Static | ZeroBOX

PE Compile Time

2021-06-24 05:40:15

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
Wxz|Xzp( 0x00002000 0x000128cc 0x00012a00 7.99771777238
.text 0x00016000 0x00007950 0x00007a00 6.0488689539
.rsrc 0x0001e000 0x00010ed0 0x00011000 1.19903904265
.reloc 0x00030000 0x0000000c 0x00000200 0.0980041756627
0x00032000 0x00000010 0x00000200 0.142635768149

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0001e190 0x00010828 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40
RT_GROUP_ICON 0x0002e9b8 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0002e9cc 0x00000314 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x0002ece0 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x432000 _CorExeMain

!This program cannot be run in DOS mode.
Wxz|Xzp(
`.rsrc
@.reloc
xGjxWx
(zu$Y
.(!U6C
}S"BQsg
Ne7!Gp
MM-e(6
DNXzwH'I
Kgd|KTZ"
6!c"|uM
VZ69D#
o+|Ag!
I[G{r''
tz}cxaI
&mX_d6
,h7T.Q
gI8\#C
}KEM3`
DNDDbs
ClJ2gR
s]cS<a
h :??+Hg5
#Q/1Lk
kl=|T
';f;H$
uYrO-7
YVuOB;
}"C7R(
zC9?$g
EX8$D\
,`iUOQ
/[;y3j
A{LiT\<
#_uOY7
Ik%6`6f
_,c}%t
C8zL<R
VdUh}e
qS.C0'c
<=yGOn
2&9D7I
cwb#7{
4c^$3%@
K.lX!:
oi?F.
oL1Ll%
b>@t'3
\y@qcv
vQ&O/dr
3$D/&x
$9WiYHj"
Rup*76
7e<bEX
?<ePy:
=XIL.`
i/;I*`"6
hJI.a'
xL:[{u#
f'$j$Qbr
U"au~}
JI]$;Z?^-
eHRZ(t
yZ%e@T
^xDQs`Q
&QX:kg}
bf<ZGe
a[_Z~D
<DuuU
&m6gCk
l"\d;>DD
gzk)hL
f/r/sB
kV_ga|X
+sA$`
}K| /%
SPLnHy
]8PrW8U/
:\h/!r
2#Zc)wbr)
T_Go0p
$!LFRH
((D;Uv
/%eT8GlqH
qqmJcV,
_i|D}k
]t{BSb
0vIIwP|e
F;PAi2|
c7OE3P
KnFg.o
3Bh[n,
n&NK>$
=o"4zH
03)PVo
a~*^H9v
"lljqN,B
"#!F\S
6O6xipv+
3:h*.[
$j5G/U
{=@},f
<G!q/m
q@/%Oyz
ZlL(nM
|Fq9^s |h
d8`!~=/
n;c["K
''O>e[
?(\r'd
]smdW3?
uTo#aQ=431yIJ
AbjF"zN
oecdJ
g?Vq.
4zi)M)
(+`DDC
i_HfFWU
B5#]m0
&sMsK/
u_;`Z W
_CorExeMain
mscoree.dll
v4.0.30319
#Strings
#Strings
#Schema
CJ}#}'
asdasddsa.exe
mscorlib
SuppressIldasmAttribute
System.Runtime.CompilerServices
<Module>
DataField
vNgEbvGAUZailSifJijJNTGAWPqLKEWd$>+#^]*T2}`uvfj+`nU7!
ySbeIfiZrQhGAbObsyPpWwzofZMUAozGzOM>3%-%ifmS)1TQk;6PH%
UzLSGiDtcZEngdbenFzyXHYpITKmb,0'Y-r"^F7671,u!uHz?N;@%
Assembly
System.Reflection
XRDZSXjpFcHknHmcWFmulJngEtOcA2@xL:JQ#yQ"5ZqjK2(I&/}Rj&
Decrypt
GCHandle
System.Runtime.InteropServices
Resolve
ResolveEventArgs
System
Decompress
.cctor
VrQgWCRTimRRrYmuIPTbfQPpvEEhV+H_%%6|yT(4N3XP_7sfowza"
toydEcLSayDbbmoPmroWwxxhhYbIO sS=|[?$V7M/#(U`ty]*Ci\!
