Static | ZeroBOX

PE Compile Time

2023-07-17 12:16:43

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0003122a 0x00031400 7.88321718247
.rsrc 0x00034000 0x0003b1f4 0x0003b200 4.59927053262
.reloc 0x00070000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00065c7a 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00065c7a 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00065c7a 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00065c7a 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00065c7a 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00065c7a 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00065c7a 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00065c7a 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00065c7a 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00065c7a 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x00066130 0x00000092 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_VERSION 0x0006ec0a 0x000003c4 LANG_SERBIAN SUBLANG_ARABIC_YEMEN data
RT_MANIFEST 0x0006f00a 0x000001ea LANG_INDONESIAN SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
91_~8
,k+'~F
-;&&*~F
-~&&&~V
-{&&&~X
-G&+3~F
-r&&&&&&
-a&&&&&&~l
-X&&&~n
v4.0.30319
#Strings
ekkFFmpjm.exe
ekkFFmpjm
<Module>
mscorlib
System
Sampafsle
Object
MulticastDelegate
ValueType
Attribute
GetString
SmartAssembly.Delegates
MemberRefsProxy
SmartAssembly.HouseOfCards
Strings
PoweredByAttribute
SmartAssembly.Attributes
value__
YELLOW
ModuleHandle
Dictionary`2
System.Collections.Generic
Assembly
System.Reflection
GetExecutingAssembly
GetEntryAssembly
get_Location
TextReader
System.IO
ReadToEnd
Exception
get_Message
ToString
GetDirectoryName
String
Intern
op_Equality
op_Inequality
Directory
get_Chars
Exists
IsNullOrEmpty
EnumerateDirectories
IEnumerable`1
get_Length
BinaryReader
ReadInt32
GetTypeFromHandle
RuntimeTypeHandle
GetName
Console
WriteLine
Concat
FileStream
FileMode
IDisposable
Dispose
Stream
ProcessStartInfo
System.Diagnostics
set_Verb
set_FileName
set_Arguments
set_WindowStyle
ProcessWindowStyle
set_UseShellExecute
set_CreateNoWindow
set_RedirectStandardOutput
set_RedirectStandardError
Process
WaitForExit
GetDirectories
Convert
FromBase64String
Encoding
System.Text
get_UTF8
get_ASCII
GetBytes
HashAlgorithm
System.Security.Cryptography
ComputeHash
SymmetricAlgorithm
set_Key
set_Mode
CipherMode
set_Padding
PaddingMode
CreateDecryptor
ICryptoTransform
TransformFinalBlock
Buffer
BlockCopy
System.Collections
Thread
System.Threading
Environment
GetFolderPath
SpecialFolder
CreateDirectory
DirectoryInfo
Marshal
System.Runtime.InteropServices
SizeOf
ToUInt32
BitConverter
ToInt32
IntPtr
get_Size
op_Explicit
ToInt16
get_Assembly
ResourceManager
System.Resources
GetObject
DateTime
get_UtcNow
TimeZoneInfo
FindSystemTimeZoneById
ConvertTimeFromUtc
GetManifestResourceStream
ParameterInfo
.cctor
object
