Static | ZeroBOX

Name	Virtual Address	Virtual Size	Size of Raw Data	Entropy
.text	0x00002000	0x001eb9d4	0x001eba00	6.73908180589
.rsrc	0x001ee000	0x00004a80	0x00004c00	5.10450967179
.reloc	0x001f4000	0x0000000c	0x00000200	0.0980041756627

Name	Offset	Size	Language	Sub-language	File type
RT_ICON	0x001ee130	0x00004428	LANG_NEUTRAL	SUBLANG_NEUTRAL	dBase IV DBT of \200.DBF, blocks size 0, block length 17408, next free block index 40, next free block 0, next used block 0
RT_GROUP_ICON	0x001f2558	0x00000014	LANG_NEUTRAL	SUBLANG_NEUTRAL	data
RT_VERSION	0x001f256c	0x00000326	LANG_NEUTRAL	SUBLANG_NEUTRAL	data
RT_MANIFEST	0x001f2894	0x000001ea	LANG_NEUTRAL	SUBLANG_NEUTRAL	XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

!This program cannot be run in DOS mode.

`.rsrc

@.reloc

f_bX*

f?_bX*8

*b*r5

\/(`

_d@{

Y?_b`

]?_b`U

]?_b`U 6

?_b`}

Z?_b`

Y_b

%J YT8

_b_9

#jYi(<

$jYi(<

Y_d

Y_d`

_cfj_:

_cfj_9

Y_dX

Z_bX

Y_dX

_b_9

_cf_:

Y_dX

Z_bX

Y_dX

Y_bX

_b}+

__b_

__b`T

__b

Y_bZY*

Z_bX}

Z_d

_bn>\

X_b}

Y_dX

_dY}/

_dX}/

_bj?y

_bj<

_bY*

Y_b8

Y_dh}

X_b}

c_X?@

c_X>

Y_b<{

_b`}

]_d}

Y_b`}

hXhS 5

@_@@

PK00;!

PK00@

,jYi(

Z?_b`

_b`T =

n8bX*

Z?_b`

Z?_bX

?_2X

__b8

c_b8

Z_b`

jXmY}k

Y_cX*

Y_cX

_w ov!

8vMYe

[a .%6

a 4X^ya}|

xtNf |

_w ov!

Z&CU

[a .%6

8vMYe {

ez!a}~

gS"7Y

Z&CU

[a .%6

]vva}t

f ygxuaf wA

xtNf |

ez!a}<

:X ZZ 9a}

YA*a}o

WYe Z:

ce MXK

:X ZZ 9a}

8vMYe HQ]wa}

8?(X 4

v4.0.30319

#Strings

6 F S u

"*">"W"o"

"B#P#y#

&1&@&_&y&

&9'j'q'

(<(I(X(

+$,O,W,

0P1`1p1

2F2]2x2

5C6p6w6

6,737}7

:::M:i:x:

E=E^E}E

J&JmJvJ

3W4Q5e5

6_8D9M9\9p9

<t<{<g>o>

H0H9HOH

M/NCNLN

O$O-ODOXO

P)Q>QNQ

RSR\RzR

TgTpTzT

PexycmensOO

PexycmensOO.exe

PexycmensOO.Classes

System.Windows.Forms

ParamCandidateConsumer

SharpCompress.Consumers

SingletonPolicyAuth

PexycmensOO.Authentication

Object

System

mscorlib

Resources

Xqwiucl.Properties

RoleValueModel

PexycmensOO.Models

SerializerParamDispatcher`1

SharpCompress.Dispatcher

Authentication`1

SharpCompress.Records

ObserverRoleWriter

ParameterValueStub`1

PexycmensOO.Stubs

TokenizerCandidateSchema

SharpCompress.Schemes

<AsEnumerable>d__15`1

Issuer

PexycmensOO.Messages

Invocation

SharpCompress.Shared

ReponseCandidateConsumer

TaskRule

SharpCompress.Rules

ClassAdvisorTemplate

PexycmensOO.Templates

DicAuthenticationMapper

PexycmensOO.Mappers

TemplateRule

VisitorAdvisorTemplate

Stream

System.IO

MappingStructResolver

SharpCompress.Resolver

ComparatorRegRecord

Specification

SharpCompress.Polices

Merchant

Listener

AlgoRule

ValRegRecord`2

OrderValueModel

Iterator

Account

SharpCompress.Serialization

ItemParamDispatcher

StubParamDispatcher

PrototypePolicyAuth

DecoratorStructResolver

QueuePolicyAuth

<GetEntries>d__6

FieldAuthenticationComp

PexycmensOO.Composer

InstanceAdvisorTemplate

RefAuthentication

InterceptorCandidateSchema

AnnotationValueModel

<GetEntries>d__13

ProxyStructSerializer

Status

SharpCompress.Definitions

ThreadReponseVisitor

SharpCompress.Visitors

ComposerAuthenticationMapper

RefCandidateConsumer

CollectionRefPolicy

MapValueModel

Parameter

PexycmensOO.Mocks

Filter

BinaryReader

PredicateListMock

AlternateNormalizationFormat

TagAuthenticationComp

ServerStructResolver

Exception

IdentifierReponseVisitor

PageCandidateSchema

MapperEventDef

RegParam

DefinitionAuthenticationMapper

ModelValueStub

AnnotationStructSerializer

AccountProxyLicense

AccessibleSelection

PexycmensOO.Writers

ParamsParam

CandidateCandidateConsumer

SerializerPolicyAuth

RecordParam

ItemPolicyAuth

PrinterParam

HelperEventDef

SpecificationParam

SchemaParam

InvocationAuthenticationMapper

ConnectionCandidateSchema

IssuerValueModel

InfoParamDispatcher

MethodReponseVisitor

SetterParam

EventEntryFieldId

ConfigAuthenticationComp

StubPolicyAuth

WatcherParamDispatcher

WorkerParam

PrototypeParam

IndexerReponseVisitor

ContextAuthenticationMapper

BaseProxyLicense

SharpCompress.Licensing

BroadcasterParam

CustomizedPageStatus

ExporterParamDispatcher

DomainRole

WriterStructResolver

AdvisorStructSerializer

InfoPolicyAuth

ResourceView

RegReponse

AdvisorReponse

SetterProxyLicense

IssuerReponse

GlobalReponse

MapStructSerializer

DefinitionAuthentication

DispatcherReponse

UtilsListMock

ProcessorStructResolver

ValueType

TestsReponse

TaskReponse

MockRef

CallbackOrderClass

ListenerRoleWriter

ConfigRef

AdapterCreatorMessage

NonTransactedFileStreamAccess

ReponseCandidate

ConsumerReponseVisitor

DispatcherCandidateSchema

ManagerStructResolver

ComposerCandidate

ProjectPropertyKey

ContainerOrderClass

SystemOrderClass

CustomerReponseVisitor

ReaderValueStub