RuntimeFieldHandle
heSelqqaJAcnpOrcYDaPHNXyCLNdAMljE(qKV4oUry{^$2\{Pkp+u
QrUwvjyIFhUkofdWjpMuCnJiNrLPd!-[_K['mkm="zuTj X<A$a6)
Module
yXupxxUXtvSTmqXvqkPfVDqTDRYYi1o$O9lCu^G2IC[X?o2"`(2V(
Encoding
System.Text
hzRspzKWzcTfmDVmyXPcDuyXEDbic$XUG+6W=FOPZW}:3'F1tv[I#
vuyABwkBJWBImyneRzPUqAWXqutfA__g\uGL)P`!o/5x~:%FDh?Aw,
AssemblyName
VwflFhNmkaubiAfbFaOBgVAymmmfA<q(6I>NKygQ[Pw8|0i6z=C k!
vGGuVvvrNhgEsTSDaaxRksSXrdHhiRx3S*7Z7iI%:+Yq<;mwpi8[!
jgDEIUdTcJSvSDvVCpDMKiUBfBznBal!V2SF9r;?Z}~k%Jj/49D0A+
qjeucsevFlxaeaaPEBeYqvfBstbXIUS_g7NTWqaKZHvCH>_QxM?,"
cBpebNLujWXGkgqILOZZXxjPeZtTUgc,0I~SV4=kC#~6d 6K>#[w"
VupQgfNPeIQwfcJIjpTPWqMLpvarZJ_G;/|i8wGC9hy~jNJ<@iF3%
Stream
System.IO
lzqDfHRUuNldiTgjdpLBfTNaPgrDI"N-nn!O^SU|$5]W4C*l]!E|
NqpPbDnKvPgqSbAMmWNmboWKvSbqA8(;qV>G1:g'#j>u@guKtV8Rw"
rczcAHEgsYlSnAzYSQkwYudyAiFHbIhcj%<*yZ%1uk22kfY"wk%;4/
wDiOVzCPUpgzQCFJCdGNIXKmWOBXYy=2e#^\Ei'Ph!b^:):v3LP8$
MemoryStream
RArFIjhAowEfFjAvBJjQpJqwawpUA+ac+[9@WG/jVtw>Qdp\ao{GW"
PzfImFLWbGsGQcanukqavgyqYKqrBJG%N%P -5V**gC"/DigOdTm"
sIhOBZriqMEJPGIarcOEgtOfUZcfq?YNRU}Ax`#`)sy,b}(B9%qE!
aaJnxlEpnRAScHakGhIWUMiPTEWuOXFys"HS#![l6,NX#8|"phbT#
MuLPGdtBrJzgxrzRNveARASJcaLeA^,4H[?g}jai6E@+[<2PB\g`4&
AIZJauCFvGVvpIxjEWoCIgbhwNAc8zpmYTTOlUaPQ]^NWjgKCCX5
erAVSkPOcZjnXIyIESBwEMKekQjdAK!0z}GJYvU-B FrFL94F=>Ei'
xwEbIxDIuMbNEzYLgFvjcMqYLpqfbwat`KCZif%@dLb{g3yb&<=>5&
shHklMLjvGfRbSdxbuJRXcORmxtCI !Mh6Co)o=RK[i])j`/dk]Z
fSTTGmXmGxVuwIYMfwwrQmsgWcsHCeB#a36FcFii>r,$$`~?kpD7#
MmdaPdzKmDDWTAmZAYpJNZGLUfJl44it][u1xhdT-R`>>6lp-z)R!
