Static | ZeroBOX

PE Compile Time

2093-08-31 03:10:57

PDB Path

E:\Archives\Documents\krnl_bootstrapper\obj\Release\net472\krnl_bootstrapper.pdb

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000e5594 0x000e5600 5.53760349559
.rsrc 0x000e8000 0x0003e8d8 0x0003ea00 1.20735395007
.reloc 0x00128000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000e8100 0x0003e248 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x00126358 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0012637c 0x0000035c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x001266e8 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
v4.0.30319
#Strings
<.cctor>b__3_0
<>c__DisplayClass3_0
<.ctor>b__16_0
<UpdateFiles>b__18_0
<>c__DisplayClass18_0
<MainWindow_Closing>b__19_0
<.ctor>b__16_1
<UpdateFiles>b__18_1
<MainWindow_Closing>b__19_1
<>8__1
<.cctor>b__1
<Create>d__1
<>u__1
Func`1
IEnumerable`1
Task`1
Action`1
AsyncTaskMethodBuilder`1
TaskAwaiter`1
List`1
<i>5__2
<attempts>5__2
<UpdateFiles>b__2
<CreateByteArray>d__2
<>u__2
Dictionary`2
bootstrapperUrl2
<UpdateFiles>b__18_3
<client>5__3
<>u__3
<response>5__4
GetMD5
<Module>
System.IO
get__7z_NET
get_ET
set_ET
DownloadData
get__7za
mscorlib
set_Verb
System.Collections.Generic
ReadAsStringAsync
GetAsync
ReadAsByteArrayAsync
<<-cctor>b__3_0>d
<<-ctor>b__16_1>d
<<MainWindow_Closing>b__19_1>d
get_Id
connectionId
OpenRead
Thread
_contentLoaded
AwaitUnsafeOnCompleted
get_IsCompleted
System.Collections.Specialized
<L>k__BackingField
<ET>k__BackingField
<dispatcher>k__BackingField
UriKind
GetMethod
Replace
get_StackTrace
CreateInstance
EnsureSuccessStatusCode
MessageBoxImage
HttpResponseMessage
Invoke
Enumerable
IDisposable
RuntimeTypeHandle
GetTypeFromHandle
CompareFile
get_MainModule
ProcessModule
get_FileName
set_FileName
get_FullName
GetProcessesByName
filename
ElapsedTime
DateTime
Combine
IAsyncStateMachine
SetStateMachine
stateMachine
ValueType
GetType
System.Core
PresentationCore
get_Culture
set_Culture
resourceCulture
MethodBase
ButtonBase
WindowsBase
Dispose
Create
EditorBrowsableState
MouseButtonState
set_WindowState
<>1__state
Delete
STAThreadAttribute
CompilerGeneratedAttribute
GeneratedCodeAttribute
UnverifiableCodeAttribute
DebuggerNonUserCodeAttribute
DebuggableAttribute
EditorBrowsableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
AsyncStateMachineAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
DebuggerHiddenAttribute
AssemblyFileVersionAttribute
SecurityPermissionAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
ThemeInfoAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
DebuggerDisplayAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
set_UseShellExecute
DragMove
krnl_bootstrapper.exe
IndexOf
System.Threading
System.Windows.Threading
running
System.Runtime.Versioning
DownloadString
ToString
add_Closing
MainWindow_Closing
ComputeHash
GetTempPath
GetFolderPath
EndsWith
set_StartupUri
add_Click
Close_Click
Minimize_Click
PresentationFramework
get_Task
tasks_total
set_Cancel
System.ComponentModel
Parallel
System.Xaml
ContentControl
baseUrl
inviteUrl
hashUrl
injectorChecksumUrl
checksumUrl
versionUrl
bootstrapperUrl
injectorUrl
FileStream
get_Item
set_Item
System
HashAlgorithm
Checksum
resourceMan
Boolean
TimeSpan
mainDomain
AppDomain
bootstrapperDomain
keySysDomain
get_CurrentDomain
pathJoin
Application
ResourceDictionaryLocation
Duration
System.Globalization
SecurityAction
op_Subtraction
System.Reflection
NameValueCollection
WebHeaderCollection
KeyCollection
IOException
SetException
get_LeftButton
MessageBoxButton
add_MouseDown
Window_MouseDown
krnlmain.ico
MethodInfo
CultureInfo
ProcessStartInfo
DirectoryInfo
System.Net.Http
System.Windows.Markup
System.Linq
DirectorySeparatorChar
AsyncVoidMethodBuilder
AsyncTaskMethodBuilder
<>t__builder
SpecialFolder
sender
get_ResourceManager
get_Dispatcher
get_dispatcher
set_dispatcher
RoutedEventHandler
CancelEventHandler
MouseButtonEventHandler
System.CodeDom.Compiler
UpdateBootstrapper
krnl_bootstrapper
TaskAwaiter
GetAwaiter
BitConverter
ToLower
Activator
.cctor
