Static | ZeroBOX

PE Compile Time

2023-03-15 22:09:39

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000bac70 0x000bae00 7.85231904595
.rsrc 0x000be000 0x000083bc 0x00008400 3.64103601513
.reloc 0x000c8000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000c1c78 0x00004228 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000c1c78 0x00004228 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000c1c78 0x00004228 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000c1c78 0x00004228 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_GROUP_ICON 0x000c5ea0 0x0000003e LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x000c5ee0 0x00000328 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000c6208 0x000001b4 LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with very long lines, with no line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
bUW{ffefeeffe
ffeeffeeffe
feffefefe
ffeefefeffe
afefefeffefe
9fefeffefefe
feffefefe
feffefefe
ffefeeffe
^UW{fefefeffe
afeffeeffefe
ffeefeffeefa(<
feffeefeffeYa*
feffefefeY
@ffeeffefeXa*
feffefefeY
fefefeffea
fefeffeefef(1
Xfeffefeeffe
affefeeffeefa
Xffeeffeefefa
Xffefeefeffe
Yfeffefefefea
Xffeefeffeef
afeffeefefhah
Yfefefeffehah
YffeeffefeXa
affeeffefea
Xffeeffeeffe_-
Yffeeffeefefa
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
hSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
www.meitu.com
%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
|9t&_-
IfnGR1
t?-wC5
<]immi
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
www.meitu.com
%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
7.x\<k
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
www.meitu.com
%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
)S|R)WS
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATx^T
:KkBjiR
4+^~dM
coYz*H
]yguP|
/.mLHJ'
^&(tX9
m&^:t-
y`q'2S'
wh>}\m
Y'3o~
~'$!4i
3o3EXc">
<g=J#<
!m7]X^
UQe\Ud
Y6D#tL]
yWz}}
\:j,A$
]Th322WZ
Tv;res
X7oYZta
GLs^$q7`
RF/hc_
^,CL|
;d*,UK
CZuF>S
7B<&<O
z1hX\
~Dim{.8j
Y:3Tyn<
bFU\FR
GD]?=8'k
.ZAV/W
WYo4v!
2HRp>]-
Li'|%r
Vy-J_O
goY}=|
L>{&h&
Am.4u
$=q2-p
My1V;/
sz4m={
k]?zn
iBd(Bu
-R$=Hh
:PhYF")(
Bt?lv&-
lOx*pt
Gx+`ir0
*ecb<k
)|-k}q|
%r|Cbo
di<}G\5(]
y=_o(
d6X^PP(
8ehLm4q
B52[v.
fs?S9}
|\_OYx
y'Z;nq
n8Xc1*n
5[js&{
\.hd_k+
+&=l1o
dJVRU
>vtp~?
NWaIh[N~P
aBmce2
oBk5vv
"k)k+zy
_\P$rSB
Zbtc#k
;m-9RrM
evbcvX
ziSS9_
7Xe-_s*9y
'?Lt>q
"AQ6~
|dQ'{@
Tk>c#0
gDHNJ7
w[/Ivi
(Q'#p&+tx
qR-V#P
-L3sYT
kt_tEM
BA,<*(`
M$^hl/
l?16RiM
M["f4>
?o{M7t
\hvXP
AO*nBX
B-XdZ|
(j#sy[-
9Rb@3?
]<!yrB
x>eRA
t0gO.]
!j<w}zG
C%Gii=
UjQbA>R4U
cVPvO@Dg
%,|*n$p
RLd26N
z]apyYu6
,~6;89k
pNEN1+#i
O%^_FO
=,Cr*.