pjZzuYfjzQPtuyDOVgLhmbptdXosGU@C`m8=FrYA?!2;utIqOlmU"
VirtualProtect
kernel32.dll
hBgkrrYOSwVYCZFVVrpsZYSuYiecW}OFIDdG`2r<H*t$;#PJWXg\
DataType
ValueType
BitDecoder
Decode
frTfgSaVNZxYCGCgWgWImMIDayKuS7v{dNG'HP)%Hov<JF/VtAyL+
BitTreeDecoder
Models
NumBitLevels
ReverseDecode
Decoder
Object
ReleaseStream
Normalize
DecodeDirectBits
NnMKbvRVRpuhwTCUwToGmcXmBnTCAFJH,U'8%YQ'U6\U(e#oT"}mz@
LzmaDecoder
m_IsMatchDecoders
m_IsRep0LongDecoders
m_IsRepDecoders
m_IsRepG0Decoders
m_IsRepG1Decoders
m_IsRepG2Decoders
m_LenDecoder
m_LiteralDecoder
m_OutWindow
m_PosDecoders
m_PosSlotDecoder
m_RangeDecoder
m_RepLenDecoder
_solid
m_DictionarySize
m_DictionarySizeCheck
m_PosAlignDecoder
m_PosStateMask
SetDictionarySize
SetLiteralProperties
SetPosBitsProperties
SetDecoderProperties
GetLenToPosState
rwGmLUccIrYUGnxksCWZmdlepgeGY!lURAy~7J@MHSmV~sdgmSI !
LenDecoder
m_LowCoder
m_MidCoder
m_Choice
m_Choice2
m_HighCoder
m_NumPosStates
Create
LiteralDecoder
m_Coders
m_NumPosBits
m_NumPrevBits
m_PosMask
GetState
DecodeNormal
DecodeWithMatchByte
Decoder2
m_Decoders
OutWindow
_buffer
_stream
_streamPos
_windowSize
CopyBlock
PutByte
GetByte
nhJUGHZprPrsIZwJadkgqcKFaEvl[wFz|n+k!?6`Kbo}("(nBS!K$
weoGDsBoJnsYefcepOErtUvzPaVlAQ(Kv(_&8c|G8]o3ZGqhw=O%~%
UpdateChar
UpdateMatch
UpdateRep
UpdateShortRep
IsCharState
paVbkNyLfRlqgMZDbsceQZtRQnDha-4GJYI(#qG>j6(g$_ruhXX/!
ELxopiBpEXUBZKyPgjoWIHyuGLgK'#kYk-t@Zz!RjrcO<X:1q*DM/
jQioltjDCDIbYmYQOSaysIbywYCLAzUYcqL'f,2(e#xM"Sy/7NyZ$
PjlUaUeaqPhbAElzltyVycIiMaSHB@az>S&jH=)teBOG`C<P/^@h
stftKvuuHddDUVbDnImXgPcpLUeQA3fOz])o|}H2s|B9i(6^GEX!9&
SVhMabzePNaUdCwkPoOLTLuUQhZedoA87{U[l?[F$7\_%-pDRNHM!
aVtcXRvPyuphtaJfdBnkimoxJCChb5[Y0-5+]UI7O" WoQ*{=9`ZH%
yzftbeTCoijdSaTwrAiyEFxMJmLk=g 9Uha?EkX)qKCPU/l3T2~n!
HWtgJTaocddLJuKsllbPAIkazNZhb`= N2`[W$V@3xE_9\zJS_Rn2#
GRGskeBnKFDyxADGWqjDjDHCLtAoRG-o{8rXXM/y#T0s2~5LNC<h!
QEWGhPitYjHbMaGTHpTCFLjlnrZkAz(\(6f1BK"4hv2nBVU!,qgt$"
DEdwEsdzrbvLqcdVgiXafcAvQjVq2P&MMIhA,(;4cDW'7@wXMkCT$
iywFPSbskjsqkguSlJxmFHsEYlGLbA?QJ)Y/9[A]9,+1up{R{^]|#%
fzAdpdDecbBjsBekEKkXAYRkvTXkYn%U5!kNq+7\?7|_|3zv9$t,!
