Static | ZeroBOX

PE Compile Time

2023-05-14 17:36:07

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00023782 0x00023800 5.55281881842
.rsrc 0x00026000 0x00000520 0x00000600 4.49944899527
.reloc 0x00028000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x000260a0 0x000002cc LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x0002636c 0x000001b4 LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with very long lines, with no line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
-%&&&(
&_b_
_bf_
,K+*(A
,R&&&&&r
&&&&&&sZ
->&&&&
&&&&&&&&&
&&&&&&&&&
-M&&&r/
&&&&&&&&&+
,4&+5}
&&+,(d
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
v4.0.30319
#Strings
%!,!D
pmrs.exe
System.Windows.Forms
System
mscorlib
System.Net.Http
System.Drawing
System.Xml
System.Core
version.dll
kernel32.dll
kernel32
user32.dll
advapi32
.resources
WindowsFormsApp85.Properties.Resources.resources
Registry
Microsoft.Win32
RegistryHive
RegistryKey
RegistryView
SafeFileHandle
Microsoft.Win32.SafeHandles
SafeWaitHandle
Action
AppDomain
ArgumentException
ArgumentNullException
ArgumentOutOfRangeException
AsyncCallback
BitConverter
Boolean
Dictionary`2
System.Collections.Generic
Enumerator
ICollection`1
IEnumerable`1
IEnumerator`1
IList`1
KeyValuePair`2
List`1
Queue`1
IEnumerable
System.Collections
IEnumerator
Component
System.ComponentModel
Container
IContainer
Win32Exception
Console
Convert
Converter`2
DateTime
Delegate
DebuggerHiddenAttribute
System.Diagnostics
FileVersionInfo
PerformanceCounter
PerformanceCounterCategory
Process
ProcessStartInfo
StackFrame
StackTrace
Double
Environment
SpecialFolder
EventArgs
EventHandler
Exception
CultureInfo
System.Globalization
NumberStyles
IAsyncResult
IDisposable
IFormatProvider
Directory
System.IO
DirectoryNotFoundException
FileAccess
FileInfo
FileMode
FileNotFoundException
FileShare
FileStream
IOException
SeekOrigin
Stream
StreamReader
StreamWriter
TextReader
TextWriter
IntPtr
InvalidCastException
InvalidOperationException
Enumerable
System.Linq
MulticastDelegate
HttpClient
HttpContent
HttpResponseMessage
NotImplementedException
NotSupportedException
Nullable`1
Object
ObjectDisposedException
OperatingSystem
OverflowException
Random
AmbiguousMatchException
System.Reflection
Assembly
AssemblyCompanyAttribute
AssemblyConfigurationAttribute
AssemblyCopyrightAttribute
AssemblyDescriptionAttribute
AssemblyFileVersionAttribute
AssemblyName
AssemblyProductAttribute
AssemblyTitleAttribute
AssemblyTrademarkAttribute
Binder
BindingFlags
DefaultMemberAttribute
FieldInfo
IReflect
MemberInfo
MemberTypes
MethodBase
MethodInfo
ParameterInfo
ParameterModifier
PropertyInfo
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
RuntimeCompatibilityAttribute
SuppressIldasmAttribute
ClassInterfaceAttribute
System.Runtime.InteropServices
ClassInterfaceType
ComInterfaceType
ComRegisterFunctionAttribute
ComSourceInterfacesAttribute
ComUnregisterFunctionAttribute
ComVisibleAttribute
DispIdAttribute
GuidAttribute
InterfaceTypeAttribute
Marshal
MarshalAsAttribute
SafeHandle
TargetFrameworkAttribute
System.Runtime.Versioning
RuntimeTypeHandle
STAThreadAttribute
AccessControlSections
System.Security.AccessControl
AccessControlType
AccessRule
AuditFlags
AuditRule
CommonObjectSecurity
EventWaitHandleAccessRule
EventWaitHandleRights
EventWaitHandleSecurity
InheritanceFlags
NativeObjectSecurity
ObjectSecurity
PropagationFlags
ResourceType
HashAlgorithm
System.Security.Cryptography
SHA256
