Static | ZeroBOX

PE Compile Time

2023-01-20 00:00:26

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00029160 0x00029200 7.64151595902
.rsrc 0x0002c000 0x0002d5d7 0x0002d600 5.84684169519
.reloc 0x0005a000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00058a34 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00058a34 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00058a34 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00058a34 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00058a34 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00058a34 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00058a34 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00058a34 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00058a34 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x00058e9c 0x00000084 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x00058f20 0x000002d0 LANG_ZULU SUBLANG_NEUTRAL data
RT_MANIFEST 0x000591f0 0x000003e7 LANG_ZULU SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
+(+-+.~
9%,R1f~
+F+K+P+Q+R+W+X~
+$+%+&t
+#+$+%+&
XJ4X(L
XJPX(L
XJTX(L
:XF-:
,XJ,G
 XJ(XT
XJ(X(L
+\+`8e
(XJXT
,XJo!
0XJo!
4XJY(
8XJo!
<XJo!
%,O.98l
+j+n+r+vT
_b`}Z
+_d}Z
__d}Z
,*+,+-+.+/
_b`}Z
,T+S{^
+A+B{^
+Tz+[
+B+D+E
XJY_bXT
XJY_cXT
 XJY_bYT
(XJT+H
 XJ`h
Y_bXT
4XJ`h
4XJ_bXT
__bT
4XJ`h
4XJ_bXT
4XJY_bX
+"+#{n
XJ_b
XJ_b
+@+A+F{
XJY_bXT
XJY_bX
Y_bYT
T+,+G+HJ+H{
_+U+V{
+K+O8T
+;+<+=(
+*+++,{
_b`}
Ivan Mvedev
Qkkbal
'|xBBJ
rDe^N
's:Ks7
v4.0.30319
#Strings
bmbpSdkkAnedd.exe
bmbpSdkkAnedd
<Module>
mscorlib
Object
System
MulticastDelegate
ValueType
Attribute
GetString
SmartAssembly.Delegates
MemberRefsProxy
SmartAssembly.HouseOfCards
Strings
MemoryStream
System.IO
PoweredByAttribute
SmartAssembly.Attributes
IList`1
System.Collections.Generic
Thread
System.Threading
ParameterizedThreadStart
ThreadStart
Random
Func`2
value__
ModuleHandle
Dictionary`2
Invoke
Monitor
IDisposable
Dispose
Stream
Assembly
System.Reflection
GetExecutingAssembly
get_Location
ToString
GetDirectoryName
String
Intern
op_Equality
Directory
GetTempPath
get_Chars
Exists
IsNullOrEmpty
EnumerateDirectories
IEnumerable`1
get_Length
WebClient
System.Net
OpenRead
GetManifestResourceStream
ResourceManager
System.Resources
GetObject
Replace
Convert
FromBase64String
System.Security.Cryptography
Create
RuntimeHelpers
System.Runtime.CompilerServices
InitializeArray
RuntimeFieldHandle
DeriveBytes
GetBytes
SymmetricAlgorithm
set_Key
set_IV
CreateDecryptor
ICryptoTransform
Encoding
System.Text
get_Unicode
get_ASCII
get_UTF8
ToArray
HashAlgorithm
ComputeHash
Buffer
BlockCopy
set_Mode
CipherMode
TransformFinalBlock
Concat
GetTypeFromHandle
RuntimeTypeHandle
Marshal
System.Runtime.InteropServices
SizeOf
ToUInt32
BitConverter
ToInt32
IntPtr
get_Size
op_Explicit
ToInt16
Console
WriteLine
.cctor
ParameterInfo
object
method
nhffskdsfkdfdhdafrffddhfscffdf
hkgfsfdffdhfhddrfahhddsshcf
chfdgeffhfkdafsfhddhdshdghf
BeginInvoke
IAsyncResult
AsyncCallback
callback
EndInvoke
result
hfsdkfdhgfshseffdfaffhfdch
fhhfgsffrffdkdffcdhhhfdasdfh
