Static | ZeroBOX

PE Compile Time

2023-06-25 08:56:52

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000b83f0 0x000b8400 7.81064272203
.rsrc 0x000bc000 0x00000600 0x00000600 4.5333971279

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x000bc0a0 0x000002d4 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000bc374 0x000001b4 LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with very long lines, with no line terminators

!This program cannot be run in DOS mode.
`.rsrc
Yffeeffeefef
affeeffefeefa
Xfefeffeefa
Xffeefeffeef
afeffefefeefa
Xfefeffeef
Xffeefeffefehah
Yffeeffefehah
Xfefefeffea
`fefeffeeffe_-
Yfefefeffea
_b_,
_ch*
_ch*
Y_c`
Y_c_
_b_
d2( j
ffeeffefe
fefeffefeef
fefefeffe
fefefefeffe
afefefeffe
9ffefeeffe
feffeefefef
feffefefe
feffefefe
ffefeeffe
afefeffeefef
feffefefea(
nffefeeffefeYa*
ffeeffeeffeY
\feffefefeefXa*f
feffefeeffeY
feffefeeffea
fefeffeef(
n_i`(_
j_i`(_
7%Ye 5C4
qr*aXE
1?Z/f
&Xfe @V
Xfef
Yf ca
Y _B=#a
8`(!
!Y c8
ce f;-
j !Xf
N2(aef
}'ef ]
)a D)T
Xef Mr
%!Xe s
M*Xef _
`k:-
V! JJa
aef nru
x$" =r
:T)Y* KM
oVy*X
,)(U
_b`}
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
Ex>MKp
LpUgPmo
-qgqi(
Gx]b\m
yzJi^Y
#=3$=;$
#(fd C
+)gL\i
B+uD^.
"4pf1p-C
vYOhr(
HiG^ )
5NEHTob
\qo,qD
SD1SShb
j;1A%2s
_I:<)_o
?GYNv
K9h{8W
$-e0h/
N3jGk=A@O
.tM1c*
"*[D)w
/R[5'^
G&P[~@:R
9[FR*N
US|tB}
(iJTll
R\pg6w
/}?KI.n
`^w$l4X
b k7FY
+ijnKSs%M
k^RSzv
{Oi*#
3sx]#a
GA:_5v
6Ds~km
Q*SThqC
L+s|@ND
5$$=;$
ykAA]k
Zb+-*-ZU%
eQM[ZL
?6jPNl
\ZCLuu*&
4+x_;xl*
Bx4]yA~H
dHaTza(
^j'{*vR
U*Kw0
=m"n[8
}9_xU3
vp]p={
G*|Qxk
3co)?
j/~[T[
a':t'T]
:_UW?=^
aKo1/5
nrfsao
/C^L1uM%
sD;Iw@
?$YkN3%
b\YusU?
:=!(4X
>.m1p'
G.?A8i
(DxcEI
@8{e2a
6)6M/d
==e1}Yu
VP\IQQ
QQQQA1y
nHThTX
MZ(Ev!
D\&{_A/+
h(8Z^#
^%9H1Qqvo
LYQYvMdR~T
H+(U#m
T =Ji
%"5SJCj
6;JnH.
cJ5H_R
\JAH;)
ygF?;}
L'Li'
!);)$e'
b$?JeHs)U I+
!I+\]$i
W+W0\h
%B([#{
w,NhLW
;j<'1V
r.V0o
RLRy+5
/E,Vy)
]*/G3^
QyOzF
iiAKKZZ
2`=/Fx@9$b
OYKow+D>|
X|eam9
=Fk_.}2
=7//7}
_Djfr>
)7}MZ?M
&5oanrV
!$3%yC
USVNI^
5%+(+7ur
oRIwgp(
,BF^l$
-JemN|?
nUU*HSJHn
U*fP17
\-C~4Q
!RCp!d
#>!b=n
c*#)GJ<
bF<;<h
M`B\9`f
wWp"Dp
688e?P
Q~]0V?4?+
g8_T:?
O^}2re
VaR_&`
6xoEeq
P&3#9Nb
~}_@P
s4vz<b
&&ZkUu
U'^]0!
J?{4?nk
I!>CAw
P:Aeg
NpT.5?p
t}a@6>}
ay UKb/
f2cCA+D*,
f~I<uu&P4
DzPM!u
wI::+2
#/HF3A
Kq9f7c3
02]Ol^
%G]'n$+
K=_QsO
|hy^<P
rkl8bn
_ejvxi
b@(^n:en
YSiIUXJeD
,Q4U#x
'b6Mr>
,$7|2
{wsH!6'
"#@n'4'
urGUHDn'
'D('fGl
jr0u$LW
(@nCy
AZa({0
$BoN_[
2Vgilw
Eem#d|
bki][=
T6hl-5V
*jZ[G+M#
wS_[a]
w[;F{+
[K*:a]
*oUA^>
*KE{kAEea
rmAssq
Tmn,];
R_]okgou
'-Pc1pr!
r_fmY#
9M"QaN
ORF<25l
8$a:>#
9bRx=]X+
q6yme=
f<@vML$/;
iLNYsJ=;I
=++S"YY+
GYe*VD%
Bz<Jb
Kyt.J3
ebM(aN
{`ae1X 
mJkYV-_
*0+=+-k
7V{,-"
<p"-ky
XD+mTE
k7''${
w])#RX
Su>Eoa
SPM4cv
^RwAZ%
Cx7Vz>
req/2[
2|ev/v
:B^LZw
R5"tlcb
`eP(iI
iFNs|W[
o]q_Q%4
Aaf/A\}
)jjLs@
U8#@Bv
LU)\QX
JMFbmy|7
G/47??