10%zy"
Vpu;d:k
+mx,Y?lU
? M3|[[Q
![ZM5q
`).J!0
A/l+ZdM^{
bU=]?-
77Mv=}e
rR1jo%
6Q/cEV5
(lHRN>D
=W<FS{E
aU(iGBh|
FmSneb
aDQgt
uN*-cA
Hn^2.
p:NzW+
OW2V[)#
,0I.{Z
[@N%9-D
FB>>!4
owqFgftP
&myYqnK
%cJ:2[W\
9s^6b`
KUX~zA=K
Y6F{u`X
+RR*S!
iHu.Qv
yc8FKd
Fh%}*C
+;_;ya
/;6Wxy
37xq^-
ZbW|Ah
q('1IU
L)B"(.
r-Hxnu
iE'I>K
7'cZ+A
/3"-32
X=F{wP
H?)JVO
hmX}8b
r^HVUTTn
j6h'[>"s
lvm>S>
9AyPLU@
W"u{%Ki
-]g|Ng
oefuIO
< b\-_
U9:&r
zns|Ea
mX#Wao
9c<^wt
!%_],o
Zd#2i|
,&b;_d+
}4=G-y
5}y`ls
+(*Zvf
SzSOHz
1h?Wd)h
c_Q(EA
C"o'=O
A$'.odP#d
I:G>v\
@bN5_R
9f}{nr
<Tib7?
f]`Bd.
FK7E1U(
]r`U:R
.==57O
!ZO4q0]-
`-qt{%Bi
W|1\09X
KBPpE)
r'xU[Y
f`a.6*
9PKc+ph
|@+}k|
!BslmpA
q{d=q`
7t5O-r
qrht!s
!_-6>e
mA`Knt
}0nCAx
WAc9SB
-r=qN%
^}^,Ngm
@wag/`
u%=;{]n
_,0kK$&
&YD=>^+
/0k~`H
uy#FNl
f'FF7~
zR"K -( `
KG+uuJ
$M5T:
+2Oo:;
;=?zxU
'jH<6t
;=ZX\zN[
/X9<E?
sPw%Vu
8dFE7i
e^09[i(
'LnJ[5
ny2-+b
_h8zKC
!Jt<2~6Ahr
xmm(0Z
((*b[P
l77>Q"
K 9h~B4
rQ^Y-S
7[1boC
4tr/O
k(f;]j
/3N+1o
%/Y<+2
EKn$E~#w
m\A>j(h
JC$P}9Q
<9Tjnqmz
kKwZ5i\
0g-V")>! )K
kd0=h5
^fJR}.
gu=any
0<f$O
zI}.tks
r%LI)4'p
}[TVox}a
*Va[5tl
}ux>(z
gZux>t
m!^O.8]
y~v9h
ryox3ng
V\E,Y,
l6VZ)^
{9N]Y3
)Befz:
TI,UH%#m
#^?<S]
m<xd&s^
m;VxIx
PH ^ZQ?
>zDsYH6
:vcB$$
N7Z>^Q
"f}>d*3
y%zyEI
JUL,.H
e5%G?_
N3g.4.
xTVn2y_
~+*1m%BA
.nfNk@Q
G`Wk*B
V5fcrH
RVxz:3W
FRRk`
vjp?WNP^
o3(-/d
!+O tM
f>t}w~m
Hn4<V6[
(!)/@9
oR`)77
>^[{Nd
amQ k7
P:,%3a
}Q}GnpB
:<?suq
jqz:|}
Ys,/*U
"CqU5<
u841M[o(
?Zz$^kw
T!DzX
qD;0V
2t}@Ee
'o,q5n
vmB6juh
#Nk%ie
X*><zKC
u=:7&X
CClR`*
?fSD\
k:9<7>
Vjm'B
J8$94BEYphZc
dBoI3|
$`u"Fr
F#c[(YE
/]D5:
~.;a%*
rj_Rt3
t<&%"y
JV\;s:
yKuSoy
A|HP%~
q\sjEY
y/Ee4
s#c'[Tuyw$
ri~l}B]E
!`]-/qM
?6OM'^
KN{1HL
Ug7BEM
&;mV~d
]~:<nC
3ATm>?
