Static | ZeroBOX

PE Compile Time

2023-10-06 01:34:00

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000396e0 0x00039800 7.75879554267
.rsrc 0x0003c000 0x00022cbf 0x00022e00 4.49960005109
.reloc 0x00060000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0004dc84 0x00010828 LANG_ENGLISH SUBLANG_ENGLISH_US dBase IV DBT, blocks size 0, block length 2048, next free block index 40, next free block 0, next used block 0
RT_ICON 0x0004dc84 0x00010828 LANG_ENGLISH SUBLANG_ENGLISH_US dBase IV DBT, blocks size 0, block length 2048, next free block index 40, next free block 0, next used block 0
RT_ICON 0x0004dc84 0x00010828 LANG_ENGLISH SUBLANG_ENGLISH_US dBase IV DBT, blocks size 0, block length 2048, next free block index 40, next free block 0, next used block 0
RT_ICON 0x0004dc84 0x00010828 LANG_ENGLISH SUBLANG_ENGLISH_US dBase IV DBT, blocks size 0, block length 2048, next free block index 40, next free block 0, next used block 0
RT_ICON 0x0004dc84 0x00010828 LANG_ENGLISH SUBLANG_ENGLISH_US dBase IV DBT, blocks size 0, block length 2048, next free block index 40, next free block 0, next used block 0
RT_ICON 0x0004dc84 0x00010828 LANG_ENGLISH SUBLANG_ENGLISH_US dBase IV DBT, blocks size 0, block length 2048, next free block index 40, next free block 0, next used block 0
RT_ICON 0x0004dc84 0x00010828 LANG_ENGLISH SUBLANG_ENGLISH_US dBase IV DBT, blocks size 0, block length 2048, next free block index 40, next free block 0, next used block 0
RT_GROUP_ICON 0x0005e4e8 0x00000068 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_VERSION 0x0005e58c 0x00000310 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_MANIFEST 0x0005e8d8 0x000003e7 LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
+.+3+8oa
+:+;+@
_d}L
+$+%+&
_b`}L
+P+Q{>
3K {z}
3K {z}
_b`}
Y_bX
Y_cX
Y_bY
Y_bX
Y_bX
++ {`
__d}L
+6+7+<,
Y_bX
Y_bX
,%&+%{`
+<z+@
+C+K{P
_b`}L
Y_bY
+$+%+&{
+RH+Q+VH(
Qkkbal
v4.0.30319
#Strings
mkFSS.exe
<Module>
mscorlib
Object
System
MulticastDelegate
ValueType
Attribute
GetString
SmartAssembly.Delegates
MemberRefsProxy
SmartAssembly.HouseOfCards
Strings
MemoryStream
System.IO
PoweredByAttribute
SmartAssembly.Attributes
Dictionary`2
System.Collections.Generic
Assembly
System.Reflection
Version
ModuleHandle
Encoding
System.Text
get_UTF8
get_ASCII
Convert
FromBase64String
String
Intern
ReadAllText
GetDirectoryName
op_Equality
ToInt32
GetExecutingAssembly
GetManifestResourceStream
Stream
get_Length
DriveInfo
get_TotalSize
IDisposable
Dispose
Concat
GetTypeFromHandle
RuntimeTypeHandle
Marshal
System.Runtime.InteropServices
SizeOf
ToUInt32
IsNullOrEmpty
Directory
Exists
BitConverter
IntPtr
get_Size
Environment
get_TickCount
GetLastWin32Error
op_Explicit
ToInt16
Buffer
BlockCopy
GetBytes
ToString
