Static | ZeroBOX

PE Compile Time

2049-05-15 06:39:57

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00000d04 0x00000e00 7.07944455797
.|h) 0x00004000 0x000006da 0x00000800 7.01488207011
.hjs 0x00006000 0x0002e9a8 0x0002ea00 6.86831087001
.rsrc 0x00036000 0x00046db8 0x00046e00 3.849668795

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00039c78 0x00042028 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x00039c78 0x00042028 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x00039c78 0x00042028 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x00039c78 0x00042028 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x0007bca0 0x0000003e LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0007bce0 0x00000390 LANG_GERMAN SUBLANG_GERMAN data
RT_MANIFEST 0x0007c070 0x00000d48 LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

!This program cannot be run in DOS mode.
`.rsrc
v4.0.30319
#Strings
423POM{,
1(3W_M;'`d
MPvJ7)
,0}LX\
<?xml version="1.0" encoding="utf-8"?>
<assembly manifestVersion="1.0" xmlns="urn:schemas-microsoft-com:asm.v1">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<!-- UAC Manifest Options
If you want to change the Windows User Account Control level replace the
requestedExecutionLevel node with one of the following.
<requestedExecutionLevel level="asInvoker" uiAccess="false" />
<requestedExecutionLevel level="requireAdministrator" uiAccess="false" />
<requestedExecutionLevel level="highestAvailable" uiAccess="false" />
Specifying requestedExecutionLevel element will disable file and registry virtualization.
Remove this element if your application requires this virtualization for backwards
compatibility.
-->
<requestedExecutionLevel level="asInvoker" uiAccess="false" />
</requestedPrivileges>
</security>
</trustInfo>
<compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
<application>
<!-- A list of the Windows versions that this application has been tested on
and is designed to work with. Uncomment the appropriate elements
and Windows will automatically select the most compatible environment. -->
<!-- Windows Vista -->
<!--<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}" />-->
<!-- Windows 7 -->
<!--<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}" />-->
<!-- Windows 8 -->
<!--<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}" />-->
<!-- Windows 8.1 -->
<!--<supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}" />-->
<!-- Windows 10 -->
<!--<supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}" />-->
</application>
</compatibility>
<!-- Indicates that the application is DPI-aware and will not be automatically scaled by Windows at higher
DPIs. Windows Presentation Foundation (WPF) applications are automatically DPI-aware and do not need
to opt in. Windows Forms applications targeting .NET Framework 4.6 that opt into this setting, should
also set the 'EnableWindowsFormsHighDpiAutoResizing' setting to 'true' in their app.config.
Makes the application long-path aware. See https://docs.microsoft.com/windows/win32/fileio/maximum-file-path-limitation -->
<!--
<application xmlns="urn:schemas-microsoft-com:asm.v3">
<windowsSettings>
<dpiAware xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
<longPathAware xmlns="http://schemas.microsoft.com/SMI/2016/WindowsSettings">true</longPathAware>
</windowsSettings>
</application>
<!-- Enable themes for Windows common controls and dialogs (Windows XP and later) -->
<!--
<dependency>
<dependentAssembly>
<assemblyIdentity
type="win32"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
processorArchitecture="*"
publicKeyToken="6595b64144ccf1df"
language="*"
/>
</dependentAssembly>
</dependency>
</assembly>
3X?O;/
Aw$t;w
p!C!u/H
UT6(btG
h#o/eohS
uSWH7D
;=bOo'
kJ=@b~Zs,!
yMG&5n
J2iO:g
`N|m}ri
IV{TLN
T,'Meym
AIBRTJ
6Ci`@4Y[(
rn?eH9
yXf(MG5)y
N8_Fj8
nHA&{Y
Z_bX
_bj?
_bY*
-EF8Z
E2Gw`
>ExrZ
AF\O^
?x~r`
flHe_
wMXE`
g]8M^
O.w{_
}r)@Y
f?K`\
G[wm_
Ny%6_
jy9&\
$&R@Z9
b5!4a
(5-l^9
MM}]^
9/[a\
t4|Aa
UP[[a
kb!Ba9
-b+^96
v2YcY9
q/~5Z
,MGU`
u=N]X
u2IHX
)fF/`
-dP=`
X l6[G
lqedZ
l8{fX
yn}vZ
;)b`Y
=0@wa
oY)TZ
Jh?cZ
[p[%a
X au5e
30DWZ
a iWx5
O=xV`
iS1|a
` 4alT
R!8Ja
;d4a
'zfKa
Tq- \
m}!TD*
a* h`R\
<\"";
sv/a*
!Q_oZ
4/7'Z9
p8A2a
TS-NY
Qm0B\
A`Qr_
Vb:_9;
O7qU_
c=I a
|v[3^
35t"a
;mH*\
ck,~_9.