CgWHGQFYkxVUCEenvAbBiqYBvFTFb'H!l>[p]un'bQ[C !jYf'lm+$
XmezbDzwMAmHJLMVPfpgKJjrcLhOA):EgXK{<0pvPX\j&K*Hay-^U)
gJHDJsJoJbCIMcTLGoLGIeZuzaecGH,`<2i"u'j}b#p3HHV?gEO:!
iukOOSCJKwSJXwqdSFUvarpupZMCY/[d%dJ%O0z$5m\Zuee"$kLx
HFcGnIPmhwDbnAxeRLfzkdSDqWHuA4$OOn@Us=,mJ9M@ic{yRnl<3"
sfVuYczNpfOGeFwJhngeUOfjsSdj$QlQg*I]gJav:8{]5IF/E9"W$
daQGFbekgIPoHFcGygsnCmvSDOcFb"}'jG?~Sb7-tAH*5mbaA\v(g#
ykJzuwbdrnzWtTzLrNlOrxmBtRDOu7P/CP"I3@aX0dGAhx[oJ~n6%
QbZkTAzzwZAKnMGuefKwMHVlklxX2=-Hr$"ud`m8la1t\yd)aoUc$
CiqDYKediifPmfMDnAtRvAiBmMWfPxsL^,1mq{[ED1YD^i`y8/rO
csrSeBgCzsImjRpDvVHctTiGtqml"JC@'g%G,FMJd`S#*BK?X5)9$
OvarsLaKWLtoTDBAaqunSHGTyWNlVKuUz)k2'Y0ul~_u31>V|G<<$
SyffigiZEQTTqmkgjOyIcnDHNHyVbV?Y_aUHPH>'9CWA'Qv9dh?rg-
MNlGCMGIMbvhKveWNVHTWgwSqgRDf{(0D^BQOKPWwZN24ba">W%l
AepwOjpNDniihAQHfrhZgOMslLdeb~q=Hk9$'s(;{<~[_K~2j1=8 -
cYdFnbgktDoVXYhAZdSRMZLAYcjtAi?*OS[3QNf8\]td<JV>@dbUq+
PFWYWNatXmEYZrlRHRCLRvPUiZKBzXnfDW""aJ@Mu^hV@ZDk#(tW
mbQxhLEpOeFhNGycolxvWEChJlCGe/TUjT4<(Pz)dmAIij:~YB%3"
kmnDFZJVUSbDKFgXrdkiimCcAhegcAs*6|ItZ2<VMUF$C)w&Xl["G'
GqJvcIfZPHcOHVDPmWPjTDGLEtQm|\^a)7S)^Yd0w>wnq6\6~?+Z"
veZCVmQJaESkyahbPenXZMomcbCCAMt|p[b5chHqK",<s!@O=}u0l
KnZIyuHkYjpwzmKEqIlHIluGfbleA@JN[/bN^?S3I$<km#n>OTC=3&
kMAfgdlxSzbkhbnPjXCnbVoMSQBMA_2P{yNW!_KAb?xY8>wZ/V)QP$
lQkZHyISxjpOTlSWCeUKheytDKiCAW[AJq=LAO0^'If#xZzI3_(Xw)
TfJkvsEYfqSeUFWWDUrrmwEOpvMW`Alos+dA[S+T)tB1:I,!B,<)&
kCSchTQJBrMMNzlXFqPBSZpRLJmsGFXml#~tUNZgYL2~v!Mu\N?-!