method
Invoke
hfsdkffddfghseffdfaffdchd
fghhfgsfffrfddfdffddshfdasdfh
cdfffdfadfdfrsfsshdkfffgh
BeginInvoke
IAsyncResult
AsyncCallback
callback
EndInvoke
result
hjfdffhgfadffdfdcdffffskhj
ffghrgfdffffffkhsjd
sfdfffdshdffgfefdfkfghj
sddddffhedfgddffffgjfsfkdgsacsafp
sgfhjffffgdhjsrfhddfhfffadfsfsscfgdb
dfjffsfhgdffafcfdssfkfhgj
ffchkffdafhfdssfsfj
jffgadffcffgfgfshfskffj
jcfsdfrfdfdsdgkfff
fdfcffrdgfdffsfssffj
jffffgffrfdffcsdsgkffj
jffffgfdsadfsdgkffff
gdddffdhfsfgh
fhfsdsfhfdfhhs
hfgggd
ffffffh
shssgfasd
sdffgfsf
sdffffss
sffdfggfs
ffdgfdshs
gsffddsd
gsddss
gfhfsfs
gdffdg
gsdffssg
gdadag
hdsffafs
adsfdads
jddssf
ggfssddfh
jfsgffdfhg
jffdfdffgfdgs
jsfdsfffdf
jdffdfa
gdfdsfffddj
kfdsgffh
fsffdfg
sfffaf
ffdssfs
sfffdsd
jdfffssk
wsfsssv
gsfffsds
gffssfdsx
startupInfo
jdhfdffsffsdkfj
hdffhfafsfsdkfsh
hdffhdffffffkdf
affdshhh
sdfffhdhff
hffdfffshdhs
hhhfgfffdfh
fffffffdhs
fdffss
hffdsffsf
jhfdfdfdh
CreateMemberRefsDelegates
typeID
CreateGetStringDelegate
ownerType
fsffgfgfafad
UnverifiableCodeAttribute
System.Security
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
RuntimeCompatibilityAttribute
AssemblyFileVersionAttribute
SuppressIldasmAttribute
AttributeUsageAttribute
AttributeTargets
CompilerGeneratedAttribute
ekkFFmpjm.resources
{733e51ca-5694-407e-a2cf-303da5046a91}
System.Windows.Forms
Application
get_ExecutablePath
AppDomain
get_CurrentDomain
AssemblyName
DefineDynamicAssembly
AssemblyBuilder
System.Reflection.Emit
AssemblyBuilderAccess
DefineDynamicModule
ModuleBuilder
DefineType
TypeBuilder
TypeAttributes
GetMethod
MethodInfo
MethodBase
GetParameters
Func`2
System.Core
Enumerable
System.Linq
Select
ToArray
get_ReturnType
DefinePInvokeMethod
MethodBuilder
MethodAttributes
CallingConventions
CallingConvention
CharSet
GetMethodImplementationFlags
MethodImplAttributes
SetImplementationFlags
CreateType
Delegate
CreateDelegate
get_ParameterType
MD5CryptoServiceProvider
TripleDESCryptoServiceProvider
RijndaelManaged
StreamReader
FileNotFoundException
InvalidCastException
ResolveTypeHandle
GetFields
FieldInfo
BindingFlags
MemberInfo
get_Name
ResolveMethodHandle
RuntimeMethodHandle
GetMethodFromHandle
get_IsStatic
get_FieldType
DynamicMethod
GetILGenerator
ILGenerator
OpCodes
Ldarg_0
OpCode
Ldarg_1
Ldarg_2
Ldarg_3
Ldarg_S
Tailcall
Callvirt
SetValue
GetModules
Module
get_ModuleHandle
RuntimeHelpers
InitializeArray
RuntimeFieldHandle
get_Module
GetMethods
Ldc_I4
get_MetadataToken
TryGetValue
WrapNonExceptionThrows
6.9.0.114
"Powered by SmartAssembly 6.9.0.114
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
pE# Q
WxOLMv
Exl5~s/
,A.fp
GOlXf:`s
[C3`y|
"Chrh_q;
'Yt5;VQ
?v0(uR%NSlc
w"pJq'M
ow)@L?0
H^I33cC
Mqp>5l
mBwsmj
tWWvU
jR43)U
c!}]?`l
^`sgM`%
qEi;CA
Y,6nBH
W`\z~^x
PS2KO.
Mw\u$K
!^~nPt
S(__gs
o%Ofxz
w7RX4^
jsp2k+T
P@5c&P3
e2#a~?>
-fqf&)m7 o
\G}rOEQh
3}=Zx3
=d:w%fA=
x6dAf,
Lb_HLOdj2T
F?2=yEy
c4@27WW
-V98Cl
M~D/E!