IComponentConnector
System.Diagnostics
get_Seconds
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
krnl_bootstrapper.g.resources
Properties.Resources.resources
DebuggingModes
Hashes
GetAssemblies
krnl_bootstrapper.Properties
krnl_bootstrapper.Files
UpdateFiles
get_Minutes
FromMinutes
WriteAllBytes
System.Windows.Controls.Primitives
RoutedEventArgs
CancelEventArgs
MouseButtonEventArgs
<>4__this
System.Threading.Tasks
OtherTasks
krnl_bootstrapper.Utils
System.Windows.Controls
System.Security.Permissions
System.Net.Http.Headers
get_Headers
HttpHeaders
HttpRequestHeaders
get_DefaultRequestHeaders
get_Hours
killProcess
GetCurrentProcess
Constants
Exists
Status
System.Windows
get_Keys
Concat
Format
extract
DispatcherObject
GetObject
System.Windows.Markup.IComponentConnector.Connect
System.Net
target
ParallelLoopResult
GetResult
SetResult
MessageBoxResult
ToUpperInvariant
ToLowerInvariant
WebClient
HttpClient
client
UIElement
Environment
LoadComponent
InitializeComponent
get_Content
set_Content
HttpContent
get_Count
ThreadStart
Convert
Request
ToList
set_Timeout
System.Windows.Input
MoveNext
get_Now
MainWindow
MessageBox
GetDebuggerDisplay
CreateByteArray
System.Security.Cryptography
get_Assembly
CreateDirectory
get_CurrentDirectory
set_CurrentDirectory
get_Opacity
set_Opacity
opacity
op_Equality
op_Inequality
System.Security
set_Proxy
IWebProxy
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
WrapNonExceptionThrows
krnl_bootstrapper
Copyright
2022
1.0.0.0
.NETFramework,Version=v4.7.2
FrameworkDisplayName
.NET Framework 4.7.2
PresentationBuildTasks
4.0.0.0
PresentationBuildTasks
6.0.9.0
.krnl_bootstrapper.MainWindow+<<-ctor>b__16_1>d
;krnl_bootstrapper.MainWindow+<<MainWindow_Closing>b__19_1>d
,krnl_bootstrapper.Utils.Request+<Create>d__1
5krnl_bootstrapper.Utils.Request+<CreateByteArray>d__2
8krnl_bootstrapper.Utils.OtherTasks+<>c+<<-cctor>b__3_0>d
{GetDebuggerDisplay(),nq}
3System.Resources.Tools.StronglyTypedResourceBuilder
16.0.0.0
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
Hkrnl_bootstrapper, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
5clr-namespace:krnl_bootstrapper
krnl_bootstrapper
krnl_bootstrapper.MainWindow
SPresentationCore, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
XPresentationFramework, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
aSystem.Windows.Controls.Ribbon, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
NWindowsBase, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
9http://schemas.microsoft.com/winfx/2006/xaml/presentation
NSystem.Xaml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
x,http://schemas.microsoft.com/winfx/2006/xaml
d2http://schemas.microsoft.com/expression/blend/2008
mc;http://schemas.openxmlformats.org/markup-compatibility/2006
localclr-namespace:krnl_bootstrapper
Title$
KRNL Bootstrapper
#FF202020
#FFFFFFFF
WindowStyle$
WindowStartupLocation$
CenterScreen=
ResizeMode$
NoResize=
AllowsTransparency$
Resources
FocusVisual
Property
Value
StrokeDashArray
SnapsToDevicePixels
Button.Static.Background
Color
Button.Static.Border 
Button.MouseOver.Background
Button.MouseOver.Border
Button.Pressed.Background
Button.Pressed.Border
Button.Disabled.Background
Button.Disabled.Border
Button.Disabled.Foreground
ButtonStyle
TargetType
TargetType
Triggers
Property
Value
TargetName
#FFDDDDDD
#FF707070
#FFC4E5F6
#FF2C628B
#FFF4F4F4
#FFADB2B5
#FF838383
FocusVisualStyle8
Center=
Center=
border
contentPresenter
IsDefaulted$
border
IsMouseOver$
border
#FF000000
border
#FF000000
border
#FF000000
border
#FF000000
border
#FF000000
border
#FF000000
contentPresenter
#FF171717
Opacity$
#0066ff
KRNL Bootstrapper
10,10,0,0q
#D5D5D5$
Malgun Gothic)
ElapsedTime
Elapsed Time: 00:00
10,162,0,0q
#D5D5D5$
Malgun Gothic)
Status
Status Message
Center=
Center=
Center=
#D5D5D5$
Calibri Light)
UseLayoutRounding$
Normal"
0,54,0,0q
364,7,0,0q
#FF0A0A0A
#FFFFFFFF$
Visible=
CornerRadius$
329,7,0,0q
#FF0A0A0A
#FFFFFFFF$
Visible=
CornerRadius$
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
!This program cannot be run in DOS mode.
