Static | ZeroBOX

PE Compile Time

2041-06-06 23:57:01

PDB Path

C:\Users\anast\source\repos\OSInfo\OSInfo\obj\Release\OSInfo.pdb

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00c127c4 0x00c12800 7.98898901027
.rsrc 0x00c16000 0x0000059c 0x00000600 4.05372562293
.reloc 0x00c18000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x00c16090 0x0000030c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x00c163ac 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
v4.0.30319
#Strings
IEnumerable`1
Resource1
get_UTF8
<Module>
System.IO
mscorlib
System.Collections.Generic
SendMessage
message
Enumerable
IDisposable
RuntimeTypeHandle
GetTypeFromHandle
Console
get_temp_name
WriteLine
Combine
System.Core
get_Culture
set_Culture
resourceCulture
Dispose
EditorBrowsableState
CompilerGeneratedAttribute
GuidAttribute
GeneratedCodeAttribute
DebuggerNonUserCodeAttribute
DebuggableAttribute
EditorBrowsableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
AssemblyFileVersionAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
OSInfo.exe
Encoding
System.Runtime.Versioning
ToString
GetString
GetTempPath
get_Length
System.ComponentModel
NetworkStream
GetStream
Program
System
Random
resourceMan
System.Globalization
System.Reflection
Exception
OSInfo
CultureInfo
System.Linq
get_grabber
get_ResourceManager
System.CodeDom.Compiler
System.Diagnostics
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
OSInfo.Resource1.resources
DebuggingModes
get_netconn_properties
WriteAllBytes
GetBytes
get_Chars
get_registers
Process
System.Net.Sockets
Exists
Concat
GetObject
Connect
System.Net
WebClient
TcpClient
System.Text
ToArray
get_Assembly
WrapNonExceptionThrows
OSInfo
Copyright
2023
$0805c3a3-3aa4-4828-a8ba-bb0c2d7cc64e
1.0.0.0
.NETFramework,Version=v4.5.2
FrameworkDisplayName
.NET Framework 4.5.2A
3System.Resources.Tools.StronglyTypedResourceBuilder
17.0.0.0
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADPf
!This program cannot be run in DOS mode.
`.rdata
@.data
.pdata
@_RDATA
@.rsrc
@.reloc
SUVWAVAWH
A_A^_^][
A_A^_^][
@SWAVH
L$ SUVWH
T$hfD+D$df+T$`
@SUVWAVH
T$<f+T$4
PA^_^][
@USVWAVH
A^_^[]
|$ AVH
L$ SUVWH
L$ SVW
L$ SVW
K SVWH
VWAUAVAWH
0A_A^A]_^
L$ H;Y
@USVWATAUAWH
A_A]A\_^[]
t$ AVH
UVWATAUAVAW
A_A^A]A\_^]
l$ VWAVH
l$ VWAV
@VATAUAVAWH
A_A^A]A\^
L$ SUVWH
@UATAVH
`A^A\]
`A^A\]
@UATAVH
PA^A\]
PA^A\]
SUVWATAUAVAWH
8A_A^A]A\_^][
SUVWATAUAVAWH
MP;H(s
MP;H8s
]Lu*A;|$
L$@E)}P
A;Exs`
A;M8v#A
L$@A9MP
tDE;u$t>H
T$8E+T$
XA_A^A]A\_^][
I@L9{8u
t$HL9{0
}0L9{0
x<L9{0
K8;K4s
@SUVWATAVH
fD9dDpuO
fD9dDpuA
fD9dDpu1
fD9dDpu
fD9dDpu
D$rfD9 u
A^A\_^][
H3E H3E
u/HcH<H
ffffff
fffffff
fffffff
ffffff
vKfffff
WATAUAVAWH
A_A^A]A\_
WATAUAVAWH
A_A^A]A\_
VWATAVAWH
A_A^A\_^
WATAUAVAWH
A_A^A]A\_
H;xXu5
AUAVAWH
u4I9}(
;I9}(tiH
0A_A^A]
UVWATAUAVAWH
`A_A^A]A\_^]
@USVWATAUAVAWH
A_A^A]A\_^[]
UVWATAUAVAWH
A_A^A]A\_^]
@SVWATAUAVAWH
L!|$(L!