DiGBBwUdbkmgMRflkXzFuaGCBHLkABLjH=#lsqe+XI,a"xqwX6bxq
nQsfLWCmIItOLMTenuYebJegPwkDA/7s\`R,XbN$dBM*nUKrm?%E&+
zIjbttSWlPGlYycuQvBVYbTAamjkACM;kWRgcjuzuOO6r+/#hN$,[$
RUGjKtcKEwHtJneGfTRxzFqgFZvPti'I5oF1kRXga+?|/=7I}fSc"
trUbOKjsyMaoQjvYPJRAYDUceees]VR-!7m?|G-1~@D|4-kBK3Cv
FqDqVCNnMhZJztEpUsMRBMRquqnqpEr+#+L@[zET91<^_z<F3SB('
CGmCPbaafOuyEJRhKoSjFZglzmrOA)m}~_9skh&F=rSVR1(rs35_i)
edGaOrKxyWkxmMTDckqqblIIEPdZ&)pR&F(SlEA5+T}qc:I'8^^i#
zQuCWyCjkVFlFSqibRkkHpjRnPEBb]x/H(EQqNUX1o_Q[4YM(X(j:*
obOqaaEQMMKxPbvINrakCjjeraME1ZME?<p^S:S m!:w}x+$k=<)!
FYgJOuUoiNtBxgzjvMeclxTqMnkdR4SZ}LAu)U0?M-(pOCSsCR{x
AlGhAsUrvuSnsKCwFXgOuZgGetjl-*-p5ZaaceeU`m4]RgM*Rc&C"
keFAEgANdoMHvwadRROoWRFtNcddbeMBNOB0mA^3YYCVTPyR!1)$u+
zFMCFoRDgeQowgiiLJhkviUVASyiA$J!zgx1m/]G@s]\_":96nN[e"
IVOTbloKBeTewwVeCwVccIQYmJw#4:/&uN!lY&mtW=k2oh'#7^-
ldBJNeEvpftNTxhLEaqZoqlFeEteq)Xjq\k/QcB}co%&T5;FhOGQ
TaIzMSaYenrwclYIvuARLkNMUNCldROe%Et\AA/e80kKt/`J04)%$
ZmaPwyVYIyhJZddovbdSjoyybLIgb'${w}3F)q0|;kC3(Hd13;`C0'
OIwZXEwJLCqwmjCRBdcyfaElxkRJ>yKT\Yd?h,MU)hxG{_u|c?'e
oXEfPwGBOWmHkEUkNBEqbqcWrVbhAw>XnCTlRnng8Fo8t3RoSHr4q#
rGQyKcJhVPNkwMMjZvrcLhBWJlKA=899|R[6~'"xn,RmUBOz|6*1
uGsIuuDTYzDbJqCOBgnqEcOtMygtgR[!kz>zsT' K6:G70vje5?m$
MajBdgTVcsWKedMaIykJTTcRFHlIro;Fs~'wGrWous^AB4{w<v*a
bcXmkGmnGBgwoXuViGuFRAYEGnRjAeZXy%"V@)m[PvD{_n2%HD9fb#
rQakNMVXplMfmrqOHfoYCkGQRxBdAANY`hDcuY5G:,hJY3n/|H[MZ'
TKVuMDnCJVyHcCskRpKfEqzxHIEIr^z/6y:!^,q:=(+sOxT,q<zQ!
MSuwnnUsDCxpVJuJKDcflBbNcVlE#-o5_:SlLKfz3+>J YD!l(go
lBQRhUnShVuUgMioUaiZbjQAszsZw5lcZ5U*V`*B'(8YY2G!VCw($
uoEcOcrgYDzMDrFmALtqkbNBnrIQAS<RG$--Dt~Jso:,w-3X+?px!