`.rsrc
@.reloc
vk*.sP
v4.0.30319
#Strings
<>c__DisplayClass10_0
<>9__0_0
<.ctor>b__0_0
<>9__14_0
<get_UnpackedSize>b__14_0
<>9__17_0
<Parse>b__17_0
<>9__7_0
<Compile>b__7_0
<Execute>b__0
Func`1
IEnumerable`1
ReadOnlyCollection`1
List`1
Lazy`1
Func`2
UInt64
<Module>
System.IO
7z.NET
SevenZipNET
value__
get_Data
get_Path7za
set_Path7za
mscorlib
System.Collections.Generic
SwitchMultithread
get_LastModified
set_LastModified
modified
Interlocked
Disabled
add_ProgressUpdated
remove_ProgressUpdated
add_OutputDataReceived
Archived
<LastModified>k__BackingField
<Filename>k__BackingField
<UnpackedSize>k__BackingField
<Attributes>k__BackingField
AddCommand
ArgumentCommand
command
method
ExtractWildcard
wildcard
SwitchPassword
password
IsNullOrWhiteSpace
AddRange
CompareExchange
_indexCache
EndInvoke
BeginInvoke
IEnumerable
ArgumentParticle
ArchiveFile
Compile
set_FileName
get_Filename
set_Filename
filename
DateTime
BeginOutputReadLine
Combine
System.Core
ExtractWithStructure
keepStructure
Capture
SevenZipBase
Update
MulticastDelegate
OutputStreamState
Delete
SwitchOverwrite
overwrite
CompilerGeneratedAttribute
GuidAttribute
DebuggableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
ExtensionAttribute
AssemblyFileVersionAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
FlagsAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
ParamArrayAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
set_UseShellExecute
get_Value
TestArchive
archive
Remove
get_UnpackedSize
set_UnpackedSize
indexReg
System.Threading
System.Runtime.Versioning
ToString
IsMatch
AddSwitch
ArgumentSwitch
StartsWith
AsyncCallback
callback
Normal
System.Collections.ObjectModel
CompressionLevel
ExtractAll
7z.NET.dll
SwitchOutputStream
stream
get_Item
set_Item
System
Hidden
SwitchCompression
SwitchDestination
destination
System.Reflection
MatchCollection
GroupCollection
ArgumentNullException
ArgumentException
get_StartInfo
ProcessStartInfo
System.Linq
ArgumentBuilder
builder
DataReceivedEventHandler
workingdir
SevenZipCompressor
Separator
SevenZipExtractor
.cctor
Stderr
extras
System.Diagnostics
SevenZipCommands
System.Runtime.InteropServices
System.Runtime.CompilerServices
DebuggingModes
Matches
particles
get_Files
get_Attributes
set_Attributes
attributes
strings
ProgressUpdatedEventArgs
DataReceivedEventArgs
<>4__this
Contains
System.Text.RegularExpressions
System.Collections
get_Groups
SwitchEncryptHeaders
encryptHeaders
get_Success
WProcess
get_BaseProcess
_process
UpdateProgress
progress
AddTargets
SevenZipNET.Arguments
set_Arguments
GetCompressionArguments
GetExtractArguments
arguments
Exists
RemoveAt
Concat
Format
Extract
Object
object
Select
AddTarget
WaitForExit
IAsyncResult
result
Environment
ToArgument
Insert
ToList
Stdout
set_RedirectStandardOutput
output
set_CreateNoWindow
Prefix
ToArray
AsReadOnly
ArgumentFactory
set_WorkingDirectory
CompressDirectory
get_CurrentDirectory
IsNullOrEmpty
WrapNonExceptionThrows
7z.NET
$c85e83e5-4e1b-45c8-b0df-e82a9be5bdb8
1.0.3.0
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
C:\Users\Admin\Documents\Visual Studio 2015\Projects\7z.NET\7z.NET\obj\Release\7z.NET.pdb
_CorDllMain
mscoree.dll
!This program cannot be run in DOS mode.
`.rdata
@.data
.sxdata
ItYIt+Iul
GGCCf;
CCEEf;
@@AAJu
8@@AAJu
0@@BBIu
AAFFHu
0@@BBIu
8@@AAJu
FFAAHu
@@BBIu
AABBHu
@@AAJu
t;C@@f
8@@AAJu
8@@AAJu
6PQRVj
9~ w9~
PPRPQPh
^$ ^%
j QSSh
.uRf9H
:uEf9X
j(PSSh
PSShL@
SQWPSSh
/u6f=.
IIt-It#
tQItIIt7It*
t4It-It$IIt
N,;F0u
W9^xt\8^Q
FX;F,u
v9;F(w|8^4t~;
FT;F\r
F\;FTuW
F`;Fhu
Fh;F`ub
;^,wor
s'A@@;M
t]Ht-Hu#
<1r&<9w"
j Z+QH
j Z+QH
j Y+OH
9auRG+
F89~<u
t.Kt'KKt
9~,u53
uU97uQj
9~,u53
n`9ntWv
/C;^tr
~`_^[]
tj\j/
t?Ht6Ht(HHt
t,9^xu
HtZHtPHtD
t\IItEIt2IIt!It
V4j RP
V4j RP
QSUVW3
t<Wh@B
WWWWWQ
2BBGGIu
9^0t-8]
tc8_1t^
uw9C0t
8_'tB8]
f9^4ta
*u48^It/
t.Ht%Ht
t&9^4t!