O-lL-9
X3%m-q
UVsclC
X;S!qrr
dbk<5;
7H/yR8
Dxu:~
<H&8(-
X{Em}:7hh
\!~)/:
F`fs}l'
v^.]=E
Rbqc~g
%$?{"'
|9m;~L{2L
n^;,S1~
,eaY:f
ZUC%oC
6P`EUP
,pC|6V
4CiK@h
m@m@0#.
-kTj~h
j35UFj
2~FF58j
I0 8[Z
QfLT-t
Lh]9:`Z
~:rMOc
vdAoV%
cKN#}t!*
lUvg8!
-}xYy
&j-i.Af
$N9[lMI
a}vmLERE
V3-w5b
j-$6BW/
FA`vaJj
I: DirF
g -+2EU
wM'N3|
\+DtG;Bk
^!we2(
C""&S8
Vn!y?'
$iI|*6
|:4q{pP
466?9?d
2U'*NC
=mz`j]k
rPt7H!
2_!X0)X
z`E!}G
,5zZCn6
cx:(dK`a"
&]@c6N
]K3\dnoH
>97o](
h~{QzE
jsa1%c
@F3thb
$#{QhC
hSDXq+
/d*\hX5QB
ii0hRu
b&iu)U
?X~fff
2#<]<N
g(\Gb4
Z%j[4u
E--\5N
5Lx{XV
Hu{8i#<
QJ.QZ}Lb
kZ gFl
`0e(6?6
"yLS\.
`djeeen
lL|vI.
v8y>$/,
'(&xn'[
3eap#sU:
dz9Oy_
, @S0L2+
3[<yG$
Ik=CW7F1
DTapISt
LQZ B#
ilR{ew
~fVMC&
\yu/Zs
A)"mF#
T9cz`6
B`)D=W\'
*^c[)!
uMOEhPb;
+oRG[%D
v+)9ZLQS:e
^qx[D
ye#Jy4
hw{XCR
uz}\=d0
VQ&psI
i*VoI'
ZYH=Z$E
0[$dOe
>r3kkk
tWWvU
h~%0x~t*8
?Q=cr[\
;`!az
VB'T?m!
p6]ikn
W?&"Q@.
g2e?9BE
]o5P/a
0qs9}
q529E{
q3}X@:
&c#xa@Y6}2
v6dGe'
p$ePC9
hzi'{/C
I4wAvm
Q?F&9J
2Ro79e
CW{#3H
a)+->v
;Paop
ByHB0r[
9Q. Fb
]\@>@5k
N8%1 mr
Bg9K#S
gGV0l5
s^Mhzyo
:_{KUX
T{h)C-xD
eq^/vV6
^`M1&
<1<XT\C:
G?)sp,
/Dulf1>
;lDi72
wXQq=GB
ciG(PB
DrV5XJ
wXQq=GB
%>M|z'Z
Y!CV?!
&Qc@]E
jBe|r.
2jQOR-
'TV]8^
am01UK
L(:U/-
1O|In/
@UB%{ym
z`VK,^i
|(LFj=
oG@{./
PO/5k{O
G81&zLJSE
[q2\Du
,+[1`'
-V<lIP
B$uXLF8{s
KM|hlTz)
#\-tFM
QxFRq?
Rv+/)N
[i)=c_
Wjd#:(
QK;-hv
9Jk!zGWE
UBr|xe\
}i(wfP
B;CMF"
}.'KN,
*}&_5'A
TrdEZtc>%9
zb5=_!dW
r'3q@<
BPLL5R
"J/Dao
6l?I82
;2>CHs
&R*.;
X3:rIn
=6!}P6
1!2;;&
L:U6WT
e$GM"`
-k_q!~
hz=YLNEl
6PVHW;
t++U\>3I
uVW_Sc
~CR1!