6|)zX
A!EnX
so|cZ
wqwp^9
{HXrY
KXwlX
Z^b:X
o^Qn^9
a0DQ\
>&\?X9
^ !K^
z}c;
a,B9X
4/kQa
(xo.A
" T)1|
2nRj`
h0"*a
glP{Z
j@\-X
P4|rD
s85nX
V$+:\
0UKhX
#z0kB
*:s_\
&\8a
pXs8_
wa LR&X
;a'g\:.
H6~ca
o03~X
k`L!a
H_a^9c
2%2_X
P2=$Y
Ip3vZ9
Y!y^
|6BeC
/jXW_
ei3#`
vk3#a
a T0 y
| ](Y
rH1Ha
hvL+;
e~na^9N
zwIqZ
"mm0_
P=pZ`
'v2x^
9*hF_
OQ{`^
a:RL_
T!@l`
cvY2C
I,2`
eio?a
} mu\:
zPYF_
"6X5D
Fyf+Y
<A%X
?SUR^
}/fa9[
*r'XY
f7Y1Y
FaL0_
8=KbY
\|FCA
Y_cX*
a=]Z
_ WSva
2+Ja9
G_xYY
$a [sB
a DBpL
X Qv(c
X wsTA
])/QB
)"WaX}{
d)N;a
Nr<o`
Yk;wZ
%>baa
9q`^C
cIF0`
xZ~fa
`<Ao`
XX EGf%
n{Raa
ngofX
Qe8h;w
O^U=X
`XiY` $
]n'X9
>EvJ_
nQQZ98
* aMv
k7$,C
Vm+{Y
* QGv9
* 2y,t
*lPz^
_a YhMb
XM3,`
5GH/a
lIv=a
?T}r^
OK9x\
;h1-Y
a_c Uw
q>MbY_bs2
4UqMA
kXg;Z
qgA!Z
% $^6W
5=n6`
% N}v>
ni3 _
Zd3^^
iBXn_ Yy
a *z7>
V;XuX
f ha5s
@a` fw
5scm;
` bq)3
p;N Y
wlL=X
VG0,^
3~up`
" sa9i
&.#$Y
"1/ja
0[_Z
|{eRY
GA~HB
+=KP\
_ l^4I
l^4Ia
AxQ!\9
@dhHY wa
NWX 4XJ<
W0Ht`
U0HtY`
L7YX_
Zwy(a
.dxT_
NBw1X Rv
Y\^Y9Y
J=98A
!}Mr_
Dp:pZ
{zV(a
9a}4a
~Xf4B
XIEiX
* U763
N37Ta
A_HlY
dsx;\
e;Os_
X D_*R
rv!z^
R%B"\
^ZQoY
Y l-Y
Gt4SX
X$OI_
^F<3^
F"L&Z
dj8<a
yOo2;
a#o{a
tgx _
C;|TX
u@:_9'
Z@r%^
=U+vZ
a VXSZ
v4.0.30319
#Strings
Emit.exe
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
RuntimeCompatibilityAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
AssemblyTitleAttribute
System.Reflection
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
Object
System
Assembly
MemoryStream
System.IO
BufferedStream
Stream
StreamReader
Process
Exception
ProcessModule
FileInfo
String
BindingFlags
Binder
GZipStream
System.IO.Compression
CompressionMode
IDisposable
WebRequest
System.Net
WebResponse
Convert
InvalidCastException
SuppressIldasmAttribute
ValueType
Dictionary`2
System.Collections.Generic
GCHandle
CallingConvention
MulticastDelegate
IAsyncResult
AsyncCallback
List`1
PlatformID
Enumerator
UnmanagedMemoryStream
Module
MethodBase
FieldInfo
MethodInfo
ParameterInfo
DynamicMethod
System.Reflection.Emit
DynamicILInfo
MemberInfo
ILGenerator
KeyValuePair`2
TypeCode
RuntimeMethodHandle
Stack`1
UInt32
ArgumentException
InvalidDataException
Debugger
IntPtr
BitConverter
RuntimeTypeHandle
Marshal
AssemblyName
Environment
Thread
System.Threading
Encoding
System.Text
UIntPtr
Delegate
GCHandleType
OperatingSystem
Boolean
Monitor
FileAccess
Random
RuntimeFieldHandle
InvalidOperationException
Nullable
StringComparison
Activator
OpCodes
OpCode
CallingConventions
ParameterModifier
NullReferenceException
CultureInfo
System.Globalization
ConstructorInfo
FormatterServices
System.Runtime.Serialization
PlatformNotSupportedException
BadImageFormatException
Pointer
UInt16
UInt64
Single
Double
COMException
OverflowException
<Module>
06F97586
5A822CCD
355E0BE3
4C8E32FC
68643475
560F45B0
4ECB62A1
659B1133
47E45456
091D05C1
17C20DE0
33F05790
52E646C3
75BE0FF7
3E7C4FAA
015435D7