D$0HcH
pA_A^A]A\_^[
B(I9A(
SVWATAUAVAWH
0A_A^A]A\_^[
t$ WATAUAVAWH
A_A^A]A\_
L$ UVWATAUAVAWH
0A_A^A]A\_^]
T$ D){
t$ WATAUAVAWH
0A_A^A]A\_
D$(H!L$ E3
;D$hsL
WATAUAVAWH
0A_A^A]A\_
UVWATAUAVAWH
ryf;\$l
ref;\$t
rQf;\$|
f;\$4r
f;\$<r
f;\$Dr
r|f;\$l
rhf;\$t
rTf;\$|
A_A^A]A\_^]
S(HcS0
S(HcS0
S(HcS0
S(HcS0
S(HcS0
S(HcS0
D$@H;F
D$@H;F
kL@8o(u
<htl<jt\<lt4<tt$<wt
|$ UATAUAVAWH
A_A^A]A\]
t$ WATAUAVAWH
|T4fD;
c@D9kHtkH
l$0Lc@
A_A^A]A\_
D$18F(u
WAVAWH
A_A^_
@USVWATAVAWH
A_A^A\_^[]
@USVWATAVAWH
A_A^A\_^[]
u$D8r(t
D81uUL9r
uED8r(t
vAD8s(t
UVWAVAWH
A_A^_^]
:u'f9Q
utfD9A
ugfD9A
|$ AVH
E80t"A
fD94Q}
ATAVAWH
A_A^A\
L$ VWAVH
x ATAVAWH
fD9$~u
A_A^A\
ATAVAWH
0A_A^A\
p WATAUAVAWH
fE9,lu
fD9,Gu
0A_A^A]A\_
fD9,Gu
fF9,su
ATAVAWH
0A_A^A\
UVWATAUAVAWH
A_A^A]A\_^]
UVWATAUAVAW
A_A^A]A\_^]
UVWAVAWH
0A_A^_^]
WAVAWH
fA9,@u
fA9,vu
0A_A^_
p0R^G'
u3HcH<H
WAVAWH
A_A^_
WAVAWH
A_A^_
UVWATAUAVAWH
rsf;\$d
r_f;\$l
rKf;\$t
r7f;\$|
f;\$4r
f;\$<r
rvf;\$d
rbf;\$l
rNf;\$t
r:f;\$|
A_A^A]A\_^]
D$0@8{
p*W4H
p*W4H
\$ UVWATAUAVAWH
s2fE9)I
fE9)fA
D$pfA;
0fD9l$pu
fD9l$pt
0A_A^A]A\_^]
l$ VWATAVAWH
0A_A^A\_^
AUAVAWH
A_A^A]
UVWATAUAVAWH
@8t$HtzL
`A_A^A]A\_^]
VATAUAVAWH
0A_A^A]A\^
fD9t$b
UVWATAUAVAWH
fB9<I}1L
A_A^A]A\_^]
VWATAVAW
A_A^A\_^
VATAUAVAWH
0A_A^A]A\^
@USVWATAUAVAWH
H!D$ H
xA_A^A]A\_^[]
D$0H9D$8
t$ WATAUAVAWH
gfffffffH
A_A^A]A\_
{ AUAVAWH
0A_A^A]
t$xt*3
WAVAWH
A_A^_
x ATAVAWH
A_A^A\
L$ VWAVH
fD94H}aD
WATAUAVAWH
A_A^A]A\_
p0R^G'
f9|$ tyf
|$":uq
WAVAWH
@A_A^_
@USVWATAUAVAWH
xA_A^A]A\_^[]
@USVWAVH
pA^_^[]
WATAUAVAWH
0A_A^A]A\_
UVWATAUAVAWH
xWI96tRI
0A_A^A]A\_^]
WATAUAVAWH
fB94ht
xXI96tSI
fC94wu
0A_A^A]A\_
WAVAWH
D8|$`t
A_A^_
UVWATAUAVAWH
H;\$8u
H;\$8u
fE9$Iu
A_A^A]A\_^]
WATAUAVAWH
0A_A^A]A\_
H9>u+A
l$ VWATAVAWH
L$&8\$&t,8Y
A_A^A\_^
@UATAUAVAWH
e0A_A^A]A\]
t$ WATAUAVAWH
D!|$xA
A_A^A]A\_
SUVWATAVAWH
A_A^A\_^][
@USVWATAVAWH
A_A^A\_^[]
WAVAWH
A_A^_
T$`fA;
p WATAUAVAWH
A_A^A]A\_
T$xD;D$x
@USVWATAVAWH
fD9$Ou
0A_A^A\_^[]
fD9$wu
}HfD9#A
\$ UVWH
x ATAVAWH
@A_A^A\
s WAVAWH
0A_A^_
u~9t$Xt
UATAUAVAWH
A_A^A]A\]
@SUVWATAVAWH
@A_A^A\_^][
x UAVAWH
ATAUAVH
L$ fff
L$ |+L;
A^A]A\
@UATAUAVAWH
A_A^A]A\]
ffffff
fffffff
x ATAVAWH
@8~8t
@8~0tM
A_A^A\
@USVWATAUAVAWH
eHA_A^A]A\_^[]
ATAVAWH
A_A^A\
USVWAVH
A^_^[]
LcA<E3
Cannot read Table of Contents.
1.2.13
Failed to extract %s: inflateInit() failed with return code %d!
Failed to extract %s: failed to allocate temporary input buffer!
malloc
Failed to extract %s: failed to allocate temporary output buffer!
Failed to extract %s: decompression resulted in return code %d!
Failed to extract %s: failed to allocate temporary buffer!
Failed to extract %s: failed to read data chunk!
Failed to extract %s: failed to write data chunk!
fwrite
Failed to extract %s: failed to open archive file!
Failed to extract %s: failed to seek to the entry's data!
Failed to extract %s: failed to allocate data buffer (%u bytes)!
Failed to extract %s: failed to open target file!
Failed to seek to cookie position!
Failed to read cookie!
Could not allocate buffer for TOC!
Could not read full TOC!
Error on file.
Cannot allocate memory for ARCHIVE_STATUS
calloc
Fatal error detected
Error detected
%s%s: %s
Archive path exceeds PATH_MAX
Failed to open archive %s!
%s%c%s%c%s
Failed to copy %s
%s%c%s%c%s%c%s
%s%c%s.pkg
%s%c%s.exe
%s%c%s
Archive not found: %s
Failed to extract %s
traceback
format_exception
__main__
Could not get __main__ module.
Could not get __main__ module's dict.
%s%c%s.py
Absolute path to script exceeds PATH_MAX
__file__
Failed to unmarshal code object for %s
_pyi_main_co
pyi-disable-windowed-traceback
Traceback is disabled via bootloader option.
_MEIPASS2
_PYI_ONEDIR_MODE
Cannot open PyInstaller archive from executable (%s) or external archive (%s)
Cannot side-load external archive %s (code %d)!
Failed to convert DLL search path!
Failed to get executable path.
GetModuleFileNameW
Failed to convert executable path to UTF-8.
