Static | ZeroBOX

PE Compile Time

2023-03-15 16:29:44

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000b98fc 0x000b9a00 7.85454010716
.rsrc 0x000bc000 0x000005b8 0x00000600 4.10752582764
.reloc 0x000be000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x000bc090 0x00000328 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000bc3c8 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
 .s/
d&s*
 `s/
E1s*
E1s*
v4.0.30319
#Strings
columnHeader10
columnHeader11
List`1
Color1
columnHeader12
Microsoft.Win32
ReadInt32
ToInt32
Dictionary`2
Color2
UInt64
columnHeader5
UInt16
ReadInt16
columnHeader6
get_UTF8
columnHeader8
columnHeader9
<Module>
ResourceDA
VALIDATED
ProductID
AddCMD
GTA_PASSWORD
PrixIG
WAITING
ErrorMSG
get_CH
get_DH
get_ASCII
System.IO
get_etP
get_SONAR
get_HVR
SetSTAT
GTA_PORT
GTA_HOST
value__
UnCleanData
GAdminLib
mscorlib
textBoxBomb
get_radarpic
System.Collections.Generic
charMapLoad
get_DarkRed
set_Enabled
Featured
IsConnected
ReadToEnd
RemovAllValidatedCommand
GetSelectedCommand
ValidateCommand
RemoveCommand
GigCommand
RemoveAllCommand
command
Friend
friend
Append
set_Method
method
_password
Replace
set_AutoScaleMode
CompressionMode
opcode
Garage
SendMessage
GigMessage
message
EndInvoke
BeginInvoke
IDisposable
set_Visible
AddVehicle
GigVehicle
RuntimeTypeHandle
GetTypeFromHandle
get_duopule
FontStyle
StartGame
set_Name
nickname
GTAUsername
username
Firstname
get_Lime
DateTime
Piscine
set_Multiline
ProtocolType
GProductType
GetType
SocketType
set_ContentType
get_Culture
set_Culture
resourceCulture
ButtonBase
TextBoxBase
FlagFalse
WebResponse
GetResponse
Dispose
AddHouse
GigHouse
LogDate
RegistrationDate
ProductDate
Create
addMessageDelegate
MulticastDelegate
EditorBrowsableState
get_White
STAThreadAttribute
CompilerGeneratedAttribute
GuidAttribute
GeneratedCodeAttribute
DebuggerNonUserCodeAttribute
DebuggableAttribute
EditorBrowsableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
AssemblyFileVersionAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
ReadByte
ToByte
SetValue
Recieve
set_KeepAlive
Remove
ufi.exe
set_Size
labelSize
set_AutoSize
set_ClientSize
textBoxSize
Initialize
set_Tag
Encoding
System.Runtime.Versioning
Tuning
ToString
GetString
disposing
System.Drawing
TopTenRich
MD5Hash
ComputeHash
get_StartupPath
GetFolderPath
set_Width
get_Length
GetLength
set_ContentLength
AsyncCallback
callback
add_Tick
timer_Tick
add_Click
buttonStart_Click
textBoxTotal
System.ComponentModel
ContactEmail
ContainerControl
UserControl
ProdCtrl
GetResponseStream
GZipStream
GetRequestStream
MemoryStream
Program
ListViewSubItem
ListViewItem
System
HashAlgorithm
Random
ReceiveFrom
resourceMan
TimeSpan
AccessToken
set_TextAlign
Jardin
MessageBoxIcon
System.IO.Compression
set_AutomaticDecompression
Application
set_Location
System.Globalization
Faction
GigTransaction
System.Reflection
ControlCollection
ListViewSubItemCollection
Option
Exception
Description
GigWeapon
get_Button
pattern
mapBtn
add_MouseDown
button_MouseDown
SendTo
CultureInfo
GetCharInfo
GetUserInfo
GetServerInfo
CommunityInfo
GarageMap
WallMap
DepotMap
Bitmap
TimeStamp
timestamp
ReadChar
CreateChar
mapChar
InvokeMember
ColumnHeader
StreamReader
TextReader
BinaryReader
StringBuilder
SpecialFolder
Sender
sender
Binder
get_ResourceManager
ComponentResourceManager
MouseEventHandler
System.CodeDom.Compiler
IContainer
AddUser
FindUser
RemoveUser
GigUser
CurrentUser
AcceptUser
ModifyUser