9X8tcj0
8^HuTf
t.Ht%Ht
8_Dt-j
9^<v5W
_^][YY
YF;s<r
19s<vh
FY;s<Yr
8X<tG9]
t?Ht-Ht
WVRj>P
ZuS;F8uE
<B:u3P
tkItFIt
_tIHt;Ht-HtHt
AAF;t$
8](YYu$
uh8];t-
8]$tx8](u'
9^\tNj
9^$t"S
F0;F,s-
Ot7Ot"Ot
OOtkOtW
9VHt,3
Ft9Ftw
t,9_\t':
t98^pt
@@AANu
tt(IIt$IIt
HHt4Ht*
9RIFFul
WAVEuc
fmt uZ
RPSSWS
9C\YYv
t>IIt:
P,A;O4r
;H$wqr
H,F;w4r
^;:Y;t
G;:F;t
G::F:u
NHW+N
FH+F P
FD;FLwur
F@;FHwk
JtgJtIJ
tK9~,u
tjHt_Ht<
yh2u,9Y@t'
0t5HHt1
t3It$It
Fh<Dt <St
C<PjdZ
{hLt:j/
z<bu+h
l9^Hu.j(
8PK00u
F,tZ=PK
tS=PK00
~,PK00
F4)^8)\$
s";N,w
^,;^4w
t[9^<|V
9^8vO8]
;D$ uh
L$ _][
\$ UVW
u=9l$0
RWWSUV
D$$RPSWUV
l$,VW3
L$ ts=
N,]_^[
W9n8r^
;\$0t#_^]2
9D$DrG
9T$Dsi
L$<@GI
u0_^]3
rN<@wJ
T$ SUVW
QSVhPK
T$$SUVW
(f;.s#f
r+;l$0r
r-;\$0r
D$,;D$0r
|$ ;|$$r
N<j QP
D$lVPh
xV4vRS
A 9q(v
^h9~hr
~(_][^Y
VX_][^Y
N _^][
#T$,#D$(
;D$@tN
D$8^_][
T$8SQR
t$,SPQR
D$<^_][
|$$9|$,
9D$,vX
t7Ht#Hu
^$8^u
n4]_^3
L$@;|$<
uWF;t$
u'F;t$
l$$9t$Hs
L$D;t$
D$ SUV
L$<;D$8
0uE@;D$$t
u#@F;D$$u
D$4QPR
T$$PQR
|$ ;l$
D$ )Ft
D$,_^]
L$,_^]
T$,_^]
~(9~$u
D$<)D$
Fx;l$
v*WVPQ
;T$0sj
\$(#\$T
u ;l$(r"
|$(+L$4+
+AC;L$<u
L$$;L$ds$
T$$_^]
L$`_^]
u<9F0u
D$(;D$
D$(;D$
L$(;L$
9F _^]
9NLtp;
D$0_^]
L$0_^]
T$0_^]
L$0_^]
T$0_^]
D$0SUV
N(9N$u
L$D)L$,+
D$L)|$0
9NLtn;
u)9n0u$
;~,uDU
9D$$v
@G;D$$r
D$ _^][
L$D8T$
D$T;E,
|$H8D$
@G;D$,r
D$$;D$8tF
;~,sW;|$ v
;D$4sC
9npt 9ndu
L$4PQj
9\$$_^][t
E8_^][
9^(t=W
B4;B8t
C8;C4t
D$ ;G@s
9^$t=W
+C<_+C4^
+F<+F4
B4;B0t
D$03D$8
T$43T$<
L$ 3T$h3
|$@3|$X
3|$83l$
L$D3L$\
D$p3L$<
3t$ 3X
l$ 3l$
3t$(#t$
3t$(#t$
|$,)|$
D$xRPj
T$ 9G<wEr
L$|_^]
T$|_^]
D$$;D$
T$ _^][
l$@UWS
\$43H$
Too long switch:
Incorrect switch postfix:
Too short switch:
Multiple instances for switch:
Unknown switch:
Illegal character in input stream
Error reading input stream
Unexpected end of input stream
Empty file path
SHA256
Error #
CreateHardLinkW
FindNextStreamW
FindFirstStreamW
kernel32.dll
::$DATA
:$DATA
GetDiskFreeSpaceExW
out of memory
GlobalMemoryStatusEx
reduceSize
* * .tar .tar
bz2 bzip2 tbz2 tbz
gz gzip tgz tpz
Unknown
OS/400
Tandem
SMS/QDOS
TOPS-20
Z-System
Macintosh
VM/CMS
lzma86
* .tar
xz txz
NoCheck
Check-
utf-16be
utf-16le
Incorrect Map command
audtexlbih
Cannot find archive
I won't write data and program's messages to same stream
I won't write compressed data to a terminal
Incorrect item in listfile.
Check charset encoding and -scs switch.
Cannot find listfile
Unsupported switch postfix -stm
Unsupported switch postfix -bb
Duplicate archive path:
Incorrect Number of benmchmark iterations
Only one archive can be created with rename command
stdout mode and email mode cannot be combined
-ai switch is not supported for this command
Cannot use absolute pathnames for this command
Archive name cannot by empty
Cannot find archive name
Unsupported -spf:
Unsupported command:
The command must be spcified
There is no second file name for rename pair:
Unsupported rename command:
Incorrect wildcard type marker
Too short switch
Unsupported Map data size
Map data error
Unsupported Map data
MapViewOfFile error
Can not open mapping
Incorrect volume size:
incorrect update switch command
Unsupported charset:
Can not delete output folder
Can not delete output file
Can not rename existing file
Can not create file with auto name
Can not open output file
Can not create symbolic link
Internal error for symbolic link file
Can not create hard link
Incorrect path
Dangerous link path was ignored
BLAKE2sp
CRC32:8
CRC32:4
CRC32:1
AES256CBC:2
AES256CBC:1
Delta:4
PPMD:x5
PPMD:x1
BZip2:x7
BZip2:x5:mt2
BZip2:x5
BZip2:x1
Deflate64:x5
Deflate:x7
Deflate:x5
Deflate:x1
LZMA:x5:mt2
LZMA:x5:mt1
LZMA:x1
Rating
Method
Decompressing
Compressing
usage:
Benchmark threads:
Dictionary reduced to:
CPU hardware threads:
size:
CPU Freq:
file size =
MB, #
?