StatusParamDispatcher

AttributeEventDef

RegCandidateConsumer

BuildProviderAppliesTo

TokenCandidate

InterpreterCandidate

RegistryCandidate

ConfigurationAdvisorTemplate

ConnectionPolicyAuth

ViewFlags

SchemaRoleWriter

InitializerCandidate

GlobalValueModel

ItemCandidate

BridgeListMock

ParamReg

DescriptorEventDef

ClientRegRecord

ImporterRegRecord

PropertyStructResolver

PoolListMock

StrategyReg

WatcherPolicyAuth

ServiceRule

ObserverReponseVisitor

MethodReg

CodeReg

ParamsAuthentication

InterpreterEventDef

<Run>d__19

UtilsReg

ProductEventDef

BroadcasterValueStub

ParameterStructResolver

ModelStructResolver

InitializerListMock

WrapperReg

ExporterPolicyAuth

WorkerReg

FacadeCreatorMessage

InterpreterAdvisorTemplate

TestsValueStub

SingletonReg

CollectionOrderClass

ProcessOrderClass

MapperAuthentication

TokenizerParamDispatcher

ErrorRegRecord

InstanceAuthentication

ParserPolicy

FilterReg

Operator

AdapterAuthentication

ContainerPolicy

MerchantAuthentication

TestsCandidateSchema

DispatcherPolicyAuth

PublisherRoleWriter

ConfigurationEvent

ObserverEvent

ValueStructSerializer

AttrProxyLicense

SpecificationCreatorMessage

ActivityTemplateFactoryBuilderReaderStates

ReaderStructResolver

VisitorCreatorMessage

TaskAuthenticationComp

TemplateAuthenticationComp

MessageRegRecord

ComparatorReponseVisitor

RulesAuthenticationMapper

InterceptorParamDispatcher

MappingEvent

AlgoAuthenticationComp

TestAdvisorTemplate

StatusPolicyAuth

DatabaseAdvisorTemplate

ProcessStruct

TokenStruct

SourceLanguage

IteratorRegRecord

RegistryAdvisorTemplate

MulticastDelegate

TestEventDef

AccountRegRecord

CodeRegRecord

RSWmiError

ExceptionAdvisorTemplate

AdapterAdvisorTemplate

RpcAuthor

RuleCandidateSchema

MockProxy

AnnotationProxy

TransferSession

ThreadRoleWriter

CustomQueryInterfaceResult

RequestCandidateSchema

AttributeProxy

MappingCandidateSchema

StateRegRecord

AdapterProxy

ParserAuthenticationMapper

TargetScope

ConsumerProxy

ObjectIdGroupId

ValReponseVisitor

RepositoryProxyLicense

CallbackAuthenticationMapper

DataControlRowState

ListStructSerializer

MappingProxy

SerializerAuthentication

FactoryValueModel

IdentifierRoleWriter

CreatorStructSerializer

FontNumeralStyle

BaseRegRecord

ServiceAuthenticationComp

TaskMultipleInstancePolicy

AuthenticationStructSerializer

MapperAdvisor

ProcessRefPolicy

ResolverAdvisor

BridgeAdvisor

ContainerValueModel

FilterValueStub

ResolverEventDef

DicValueModel

ExpressionValueStub

ParamsRefPolicy

ReponseValue`1

EventArgs

CreateContextFlags

StrategyRefPolicy

LsHyphenQuality

TokenizerPolicyAuth

PageParamDispatcher

RecordRefPolicy

ComposerValueModel

WrapperListMock

DefinitionValueModel

IssuerValue

ProducerAuthenticationComp

MethodRoleWriter

InterceptorPolicyAuth

TokenRefPolicy

GlobalValue

GetterEventDef

FactoryValue

WorkerListMock

DicValue

ParamsOrderClass

ProcAuthenticationComp`1

PrinterRefPolicy

WintrustUIChoice

InvocationValueModel

MockPolicyComp

ContextValueModel

FieldValueStub

<ReadSeekableHeader>d__3

ContainerAuthenticationMapper