0F31100E
66D64ADC
06612072
67644963
27F13BB4
6042219A
1C750150
2C14415D
647C6555
20E858F6
217F23A4
48DA4531
2DD929E7
22BA66DA
1F3725A0
46AE2124
23220110
3C3D217B
141C696A
1CA20A67
405D6C9F
546F1C57
2AFE165A
198B2776
182813DD
2A9179EA
45163AB5
181F585D
248E4448
79367E7C
414666A2
7FA45940
25331512
379940CC
313C614B
51C4650B
52A4226E
0BED06C3
356923C5
4B976CC3
5D303EE1
7A2A651D
1A1F4633
0922370B
510E51A7
30520E29
2AA76632
55544F71
5C40204D
77393330
45741A83
7DAA3FE2
015E723B
4FB84E29
1A26517D
09510A04
060D7767
7F0429C8
37AA1162
75780CBA
3B73597A
6E983E46
15022B7A
7878072E
708004A3
4EF327A5
213C2108
2B6941A3
6FDE1C5A
6A80716E
57AD5E02
003B22F2
0BB9225B
05876301
139F6A1F
56616957
6D341445
7D60554F
3DEB479C
48F72361
2A722B33
1D0C3D1D
4237086B
674025FB
48DA601D
05C1356F
182F485C
38193EC0
65204F31
value__
14E025E4
4395537B
174D25F6
0D8B764A
0F06779A
626F3D6F
7E641858
7BF624D7
36730692
4A4A5A18
744179BA
1B66564A
63556AC2
51C34A18
297D00D3
6E341016
5FCD3641
710E1956
1CE449BF
568D0836
74714FCF
32736D7B
0FF6787D
2EF25BA4
44CC5D4D
72CC4478
4B686B72
32B954E2
7BDC3E40
720942FE
33A07DE4
368A4274
48931653
33AC1305
2D3D5A80
30E35D63
2A5767D2
2F4D5246
518D5DD5
12953FBC
0D823E30
511710C0
731508D7
6F456B0F
37E36881
4A495F37
720C035D
75EC5EF1
053B4400
31B66DB0
60E02EA2
39563F7A
73C0168B
744539F7
78B047C8
48A70BC8
009D7922
15724E19
5DD01A51
17D1647A
5470526C
3FCB0EEA
344942A4
38206235
3FCB6132
25731A81
0456008E
60AE7C23
07B556E2
30A336B7
6EE819BE
46EF7E6F
0226020D
04244FAB
32224C48
472710CA
028E08E9
4BD60640
7DDD5123
5CEE4CE9
164E33D0
5D2C4E9E
18266EAB
6BB36505
113C47BF
27AE1EAD
51BB1B1F
57365A5A
6A2470D8
75762C9D
4A922F24
6C0D43A8
67423CE0
7BB33D61
06522840
182023B5
1AC925C2
3B2A032F
50D87B60
732D4FC9
2F602C0A
30AF0C02
72B37753
17446630
049F016B
55B04018
35A9374D
494C54BC
1B964339
70AB7074
39302565
717C6F40
534644F0
35B2755D
16F50D17
63E31616
75266AAB
36EE5CDD
57583DC2
78E16C9A
11A013AE
251A2943
35ED3D2B
75AC1FAD
2C9114DC
60041FA2
35FD09F9
44CC3C33
39CC4342
570F264F
07046E37
7E9E1595
69980E8A
39B33367
393161D5
41D53C40
452D2B89
77FB4B47
41E87D26
5BF40424
1B3B4EB2
13060F12
50437B64
41D61B35
3C6476A0
3D875B2F
718D4D28
58262FEE
07BD4690
4C4675C7
05C63AF2
0BE727C9
475170E4
769D4D4B
042217A7
3AEE65C8
5C9D31A1
66FB46ED
0F89030D
6C6320EF
3D1558F2
1B641D22
5B183C51
59434AC8
3E9D65A3
15EE4E26
5E9F0483
44E105DE
34112FA7
5D461A78
5B221114
25602C42
59BE2292
4D29135A
2F580E5E
1C3A6609
11E70820
36EC3952
7C2E321C
3EBD4FCB
714162AC
51F52AAC
19455DEE
2E893126
1B7757BA
7C3F61F6
597051D7
02134339
6FA72A6E
4AD90482
1F376EBE
7D25072A
04E24612
6A6840E7
415608F0
3F3F4A9D
5EA8084A
018A7D05
37D016EC
45942656
0BCF1A56
6F5E761B
79546E8C
02AE5995
0EEA24FA
540F78B0
241F0909
4B197F35
4DE652EF
19F20641
723B7CCB
0E1531F6
3F056DF1
5E525770
08407082
1A163EFB
515B2541
1DED5683
05DF69A1
3145684C
25526423
317529E3
665B2ADE
6DFE3754