IdentityReference
System.Security.Principal
NTAccount
SecureString
System.Security
Single
String
StringComparison
Encoding
System.Text
Capture
System.Text.RegularExpressions
RegexOptions
AutoResetEvent
System.Threading
EventResetMode
EventWaitHandle
Interlocked
ManualResetEvent
Monitor
Task`1
System.Threading.Tasks
Thread
ThreadStart
WaitHandle
TimeSpan
TimeZoneInfo
TimeoutException
Tuple`2
UInt32
UInt64
UIntPtr
UnauthorizedAccessException
ValueType
Version
AutoScaleMode
ContainerControl
Control
XmlConvert
XmlDateTimeSerializationMode
XmlException
XmlNodeType
XmlReader
XmlReaderSettings
<Module>
value__
Dispose
Invoke
BeginInvoke
EndInvoke
SetLength
get_CanRead
get_CanSeek
get_CanWrite
get_Length
get_Position
set_Position
Contains
CopyTo
get_Count
get_IsReadOnly
Remove
GetEnumerator
ToString
Implicit
Explicit
Finalize
.cctor
get_AccessRightType
AccessRuleFactory
get_AccessRuleType
AuditRuleFactory
get_AuditRuleType
Webdav
MoveNext
Binary
Automatic
get_IsInvalid
ReleaseHandle
Overwrite
Resume
Append
CreateFileMapping
MapViewOfFile
UnmapViewOfFile
CloseHandle
CreateJobObject
SetInformationJobObject
GetProcessWindowStation
GetThreadDesktop
GetCurrentThreadId
RegGetValue
GetField
GetFields
GetMember
GetMembers
GetMethod
GetMethods
GetProperties
GetProperty
InvokeMember
get_UnderlyingSystemType
get_Current
GetFileVersionInfoSize
LoadLibraryEx
FreeLibrary
FindResource
SizeofResource
CanRead
CanSeek
CanWrite
Length
Position
IsReadOnly
AccessRightType
AccessRuleType
AuditRuleType
IsInvalid
ToDateTime
GetDomain
set_Text
set_AutoScaleMode
set_ClientSize
Dequeue
Enqueue
GetType
get_FullName
RemoveAt
get_Item
get_CurrentCulture
Format
GetTypeFromHandle
GetFrame
get_IsConstructor
get_DeclaringType
get_MemberType
get_ReturnType
get_FrameCount
op_Inequality
get_InvariantCulture
get_Name
Concat
op_Equality
IsSubclassOf
Combine
GetDirectoryName
Delete
get_NodeType
get_NamespaceURI
get_LocalName
get_IsEmptyElement
get_Depth
get_Value
GetAttribute
get_Text
get_BaseStream
GetExecutingAssembly
GetEntryAssembly
get_CodeBase
get_Message
get_Location
StartsWith
Substring
Replace
IsNullOrEmpty
get_Chars
Exists
GetCategories
get_CategoryName
GetInstanceNames
NextValue
get_CurrentThread
get_ManagedThreadId
TryGetValue
set_Item
get_CounterName
get_InstanceName
GetProcesses
get_Id
get_ProcessName
get_StartTime
get_TotalProcessorTime
get_Now
WriteLine
CreateText
set_AutoFlush
get_OSVersion
get_Local
get_UtcNow
GetUtcOffset
op_GreaterThan
op_LessThan
IsDaylightSavingTime
get_StandardName
get_DaylightName
get_UserName
get_UserDomainName
get_MachineName
get_UserInteractive
get_Version
get_InputEncoding
get_EncodingName
get_CodePage
get_OutputEncoding
get_CurrentDirectory
GetVersionInfo
get_ProductVersion
GetLastWin32Error
get_HasValue
get_UTF8
ReadToEnd
set_CheckCharacters
Create
SizeOf
AllocHGlobal
StructureToPtr
SuppressFinalize
IndexOf
LastIndexOf
TryParse
Equals
UnescapeDataString
get_Success
op_LessThanOrEqual
AppendChar
SecureStringToGlobalAllocUnicode
PtrToStringUni
ZeroFreeGlobalAllocUnicode
FromBase64String
set_Tag
set_Name
add_Load
ResumeLayout
SuspendLayout
set_AutoScaleDimensions
ToInt16
Persist
AddAccessRule
ToUpper
CompareExchange
MaxValue
get_TotalSeconds
get_NewLine
GetFileName
DirectorySeparatorChar
EndsWith
ToByte
GetAssembly
GetTypeLibGuidForAssembly
ClassesRoot
CreateSubKey
SetValue
GetTypeLibVersionForAssembly
DeleteSubKey
get_GUID
ToUpperInvariant
ToArray
get_Default
GetBytes
EscapeDataString
TrimEnd
FromSeconds