ConnectionParamDispatcher

<ReadStreamHeader>d__1

IndexerRoleWriter

ClientReponseVisitor

StandardProperty

LangVersion

MerchantValue

SingletonListMock

RegistryCreatorMessage

ProducerRule

CustomerValue

BaseValue

ConfigurationAllowExeDefinition

UtilsValue

BridgeValue

WaitForOption

ImporterReponseVisitor

SetterRegRecord

ProcRule

ItemValue

PrototypeListMock

StubValue

StrategyOrderClass

DecoratorCandidateSchema

TaskValue

ContinueStatus

MerchantCreatorMessage

<GetEntries>d__29

FacadeAdvisorTemplate

SystemAuthenticationMapper

<ReadHeader>d__0

ConsumerRoleWriter

RegList

PCSystemTypeEx

EventList

CollectionAuthenticationMapper

CustomerRoleWriter

MappingAuthentication

ReponseParamRule

<>c__DisplayClass25_0

<>c__DisplayClass34_0

TagValueStub

AttrRegRecord

GetterList

MerchantList

ServerCandidateSchema

BroadcasterStructResolver

QueueListMock

SerializerListMock

BaseList

ParamPolicyComp

PredicateList

BridgeList

WriterCandidateSchema

MockParamRule

RecordOrderClass

ExporterList

ConnectionList

<GetVolumeFileParts>d__10

RequestList

DispatcherParamDispatcher

BroadcasterList

TagList

ErrorProxyLicense

MockCreator

DefinitionCreator

HtmlFormattingValues

ProcessorCandidateSchema

ConfigValueStub

InvocationCreator

SpecificationAdvisorTemplate

ContextCreator

ItemListMock

ParamParamRule

RulesCreator

ParserCreator

RulesValueModel

StubListMock

ObjectCreatorMessage

ClassEventDef

ParserValueModel

TokenOrderClass

ManagerCandidateSchema

PrinterCreator

PropertyCandidateSchema

<ReadHeaders>d__12

IteratorProxyLicense

PrinterOrderClass

<GetEntries>d__28

ReponsePolicyComp

InstanceEventDef

ParameterCandidateSchema`2

ComparatorCreator`2

PolicyStructSerializer

CodeCreator

StateCreator

BaseCreator

SetterCreator

TaskValueStub

RoleStructSerializer

ModelCandidateSchema

AttrCreator

TemplateValueStub

<LoadEntries>d__16

IteratorCreator

PagePolicyAuth

CallbackValueModel

<LoadEntries>d__11

WorkerCreator

PrototypeCreator

InfoListMock

ReponsePolicy

<GetEntries>d__7

EventCandidateConsumer

<LoadVolumes>d__10

RepositoryRegRecord

TokenizerCreator

RuleParamDispatcher

OrderStructSerializer

RequestCreator

RefPolicyComp

ServerCreator

<GetFileParts>d__0

<GetMatchedFileParts>d__1

<GetEntries>d__2

MapperOrderClass

<GetParts>d__0

<GetParts>d__1

HelperOrderClass

ConfigurationEventDef

ReaderCandidateSchema

BroadcasterCandidateSchema

PropertyCreator

__StaticArrayInitTypeSize=6

__StaticArrayInitTypeSize=12

__StaticArrayInitTypeSize=16

__StaticArrayInitTypeSize=19

__StaticArrayInitTypeSize=24

__StaticArrayInitTypeSize=28

__StaticArrayInitTypeSize=29

__StaticArrayInitTypeSize=30

__StaticArrayInitTypeSize=32

__StaticArrayInitTypeSize=36

__StaticArrayInitTypeSize=40

__StaticArrayInitTypeSize=44

__StaticArrayInitTypeSize=48

__StaticArrayInitTypeSize=52

__StaticArrayInitTypeSize=56

__StaticArrayInitTypeSize=60

__StaticArrayInitTypeSize=64

__StaticArrayInitTypeSize=68

__StaticArrayInitTypeSize=76

__StaticArrayInitTypeSize=98

__StaticArrayInitTypeSize=112

__StaticArrayInitTypeSize=116

__StaticArrayInitTypeSize=120

__StaticArrayInitTypeSize=124

__StaticArrayInitTypeSize=128

__StaticArrayInitTypeSize=192

__StaticArrayInitTypeSize=256

__StaticArrayInitTypeSize=384

__StaticArrayInitTypeSize=511

__StaticArrayInitTypeSize=512

__StaticArrayInitTypeSize=1024

__StaticArrayInitTypeSize=1152

__StaticArrayInitTypeSize=2048

__StaticArrayInitTypeSize=2052

__StaticArrayInitTypeSize=6144

<Module>{217a42f1-637a-4548-9504-03fb42f206a2}