Py_DontWriteBytecodeFlag
Failed to get address for Py_DontWriteBytecodeFlag
GetProcAddress
Py_FileSystemDefaultEncoding
Failed to get address for Py_FileSystemDefaultEncoding
Py_FrozenFlag
Failed to get address for Py_FrozenFlag
Py_IgnoreEnvironmentFlag
Failed to get address for Py_IgnoreEnvironmentFlag
Py_NoSiteFlag
Failed to get address for Py_NoSiteFlag
Py_NoUserSiteDirectory
Failed to get address for Py_NoUserSiteDirectory
Py_OptimizeFlag
Failed to get address for Py_OptimizeFlag
Py_VerboseFlag
Failed to get address for Py_VerboseFlag
Py_UnbufferedStdioFlag
Failed to get address for Py_UnbufferedStdioFlag
Py_UTF8Mode
Failed to get address for Py_UTF8Mode
Py_BuildValue
Failed to get address for Py_BuildValue
Py_DecRef
Failed to get address for Py_DecRef
Py_Finalize
Failed to get address for Py_Finalize
Py_IncRef
Failed to get address for Py_IncRef
Py_Initialize
Failed to get address for Py_Initialize
Py_SetPath
Failed to get address for Py_SetPath
Py_GetPath
Failed to get address for Py_GetPath
Py_SetProgramName
Failed to get address for Py_SetProgramName
Py_SetPythonHome
Failed to get address for Py_SetPythonHome
PyDict_GetItemString
Failed to get address for PyDict_GetItemString
PyErr_Clear
Failed to get address for PyErr_Clear
PyErr_Occurred
Failed to get address for PyErr_Occurred
PyErr_Print
Failed to get address for PyErr_Print
PyErr_Fetch
Failed to get address for PyErr_Fetch
PyErr_Restore
Failed to get address for PyErr_Restore
PyErr_NormalizeException
Failed to get address for PyErr_NormalizeException
PyImport_AddModule
Failed to get address for PyImport_AddModule
PyImport_ExecCodeModule
Failed to get address for PyImport_ExecCodeModule
PyImport_ImportModule
Failed to get address for PyImport_ImportModule
PyList_Append
Failed to get address for PyList_Append
PyList_New
Failed to get address for PyList_New
PyLong_AsLong
Failed to get address for PyLong_AsLong
PyModule_GetDict
Failed to get address for PyModule_GetDict
PyObject_CallFunction
Failed to get address for PyObject_CallFunction
PyObject_CallFunctionObjArgs
Failed to get address for PyObject_CallFunctionObjArgs
PyObject_SetAttrString
Failed to get address for PyObject_SetAttrString
PyObject_GetAttrString
Failed to get address for PyObject_GetAttrString
PyObject_Str
Failed to get address for PyObject_Str
PyRun_SimpleStringFlags
Failed to get address for PyRun_SimpleStringFlags
PySys_AddWarnOption
Failed to get address for PySys_AddWarnOption
PySys_SetArgvEx
Failed to get address for PySys_SetArgvEx
PySys_GetObject
Failed to get address for PySys_GetObject
PySys_SetObject
Failed to get address for PySys_SetObject
PySys_SetPath
Failed to get address for PySys_SetPath
PyEval_EvalCode
Failed to get address for PyEval_EvalCode
PyMarshal_ReadObjectFromString
Failed to get address for PyMarshal_ReadObjectFromString
PyUnicode_FromString
Failed to get address for PyUnicode_FromString
Py_DecodeLocale
Failed to get address for Py_DecodeLocale
PyMem_RawFree
Failed to get address for PyMem_RawFree
PyUnicode_FromFormat
Failed to get address for PyUnicode_FromFormat
PyUnicode_Decode
Failed to get address for PyUnicode_Decode
PyUnicode_DecodeFSDefault
Failed to get address for PyUnicode_DecodeFSDefault
PyUnicode_AsUTF8
Failed to get address for PyUnicode_AsUTF8
PyUnicode_Join
Failed to get address for PyUnicode_Join
PyUnicode_Replace
Failed to get address for PyUnicode_Replace
Reported length (%d) of DLL name (%s) length exceeds buffer[%d] space
ucrtbase.dll
Path of ucrtbase.dll (%s) length exceeds buffer[%d] space
Path of DLL (%s) length exceeds buffer[%d] space
Error loading Python DLL '%s'.
LoadLibrary
Failed to convert Wflag %s using mbstowcs (invalid multibyte string)
PYTHONUTF8
Invalid value for PYTHONUTF8=%s; disabling utf-8 mode!
Failed to convert argv to wchar_t
Failed to convert progname to wchar_t
Failed to convert pyhome to wchar_t
lib-dynload
base_library.zip
%s%c%s%c%s%c%s%c%s
sys.path (based on %s) exceeds buffer[%d] space
Failed to convert pypath to wchar_t
Error detected starting Python VM.
strict
Failed to get _MEIPASS as PyObject.
_MEIPASS
Module object for %s is NULL!
%U?%llu
Installing PYZ: Could not get sys.path
Failed to append to sys.path
Cannot allocate memory for necessary files.
SPLASH: Tcl is not threaded. Only threaded tcl is supported.
SPLASH: Cannot extract requirement %s.
SPLASH: Cannot find requirement %s in archive.