1527385F
1A104E9D
310A22B4
77505F63
0D6A48C4
1DD842E4
79D969E2
057F302D
35815BA1
5FB14D20
524C478B
51F54AF5
532B6D1A
230D63A3
717E3448
554E6ABB
62E52B45
70FD6EFE
446B5F03
63122E15
0F670C8C
393B7083
55A17C9A
5F2461D7
08B63D61
40F63926
50BE2EB0
771E45B8
362B1438
5F4F3402
22F4222B
46CA1ED4
7EF4380A
09DD40D4
6B8D3DB8
4CA95A2B
629056D2
31291E7E
3C616043
2E703F20
61566C12
6D326586
2A612F7F
4D8631FB
34EF174F
79EA1294
2E0F7664
2B880667
58D70290
03B820F8
540313AB
1EC561F4
62E058E3
43F43522
3D697854
56C22E96
2BAF4CD9
6D6E5728
707E3621
30B71D24
473D2F05
68E73D43
79161E18
5C1037DA
4D571480
61962652
59186F05
4EED04D8
721F0D68
21A44455
490013F6
0AA338A1
6E886B5C
3EB136F4
485C72BD
3039789D
38DE1802
164D15F6
7E504A72
64EB2D97
0D3C7B82
1A7F0BCA
6A1321EE
06AA663F
46147308
6E420001
636F4650
309A49A9
04AB5746
520351D2
6B45597C
0F9219CC
299A12EF
60242295
4C067097
06A04604
1D4E493D
197C3048
0A3B428D
23830D91
68880C6C
41D5400D
24FF668C
632F3216
1CDE243D
0C6C18AA
267F2286
464C3A1B
0D386474
18750D07
048149B2
35B7438B
5654135A
3D9416B4
50DA2B0B
37006636
3743603C
28650061
39F50FCF
70EA2650
39EA69E9
46F52064
5B534A02
7FEE76F1
2B825538
05472336
5E0652E9
1AB94C93
65187380
59D065F6
6936798F
06A93F97
640D791F
21FB60E5
629C2144
5C543EBF
329743F4
4EA521E8
7F091018
1C0151B5
203E31E4
60A25709
22E04D64
122D6B83
4A600758
353668F6
12971042
0C074D1A
74AE65BD
229D2581
733B3E10
5BF477CC
31AC5203
1AE978F2
2E0C2FD1
5B354B1F
588E3E68
31553E4C
2C9B0EC5
5AF5708A
0AD10E9D
54194D5E
5A5231DD
35F337C1
3D9B29EE
4C3B4CB5
7D975AAC
202F7592
0F14133B
7BAF6EC9
2E8B08C0
3F9F54BD
09A669D1
798D72D4
21FF462A
7C9308CD
4D2B1EA1
017F7A54
75F7315C
12321CD3
02F15641
4446178C
062B7FAE
06F409E5
1A3B336A
08346C02
10860FDC
75255D99
54BF317B
19B05702
29AA0C86
2368708E
23260EF5
0BB5341A
016A1EAF
6D322CE4
.cctor
Invoke
EndInvoke
BeginInvoke
42F91E26
6E79634A
201B2940
50583426
29A75851
746C5536
5FF54293
339A718B
31953D12
4B096D2A
26045B06
4C3E0C86
3A357DC0
39894504
669C74AD
10286D6E
44C9145E
6A8040AA
16303D53
58A1706C
7EEB6297
392D24E8
7A37519B
7E117879
33A475E4
19C428A3
2FAF0D0A
36963E76
39B75ED9
02D64C33
06D34B22
772D5FC0
2D752239
0DB50395
3BBD1475
77EC5C32
61EE15BD
553A4833
5EE11B0F
546A5411
2D280AF3
22CF422E
47BF7451
7F294724
41DB2B6D
2C854F04
18A50116
2DB6142F
012668D0
371249B7
31F70F5C
10AB6C76
755C1383
257425A3
51821D4D
0DA53BA4
06057574
18600523
02B53118
43115646
18941264
3B9A45B4
792200D6
7E361951
5C3E2CE8
2C0962FA
4A18361D
7E5B6F6F
32BC0963
37351E1E
473765A1
Dispose
63B12A4E
6DFC0E8F
1373149E
744C2AB9
7D252738
568621CA
297840AE
703E4228
2A0F1B1C
489E0D48
2A245BB2
14970F6E
43C437DD
6930298E
33DE1961
67711DA7
05472D4C
5F7F3553
6D015F28
2F08369B
4AF95C9F
3988336A
015F5C63
55A20032
5E0A0A9B
569051EB
059B6EF6
049271E1
75FC4244
5D912D71
31EA7BE3
3CBB6F1B
45B1537A
256E6DD9
09370AEA
355766AF
433C1482
01DB1484
11E06973
64B55A30
3C662483
7BE152D6