f8DB93E7F755832C

Boolean

m8DB93E7F755832C

.cctor

InstantiateVal

m_Param

reponse

CollectVal

CustomizeMock

String

get_Length

ResetMock

LogoutMock

Control

set_Tag

ListViewItemCollection

ListView

ListViewItem

RegisterMock

get_Items

get_Text

InvokeMember

BindingFlags

System.Reflection

Binder

Environment

Dispose

isinstance

CollectMock

System.Drawing

ColumnHeader

ColumnHeaderCollection

AddRange

ResumeLayout

set_TabIndex

Single

set_Text

CustomizeVal

UpdateVal

DisableVal

get_Chars

StartVal

get_Tag

AssetVal

Assembly

ReadVal

GetType

ManageVal

InvokeVal

NewVal

MapVal

GetVal

get_Item

ConnectVal

IDisposable

ForgotVal

ListVal

SuspendLayout

CloneVal

get_Columns

CreateVal

DockStyle

set_Dock

WriteVal

set_HideSelection

ResolveVal

set_Location

DeleteVal

set_Name

MoveVal

set_Size

CancelVal

set_UseCompatibleStateImageBehavior

InsertVal

set_View

VisitVal

ContainerControl

set_AutoScaleDimensions

RateVal

AutoScaleMode

set_AutoScaleMode

RemoveVal

set_ClientSize

DestroyVal

get_Controls

ControlCollection

TestVal

PatchVal

m_Candidate

ValidateVal

PrintMock

Container

System.ComponentModel

PrepareVal

FlushVal

CallVal

RestartVal

ReflectVal

InitVal

overridereference

DisableMock

SetupVal

SearchVal

ComputeVal

ExcludeVal

LoginVal

InstantiateMock

Application

m_Struct

ResourceManager

System.Resources

m_Proxy

CultureInfo

System.Globalization

OrderVal

get_ResourceManager

get_Assembly

get_Culture

set_Culture

get_Wochwtuei

CalculateVal

RuntimeTypeHandle

GetTypeFromHandle

FillVal

AddVal

PopVal

SelectVal

GetObject

Culture

Wochwtuei

advisor

Func`1

m_Creator

ComputeMock

Invoke

m_Policy

List`1

System.Collections.Generic

m_Role

IEnumerator`1

_Order

SortVal

IEnumerable`1

GetEnumerator

DeleteMock

Action`1

<>9__5_0

FillParser

IntPtr

CallMock

NotSupportedException

Contains

instance

CopyTo

meansecond

get_Count

get_IsReadOnly

Remove

System.Collections.IEnumerable.GetEnumerator

IEnumerator

System.Collections

IEnumerable

PrintVal

LogoutVal

IsReadOnly

ICollection`1

_FilterCreator

expressionCreator

fieldCreator

QueryQueue

get_Current

System.Collections.IEnumerator.get_Current

MoveNext

InterruptQueue

RegisterQueue

Current

_Annotation

PostVal

cust_count

AwakeVal

PushVal

Action`3

UInt32

SetVal

PatchMock

Enumerable

System.Linq

System.Core

ToList

ViewMock

size_info

visitorPosition

PushMock

nextpol

MoveMock

IDcont

index_rule

NullReferenceException

ArgumentException

IndexOutOfRangeException

LoginMock

DynamicMethod

System.Reflection.Emit

MethodAttributes

CallingConventions

GetILGenerator

ILGenerator

OpCode

OpCodes