FileSystemInfo
get_Extension
get_Location
get_Name
Console
WriteLine
ReadLine
HashAlgorithm
System.Security.Cryptography
ComputeHash
SymmetricAlgorithm
set_Key
set_Mode
CipherMode
set_Padding
PaddingMode
CreateDecryptor
ICryptoTransform
TransformFinalBlock
get_Assembly
ResourceManager
System.Resources
GetObject
get_Chars
EnumerateDirectories
IEnumerable`1
Format
StringBuilder
Append
get_HasShutdownStarted
GetDrives
get_DriveType
DriveType
get_IsReady
.cctor
ParameterInfo
object
method
Invoke
hfsdkffddfghsffdaffdchd
fghhfgsfffffdfdfddshfdasdfh
cfffdfadfrsfsshdkfffgh
BeginInvoke
IAsyncResult
AsyncCallback
callback
EndInvoke
result
hjfdfhfgfadffddcdffffskhj
fgrgfffffffkhsjd
sfdfdsdffffefdfkfghj
sdddffhedfddfffgjfsfkfdgsacsafp
sgfhjffffgdrfhdfdfhffadfsfsscfgdb
djffsfgdffafcfdssfkfhgj
ffchkffdafhfdsfsfj
jffgadffgfgfsfhfskffj
jcfsdfrdfsdgkfff
fdfcffrdgffdfsfssffj
jffffgffrfdfcsdsgkffj
jffffgfdsdfsdgkffff
gdddfdddfgsfdgh
fhfsgddfdhfffhhs
hsgffgdd
ffgdgfh
shafffasd
sddfffh
sgdfffsdsf
sfdgdffs
gffffshs
gjfffgsd
gjddadgs
dgffsgfsfs
gddgsgdg
gsdgfashsg
gdsadffjgagg
hsfgjafgs
adssgfdds
jddfjgdgsfsf
ggjggfssfdfh
sdddffhedfddffffjfsfkdgsacsafp
sgfhjfffgrfhddfhfffadfsfsscfgdb
djfsfhgdffafcfdssfkfhgj
ffchkffdafdsfsfj
jffgadfcfgfgfshfskffj
jcffrdfdsdgkfff
fdfcffrdgdfsfsffj
jffffgfrfdfcdsgkffj
jfffgfdsdfksdgkffff
jfsdaffgdgfffgg
jffdfgsfggdfgfffdgs
dffgaa
jsfsfffaffgdfdf
jdfgfafffaa
hfsdkfddgfgffefafchd
fghhfgsffrfdfdfffdfdshfdsdfh
cfffdadfdrsfsshdkfffgh
hjfffhfadfddfdcdffffshj
ffghgfdfdfffkhsjd
fsffffdddgfefdfkfghj
hjfffhfadffddfdcdfffshj
ffhgfdfdffffkhsjd
fsffffdddfgefdfkfghj
gdfgd2dfsfvfgdfdj
kfdfsggfffh
fsgafg
sgggfaaf
fagfgss
sgafsgfd
jffsagsk
sgafgfdv
ggfffssds
gfsfdfdgsx
startupInfo
pSdkddmAI
raciSejd
fbmAgg
dffggdf
gdfggdffh
hdffhhdfhdggfhdfdfhdfhdasffffkdf
assemblyFullName
CreateMemberRefsDelegates
typeID
CreateGetStringDelegate
ownerType
ResolveEventArgs
MoveFileEx
kernel32
codeLengths
pending
minCodes
maxLength
buffer
IsWebApplication
AvailableBits
AvailableBytes
IsNeedingInput
TotalOut
IsFinished
BitCount
IsFlushed
UnverifiableCodeAttribute
System.Security
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
RuntimeCompatibilityAttribute
AssemblyFileVersionAttribute
SuppressIldasmAttribute
AttributeUsageAttribute
AttributeTargets
CompilerGeneratedAttribute
{f20406e1-40dc-425a-a152-8d8efd341e99}
{22bb9b9a-9207-4cda-b051-7aa63c40ef8e}
RuntimeEnvironment
GetRuntimeDirectory
Combine
AssemblyName
AppDomain
DefineDynamicAssembly
AssemblyBuilder
System.Reflection.Emit
AssemblyBuilderAccess
DefineDynamicModule
ModuleBuilder
DefineType
TypeBuilder
TypeAttributes
GetMethod
MethodInfo
MethodBase
GetParameters
Func`2
System.Core
Enumerable
System.Linq
Select
ToArray
get_ReturnType
DefinePInvokeMethod