GCharacter
BinaryWriter
GIGDSplitter
NLSplitter
SPSplitter
Receiver
GigServer
set_ForeColor
get_BackColor
set_BackColor
set_UseVisualStyleBackColor
.cctor
Moderateur
Administrateur
Utilisateur
Directeur
System.Diagnostics
GetCommands
GetFriends
get_Milliseconds
DecompressionMethods
Places
Pieces
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
GAdminLib.Form1.resources
GAdminLib.ResourceDA.resources
GAdminLib.Controls.ProdCtrl.resources
GAdminLib.Properties.Resources.resources
DebuggingModes
CleanMessages
GetMessages
GAdminLib.Properties
GIGRoles
EnableVisualStyles
WriteAllLines
Usines
GetExportedTypes
AddPictures
ModifyPictures
Voitures
GetHostAddresses
ReadBytes
GetBytes
BindingFlags
GetLogs
MouseEventArgs
GAdminLib.Controls
get_Controls
get_SubItems
System.Windows.Forms
Contains
Admins
set_AutoScaleDimensions
System.Text.RegularExpressions
CleanNotifications
GetNotifications
CleanTransactions
GetTransactions
RegexOptions
Avions
Maisons
MouseButtons
mapButtons
MessageBoxButtons
ReadChars
GetChars
RemoveUsers
GetAllUsers
Servers
TopTenPlayers
NumberPlayers
Process
IPAddress
address
DeCompress
GetProducts
System.Net.Sockets
results
components
GFriendRequests
GetFriendRequests
Exists
CommandStatus
Concat
Subtract
GetObject
object
GProduct
AddProduct
RemoveProduct
ModifyProduct
System.Net
qSocket
GraphicsUnit
get_Default
SetCompatibleTextRenderingDefault
IAsyncResult
DialogResult
result
set_UserAgent
GigClient
HorizontalAlignment
ContentAlignment
Environment
InitializeComponent
get_Transparent
Content
IPEndPoint
set_Font
labelBombCount
bombCount
GetBombAroundCount
labelTotalCount
unitCount
_count
MyAccount
Amount
set_Accept
buttonStart
Restart
Convert
HttpWebRequest
addMessageToList
set_Timeout
set_SendTimeout
set_ReceiveTimeout
Logout
SuspendLayout
ResumeLayout
PerformLayout
System.Text
get_Text
set_Text
LogText
ReadAllText
WriteAllText
get_Now
get_Snow
FromHex
set_TabIndex
MessageBox
TextBox
Bateaux
PayDay
get_Gray
ToArray
ToCharArray
OpenSubKey
ContainsKey
RegistryKey
Notify
System.Security.Cryptography
get_Assembly
AddressFamily
set_ReadOnly
RCONQuery
Category
GIGNewsEntry
Registry
op_Equality
op_Inequality
Popularity
Quantity
set_Proxy
IWebProxy
AddBizz
WrapNonExceptionThrows
GAdminLib
Microsoft
Copyright
Microsoft 2014
$aac1968b-2fe5-4214-a6a8-60393929da68
1.0.0.0
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
3System.Resources.Tools.StronglyTypedResourceBuilder
16.0.0.0
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
hSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
www.meitu.com
%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
|9t&_-
IfnGR1
t?-wC5
<]immi
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
www.meitu.com
%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
7.x\<k
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
www.meitu.com
%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
)S|R)WS
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATx^l
FK$R-Pe
zPzbw[D
:#?Q<L-
5ma7"o
J*]bfG
D2'j\M
Uq2g2}
&V4q;c
sG~38^Z4
2D^jSW$
?Os$^Y
t*D!05
((G&zi$
:*g*G\
~t:2Z0
/FlPdVo
D#y}sJf{
Pu-`:
-259vLk
0eCC$FB9
1:,:%E/
?|i`xz~
,:? fL
Sxn[kIU
(<l@!]
QJQ4BX
k@tdAFA'j
5or|vP
|@_(K
z@neDL
kS>gc?
,cGk@g
{=^gYjWx
I']64hZ
'O%%+&
RI=x%O
mGQ`EfdQ
Y/:gWz
7bnAV;k
XEKwO
3T9Rr8
V0C2>M
j&>m3B
'@dEl]
H~D,ci
YTwWaH
t3lr5GW
uhi|vuGh
f5`N\`
Do5D=$:
YBXxMh
lAu1E .
4S$6<)S/
4rK9Y4
V'>x%,m2{
vXPdAE
>/6L++:
JH1-IPA
iq?G=_
T1F]3y
E*JZf;
/ik_}!
