Static | ZeroBOX

PE Compile Time

1999-04-14 11:58:55

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00063824 0x00063a00 5.79172829589
.rsrc 0x00066000 0x00018aa4 0x00018c00 3.59306726548
.reloc 0x00080000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0007e234 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0007e234 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0007e234 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0007e234 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0007e234 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x0007e69c 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0007e6e8 0x000003bc LANG_NEUTRAL SUBLANG_NEUTRAL data

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
#ffffff
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
hSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPADI
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
PHLZ+]
H!RH~1
j"W0Ev
w%\qJ;
^k1f0e
mwKq%f([:
_7\QB
C?v42X
`+\wYb
0I@vO]
4ikWMv9
mHm=jP
EyM#+i
YJy$yJ
<Xn1M$
=yV?`_
Mu']ND*
<2[7j\P
:gP+L}|
J3(kgG6 hV-^
Z|S*!t$
\|"*B=yS
/mwQHO
AFE-cV
0.SP?U
0Q>SDj
qMA11c
-vFSmGa
_l`6DX_/tt
`UR)/RU
mw~1w6
U<qm(O
5S~YTH
p69}t<t
19"}+k+6
t1UL4&
@<ft'e
VWA($%
$RML=+z
q9_q ]le,
S+L7Kc
mv8! R&/
l{X|<=
v,0YwV
$#e^:Yd
s[RPJ.a'
^]ff|x
4l~Dh`
EoZ-fn#
v0e,LR
,o:K}C
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
7KU[dv
~]J,Q=
d7*8i }TF
7]ai$CQ=
@+]HJw
oR;_bJ
Q$Tsg`
]cXPQ1k
~ibkjS
H>aO;t
cFEUk@
2}C'H#
1nhumu
\h9]o/
b&3_xv
P)^=Lu
I]^B~b
mTD:Q_.
*LN*aJIh
V!*#aJ
:Q7fir\8
^htg6A6
XYvq6[
P~};yG
A/n;l
q,rcaTj
h"jIm{
_s>=f{K
Vcr%$_8[
To67q
R=~D]_
f_HS)I
]*Fp9lV
$s{,|:
oBQHy
4'sij?C
"`[Pz>M
UBdqyQ
}H+dvZ
A!rQZ
cua]F&]
Qd9pVQ
ps$[g:p
[xpiEe
}8g8vWQ
8nRK7"
*kKF}QG
NtaM9#W
|fc+^2
8^')RmE; F
ehU`"g
Uw_&9!]
/KC@2K
wAnx[:
=#KPr4r@
lUp$<<
UE6r(FR
*#GXb[j
[L8V>Fg
v:OV5L
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
anRuDP
?"^LmV
$PV$/7Wz
-x~DDjJ9
.zBmP:
zb2%|+%U
d'+H)^
%#@J:
%=D@coV
O}^oWCw
@7~j=I
&tk]])GhB:w
k/~x~49?7!c
\ax"\^S
ua?IA)
91nBKm
bb[#Kk0
!=uXE&
\rVVPx
s8+*Oev
Y%``7A@
oED}
)J ~9kL~i
V-iM_&
>^mLRO
)h6#up
bfM@6q
UL;&re
NLO*ez
rH#KQfA
X9Fy~A
=+AK\*=
\i Wo\
uzp=5`vI
|]M,%q"1I
XoO7e"
/m\~Mm
5k67mZn
)xEmp7T
HfhywZ
rC}1HZ
Hg\h*X
iL;7YSx"
mUafO6z
KLUw"XGX
x'iQ0[
`"AQU|
(C_Wa:zr
PIZ|;"A
h$n6jn
k~122T
Kh:'\R
kSB/kL
ahzXry
m&'n0gJ
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
:EBT`4
:7fnKz!
'sIQ5\.