can't decompress folder
there is no such archive
Can not create output directory:
Can't create hasher
Scanning error
RHS8DAdNTsLCOnE_
0pc3d5b7-9lBsDEFt
TrustedInstaller
DeniedRODCPasswordReplicationGroup
AllowedRODCPasswordReplicationGroup
RASandIASServers
GroupPolicyCreatorOwners
EnterpriseAdmins
SchemaAdmins
CertPublishers
DomainControllers
DomainComputers
DomainUsers
DomainAdmins
KRBTGT
Administrator
CertificateServiceDCOMAccess
EventLogReaders
CryptographicOperators
DistributedCOMUsers
TerminalServerLicenseServers
WindowsAuthorizationAccessGroup
PerformanceLogUsers
PerformanceMonitorUsers
IncomingForestTrustBuilders
NetworkConfigurationOperators
RemoteDesktopUsers
PreWindows2000CompatibleAccess
Backup Operators
Replicators
BackupOperators
PrintOperators
ServerOperators
AccountOperators
PowerUsers
Guests
Administrators
Domains
NetworkService
LocalService
LocalSystem
IUserIIS
ThisOrganization
RemoteInteractiveLogon
TerminalServer
RestrictedCode
AuthenticatedUsers
EnterpriseDC
Anonymous
Service
Interactive
Network
Dialup
UNSUPPORTED
Junction:
update operations are not supported for this archive
GetFullPathName error
7-Zip cannot find MAPISendMail function
MAPISendMail
cannot load Mapi32.dll
cannot move the file
cannot delete the file
stdout
The file already exists
There is some data block after the end of the archive
Updating for multivolume archives is not implemented
can't find archive
type of archive is not specified
cannot find specified SFX module
SFX file is not specified
There are unclosed input file:
cannot open SFX module
cannot open file
Internal file name collision (file on disk, file in archive):
Duplicate filename on disk:
Duplicate filename in archive:
Internal collision in update action set
SetConsoleCtrlHandler fails
CRC Error
Unsupported feature
Unsupported method
There are data after the end of archive
Unexpected end of archive
Unconfirmed start of archive
Unavailable start of archive
Headers Error in encrypted archive. Wrong password?
Wrong password
Headers Error
Is not archive
There are some data after the end of the payload data
Unexpected end of data
Unavailable data
Data Error in encrypted file. Wrong password?
Data Error
CRC Failed in encrypted file. Wrong password?
CRC Failed
Unsupported Method
No files to process
Everything is Ok
Testing archive:
Extracting archive:
Can't allocate required memory!
ERROR:
alternate streams
folders
folder
with the file from archive:
Would you like to replace the existing file:
Modified:
Size:
Path:
] archive
The file is open
Can not open the file
The archive is open with offset
Can't allocate required memory
WARNINGS:
ERRORS:
Sub items Errors:
for streams and names:
for data and names:
for data:
Scanning
Alternate streams size
Alternate streams
Folders
Compressed
Date Time
streams
Listing archive:
Copy Link
Out Name
Read-only
Stream ID
Hard Link
Embedded Stub Size
Tail Size
Zeros Tail Is Allowed
Physical Size can't be detected
Is not archive type
Code Page
Short Comment
SubType
Volume Index
Total Physical Size
Unpack Size
Virtual Size
Alternate Streams Size
Alternate Streams
Streams
Warning
Warnings
Errors
Error Type
SHA-256
Deleted
Alternate Stream
NT Security
Provider
Local Name
Cluster Size
Free Space
Total Size
Symbolic Link
Sector Size
Creator Application
Short Name
Virtual Address
Characteristics
Checksum
Headers Size
Physical Size
Big-endian
64-bit
Time Type
Volumes
Blocks
Offset
Multivolume
Volume
Version
Path Prefix
Position
Comment
File System
Host OS
Dictionary Size
Split After
Split Before
Encrypted
Commented
Modified
Accessed
Created
Attributes
Packed Size
Folder
Extension
Warning: The archive is open with offset
: Can not open the file as [
WARNING
Can not open the file as archive
Can not open encrypted archive. Wrong password?
Total archives size
Archives
----------
opening :
is not a file
Unsupported archive type
7-Zip cannot find the code that works with archives.
Incorrect command line
Usage: 7za <command> [<switches>...] <archive_name> [<file_names>...]