NhZ)Ibt@k
^h~&$
CL ./U
=s|%br
J8=&]C*XZ
Y{kyjf
8GuVXO
"/KGl\f<
XrFN^I
:YY)'+
z2Y*6>
eW+vd3
ePT3~V
[]y/I+
G9r_n-
aMp(|V
vNkNl?g
P6qx}b
{FN81Rv
3%?4wF
!hGht$
I|?YP6
%4(RW}
{R~u*4
^P~RY<
F*gn-f
dR`-@p"Q
(px>)_
JX}Pg*
+<wnj.
Kg`y[8
./q\|7w
%C">M3!
FCzO"V
g} 3Qy`
$=J7\quU
(96S1*
GGoUrA
?*`C`4<
L`8<FU\l3V$)
EJ]B<.
zy="%0 ,
a~NBKo
Y6Ez,&w
Y^(w`e
r3|p[Jk'N
D-YW_ir
wn48v:
&<fZvw
QsuLiyC
Tm~f>/2K6
wl?}v
`[(TB'J
?x?H9h
Y?p{3F
O;@U<C -
Wyw0nm
r;UB\!
E -slk{
&$SBZK
@%(AeG
;/&U#1=}
@Q<nC^3L
'U#Og{
0p6RZt
TL` B
z6b`s6~
iU4Tg\
:?y?=|
z`3lL
E{#f\Nz
ET"~9sA{#
)YHY)&A
7{`w(u>ws
8oLwIQ
\Vpn[H
~s$o{
ZMsO.h
%FAn9]
Q&hq;g
5AgD*s
=rykc6
O&;^J-h
5;YIrP
[PwYddq
k#oehW
6Hxefw
q>>m`S
XX=Ut"4
U^QLdPr
8]FE8k4@4
O>C'2G
rNk!q%n
!qsc>o
9>:\4s
5IubYX
Pe0AE3
T{d>z!&[
KS4GrV
q,zGh1
FZnhVg
v6bz't
E4"^gX
!~l](^
Vh)-|B
Ta8k!k
(xU %
BUUM-g
'PG[|J
8B, 3D
:s5Nu^H
96Fin:
6vH0(C
cR81~6
.mO*gzr(
I Sx~6)
[,LhN@at
gbm(G@
Zwo]S>
o)R00G
<~{1(
]AC?<~I5
m7(S:~N
a?bK|l
s>_C[a)
9_:k'
E{~CAM;u
tK)5I.
1Qx\VY
c<TB?
EczS_U
p$d((k
&wj90d
:91W#Q
U=6n1{(2
,,n]Uu
$fcgT$
9LS2M1
)F]e04
:6 omP
jq@naW
{_Nl~`R
mRGGu-6
V\>wB>
s;?G<w=4
xD_m"0{
)<UPIr
O# BL8O
?SZbIT<O
B>plo~,
R1SSsH
q~Q7bH
u98tf^?
@o=pQR
e=|zM
!0ZKRI
MPZ} O
,/Ci1[
F|4!SEN
*Xq+Ro{
=]?zb
6VA7m<
=Fy.Sv\9
lv23n%
|xhe{5n
1iPiLcF
'_~jV9
1BYh}P
!F7D*+n
RjSo3s_
s=^/'YW
N/ean0
Z{Xf6M
]6.>z[L
a591h`
_ksR~7`
=5KuP"
7&eu^3i
}W{~Psn
t<8zyZ
Xu{Yh+
fXI5j-
,fH[+'J/
^IS7(.[
\mzQH-
U|(=g@
Nvu>nu
*-y{u-
1OHCP>
%Mwn~7
cVG@^K_
T#`PS`'E`
]Z*[/rm
Uzl@JX
._nA(!
,g;a+
ApK;TCR
Q 6JBH
D bLc4
cns+.2
*mhZ}c$
p/X?|3
59q #F
[n<v3;
`~)S*DY
jh(SKI:
c;|'0Z$
HO>M] 'y
/=2[7c
GW2/>PC
3~r]~wl`
|E0N_M
UlnW9p
IT ?u]1
Km58#
/Y+eT
M0_HLz(
n,VfYX
ovL7}N.