ZO:Q|o
z(J&j0?!
iBPadH
ZRn3a#n\
.9rxN`JjN
T%\NPzt
oWsJ#^
c;mmPZ
OZ` zN
+I@ti_
.xR!^d
8_Es)j
Xwqoqx=
A,R*;YU
PGecl6
|&fL#:
A~Y.;5
Cc2_Dr
wH`6i-
#OW6cK
fc.7%{
-RoIJ~
b5"(QE
yF-x%B
6k,Jd&"L
Hgo*~
Vj:|(3
DHA(v_}
xV,Uiq
y#4DVBs
XEZO:K3
P_2!b{Q
dtgrFB
ywbwc1
W3I(G5
=seIDn
vC"i57
/y I17Q
[z3<!2
7R#'1c)
^N16zvR
U:W|UlXzi-w
ZWUs'#g
AmDAaq,
8DbkyL
PM\H6p
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
dx{I:7
[htu[U
otU?(z
oa<h"q
wX!H'T
']2O,P-
/T]BFH
uz**xq
+dzDK
)2F]<h=95
QFMjsC
]]0y3
ZX[{N$
%/+ +%[w
XCi0wl
Er>d*a
D\SzB^L
{6fM1|
RLw`IFS
b071XL
~Oh2E.
b!jGqX
g",2eL
p+`y!H
kQzW%3
>xQ[2 _
y&m'<)
0v|p)n?
]O87`X
z@6FCm^X
u(06Ln
%[2JL
AV{{*AC
0MgYFh
e0zO.8.
q#mPwt
9>61[M
a^Ww\A
iB94+A@
R3MYm^q
$X]l!
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
>,c,he
64Wp"g
rk4.]k
-)S+q
~CJaH0uHK
mxU*b\
Bd1Y&K+
I)"1Xx
??#k^`
o#g_JL
B44<av
$1cY q
K^(ku1
NlYV%J
a|K)Y8
{Wj:Xm
=jjG]a
6QXG8j
%AUKV'*=
/%4ta
M,v&[x
y>p(SG!o
~^6c,1s
dI F9
O%^`5?j[
b:*{kY
]I=rZt
G$tA:*]
!vO;(o
pE2Y``Qe{
T$gNZh3
<!kDmNu (-_
h<>"=z
;"V}*()
4C%.`o
[)J30u
A[4 FO
s@r`FgG
r.ooW
5+|iy3:
70)|Jx
% IU5FO<
dSS(kD
^R0.C3
\(|Ns3v
}MZ-m"\
]r0T9Vg5
)Af4,r
f;khlcK!
p}$gCE ,
)QO-A9J
pFEc@_P
T{Fu*=
PRhA<Ok
%!4Sxs
:HJXIV
j*Xe&%"n
FOnP[:Q
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
YnTQ_\
l-y*L
SBkF.A
%b/]fH
7}1 M2`
vd+4Pl
M^.Yy4i>Xy
?;b-A(
uJctP.e
rd #-
Wt]2nw
hd-}aB]
^,OqmF9
Yk%5z1
.aw?rA
EMw+KG
NW@T(nC5
oo<\<SQ
M{C[iyy
2l40.k
T@+N~g
=pdoo_
c):,Zt
c/A!"h
sx~'lX
JmU7\A*F
F]we`_e1
,>C^Y"
bprCV#-
1~}rB:
O{ O\W
R2Oc/=
c*p>Uu
RavAF^
s#AGhn
~IX9P`
)ZcZHn
[upNXa
llt<tq
e=)-&C\R
hg1RuH
1PR@5;
oB>Swc+
!`FV!O
eHKsal
zve@dvE
~^me!\j
V (JdLQ
L]v3_m
+"h'MX!
b9Lr^
s9+wy=
R-i=.eP
o'~x`4W
j}l3Jz
"s;}rT
^\:n9a*
FJ iRv[
AN=H1!