[<@listfiles...>]
<Commands>
a : Add files to archive
b : Benchmark
d : Delete files from archive
e : Extract files from archive (without using directory names)
h : Calculate hash values for files
i : Show information about supported formats
l : List contents of archive
rn : Rename files in archive
t : Test integrity of archive
u : Update files to archive
x : eXtract files with full paths
<Switches>
-- : Stop switches parsing
-ai[r[-|0]]{@listfile|!wildcard} : Include archives
-ax[r[-|0]]{@listfile|!wildcard} : eXclude archives
-ao{a|s|t|u} : set Overwrite mode
-an : disable archive_name field
-bb[0-3] : set output log level
-bd : disable progress indicator
-bs{o|e|p}{0|1|2} : set output stream for output/error/progress line
-bt : show execution time statistics
-i[r[-|0]]{@listfile|!wildcard} : Include filenames
-m{Parameters} : set compression Method
-mmt[N] : set number of CPU threads
-o{Directory} : set Output directory
-p{Password} : set Password
-r[-|0] : Recurse subdirectories
-sa{a|e|s} : set Archive name mode
-scc{UTF-8|WIN|DOS} : set charset for for console input/output
-scs{UTF-8|UTF-16LE|UTF-16BE|WIN|DOS|{id}} : set charset for list files
-scrc[CRC32|CRC64|SHA1|SHA256|*] : set hash function for x, e, h commands
-sdel : delete files after compression
-seml[.] : send archive by email
-sfx[{name}] : Create SFX archive
-si[{name}] : read data from stdin
-slp : set Large Pages mode
-slt : show technical information for l (List) command
-snh : store hard links as links
-snl : store symbolic links as links
-sni : store NT security information
-sns[-] : store NTFS alternate streams
-so : write data to stdout
-spd : disable wildcard matching for file names
-spe : eliminate duplication of root folder for extract command
-spf : use fully qualified file paths
-ssc[-] : set sensitive case mode
-ssw : compress shared files
-stl : set archive timestamp from the most recently modified file
-stm{HexMask} : set CPU thread affinity mask (hexadecimal number)
-stx{Type} : exclude archive type
-t{Type} : Set type of archive
-u[-][p#][q#][r#][x#][y#][z#][!newArchiveName] : Update options
-v{Size}[b|k|m|g] : Create volumes
-w[{path}] : assign Work directory. Empty path means a temporary directory
-x[r[-|0]]{@listfile|!wildcard} : eXclude filenames
-y : assume Yes on all queries
7-Zip (a) [32] 15.14 : Copyright (c) 1999-2015 Igor Pavlov : 2015-12-31
Errors:
Compressed:
Size:
Alternate Streams Size:
Alternate Streams:
Files:
Folders:
Open Errors:
Warnings:
Archives with Warnings:
Archives with Errors:
Can't open as archive:
OK archives:
Archives:
ERROR:
Scanning the drive for archives:
Decoding ERROR
Hashers:
Codecs:
||
offset=
KSNFMGOPBELH
Formats:
WARNING: Cannot open
WARNINGS for files:
Scan WARNINGS:
Scan WARNINGS for files and folders:
----------------
Physical
Global
Virtual
Process
User
Kernel
GetProcessMemoryInfo
K32GetProcessMemoryInfo
Time =
Memory =
Internal Error #
Unknown Error
ERROR: Can't allocate required memory!
Break signaled
Command Line Error:
System ERROR:
Unsupported Windows version
StdOut
WARNING:
Scanning the drive:
Updating archive:
Creating archive:
Open archive:
Archive size:
Files read from disk
Write SFX:
Removing
: Removing files after including to archive
Items to compress
Reading
Header creation
(Y)es / (N)o / (A)lways / (S)kip all / A(u)to rename all / (Q)uit?
Enter password (will not be echoed):
LZMA2:
7z xz lzma ace arc arj bz tbz bz2 tbz2 cab deb gz tgz ha lha lzh lzo lzx pak rar rpm sit zoo zip jar ear war msi 3gp avi mov mpeg mpg mpe wmv aac ape fla flac la mp3 m4a mp4 ofr ogg pac ra rm rka shn swa tta wv wma wav swf chm hxi hxs gif jpeg jpg jp2 png tiff bmp ico psd psp awg ps eps cgm dxf svg vrml wmf emf ai md cad dwg pps key sxi max 3ds iso bin nrg mdf img pdi tar cpio xpi vfd vhd vud vmc vsv vmdk dsk nvram vmem vmsd vmsn vmss vmtm inl inc idl acf asa h hpp hxx c cpp cxx m mm go swift rc java cs rs pas bas vb cls ctl frm dlg def f77 f f90 f95 asm s sql manifest dep mak clw csproj vcproj sln dsp dsw class bat cmd bash sh xml xsd xsl xslt hxk hxc htm html xhtml xht mht mhtml htw asp aspx css cgi jsp shtml awk sed hta js json php php3 php4 php5 phptml pl pm py pyo rb tcl ts vbs text txt tex ans asc srt reg ini doc docx mcw dot rtf hlp xls xlr xlt xlw ppt pdf sxc sxd sxi sxg sxw stc sti stw stm odt ott odg otg odp otp ods ots odf abw afp cwk lwp wpd wps wpt wrf wri abf afm bdf fon mgf otf pcf pfa snf tt
Quantum
Can't open volume:
[ERROR-LONG-PATH]
00@LongLink
././@LongLink
tar ova
Twofish
Blowfish
pkAES-256
pkAES-192
pkAES-128
3DES-112
3DES-168
WavPack
StrongCrypto
ZipCrypto
PKImploding
Deflate64
Deflate
Tokenizing
Implode
Reduced4
Reduced3
Reduced2
Reduced1
Shrink
deflate64
deflate
PK00PK
zip zipx jar xpi odt ods docx xlsx epub
(08@P`p
(08@P`p
(08@P`p
(08@P`p
AES256CBC
GetLargePageMinimum