LOADER: Failed to load tcl/tk libraries
Cannot allocate memory for SPLASH_STATUS.
status_text
tk.tcl
tk_library
_source
tclInit
tcl_findLibrary
rename ::source ::_source
source
tcl_patchLevel
tk_patchLevel
_image_data
Tcl_Init
Failed to get address for Tcl_Init
Tcl_CreateInterp
Failed to get address for Tcl_CreateInterp
Tcl_FindExecutable
Failed to get address for Tcl_FindExecutable
Tcl_DoOneEvent
Failed to get address for Tcl_DoOneEvent
Tcl_Finalize
Failed to get address for Tcl_Finalize
Tcl_FinalizeThread
Failed to get address for Tcl_FinalizeThread
Tcl_DeleteInterp
Failed to get address for Tcl_DeleteInterp
Tcl_CreateThread
Failed to get address for Tcl_CreateThread
Tcl_GetCurrentThread
Failed to get address for Tcl_GetCurrentThread
Tcl_MutexLock
Failed to get address for Tcl_MutexLock
Tcl_MutexUnlock
Failed to get address for Tcl_MutexUnlock
Tcl_ConditionFinalize
Failed to get address for Tcl_ConditionFinalize
Tcl_ConditionNotify
Failed to get address for Tcl_ConditionNotify
Tcl_ConditionWait
Failed to get address for Tcl_ConditionWait
Tcl_ThreadQueueEvent
Failed to get address for Tcl_ThreadQueueEvent
Tcl_ThreadAlert
Failed to get address for Tcl_ThreadAlert
Tcl_GetVar2
Failed to get address for Tcl_GetVar2
Tcl_SetVar2
Failed to get address for Tcl_SetVar2
Tcl_CreateObjCommand
Failed to get address for Tcl_CreateObjCommand
Tcl_GetString
Failed to get address for Tcl_GetString
Tcl_NewStringObj
Failed to get address for Tcl_NewStringObj
Tcl_NewByteArrayObj
Failed to get address for Tcl_NewByteArrayObj
Tcl_SetVar2Ex
Failed to get address for Tcl_SetVar2Ex
Tcl_GetObjResult
Failed to get address for Tcl_GetObjResult
Tcl_EvalFile
Failed to get address for Tcl_EvalFile
Tcl_EvalEx
Failed to get address for Tcl_EvalEx
Tcl_EvalObjv
Failed to get address for Tcl_EvalObjv
Tcl_Alloc
Failed to get address for Tcl_Alloc
Tcl_Free
Failed to get address for Tcl_Free
Tk_Init
Failed to get address for Tk_Init
Tk_GetNumMainWindows
Failed to get address for Tk_GetNumMainWindows
LOADER: Failed to convert runtime-tmpdir to a wide string.
LOADER: Failed to expand environment variables in the runtime-tmpdir.
LOADER: Failed to obtain the absolute path of the runtime-tmpdir.
LOADER: Failed to set the TMP environment variable.
pyi-runtime-tmpdir
INTERNAL ERROR: cannot create temporary directory!
PYINSTALLER_STRICT_UNPACK_MODE
ERROR: file already exists but should not: %s
WARNING: file already exists but should not: %s
Error creating child process!
CreateProcessW
No error messages generated.
FormatMessageW
PyInstaller: FormatMessageW failed.
PyInstaller: pyi_win32_utils_to_utf8 failed.
WideCharToMultiByte
Out of memory.
Failed to get UTF-8 buffer size.
win32_utils_to_utf8
Failed to encode wchar_t as UTF-8.
Failed to get wchar_t buffer size.
MultiByteToWideChar
win32_utils_from_utf8
Failed to decode wchar_t from UTF-8
Qkkbal
mj>zjZ
IiGM>nw
v$F}%g
=}9i~]
>p.NB;
t/v2Z%
c9JxM3.
invalid distance too far back
invalid distance code
invalid literal/length code
incorrect header check
unknown compression method
invalid window size
unknown header flags set
header crc mismatch
invalid block type
invalid stored block lengths
too many length or distance symbols
invalid code lengths set
invalid bit length repeat
invalid code -- missing end-of-block
invalid literal/lengths set
invalid distances set
incorrect data check
incorrect length check
inflate 1.2.13 Copyright 1995-2022 Mark Adler
need dictionary
stream end
file error
stream error
data error
insufficient memory
buffer error
incompatible version
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__swift_1
__swift_2
__swift_3
__ptr64
__restrict
__unaligned
restrict(
delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
new[]
delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
operator ""
operator co_await
operator<=>
Type Descriptor'
Base Class Descriptor at (
Base Class Array'
Class Hierarchy Descriptor'
Complete Object Locator'
`anonymous namespace'
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
Unknown exception
bad exception
(null)
Visual C++ CRT: Not enough memory to complete call to strerror.
CorExitProcess
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
NAN(SNAN)
nan(snan)
NAN(IND)
nan(ind)
AreFileApisANSI
CompareStringEx
LCMapStringEx
LocaleNameToLCID
AppPolicyGetProcessTerminationMethod
No error
Operation not permitted
No such file or directory
No such process
Interrupted function call
Input/output error
No such device or address
Arg list too long
Exec format error
Bad file descriptor
No child processes
Resource temporarily unavailable
Not enough space
Permission denied
Bad address
Unknown error
Resource device
File exists
Improper link
No such device
Not a directory
Is a directory
Invalid argument
Too many open files in system
Too many open files
Inappropriate I/O control operation
File too large
No space left on device
Invalid seek
Read-only file system
Too many links
Broken pipe
Domain error
Result too large
Resource deadlock avoided
Filename too long
No locks available
Function not implemented
Directory not empty
Illegal byte sequence
address in use
address not available
address family not supported
connection already in progress
bad message
operation canceled
connection aborted
connection refused
connection reset
destination address required
host unreachable
identifier removed
operation in progress
already connected
too many symbolic link levels
message size
network down
network reset
network unreachable
no buffer space
no message available
no link
no message
no protocol option
no stream resources
not a stream
not connected
state not recoverable
not a socket
not supported
operation not supported
value too large
owner dead
protocol error
protocol not supported
wrong protocol type
stream timeout
timed out
text file busy
operation would block
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
[aOni*{
~ $s%r
@b;zO]
v2!L.2
1#QNAN
1#SNAN
UUUUUU
UUUUUU
=imb;D
/>58d%
VM>cQ6
>jtm}S
)>6{1n
+f)>0'
;H9>&X
*StO9>T
n03>Pu
K~Je#>!