{TE%k0
kz<fPc&
lWzX|L
CPA`hQ`lG|
Ugw\ISD
i-Xq+INH
:93'U#yX
R3bZ|JD
Q9- Xn
"GddCs
hnEsSy
zX);jS
9],uS`v
jboAyx
b<{UM"s[
7Rgb/[9
QA)N;y
jP$#D/
cgeSVo
zgm2,F^
{iYgp@
l DW6p
Y\*>g7
ggnc%t
Wv*IYAU
OO:tF)
5Dh*YN
;&*#*R
ojE`ATxV*L
K:a~ N
}Nnq=
P@&Tl^
Br)khiz
B?!dK]PM:
X0nf<u
)Y/L:>
~a"BX$
}c&aFY
0crWEft+
xFd8[@=
|+R8fr
L]vz=j
S&pw7$
Tt5LD
L-(6)Y
93=H4f<ZF4)
0juxa9
i*<FGT
zGg@QT+
elz3u<
&&?1t5+3
~O#0\z<o
k>{L+I
V*4w=AU
!ecw1:
G xsLE!
1#upZ'
CUNa(je
f!KEn{
NjO%[G
n>N9k&
>x,}z^=u)/AZZ\
$/1^'|
?NUwE(+
(*HgQlz
Fx<vWjh
Tmip:j
L<[mK#
*cjNIL
-{OG[2
q2-o,g
B-fJ-'Vhh
xfr^VY]
oND\c'
0,<Ue
TJZ`Y!p
K]ksD6
0O%\9
9S?.o~
K~~?{8/
YW4x/f
[x938H
sR?uXW
k=RzSGq/
G " cFi
=m!(Nb
`>X=#9
y,'!RP"
Z1{YzX
paCef_
V@_(pb
)#:4Uj
!%XDDN
@uKeF\
Px}wOZsj
/eD8Zf;
{qU=hk
:JwC9k
UVV3I9
EAoZeB
{L@"Jl@
#cvJ~|
{3Qn1;
pw(9.
${us5W
T\)=Aj
XnoacX<\
u_PhTD%
G2H>?i
(D&1C#
mHE1$cV
Z%$&K
mK~N+;
|q0L~3y_
/(ZVii
)ikHw9
ttD6l>
K N3xE
X`GntG
~OePJv
hvEPWk"
a'!k;b
fLob"of
/Q*BdT
/*1 H[
>zZZf0
fZ]|dL
f>~ZaE
:66~tuL
81l>Oc
jgI[vQv
m:hc~
qS">S[Eq
^ 'JH
[KRnTo
}+4|:R
YirJ?O
kIX*0
)\PMiF/,(
RPIO*-RJ
xj&<u
_)o5`
+dR-n[
L,8ye7
#hYn6m
>I4xg)
"rSNu@]
wS6$K@
(35Fz
1Bf*63
F!vS7Y
5pi>dv@
[s!8Po
_]z_I-
$(6,a=Y #e
rE<$SuK
&YUE6t
=~8 ,r,
o"8fj<F
$o0KG&AY
{@%TpL\e
R@hT%\
uh aMu
f\~dw4
ch.8&pf
=oj |.
pfo=RN
1kxMv=
,^@ &4
(gPGIu
!]59z:
<Tr9Vq
SsYS[AbW
V$xo.0\
\qEOW|k
^K(N0:
"88,E.C
e;c~eK
H8j u+
ZP:=ImC
(%EwT#$
GK>ILz
c>&hQh|8"
v|8rZkk!
Na<&*xl2>#v*
U8CV<?
}1v{)J
\m<VnT+
RZ}vzH
y{%1vKC8
7:6x\<+*
1kxhHTe
4Z;h1A
vTA;0r
RZ(9w#
Z&%q<#
|1-} 9
\d72{
bnSslR(
+A*z?j-g
KxM#b{
xPkB3W
lzyX(5
x@xamoU
Y;3/y5
4^TZR)
JgOIUQt.
$H;Gm)|
Fq?,(83!.UZ
,{ :Ma
PizGzt~
fYq}1"
/a.'MspB)+
NIUSS[
obbB0d
G?4WcI
"EjSw4_,u
ur;@F}[
Q/r{Op
myH!5p
[ &cB+
FQYm'|
>#W6lJ
#k-.d-
w|=;tF
R8-kY"
a\xt.1A
.\hM,=
p<9!sSN
<D`yj4|
R*.JjA
2.>)F
m,SHZGf?
x1z-p{
gbB|YV
ekM=l;
Aq-7ID
k|qgrh
%YI|2
z!t2R/
C|{%Y}
FJ3\6s
vLIj0k
ef4woM
Zb7d+&
i'eWXF
<VH~K
-EKc$Zy"}
z@D2^a
$%C5KE
1o0ydy
s-U0.T
b-~9bnR
u#d_%$
M$cIwr
w~S!HN
y[oWPI
_+}N'(
5Rnx)qX
fxPC"I1
}W\hky
"k3fky
cv0fts
hx|}0I
k"m\\pn]
t7W}W
b.Gf.G
<!D3R$
+N=bgb
vDE4r'
n42A|G^
mL]pHh
[FcQWS
/)PM2G
/h4/WbJ
p`Fb*T
lE^ 2P
G<aZ1o
~S$^rm
-:BKZ$V
S~{rzB*
0cYN~
Y _)3;
0f>&dTG
]SRb2U
Vwrw O
m9(<3,
2'gjah
!{x5pRz
Kj5_38_
_-M3OF
Td"<Iu
^3*8<[
;^^1AB
V!]Qit4 -1
Yspd:*!4
ZZ;ozZ
!KLq9T
u&*M9*
zJ.BAk/-1fk
p\O(U,
+V1!]y
HeLh*@a_s@0w
zLr-\|
z$Zw#k
wF6|Mr
Zqr@*m
Qy4;wS
w#11"{
M]-oDG
o?cRBE
f>sL@Q
\y)m$"
pw>N$wh
"oKasGX
QY]RSr
{t)~F]82M/.