4MiCT"
EO_mrqj2M
|y$_cx
WV6oxx
K-%Yy>
1U%iHp
;zHKajr
2>wm~
[V,^Zy
9!GD)o
h9V3A'#A
Q0-)[,"
/"z'<_D
<7}+O,
l@}WaI
e*7PZQ
Qj-L:S
?![]qb
0P8J$>Z
` ODb8
I':vK%
g4'W}+f>6
F*hQ&L
a~"Q#E
3X_)a4JMM
'a8+&4
Yuq}uaaUW
*6zqS1
HK9v|(L:
lC&M}$W
4KtlhZ
fAId7~
B=>$p0
$J$j'_9
TEQcZ,
AIw+G1
??sD^+
Fmz~J]t.5f
5@~1zc
HX(F7`
hfkoc
.J.}](
HcukXG
sFM3N9
>IXpaF
aPH@bE
T\Oms'
@yj~Ue
R\k_&?
^F$;y.
)NmV)Q
g[5dJ2
%;&)^4|
M1k~>b
Fk&H)c
?OT9|Z:~
lNKJ58
]L3CWn
-wbgar
o)\C73
_/bRLS
z89^x,
i2v#&.
[zvnI
(:8063:
ES'_2u
}VM*M<j*
OZ1"xI
8']7M3zu`uU
"(-Fl!fC
H1q5XQ
Zl.PP[
l,]d4f
;>355>9.&5
ha;a-X
PHX6i'q=
(0s?6v
r,QFH
#;$sjc
L{5~`If7
4(0$5V
v?k@g0)
w#Qj5Rd*
0YABo<
tBl\YY>*
_XL<j&
1C[}n5
5u]:bs
L\KJJS
xl@I} m
kf#_>*)
k}B{q^uH
La 97j
QiZmyl
1ym|G"
>\3,gfd
x9V3,6.
b$'jf%n
2p{xRH
lqAqBb
9YZr$q
0)LtRHt
#6%$0)
U'E\l3
+)T?BS
?gq$0A
m=FHQMT
s6>;qC
jkD'ij
(n`U$&9
k8?0*z|
F6]Cx?d&
*"BKq_
hT-e!o
k)S@kP
O~:e*B
^GUb[A
IGbV[|P
@O2Y}XP#F
(k?P?
3rW=]5=
N,?T);
Cg?M_~
6#WUb@
bL`~Au
<53hrq
8~csHR
"21C\'
jn-\\G
z31`Ld9
~H^;RY
ME<*rg
dke)33
Dg tad|{
_(PK!JIE
C#%z@+P
{*%glH
nP-~^=B
]Q` (}
8Rxf;Xy
|oQsqia
.F}O8l
+3I.N6
-T$Y%4
D?.F=1s2D
of^0q
2nX7FmW
[^'[]-H
+GB4{Z
VgOtxy
"sCZ;/
vyN-<@
fo_&;-Tn2
7M"gccm
*'P@S3
LQyZ-V
0ZEa=j
D0ZA8=
lXxd#
1 !uP5Z]
/C^^\;
B7(%h0
Mp|w/j
6EB1^n=
9g?h.//
6tcB{nZ
H1F]X
UW<fSA7
I4T5sk|
4/KA=bW
r\LBb~
WR^ryrjf
ytFY6i
[I"9HU
74>h@*RY
Kvt:0:
-xzB@#
1fc:<E
cz\=$<
(2)a-b
t&@l(P
f.X{?%
~(:H}a
i+{v&
TogFhp>)
d~z]eI
>YIJI}
9WgLJ
P~S:rJ
4`M'IH
uEI<9N
$F6D&q(
vs4[9e
gx6E>s<.
~$&S}Qb
l1E%/7
|!laq,N
PZRP@`Zl\
aOcbyu
=oS[u^
~4eYW(V
Ziu9@X
?pC\jR
l'A]?Q
XL?~8p
7.$ p`j
>%&oyJ
OSgMd7i
eKWiRp;
K3tr2Y)
BR2gu,
!j~(&V$G
;\"QjV
!gQZ`'
g;%?)]u
<].Ni@
k3Kno8
bDT&ac
eazfQW
x$#9Iv4e
=0$nY.
~D@qPt)Xe
}o//>}
_jb2<kx
M7Rrv3a
|f" E"
DY'P6Y0
[ccDT.