52373505
60B93C74
3B2A3E08
5A5F70B8
1D0275CF
0F5A6016
3A391981
7A844317
2DFC4922
272375F4
29765FC2
78563263
16511BF4
7FB31BB1
427A2C82
272E5111
7925755F
323C7A34
2D1220DD
73BC05D3
4A0C39B9
6B033D66
1DEC15F9
3EE63712
432118EE
628B39DA
17EC1066
72D71C15
52157098
127637D8
5D30495B
5A3529C8
6E1F1B96
28AB722C
6FD822F8
151F2C47
2D6967E9
09A64FE4
5D392DC0
488C3132
71901136
60F532D2
52596B1A
64274B47
00771FD4
67E55766
43355C8A
17323C71
5181369B
42603603
7DB24890
25212F1B
6C9B3284
737A0EB7
200E0A90
586A4BED
0A9F3186
47CC0838
10AA5FE2
277E2410
1A987EFD
13C301BD
1C5D2284
42E66A6C
36453629
4C214983
52F13398
2E4707C6
5C26759E
55BC3232
38451D11
3C514693
0558681A
ToString
7B90032B
7525027C
33967819
03440AA6
403D2C6D
306F3C68
3B7254A2
089A66CE
33CA5439
62341A1A
7DD25D9D
55D23D23
13543881
2D2C504B
1A7C3C70
43685CB0
683959AC
3A9C63A7
01E62435
2A8E6266
622A1528
2CBE3E00
69A62B97
7FAC2BE5
0B4068CC
263E50D3
38C9587B
069858D8
7FC557A6
38FD2D35
4E435EAE
4C9A7779
626242C9
53220E9B
53142BB0
4FB63A46
16221198
0D074074
27705764
1EBE713E
35835519
121C24F2
77406692
11DD6067
0EF65275
0163138D
1E9F1D65
53102648
71631D79
1DF4477F
5E5E61ED
36A83270
48A34318
60812E9E
63C94BED
0A0503E7
72B36625
0CBF14D0
4CEE27D5
70C91EA0
79F47CA2
2D064F3D
78630FC1
0AA82AA0
5DA37D09
61F56486
18C9184D
144A0268
5CBB3EE8
676059AE
75956799
25CE3E20
0D4C6492
28CF749D
23920BCB
2F463E0F
3CF9399C
25FF0E9E
0D5A618B
45384524
21782163
276076E1
4BE10A86
3D1E2371
59151583
429564FA
4EEA73EB
19E770AA
3B2F3461
2EF77B61
55906CF1
487456AA
78B95FA3
6A1359F0
36BF4D4F
2C1B6BEF
0CBB6AB2
2C274068
79B82BC2
7B271E19
7CCF593F
2CA940EC
3E90248B
6B572C6F
69A42DBB
36C00284
76B12FEE
2E5B325A
6F7E47DD
0DC8139B
6D5808B4
3E5A41E7
56B45321
21D34C82
201522AA
7A6E0E49
79D77DFA
771B134E
1F6032DA
044B1389
14304543
142341EB
674E3120
13262655
19F36CC8
0BB1476E
6EBD3D6B
47033F05
778E0F75
59A90207
7DEE4D63
6EFC0DF6
4AAA18D5
6DEB0A96
10C119E5
5AFA33EA
7F8158B8
1B8B205E
3FEE5552
7E5C3746
616351AF
2D526B87
797C020F
6C750E94
7B321791
4A3B4F9D
09485903
25093B03
47E73DF9
29F74E0E
7185401C
30D472E2
330B56C5
196A78AF
133650CB
0E025C29
693D0099
4F2B7438
26B56E83
6CB856F0
78B2055A
10080AC3
04306D3D
3B8A57F5
41B108B3
237F4E51
3C2747F7
0402531B
37134693
18464B45
7FEF6730
172035E5
6ECA61AD
58C54AE7
5A32776E
09D471FF
025641F7
0F9725E2
376C4FB9
018617B6
3F51032B
5C0C26C7
3E6F681D
508E007B
27E4734A
56AA7C88
78E1602C
62BC0964
434F2114
65A73CFE
4BB91579
79D25DAB
3E667A90
61707763
3FC54A1E
3A05512D
5C0F7B8B
092556D8
1A275B37
067F4AEC
35C56C11
471B54E0
44D30765
2DE03F8D
4C172EF5
45597BE3
0713454C
66B93BDB
6729204F
521C39AC
0E032A15
1C0F7F42
473203F8
145341EC
45155FEC
09DE2655
24FD0410
102300B5
7E8E2C83
29936548
02693F79
7B641D00
6C08078E
6E915277
4AE8685A
62220B27
66EE4145
52AD40DD
4404729C
1B1D2F6B
090338E5
32B22A9D
4DD55270
0C49106F
14DB232F
7ADE2B7D
738C4AC7
3F4F19BB
2E5F60E7
23620B66