BncaG!r
/4x+cml
/.Lt5#
g~4iw#cY
>@M)0[
/*jPkbg
82Exfh
trl>mq|
KX)oWY
7e*r?d%
j<|TfT?
cEtm,G
.JG"mW[
n<:8^[
^<8A#)
1jP!4x
*50rQu
!*L#~/
nlud9z
,h7eO}
(0'Z'V
+o.]A)b
#Iqc(u
b}a-YT
N9mXpA
!YH%o*
|E6Mt^
='_|}$
Ok}^:E;
8l}KeyAA^
*)AI-M
<$%}B%
nkm)\<
`kjvT|
?P'0`6
,#<Iug{
vJ<2.?*^K
b_jldN
w)R~XiV
lY}k8U
Sff5udiW[
f88Onc
jYb"!Jko[b
4uR}N(\
(8Z"g
#g4#w?
V1_))e
4bjbr=g
`!J~%v
=<y;S1'
Mvd5;:
fl)[)S
9;RFET
8'h\o!
P"`6-e
@GCE5GsC
S+}]=L
r 4VpS!
L5HoCB
f?|t?b8
_te)mM$
p!P {{
J;la)Z
6&}D{}p"
7G!tF
UnjPaIqA
&+O8wK
I.?zOX
yRrlkX:
}iO*Bp
Ux0ykb8
n0*k}sW%N
8!58ay'
LEqLnv
'27]J_
eXrz{a
K\lQ&8e
D~,+"SU
^AFEA;
98pL01
3if]>?h
w]|w_3
vAf47~
AawPfv
Q-6:ph
MQuB1\
kF2pn[
5<6BPc
;Y;$&+r
\JL&[6
XNsb+!x
J*yB=s"4
YqY/*+
h[7xjz
6Lmb \
gI(\&|
3*w}?R
(Ty^`9
5yp\|j@
#tdkEa
FjZOi$Z
fUZbP@
*^1_+%
kW;@I5
+nlCx&AQ
mp\=v]>
tFWOGm
Z@k,Q*
W8<nQ&~
q$t$F\S
[H{Qxh|
KlSIDcV
.KsIup
;Q%Rf
mNSu]g(f
i*yubV
VBvG!C
rG*'rX
jq"d`m%^v
]\^wDUo
[z/?\#M
r=89& `'
ZR+o#"
=y $mt
q_R!?
U|Nn=`C7
-Cm^R/
FZ#,B[
(Fi'r*
n)?Avp
oSwWMn
ZCEnIf
`k;W})B
B*z]rj
l#jAkI
,$Hx:fr&
#2Wkj84
|V47s@
O)mRZ&
hS?AmD
OBq8*>
.=XZO
dQ6B h%
3nlbSX
3B%+T^
JpF>]U
]%E[n11
z!E/O!
tTis4
rMJ1Kd
F4MrCA
8^PKmd
-(XwUg
*`,Czq
._vzWF-d%)S
)x$=RV
2|MVPm3
Pt}o2#
;qqyj0
8JhQS[
X 8/-D
*OQgnz
h&t>.O
KRl|#O7
xUmf8/
xh#2.\
AB@7Vc
kMl)S6
.TEPD!L
4oma-HP
J'7Bdtv
bST:!'\
LQY2ew1
m97[7&Ir
(+,m;.
U2*tV
2=2W3b
}A+w[0<>
0U+1V2
ii"?GWV
Us\3C'
\6g2JG
Hi!}v]
9D?)>t60H
g'MO=B
?r;'-A
CHp*<
"(v`bJ
&wF`Zo
F^lt0+?
P'j/pc
a7$F<+
?]kPLgR
@4H7s7
t6I#Ra
Lrqgh.1F
7Pi^tX
M,<*4y
xtiLg/
4%Vi,Wr
\$ Tpv
{`g4 \g
Az$.9B
g53XTbk
/tgZ;7S
L7<z)*P
#.J51&
xl>PR3
5<cbaLl
ZYO8_ 0;
W:]@O^
n_*k<t
Y@geu|
C~,*xa
;#-Sn<
Wt^IZu
+}}QIC
[=Zxxw^
c4z[d%
x@R!<xy
}w7P?
CE2t6O
(CZ<@6O}
L:[A&a:
|&h=l~
]HHKT1
D3=V?0
f[BR_~3
mMkCQk
+uCn$x
L^]MQ56
%N*P;B
yG$ER3
2(t3EL
4B("yt
g#LYni-'
90AGXX
w\*5\8i
9JcQ|Z6
kR8bL9H
P07[9K
0f_j.&
Yd+V9T
6?.dH{
QZG1G]
l#l;4^
4X0[19
oe/-V6
f.S#@a
m XDV.
Yu#"5@
}5cY01
~]OXt:
HN]rO6
]Yk~AW0
?T#K"c
),Z'O]o
`$0SX0:
QZ_R_m
I}RQlco
Y>SPHR
JD!o}u
k*kYSq
$Z`Lu.
i)itk{U
3v/<-|
Ee_OH9
Le8%V|
zO?t3W
].,_x6
!99}uCw
KY2CF1d>N0
(_4S5t
wf-d[r
[#4sA"
BM}}YF5
K'n%c8
#Tx~zP`[
HSl3?Y
v'>#yWV(
"[_`e@
X*jER?