bp(=>?g
BC?>6t9^
K&>.yC
.xJ>Hf
y\PD>!
|b=})>
c [1>H'
uzKs@>
3>N;kU
kE>fvw
V6E>`"(5
?UUUUUU
?7zQ6$
.text$mn
.text$mn$00
.text$x
.idata$5
.00cfg
.CRT$XCA
.CRT$XCAA
.CRT$XCZ
.CRT$XIA
.CRT$XIAA
.CRT$XIAC
.CRT$XIC
.CRT$XIZ
.CRT$XPA
.CRT$XPX
.CRT$XPXA
.CRT$XPZ
.CRT$XTA
.CRT$XTZ
.gfids
.rdata
.rdata$r
.rdata$voltmd
.rdata$zzzdbg
.rtc$IAA
.rtc$IZZ
.rtc$TAA
.rtc$TZZ
.xdata
.xdata$x
.idata$2
.idata$3
.idata$4
.idata$6
.data$r
.data$rs
.pdata
_RDATA
SendMessageW
CreateWindowExW
MoveWindow
DialogBoxIndirectParamW
EndDialog
GetDialogBaseUnits
DrawTextW
ReleaseDC
InvalidateRect
GetClientRect
GetWindowLongPtrW
SetWindowLongPtrW
DestroyIcon
SystemParametersInfoW
MessageBoxA
MessageBoxW
USER32.dll
COMCTL32.dll
GetModuleHandleW
MulDiv
GetLastError
SetDllDirectoryW
GetModuleFileNameW
GetProcAddress
GetCommandLineW
GetEnvironmentVariableW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
CreateDirectoryW
GetTempPathW
WaitForSingleObject
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
FreeLibrary
LoadLibraryExW
SetConsoleCtrlHandler
FindClose
FindFirstFileExW
CloseHandle
GetCurrentProcess
LocalFree
FormatMessageW
MultiByteToWideChar
WideCharToMultiByte
KERNEL32.dll
OpenProcessToken
GetTokenInformation
ConvertSidToStringSidW
ConvertStringSecurityDescriptorToSecurityDescriptorW
ADVAPI32.dll
CreateFontIndirectW
DeleteObject
SelectObject
GDI32.dll
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
RtlPcToFileHeader
GetCommandLineA
CreateFileW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFullPathNameW
RemoveDirectoryW
FindNextFileW
SetStdHandle
DeleteFileW
ReadFile
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
HeapFree
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
GetCurrentDirectoryW
FlushFileBuffers
HeapReAlloc
GetFileAttributesExW
GetStringTypeW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetTimeZoneInformation
HeapSize
WriteConsoleW
SetEndOfFile
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVbad_exception@std@@
.?AVexception@std@@
.?AVtype_info@@
AA)(6Fcl
QQVTQZQZQc
"""''L
QQQQTVTTT+
aQQVTZQTTT)
"""'''
IQQTQTTZTT6
!""''''(
>QTZQTZTTTD
"""''**$
5QQZTTTTZTX
""''0**#
8TZTTTZTTTf
""''**++
<TTTZTTTTT
"''***+2
ETTZTTT]TT
n'''*++22
TZTTZTTTTR
d'**+22229
TTTTTSZSTR
F**++22B2ABBBBA945=?GK`
^TZTZTTZTZ0
ohYDBBBDDCEEEEQEQQQEF:8>@IKFTTTZSZTSS2
mhWVQQQQQQTQTTTTTZTZTZSZTS)
pi\ZTZTTTTTTSTSSF
uj[ZSSU
dGGNF6-
YGGNNNN
4GNNNNN
3NQNNNL
/NNNNO:
=NNNOO$
NNONOO6
%',1@Z\
NNOOOOQ
S`P<799<<>>;/.3W[]
XNNOOOMa
gaUGGNNNOOOOMMMh
Ubcdedb#Y
TUbcdef
ISTUbcde
JRSTUbcU
@32-^_\ZW&
(1DE;Bnnlnlll$
*9HHG4onononn
*:>HH4kkroooo
*:=HHF)/rsrrm
Z*9>HHH
+ststi
V*9><?:6attttg%
!*9HGCquvvvvv`'
,7FDAhpwxxxx]
\%nz^D
;vT+@ S;
_"jAM_5
JHL(_H
@nf:RS
m(_HD,9
8)@;WJ
]N=TuQ
$*obJ)[@
8~t@I1
N+kD$Y
Sn>^uc'>
N4]jACM
*`' xM|J
@Vn&>
xsAa>f
57.Eool
ux}Eut
KIIV4
]3u2JK
@C+^xz;
:M$r"V
)[PEr=l
LWBd!Q
DVR'>u
U@_+*)
2h[RJr
OR5 9h
UcQ\Rl
qXG %m
-$NOHV
~3Cf>L
WnBjRP
Iu{7k;
<gdd ++
:}T'd^
l`"r@N
fwZhcO
~Ux?8
7&`=IX
j]8Op^Z
T4kg?K
^xdR;(scq
\3n,4L
Er~#US
EiR{'N9\
$G&C$~V
OfhX'h$
h;$ls&
cr23H>
E#P?y2
^*~PM@&
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity type="win32" name="grabber" processorArchitecture="amd64" version="1.0.0.0"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
<dependency>
<dependentAssembly>
<assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" language="*" processorArchitecture="*" version="6.0.0.0" publicKeyToken="6595b64144ccf1df"/>
</dependentAssembly>
</dependency>
<compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
<application>
<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/>
<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>
<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/>
<supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"/>
<supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"/>
</application>
</compatibility>
<application xmlns="urn:schemas-microsoft-com:asm.v3">
<windowsSettings>
<longPathAware xmlns="http://schemas.microsoft.com/SMI/2016/WindowsSettings">true</longPathAware>
</windowsSettings>
</application>
</assembly>PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGX
HetN*WO
)i"%MP
OB]>5qY
J\,&'e-
I%5m[!
a](2."