`+(sMH>
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
e(7z_[OV #
'F!W-B
I(*9y7
h{!?h
.)*Yt8X
&4K#Ik
yxBe'T
4C">|.
v4.0.30319
#Strings
IEnumerable`1
List`1
Microsoft.Win32
ToInt32
Func`2
IPSWMD5
IPSW_MD5
SUSPEND_RESUME
TERMINATE
IMPERSONATE
get_ASCII
SET_THREAD_TOKEN
SET_INFORMATION
QUERY_INFORMATION
DIRECT_IMPERSONATION
System.IO
GET_CONTEXT
SET_CONTEXT
_CurrentBatteryCharging0IV
_CurrentBatteryLow0IV
_CurrentBatteryCharging1IV
_CurrentBatteryLow1IV
_CurrentLLBIV
_CurrentIBECIV
_CurrentIBSSIV
CurrentRecoveryModeIV
_CurrentDeviceTreeIV
_CurrentKernelCacheIV
CurrentGlyphChargingIV
CurrentRestoreRamdiskIV
_CurrentUpdateRamdiskIV
_CurrentBatteryFullIV
_CurrentGlyphPluginIV
_CurrentAppleLogoIV
_CurrentiBootIV
value__
ProjectData
appdata
mscorlib
System.Collections.Generic
Microsoft.VisualBasic
get_Id
dwThreadId
OpenRead
SuspendThread
ResumeThread
hThread
OpenThread
ProcessThread
add_Load
iBSSToKload
_ldownload
get_HasExited
Synchronized
$VB$Local_id
iOS_Build
ReadToEnd
Append
Beehind
CompareMethod
Replace
CreateInstance
get_GetInstance
defaultInstance
GetHashCode
set_AutoScaleMode
FileMode
IsiFaithMode
Beta1LIMITEDMessage
AddRange
IEnumerable
IDisposable
ToDouble
RuntimeTypeHandle
CloseHandle
hHandle
GetTypeFromHandle
bInheritHandle
settingsfile
IsInRole
WindowsBuiltInRole
AppWinStyle
BatteryCharging0Name
_BatteryLow0Name
_BatteryCharging1Name
_BatteryLow1Name
_LLBName
iBECName
iBSSName
get_Name
set_Name
_RecoveryModeName
_DeviceTreeName
KernelCacheName
iOS_BundleName
set_FileName
GlyphChargingName
BatteryChargingName
_RestoreRamdiskName
_UpdateRamdiskName
_BatteryFullName
_GlyphPluginName
BatteryPluginName
_AppleLogoName
rootfsName
get_ProcessName
iBootName
GetProcessesByName
AssemblyName
DateAndTime
DateTime
get_NewLine
_DowngradeType
ChangeType
ExploitType
Compare
System.Core
resourceCulture
get_InvariantCulture
ConsoleApplicationBase
ReadOnlyCollectionBase
ApplicationSettingsBase
IsRelease
Dispose
Create
DebuggerBrowsableState
EditorBrowsableState
Delete
ThreadStaticAttribute
STAThreadAttribute
CompilerGeneratedAttribute
DesignerGeneratedAttribute
GuidAttribute
HelpKeywordAttribute
GeneratedCodeAttribute
DebuggerNonUserCodeAttribute
DebuggableAttribute
DebuggerBrowsableAttribute
EditorBrowsableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
StandardModuleAttribute
HideModuleNameAttribute
DebuggerStepThroughAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
DebuggerHiddenAttribute
AssemblyFileVersionAttribute
MyGroupCollectionAttribute
AssemblyDescriptionAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
set_UseShellExecute
ReadByte
m_ThreadStaticValue
GetObjectValue
GetValue
RegistryHive
add_AssemblyResolve
set_Size
set_ClientSize
System.Threading
NewLateBinding
Encoding
System.Runtime.Versioning
Warning
DownloadString
CompareString
ToString
Substring
System.Drawing
IsMatch
RestoredExternalPatch
ComputeHash
_SHSHPath
_XMLPath
IPSWPath
BasebandPath
CustomBundlePath
PNGLogoPath
GetFolderPath
get_Length
StartsWith
Decimal
System.Security.Principal