.Zo4CkN
38:>H<
?h+E@4
`.?BJ0
73b_u6
wu-PiJVD
tqn?xXb+
$U6yG
Wdl2o4s
v4s1nR
OlQbE-
j(jE{RF
f%A.1\q
:TFS@w(;
VT*Z4b
sO%~wU~
)!dJ@<
-eB&9Z
d[Yp&a
X?|1MB
6>;q?u
Nwvd~[
D~,L&/a
f*O$V!
v-PDi]AO
`Dt($k
|mu4AM
#EC.dz~
/m3i8m
1L]""_d
ZQEy3UN
!Fs%F
Cbba!n
itC*03
h#$ AD
e</51
$o5h@
T%A1x6
iuWHW;Y
St"_4q,
rJH[Gk
T2["h4
<^[N~!
sYsP8T
&JKkJ1
pas@7B
N\\MX>
aFb:Hijg
]u:i2#
Phz}qTGx4NW?
)cgR/\
0J]gc<hp
u\"+mN
0a)iG;
"f6WI>
Mzy9cEU*
R~I=sXL
&&UE_+
FXaL~2
`k{ ;W
=}d6Kg0
=uey=i
[RTYI=6
,nlhhO
#8q]n#
a,qY
qqV5A!
Q#=uA?Y
(}|~-D4
$Ia|<=
^+7>6U?
j:yW[J&
aH>kf
q}ao<^
mmi 7#
F-ZyOOU
Jaa7b<
IL.wSF
py%B[6
kwj2@^
<Q'Nbj
ilDwi\t
YF1}y&L
cf~I{1"
]W$2>q
#SV|Rt
^F;#46
*l,.]R7
x-QO#j
D7"xN}
g9dH?U
g;FiYUj
/!OR+
27p4}R.4
irPO_{Hj
@[yIVY
-oLq`4
M!#rl#
oD0_{A
+5ou:,
pM@/sPd
QG(\>H
NoT"7B
-e_pb4
{[L77G|
z2%f: x
HbZA0[
K|U_zW
7#A;E@I
n3}"S
e,'Z.$o
GeDiw(
6yZJQH
8w--d+
QjG;6z
D"7HFyV
XiMsD^
>ZC}_&+
[o_&}S
lY*nna
[r{J/;p
:_No;(
gCC &;r6
U^ t@;
'4rt/5
_pA|cg
{9xL|=
kJSYM
H(dj#V
RlxwQd:M
QW5cD:
M3Iqxx
!i4%Z
Z4,r4'
7oB'/
g+j?dF
ZS6HBT
'7H:&!)
r$kX4/
g8WNK%
}2+R($
&X88uf
&vXvxK
>fYO3U
,tb&6b
xjDvTi
Sv\Os<
z4,Ep
@XEWv_
BlHVsr|
BdUrdXX0
SL)sW!
WzfU}{
EOQm<3ny/C8H
]SbK~E
?y[&A|
9t8XZ;
aHsp<P
S[}`n
<qzoJfE
mu(&6|w@
Sr~T:D
IrQ~j`
slj/(gw
6$%Gw
b]V0.1
ty)F@>
{o$5lH
&*GScH
)t8[yE
"Jy,%-
QS?(ck
P,,gf3r
sRC5"
NoP"a]
"S3Kii>!A
f*zd#JN
pMzZMo`0
GK+`;%
cCh-+h
X;dQS~W*
Xq5EY4i
|"iOen
*GT*Co
?pDEc8
V M_2P
+3OeefU
)d!Jc}
i0V0D|aH
z@<~7L
{L+Sa+
y)#8z0e@
Rs#Va8
73ke<
Exy_ZA
78K&\]
G'#plL
~A!0j}
BJu]BX
G`3G$\
.?FwP/
|:r@sY=@x
04NU:21
m9von7k
e`rSQG
7(y]V
-JyZSe
ju't kbi
(lm-c`a
hbBglm
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
hThe supplied handle is invalid. This can happen when trying to set an ACL on an anonymous kernel object.
xOne machine may not have remote administration enabled, or both machines may not be running the remote registry service.
Illegal enum value: {0}.
4The specified RegistryValueKind is an invalid value.
[RegistryKey.GetValue does not allow a String that has a length greater than Int32.MaxValue.
8Registry key name must start with a valid base key name.
(Cannot delete a registry hive's subtree.
@No remote connection to '{0}' while trying to read the registry.
*The specified registry key does not exist.
)Registry HKEY was out of the legal range.
=Registry key names should not be greater than 255 characters.
cRegistryKey.SetValue does not support arrays of type '{0}'. Only Byte[] and String[] are supported.
yThe type of the value object did not match the specified RegistryValueKind or the object could not be properly converted.
URegistryKey.SetValue does not allow a String[] that contains a null String reference.
>Cannot delete a subkey tree because the subkey does not exist.
No value exists with that name.
BRegistry value names should not be greater than 16,383 characters.
:The specified RegistryKeyPermissionCheck value is invalid.
/The specified RegistryOptions value is invalid.
,The specified RegistryView value is invalid.
PRegistry key has subkeys and recursive removes are not supported by this method.
$Cannot access a closed registry key.
+Registry is not supported on this platform.
)Requested registry access is not allowed.
+Access to the registry key '{0}' is denied.
!Cannot write to the registry key.