I=T".W
<ub=Ck
B>$>\2
(>|;F
cUgm_
^(*I*m
28!; I
71>bc}
,W^;VZX
<: 6>ql
wC^lZF
2t{~m+
<Sh$PE
/qC\D|lz
;ooaWy
,N*E7P
~Xn@Ew
.vK~.;
rgU+Fn
Mc$WP
i~7tC@y
=_JP$u
L,!j4E
c[6?}y
1#hc+%
4wy)(Xf
GgKGW{g}
dS-5{<
_8&kuz
|#$nY(
XB7/n3
@zih'P
Z0Tw(Y
O|'bE,
)xRPP\
WW/,o^&
YeN/<z
ZjY@HSe
rE:/`y
~!`rE^
kXFVXl
obUkO^n,
^]1Y<<b
f/jtF\
~J@fSo!
[GV&7\
feW=g*?
\#FK1
tJwxW`
f58uxT
H~ Q8.w
O0YhQW
1@3pVF
A_27Mz
^9b,D$
xM<VIY
#oa<Z4|
IDAT8;
9'Y/F?
vVuj#XjB
e`<mjw)
yz ypd
405WZB
V@;)kI
AC"XdC
*L}AdX
[wYQr>
Hxr@DD
;iZRXc
pRqy7O
]wtuL~
g8g+T.'j
'KEw8f
d9V@CEa
?E6,c8>
Hf"1BS
Xi$<bjPU
sFRh'm
L_u,f,
&z>,Z%
~n.?="
) 6"UOd
,N~\32
LxR{gH
4Wmr1Q
"R w.4
:iEf9ci
qKUOee
V4nh\>
P^:Y'N
:J$1L%|A
P8 &W~_r`
kkUrko`
7} P|&
7"(YkUV
%wBx,e
)PJcGh
\hp0?!:
s;DHV'
Ubm:X(j
O~E|u"DSmC
<ic9a3
ETTY|,
"5a6+x:
HuL!lF
o.9f`
LWcUL*
mLC J>
8(2U+8
q@Qvv+
i=>#C<<
_Ziu2D
iy_d4r
~5OqSW
isK>`&
T]m!s&
JZfum^6f
\S?+pD
s9'4<I*
;$&,q7
R3%AvQ
@<.%f
7>802'.'w
5*VF1[
A<^iT(
G&F~`y
wj|.jC
0 Jx$Y
Y<<GuY
M_ ifl"Y
~fEEmN
}X%au<
O-;7}_
o'Y{M2
10wAP~
maa^ya_
1J+gS"
C]~&>82
XQfV n
W8l6[w
n^NEZ|
\qf=[
kC&]w}
kR#6_`
@f u'x
Q{^2~3^W
z MQ]&
.T!Ii*M
di26RK
0Pt:X3
}Z[M4\
>S9pzf
~`'e}<
m6-6^o0
.5%6%H
^Ok>$m
`"^(f='1
S(=8NC
KSW>Z0
iUV'^(
sE$\ z
4J_gg"
Av'PG!d3
unp^^b
r~4MN!
OQ/`$Z
G&Mt8
LD-Yf:
D.wW<S
MIn6V&
?*{wo[
U:f`.2
AVBq`,c
-w&]aF
!D]~im
2n1&I*
W%OML9D
8ELjqjq
9Acf<x
SFvU:5
9!%"7h
! m7sn
bM!yj>;
%bR%TK
&sf\bz
&VmOV.8=),0
oREMUt_
T/s>|;
{7q Yy
*.,BLdFA
@fL@39
qQoO[Z
^/r?jU
N"LRy!BY
vh]iNT
)q<yq7
3#.7M>
DYySWE
cuepjx<
[3;#D/
}MMF4X_
'U*((Oy^
Wv4iuW@Z
Q-<OLR
{XI|H,[
67-_-s]
.vA_Od?
I7:Wm):;
w/@81e
HS$'#i
Va.LiL
4$E^ 45|
[ls%Bsi
|I }}w
]9bpm1pC
'O{dq`
fDPNxJ??
Eb])[s
Sq(Pp2
7E<4ZP
eHoa-4
qxm)BU
<m#rU(w
_Z8:.S
FOpkLJ
Yi4}N}$
MuVnP(
>g[2v
:B"S`>o
QrgN"<
Q_ox=
&&c%K;x
Px4<#!
KsU%QF
u>^abN
GH2T|ERi
N4I(!O=t
"J X#tq
VMHCj*
M"Mus
?cc|^{
QO!j&j
uneV#Q%
(=i.5.#A
]L"$$;
]w[~pi
Q26pYT
j-(3M{#D/
yGZ"}^
OWi.5E
9=vgj{
UP/5z!
