Static | ZeroBOX

PE Compile Time

2019-06-06 18:40:57

PDB Path

E:\nsmsrc\nsm\1270\1270_DNA_475\client32\release_unicode_2015\dnarc.pdb

PE Imphash

a9d50692e95b79723f3e76fcf70d023e

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000000c4 0x00000200 2.76866978456
.rdata 0x00002000 0x0000027e 0x00000400 3.09162348878
.rsrc 0x00003000 0x00016c08 0x00016e00 4.09808697511
.reloc 0x0001a000 0x00000014 0x00000200 0.221676205458

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00019320 0x00000468 LANG_NEUTRAL SUBLANG_SYS_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x00019320 0x00000468 LANG_NEUTRAL SUBLANG_SYS_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x00019320 0x00000468 LANG_NEUTRAL SUBLANG_SYS_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x00019320 0x00000468 LANG_NEUTRAL SUBLANG_SYS_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x00019320 0x00000468 LANG_NEUTRAL SUBLANG_SYS_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x00019320 0x00000468 LANG_NEUTRAL SUBLANG_SYS_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x00019320 0x00000468 LANG_NEUTRAL SUBLANG_SYS_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x00019320 0x00000468 LANG_NEUTRAL SUBLANG_SYS_DEFAULT GLS_BINARY_LSB_FIRST
RT_STRING 0x00019ba0 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x00019788 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_VERSION 0x00019800 0x000003a0 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_MANIFEST 0x000032d0 0x00000385 LANG_NEUTRAL SUBLANG_SYS_DEFAULT XML 1.0 document, ASCII text, with CRLF line terminators

Imports

Library PCICL32.dll:
0x402014 _NSMClient32@8
Library KERNEL32.dll:
0x402000 GetCommandLineW
0x402004 ExitProcess
0x402008 GetModuleHandleW
0x40200c GetStartupInfoW