<linker>
<assembly fullname="Microsoft.Win32.Registry" feature="System.Resources.UseSystemResourceKeys" featurevalue="true">
<!-- System.Resources.UseSystemResourceKeys removes resource strings and instead uses the resource key as the exception message -->
<resource name="FxResources.Microsoft.Win32.Registry.SR.resources" action="remove" />
<type fullname="System.SR">
<method signature="System.Boolean UsingResourceKeys()" body="stub" value="true" />
</type>
</assembly>
</linker>S
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
JThe buffer is not associated with this pool and may not be returned to it.
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
=Length of the access control list exceed the allowed maximum.
(The access rule is not the correct type.
'The audit rule is not the correct type.
NThe security identifier is not allowed to be the primary group of this object.
hThe supplied handle is invalid. This can happen when trying to set an ACL on an anonymous kernel object.
FThe security identifier is not allowed to be the owner of this object.
?Security descriptor with revision other than '1' are not legal.
6Security descriptor must be in the self-relative form.
KThe SDDL string contains an invalid sid or a sid that cannot be translated.
,The named parameter must be a container ACL.
3The named parameter must be a directory-object ACL.
0The named parameter must be a non-container ACL.
7The named parameter must be a non-directory-object ACL.
Unable to perform a security operation on an object that has no associated security. This can happen when trying to get an ACL of an anonymous kernel object.
-Method failed with unexpected error code {0}.
Must set at least one flag.
Illegal enum value: {0}.
>Operation is not valid due to the current state of the object.
KType must be an IdentityReference, such as NTAccount or SecurityIdentifier.
,The binary form of an ACE object is invalid.
,The binary form of an ACL object is invalid.
9The SDDL form of a security descriptor object is invalid.
?The length of the array must be between {0} and {1}, inclusive.
2The length of the array must be a multiple of {0}.
bDestination array is not long enough to copy all the required data. Check array length and offset.
"Enum value was out of legal range.
6User-defined ACEs must not have a well-known ACE type.
Non-negative number required.
Argument cannot be zero.
No flags can be set.
<The value '{0}' is not valid for this usage of the type {1}.
Invalid name.
,Privilege '{0}' is not valid on this system.
The SafeHandle is invalid.
The pipe has been disconnected.
SThis access control list is not in canonical form and therefore cannot be modified.
RThis operation must take place on the same thread on which the object was created.
(Object must be locked for read or write.
Object must be locked for read.
=Must revert the privilege prior to attempting this operation.
2The object does not contain a security descriptor.
WAdding ACEs with Object Flags and Object GUIDs is only valid for directory-object ACLs.
3The 'set' method is not supported on this property.
qAccess Control List (ACL) APIs are part of resource management on Windows and are not supported on this platform.
HThe process does not possess some privilege required for this operation.
VThe process does not possess the '{0}' privilege which is required for this operation.
0Only single dimension arrays are supported here.
<linker>
<assembly fullname="System.Security.AccessControl" feature="System.Resources.UseSystemResourceKeys" featurevalue="true">
<!-- System.Resources.UseSystemResourceKeys removes resource strings and instead uses the resource key as the exception message -->
<resource name="FxResources.System.Security.AccessControl.SR.resources" action="remove" />
<type fullname="System.SR">
<method signature="System.Boolean UsingResourceKeys()" body="stub" value="true" />
</type>
</assembly>
</linker>
<linker>
<assembly fullname="System.Security.Principal.Windows" feature="System.Resources.UseSystemResourceKeys" featurevalue="true">
<!-- System.Resources.UseSystemResourceKeys removes resource strings and instead uses the resource key as the exception message -->
<resource name="FxResources.System.Security.Principal.Windows.SR.resources" action="remove" />
<type fullname="System.SR">
<method signature="System.Boolean UsingResourceKeys()" body="stub" value="true" />
</type>
</assembly>
</linker>Y/
SMCl/P7
ZZ3-iO>
P@\(Lo
bXs+Lo
h>p7No
vF)N&cW
Y(0b~1
12m)N~
"3ri_o
{o{YzJ
#vlTIQ
*\_3\5:W
;M#Z%C
z{"R)T
-kKwX>~
YK#Q6/)
.afCG12d
be9Cstif[
v]z]\j
&0sedo
v4.0.30319
#Strings
% K d
2F3o3{3
314G4p4
"I#Q#Z#
%F%U%Q&
/P0Y0a0j0
Unassinged10
Ldc_I4_0
Ldloc_0
Stloc_0
Ldarg_0
Unassinged11
RSASHA1
RSASHA1_NSEC3_SHA1
DSA_NSEC3_SHA1
Ldc_I4_M1
Ldloc_1
Stloc_1
TaskCompletionSource`1