WindowsPrincipal
ConditionalCompareObjectEqual
_DeviceModel
System.ComponentModel
LateCall
kernel32.dll
ContainerControl
FileStream
get_FileSystem
get_Is64BitOperatingSystem
HashAlgorithm
_ECIDForm
resourceMan
Boolean
System.ComponentModel.Design
AppDomain
GetDomain
get_CurrentDomain
SeekOrigin
set_ShowIcon
MessageBoxIcon
iOS_Version
Conversion
currentversion
_latestversion
Application
System.Configuration
System.Globalization
Interaction
System.Reflection
ProcessThreadCollection
get_Position
set_Position
set_StartPosition
FormStartPosition
NotImplementedException
ArgumentException
CultureInfo
get_StartInfo
ProcessStartInfo
desktop
System.Net.Http
settingsbackup
System.Linq
set_ShowInTaskbar
shshHeader
StreamReader
IFormatProvider
m_AppObjectProvider
m_UserObjectProvider
m_ComputerObjectProvider
m_MyWebServicesObjectProvider
StringBuilder
all_flashFolder
SpecialFolder
sender
Buffer
ResourceManager
ToInteger
ResolveEventHandler
System.CodeDom.Compiler
IContainer
BinaryWriter
BitConverter
ServerComputer
ToLower
shsh_saving_dir
tempdir
userdir
bundlesdir
hshsdir
get_StandardError
set_RedirectStandardError
ClearProjectError
SetProjectError
iPhoneProcessor
IEnumerator
GetEnumerator
Activator
.cctor
IntPtr
System.Diagnostics
get_Threads
AddSeconds
Microsoft.VisualBasic.Devices
WebServices
Microsoft.VisualBasic.ApplicationServices
System.Runtime.InteropServices
Microsoft.VisualBasic.CompilerServices
System.Runtime.CompilerServices
Microsoft.VisualBasic.MyServices
System.Resources
r2LQ.Form1.resources
r2LQ.Resources.resources
312bfdfacca24c.Resources.resources
DebuggingModes
NumberStyles
GetSubKeyNames
ReadAllLines
WriteAllLines
GetProcesses
ReadAllBytes
WriteAllBytes
GetBytes
Strings
Settings
ResolveEventArgs
StartupEventArgs
ReferenceEquals
System.Windows.Forms
Contains
set_AutoScaleDimensions
Conversions
System.Text.RegularExpressions
System.Collections
MessageBoxButtons
RuntimeHelpers
Operators
_DeviceClass
dwDesiredAccess
FileAccess
Process
set_Arguments
components
DoEvents
FileExists
DirectoryExists
RemoveAt
Concat
Format
AddObject
LateGet
LateIndexGet
System.Net
Default
DialogResult
WebClient
HttpClient
Environment
get_Current
GetCurrent
get_Count
Convert
SuspendLayout
ResumeLayout
get_StandardOutput
set_RedirectStandardOutput
MoveNext
System.Text
set_Text
_MainView
RegistryView
get_Now
set_CreateNoWindow
LateSetComplex
MessageBox
Beta1SupportedCombox
ToArray
_CurrentBatteryCharging0Key
_CurrentBatteryLow0Key
_CurrentBatteryCharging1Key
_CurrentBatteryLow1Key
CurrentLLBKey
_CurrentIBECKey
_CurrentRootFSKey
_CurrentIBSSKey
OpenSubKey
_CurrentRecoveryModeKey
_CurrentDeviceTreeKey
_CurrentKernelCacheKey
OpenBaseKey
CurrentGlyphChargingKey
CurrentRestoreRamdiskKey
_CurrentUpdateRamdiskKey
_CurrentBatteryFullKey
_CurrentGlyphPluginKey
_CurrentAppleLogoKey
_CurrentiBootKey
RegistryKey
System.Security.Cryptography
get_Assembly
BlockCopy
CreateDirectory
set_Opacity
op_Inequality
WindowsIdentity
FileSystemProxy
WrapNonExceptionThrows
OcButtonService
GIGA-BYTE TECHNOLOGY CO., LTD.