+0(k^x*7
W@pz4#S
>W'Ywd
uhXZ%w
PO<NP
x1mrz6U
?[~H#_
](C^BF
^M S2e<
"]Eu1_
hfUMa
X)og)Gc
*&QKD7
Pv**zY
_]?'<2
ozMPNX
@P<yu&
pA?GB~
HFwi(O",
I62j9W
:y)OyQ
3T'>Lm
GkcL\iJ
5p6]#S
gT6?,/`X
4Z#Ur%
P0 #>q
l!^o3d
({FXT\
C7g.1Sy
CBQg,#
5M6z#`
,(y$(v
<WQ%]
O+>y1/C
Q"XDY}e
S9o"3vo
3SN^Yn
G05q!z
2UeULn
qZ[Ky/gp
C!<:hXF7
=B=4j`
DwglJ/M
ZC1W^Y
.V6u4
]N4QL{M
&iT=[7
z7cNXt
23^XSe
Puda3
Y5g +H
T7CWl#
/H2z\~
p}Jq<
KK9oH7"Ij
ER`i{;L
1x~OU{
_vlmi8
7!}r}CJ
&04a&J
n{;,h[
~A$;s
gN+Gfu
cAo JlW
|e;VULrFF
ns *m;90
4[3r#u
Roi]m`
4u's\~D
_r#am4
y{CUXj
n^x,.sH
Zmrfuu
O#5G4"
Z}jty~
ZGFkYWg=
ZGRkZGRkZGRkZA==(TmFtZSBpcyBub3QgYXZhaWxhYmxlIGluIEVOVU0=
TmFtZSA6IA==
c2FhZGFhYWFmeHQ=
U2QgICAgICAgOiA=
ZDovZmlsZTEudHh0
ZDovZmlsZTIudHh0$Q29udGVudCBvZiBmaWxlcyBpcyBzaW1pbGFy,Q29udGVudCBvZiBmaWxlcyBpcyBub3Qgc2ltaWxhcg==
cnVuYXM=
Y21kLmV4ZQ==
RDovU2FtcGxl
U3ViIGRpcmVjdG9yaWVzIGFyZTo=
VGhlIHZhbHVlIGlzOiA=
UG9wcGVkIEVsZW1lbnQ6IA==
ZWtrRkZtcGpt
XGZpcmVmb3g=
ZmlyZWZveA==
bWtkaXIgIg==
ZmlyZWZveCI=hRFpaOVdVR045eEVydGhDY01NT1NmQVpUU0dMT3liVHFWb04vUzhGT1h1Q1dMUHN0RThaSTFrTVNmYW4vSWIzSWNINzlZUnQySmNJPQ== ZmlyZWZveFxmaXJlZm94LmV4ZSciIC9m
dWhrOUFFbWtjRjg9
ZmlyZWZveFxmaXJlZm94LmV4ZSI=
RWFzdGVybiBTdGFuZGFyZCBUaW1l RWFzdGVybiBTdGFuZGFyZCBUaW1lOiA=
SW5kaWEgU3RhbmRhcmQgVGltZQ==
SW5kaWEgU3RhbmRhcmQgVGltZTog
Q2VudHJhbCBTdGFuZGFyZCBUaW1l Q2VudHJhbCBTdGFuZGFyZCBUaW1lOiA=$VW4tYm94aW5nIGEgaW50ZWdlciBudW1iZXI=,THBUTzBvVnFPUkZSN3VkUDVGT0E0bEc2M2VlOWhYejk=,THBUTzBvVnFPUkhOaFVCQjZPc1o3Vkc2M2VlOWhYejk=
RHluYW1pY0RsbEludm9rZVR5cGU=
anJ1WUh2T3JuODA9 cldtWkFsdFl3OFpkUlJFUTIwSVJRQT09,WmQyUGYyb1NNRjFDcXg4MUJGWWorQ2hYMXF6c1FhdWE=,RndhdEpVWTgzQ1A5SHRWSFIxTUw3bEc2M2VlOWhYejk=,b3NNU1dnc0FHMWIrNkI0VkR3NkFwcE9XY1NBcy9RNmg= UGZ0Qktad0VadWxYWElXandNbmk4UT09,RkZOVGlnUGJDMGhpKzZHWmRyRHREMW1UT1IyWEhyNjk=,TUtIUVpnVFB2MmRDcXg4MUJGWWorQ2hYMXF6c1FhdWE=,NC90WXNBbHJpWi85SHRWSFIxTUw3bEc2M2VlOWhYejk= M3V5WndjVTR6RnBGOTh2MjVoUkcydz09 NWtWUS82Q2s0ZTlkUlJFUTIwSVJRQT09,Vit3cDhjR2d0WGpjWVQzZEdXcENwMDFXSFFiZ1ZmY3k=
_CorExeMain
mscoree.dll
?NdwuO
eT1n[22
=LrOFFZ
`T {4V
QMp6hS
^dO.-q
TTJ,J!