op_Addition
op_Subtraction
get_TotalMilliseconds
WaitOne
GetTempPath
GetCurrentProcess
GetHashCode
GetParameters
get_IsOptional
get_DefaultValue
IsMatch
get_ASCII
GetString
GetAsync
get_Result
get_Content
ReadAsByteArrayAsync
get_Tag
get_ProductMajorPart
get_ProductMinorPart
get_ProductBuildPart
get_StartInfo
set_FileName
set_WorkingDirectory
set_Arguments
set_UseShellExecute
add_Exited
get_HasExited
get_ExitCode
get_Arguments
set_UserName
set_Password
set_LoadUserProfile
get_FileName
set_IsBackground
CollectionCount
GetTotalMemory
op_Explicit
GetSecurityDescriptorBinaryForm
GetSecurityDescriptorSddlForm
get_SafeWaitHandle
DangerousGetHandle
GetCustomAttributes
SizeConst
WaitForExit
GetName
get_Size
GetFolderPath
OpenBaseKey
OpenSubKey
GetValue
get_FileVersion
get_ProductName
GetLastWriteTimeUtc
OpenRead
ComputeHash
ConvertAll
OpenExisting
ReadAllText
ToInt64
PtrToStructure
FromMilliseconds
Insert
get_Key
$70C312F8-9A09-4D9B-B8EC-FB6ED753892B
$802FCEF7-E1D3-4205-B171-87A3724E85FA
$0ADAAEBC-4A15-4A9C-8ED4-D85F5630035C
$62FB0733-C24F-4DC2-8452-560148931927
$59B362D6-7FD3-4EF0-A3B6-E3244F793778
$97F5222E-9379-4C24-9E50-E93C7334BBD5
$772FACCC-0786-42E1-B1C8-F08D13C9CD07
$D924FAB9-FCE7-47B8-9F23-5717698384D3
$574FF430-FD40-41F9-9A04-971D3CF844B7
$E402CB1F-6219-4C79-9EDF-1914D9589909
$28957CC8-DEBC-48D0-841B-48AD3CB3B49F
$0285917B-581A-4F6F-9A9D-1C34ABFB4E38
$F2FC81EB-4761-4A4E-A3EC-4AFDD474C18C
$3BCB18EC-6D98-4BFB-A9C2-893CBD13CDAB
$2D4EF368-EE80-4C15-AE77-D12AEAF4B00A
$B1DAE3A0-5E56-4001-88D8-786F68557E28
$FF8D5772-2653-4C9B-870E-4C5EF8F55673
$74F668E6-8EF2-4D01-84D8-DA2FE619C062
$6C441F60-26AA-44FC-9B93-08884768507B
$90A290B2-C8CE-4900-8C42-7736F9E435C6
$F25C49A5-74A6-4E8F-AEB4-5B4E0DDF0EF9
$17FF9C92-B8B6-4506-A7BA-8482D9B0AB07
$56FFC5CE-3867-4EF0-A3B5-CFFBEB99EA35
$2309282F-B89B-4F6B-AEB1-D3E1629B7033
$38649D44-B839-4F2C-A9DC-5D45EEA4B5E9
$4D79C4F7-0FE2-428D-9908-AB2D38E96C53
$2D6EFFB5-69BA-47AA-90E8-A92953E8B58A
$6B19CBFA-0D81-4B36-A587-E11AA6A06214
$42861F26-1ECA-43BA-8A43-ADF3291D8C81
$16B6D8F6-C0B4-487D-9546-A25BBF582ED6
$FBE2FACF-F1D5-493D-9E41-4B9B7243A676
$0E8BBC73-AF4D-4E7E-995C-EB89D0BFDE9A
$3F770EC1-35F5-4A7B-A000-46A2F7A213D8
$DFCA88E2-6A47-4290-AD66-A39C5682D610
$155B841F-39D4-40C8-BA87-C79675E14CE3
$E421924E-87F0-433E-AF38-CE034DC8E8CB
$E0F3C3C2-C812-48F1-A711-E0BD0F703976
$1C2C3740-CB42-4B10-B240-2EF64E03DAA3
$39AA3D00-578C-49AF-B3E4-16CE26C710C6
$8A98AB8F-30E8-4539-A3DE-A33DDC43B33C
$D0ADB4F7-47AE-43AC-AA41-9114650EA51A
$B4CC583A-B64E-4797-9967-0FCB2F07C977
$6CED4579-0DF2-4E46-93E9-18780546B421
$2C29B0BD-4F77-4743-A72A-B91F6D0EAD16
$A1334E32-4EDF-4B51-A069-DA3FF1B19A5A
$70253534-C5DC-4EF3-9C98-65C57D79C324
$91109A4F-D81A-4326-BEC5-1AB26EBF89A6
WrapNonExceptionThrows
$9d9683d8-7091-4526-9ba3-0f158477c00f
1.0.0.0
.NETFramework,Version=v4.6
FrameworkDisplayName
.NET Framework 4.6
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="utf-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="1.0.0.0" name="MyApplication.app" /><trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"><security><requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"><requestedExecutionLevel level="asInvoker" uiAccess="false" /></requestedPrivileges></security></trustInfo></assembly>PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDING
7686BACADAEAFA^]_]ed
filename
modification
Offsets with value of non-zero are not supported
The sum of offset and count is greater than the buffer length.