<vPTe#
2pT@9^
h|l?UA|
_m^r9YP
qY?PL<o
8Zmp>Zmh<)
{ vjQM)
i;-Od_<
"ChxQN{rb
(&)3f&
9=Q|o{
<wZ,`4
R%EXa$
]QqPrU
- {$|b
k[4d{bH
xG}R,Q
:9*E|C
Q]u`}t
=}_lXc
]9`G~4
~Sg>pCFl
@Q!4JM
Y#Q*rC
}BO,6
CTRs+
gF>u^?fH
\9h{lL
2p0>S-
S5VdT6
z1"a(k
+5roHs
%pCk)L
jEj@kO^`p{~
C$r'ip
lq}>6b$0
k.ONrr
|F`4,)
^t'c`kk
{!T%he
Zz3|FC
6c,g*$
+4?:(5
Ypp}#;}
{-SP`<q
x>>@~
_!|6Ge
;1LkHC
ea$@7{Bl
R[D!ah`<
$;*ddV
^6}I|6
gtx%6_
R<'(EvW
O1OD[X
^M`QR+.
ytV ddv
(S&@VO
r]Yeu?
N;u]+v
M!"^_k
EH4Q6e
;I0'[J
Rv%[M_
"b-LlV
JvM^[8]
?QC`41M`.
V61?,?
[uK;gc
&&!pl&
HESArBCaC
i(w)^s<fW:]
Xls>V
ZdEj|UQ`
|)I+|C2
((LK<q
=Z8kKf
WS#l2/
+C.-"y
IH@'$)
(X%0R/
tFPSn(
Ic]?q@
jG.|Y}
#;K_El
7JyG'9
eWf#y00[
jgB;z&9
b<7sa3o
lZk2ZT
/]!,n_
RmM^e_
V6@FNY[`
\[m~4bBK@
,`/R4D
jN 6p0
t](nGF
sH!@37
UHE}9j
bBufx?
{YJ:J)
U8h\Bg
=u?>E,
k+7$4|
_}~-iW
- {gEQ;{
u~20Hg
gnu4A4
{8b$-R
?BYE1/5
r]rr,h
98ncyh
$Mh@|E5
NV%maH
=1M=8I
wE9a9?
bU:.NBD#
,JW4El
v'$YV~
vsw{4
2AhtC*
F|&d_j
y_'/oX
ZcQ!!!0`M
<ft\Euz3
.c:}}>
q.:ou?
Df`Qu=
Dc[.!R-
#o&]w>
|ooGvw=
1VHOi^
F.puA/
u#PuY'
?/D&[I
g[\W/Rz
]|/~{t
CYr<~[kx
nbOr"C
P"AbA,+9
2yPlI8x
mYB,kN
cVB+U.ghdG
/%k1_`
e5K5>4
}$fufJ
yu7`6.
B-]I=
%BuCCA
=VF)8"
B}1<9QG
ZPau#=
P#ZrM8G
,aoi0Z~
qS;&)v
rbHlF4
Jv41F%
-+ 1T}
9M+D'<?
&;H),c
%ZRA!<>B$
|Y~IqPU
5a<6Ph
w_V5W;
I?xoMo
S{n=83
G+*rdg
lU/2/v&
T+`F}5Qb|
]h1Be|I
}Y1Ga%
4))o<<9
5Fa459
l5-Ko$GV%
bL@N3/
hz3V'0
L1MkU]
x(^m=4|
E:\WU~+
IZb 0#
/?w2>5
?2|EB!s=
^K!C`C
Zkt<^L
HuDc'=
B$2]```
dTn'>0m]>
:tPrx-Z8}
(<A$l/b0
_3EW+G
RV4q#t
(N@t\[
0.:-*l
#)c:E\
"Vt#\~)J
i.rd7w
ao\v;*
JP#;p'
IO{}uiEyu
DL"?$f
HPa6^B
^weQg([
@*nsPklt
9_X&c3)
Dnx=Bh0
WxyExY
!:1]!*-
W/G%W,
+3T4e.