!:h&?!
;A=ZcM
F@0)(_
~h6Mpp>
Q({0Z%
(g]gD@kD
-hYfaK{
K@+Ty#
<"W0IG
z#eZ$Z
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
{733e51ca-5694-407e-a2cf-303da5046a91}
ekkFFmpjm
MAINICON
VS_VERSION_INFO
StringFileInfo
040104B0
CompanyName
Microsoft Corporation
FileDescription
Windows 10
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation. All rights reserved.
OriginalFilename
SetupPrep.exe
ProductName
Microsoft
Windows
Operating System
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
040204B0
CompanyName
Microsoft Corporation
FileDescription
Windows 10
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation.
OriginalFilename
SetupPrep.exe
ProductName
Microsoft
Windows
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
040404B0
CompanyName
Microsoft Corporation
FileDescription
Windows 10
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation. All rights reserved.
OriginalFilename
SetupPrep.exe
ProductName
Microsoft
Windows
Operating System
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
040504B0
CompanyName
Microsoft Corporation
FileDescription
Instalace Windows 10
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation. V
echna pr
va vyhrazena.
OriginalFilename
SetupPrep.exe
ProductName
m Microsoft
Windows
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
040604B0
CompanyName
Microsoft Corporation
FileDescription
Windows 10 Installation
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation. Alle rettigheder forbeholdes.
OriginalFilename
SetupPrep.exe
ProductName
Microsoft
Windows
Operativsystem
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
040704B0
CompanyName
Microsoft Corporation
FileDescription
Windows 10 Setup
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation. Alle Rechte vorbehalten.
OriginalFilename
SetupPrep.exe
ProductName
Betriebssystem Microsoft
Windows
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
040804B0
CompanyName
Microsoft Corporation
FileDescription
Windows 10
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation.
OriginalFilename
SetupPrep.exe
ProductName
Microsoft
Windows
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
040904B0
CompanyName
Microsoft Corporation
FileDescription
Windows 10 Setup
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation. All rights reserved.
OriginalFilename
SetupPrep.exe
ProductName
Microsoft
Windows
Operating System
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
040B04B0
CompanyName
Microsoft Corporation
FileDescription
Windows 10:n asennus
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation. Kaikki oikeudet pid
OriginalFilename
SetupPrep.exe
ProductName
Microsoft
Windows
rjestelm
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
040C04B0
CompanyName
Microsoft Corporation
FileDescription
Installation de Windows 10
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation. Tous droits r
OriginalFilename
SetupPrep.exe
ProductName
exploitation Microsoft
Windows
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
040D04B0
CompanyName
Microsoft Corporation
FileDescription
Windows 10
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation. All rights reserved.
OriginalFilename
SetupPrep.exe
ProductName
Microsoft
Windows
Operating System
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
040E04B0
CompanyName
Microsoft Corporation
FileDescription
Windows 10 telep
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation. Minden jog fenntartva.
OriginalFilename
SetupPrep.exe
ProductName
Microsoft
Windows
s rendszer
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
041004B0
CompanyName
Microsoft Corporation
FileDescription
Installazione di Windows 10
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation. Tutti i diritti riservati.
OriginalFilename
SetupPrep.exe
ProductName
Sistema operativo Microsoft
Windows
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
041104B0
CompanyName
Microsoft Corporation
FileDescription
Windows 10
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation. All rights reserved.
OriginalFilename
SetupPrep.exe
ProductName
Microsoft
Windows
Operating System
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
041204B0
CompanyName
Microsoft Corporation
FileDescription
Windows 10
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation. All rights reserved.