offset or count is negative.
Stream closed for writes
Collection is read-only.
Element "{0}" not found in the log file
Unexpected data
{0}.{1}
{0} entering
{0} leaving
session
destination
http://winscp.net/schema/session/1.0
Lzqedqsgqjiipggdmdrh.Isccrjxrvaexqdmfklskm
CodeBase not supported:
file://
Cannot locate path of assembly [{0}] neither from its code base [{1}], nor from its location [{2}]
Processor
% Processor Time
Memory
Available KBytes
Not authorized to get counters
Error getting counters: {0}
{0}{1}{2} = [{3}]
Error reading counters: {0}
{0}:{1} - {2} - {3}
Error logging processes: {0}
Exception: {0}
[{0:yyyy-MM-dd HH:mm:ss.fff}] [{1:x4}] {2}{3}
.NET Framework build
Executing assembly: {0}
Executing assembly codebase: {0}
unknown
Executing assembly location: {0}
Entry Assembly: {0}
unmanaged
Operating system: {0}
Timezone: {0}; {1}
hh\:mm
User: {0}@{1}@{2}; Interactive: {3}
Runtime: {0}
Console encoding: Input: {0} ({1}); Output: {2} ({3})
Working directory: {0}
Assembly path: {0}
Assembly product version: {0}
Entry assembly path: {0}
Logging level has to be in range -1 to 2
Closing log
Not reading, session has timed out
failure
Read node {0}: {1} {2}{3}{4}
Cannot read
Error parsing session log file
Waiting for log update and dispatching events for {0}
Log contents:
Log contents has not changed
Error logging log contents [{0}]
Log was closed already
Opening log without write sharing
Opening log with write sharing
Log opened
Skipping {0} nodes
Read less nodes than in previous log parsing
Reading has not commenced yet
Cannot create job ({0})
Job created
Job set to kill all processes
Cannot set job to kill all processes ({0})
Closing job
{0}(;{0})*
((ssh-rsa|ssh-dss|ssh-ed25519|ecdsa-sha2-nistp(256|384|521))( |-))?(\d+ )?(([0-9a-fA-F]{2}(:|-)){15}[0-9a-fA-F]{2}|[0-9a-zA-Z+/\-_]{43}=?)
((([0-9a-fA-F]{2}[:\-]){31})|(([0-9a-fA-F]{2}[:\-]){19}))[0-9a-fA-F]{2}
Protocol not specified
Unknown protocol {0}
Root path can be specified for WebDAV and S3 protocols only
No session parameters are supported
Unexpected syntax after ]
No host name
{0} is not a valid port number
fingerprint
Unsupported connection parameter {0}
SSH host key fingerprint "{0}" does not match pattern /{1}/
TLS host certificate fingerprint "{0}" does not match pattern /{1}/
Timeout has to be positive non-zero value
Port number has to be in range from 0 to 65535
s3.amazonaws.com
Root path has to start with a slash
Cannot change read-only permissions
{0} is not valid numerical permissions
{0} is not valid octal permissions
{0} is not valid permissions string
--s--s--t
--S--S--T
rwxrwxrwx
Finish reading the stream from Session.GetFile first.
sessionOptions
option confirm off
option reconnecttime {0}
Waiting for XML log file
Output was "{0}".