Nullable`1
IEnumerable`1
IOrderedEnumerable`1
IEquatable`1
ConfiguredTaskAwaitable`1
ConcurrentQueue`1
Task`1
Action`1
ICollection`1
IReadOnlyCollection`1
AsyncTaskMethodBuilder`1
EqualityComparer`1
IEnumerator`1
HashSet`1
ArraySegment`1
IReadOnlyList`1
RSASHA512
Unassinged12
Microsoft.Win32
UInt32
ToInt32
Ldloc_2
Stloc_2
Func`2
KeyValuePair`2
ConcurrentDictionary`2
Cloudflare2
GooglePublicDns2
Unassinged13
Ldloc_3
Stloc_3
Func`3
Unassinged3
Unassinged14
ECDSAP384SHA384
Ldc_I4
Conv_I4
Unassinged15
RSAMD5
Ldc_I4_5
ReadUInt16
ToUInt16
ECDSAP256SHA256
RSASHA256
Func`6
Unassinged6
Cloudflare2IPv6
GooglePublicDns2IPv6
CloudflareIPv6
GooglePublicDnsIPv6
Unassinged7
get_UTF8
Unassinged8
ED25519
Unassinged9
<Module>
DANETA
PKIXTA
PRIVATEOID
DANEEE
PKIXEE
get_ASCII
NSEC3PARAM
System.IO
WARZERO
PRIVATEDNS
Ldloc_S
Stloc_S
Brfalse_S
Bne_Un_S
INDIRECT
ECCGOST
get_IV
set_IV
GenerateIV
get_OSX
DNSKEY
value__
GetData
EventData
mscorlib
System.Collections.Generic
ReadAsync
SendAsync
WriteAsync
ReceiveAsync
FlushAsync
ConnectAsync
get_ManagedThreadId
get_CurrentManagedThreadId
get_CanRead
get_CurrentThread
TryAdd
get_IsAttached
Interlocked
IsEnabled
get_CanBeCanceled
Unassigned
Refused
get_Connected
AwaitUnsafeOnCompleted
get_IsCompleted
NotImplemented
ThrowIfCancellationRequested
get_IsCancellationRequested
NotAuthorized
TrimEnd
Append
get_Millisecond
DefineMethod
GetMethod
NetworkInterface
IsNullOrWhiteSpace
ShouldTrace
StackTrace
CreateInstance
TraceSource
CreateLinkedTokenSource
CancellationTokenSource
EventSource
GetHashCode
OpCode
get_SocketErrorCode
BadMode
CryptoStreamMode
CompressionMode
get_Unicode
GetUnicode
get_Message
AddRange
CompareExchange
BadCookie
EndInvoke
BeginInvoke
get_Available
get_DataAvailable
IEnumerable
AsEnumerable
IDisposable
Hashtable
ConfiguredTaskAwaitable
RuntimeMethodHandle
RuntimeTypeHandle
GetTypeFromHandle
Volatile
DefineDynamicModule
get_Name
BadName
get_FullName
GetName
set_HostName
AssemblyName
StackFrame
GetFrame
BadTime
DateTime
AppendLine
get_NewLine
IAsyncStateMachine
SetStateMachine
LocalMachine
get_None
NotZone
get_IsGenericType
get_NetworkInterfaceType
DefineType
CreateType
ValueType
OfType
get_DeclaringType
ProtocolType
SetReturnType
GetType
TraceEventType
Cloudflare
System.Core
WriteEventCore
ServerFailure
BadVersionOrBadSignature
PtrToStructure
get_InvariantCulture
MethodBase
Dispose
TryParse
Reverse
FullCertificate
Update
Create
MulticastDelegate
Aggregate
DebuggerBrowsableState
set_LingerState
CompilerGeneratedAttribute
GuidAttribute
EventSourceAttribute
GeneratedCodeAttribute
DebuggerNonUserCodeAttribute
AttributeUsageAttribute
DebuggerBrowsableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
AsyncStateMachineAttribute
IteratorStateMachineAttribute
ObsoleteAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
SuppressIldasmAttribute
DebuggerHiddenAttribute
ExtensionAttribute
AssemblyFileVersionAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
DefaultMemberAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
CLSCompliantAttribute
EventAttribute
ParamArrayAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
ReadByte
TryDequeue
Enqueue
get_Value
get_HasValue
LegalBlockSizesValue
LegalKeySizesValue
TryGetValue
Receive
ResolveNameServersNative
TryRemove
WARZERO.exe
set_Size
get_SupportedUdpPayloadSize
set_BlockSize
get_InputBlockSize
get_OutputBlockSize
set_KeySize
LastIndexOf
System.Diagnostics.Tracing
System.Threading
Encoding
Ceiling
System.Runtime.Versioning
IdnMapping
FromBase64String
ToBase64String
ReadString
ToString
GetString
Substring
BinarySearch
ExactMatch
Stopwatch
get_Switch
SourceSwitch
TryGetSwitch
get_Length
ContinueWith
StartsWith
GetAscii
Newobj
AsyncCallback
SpinLock
TransformFinalBlock
TransformBlock
get_Task
AllocHGlobal
FreeHGlobal
DeclareLocal
skipIPv6SiteLocal
get_IsIPv6SiteLocal
Marshal
SequenceEqual
op_GreaterThanOrEqual
op_LessThanOrEqual
DefineLabel
MarkLabel
System.ComponentModel
WhenAll
iphlpapi.dll
ILLink.Substitutions.xml
GetManifestResourceStream
get_BaseStream
NetworkStream
CryptoStream
GZipStream
GetStream
MemoryStream
get_Item
set_Item
System
SymmetricAlgorithm
BadAlgorithm
Random
get_CanReuseTransform
ICryptoTransform
IsOSPlatform
Boolean
op_GreaterThan
op_LessThan
InfiniteTimeSpan
get_Token
get_MetadataToken
CancellationToken
GetPublicKeyToken
ExistingDomain
AppDomain
GetDomain
get_CurrentDomain
NotExistentDomain
System.IO.Compression
BadTruncation
RuntimeInformation
System.Net.NetworkInformation
CancellationTokenRegistration
System.Globalization
Action
System.Reflection
IPAddressCollection
op_Addition
GetGenericTypeDefinition
set_Position
LingerOption
Win32Exception
IOException
get_Exception
OperationCanceledException
ObjectDisposedException
NotImplementedException
NotSupportedException
FileNotFoundException