4BEB4BD9
460A6E3B
634D6557
7CE658E6
29CB619F
6F0B4ABD
03B72CCA
4D0313AE
1C953259
4A157876
4A804311
3AC76714
40C90D09
7CA24F7E
55E25A01
0B357492
607A07F5
665D494F
6FEA6FF2
2DC32E45
63D02F29
15A5234A
26F90642
18DA416F
118542F2
0C101133
364567D0
765910F6
1F680664
52E67FB0
3E577F81
20113FE2
12DD1DD5
5FA166CD
4D8B3EBF
6C4A4BE3
715B7D60
48742C7B
389313F5
4A3E37C8
40EC6764
48C1170C
42F47114
2E994609
58B17B02
15A24FB8
17876212
4FFF433E
015B52A3
0261751C
10F93365
338560A6
65B3326F
74FF3DB6
524B288C
09371EA1
531446D6
2AB12A6A
2F534287
58914736
49EB730B
4C5E4900
653A165A
7D06788E
5E3E2F84
532206A4
22FC338D
727C3F77
6822787C
3CCE1264
61EB1AAF
71CD41E2
04434C71
10664FB6
0E2C43CF
5D487966
64603AA7
32A258EF
7F373501
7D2E7DBA
6FCC01A2
0A6E11CD
405B28DF
0C365F3F
33EE3DB0
756A49EE
29394505
14091174
24C2275D
0C6A6F56
46456094
19C6657F
2D5661FC
37F750ED
11485AB0
1A7F14AB
104E5A25
14CC70FF
79E00102
57BB5AE4
18603432
285A67BA
3DFE0637
73F2213D
18D94AC1
654555B4
1266087F
5F14386A
3E163D35
7FE46662
1B33280F
13022347
2E0B0E35
12C562A2
34512D9F
20137150
78C0522B
13265332
0A0140EC
09902926
58CF6DC5
157D3336
01592F37
72394310
43E86478
61F232B6
70C141C5
18BE3377
4B4D36F8
58E0091E
2877245D
24470569
4C5651C2
275757BD
4B0C5BCD
40EC0517
70EE0B93
4B9C1C46
75E54C65
0C3D7A58
001333ED
69A73352
39BA507B
51BB7324
7E5A3199
6FA56ADB
631A5EE5
175D1E19
1E693120
0A7424C2
12E54182
7A0D34F9
017C6350
6A2A094B
26D15BB1
5A297729
47E14BBE
568E499C
71E600D8
58023434
717C1F3E
139C7242
45025ADE
20606646
0E43326C
16054DAB
475560B2
08FC5CB2
3EC27827
07AD56AD
1EE65CC2
7D04766D
04981010
1C2C3AFD
690D0385
399A6C91
62F86510
354E6DB9
02F619F1
5A552CDA
4F2A5BCF
579349DF
22242C05
35BF442C
7108113E
6EAF44D3
3CEC5341
09D6590B
3381290E
620B30DE
42F60D29
788B3621
25192C36
79420FA9
25C021C6
544664BC
28677771
10A574C6
311A1A25
3C60574D
749639BD
1DB77827
33AB46D5
09A723EB
65E402DD
03B238A5
776A566D
0ADE4ECE
1E2661D8
38006E7B
0A267C04
113A24D4
75421379
36C30DC8
55FF25B7
4CE625FF
39B340CD
474E7910
09EA4327
79807FF5
41094DA8
10A943BC
52311BF9
5A9A187E
48663720
7E110495
60F13654
083A280A
2502020F
7375384D
469A4D66
0B5A6429
44A83996
51FA33F6
1A7357DF
4A683A11
7E377D95
4C792789
73131E74
45C7191B
32222134
0BFC3061
2EE9625D
244D4D46
3AF1595D
24447BBD
0CB413D7
0FC369B3
2DBE7B3F
58467941
140C18A4
61684327
6AB84ACC
2EA91D76
4DD82286
1E6E7A8C
7DA3593C
56493445
4CD515C8
447B1770
4E557388
5AB74380
06157FB5
66293284
213A20F0
28B77D5A
797E1D1E
1787301F
67D23176
62C142E9
2A4770D8
2A960AB9
612E5C61
058136AB
677E6A3C
3BCC2D70
0A776EBB
5C575EFE
64851BA6
0E955E86
5F6709D3
45D758A7
219000F6
39CD39E1
6ACE71BB
4849194C
24295612
24473B8A
270E6BCA
762B41FA
7FAD7D62
51495A2E
2E9F2D1C
22AA01A0
2DCC7652
7D0D31A0
3C8C590D
662D0791
370C63D4
09423D55
7CF40FC2
72CA0606
2B4622DC
398922E7
2D890CA1
38CF449A
6A2870E2
3FF90C93
0E1554D3
5B3A42CC
3BB12263
199C13BA
20F075C9