fchfhfdgfadfdfrsfsshdkfffgh
hjfdffhfgadsffhrddfffskhj
fsfhrgdddffhdffffkhsjd
fjshdfcffddshdffgfedfkfghj
sddddffsfheghddjffffffgjhskdgsfacsafp
sfhjffkfhgfhjsrfhhddfhffadsfsfhsscfgdb
ddfrhjfsffhgdffafcfdssfkfhgj
ffchkffgahfhfsrddsfsfj
jffadsfcfhdggfsdehfsgkffj
jcfssafdghhfffrfddsdgkfff
ffchkfhrffdfdhafgsssffj
jffafffffdrdgfhcsdsgkffj
jcfhdsfrfgfdsadfsdgkffff
gdddfdsfdhfssfdgh
fhfssddssdfhfddfhhs
hsfddsd
fsdfdsh
shsdsffdsd
sdfsdfsfh
sdhffsdssf
sshddsfgfs
afsdgfsdshs
gsfsfdsd
gssdaffadss
gsfashdsfs
gfssadfsdg
gasdsfdfshsg
gdsdfafag
hssddfdafs
adsfdsfsdds
jdddfsdsf
gdfgfsssdfh
jfsdsafdfhg
jffddddsgfdgs
jsfsddfdf
jdffaf
gdfddsfddj
kfdssfdfsgfh
fssjfsffdfg
sjfadsfff
fdfhfsfsfs
jsffsfdssd
jdsdffffssk
wssffssdv
gsffffsds
gffssfddsx
startupInfo
akjdrFr
jdfhfdfdffdffssdkfj
hdfffdfhffsassdkfsh
hdffhdfsdhdffdfkdf
affdssdfffhhfhh
sdfffdsshfffdhf
hffdsffdfshfsdhs
hhhgfdffffdfsfh
sfdfsffhfffdhs
fddsffhss
ffdhdfff
hhfdhsdffsf
jhffsdffdfdh
CreateMemberRefsDelegates
typeID
CreateGetStringDelegate
ownerType
codeLengths
pending
minCodes
maxLength
buffer
AvailableBits
AvailableBytes
IsNeedingInput
TotalOut
IsFinished
BitCount
IsFlushed
UnverifiableCodeAttribute
System.Security
CompilationRelaxationsAttribute
RuntimeCompatibilityAttribute
AssemblyFileVersionAttribute
SuppressIldasmAttribute
CompilerGeneratedAttribute
AttributeUsageAttribute
AttributeTargets
bmbpSdkkAnedd.resources
{14859ebf-60be-4564-9253-bf25f24c859a}
ICollection`1
Remove
List`1
System.Core
Enumerable
System.Linq
Repeat
Select
Rfc2898DeriveBytes
CryptoStream
CryptoStreamMode
RijndaelManaged
MD5CryptoServiceProvider
System.Windows.Forms
Application
get_ExecutablePath
AssemblyBuilder
System.Reflection.Emit
DefineDynamicModule
ModuleBuilder
DefineType
TypeBuilder
TypeAttributes
GetMethod
MethodInfo
MethodBase
GetParameters
get_ReturnType
DefinePInvokeMethod
MethodBuilder
MethodAttributes
CallingConventions
CallingConvention
CharSet
GetMethodImplementationFlags
MethodImplAttributes
SetImplementationFlags
CreateType
Delegate
CreateDelegate
AppDomain
get_CurrentDomain
AssemblyName
DefineDynamicAssembly
AssemblyBuilderAccess
Exception
get_ParameterType
ResolveTypeHandle
MemberInfo
get_Name
ResolveMethodHandle
RuntimeMethodHandle
GetMethodFromHandle
get_IsStatic
FieldInfo
get_FieldType
DynamicMethod
GetILGenerator
ILGenerator
OpCodes
Ldarg_0
OpCode
Ldarg_1
Ldarg_2
Ldarg_3
Ldarg_S
Tailcall
Callvirt
SetValue
GetFields
BindingFlags
GetModules
Module
get_ModuleHandle
get_Module
GetMethods
Ldc_I4
get_MetadataToken
TryGetValue
GetName
GetPublicKey
CreateEncryptor
DESCryptoServiceProvider
FormatException
get_Position
GetCallingAssembly
DateTime
get_Year
get_Month
get_Day
get_Hour
get_Minute
get_Second
UInt32
SeekOrigin
set_Position
get_Now
get_Message
ArgumentOutOfRangeException
InvalidOperationException
WriteByte
ReadByte
WrapNonExceptionThrows
6.9.0.114
"Powered by SmartAssembly 6.9.0.114
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
[Dh;_Mb
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
79a6)@
NnTh1>
q`J>og
V26.Yu
C/NfpI
uRs;sD
<LPWP
C<.c"]*c
qLvM?:
2@goqn
Baq2t
O*l<.]