EasyTune
1Copyright
2015 GIGA-BYTE TECHNOLOGY CO., LTD.
Gy8t0FZd63Caw1AYj97
$7be5a817-d8b6-4d09-a366-58a15c0410b7
8.0.2.2
.NETFramework,Version=v4.6
FrameworkDisplayName
.NET Framework 4.6
MyTemplate
11.0.0.0
My.Computer
My.Application
My.User
My.WebServices
4System.Web.Services.Protocols.SoapHttpClientProtocol
Create__Instance__
Dispose__Instance__
3System.Resources.Tools.StronglyTypedResourceBuilder
17.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
17.6.0.0
My.Settings
_CorExeMain
mscoree.dll
sgws_$
,x,B;a
6.ykTz
0xWrBWQm
_~>cWE
a+oJx%
g_^o5u
C<(XLlx
t_uq?To
q;}\=
A;(+q>
f`yucI
0w_M0s
GlobalSign Root CA - R31
GlobalSign1
GlobalSign0
160615000000Z
240615000000Z0Z1
GlobalSign nv-sa100.
'GlobalSign CodeSigning CA - SHA256 - G30
<paX7
"http://ocsp2.globalsign.com/rootr306
%http://crl.globalsign.com/root-r3.crl0c
&https://www.globalsign.com/repository/0
JEe-MI
GlobalSign nv-sa100.
'GlobalSign CodeSigning CA - SHA256 - G30
190910024517Z
220910024517Z0
New Taipei1
New Taipei1'0%
GIGA-BYTE TECHNOLOGY CO., LTD.1'0%
GIGA-BYTE TECHNOLOGY CO., LTD.0
<http://secure.globalsign.com/cacert/gscodesignsha2g3ocsp.crt08
,http://ocsp2.globalsign.com/gscodesignsha2g30V
&https://www.globalsign.com/repository/0
.http://crl.globalsign.com/gscodesignsha2g3.crl0
New Jersey1
Jersey City1
The USERTRUST Network1.0,
%USERTrust RSA Certification Authority0
190502000000Z
380118235959Z0}1
Greater Manchester1
Salford1
Sectigo Limited1%0#
Sectigo RSA Time Stamping CA0
?http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl0v
3http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt0%
http://ocsp.usertrust.com0
rRj;B7|
[C]e=P
Greater Manchester1
Salford1
Sectigo Limited1%0#
Sectigo RSA Time Stamping CA0
201023000000Z
320122235959Z0
Greater Manchester1
Salford1
Sectigo Limited1,0*
#Sectigo RSA Time Stamping Signer #20
https://sectigo.com/CPS0D
3http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t
3http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#
http://ocsp.sectigo.com0
GlobalSign nv-sa100.
'GlobalSign CodeSigning CA - SHA256 - G3
I_"T~_
Greater Manchester1
Salford1
Sectigo Limited1%0#
Sectigo RSA Time Stamping CA
210413022125Z0?
dd2847e05e
e4cfb91d0
e4cfb91d1
e4cfb91d2
e4cfb91d3
e4cfb91d4
e4cfb91d5
e4cfb91d6
e4cfb91d7
WinSCPnet
WindowsApp1.Resources
8.1.2 Then
ProgressLabel
55% - Adding Chronic Dev-Team's Cprona Untether to the Custom Firmware...
untar
\payloads\com.chronic-dev.greenpois0n.corona-untether.tar
extract
/usr/sbin/racoon
\racoon
/usr/sbin/corona
chmod 100555
/tmp/corona_install/
/payload
/usr/share/corona/payload
/payload-vars
/usr/share/corona/payload-vars
/racoon-exploit.conf
/usr/share/corona/racoon-exploit.conf
/vnimage.overflow
/usr/share/corona/vnimage.overflow
/vnimage.payload
/usr/share/corona/vnimage.payload
/tmp/corona_install
/etc/fstab
\payloads\fstab
chmod 100644
\payloads\corona_launchd.conf
/etc/launchd.conf
55% - Adding Chronic Dev-Team's Rocky Racoon Untether to the Custom Firmware...