GenuineIntelAuthenticAMDCentaurHauls
OLEAUT32.dll
CharUpperW
CharPrevExA
USER32.dll
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
SetFileSecurityW
GetFileSecurityW
ADVAPI32.dll
__CxxFrameHandler
memcpy
_purecall
memcmp
malloc
_CxxThrowException
fclose
fflush
memmove
strcmp
wcsstr
wcscmp
memset
strlen
realloc
_beginthreadex
_except_handler3
MSVCRT.dll
?terminate@@YAXXZ
??1type_info@@UAE@XZ
__dllonexit
_onexit
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
GetLastError
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
LoadLibraryW
GetModuleFileNameW
LocalFree
FormatMessageW
CloseHandle
SetFileTime
CreateFileW
SetFileAttributesW
RemoveDirectoryW
MoveFileW
GetProcAddress
GetModuleHandleW
CreateDirectoryW
DeleteFileW
SetLastError
SetCurrentDirectoryW
GetCurrentDirectoryW
GetTempPathW
GetCurrentProcessId
GetTickCount
GetCurrentThreadId
FindClose
FindFirstFileW
FindNextFileW
GetModuleHandleA
GetFileAttributesW
GetLogicalDriveStringsW
GetFileSize
SetFilePointer
DeviceIoControl
ReadFile
WriteFile
SetEndOfFile
GetFileInformationByHandle
GetDiskFreeSpaceW
GetCurrentProcess
CompareFileTime
FileTimeToSystemTime
GetSystemInfo
GlobalMemoryStatus
DosDateTimeToFileTime
FileTimeToDosDateTime
GetSystemTimeAsFileTime
GetStdHandle
LeaveCriticalSection
EnterCriticalSection
WaitForMultipleObjects
SetProcessAffinityMask
UnmapViewOfFile
MapViewOfFile
OpenFileMappingW
OpenEventW
GetProcessTimes
DeleteCriticalSection
FileTimeToLocalFileTime
SetConsoleCtrlHandler
GetConsoleScreenBufferInfo
GetCommandLineW
SetFileApisToOEM
GetVersionExW
GetConsoleMode
SetConsoleMode
LocalFileTimeToFileTime
QueryPerformanceCounter
VirtualAlloc
VirtualFree
WaitForSingleObject
CreateEventW
SetEvent
ResetEvent
CreateSemaphoreW
ReleaseSemaphore
InitializeCriticalSection
KERNEL32.dll
_isatty
_fileno
.?AVCNewException@@
.?AUCSystemException@@
.?AUCInBufferException@@
.?AUCOutBufferException@@
.?AVUString@@
.?AUCArcCmdLineException@@
.?AW4EEnum@NExitCode@@
.?AVAString@@
.?AVCCtrlBreakException@NConsoleClose@@
.?AVCInArchiveException@N7z@NArchive@@
.?AVCUnsupportedFeatureException@N7z@NArchive@@
.?AUCUnexpectedEndException@NCab@NArchive@@
.?AVCUnexpectEnd@NZip@NArchive@@
.?AVCException@NDecoder@NImplode@NCompress@@
.?AVtype_info@@
E:\Archives\Documents\krnl_bootstrapper\obj\Release\net472\krnl_bootstrapper.pdb
SHA256
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
PL1"0
Unizeto Technologies S.A.1'0%
Certum Certification Authority1"0
Certum Trusted Network CA0
180911092647Z
230911092647Z0|1
Texas1
Houston1
SSL Corporation110/
(SSL.com Root Certification Authority RSA0
%http://sslcom.crl.certum.pl/ctnca.crl0s
http://sslcom.ocsp-certum.com08
,http://sslcom.repository.certum.pl/ctnca.cer0:
https://www.certum.pl/CPS0
hAHQnz
Texas1
Houston1
SSL Corp1402
+SSL.com Code Signing Intermediate CA RSA R10
220719202413Z
240718202413Z0x1
British Columbia1
North Vancouver1
1305119 B.C. Ltd1
1305119 B.C. Ltd0
P#(`T&k
F0:,gr,V
l<k{Cli
<http://cert.ssl.com/SSLcom-SubCA-CodeSigning-RSA-4096-R1.cer0Q
https://www.ssl.com/repository0
<http://crls.ssl.com/SSLcom-SubCA-CodeSigning-RSA-4096-R1.crl0
Texas1
Houston1
SSL Corporation110/
(SSL.com Root Certification Authority RSA0
160624204430Z
310624204430Z0x1
Texas1
Houston1
SSL Corp1402
+SSL.com Code Signing Intermediate CA RSA R10
J:o207d
O51F~t
L='z"?
http://ocsps.ssl.com0
*http://crls.ssl.com/ssl.com-rsa-RootCA.crl0
Texas1
Houston1
SSL Corp1402
+SSL.com Code Signing Intermediate CA RSA R1
20220920144337Z0
PL1"0
Unizeto Technologies S.A.1'0%
Certum Certification Authority1"0
Certum Trusted Network CA0
180911092647Z
230911092647Z0|1
Texas1
Houston1
SSL Corporation110/
(SSL.com Root Certification Authority RSA0
%http://sslcom.crl.certum.pl/ctnca.crl0s
http://sslcom.ocsp-certum.com08
,http://sslcom.repository.certum.pl/ctnca.cer0:
https://www.certum.pl/CPS0
hAHQnz
Texas1
Houston1
SSL Corp1/0-
&SSL.com Timestamping Issuing RSA CA R10
210910163520Z
310908163519Z0k1
Texas1
Houston1
SSL Corp1'0%
SSL.com Timestamping Unit 20210
5http://cert.ssl.com/SSL.com-timeStamping-I-RSA-R1.cer0
http://ocsps.ssl.com0G
https://www.ssl.com/repository0
5http://crls.ssl.com/SSL.com-timeStamping-I-RSA-R1.crl0
Texas1
Houston1
SSL Corporation110/
(SSL.com Root Certification Authority RSA0
191113185005Z
341112185005Z0s1
Texas1
Houston1
SSL Corp1/0-
&SSL.com Timestamping Issuing RSA CA R10
AM/pn*f
jWZX:<
Ehttp://www.ssl.com/repository/SSLcomRootCertificationAuthorityRSA.crt0
http://ocsps.ssl.com0?
https://www.ssl.com/repository0
*http://crls.ssl.com/ssl.com-rsa-RootCA.crl0
Texas1
Houston1
SSL Corp1/0-
&SSL.com Timestamping Issuing RSA CA R1
220920144337Z0+
Texas1
Houston1
SSL Corp1/0-
&SSL.com Timestamping Issuing RSA CA R1
e;CA5
&M^x|C
MainWindow.xaml
krnl_bootstrapper
will be closed to ensure the bootstrapper successfully works.