74416A81
38B8695F
3AEF3B64
3B8B53B4
29CC527F
03662BDC
0C657AB8
66E9080B
11F510F3
4FB76A63
36E55785
10205009
678F1DEB
3BFE367E
404710BD
08DC0B2D
0E9C45DD
795E3940
77DB58F4
57DD49B8
68D52C1F
445149BD
32E220E5
59746B32
7A265D6D
2D24138D
591371ED
30094CE6
5D2F7266
30794D4D
4118588F
04980861
07C5420E
1FC47F1F
5D0E5EEE
173041F7
5F6F244E
59CE5925
37091756
1F73073E
1DE94470
53361A09
3D8D36B4
7D193D91
05A403A3
6EEB0578
60163F19
386C208E
66446B7D
26B36AA2
7B913A3B
52CD5099
71213074
03A73ABD
16E103F4
672D7157
5DC74464
66B42F7F
6F5B24C0
1A955833
5E76790C
211B01A7
55493C43
5CA04ADC
64A23291
5CF22F74
586B7BC1
77FC4DC5
357329F9
55A2532C
447230A5
72EC02A3
4E473FB1
60670996
6D835EFB
3FC816F3
192B5E08
44D36881
4CBA6BF6
3D7B4272
71666BB1
654B053B
6CA4586A
080455A3
77EE4E45
37880B1A
25C40B52
18F6584D
37F17CBF
0D1761F7
2B0F2C4C
37F937FA
1B4D21FE
2BD964AE
66700E18
3B460679
2F184F47
368427A0
2545291D
08775B1B
44D27A77
7A1B6EA4
GetCurrentProcess
get_Id
get_MainModule
get_FileName
get_Length
GetTypes
get_FullName
op_Equality
InvokeMember
CopyTo
ToArray
Create
GetResponse
GetResponseStream
get_BaseStream
Substring
ToByte
ReadByte
get_IsAttached
IsLogging
ToUInt32
op_Explicit
GetTypeFromHandle
SizeOf
GetExecutingAssembly
GetName
get_Name
FailFast
ReadInt16
get_Unicode
GetString
get_Size
GetDelegateForFunctionPointer
ToPointer
get_OSVersion
get_Platform
get_UTF8
ToInt32
ToInt64
Format
get_Position
get_Module
get_Location
op_Inequality
ToUInt16
ResolveField
ResolveMethod
get_InnerException
get_Message
get_DeclaringType
get_IsStatic
CreateDelegate
GetParameters
get_ParameterType
get_ReturnType
get_IsInterface
get_IsArray
GetDynamicILInfo
SetLocalSignature
get_IsClass
get_IsPointer
get_IsByRef
get_TypeHandle
GetTokenFor
get_FieldHandle
get_MethodHandle
SetCode
set_Item
TryGetValue
ResolveMember
ResolveSignature
GetUnderlyingType
Equals
CreateInstance
IndexOf
get_Item
GetType
IsSubclassOf
get_Count
get_IsValueType
GetILGenerator
Sizeof
get_CallingConvention
GetMethod
EmitCall
get_IsConstructor
get_IsVirtual
get_IsFinal
Ldarga
ContainsKey
GetEnumerator
get_Current
get_Value
get_Key
MoveNext
EmitCalli
GetUninitializedObject
GetElementType
SetValue
GetValue
GetBaseDefinition
get_BaseType
IsAssignableFrom
AllocHGlobal
FreeHGlobal
get_ASCII
get_Chars
PtrToStringAnsi
TryParse
PtrToStructure
StructureToPtr
Concat
GetHINSTANCE
get_Assembly
ResolveType
MakePointerType
MakeArrayType
MakeByRefType
AddrOfPinnedObject
get_IsPrimitive
ToBoolean
ToSByte
ToInt16
ToChar
ToUInt64
ToSingle
ToDouble
IsInfinity
get_IsEnum
ToObject
GetTypeCode
GetFields
MemoryBarrier
get_FieldType
GetFunctionPointer
ReadInt32
ReadInt64
GetBytes
WriteByte
WriteInt16
WriteInt32
WriteInt64
CompareTo
Insert
RemoveAt
StringToHGlobalUni
518F47FD
4853299D
774F303F
258F10EC
kernel32
GetModuleHandle
mscorlib
WrapNonExceptionThrows
Torrent
BitTorrent Inc.
