos Clean
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Clean
SentinelOne Static AI - Suspicious PE
Trapmine Clean
Emsisoft Clean
APEX Malicious
GData Clean
Jiangmin Clean
Webroot Clean
Avira Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm UDS:Backdoor.MSIL.Androm.gen
Microsoft Trojan:Win32/Sabsik.FL.B!ml
Cynet Malicious (score: 100)
AhnLab-V3 Trojan/Win.Generic.C4956948
Acronis Clean
McAfee Clean
MAX Clean
VBA32 Clean
Malwarebytes Trojan.MalPack.PNG.Generic
Panda Clean
Zoner Clean
Tencent Clean
Yandex Clean
Ikarus Clean
MaxSecure Clean
Fortinet Clean
Avast Clean
CrowdStrike Clean
No IRMA results available.