KRNL Bootstrapper
krnl_bootstrapper.bak
krnl_console_bootstrapper.exe
krnl_bootstrapper.exe
Checking if KRNL is up-to-date...
Checking for bootstrapper update...
cloudflare
Updating...
KrnlAPI
Unable to fetch checksums of KRNL files...
krnlss
RobloxPlayerBeta
krnlss.exe
Unable to run krnlss.exe, make sure your anti-virus is turned off or ensure that the krnl folder is added to the exclusion folder to avoid this from happening.
KRNL Bootstrapper - Exception
7z.NET.dll
7za.exe
/krnl_bootstrapper;component/mainwindow.xaml
Completed Files: {0}/{1}
injector.dll
https://krnl.place
https://cdn.krnl.place
https://k-storage.com
/invite
Krnl Console Bootstrapper - Rewrite Edition
/version.txt
/bootstrapper/files
/krnl_console_bootstrapper.exe
/krnl_bootstrapper.exe
/bootstrapperChecksum.txt
/hashes.txt
/bootstrapper/injector.dll
/bootstrapper/injector.checksum
7z.NET
SevenZipNET.SevenZipExtractor
ExtractAll
Properties.Resources
_7z_NET
Error: Cloudflare page...
restrict
Error;
Your ISP/Router may be blocking the site...
Try using a vpn!
patched
KRNL is currently patched.
Please wait for an update!
User-Agent
krnl_bootstrapper - Krnl
Elapsed Time: {0:D2}:{1:D2}:{2:D2}
Unable to fetch content from:
Make sure your internet isn't blocking the site.
Try using a VPN as an alternative solution!
KRNL Bootstrapper - Request Error
mainwindow.baml
MSBAML
_7z_NET
\7za.exe
(\d{1,3})%
filename
File could not be found.
Everything is Ok
^(\d{2,4}-\d{2,4}-\d{2,4})\s+(\d{2}:\d{2}:\d{2})\s+(.{5})\s+(\d+)\s+(\d+)?\s+(.+)
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
FileDescription
7z.NET
FileVersion
1.0.3.0
InternalName
7z.NET.dll
LegalCopyright
LegalTrademarks
OriginalFilename
7z.NET.dll
ProductName
7z.NET
ProductVersion
1.0.3.0
Assembly Version
1.0.3.0
#kernel32.dll
:$DATA
\\?\UNC\
PhysicalDrive
pqrxyzw
SeSecurityPrivilege
@[DELETED]\
Unknown warning
Unknown error
Mapi32.dll
tWARNING:
[Content]
7zCon.sfx
SeLockMemoryPrivilege
SeCreateSymbolicLinkPrivilege
SeRestorePrivilege
Error:
Psapi.dll
zipcrypto
kernel32.dll
VS_VERSION_INFO
StringFileInfo
040904b0
CompanyName
Igor Pavlov
FileDescription
7-Zip Standalone Console
FileVersion
InternalName
LegalCopyright
Copyright (c) 1999-2015 Igor Pavlov
OriginalFilename
7za.exe
ProductName
ProductVersion
VarFileInfo
Translation
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
FileDescription
krnl_bootstrapper
FileVersion
1.0.0.0
InternalName
krnl_bootstrapper.exe
LegalCopyright
Copyright
2022
LegalTrademarks
OriginalFilename
krnl_bootstrapper.exe
ProductName
krnl_bootstrapper
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic Clean
MicroWorld-eScan Clean
CMC Clean
CAT-QuickHeal Clean
ALYac Clean
Malwarebytes Clean
Zillya Clean
Sangfor Clean
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Clean
Cyren Clean
Symantec Clean
tehtris Clean
ESET-NOD32 Clean
APEX Clean
Paloalto Clean
ClamAV Clean
Kaspersky Clean
Alibaba Clean
NANO-Antivirus Clean
SUPERAntiSpyware Clean
Tencent Clean
Ad-Aware Clean
Sophos Clean
Comodo Clean
F-Secure Clean
DrWeb Clean
VIPRE Clean
TrendMicro Clean
McAfee-GW-Edition Artemis!Trojan
Trapmine Clean
FireEye Clean
Emsisoft Clean
SentinelOne Clean
Jiangmin Clean
Webroot W32.Trojan.Gen
Google Clean
Avira Clean
MAX Clean
Antiy-AVL Clean
Kingsoft Clean
Microsoft Clean
Gridinsoft Ransom.Win32.Wacatac.sa
Arcabit Clean
ViRobot Clean
ZoneAlarm Clean
GData Clean
Cynet Clean
AhnLab-V3 Unwanted/Win.GameHack.C5112324
Acronis Clean
McAfee Artemis!F14153BBD95F
TACHYON Clean
VBA32 Clean
Cylance Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Clean
Yandex Clean
Ikarus Clean
MaxSecure Clean
Fortinet Clean
BitDefenderTheta Clean
AVG Win32:DangerousSig [Trj]
Avast Win32:DangerousSig [Trj]
CrowdStrike Clean
No IRMA results available.