\payloads\com.chronic-dev.greenpois0n.corona-rocky-racoon-untether.tar
55% - Adding Evad3rs' evasi0n Untether to the Custom Firmware...
\payloads\evasi0n6-untether.tar
55% - Adding iH8Sn0w's p0sixspwn Untether to the Custom Firmware...
mkdir
/private/var/untether
\payloads\p0sixspwn-untether.tar
55% - Adding Evad3rs' evasi0n7 Untether to the Custom Firmware...
\payloads\evasi0n7-untether.tar
55% - Adding PanguTeam's PanguAxe Untether to the Custom Firmware...
\payloads\io.panguaxe-untether.tar
55% - Adding PanguTeam's Pangu Xuanyuansword8 Untether to the Custom Firmware...
\payloads\io.xuanyuansword8-untether.tar
55% - Adding TaiG's Untether (8.1.3 -> 8.4) to the Custom Firmware...
\payloads\taiguntether83x.tar
55% - Adding PanguTeam's Fuxiqin9 Untether to the Custom Firmware...
\payloads\io.fuxiqin9-untether.tar
55% - Adding SSH to the Custom Firmware...
\payloads\ssh-shrink.tar
\payloads\openssl.tar
\payloads\openssh.tar
\payloads\open
/usr/bin/open
chmod 100755
55% - Adding Cydia to the Custom Firmware...
\payloads\cydia.tar
\payloads\cydia-1.1.26.tar
chmod 6775
/Applications/Cydia.app/MobileCydia
chown root wheel
55% - Doing Cydia's Preparing Filesystem...
/private/var/stash
/Applications
/private/var/stash/Applications
/Library/Ringtones
/private/var/stash/Ringtones
/Library/Wallpaper
/private/var/stash/Wallpaper
/usr/include
/private/var/stash/include
/usr/libexec
/private/var/stash/libexec
/usr/lib/pam
/private/var/stash/pam
/usr/share
/private/var/stash/share
symlink
tps://www.logpasta.com/paste/raw/bbf4ce75-e340-4491-8535-28e5e45b5fcd.txt
WARNING: This is a DEBUGGING version of Beehind. Due to that, some functions are permanently disabled because they're not ready for public release. Also, as of now you can only Downgrade iPhones 4S and iPads 2 to iOS 6.1.3 Without SHSH Blobs. If you try to select a different firmware from iOS 6.1.3, you'll get an error. See 'intructions.rtf' for more informations
6.1.3iPhone4,1
6.1.3iPad2,1
6.1.3iPad2,2
6.1.3iPad2,3
This beta of Beehind only supports these Combos: Downgrade to iOS 6.1.3 for iPhone 4 GSM, iPhone 4S, iPad 2 GSM, iPad 2 CDMA and iPad 2 WiFi without SHSH Blobs.
<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
\beehind
\fw_bundles
\settings.txt
SIGNED
You're lucky! iPhone 4S and iPad 2 possessors can UNTETHER DOWNGRADE to iOS 6.1.3 (yes, only this version) WITHOUT ANY SHSH BLOB through an OTA Downgrade. Do you want to perform an OTA Downgrade? (Press Yes to downgrade without SHSH, press No to use your own SHSH Blobs saved previously)
OTA Signature detected
MdiParent
WorkBar
Visible
Worklabel
ECIDTextBox
ECIDConfirmBtn
ECIDIntroductionLabel
It seems you currently don't have internet access on this computer. You won't be able to do OTA Downgrades until a valid internet connection is provided.