t<p<oE
!CPsOL'
7b:F(^
IUOlLG
14rt*W
HfOUsW
&0Z\34
oWoSl{/
;mM|mH
{sR3_Vl
:/d(C_
_}*?G<
kTMx]*
v"U1!-`:
J8(7$|
ty!SNs
aiH \
_,Z]9~9a
G|I./=
R|f$<V/
7pc.tZsh
}~mg]!
quH(se8
m[L'qD
jKE?av
QY}mlz
vDoKY"
m'[W8c@J
wMG;+@
JwIk(^
J%$i(s
jX(63e
$@v6/]qp
<{m\bNJ
yI+Qa
6#i<T/_
Y.l@r[]
fk7zP:
P4TfWC
1gK^,~
17XZUTp
I!6^`@
4,|K'n
|Z+^5a
v<2g`\
]:CM]R
G,O\KS
su&X5;
Nwl6+:
>qFn=a
Vn-z4t
<0+,X3
e)HBj#
[vhv]xi
OILk;j|<t
/ZN|{3;H0
VJ'lq{3
0ug_?=L
\"~/DY$
M__u6N
+jvnCG/
pcu%wOmx|<
@-gjc
pPSO+'
oO"8Whl
3"w-RN
bvs#GksBY
A-{'Z=4
.F}^ua]
X\du.`]XD
s[9rd!I
Jgz_fS
1kxR]y
62zL&^[
t-V4?:
{lVOp}
1Gd"Y
C:v^%?S
Ccs4(rT
Nf~m;h
D}Cn"~
v_]%+<
xha3+
Y!h}6Ku
o|Si[C
*t>vldx
ZK8G,Q
$?&IYo=
8r4$aO
H>8RWL
{F5+KiR
}~2|\>?
pd~+9w9
E_9\O<
Y=nD9:1Hz
8hFMk\
)4nU(J
smSb{_\
QkE<q~
F1,qpF
Dz|o%"
VB]X(g
$W[Gr^
mIjuV}
@?`yHu,
ZHC,LH5L
@?UUq|.4
6eKJx
3?$u]&AO\
H`s,)~
Rc!@i,9
,HQ;>Z
rq/q(
:Y M`4Aq
id%%u^
j2(7yjQ
`jm\pL
;t=txbB
YsOv"p
@i=&-df
Rj`8>M
"J~s
X|%S&'kG
ZP<=E|
UvaMdVC
Y[H-*
D` Y.B
gQm.Bk{
mwmAZ$
g8Mo?l
sG@a06
Bf4i`}
iH$q;uS%WG
3@wJ&R
TXjbi"
uMG|NO\
\_B`2X!Q'
[wLT?k
O<i"5$
]&Q]H3
Dyz)DJ(
n~~~Ut7
x/<zp]
h%>e3H
3$/JD[
G,(w!e
#)w0d=Y
x;}(lz{C
Ky=#2A
=D%A2m
P#RN!6
<y~xLj
bc]D_Y
@hfo4xJ
,[wKpq
&U,jg}
-!(0dS
]\;?-h
\){Wp
MxHUW
XlTI;C}
>O_>|y!ow
9|B@<d
>uE;r<
qJlGQ
1%ZFH#h
Mm>gf[
^s<of_
P*2Afr
QU^JF0
\1}0KI
R*Dj*^}n
$^ZXjU
K/WoZ22
B,UW8ai
AS:L+M
]<-t[${
97](:~=
b3iuub
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
GIF89a6
ppppphppbd{
crx`````TWlvTbiPPPPPHPPFLV[LNOGTZ@@@@@8<>?7DJ4:=00000*/8<#*-
NETSCAPE2.0
GifBuilder 0.4 by Yves Piguet
>@$ptHIc2
x!81^~
p8oYFxG'
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADPIrY
!This program cannot be run in DOS mode.