!This program cannot be run in DOS mode.
Rich}@
`.rdata
@.rsrc
@.reloc
E:\nsmsrc\nsm\1270\1270_DNA_475\client32\release_unicode_2015\dnarc.pdb
.text$mn
.idata$5
.rdata
.rdata$zzzdbg
.idata$2
.idata$3
.idata$4
.idata$6
.rsrc$01
.rsrc$02
_NSMClient32@8
PCICL32.dll
ExitProcess
GetModuleHandleW
GetStartupInfoW
GetCommandLineW
KERNEL32.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity
version="10.0.0.0"
processorArchitecture="X86"
name="NetSupport Client"
type="win32"
<description>NetSupport Manager Remote Control.</description>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges>
<requestedExecutionLevel level="asInvoker" />
</requestedPrivileges>
</security>
</trustInfo>
<dependency>
<dependentAssembly>
<assemblyIdentity
type="win32"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
processorArchitecture="X86"
publicKeyToken="6595b64144ccf1df"
language="*"
/>
</dependentAssembly>
</dependency>
</assembly>
7>=>>>>>>=>>>>>>>>>>E
4404000040+0*4040-0>
4040-cj6**>kH'0-fh4>
4400*t
404-*j
h'*x{6;
4400*t
C#x}6;
4-4-*j
z-t{6;
4440*r{G
44-0*j
4-4-*j
c'006"I
4440*j
}6*4000*r
44-0*h
E'40404'>
4-44->@-+040401*@>0>
44404*(060040406)*4>
44-4044004004000040=
4-40404040400404004>
4440040404040040400>
44-4004040404004040>
4-40400404040400404>
4440040040404040040>
44-4004004040404004>
4-40400400404040400>
4440040040040404040>
Sq^oo
44-4004004004040404>
omXY^]
4040400400400404040>
44-4040040040040404>
4040404004004004040=
44-4040400400400404>
4-40404040040040040=
mq\^^^^\
4440040404004004004>
SLLQLOSL
44-4004040400400400>J
7===>==>=>=>==>==>=>C
1,+///*//
!%( (+(/
TLDW*3S.*
P7:Y/(WB;O,*
(&&&(/
!$&&(/
!%&&&&/
./,/,////
GlobalSign Root CA - R31
GlobalSign1
GlobalSign0
200728000000Z
290318000000Z0S1
GlobalSign nv-sa1)0'
GlobalSign Code Signing Root R450
p\$x %
!http://ocsp.globalsign.com/rootr30;
/http://secure.globalsign.com/cacert/root-r3.crt06
%http://crl.globalsign.com/root-r3.crl0G
&https://www.globalsign.com/repository/0
GlobalSign nv-sa1)0'
GlobalSign Code Signing Root R450
200728000000Z
300728000000Z0\1
GlobalSign nv-sa1200
)GlobalSign GCC R45 EV CodeSigning CA 20200
-http://ocsp.globalsign.com/codesigningrootr450F
:http://secure.globalsign.com/cacert/codesigningrootr45.crt0A
0http://crl.globalsign.com/codesigningrootr45.crl0U
&https://www.globalsign.com/repository/0
wF*=#}(s
GlobalSign nv-sa1200
)GlobalSign GCC R45 EV CodeSigning CA 20200
220617130115Z
250617130115Z0
Private Organization1
023866381
Cambridgeshire1
Peterborough1705
.Netsupport House Towngate East, Market Deeping1
NETSUPPORT LTD.1
NETSUPPORT LTD.1(0&
is@netsupportsoftware.com0
@http://secure.globalsign.com/cacert/gsgccr45evcodesignca2020.crt0?
3http://ocsp.globalsign.com/gsgccr45evcodesignca20200U
&https://www.globalsign.com/repository/0
6http://crl.globalsign.com/gsgccr45evcodesignca2020.crl0$
is@netsupportsoftware.com0
%91GKL
GlobalSign nv-sa1200
)GlobalSign GCC R45 EV CodeSigning CA 2020
20221114151039Z0
GlobalSign nv-sa1*0(
!Globalsign TSA for CodeSign1 - R6
GlobalSign nv-sa110/
(GlobalSign Timestamping CA - SHA384 - G40
220406074538Z
330508074538Z0T1
GlobalSign nv-sa1*0(
!Globalsign TSA for CodeSign1 - R60
>-re+0
&https://www.globalsign.com/repository/0
-http://ocsp.globalsign.com/ca/gstsacasha384g40C
7http://secure.globalsign.com/cacert/gstsacasha384g4.crt0
0http://crl.globalsign.com/ca/gstsacasha384g4.crl0
'v/i)~
.@]|Gt0
GlobalSign Root CA - R61
GlobalSign1
GlobalSign0
180620000000Z
341210000000Z0[1
GlobalSign nv-sa110/
(GlobalSign Timestamping CA - SHA384 - G40
a:c|9#ymt
"http://ocsp2.globalsign.com/rootr606
%http://crl.globalsign.com/root-r6.crl0G
&https://www.globalsign.com/repository/0
$KtZ}r
GlobalSign Root CA - R61
GlobalSign1
GlobalSign0
141210000000Z
341210000000Z0L1 0
GlobalSign Root CA - R61
GlobalSign1
GlobalSign0
PmBf/M
'YLv9[
GlobalSign nv-sa110/
(GlobalSign Timestamping CA - SHA384 - G4