Internet connection required
CancelOTADWN
ChooseSHSHButton
Enabled
SHSHGroupBox
Browse for SHSH
No Blobs are required to perform an OTA Downgrade
HacktivateCheckBox
Checked
BasebandCheckBox
There are two available downgrades for your device:
- Tethered Downgrade: It DOESN'T REQUIRE any SHSH Blob, but it is tethered! If you execute it on your device, it won't be able to boot up autonomously: you'll need to plug into the Computer and use tools like RedSn0w everytime you want to switch it on.
- Untethered Downgrade: It's a complete downgrade (your device will be able to boot up autonomously), but to execute it, you need saved unique SHSH Blobs of the old Firmware you want to install for your specific device.
Basically: if you have valid SHSH Blobs, click Yes for a standard untethered downgrade; else, click No for a tethered downgrade
To do or not To Do?
NOSIGN
NoNANDFlashCheckBox
No Blobs are required to perform a Tethered Downgrade
Cancel Tethered Downgrade
MagicButton
iPhone2,1
iPhone3,1
iPhone3,2
iPhone3,3
iPod3,1
iPod4,1
iPad1,1
10A403
10A523
10B144
10B145
10B146
10B329
11A465
11A501
11B511
11B554a
11B601
11B651
11D169
11D201
11D257
12A365
12A402
12A405
12B411
12B435
12B440
12B466
12D508
12H143
GetStringAsync
Result
IPSWTextBox
IPSWGroupBox
Browse for the IPSW
SHSHTextBox
Build IPSW!
PathLabelIPSW
PathLabelSHSH
ChooseIPSWButton
DowngradeProgressBar
BasebandComboBox
CustomSizeCheckBox
NewSizeUpDown
CustomBundleCheckBox
AddUntetherCheckBox
AddSSHCheckBox
AddCydiaCheckBox
NoSysFlashCheckBox
Cancel OTA Downgrade
Betashit
IsRelease
GOTANYITEM!
SOFTWARE\MICROSOFT\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products
InstallProperties
DisplayName
UninstallString
No Uninstall String
Beehind wasn't able to uninstall
Uninstaller failed
dd/MM/yyyy
-1 -r "
GetBytes
The binary key cannot have an odd number of digits: {0}
ERROR: This pattern isn't replaceble:
\TSSQuery.exe
SUCCESS
Apple TSS Server Returned an ERROR
http://www.google.com
^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}$
https://raw.githubusercontent.com/BlackGeekTutorial/Beehind/master/Updater/latest-win.txt
https://raw.githubusercontent.com/BlackGeekTutorial/Beehind/master/Updater/dlink-latest.win.txt
UpdateLabel
This version (
) is obsolete! Download the newer one (
LatestBuildLinkLabel
This is the latest version of Beehind (
Beehind wasn't able to check for updates... Check your internet connection!
Description
Apple Mobile Device USB Driver
ActivationState:
error code -20
ERROR: This computer host is not trusted by the attatched device. In order to use your iPhone, iPod touch or iPad with Beehind, please tap on 'Trust' button right now. Then click 'OK' to retry
Untrusted Computer
error code -14
ERROR: the attatched device is password protected. In order to use your iPhone, iPod touch or iPad with Beehind, please unlock it. Then click 'OK' to retry
Password-protected
ERROR: Beehind (ideviceinfo) wasn't able to estabilish a connection with the attatched device. Please, unplug and replug it. Then retry with Beehind.
Unknown Error.
GetMethods
Invoke
GetTypes
FormMmmd2
BTC Convertor
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
GIGA-BYTE TECHNOLOGY CO., LTD.
FileDescription
OcButtonService
FileVersion
8.0.2.2
InternalName
OcButtonService.exe
LegalCopyright
Copyright
2015 GIGA-BYTE TECHNOLOGY CO., LTD.
LegalTrademarks
OriginalFilename
OcButtonService.exe
ProductName
EasyTune
ProductVersion
8.0.2.2
Assembly Version
8.0.2.2
No antivirus signatures available.
No IRMA results available.