Gawj{Y
2?Cdr|I
euP`Q}
Rs3}7p
<6<fS2F
o1m#f^>a
UtZl0k
;${X=J
mY'=a"(
;='}c0
ahz06]
<6<fS2F/
2&hkou'
iL"{7w(q
CCEKP5r5
Tr7_+3$
bAd]Fg
HqdntJ
:y#LVJ
A\0&Y
BUk"XO
rYa3Z.O
<]1"bS
rU"B,]
&SnOvL
UGo'vBDg=
&!*)Q?
zY!W6*%
Pr@aS$
H:5W*$
y{Jo_&^;
XBz/LM`
:F/`p\HZU
U-`|E++bucm!
5M{DOf
JdeBN
B.h4"(,
Ivu:5LU
UE1TTo
W:v]C3-
i_\M6}
Ag~[H0
jb-b^s];
O7qm/O
rR;aT<
#aV3!
7 $7FU
SW?'pBmf[F'
v#Pv}+
2{-m[
4yD9wv
Mhcn@((
12u)D
T54x"8
G"859e
g<"(6q/
if/l"^t
^nP/:+v
bo<aT&7h
RV2?U&
uN?RX{6O
^ w.JL
)_& '(N
S<d+|T
D!@p:\6<
uQ@vA
}`j#I
N=I'Tg
5.ykvt
cJY?L
lOhM?&II+
(5Z(qt
x3Nl-h/
nRgiB<)7d+
y9[(g$
paT8Y
S8~ i8:
BR~)%G
f|p8pB
?%EIRc
F wNak
|"/ {
\mO}v@
5.ykvt
cJY?L
aa,#J}
y8~hZN
9"J{_b
>RM]]?
I~s1iH]
p"N\pj
\!ZR@qa
3+WT-%
a'}`%5$d
ciuPvz
5OX?|r
]!y5Yr}
'P(>;x
[{Xo:}
[{Xo:}
]$pzxk
r`h>@ q
NLGvt
25OMkr
49Um0R
w4CVnO
(Uv#=iL
Yo2lA
Nh1eO7
@23LH;
anD1sCb
l28be}4
=]acPg=
V8${lZ
a{jv{:
46i37R
6#`|<A
VJBy7@
DLZ=V5}&[2
%aIWPJ1#
%d/_VM
8Ec__"
*qY5Z2Q
84s(7O*
XMUmX)l
*y}?|[9
08'2z@
J:rU7
WDrb-e7
%EqI'[
(CN:e>
=@zjH/
M]W@_<
b5{:?etG
5k1eNQ
OVvg<6"
-]&I_wS
t4`'ux
3h&%clm
,2{H]5
yjld{ed2
|_gO?f
^xHPlkm
tlCS05
1a\(gjZ
;U&S5v
^)Y1-?
2<cy~q
X$>u=>%K
{}/\M^
{}/\M^
ncN!(:
]Y0c N!(:
^a#}GH
.4u};m
%}$$b:
X!N!(:
wuN!(:
kGge3%
t_Th<G
U[1l7o
ZoKqtngly
qA20A
:p=ITg
`pQ~'`
B=aIKT:
"V4{Gae
o_dPNg
_CorExeMain
mscoree.dll
of$|Z;
(1$IF$
(#&(U=
WuCQdh
n>kF}9
-^6+@!G
VvN>?86<
FcY1P,
}tnB)
xob[n\rV7
a0.`ECy
3Vk,EQ
u;WBQ8F
]-nQp{
/QDnMC
zb&mov
vw:Gdd/
)9/'zz
eOMdl(
Kql6b2H
-K{l05'#4
oq!KI~
<_WWw#
EonI`W
*F~"Bm
gV,DDA
" r>RK
``vE?&{
|vA=fIV
WhmMDQ
+kjkod
mhhx%1a
C[ggoCm
mG0'K
1&43Ah
:====jCp
rjnnn.>333
NyeC5}P~]
S^EPm
#!{FB?