`.rsrc
@.reloc
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
Z^+o\-
W0DhW27tnx4
+VMIp'Y6g#L
#=Ah!c\
;A/Z,m
kb[{*;>v
lwiwlw
j/ISA:P:t
j$IPA:P/tJ
j3ISA#P9t
F-\?R*
v2.0.50727
#Strings
C2200.dll
mscorlib
System
System.Drawing
C2200.g.resources
<Module>
RuntimeHelpers
System.Runtime.CompilerServices
InitializeArray
RuntimeFieldHandle
.cctor
Object
BindingList`1
System.ComponentModel
IComparable
String
DateTime
IEnumerable`1
System.Collections.Generic
Assembly
System.Reflection
ResolveEventArgs
ISerializable
System.Runtime.Serialization
EventArgs
IEvidenceFactory
System.Security
_Assembly
System.Runtime.InteropServices
IDisposable
IEnumerable
System.Collections
AppDomain
Dictionary`2
MemoryStream
System.IO
DeflateStream
System.IO.Compression
Stream
CompressionMode
Dispose
Evidence
System.Security.Policy
set_Item
GetData
get_Name
ContainsKey
GetTypeFromHandle
RuntimeTypeHandle
Monitor
System.Threading
get_CurrentDomain
ResolveEventHandler
add_ResourceResolve
ReadAllBytes
Convert
FromBase64String
MarshalByRefObject
ToArgb
SetData
Encoding
System.Text
get_Default
UInt32
BitConverter
ToUInt32
Activator
CreateInstance
_MethodInfo
GetMethod
MethodInfo
ValueType
ToInt32
Bitmap
GZipStream
MethodBase
Replace
ICustomAttributeProvider
ResourceManager
System.Resources
Exception
Collection`1
System.Collections.ObjectModel
EndOfStreamException
IEquatable`1
ICloneable
NotSupportedException
IConvertible
GetBytes
ToDouble
ToArray
UInt64
ToUInt64
GetType
IComparable`1
StringBuilder
Append
ToString
GetExecutingAssembly
GetEntryAssembly
Concat
GetString
op_Addition
TimeSpan
op_Inequality
<PrivateImplementationDetails>
B0CFC3D6A6111A0ADCB03ACDAAE9C04533E17A5B
ToBoolean
get_Evidence
Invoke
Environment
Thread
GetMethods
GetPixel
get_Width
FromDays
GetManifestResourceNames
GetObject
GetTypes
CompilationRelaxationsAttribute
RuntimeCompatibilityAttribute
AssemblyTitleAttribute
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
GuidAttribute
AssemblyFileVersionAttribute
SuppressIldasmAttribute
WrapNonExceptionThrows
Loan counselor
2006 Mercury Mariner
Twin Electronics
Twin Electronics 2022-2023
$200903e0-fa46-4f31-99b1-bd5087556610
8.3.6.3
_CorDllMain
mscoree.dll
BmN_am
i5T )Mz
v4.0.30319
#Strings
ZrN.exe
mscorlib
System.Windows.Forms
System
System.Drawing
.resources
.resources
GAdminLib.Properties.Resources.resources
GAdminLib.ResourceDA.resources
Registry
Microsoft.Win32
RegistryKey
ArgumentOutOfRangeException
AsyncCallback
Boolean
Buffer
GeneratedCodeAttribute
System.CodeDom.Compiler
Dictionary`2
System.Collections.Generic
IEnumerable`1
List`1
ComponentResourceManager
System.ComponentModel
Container
IContainer
Convert
DateTime
DebuggerHiddenAttribute
System.Diagnostics
DebuggerNonUserCodeAttribute
Process
StackFrame
StackTrace
Double
Bitmap
ContentAlignment
FontStyle
GraphicsUnit
Environment
SpecialFolder
EventArgs
EventHandler
Exception
CultureInfo
System.Globalization
IAsyncResult
IDisposable
BinaryReader
System.IO