GlobalSign nv-sa110/
(GlobalSign Timestamping CA - SHA384 - G4
GlobalSign Root CA - R31
GlobalSign1
GlobalSign0
200728000000Z
290318000000Z0S1
GlobalSign nv-sa1)0'
GlobalSign Code Signing Root R450
p\$x %
!http://ocsp.globalsign.com/rootr30;
/http://secure.globalsign.com/cacert/root-r3.crt06
%http://crl.globalsign.com/root-r3.crl0G
&https://www.globalsign.com/repository/0
GlobalSign nv-sa1)0'
GlobalSign Code Signing Root R450
200728000000Z
300728000000Z0\1
GlobalSign nv-sa1200
)GlobalSign GCC R45 EV CodeSigning CA 20200
-http://ocsp.globalsign.com/codesigningrootr450F
:http://secure.globalsign.com/cacert/codesigningrootr45.crt0A
0http://crl.globalsign.com/codesigningrootr45.crl0U
&https://www.globalsign.com/repository/0
wF*=#}(s
GlobalSign nv-sa1200
)GlobalSign GCC R45 EV CodeSigning CA 20200
220617130115Z
250617130115Z0
Private Organization1
023866381
Cambridgeshire1
Peterborough1705
.Netsupport House Towngate East, Market Deeping1
NETSUPPORT LTD.1
NETSUPPORT LTD.1(0&
is@netsupportsoftware.com0
@http://secure.globalsign.com/cacert/gsgccr45evcodesignca2020.crt0?
3http://ocsp.globalsign.com/gsgccr45evcodesignca20200U
&https://www.globalsign.com/repository/0
6http://crl.globalsign.com/gsgccr45evcodesignca2020.crl0$
is@netsupportsoftware.com0
%91GKL
GlobalSign nv-sa1200
)GlobalSign GCC R45 EV CodeSigning CA 2020
20221114151043Z0
GlobalSign nv-sa1*0(
!Globalsign TSA for CodeSign1 - R6
GlobalSign nv-sa110/
(GlobalSign Timestamping CA - SHA384 - G40
220406074538Z
330508074538Z0T1
GlobalSign nv-sa1*0(
!Globalsign TSA for CodeSign1 - R60
>-re+0
&https://www.globalsign.com/repository/0
-http://ocsp.globalsign.com/ca/gstsacasha384g40C
7http://secure.globalsign.com/cacert/gstsacasha384g4.crt0
0http://crl.globalsign.com/ca/gstsacasha384g4.crl0
'v/i)~
.@]|Gt0
GlobalSign Root CA - R61
GlobalSign1
GlobalSign0
180620000000Z
341210000000Z0[1
GlobalSign nv-sa110/
(GlobalSign Timestamping CA - SHA384 - G40
a:c|9#ymt
"http://ocsp2.globalsign.com/rootr606
%http://crl.globalsign.com/root-r6.crl0G
&https://www.globalsign.com/repository/0
$KtZ}r
GlobalSign Root CA - R61
GlobalSign1
GlobalSign0
141210000000Z
341210000000Z0L1 0
GlobalSign Root CA - R61
GlobalSign1
GlobalSign0
PmBf/M
'YLv9[
GlobalSign nv-sa110/
(GlobalSign Timestamping CA - SHA384 - G4
GlobalSign nv-sa110/
(GlobalSign Timestamping CA - SHA384 - G4
VS_VERSION_INFO
StringFileInfo
080904b0
Comments
CompanyName
NetSupport Ltd
FileDescription
NetSupport Client Application
FileVersion
V12.70
InternalName
client32
LegalCopyright
Copyright (c) 2019, NetSupport Ltd
LegalTrademarks
OriginalFilename
client32.exe
PrivateBuild
V12.70
ProductName
NetSupport Manager
ProductVersion
V12.70
SpecialBuild
VarFileInfo
Translation
!Copyright (c) 2018 NetSupport Ltd
Antivirus Signature
Bkav Clean
Lionic Clean
tehtris Clean
MicroWorld-eScan Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
McAfee Clean
Cylance Clean
VIPRE Clean
Sangfor Clean
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Clean
Cyren Clean
Symantec Clean
Elastic Clean
ESET-NOD32 Clean
APEX Clean
Paloalto Clean
Cynet Clean
Kaspersky Clean
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Hacktool.NetSup!8.13A97 (CLOUD)
Sophos Clean
F-Secure Clean
DrWeb Program.RemoteAdmin.931
Zillya Tool.NetSup.Win32.64
TrendMicro Clean
McAfee-GW-Edition Clean
Trapmine Clean
FireEye Clean
Emsisoft Clean
Ikarus Clean
GData Clean
Jiangmin RemoteAdmin.NetSup.an
Webroot Clean
Avira Clean
MAX Clean
Antiy-AVL Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Clean
Google Clean
AhnLab-V3 Clean
Acronis Clean
BitDefenderTheta Clean
ALYac Clean
TACHYON Clean
DeepInstinct Clean
VBA32 BScope.Riskware.NetSupport
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
SentinelOne Clean
MaxSecure Clean
Fortinet Clean
AVG Clean
Avast Clean
CrowdStrike Clean
No IRMA results available.