#" mIEB
0.-tJFC
)#"#KEC
&$#!=97
EB?fKGD
E@=bC><
><9?KGD
@64>FA>
GCB\LGE
HC@[FA>
HEBiLHE
IEAhFA?
IDA]LHE
HDA\FB?
GC@GLGE
FBACGB?
GC@ LGD
HB@GB@
KFCwMGE
JECvEB@
C@=$JFC
C@=$GC@
HEA8KGD
IDB7GB@
IEA.HDA
IDB-GB@
JEBYNIE
JEBXHCA
JEBYKGE
JEBYFB8
JEBSJGC
JEBRIDB
JEB6JEBZIE;|MHE
IE;|JEBZJEB6HEB
JFC$JEC2JFC@JFCMKFCXKFC`KFDhKFCpJFCxJFCxJFCxJFCxJFCxJFCxJFCxJFCxKFCpKFDhJFC`KFCXJFCMJFC@JEC1JFC$IBA
" z=97
)&%oFA>
(&$rGB?
(&%gGDA
'&%e)&%
FB?nIEB
EA>lA=:
EA>*KFC
EA>)E@=
B?<UKFC
C<9TFA>
HDBmKFD
HDAmFA>
IDAiKGD
HDAhFB?
HCAQLGD
GCANGB?
HCA+KFC
GC@+GB@
FC@jLGD
FB@jGC@
JFCyLHE
JFCyHCA
IEBZLGD
IEBZGB@
HD>#JEAgKGD
JEAgHC>"HC@
IDB(JEB^KGD
JFB^IDA(HC@
HD=)JEBCJEB_KEBtKFC
JFBsJFB^JEBCGC;(HC@
$" }A=;
&$#rD?<
*'&fFA>
*'&e2.-
@97oFB?
?:7n>:8
FA>4JEB
EA>3E@=
EA>bIDB
E?=aFA>
HDBsIEB
IDArFA?
IDA_KFC
HDA]GB?
HCA2KFC
GCA2GC@
IEBjKGD
IDBjFB?
IDA\LGD
IDB\HCA
HD?"JEBgLGD
JEBgHC>"
IEBHKFCoKFA
KFCoIEBHIEA
IDAIDA$IDA&IDA&IDA&IDA&IDA#IDAIDA
$"!VEA>
$"!U/-+
<64lEA>
;64k<86
FA>6IDA
FA>5E@=
FB?fHCA
F@>eFA?
IEAqIDA
IDAqFB?
HDAUKFC
HDASGB@
HCAIEB
IDA=JFC
IDB=HC@
JFApLGD
JE@oHDA
IDB6JFCgKFD
JFCgIEA6HDA
IDB#IDA.IEB6IEA<IEA<IEA<IEA<IEB6IDA.IDB#IEB
" x;74
#! z;75
#! z<85
#! w<86
#! pA=:
51/aD?<
52/`2/-
FA??GB?
FA>>D?<
GC@oFA>
GB?nGB?
IDAnGC@
HDAmGB?
HDA;IDA
IEBZJEC
IEBZHCA
ID@"JECfJFC
JECfID@"
JDA5JEBIJECXJEBcJEBkJEBmJEBmJEBkJEBcJECXJEBIJEA4ID@
)&%DB=;
EA>ED?<
GC@uD@=
IDAYGB?
IEBqHD@
IEBqIDA
JEB>JEBbJEB{IEB
JDB{JEAbJEB>JEB
D?<GC><
GC@wD?<
HDAEGB@
JEB"JEB]IDA
JEB\JEB"
841GB>;
GC@sD?<
<96 IDAuGC@
IDAu>:8
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="x86" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS></application></compatibility></assembly>
!*m!^m!`m!*
1*m1^m1*
+*102030405060708790:0;0=<><?<@<A<B<
{14859ebf-60be-4564-9253-bf25f24c859a}
Wrong Header Signature
Unknown Header
{data}
ERR 2003:
bmbpSdkkAnedd
MAINICON
VS_VERSION_INFO
StringFileInfo
040904b0
CompanyName
Igor Pavlov
FileDescription
7-Zip Installer
FileVersion
InternalName
7zipInstall
LegalCopyright
Copyright (c) 1999-2022 Igor Pavlov
OriginalFilename
7zipInstall.exe
ProductName
ProductVersion
VarFileInfo
Translation
No antivirus signatures available.
No IRMA results available.