OriginalFilename
SetupPrep.exe
ProductName
Microsoft
Windows
Operating System
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
041304B0
CompanyName
Microsoft Corporation
FileDescription
Windows 10 Setup
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation. Alle rechten voorbehouden.
OriginalFilename
SetupPrep.exe
ProductName
Microsoft
Windows
-besturingssysteem
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
041404B0
CompanyName
Microsoft Corporation
FileDescription
Installasjonsprogram for Windows 10
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation. Med enerett.
OriginalFilename
SetupPrep.exe
ProductName
Operativsystemet Microsoft
Windows
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
041504B0
CompanyName
Microsoft Corporation
FileDescription
Instalator systemu Windows 10
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation. Wszelkie prawa zastrze
OriginalFilename
SetupPrep.exe
ProductName
System operacyjny Microsoft
Windows
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
041604B0
CompanyName
Microsoft Corporation
FileDescription
Instala
o do Windows 10
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation. Todos os direitos reservados.
OriginalFilename
SetupPrep.exe
ProductName
Sistema Operacional Microsoft
Windows
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
041804B0
CompanyName
Microsoft Corporation
FileDescription
Instalare Windows 10
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation. Toate drepturile rezervate.
OriginalFilename
SetupPrep.exe
ProductName
Sistem de operare Microsoft
Windows
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
041904B0
CompanyName
Microsoft Corporation
FileDescription
Windows 10
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
OriginalFilename
SetupPrep.exe
ProductName
Microsoft
Windows
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
041A04B0
CompanyName
Microsoft Corporation
FileDescription
Program za instalaciju sustava Windows 10
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation. Sva prava pridr
OriginalFilename
SetupPrep.exe
ProductName
Operacijski sustav Microsoft
Windows
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
041B04B0
CompanyName
Microsoft Corporation
FileDescription
tor syst
mu Windows 10
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation. V
etky pr
va vyhraden
OriginalFilename
SetupPrep.exe
ProductName
Microsoft
Windows
Operating System
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
041D04B0
CompanyName
Microsoft Corporation
FileDescription
Installationsprogram f
r Windows 10
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation. Med ensamr
OriginalFilename
SetupPrep.exe
ProductName
Operativsystemet Microsoft
Windows
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
041E04B0
CompanyName
Microsoft Corporation
FileDescription
Windows 10
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation
OriginalFilename
SetupPrep.exe
ProductName
Microsoft
Windows
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
041F04B0
CompanyName
Microsoft Corporation
FileDescription
Windows 10 Kurulumu
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation. T
m haklar
OriginalFilename
SetupPrep.exe
ProductName
Microsoft
Windows
letim Sistemi
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
042204B0
CompanyName
Microsoft Corporation
FileDescription
Windows 10
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
OriginalFilename
SetupPrep.exe
ProductName
Microsoft
Windows
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
042404B0
CompanyName
Microsoft Corporation
FileDescription
Namestitveni program za Windows 10
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation. Vse pravice pridr
OriginalFilename
SetupPrep.exe
ProductName
Operacijski sistem Microsoft
Windows
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
042504B0
CompanyName
Microsoft Corporation
FileDescription
Windows 10 installiprogramm
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation. K
igused kaitstud.
OriginalFilename
SetupPrep.exe
ProductName
Operatsioonis
steem Microsoft
Windows
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
042604B0
CompanyName
Microsoft Corporation
FileDescription
Windows 10 uzst
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation. Visas ties
bas patur
OriginalFilename
SetupPrep.exe
ProductName
ma Microsoft
Windows
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
042704B0
CompanyName
Microsoft Corporation
FileDescription
Windows 10
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation
. Visos teis
s ginamos.
OriginalFilename
SetupPrep.exe
ProductName
Operacin
sistema
Microsoft
Windows
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
080404B0
CompanyName
Microsoft Corporation
FileDescription
Windows 10
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation. All rights reserved.