There was no output.
Response log file {0} was not created. This could indicate lack of write permissions to the log folder or problems starting WinSCP itself.
{0} ({1:X})
WinSCP process terminated with exit code {0}.
WinSCP has not responded in time.
XML log file created
option batch {0}
Error output was "{0}".
Algorithm cannot be empty
algorithm
/fingerprintscan
Unexpected fingerprint scan result line '{0}'
Fingerprint for algorithm {0} not supported
ls -- "{0}"
put {0} {1} -- "{2}" "{3}"
delete
upload
Tag chmod before tag upload
Tag touch before tag upload
localDirectory
remoteDirectory
does not exist
remoteFilePath
Already uploading from a stream
stream
File to path cannot be empty
localFilePath
download
get {0} {1} {2} -- "{3}" "{4}"
-onlyfile
File not found
More then one file has been unexpectedly found
Data stream already exist
Download stream started
rm {0} -- "{1}"
File name cannot be empty
Cannot delete files in synchronization mode Both
Cannot mirror files in synchronization mode Both
Only Time criteria is allowed in synchronization mode Both
remote
either
criteria
synchronize {0} {1} {2} {3} -criteria="{4}" {5} -- "{6}" "{7}"
mirror
Tag chmod before tag download
Tag touch before tag download
-preview
action
Tag action after filename
uploadnew
downloadnew
uploadupdate
downloadupdate
deleteremote
deletelocal
Unknown synchronization action "{0}"
Unexpected filename tag
Unexpected modification tag
Unexpected size tag
No action tag found
Missing file information
difference
call {0}
output
erroroutput
exitcode
checksum -- "{0}" "{1}"
checksum
Invalid string representation of checksum - {0}
mkdir "{0}"
mv "{0}" "{1}"
{0} not found.
cp "{0}" "{1}"
CLSID\
\TypeLib
\Version
permissions
Terminating process
Process cleanup Exception: {0}
Disposing log readers
Deleting XML log file [{0}]
XML log cleanup DirectoryNotFoundException: {0}
XML log cleanup IOException: {0}
XML log cleanup UnauthorizedAccessException: {0}
Command: [{0}]
SessionOptions.WebdavSecure is set, but SessionOptions.Protocol is not Protocol.Webdav.
sftp://
scp://
ftp://
dav://
davs://
{0} is not supported
SessionOptions.Password is set, but SessionOptions.UserName is not.
SessionOptions.HostName is not set.
SessionOptions.RootPath is set, but SessionOptions.Protocol is not Protocol.Webdav nor Protocol.S3.
-rawsettings
SessionOptions.SshHostKeyFingerprint is set or sessionOptions.SshHostKeyPolicy has not the default value Check, but SessionOptions.Protocol is neither Protocol.Sftp nor Protocol.Scp.
WARNING! Giving up security and accepting any key as configured
SessionOptions.SshHostKeyFingerprint is set and SshHostKeyPolicy is not Check
acceptnew
hostkey
SessionOptions.Protocol is Protocol.Sftp or Protocol.Scp, but SessionOptions.SshHostKeyFingerprint is not set.
SessionOptions.SshPrivateKeyPath or SessionOptions.SshPrivateKey is set, but SessionOptions.Protocol is neither Protocol.Sftp nor Protocol.Scp.
Set only one of SessionOptions.SshPrivateKeyPath or SessionOptions.SshPrivateKey.
privatekey
SessionOptions.TlsClientCertificatePath is set, but neither SessionOptions.FtpSecure nor SessionOptions.WebdavSecure is enabled nor is the protocol S3.
clientcert
SessionOptions.FtpSecure is not FtpSecure.None, but SessionOptions.Protocol is not Protocol.Ftp.
implicit
explicit
SessionOptions.TlsHostCertificateFingerprint or SessionOptions.GiveUpSecurityAndAcceptAnyTlsHostCertificate is set, but neither SessionOptions.FtpSecure nor SessionOptions.WebdavSecure is enabled nor is the protocol S3.