2020 BitTorrent, Inc. All Rights Reserved.
$ec79f1ae-e3e2-4b0d-822a-ab8dffb84cad
3.5.5.46090
.NETFramework,Version=v4.6
FrameworkDisplayName
.NET Framework 4.6
<?xml version="1.0" encoding="utf-8"?>
<assembly manifestVersion="1.0" xmlns="urn:schemas-microsoft-com:asm.v1">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<!-- UAC Manifest Options
If you want to change the Windows User Account Control level replace the
requestedExecutionLevel node with one of the following.
<requestedExecutionLevel level="asInvoker" uiAccess="false" />
<requestedExecutionLevel level="requireAdministrator" uiAccess="false" />
<requestedExecutionLevel level="highestAvailable" uiAccess="false" />
Specifying requestedExecutionLevel element will disable file and registry virtualization.
Remove this element if your application requires this virtualization for backwards
compatibility.
-->
<requestedExecutionLevel level="asInvoker" uiAccess="false" />
</requestedPrivileges>
</security>
</trustInfo>
<compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
<application>
<!-- A list of the Windows versions that this application has been tested on
and is designed to work with. Uncomment the appropriate elements
and Windows will automatically select the most compatible environment. -->
<!-- Windows Vista -->
<!--<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}" />-->
<!-- Windows 7 -->
<!--<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}" />-->
<!-- Windows 8 -->
<!--<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}" />-->
<!-- Windows 8.1 -->
<!--<supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}" />-->
<!-- Windows 10 -->
<!--<supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}" />-->
</application>
</compatibility>
<!-- Indicates that the application is DPI-aware and will not be automatically scaled by Windows at higher
DPIs. Windows Presentation Foundation (WPF) applications are automatically DPI-aware and do not need
to opt in. Windows Forms applications targeting .NET Framework 4.6 that opt into this setting, should
also set the 'EnableWindowsFormsHighDpiAutoResizing' setting to 'true' in their app.config.
Makes the application long-path aware. See https://docs.microsoft.com/windows/win32/fileio/maximum-file-path-limitation -->
<!--
<application xmlns="urn:schemas-microsoft-com:asm.v3">
<windowsSettings>
<dpiAware xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
<longPathAware xmlns="http://schemas.microsoft.com/SMI/2016/WindowsSettings">true</longPathAware>
</windowsSettings>
</application>
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic malicious (high confidence)
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
McAfee Clean
Malwarebytes Clean
Zillya Clean
Sangfor Clean
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Clean
Cyren Clean
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 Clean
APEX Malicious
Paloalto Clean
Cynet Clean
Kaspersky Clean
Alibaba Clean
NANO-Antivirus Clean
SUPERAntiSpyware Clean
MicroWorld-eScan Clean
Rising Trojan.Generic/MSIL@AI.90 (RDM.MSIL:AW2xoeov9LIV37IhUvjqlA)
Ad-Aware Clean
Sophos Clean
Comodo Clean
F-Secure Clean
DrWeb Clean
VIPRE Clean
TrendMicro Clean
McAfee-GW-Edition Clean
Trapmine Clean
FireEye Generic.mg.c8f867aac14b76cc
Emsisoft Clean
Ikarus Clean
Jiangmin Clean
Webroot Clean
Avira Clean
MAX Clean
Antiy-AVL Clean
Kingsoft Clean
Microsoft Trojan:Win32/Sabsik.FL.B!ml
Gridinsoft Clean
Arcabit Clean
ViRobot Clean
ZoneAlarm Clean
GData MSIL.Trojan-Downloader.Agent.BJF
Google Clean
AhnLab-V3 Clean
Acronis Clean
BitDefenderTheta Clean
ALYac Clean
TACHYON Clean
VBA32 Clean
Cylance Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
SentinelOne Clean
MaxSecure Clean
Fortinet Clean
AVG Clean
Avast Clean
CrowdStrike win/malicious_confidence_90% (D)
No IRMA results available.