OriginalFilename
SetupPrep.exe
ProductName
Microsoft
Windows
Operating System
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
080A04B0
CompanyName
Microsoft Corporation
FileDescription
Programa de instalaci
n de Windows 10
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation. Todos los derechos reservados.
OriginalFilename
SetupPrep.exe
ProductName
Sistema operativo Microsoft
Windows
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
081604B0
CompanyName
Microsoft Corporation
FileDescription
Configura
o do Windows 10
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation. Todos os direitos reservados.
OriginalFilename
SetupPrep.exe
ProductName
Sistema Operativo Microsoft
Windows
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
0C0A04B0
CompanyName
Microsoft Corporation
FileDescription
Programa de instalaci
n de Windows 10
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation. Todos los derechos reservados.
OriginalFilename
SetupPrep.exe
ProductName
Sistema operativo Microsoft
Windows
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
0C0C04B0
CompanyName
Microsoft Corporation
FileDescription
Programme d'installation de Windows 10
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation. Tous droits r
OriginalFilename
SetupPrep.exe
ProductName
exploitation Microsoft
Windows
ProductVersion
10.0.19041.572
VarFileInfo
Translation
VS_VERSION_INFO
StringFileInfo
241A04B0
CompanyName
Microsoft Corporation
FileDescription
Instalacija izdanja Windows 10
FileVersion
10.0.19041.572 (vb_release_svc_prod1.201007-1724)
InternalName
SetupPrep.exe
LegalCopyright
Microsoft Corporation. Sva prava zadr
OriginalFilename
SetupPrep.exe
ProductName
Operativni sistem Microsoft
Windows
ProductVersion
10.0.19041.572
VarFileInfo
Translation
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Variant.Ransom.Loki.8883
ClamAV Clean
FireEye Generic.mg.0a08e5cf3a784baa
CAT-QuickHeal Clean
McAfee Clean
Malwarebytes Trojan.MalPack.MSIL
Zillya Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Clean
BitDefender Gen:Variant.Ransom.Loki.8883
K7GW Clean
Cybereason malicious.de3ec1
Baidu Clean
VirIT Clean
Cyren W32/MSIL_Kryptik.JLT.gen!Eldorado
Symantec ML.Attribute.HighConfidence
tehtris Generic.Malware
ESET-NOD32 a variant of MSIL/Kryptik.AHUA
APEX Malicious
Paloalto Clean
Cynet Malicious (score: 100)
Kaspersky HEUR:Trojan-PSW.MSIL.Stealer.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Malware.Obfus/MSIL@AI.100 (RDM.MSIL2:SjCDoFVHrhfYT3QTRRQ3kQ)
TACHYON Clean
Sophos ML/PE-A
F-Secure Heuristic.HEUR/AGEN.1360510
DrWeb Clean
VIPRE Gen:Variant.Ransom.Loki.8883
TrendMicro Clean
McAfee-GW-Edition Clean
Trapmine malicious.high.ml.score
CMC Clean
Emsisoft Gen:Variant.Ransom.Loki.8883 (B)
Ikarus Trojan.Agent
GData Gen:Variant.Ransom.Loki.8883
Jiangmin Clean
Webroot Clean
Avira HEUR/AGEN.1360510
Antiy-AVL Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Trojan.Ransom.Loki.D22B3
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan-PSW.MSIL.Stealer.gen
Microsoft Trojan:MSIL/Redline.AAFO!MTB
Google Detected
AhnLab-V3 Trojan/Win.MSILZilla.C5442250
Acronis suspicious
BitDefenderTheta Gen:NN.ZemsilF.36318.Bm0@aS3VRXuP
ALYac Gen:Variant.Ransom.Loki.8883
MAX malware (ai score=83)
DeepInstinct MALICIOUS
VBA32 Clean
Cylance unsafe
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Clean
Fortinet MSIL/Kryptik.AHBB!tr
AVG Win32:PWSX-gen [Trj]
Avast Win32:PWSX-gen [Trj]
CrowdStrike win/malicious_confidence_100% (D)
No IRMA results available.