MethodBuilder
MethodAttributes
CallingConventions
CallingConvention
CharSet
GetMethodImplementationFlags
MethodImplAttributes
SetImplementationFlags
CreateType
Delegate
CreateDelegate
get_CurrentDomain
get_ParameterType
ToLower
Process
System.Diagnostics
GetCurrentProcess
get_MainModule
ProcessModule
get_ModuleName
op_Inequality
StartsWith
Substring
ResolveTypeHandle
GetFields
FieldInfo
BindingFlags
MemberInfo
ResolveMethodHandle
RuntimeMethodHandle
GetMethodFromHandle
get_IsStatic
get_FieldType
DynamicMethod
GetILGenerator
ILGenerator
OpCodes
Ldarg_0
OpCode
Ldarg_1
Ldarg_2
Ldarg_3
Ldarg_S
Tailcall
Callvirt
SetValue
Exception
GetModules
Module
get_ModuleHandle
RuntimeHelpers
InitializeArray
RuntimeFieldHandle
get_Module
GetMethods
Ldc_I4
get_MetadataToken
ResolveEventHandler
add_ResourceResolve
GetManifestResourceNames
Monitor
System.Threading
StackFrame
StackTrace
GetFrames
TryGetValue
CreateEncryptor
DESCryptoServiceProvider
GetName
GetPublicKey
ReadByte
InvalidOperationException
ToBase64String
IndexOf
ContainsKey
get_Item
GetTempPath
CreateDirectory
DirectoryInfo
OpenWrite
FileStream
LoadFile
set_Item
FileLoadException
BadImageFormatException
FormatException
get_Position
GetCallingAssembly
DateTime
get_Now
get_Year
get_Month
get_Day
get_Hour
get_Minute
get_Second
UInt32
SeekOrigin
set_Position
get_Message
MD5CryptoServiceProvider
RijndaelManaged
WriteByte
ArgumentOutOfRangeException
add_AssemblyResolve
WrapNonExceptionThrows
6.9.0.114
"Powered by SmartAssembly 6.9.0.114
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
s$mXv;
DtkZLZ
)N8hZo
qKH/_S
a'Adx;f5N
ovuQtx
K+*<R"
1<)C8#
D/@NvV
g}9m|O
&9=Yn>
C{/byo
U&+,EH
TP<Rm`
Rl'~`7
C_`s5'
Iv@/l$
?AzE/
gWV-nof|
?6ef-$(
5X/oaH
jp|!5e
QVZ':Q+
(lbMtU
8l<x"/
\>XSGT
rn'_`L
W1?O=X:
kLw?;d
vWV$Vy1
7:QK:'W[
F}kIOK
:E0[`ey
-!\6#<
}QT<(v
=U|c[D\NN
~}Mw+I
:UfaF>
$dza!`Ag
lus=1C
wrYL9{Vt
efs"i7?
?q8-Kq
=|;suWb
qQb2PRm
y"3}3'@
n245,j
Ope[;F
\aW]i)k
x@@G>K]y
r;c~=|
F/n$-8
k3$Zm3\I|g
^`2c21
'dULu[
LD'Ox1k
,k@Bg?U[
yqYFGu
>dRkq!h
QObJp\X
4W*pzb
0-RQO[r
M\Wr*}
~*5y~<
s{;AoRG
T&CD%:T
><$=m_
d-B-Wrx
~JJ}g{4
JU-+m $d0
axt~%s
o.52@9
^nCb+*
$\J9U U
@d1`.x2
~`5d{<R
Q`K&N|
(CHnH
`F='SQV\
LKj9,D
>'i~3'
Rp<ss&
p^ep;2\
v|/PpvM
\wqDQX
iSh;SI
mp/_z-
y}5|uV3
Sy@Md{
ta7xf3
]KgAEI
EM_JHSM
Y8d`c]
H6Z8&iG
(]8-l`
_ApQF"
OJsf,^[Q
cIrFQ#+\
ZOstq(_i
!"YCv;
V~p8'iCap7E
g-`l"s
kk>mnK-,$
oRPe)W^
jE{xsn
<"zuT
4,Ek.5
|[ xV+
?fxeqYl
\*C`!'X
h2;0]L~>
\@[;cFk
2`AdvL
X&j8d
V%xnfX>
=$kNd}
w0Mqln
&\h`_I
1FXiA`
cfPI)6+
Xs7hv
Z7A{<1
=17neb
Q<:6SvI=[p"
OQZz$RM
peq?(V
r/b}.G
<,E63)h
\a9{Ek
t"Qu@YI
4~B8iE
o*)Oa
0,m@W|M
.6c>E
6.$h[-
m 8{5h
N]1%*p
lKds@i)
Z9Or0x
-e4ohF^
NYx>LC
XM8 k'?I
h R*])
@\X&.>
JtZ9{f0
ymXLf8w
43\a4
:`d&Pw
Ax*s[x)m
Jl3SN&
bw8P
B2W+U
LnQ6act}
U4)J9T
~#ao,x
q*4n=0(
D[A+i?