Ldarg_0

Ldarg_1

Ldarg_2

Initblk

MethodInfo

CreateDelegate

Delegate

Memset

length

GCHandle

System.Runtime.InteropServices

AddrOfPinnedObject

StopMock

DefineMock

length_b

state_size

ManageMock

RateMock

reference

regPtr

WriteMock

EnableMock

GetMock

length_caller

setup2_ID

idxpol3

ArgumentOutOfRangeException

PopMock

<>3__item

CalcMock

caller

ArgumentNullException

ReflectMock

visitor

InsertMock

num_connection

set_Position

PrepareMock

VerifyMock

DateTime

UInt16

lengthi

pol_High

DateTimeKind

DestroyMock

Nullable`1

get_HasValue

get_Value

ToLocalTime

get_Second

get_Minute

get_Hour

get_Day

get_Month

get_Year

ResolveMock

InitMock

offset_res

AddSeconds

Double

CalculateMock

ValidateMock

visitor2

UpdateMock

CompareMock

CancelMock

TestMock

Replace

IncludeMock

FindVal

IncludeVal

EnableVal

GCHandleType

ConcatVal

PublishVal

DefineVal

ChangeVal

get_CanSeek

RevertVal

get_Position

CalcRule

CompareRule

VerifyRule

InstantiateRule

CollectRule

<>1__state

<>2__current

<>l__initialThreadId

CalculateQueue

get_CurrentManagedThreadId

System.IDisposable.Dispose

System.Collections.Generic.IEnumerator<T>.get_Current

System.Collections.IEnumerator.Reset

System.Collections.Generic.IEnumerable<T>.GetEnumerator

PopQueue

SelectQueue

System.Collections.Generic.IEnumerator<T>.Current

System.Collections.IEnumerator.Current

m_Global

composer

m_Definition

CustomizeRule

InvokeMock

FillMock

FlushMock

PopContainer

ExcludeMock

applyvar1

Finalize

UpdateRule

DisableRule

StartRule

AssetRule

SuppressFinalize

ReadRule

ManageRule

control

GetRule

RemoveMock

PostMock

FileStream

InterruptMock

FileInfo

CheckMock

helper

SearchOption

param2

Antivirus	Signature
Bkav	Clean
Lionic	Clean
Elastic	malicious (high confidence)
MicroWorld-eScan	Clean
ClamAV	Clean
CMC	Clean
CAT-QuickHeal	Clean
McAfee	Clean
Malwarebytes	Malware.AI.1010355728
Zillya	Clean
Sangfor	Clean
K7AntiVirus	Clean
BitDefender	Clean
K7GW	Clean
Cybereason	Clean
Baidu	Clean
VirIT	Trojan.Win32.MSIL_Heur.A
Cyren	W32/Faker.AS.gen!Eldorado
Symantec	Scr.Malcode!gdn33
tehtris	Clean
ESET-NOD32	a variant of MSIL/GenKryptik.GMLZ
APEX	Malicious
Paloalto	Clean
Cynet	Clean
Kaspersky	Clean
Alibaba	Clean
NANO-Antivirus	Clean
ViRobot	Clean
Rising	Clean
Sophos	Clean
F-Secure	Clean
DrWeb	Clean
VIPRE	Clean
TrendMicro	Clean
McAfee-GW-Edition	Clean
Trapmine	Clean
FireEye	Clean
Emsisoft	Clean
Ikarus	Clean
GData	Clean
Jiangmin	Clean
Webroot	Clean
Avira	Clean
MAX	Clean
Antiy-AVL	Clean
Gridinsoft	Clean
Xcitium	Clean
Arcabit	Clean
SUPERAntiSpyware	Clean
ZoneAlarm	Clean
Microsoft	Program:Win32/Wacapew.C!ml
Google	Detected
AhnLab-V3	Clean
Acronis	Clean
BitDefenderTheta	Clean
ALYac	Clean
TACHYON	Clean
DeepInstinct	MALICIOUS
VBA32	Clean
Cylance	Clean
Panda	Clean
Zoner	Clean
TrendMicro-HouseCall	Clean
Tencent	Clean
Yandex	Clean
SentinelOne	Static AI - Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Clean
AVG	Win32:PWSX-gen [Trj]
Avast	Win32:PWSX-gen [Trj]
CrowdStrike	win/malicious_confidence_70% (D)

Static Analysis

PE Compile Time

PE Imphash

Sections

Resources

Imports