BinaryWriter
CompressionMode
System.IO.Compression
GZipStream
EndOfStreamException
MemoryStream
Stream
StreamReader
TextReader
IntPtr
MulticastDelegate
DecompressionMethods
System.Net
EndPoint
HttpWebRequest
IPAddress
IPEndPoint
IWebProxy
AddressFamily
System.Net.Sockets
ProtocolType
Socket
SocketType
WebRequest
WebResponse
NotSupportedException
Object
Random
Assembly
System.Reflection
AssemblyCompanyAttribute
AssemblyConfigurationAttribute
AssemblyCopyrightAttribute
AssemblyDescriptionAttribute
AssemblyFileVersionAttribute
AssemblyName
AssemblyProductAttribute
AssemblyTitleAttribute
AssemblyTrademarkAttribute
Binder
BindingFlags
MemberInfo
MethodBase
ResourceManager
System.Resources
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
RuntimeCompatibilityAttribute
SuppressIldasmAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
RuntimeMethodHandle
RuntimeTypeHandle
STAThreadAttribute
HashAlgorithm
System.Security.Cryptography
Single
String
Encoding
System.Text
System.Text.RegularExpressions
RegexOptions
StringBuilder
Monitor
System.Threading
Thread
TimeSpan
UInt16
UInt32
UInt64
Application
AutoScaleMode
Button
ButtonBase
ColumnHeader
ContainerControl
Control
ControlCollection
DialogResult
HorizontalAlignment
ListViewItem
ListViewSubItem
ListViewSubItemCollection
MessageBox
MessageBoxButtons
MessageBoxIcon
MouseButtons
MouseEventArgs
MouseEventHandler
TextBox
TextBoxBase
UserControl
<Module>
.cctor
GetEnumerator
value__
Dispose
Invoke
BeginInvoke
EndInvoke
Voitures
Bateaux
Avions
Maisons
Usines
get_CurrentThread
get_ManagedThreadId
get_StartupPath
Concat
Exists
ReadAllText
WriteAllLines
set_SendTimeout
set_ReceiveTimeout
GetHostAddresses
ToCharArray
ToString
ToInt32
ToByte
get_Length
ToArray
SendTo
SetValue
GetLength
ReceiveFrom
ReadBytes
ReadChars
ReadInt16
GetCallingAssembly
GetTypeFromHandle
get_Assembly
GetExecutingAssembly
GetName
get_FullName
GetPublicKeyToken
AddRange
get_Unicode
get_Name
GetBytes
get_Count
get_Item
set_Item
GetFrame
GetMethod
get_DeclaringType
get_MetadataToken
Replace
Create
set_Method
set_Accept
set_Proxy
set_Timeout
set_KeepAlive
set_UserAgent
set_AutomaticDecompression
get_UTF8
set_ContentType
set_ContentLength
GetRequestStream
GetResponse
GetResponseStream
ReadToEnd
Contains
ContainsKey
WriteAllText
op_Equality
GetObject
CurrentUser
OpenSubKey
GetFolderPath
EnableVisualStyles
SetCompatibleTextRenderingDefault
get_Default
Remove
GetString
get_ASCII
ComputeHash
Append
set_Tag
get_SubItems
SuspendLayout
set_Text
set_Width
set_AutoScaleDimensions
set_AutoScaleMode
get_Transparent
set_BackColor
set_Name
set_Size
ResumeLayout
get_Now
TryGetValue
GetManifestResourceStream
set_Position
Intern
ReadByte
BlockCopy
set_Font
get_White
set_Location
get_Controls
add_MouseDown
set_Enabled
get_Text
set_Visible
get_Button
Address
get_Gray
get_Snow
set_ForeColor
get_DarkRed
Restart
get_BackColor
op_Inequality
get_Lime
set_AutoSize
set_TabIndex
set_TextAlign
set_Multiline
set_UseVisualStyleBackColor