A_AYH3
K9/_1#
:YKkn5
YZ[_uGP
:~W0=y
l7g>]d3$
7zyvK9yM=
Fo;{`WC
tRR^|w
TvHGcq
G&eMj;
ZETp;[u
W&vdqU
"Da`&u
:VCv"ks
4 ]T<v
QdVPsh;
c}BBd:
w~7qz?
xXhV^8l
!>,.lO
_p'A-A
D{xF:b
`R9mG
#L"a_M
eDZR:8H
:5(=~ ju
M"8s$eH4/
#UIRTN+
)]=S\y
en`13"
<ONHvf
=X0>}!
9B>13B
&w ?.#E
.Gj_6lL
EI2~uu
ZJWCHM)}R4
)-R)?v:]h
GT8NJO
4}dnViiB|Mt@
66):1Y,
"=67>*
u f8Md
!VYDT7
}zFm;/
-umzR;
9fD[$`
2 ^KC[3G
1UO%m>\V
FHA$=}
{?F{h-
%ssc#
BL;X<Wq
~bRH=q
MD-Pf5
St-+o>
EHoH4pc
K !Q1"
]o{g?Y
_b$zP-b6
$i#9dh
gl5:@3
&*|Y]N
d"f(=/U
L>]ACR6
E-;sqG
+(J|c.
!A`4z/
DGdH@(
D 4K-_Tio
N.2LR%
gwf!P9
XSKD=y
$Q,Dqo
BTdn#yT$
b$RemN:
?/}B4y
Se_'z_
WFkc[{G
Mou2f[p
T[&2C#
Z?IlRq
Nn97q
rdQ9!
#My$W^f
n$wZ6~
8s4Z=~
w_DBej=aA
kW_F#B
+Mc'Vn~
a Ta?
$$qrNG
Dje%%qN
)B<+b$j)
p"d6<]r[
giG[y1
O\xUvR
S-#F[~
kdjRu, q
Q -5d\h
.y?Shv
Ha%UZc0/x
F.x(!G+
RFp^|na
:|xP@P
AUt#V0)5m
FS7+c~
%2%12E
GJo+{3F
sud]cl
Vg'Qto
Ar[9^Yw
bq0zW&
a]}_dYL
V#:LD:
'@6/
Dj$~6P)
1;<+"R&
TU"aKqy$
"s.5Z8
k%fUB:)OP
|u<-gZ
m$d|J3@e
{BG>|>
m_Trdl
n;d9br
X(49q
o?uG?[W
lXf>}Mj
%!dA-R
pL%34m
>9[]4|cnu
QsAqD1h;`
f"Q0OG
w=lhq7Y3
$5l6z`
o>2X{jAg
<+Um!A
~pj||O
'K+VQ8
HC;K 4(
!R,r%!
J"U>I6\
xI^axtlQ
5+M?YgBe
%L\jAFtC
[t s5M
J]0.li
G9I9q^
0<'N>9
$n+[x/ Z
Cyc^^@
;<~]:_th
Qm7G)r
%I~ecVf
CqVOPl
5?Ku686
$r(&,7
U<MK;
,CYZG.?
<qw33;s
qo#i4T
M88KhB
e=&%y_
wkMvg)J
x!zF\j
#oqP)|+
s_trO
ubH%i8
o6 =V9
#F c<V
e^=,Qj
@E~/(0P
^z<.pW
gFeox4n
.t(F{h
hFrpY>7
kDw7JNe/
p_)?}8
grnt`\
nNw_3~
JLA ".
?5VB9?{0,
DOF4ZS
sO.iy
7gHeeq
KAc](JxM
8V1|)E
D~6Xl"
~oiz5Z
&|[PLw[U
R6I,MT
-Guy8%
y+x4|Tw
_#3%}O
*J[>b?
51)vIr
>#I"vh
F*{>!Qj
LAC#Oo
blHq(D
5 ]/RZ
-(8H)Jb
iSV i
Z\'^G"
GNo1>}M
h.kmqCM'
"*(`zt
6utMM=
+o\LM*
szMS U
K-T%(3
/^Y<cm
|:+-BWs
C~Tc7=
@^d)R#
k/\jS!
as3whf
mJc.OS
{k~>iw
a3t%hbwD
MCf)GK
p!4\S"
r$v%4X
~_+W:O
\X;_hQ57B
-O@]jm
?kB3NTh
-AIdJF_j/
/Vi4$CT
0@@Kl3w
[>TVD-
OYZ#"{#
8fnJ_P|
,S('M7
!4S]<I
C]sy4%
B3|VlA
r;LJx^
FXwz :
c q9,W
.Q;&U6
4kh"<Q
eO>S*a
u}v/O)ltn6fv
k0gZUl
ve_qZ~
=do_[(
#hHl9}
LHWX0F)
iCH50z
*Dp}.qG
gH6uWf
,cTFr~~QDD~~N\h~<
g_N:b}y
WGF8v)
[`4uzX
DVO49`
>0q+#)
@20@0b8
I5(PY*<
oFuKw]0Q
]x8rog
"A .2O=s
(B-^O6
!U}IEp
"2Z\ns
Q!xh^)e
WVW0&k
u+a(uX
VaS6rN
1M+1B
rIblh1
KimN:+!