MissingManifestResourceException
ArgumentOutOfRangeException
AggregateException
ArgumentNullException
EndOfStreamException
InvalidOperationException
get_InnerException
UnauthorizedAccessException
SetException
SocketException
ArgumentException
TimeoutException
OutOfMemoryException
StringComparison
Intern
SendTo
CopyTo
MethodInfo
CultureInfo
MemberInfo
ConstructorInfo
System.Linq
InvokeMember
BinaryReader
IFormatProvider
MethodBuilder
ModuleBuilder
TypeBuilder
StringBuilder
LocalBuilder
ParameterBuilder
AssemblyBuilder
Binder
HostToNetworkOrder
Buffer
ResourceManager
Debugger
ParameterModifier
System.CodeDom.Compiler
TaskScheduler
DefineParameter
ConfiguredTaskAwaiter
GetAwaiter
set_DataPointer
BitConverter
Register
NameServer
NoError
FormatError
SocketError
IEnumerator
GetEnumerator
GetILGenerator
Activator
.cctor
GetConstructor
Monitor
CreateDecryptor
CreateEncryptor
IntPtr
System.Diagnostics
FromSeconds
AddMilliseconds
get_ElapsedMilliseconds
get_TotalMilliseconds
FromMilliseconds
GetMethods
GetAllNetworkInterfaces
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
Dacou.Properties.Resources.resources
.resources
.resources
.resources
OpCodes
GetIPProperties
IPInterfaceProperties
GetSubKeyNames
GetTypes
set_Aliases
get_DnsAddresses
GetAdaptersAddresses
MethodAttributes
TypeAttributes
ParameterAttributes
FromMinutes
GetAddressBytes
GetBytes
NextBytes
KeySizes
BindingFlags
SocketFlags
get_Ticks
get_CanTransformMultipleBlocks
System.Threading.Tasks
Equals
SourceLevels
GetNetworkParams
fallbackToGooglePublicDns
Contains
SocketTaskExtensions
System.Collections
TaskCreationOptions
StringSplitOptions
get_Chars
SetParameters
ResolveNameServers
ResolveNameResolutionPolicyServers
AssemblyBuilderAccess
IPAddress
get_Address
address
AttributeTargets
System.Net.Sockets
get_OperationalStatus
get_Windows
Concat
Format
GetObject
Select
Distinct
System.Net
MissingResourceRecordSet
ExistingResourceRecordSet
Socket
get_Offset
DateTimeOffset
ConfigureAwait
op_Implicit
op_Explicit
System.Reflection.Emit
get_Default
GetValueOrDefault
FirstOrDefault
get_Result
IAsyncResult
GetResult
TrySetResult
get_Client
TcpClient
UdpClient
DnsClient
Environment
get_Current
System.Collections.Concurrent
TraceEvent
WriteEvent
IPEndPoint
get_RemoteEndPoint
endPoint
get_Count
get_TickCount
get_ProcessorCount
Restart
Convert
Callvirt
get_Port
DefaultPort
ToList
set_AddressList
set_SendTimeout
set_ReceiveTimeout
ConnectionTimeout
MoveNext
System.Text
ReadAllText
AppContext
StartNew
get_Now
get_UtcNow
get_DnsSuffix
dnsSuffix
get_Linux
OrderBy
get_Array
ToArray
ToCharArray
get_Key
set_Key
OpenSubKey
GetPublicKey
BadKey
GenerateKey
ContainsKey
RegistryKey
Notify
System.Security.Cryptography
get_Assembly
GetCallingAssembly
GetExecutingAssembly
get_AddressFamily
IPv6Any
WhenAny
SelectMany
BlockCopy
IQuery
get_Factory
TaskFactory
IPHostEntry
Registry
get_Capacity
op_Equality
op_Inequality
AllowMultiple
Inherited
Inherited
AllowMultiple
Inherited
Inherited
Inherited
Inherited
AllowMultiple
Inherited
obsolete per RFC
TUrSystem.Diagnostics.Tracing.EventLevel, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
TUrSystem.Diagnostics.Tracing.EventLevel, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
TUrSystem.Diagnostics.Tracing.EventLevel, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
Name#System.Buffers.ArrayPoolEventSource
Inherited
AllowMultiple
Use MX
3System.Resources.Tools.StronglyTypedResourceBuilder
16.0.0.0
WrapNonExceptionThrows
$8403e101-60c9-4a83-94ca-42d0ee2ae41e
1.0.0.0
.NETFramework,Version=v4.8
FrameworkDisplayName
.NET Framework 4.8
<?xml version="1.0" encoding="utf-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="1.0.0.0" name="MyApplication.app" /><trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"><security><requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"><requestedExecutionLevel level="asInvoker" uiAccess="false" /></requestedPrivileges></security></trustInfo></assembly>PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGX
Zqwjctiy
AccessControl_InvalidHandle
Arg_DllInitFailurej
Arg_EnumIllegalVal
Arg_RegBadKeyKind
Arg_RegGetOverflowBug
Arg_RegInvalidKeyName
Arg_RegKeyDelHive
Arg_RegKeyNoRemoteConnect
Arg_RegKeyNotFound
Arg_RegKeyOutOfRange
Arg_RegKeyStrLenBug
Arg_RegSetBadArrType
Arg_RegSetMismatchedKind
Arg_RegSetStrArrNull
Arg_RegSubKeyAbsent
Arg_RegSubKeyValueAbsent
Arg_RegValStrLenBug
Argument_InvalidRegistryKeyPermissionCheck
Argument_InvalidRegistryOptionsCheck
Argument_InvalidRegistryViewCheck
InvalidOperation_RegRemoveSubKey
ObjectDisposed_RegKeyClosed
PlatformNotSupported_Registry
Security_RegistryPermission
UnauthorizedAccess_RegistryKeyGeneric_Key
UnauthorizedAccess_RegistryNoWrite
ArgumentException_BufferNotFromPool
AccessControl_AclTooLong
AccessControl_InvalidAccessRuleType?