add_Click
add_Tick
InvokeMember
GetType
GetExportedTypes
set_ReadOnly
set_ClientSize
PerformLayout
ReadChar
ReadInt32
Subtract
get_Milliseconds
3System.Resources.Tools.StronglyTypedResourceBuilder
16.0.0.0
WrapNonExceptionThrows
1.0.0.0
GAdminLib
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4)
$aac1968b-2fe5-4214-a6a8-60393929da68
Copyright
Microsoft 2014
Microsoft
_CorExeMain
mscoree.dll
dDhEhEhEhEhEhEhEhE
hE))iEggoErrqEggoE))iE
hEhEhEhEhEhEhEhEhEhEhEhEhEhEhEhEhEhEhEhE
<?xml version="1.0" encoding="utf-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="1.0.0.0" name="MyApplication.app" /><trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"><security><requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"><requestedExecutionLevel level="asInvoker" uiAccess="false" /></requestedPrivileges></security></trustInfo></assembly>PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD
duopule
radarpic
3e5db528-19ff-4195-a16f-322d6d69c52e
.-3242
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
Microsoft
FileDescription
GAdminLib
FileVersion
1.0.0.0
InternalName
ZrN.exe
LegalCopyright
Copyright
Microsoft 2014
LegalTrademarks
OriginalFilename
ZrN.exe
ProductName
GAdminLib
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
Antivirus Signature
Bkav W32.AIDetectNet.01
Lionic Trojan.Win32.Exnet.4!c
tehtris Clean
DrWeb Clean
MicroWorld-eScan Trojan.GenericKD.65950649
ClamAV Clean
FireEye Generic.mg.2405e3c0602edc43
CAT-QuickHeal Clean
McAfee Artemis!2405E3C0602E
Cylance unsafe
VIPRE Trojan.GenericKD.65951233
Sangfor Suspicious.Win32.Save.a
K7AntiVirus Clean
BitDefender Trojan.GenericKD.65950649
K7GW Clean
CrowdStrike win/malicious_confidence_100% (W)
BitDefenderTheta Gen:NN.ZemsilF.36344.Wm0@aOrlfip
VirIT Trojan.Win32.MSIL_Heur.A
Cyren W32/MSIL_Kryptik.AHX.gen!Eldorado
Symantec Scr.Malcode!gdn34
Elastic malicious (high confidence)
ESET-NOD32 a variant of MSIL/Kryptik.AIIX
APEX Malicious
Avast Win32:TrojanX-gen [Trj]
Cynet Malicious (score: 100)
Kaspersky VHO:Trojan.MSIL.Exnet.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Malware.Obfus/MSIL@AI.100 (RDM.MSIL2:RJOXIRFvmQeqFAbxQwPl7g)
Emsisoft Trojan.GenericKD.65950649 (B)
F-Secure Clean
Baidu Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Generic.bc
Trapmine malicious.high.ml.score
CMC Clean
Sophos Troj/MSIL-SSP
SentinelOne Static AI - Malicious PE
GData Trojan.GenericKD.65950649
Jiangmin Clean
Webroot W32.Trojan.Gen
Avira Clean
Antiy-AVL Trojan/MSIL.Exnet
Gridinsoft Clean
Xcitium Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/Casdet!rfn
Google Detected
AhnLab-V3 Clean
Acronis Clean
VBA32 Clean
ALYac Clean
MAX malware (ai score=89)
Malwarebytes Trojan.Downloader.Generic
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002H07CF23
Tencent Clean
Yandex Clean
TACHYON Clean
MaxSecure Trojan.Malware.300983.susgen
Fortinet MSIL/GenKryptik.FQQD!tr
AVG Win32:TrojanX-gen [Trj]
Paloalto generic.ml
No IRMA results available.