WARNING! Giving up security and accepting any certificate as configured
certificate
passive
timeout
SessionOptions.PrivateKeyPassphrase is set, but neither SessionOptions.SshPrivateKeyPath, SessionOptions.SshPrivateKey nor SessionOptions.TlsClientCertificatePath is set.
passphrase
SessionOptions.SecureNewPassword is set, but SessionOptions.SecurePassword is not.
newpassword
stat -- "{0}"
-{0}="{1}"
-{0}={1}
Got incomplete progress output
Scheduling output: [{0}]
Timeout waiting for WinSCP to respond - asking for callstack
Timeout waiting for WinSCP to respond
Aborted.
Got data
FileTransferredEvent: [{0}]
Failed: [{0}]
Object is disposed
Session was aborted
Session is not opened
Session is already opened
Output: [{0}]
Progress handling not enabled
Configured temporary file: {0} - Exists [{1}]
Configured temporary file {0} already exists
Temporary folder: {0}
Temporary file [{0}] - Exists [{1}]
Name [{0}]
Result [{0}]
Fields [{0}]
BindingFlags [{0}]
Binder [{0}]
Target [{0}]
Args [{0}] [{1}]
Arg [{0}] [{1}] [{1}] [{2}]
Culture [{0}]
NamedParameter [{0}]
target
Provided less parameters [{0}] than defined [{1}]
Parameter [{0}] of [{1}] is not optional
Adding default value [{0}] for optional parameter [{1}]
Unexpected ambiguous match [{0}]
Invoking unambiguous method [{0}]
Setting unambiguous property [{0}]
Invoking ambiguous/non-existing method 2 [{0}]
Invoking member {0} enabled debug logging
Result [{0}] [{1}]
Error [{0}]
Closing download stream
Closed download stream
Starting enumeration of {0} ...
Cannot use enumeration option EnumerateDirectories without AllDirectories
Cannot combine enumeration option EnumerateDirectories with MatchDirectories
Enumerating {0}
Ended enumeration of {0}
http://185.254.37.108/Diryiyetg.dll
Cannot use ElementLogReader with non-element node or empty element
Swallowing exception
Element {0} already read to the end
Element {0} read to the end
result
success
message
-nopermissions
preservetime
nopreservetime
binary
automatic
transfer
filemask
resumesupport
resume
append
-rawtransfersettings
EXE executable path resolved to {0}
/ini=nul
/ini="{0}"
/log="{0}"
/xmllog="{0}" /xmlgroups /xmllogrequired
/loglevel={0}
{0}.{1}.{2}
/dotnet={0}
/nointeractiveinput /stdout /stdin
/rawconfig
/console /consoleinstance={0}
Will run process as {0}
Granting access to window station
Error granting access to window station
Granting access to desktop
Error granting access to desktop
Starting "{0}" {1}
Started process {0}
Process {0} exited with exit code {1}
Aborted
Exited
Waiting for request event
Got request event
2nd generation collection count: {0}
Total memory allocated: {0}
Error while processing events
Response event set
Options: [{0}], Timer: [{1}], Timeouting: [{2}], Timeouted: [{3}], Break: [{4}]
Options Result: [{0}]
Not-supported title event [{0}]
Buffered from-beginning message [{0}]
Print: {0}
Unexpected console interface options
File Name [{0}] - Directory [{1}] - Overall Progress [{2}] - File Progress [{3}] - CPS [{4}]
Unknown progress operation
Unknown progress side
Len [{0}]
Data written to the buffer
Data buffer closed
Unexpected data request
{0} bytes read
Error reading data stream
Cannot find unique name for event object.
_{0}_{1}_{2}
Trying event {0}
WinSCPConsoleEventRequest
Event {0} is not unique
Event {0} is unique
WinSCPConsoleEventResponse
WinSCPConsoleEventCancel
WinSCPConsoleMapping
File mapping {0} already exists
Cannot create file mapping {0}
WinSCPConsoleJob
Creating event {0}
Created event {0} with handle {1} with security {2}, new {3}
Error resolving account {0}
Event {0} already exists
Testing that event {0} is closed
Exception: Event {0} was not closed yet
MarshalAs attribute not found for ConsoleInputEventStruct.Str
Input [{0}] is too long ({1} limit)
Waiting for process to exit ({0} ms)
Killing process
Will test that handles are closed
Testing that file mapping is closed
Exception: File mapping {0} was not closed yet
{0} does not exists.
