Static | ZeroBOX

PE Compile Time

2022-07-26 01:33:04

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00001a60 0x00001c00 5.45929467518
.rsrc 0x00004000 0x00013514 0x00013600 7.18846246224
.reloc 0x00018000 0x0000000c 0x00000200 0.0815394123432

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00014892 0x000025a8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x00014892 0x000025a8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x00014892 0x000025a8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x00014892 0x000025a8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x00014892 0x000025a8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x00014892 0x000025a8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x00014892 0x000025a8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x00014892 0x000025a8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x00014892 0x000025a8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x00014892 0x000025a8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x00014892 0x000025a8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x00014892 0x000025a8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x00016e76 0x000000ae LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x00016f60 0x0000038e LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x0001732a 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
%-;+F+
,Y&+Y{
+U+V+^
-!i+^+_{
+?+@,*+C
v4.0.30319
#Strings
Xnnsmvwe.exe
Xnnsmvwe
<Module>
mscorlib
Object
System
Settings
Nzstr.Properties
ApplicationSettingsBase
System.Configuration
PoweredByAttribute
SmartAssembly.Attributes
Attribute
Dictionary`2
System.Collections.Generic
OrderedDictionary
System.Collections.Specialized
ResourceManager
System.Resources
CultureInfo
System.Globalization
.cctor
MaxItemsToHold
MaxBytesSizeLimit
BytesSize
Culture
Default
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
RuntimeCompatibilityAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
AssemblyTitleAttribute
System.Reflection
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
GeneratedCodeAttribute
System.CodeDom.Compiler
DebuggerNonUserCodeAttribute
CompilerGeneratedAttribute
STAThreadAttribute
EditorBrowsableAttribute
System.ComponentModel
EditorBrowsableState
.resources
Monitor
System.Threading
get_Count
Thread
GetDomain
AppDomain
Assembly
Contains
get_Item
set_Item
GetType
GetMethod
MethodInfo
Action
GetTypeFromHandle
RuntimeTypeHandle
Delegate
CreateDelegate
DynamicInvoke
String
ToString
Concat
Exception
Encoding
System.Text
get_UTF8
GetBytes
get_Assembly
SettingsBase
Synchronized
RemoveAt
Remove
WebClient
System.Net
DownloadData
Component
Dispose
GetString
ContainsKey
get_ASCII
WrapNonExceptionThrows
ZHPCleaner
Nicolas Coolman
ZHPcleaner
$3dcc1d3b-7bd9-4586-80b3-eaa48e6103a6
2022.7.18.48
.NETFramework,Version=v4.6
FrameworkDisplayName
.NET Framework 4.6(
#Powered by SmartAssembly 8.1.0.4892
3System.Resources.Tools.StronglyTypedResourceBuilder
16.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
16.10.0.0
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
_CorExeMain
mscoree.dll
&IDATx
kw{S)W/J
v9q'B^
bG{!#,
d8@q+R
W\~;v>
Xmz]E]:4
Vp_?<o
bsqlt\{j
haT>N8WJtRd2V$7H
$?E*#5/F
A)@7+:
f($"%CE
?>>qatO
qx|{{g
yQ:p:W
z6[kL+
G!J$3A
b'0grDB
JA Fj~
^4CzmP:y@QT
wj+$wo
PwSUn>
FyUMIu
3Z.9+
L:an:<k
K',9f5
w:M1S&
(oK Ke
%,m1$M}b
nO+)U4
IDAT?:
a(EQXg
&Kxv6N
@@<gl!
!TJr4y
zVEi( Y^
W5+,Y#
@18W)8
?I4D^7
y3 b5q
gba=)xm[B
?y{}x{
rCV/V5
KT9<Y]
(Nyp*Om
(TABM6$1
??ZTj7x
MJUsB8
X"[Vr
r,Ym,rt
t+iyQG
`'i/.t"
X"(M=\
aL t>,g{
$B_@4QOB
z+3R7A>
%A9$2OGG
04Cj5m1s
'5s<.:
1 biCk
x:hS&z
]p.}:b
JY2QY@
nBV4BV6%
],7dM[
=+>\DXI
:(ST!b)S
gAS|+A
NAj<V,
*'SuBV
yM4@V
ijaq!c
2>h'/`~
g+(@)_!
"""Xcp
""%0x0
"""""&1
K""""""""
""""""""
r"""""""'
""""",p
z7"""""+
""""",zK
""""",
""""""""
""""""""""""
"""""""""""
"""""""""""
2""""""""",6A
""""""""#d
|""""""""
F<"""""""
""""""
2""""""t
m""""""k
"""",Q
r""""#P
_""""#
|""#u@
+8888E
TTTTTT@e5*
W~Xd>Cp
>CCCn
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
Vldsqwwyulhptojkgc.Wwyivz
Copfmnfmvpwhiegwk
The value size is higher that the MaxBytesSizeLimit:
https://cdn.discordapp.com/attachments/1001118780929351692/1001119806822563951/Xnnsmvwe_Acmhwsnq.jpg
Hhwbtqhxbeuecymaehxfor
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
ZHPCleaner
CompanyName
Nicolas Coolman
FileDescription
ZHPCleaner
FileVersion
2022.7.18.48
InternalName
Xnnsmvwe.exe
LegalCopyright
Nicolas Coolman
LegalTrademarks
Nicolas Coolman
OriginalFilename
Xnnsmvwe.exe
ProductName
ZHPcleaner
ProductVersion
2022.7.18.48
Assembly Version
2022.7.18.48
No antivirus signatures available.
No IRMA results available.