>AohR`\E
FW:M%s
U{JDTr(
A\^mvU
L#Ubbb,
Q$$`f`
f5K,ND
o;6Yl\5'
,J5cT:
9nY>Yl
Ivbl}4
^$zwG>
J{rplP
w_<<4D
Ld@ 1(
+1+j|2
8vl07GOs
6\h{Zo{
y=r>9
XJ}7y@
:?Uhku
!w {u*i
2S8RCYJ
5<sJ)Y%-e#
,C&-ZQ#N!
IE6lD"
-B}^dv
2:-JI&
0?8819
)>59(LN
HO6-kj
xh`X824<0<8pd
^bAQK2
m'_6=.o
)U4"{vt
QmoYa%
5)rV+&
Y/5f/4n
OV-u.<w
6uYZU+
@6P=P /9?W
Mn~JiN
[2[B~KgK
Ir@UFYm8
[}+>?r
"j>* W
,H[&dV
-"P-@u
lTXJN^
cQMWL[
/%%G^>
Vh,=L"V
O3ag`>
U}?sg9|
1f.Zw=
o"M&fYd`
`@b0 *
d}$f){hi
j?;vol
pemwe-K
D]#Sm
fl*-8:
T]p0<yn
[b6;gk
Qq-W|4
Um\U[TS
xupa!D
kz*I9
<9e5pZ
[p"Zpb
|eL2>pV
GxXaC+
wveS~5
p__<P_9'
xrjFK
+W:yk2
8p\78'
%=o$24
d]SU%5
VTROi5
^hr4ye
T|wmk6q
1dN`sbi
#{Tz4P
o_&9FdOH
dh~NCtx
ft_;ug
YAf=4I2C4
2U--&BC
UW\]Et
?rq{8Y
%)"/Yl
U"?+?
V!}\O
px#fG^
XozaZOzaZOzaZ7z-=
6%r6fX
:NsDh
y:T(\]
ah5kfW
o=@fOm
An.$.W&
AWf!rvYQ
&?_\@~
iZ'O0$
q#@XA[
&xW`,Yq
En,''wj/ QI3
AItO6C
P>!.SW
kPkV'h
Or?l S>d
6( U Wu0
V,hcSK0
zlg)6p.
jxbU&VU
[N0:J]0H
P;0c?d
5@34@y
m(\%[P
(1Qwo'
g(Ja]#_
L`9rO,
BrEbug
[>C"$3"
Irr`2
{Ct Tp
t=!BfZiR
v/;er}
M|xN])
rLoddE
t/VqYhx@m
wi"-fy
67['-kq
F>1_u &
!e|O,\
mMb,l{
V{Ygr3)
+7IS\Wlb
~%4X+R
)Fm)j7
Xov0,a
oW/8zS.
M<;\il`\
4S0:OQ
E5>,,w(+
5L(3
bLr&T&
X7=Spo
h6@j|Q
}]5H.dP9
wEpf)#KP
na!n%7$x
=_DTEZ
lzNK=aB
,hE)J|
fu5%di
Eby^kG
fd%^hk
<^n&q
j.(_Y^
pMy~YIAnA~
*SiiEA
\HxBHx
pcHxRHxr
~_2yr>Np
w7rs77
)]7~S@xsH\LC
tyIy~e
NI)(ZA
.=F2BH
ws|SOG
[G"Id%
H2HH"l
>[+PJz
YRZ8#_*(f
a/()*)
+R,ec"Ht
VV _PI
J)wEUQ~I
v4Wq{5
YKQ l
"|QUQsQo
oydyJ9
+|+"+R*
2CLpTbF
6~ i;)
YsWl}^
av#C~W
GO5M?~
ss(n/}
p-Qtnt
D,[*M]
A@b!Ei
#i69Vh0u
A+q&/Z4
]}D+86
*dW)=c,
ctX@*R
}nr(?1
s<sN#
AUVY1R
>cm"\F
Y^+=*JF|
l.<14dG
Pd[#3`
JhO2(a'K
=Fu|5zD
;?Z:Z`
]+;n*
!rraI
LLs-o#]
YrA;@u
VHXnu3
_)=b7=t1v
()T>jZ
j5Llwc
jjD[Ge}n
%!Tf@V
R8LAfc
H"d_"d
rA"dU"dm"d}"
4-'8a
n]%^E[
Ad)"1_6m
pIQ{2m
Y7wmWt
h;{vks
=k#_#W
#@)8/{
Qzj;jM
E-Zd2E:
6BOZ:2'
dOAI@5
^gh!X'
G`[Y_N
/j}[@w
oAHc@A
{/pU*J
!uU(r~
8R{6J{
oyE$$b
NWZVeYD
+*<V{!J
eEfLtbG
wXewL"
QSJ56e:
6#(J{#
.L'Wt.k
t1GOC*
G&W#kXe
"RWOP1
@#J4J(S(
xrhyhP
.DSfJSS
!Vs`0A
2.Skpa
#KyPCJQ=
iUo%}$
ZT9V4+
#EuF\s
Y:\&~~'
T^YR<l,
HINi L
MK;?n
;|5*y1
CS=EOd
vX7:%I
rpq>+X0i
.m"oY'
6P3]#]-T
znsg>
CwY@!D
X+y ^KeZ7
eSA*$P
xc@**P
~-*5js+
D9;Uyy5$
!030G"
P2!$)=-.Ee
$(;P9%
^Ot&oe|
f}@D[9
N|dF/n
{\/Dj$.