, nor the entry assembly
The {0} executable was not found at location of the assembly {1} ({2}){3}, nor in an installation path. You may use Session.ExecutablePath property to explicitly set path to {0}.
winscp.exe
WinSCP
Software\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
Inno Setup: App Path
Executable found in {0}
Executable not found in {0}
, product
version is
Assembly version not known, cannot check version
9.9.9.9
Undefined assembly version, cannot check version
Timestamp of {0} is {1}
Cached version of
, and it was already deemed compatible
Executable version is not cached yet, cache size is {0}
Version of
Size of the executable file is {0}
Cannot retrieve
version info
Size of the executable file version info is {0}
Accessing executable file failed
Version check disabled (not recommended)
SHA-256 of the executable file is
Calculating SHA-256 of the executable file failed
Cannot load
Cannot find version resource
Cannot find size of version resource
Version resource size is {0}
Querying version resource failed
Cannot use
The version of
) does not match version of this assembly
Caching executable version
{0} - exists [{1}]
Process is closed already
WinSCPCallstack{0}
Setting event {0}
{0}.txt
Timeout waiting for callstack file {0} to be created
Callstack file {0} has been created
Session has unexpectedly closed
Acquiring communication structure
Acquired communication structure
Releasing communication structure
Cannot release file mapping
Released communication structure
Payload type does not match with event
default
Threshold is undefined when state is not Smart
Threshold must be positive
Cphenqxxwyammyjqtqjbeyb
<no error>
Recursive calls not allowed
Not locked
Read {0} bytes from log
Can read = {0}
Can seek = {0}
File is empty yet, waiting
File length = {0}
File position = {0}
Setting file position to {0}
{0} does not start with {1}
Path cannot be empty
Cannot convert {0} to integer
{0}="{1}"
Size {0} cannot be represented using 32-bit value
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
FileDescription
FileVersion
1.0.0.0
InternalName
pmrs.exe
LegalCopyright
LegalTrademarks
OriginalFilename
pmrs.exe
ProductName
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic malicious (high confidence)
MicroWorld-eScan Trojan.GenericKD.67050135
FireEye Trojan.GenericKD.67050135
CAT-QuickHeal Clean
ALYac Clean
Malwarebytes Trojan.Downloader
Zillya Clean
Sangfor Infostealer.Msil.Agent.Vxn4
K7AntiVirus Trojan-Downloader ( 005a57941 )
BitDefender Trojan.GenericKD.67050135
K7GW Trojan-Downloader ( 005a57941 )
Cybereason Clean
BitDefenderTheta Clean
VirIT Trojan.Win32.GenusT.DHUN
Cyren Clean
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of MSIL/TrojanDownloader.Agent.PFJ
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Kaspersky HEUR:Trojan-PSW.MSIL.Stealer.gen
Alibaba TrojanPSW:MSIL/Stealer.a48b7826
NANO-Antivirus Clean
ViRobot Clean
Rising Stealer.Agent!8.C2 (CLOUD)
TACHYON Clean
Emsisoft Trojan.GenericKD.67050135 (B)
Baidu Clean
F-Secure Clean
DrWeb Trojan.DownLoaderNET.624
VIPRE Trojan.GenericKD.67050135
TrendMicro Clean
McAfee-GW-Edition RDN/Generic Downloader.x
Trapmine Clean
CMC Clean
Sophos Mal/Generic-S
SentinelOne Clean
GData Trojan.GenericKD.67050135
Jiangmin Clean
Webroot W32.Trojan.GenKD
Avira Clean
Antiy-AVL Clean
Gridinsoft Trojan.Win64.Downloader.ns
Xcitium Clean
Arcabit Trojan.Generic.D3FF1A97
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan-PSW.MSIL.Stealer.gen
Microsoft Trojan:Win64/Barys!MTB
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis Clean
McAfee Artemis!680745C9AC98
MAX malware (ai score=89)
DeepInstinct MALICIOUS
VBA32 Clean
Cylance unsafe
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Msil.Trojan-Downloader.Ader.Timw
Yandex Clean
Ikarus Trojan.MSIL.Inject
MaxSecure Clean
Fortinet MSIL/Agent.PFJ!tr.dldr
AVG Win64:PWSX-gen [Trj]
Avast Win64:PWSX-gen [Trj]
CrowdStrike win/malicious_confidence_70% (W)
No IRMA results available.