mdkxrhgiGdhXIHjHLLMbiupEAVHQb,q=3m@5rEV#VA%l&D_gY-j6N6
LzUdBFbGfpYScBmwkxgooJqHQToEAh"J-nXL($+I GIisVcHK%\u($
TezrBIxzSrhngdeAUjVUVfUQAolFA|OIiTa`DMKk6o4Jh&~`PTOD,%
CfxbdkGZhvXhVQABsscqausOhqeqA`N;oyK|y$m`MPRIQ5YMmv7Vc%
HjkyPkcYYGfSerVHzUbhWnQaKMPBR}ISh3>:$*@Qt(G'I-5PYR8R
SFWWNETnfdxYHGPPgFdHOkaCicuAA#t!!%?%[iT\=frY$Hn@utO%{'
sEewoAyWcUoLCJRORgiayWKCkZLrwr&q<6i1LX4BV6Z=k-arj>LJ%
XhOphkQciCHNDCEvLalyJNpLiEXFb-p-w&f=]Z`6!~[x*yA:?f-/4$
PaaLvUlcyBFxoFPfdQsJuCiEoAyzAnXS*XkWk'/}]4{m$\ahe+H^3%
mSzklVmAjpVFHfpLRfqVAtuZDiGKAKP,7>%G/c4=xy#zCRj:;X?3!1
nljUgpyLKCnIcdqDRuAHWJYzyldr7]7q <58>N_V"4:0PnzN={i9%
nuSaDzJQUQFTLRUsgTJEDtrPadsGbO_'`GG6')B+INIoP9jUsNaZ3%
nhsJwvlgsAnUbCsLuqDZWwFHCghSgCI=k,`{xJw7jxy8\;DxRw,p!
PjyhGKDrfmEvDuyhzSoZtouSLnGH8(Qr8TW]=B20 3[! z9(Z8(d%
hQdHJOHJBDIpCpAtSFtUyelDHRaG7e <F`nv+`)*5JdNn}a +# o
bdgzVjjIORAfksFpSwzEhQSksrZoIUHjGpXtpS?zOsP$9>RQ3Q)
xyAvCgYpHOfDuneDeUISdPyXVWApY)Z`U9pRJNc'W4S@P01}81lJ(
uSrEJgcaDhkgLonaEBbuiJGbybVmAk|gfI5;)M7p9M[%w=WB)ayXD$
yZgmplXOQAJPiFHcdcBhHaMNeenHb5u5$ID])zPGl^yG-;{I0'{+M#
IyNRawHoHLYaBaxwIGUtwXfRDxvbP`YBAbY-rZc= ZW!lq'c-`Q>
eWLSZQhKVMchWjMISsVKyJAwnhEbgfT'6A-9XM_G0l0i>7ho8;9<
dAmXtTTvSIliXXjEusRzEfoKaaEvy+ua>>fb%,VfBlca"(-Q8+IJ,
pPaBstMXftfnnSlIrEVbuWRCeNRzuT]iWPh"w5S"'\(43e_0vL(8&
pBVHlteDkPnoNSMdxgNfDGvIiSbXAy~<&Wm9k8,%B!kc' kpu<vS$#
HRbfkRJDRDQHnXPhhINtFhbgVpNgc-8Q9XW%#8Z@=hiYD3o7$0KsZ'
asdasddsa
AssemblyTrademarkAttribute
AssemblyCopyrightAttribute
AssemblyProductAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
AssemblyFileVersionAttribute
ComVisibleAttribute
AssemblyCompanyAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
RuntimeCompatibilityAttribute
CompilationRelaxationsAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
AssemblyTitleAttribute
STAThreadAttribute
UInt32
GCHandleType
get_Target
LoadModule
ResolveSignature
AppDomain
get_CurrentDomain
ResolveEventHandler
add_AssemblyResolve
GetTypes
ResolveMethod
MethodBase
GetParameters
ParameterInfo
Invoke
RuntimeHelpers
InitializeArray
GetExecutingAssembly
get_ManifestModule
get_UTF8
get_Name
get_FullName
String
ToUpperInvariant
GetBytes
Convert
ToBase64String
GetEntryAssembly
GetManifestResourceStream
get_Length
Buffer
BlockCopy
ReadByte
GetTypeFromHandle
RuntimeTypeHandle
GetElementType
CreateInstance
GetString
Intern
op_Equality
get_Module
get_FullyQualifiedName
get_Chars
Marshal
GetHINSTANCE
IntPtr
op_Explicit
gsdfsfsd
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
1.0.1.02
asdfasdasf
WrapNonExceptionThrows
fdsfds
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