0Gdb?H
%{_%"|
jq~zQ'
-4WC&h5
V=Ka`aQe
ZC6(s6
.C[bpHJ
}]amW!
hgtFw#
+g\3KQ
QY)9h_:(
M2*S $\
#"W}o3k
74k1f,
;.ncd2
S10FD`
xiq<Ek
+MAx5Q
U#;7XJJ
s>craZT,
m#8/@Zh
3y\@sO6
WB_1PX
G7,>9C
zn|V:i
=eueYcxV
u7e}MYV
}Z#x,j
xN'uo#
mOE&#v\
[@U=0[
mB(7YY?
Hu5XJYLN\
BPO!]g
K7j1,J
Wy.2v(5
R{?KY>
EJy_zP
uq~jrR
S].[1P]n
;LsXCy!
>jKmQg
>Urx5Q
**iT^:
hOW,Dw)
wu{~tKaGN
>_.v^go
!Fj9j;4
e*l.nj
yTmt%C
YV#$^
4]##|gZ
L~\UHo
2nWRow
"ImRfl+
qaE|e\d
")9/+i
*6:$lp
jvVojp
R\PRf+
u[]U]/)
sEuSs+
avU5:N&O
M.tY^|CFh
gll52F
7@:ThmQ{
}.'kf*
UrZW`)
-iYs[f
wmr5m1
8rqJj,4|4
8]rXX)
;H?%6Z
P8]'=)
_Tf:^YF
FuDKq9
z|/NTT
+.[Sj-,8#;K
~Vhm6J
`8t+:tF
dy;?8~
xN=e`=)p
/W/9c"
'xZ+t<
222pI{
,h2r2p
RTil)U
WF(+/#
jiDibij)
ysykyL
,LAAAR
lEGg;:
AIn^.0C#5
=5BG6F
c3rrJRR h
LEgio-{
~Hlz||SU}
\3adck
$Nb/'f%
P}beb&
f}]{^:*,
l4_>9Cc
1@~'wi
JbZ)tM
tI<,lj
xH[Dx82
ItfUJA@
WQ}JO`
*!C,=jP
$@(GCV2mJr
'wGz+{
#Vp7K
&'JoN\
i_sXG
r6F2@;
:zmiux;^^
Zs@@9WI
N8L5}V_\`AD,
4QWHEU
jruDz\
a>r2`E
<3zGjSY>P
0s~Soa
So5/bov
nl689
}KyfR2
)ZPDVd
,#FNhQI`
KA6&lE<
{'.DI>
^H"e$l
O%[}+W3
Xqx/.q
pSB;W@4K
5^+4aW
)AYcZ(
#A^KLx
g\btam
p_hVsQ
x<oTBVQR
u0`YyP
7jOH1O
/Ukx+"2PQf
"6| |X
3(.]L/b%h
@Q%,n$<
g[NA-
fI:7sM
lZ7wjp
&X,3?p7KY
#,n,E.
$6mhHO}
1ib1;#
T=4Fi"
!*w.a
]K9CxOK
#\. H9
Mp,J0C
loERzw
WGD;*yS
*jrLt(
pe#BX
Y>$x/rs
w)6u3{
(j8{<%
>N3sbr
6^Ma!nS~6
o$r$G06
wsCy##
-'wx~4
L4s8<N7
?K/Sf,
xHI"<,
CC<$u"<
T}V^G
<q}=Yd}BCYdE[
!N.Wn+
@GrXp)R
[.0^r7
dK-Tv<
OZpEgB
Yh{IdG
Iw{@Z$
!%o?vla
X%u'*G
id+4rzgw
8 FGa$
>L~r-d
Z+,/L/
wZ3l!(! A
Dr*<<Q5wyKOA
<cL1yNq
33REwG
5uA-e&
fa}G!W0
mYn'UK
XoGQM+
/~!0L2;
bm&wHO_
'&M???L
f6J3ot`
<$j4sf
BF$Ko`Xz1
bkwf6a<
o0/x++
93snsf
Fb+.I__
v,`V?&
}&SYVN
{'t|00
$w6YE
&:&D+=
Uk@|zz)b
<KIBk;
%w!PCv
7tUNBN
j]3ZQk
=3xn@.
x1,uYO
.&+oi{
Pj(9RtQ
}T|egZ
kyn ]:4
m0O~%GyE
)"}k?eS
D9Yt3g
%f`f_OPu7
DY/>D]^
B+x!tP
.Caj{0
o3]B0<
E[l0aAO
[}qCL~
g3>i\g<g
zaGoPt
1.;Qc?
TvSCAR5
svOT>.rX}
|>+_fs
6:BkN~
\D5lr8
y\smUl
%#l+~-
GJ(N_gff
3I\(_dv
V4\z[Q
?!*[V
:\UWlB`6
9<lwOl
9)c\x^
)qtBd[}
;v=2'+}
eEfEfEfEf
E|J|V<.
h'h'kM
H?C?K?[?W
`&?-<%4bN
3S3R#R
H_>(Nu~
D_ea.`
CZBZBZ
O@4E.K
{>W;7[
u9(I +h
{x~[Qg
2Cz>Cd
%j=da7
Md8/Y#
;Ry?sl
a!^_Xd)&
gS2ed2
AY|tGR
9rRnfQF
^i#eYs
7qtIN-<
)|~uqy
{J}>Iw
3P-oz[}
~wV-ojR
^i{_ic_iK_i/
+m'+m%W
a>(6@C
1S\{7f
iQa^qH
uC2f3K2
*3=*"**++;
#+r. f
[eteEeCece
[MIMyMEMCMcMKMk
z[}I}i}Y}E}e}C}c}s}K}[
IOs$M-S
GxEL5E
"~wi>}d
]BMDF6
?K`6qe5
:l:+/v
m+rD!!