AccessControl_InvalidAuditRuleTypei
AccessControl_InvalidGroup
AccessControl_InvalidHandle
AccessControl_InvalidOwner
AccessControl_InvalidSecurityDescriptorRevision
AccessControl_InvalidSecurityDescriptorSelfRelativeForm
AccessControl_InvalidSidInSDDLString
AccessControl_MustSpecifyContainerAcl
AccessControl_MustSpecifyDirectoryObjectAcl
AccessControl_MustSpecifyLeafObjectAcl
AccessControl_MustSpecifyNonDirectoryObjectAcl
AccessControl_NoAssociatedSecurity
AccessControl_UnexpectedError
Arg_EnumAtLeastOneFlag
Arg_EnumIllegalVal
Arg_InvalidOperationException
Arg_MustBeIdentityReferenceType
ArgumentException_InvalidAceBinaryForm
ArgumentException_InvalidAclBinaryForm
ArgumentException_InvalidSDSddlForm
ArgumentOutOfRange_ArrayLength
ArgumentOutOfRange_ArrayLengthMultiple
ArgumentOutOfRange_ArrayTooSmall
ArgumentOutOfRange_Enum
ArgumentOutOfRange_InvalidUserDefinedAceType
ArgumentOutOfRange_NeedNonNegNum
Argument_ArgumentZero
Argument_InvalidAnyFlag
Argument_InvalidEnumValue
Argument_InvalidName
Argument_InvalidPrivilegeName
Argument_InvalidSafeHandle
InvalidOperation_DisconnectedPipe
InvalidOperation_ModificationOfNonCanonicalAcl
InvalidOperation_MustBeSameThread
InvalidOperation_MustLockForReadOrWrite
InvalidOperation_MustLockForWrite
InvalidOperation_MustRevertPrivilege
InvalidOperation_NoSecurityDescriptor
InvalidOperation_OnlyValidForDS
NotSupported_SetMethod
PlatformNotSupported_AccessControl
PrivilegeNotHeld_Default
PrivilegeNotHeld_Named
Rank_MultiDimNotSupported
}3464I
*)/.0.98;:<:IHJHKHNMXW_^qput~}
cSFUr6RZDApCva1RQSxOtK8aYytUvqxWTiEcnKRAZzZTqbh1UStCtqNYW2NAvrVrZC1Lt49VTz0ctLFrazZCqrRVTjFTovpTRyx4l6RaRSxP4IZRVgxeq6RyUDdKk6BaRjRC4KZRVgdpuqxRGRFJv6RMbT4ciaRVRgtTqahaRWNmv6UPRT1ThJFbUTFTsq5aGT9Cr553VypVvq9AZjdKuqhaGQtCr4VVVjkc7PgHGmNmqLJRTzpLopJRUC5CqfpnSzVXt6R1UStCtqNYWx1fq61bUD1V4KNVQD1LrawPUTVIsKRARytT
DefineDynamicAssembly
TripleDES
Rijndael
System.Security.Cryptography.
, System.Security.Cryptography.Algorithms
Could not load type {0}
Create
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
FileDescription
FileVersion
1.0.0.0
InternalName
WARZERO.exe
LegalCopyright
LegalTrademarks
OriginalFilename
WARZERO.exe
ProductName
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
Antivirus Signature
Bkav Clean
Lionic Trojan.Win32.Blocker.V!c
tehtris Generic.Malware
MicroWorld-eScan Gen:Variant.MSILHeracles.91081
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
ALYac Clean
Malwarebytes Clean
Zillya Clean
Sangfor Trojan.Msil.Kryptik.Vrfj
CrowdStrike win/malicious_confidence_90% (W)
BitDefender Gen:Variant.MSILHeracles.91081
K7GW Clean
K7AntiVirus Clean
Baidu Clean
VirIT Clean
Cyren Clean
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 a variant of MSIL/GenKryptik.GLCS
APEX Malicious
Paloalto Clean
Cynet Malicious (score: 100)
Kaspersky HEUR:Trojan-Ransom.MSIL.Blocker.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Malware.Obfus/MSIL@AI.80 (RDM.MSIL2:LtY9kWnzTX8On8izjUWMUQ)
Sophos Clean
F-Secure Clean
DrWeb Clean
VIPRE Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win64.Keylog.bc
Trapmine Clean
FireEye Generic.mg.bfabce83cee13bb8
Emsisoft Gen:Variant.MSILHeracles.91081 (B)
Ikarus Trojan.MSIL.Inject
GData Clean
Jiangmin Clean
Webroot Clean
Avira Clean
MAX malware (ai score=83)
Antiy-AVL Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan-Ransom.MSIL.Blocker.gen
Microsoft Trojan:Win32/Casdet!rfn
Google Detected
AhnLab-V3 Trojan/Win.MSILKrypt.C5371852
Acronis Clean
McAfee Artemis!BFABCE83CEE1
TACHYON Clean
DeepInstinct MALICIOUS
VBA32 Clean
Cylance unsafe
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
SentinelOne Clean
MaxSecure Trojan.Malware.300983.susgen
Fortinet MSIL/GenKryptik.GLCC!tr.dldr
BitDefenderTheta Clean
AVG PWSX-gen [Trj]
Cybereason malicious.e90cb0
Avast PWSX-gen [Trj]
No IRMA results available.