o$`=,$=
b+Q3,i
[n`u-v{
HW_C\j9
CEinAX
X*b&|3
>k=p$<
7C|M\
{+w-|(^
&7nV9$
h,Z?/%
YXPE<i
qmYG&?
a<31M
V,*|_D
N`zweQ
8x8)\k
q^]=cA
bl'%Ckp
syJ]5x
}v{\U)
BPo2Q8((
_HCQp~*N0
{?l QR
;Y+]X&
[L"vL0
+-jPJ8
4Ipa4
[5q2g5E?d
}7Cwe^b
Qj i.?
:e:E-`Y
,&34<Ks
\X+IO\
M=[zi9J8
E#W=j
"M5"Qj
B9EX0e
8sk.#h
9$HDxP$
c)D|D
eU]S9j^+J,
~)7_ge
OyvINI0
}L[5\~
I37#e/P
p0?eMQU
z_{XXC
0f%{iDt
V_q=KO
P>AR-P
W^TRb`5
yAv":1c
$A"}DY
p6,.BU
e':t4-
]oF_^l
T+P2$J
J:1x>Eu
k'|zY:
=awJr7.
EZznkm_V
70I(uzq
mOL`Vi
%j@qsR
Bg o=F`
WDZ}[m
]&m~$_
Xl;i~}
7#K>V{{
~lZp18Y
DQ%g(!
=4g_Q`#n
|]9 ZE
$E99[C
y(wiPNb
UQ1-uw
m.$'~}-
un^wSl
V22;MS
/Wik\.
KmMy5$
}!QO2A
42|=Q]B
VG(h$
u2~0<(
u|WG?ND
ykbdp^
Hh)^5#>
%gJb9U
`!@FCps
11ro!7^
QPLUbQ
[z1IdU
'<k;j=
pju-n
h/cUTYS
QC*CS[mo
#=Oo1)
UNNn#^
~ND^a_sQ
;.6h/
~60*$r
$4<$I0i,R
Mp?7!x-
N/"rN'
dl'9Jj8
de&FC#h
j9nzw81
/j]J{Z
*:"H2)
q36b2X
GNkG;E
dR'gqHf
LNUjJdeA*
uIU_fZ
:aT8MQS
PF3YJlY
|K4(3|l
qc4*!:
pS00cR
I?h?'e
3*9`DS,Q
7H2zFa
`#r4Sug
u}VN8H
q#\i`(5
;.B/%z
qxlfbH(
I%W`wh
vxYeSG
QvS-Zl
sWD#DT
:3znafv
nUe5kN
Tp}.P/
FVm0q'
\PQ>('p
d0OjM7
V`C*u[
7z8bfAf
8ns#bI
61j1-i,
K4qRb2
F2-)h}
QuM<tI".<
C*f?\~
<6,1;A
4IDiTX
'sXDyr
q"bJ]Du
O/=8xG
vog6)m
b}VlFC
BS+,aL
GQt42;{v
{^:3'J|0
XIHAy0
(@VPWi
h#'U:*
b3YZ/!
J Bvg<
C^$''kUG
6)[t|C
*8b8*c
d(p2T0
&2%{7C:L6
%"$R/;
,L*Ot[
DB@C?N
GGIjmh
ivZu~
{eX94g
:(l-1E
`GB\Y2
#bt@6&!
gFqvDL
7`m2 ND
:?U-'[F
(z3rCb
%7`Nuh
r%,_!NM
_?rqza
ty9{~]
gnzaQKt
"/ub^VH
Sn`CZd
x$da\v
Pb[weP
DsCYA;k
2-vYt\DY
s,c&rf
Ji2Sn|3
#$81ZZ
G'6m$5@h1v
{Y&!Y!
[Z:99a
\p)zw9:
`&Ln .
|LWEF<
lk`{-_+
>7TbuS
\8?JcP
|Z~w9V^
<$ViQ-)^)
65*XEs
A`|u,{Ku
a1f6n!
~]'o^`q
zDQ-L.
j *aH}
`f&56C
:I`3nt
Eke1ze
V\Z=gJ
sJQ*^N
1=kno9*
);z<l#+-r
wZ.3#~
2tY1JMk!