(+x6&n
9GXRDev
!7!qx5
E$X})f
@~l=YVKh
moImEu
'9$93Y
PfOot&
]_Irv2N
x6_BA;
2Yc-D3
h/8 @YK
3Q/\Ig!
z\7K@RA
vp Yr-
]N{oXs
=-Ghg<wb
dZJto1t
A[(mi\
;|:UFWqn
=i8vy0R
H;MkQ
p9^RwH
;YM\$)u
2}6$'s
4hoeY"
?:)C5K?2
"SKUX'p
9@Uk-Rj6
VZo@&rA
xt!E/a
bv;d0&O}
1u[(5H
Psu1-d
1#f=__N
Oi6OVD d
&UkIhF
w@/z6i
<TBSzV
<]E{|Y
%H=JC&T]n$TM
k;y:H~
$mlbVyp3f
r*:q+#
H{y).xN
10"\"
VwGx<g
*C}5W'w
:2Tt}{
15\jc>
_k+g( J[%
koV)^|
yHB)mu
u_~doU
<CCkh&
)zxU0v
=-|kq5
$_ !br
~6_%[K
6h'p@K
;0j,L(
UB> lf
t!_;8f
?*'2Y0.72
Bq9Fhx
^{]t?O
oow|a|-
qHllv.J
Y5mz[%
[CD}x-M
",4}?x
0\[V0>
Q}1~oA
6$'?_
R6L)""
bsv^n^v&98
1[EKQi&=
O**$G9_B?:
G1EY^~NR
_2M)/M
]Y>;K?
{^mT>O`
_3{n(T
@at8~kU
h5\vp#}
b#mIwW
gA@AXAtAbAJAf
[d\dQdW
gi@iXitibiJif
gy@yXybyJyf9
U,88m;t
R9cNWnayz'
OsUqhH3
]P,S(x
;$A-=NO
#'n33Q6
HV_9ba;
<LP,c3
L)E|Smg)
-c=y{'
e+5 j
+fzG#y7
SovkOv
g7)~8F9
OjcnDG
6#XgbA
]t{E|O
eB?SNf
b{1<5,
6xLOtW
[+OkBuSB
{|q4kho
\fHRzA
et-=55
%A\2By
i6|]Xb
3vUVtO
[ W]5$
{8B-^$
5Dz[q)
EfP1`
#!F3/U
PKa>ri
'06&<]cC:P
zq3M{t
k6}AG6
FbYc/0
.*&2|1n
zv08`0
7>uZiq
dH2L0%&_
4>7769
!>!67?7
>mCNCACGC
4<<eM[
z$U}`H
<vdO]A
9Tono%
;Hp>8y
@Vceym
GhJxxKuC
QGRNg3mt
n*3w#
Ri]TJ`
JY2~Rp
h|~3;m
bwbrMaw
FVUofv
P-{d0` C)
AMxkD{x
oA3M[9
mDWg6o:S0+r
<)I#xk
KH^)g:
Nv69Cf%
nRxZYup$
U`72x/'
u,"YB
##&G]AX
r2:#Zv
@R'GC]r
8Jj<H>BlII
Z5to ,'
#?mX5pE%
n?sRq6
;2c0~H
Po# {o
I7Yqqi
P/4Z;i
%.)D>
a(RGhg
:+}n>
a<meX7C
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic malicious (high confidence)
MicroWorld-eScan IL:Trojan.MSILZilla.25842
ClamAV Clean
FireEye Generic.mg.a18b95c829a40237
CAT-QuickHeal Clean
ALYac IL:Trojan.MSILZilla.25842
Malwarebytes Trojan.Dropper.MSIL.Generic
Zillya Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Clean
BitDefender IL:Trojan.MSILZilla.25842
K7GW Clean
Cybereason malicious.1135f3
Baidu Clean
VirIT Clean
Cyren Clean
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of MSIL/TrojanDropper.Agent.FUP
APEX Malicious
Paloalto Clean
Cynet Clean
Kaspersky Clean
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Tencent Clean
Sophos Generic ML PUA (PUA)
F-Secure Clean
DrWeb Clean
VIPRE IL:Trojan.MSILZilla.25842
TrendMicro Clean
McAfee-GW-Edition Clean
Trapmine malicious.high.ml.score
CMC Clean
Emsisoft IL:Trojan.MSILZilla.25842 (B)
Ikarus Clean
GData IL:Trojan.MSILZilla.25842
Jiangmin Clean
Webroot Clean
Avira Clean
MAX malware (ai score=85)
Antiy-AVL Clean
Gridinsoft Clean
Xcitium Clean
Arcabit IL:Trojan.MSILZilla.D64F2
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/Sabsik.FL.B!ml
Google Clean
AhnLab-V3 Clean
Acronis suspicious
McAfee Clean
TACHYON Clean
VBA32 Clean
Cylance unsafe
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Trojan.Generic@AI.97 (RDML:oc5w8lEsWjMrq48bNz86dw)
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Clean
Fortinet Clean
BitDefenderTheta Gen:NN.ZemsilF.36308.@p0@aOEZSr
AVG FileRepMalware [Misc]
Avast FileRepMalware [Misc]
CrowdStrike win/malicious_confidence_100% (D)
No IRMA results available.