.WEB_WEBSITE_BROWSER_PAGE_WIREFRAME_ICON_189341
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
asdfasdasf
FileDescription
fdsfds
FileVersion
1.0.1.02
InternalName
asdasddsa.exe
LegalCopyright
LegalTrademarks
OriginalFilename
asdasddsa.exe
ProductName
gsdfsfsd
ProductVersion
1.0.1.02
Assembly Version
1.0.1.2
Antivirus Signature
Bkav W32.AIDetectNet.01
Lionic Trojan.MSIL.Crypt.4!c
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Heur.Variadic.A.393.1
ClamAV Win.Packed.Clipbanker-9875164-0
CMC Clean
CAT-QuickHeal Clean
McAfee PWS-FCSR!65DE52A85235
Cylance Unsafe
VIPRE Gen:Heur.Variadic.A.393.1
Sangfor Suspicious.Win32.Save.a
K7AntiVirus Trojan ( 005733031 )
BitDefender Gen:Heur.Variadic.A.393.1
K7GW Trojan ( 005733031 )
Cybereason malicious.77f9dc
Baidu Clean
VirIT Clean
Cyren W32/MSIL_Kryptik.FHF.gen!Eldorado
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of MSIL/GenKryptik.EWGN
APEX Malicious
Paloalto generic.ml
Cynet Malicious (score: 100)
Kaspersky HEUR:Trojan.MSIL.Crypt.gen
Alibaba Trojan:MSIL/AgentTesla.91a06b2f
NANO-Antivirus Clean
ViRobot Trojan.Win32.S.Agent.179200.JS
Rising Trojan.Generic/MSIL@AI.100 (RDM.MSIL:qInzX8YWekUmzOKtksIduQ)
Ad-Aware Gen:Heur.Variadic.A.393.1
Sophos Mal/Generic-S
Comodo Malware@#3eenduodckxvs
F-Secure Clean
DrWeb Trojan.Siggen14.4896
Zillya Trojan.GenKryptik.Win32.99313
TrendMicro TROJ_GEN.R002C0DK822
McAfee-GW-Edition BehavesLike.Win32.Generic.cm
Trapmine malicious.high.ml.score
FireEye Generic.mg.65de52a852356f9e
Emsisoft Trojan.Agent (A)
Ikarus Trojan.MSIL.Confuser
GData Gen:Heur.Variadic.A.393.1
Jiangmin Trojan/PSW.MSIL.btl
Webroot W32.Trojan.Gen
Avira HEUR/AGEN.1221942
MAX malware (ai score=80)
Antiy-AVL Trojan/Generic.ASMalwS.C78
Kingsoft Win32.Heur.KVMH008.a.(kcloud)
Gridinsoft Trojan.Win32.Packed.dd!n
Arcabit Trojan.Variadic.A.393.1
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:MSIL/AgentTesla.JQC!MTB
Google Detected
AhnLab-V3 Trojan/Win.Generic.R427649
Acronis suspicious
BitDefenderTheta Gen:NN.ZemsilF.34754.ku0@aKdO3Hb
ALYac Gen:Heur.Variadic.A.393.1
TACHYON Clean
VBA32 CIL.HeapOverride.Heur
Malwarebytes Spyware.PasswordStealer
Panda Trj/GdSda.A
Zoner Probably Heur.ExeHeaderL
TrendMicro-HouseCall TROJ_GEN.R002C0DK822
Tencent Msil.Trojan.Crypt.Bgow
Yandex Trojan.Crypt!+65jFEU7R+4
SentinelOne Static AI - Malicious PE
MaxSecure Trojan.Malware.11716371.susgen
Fortinet W32/Crypt.EWGN!tr
AVG Win32:CrypterX-gen [Trj]
Avast Win32:CrypterX-gen [Trj]
CrowdStrike win/malicious_confidence_100% (W)
No IRMA results available.