;K?S{Vv
f'\h0e
~g!(E:!
RJi<??
i)fZTg
ytX(WR
PwoB1<
8wEn~:
c$ZQ,)W
|-0*2l&z
%.5<'0
?wA'GKI!
F[Q*w^
o}(~r3
+<IDAT
u!A4Bi
O%Qj{h
bGc]54
WFW:XaE
]A2</t
*}"a#G
l)cM0l
yjXeq
IRg#V|
9SAXib
x[BLT
8E"b+2
-Ew?u9
Jxju:6
P"~I'o
7mqY7~
o9OG+)jG
icebGg
_<(vDj,
;aJ^N
m~jqBy
qC=PXZHj
}H~p$8*
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
GIF89a6
ppppphppbd{
crx`````TWlvTbiPPPPPHPPFLV[LNOGTZ@@@@@8<>?7DJ4:=00000*/8<#*-
NETSCAPE2.0
GifBuilder 0.4 by Yves Piguet
>@$ptHIc2
x!81^~
p8oYFxG'
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADPIrY
!This program cannot be run in DOS mode.
`.rsrc
@.reloc
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
Z^+o\-
W0DhW27tnx4
+VMIp'Y6g#L
#=Ah!c\
;A/Z,m
kb[{*;>v
lwiwlw
j/ISA:P:t
j$IPA:P/tJ
j3ISA#P9t
F-\?R*
v2.0.50727
#Strings
C2200.dll
mscorlib
System
System.Drawing
C2200.g.resources
<Module>
RuntimeHelpers
System.Runtime.CompilerServices
InitializeArray
RuntimeFieldHandle
.cctor
Object
BindingList`1
System.ComponentModel
IComparable
String
DateTime
IEnumerable`1
System.Collections.Generic
Assembly
System.Reflection
ResolveEventArgs
ISerializable
System.Runtime.Serialization
EventArgs
IEvidenceFactory
System.Security
_Assembly
System.Runtime.InteropServices
IDisposable
IEnumerable
System.Collections
AppDomain
Dictionary`2
MemoryStream
System.IO
DeflateStream
System.IO.Compression
Stream
CompressionMode
Dispose
Evidence
System.Security.Policy
set_Item
GetData
get_Name
ContainsKey
GetTypeFromHandle
RuntimeTypeHandle
Monitor
System.Threading
get_CurrentDomain
ResolveEventHandler
add_ResourceResolve
ReadAllBytes
Convert
FromBase64String
MarshalByRefObject
ToArgb
SetData
Encoding
System.Text
get_Default
UInt32
BitConverter
ToUInt32
Activator
CreateInstance
_MethodInfo
GetMethod
MethodInfo
ValueType
ToInt32
Bitmap
GZipStream
MethodBase
Replace
ICustomAttributeProvider
ResourceManager
System.Resources
Exception
Collection`1
System.Collections.ObjectModel
EndOfStreamException
IEquatable`1
ICloneable
NotSupportedException
IConvertible
GetBytes
ToDouble
ToArray
UInt64
ToUInt64
GetType
IComparable`1
StringBuilder
Append
ToString
GetExecutingAssembly
GetEntryAssembly
Concat
GetString
op_Addition
TimeSpan
op_Inequality
<PrivateImplementationDetails>
B0CFC3D6A6111A0ADCB03ACDAAE9C04533E17A5B
ToBoolean
get_Evidence
Invoke
Environment
Thread
GetMethods
GetPixel
get_Width
FromDays
GetManifestResourceNames
GetObject
GetTypes
CompilationRelaxationsAttribute
RuntimeCompatibilityAttribute
AssemblyTitleAttribute
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
GuidAttribute
AssemblyFileVersionAttribute
SuppressIldasmAttribute
WrapNonExceptionThrows
Loan counselor
2006 Mercury Mariner
Twin Electronics
Twin Electronics 2022-2023
$200903e0-fa46-4f31-99b1-bd5087556610
8.3.6.3
_CorDllMain
mscoree.dll
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
\Data\AT.dat
\Data\UN.dat
\Data\
http://localhost/cl
ogrp.greedingames.com
D5XU6AQ4HBOC
ArialBlack
Arial Black
labelSize
Microsoft Sans Serif
textBoxSize
buttonStart
labelBombCount
labelTotalCount
System.Activator
CreateInstance
textBoxBomb
textBoxTotal
657450
627468
GAdminLib
https://client.greedingames.com/
/Connect.php
gzip, deflate
GIG_CLIENT/UserAgent 1.0
username=
&pass=
application/x-www-form-urlencoded
DENIED:
/Disconnect.php
NO TOKEN
/Answer.php
token=GETUI&username=
/Online.php
token=FINDUSR&username=
token=ADDUSR&msg=
&username=
&friend=
token=ACCUSR&username=
token=REMUSR&username=
token=SENDMSG&from=
OK:SENT
token=GETMSG&receiver=
\Data\MSG.dat
token=GETNOTIF&clean=CLEAN&username=
token=GETMSG&clean=CLEAN&receiver=
token=SHOWTRANS&action=CLEAR&AT=
token=SHOWTRANS&action=SHOW&username=
&admin=1
token=GETF&action=SHOW&AT=
token=GETCL&username=
token=GETFREQ&username=
/Admin.php
token=SHOWLOG&username=
token=SHOWCMD&cmdt=
token=GETCI&gtaun=
token=GETNOTIF&username=
token=NOTIF&notif=
token=REMCMD&sid=
&cmdt=
token=VALCMD&sid=
token=REMACMD&cmdt=
token=REMAVCMD&cmdt=
token=ADDPROD&name=
&prix=
&type=
&desc=
token=ADDPICS&pid=
&img1=
&img2=
token=REMPROD&pid=
token=MODPROD&pid=
&name=
token=MODPICS&pid=
token=ADDVEH&AT=
&color=
&color2=
&sale=
&featured=
&speed=
&fuel=
&places=
&tuning=
&prixig=
&water=
&category=
token=ADDHOU&AT=
&pieces=
&idint=
&ville=
&popularity=
&garage=
&garagemap=
&wall=
&wallmap=
&jardin=
&piscine=
token=ADDBIZ&AT=
&stock=
&depot=
&depotmap=
token=SHOWPROD&lim=
token=MODUSR&username=
&email=
&role=
token=CRECHAR&username=
&gtaun=
token=GALLUSR&page=
<GIG_DATA>
GAdminLib.ResourceDA
SOFTWARE\\SAMP
PlayerName
C:\Program Files (x86)\Rockstar Games\GTA San Andreas\samp.exe
\Rockstar Games\GTA San Andreas\samp.exe
GAdminLib.Properties.Resources
duopule
radarpic
ID Produit
Nom Produit
Quantit
Description
UsrCtrl
duopule
radarpic
3e5db528-19ff-4195-a16f-322d6d69c52e
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
Microsoft
FileDescription
GAdminLib
FileVersion
1.0.0.0
InternalName
ufi.exe
LegalCopyright
Copyright
Microsoft 2014
LegalTrademarks
OriginalFilename
ufi.exe
ProductName
GAdminLib
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
Antivirus Signature
Bkav W32.AIDetectNet.01
Lionic Trojan.Win32.Generic.4!c
tehtris Generic.Malware
MicroWorld-eScan Clean
CMC Clean
CAT-QuickHeal Clean
McAfee Artemis!0E8EE45F8CF2
Cylance unsafe
Zillya Clean
Sangfor Suspicious.Win32.Save.a
CrowdStrike win/malicious_confidence_100% (W)
BitDefender Clean
K7GW Clean
K7AntiVirus Clean
Baidu Clean
VirIT Clean
Cyren W32/MSIL_Kryptik.IUH.gen!Eldorado
Symantec Trojan.Gen.2
Elastic malicious (high confidence)
ESET-NOD32 a variant of MSIL/Kryptik.AIIT
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Stealer.Agensla!8.13266 (CLOUD)
Emsisoft Clean
F-Secure Clean
DrWeb Trojan.PackedNET.1889
VIPRE Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Generic.bc
Trapmine malicious.high.ml.score
FireEye Generic.mg.0e8ee45f8cf24683
Sophos Mal/Generic-S
SentinelOne Static AI - Malicious PE
Jiangmin Clean
Webroot Clean
Google Detected
Avira Clean
MAX Clean
Antiy-AVL Clean
Microsoft Trojan:MSIL/RemLoader!MTB
Gridinsoft Clean
Xcitium Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
GData Clean
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis Clean
ALYac Clean
TACHYON Clean
VBA32 Clean
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002H07CF23
Tencent Clean
Yandex Clean
Ikarus Clean
MaxSecure Trojan.Malware.300983.susgen
Fortinet MSIL/Kryptik.ABRS!tr
BitDefenderTheta Gen:NN.ZemsilF.36344.Um0@a8e8gPc
AVG Win32:CrypterX-gen [Trj]
Avast Win32:CrypterX-gen [Trj]
No IRMA results available.