l~`s9U
f(u&bjz
p2l7-fqU{
N 6=+6
;h+Fa4'
rW#[Avz
,IYOZ|S
cS)R:9Q
-@7yZa7}
}FkeA:=
^x_!qv
67_iHY
jPhJ3Z+}
W'I1v
oo<5r`
m^oE`c
r_xg"Um!
b-"E.~
DbzQ;;
2RAh.)
S%?@ez\
U1ycr6
XxBYG)
RFZ+J%F
tHK5Wm
h2hgyg
xzr<B;
E@~JBtwz
9%=8x%
c*!bo@
[<G.on
Q)*yH'
Y[UX*1
.XtK++
0moOk=x
p^l(JW*.
1rs&]Yp
UH2;Fr7u
WS +\6Y
Kj|f0\
y5 X1JV
&tPEY(O
T$/-R3
0[J+4vZ
$.nD]J
!! Wnc
Du{W/i9
=idH=8A
|CckC:
&ye*yb
t;UbO9
DZn9ba
Q};cvU
4>tYyz
/y/+Hc
AD/dFE-
~zt#>i*
!m,Ynq
zZe!mY
?]GZX3
'4?W4z
GLBO
v{&Q;Q
`5Jz-+(D
Xa|b/.s
}{y`:\nO
(4fe4Wv
f!r,X/N}
!5zPpmQj
b36rBR
0ulDa4
(]@!dk
Go5;'/
Bw|kjm
Ga;80e
Y%$zX&
<:de-a
kM\OBdtc
'\ELf-
kE+[q1pe
}|6h"N
w5@kFkd
[@SH}
L;:'mL
1s Q$t~
H|i$k@
-S)0h_
N;Sjs*
m1;Y3$
x_>5Z5
RTAmmH
;^>(~k
`e<b/06
{~`^TJ
3\J{TR
Bb#t1}(
@`rw.
JnZQ2M
X+EG0W
MY8-*`
X6s*f6
Eadad/ y
D:DCI"
(U\P/8
{8`}If
6n1S+7
{qQWAB
@3Yv]f2
agkq5S
w,6?DE
X:#r\*
v@INNl
F,Ge!>h
iK/YqKS+-
cP[k>CtXN
Qgq3mq
VD0yuw
QV8>1y
ao2(w1
Z?D5UVn
m!u6L]
N/V>Q:g
HWX^0;
uPB9}j
Th=db>:
j.*S.
u/ofX(
c>4$~|>
?C%$E&
?1v(ke
}lz{0D
`>95jD
Ir88aW
5|o@*hG
@{]L;n~
O@jy%^
NwXX$AP
C)Im(kg
'<rGD=
N60%p
f*hhHJ
aSj%Ysa;
froFC^
msvcTq
ht@ 8A
]^BURFy;G#
<adSr'
vNfgaT
r,@kB%`
U9j9^d
\A)J\d]I
Kgz;>*]
Z)@:PKnx;
4FA4_H
BWX(U}
dRm('>
]O<@u[
Oj^aA 1
O,/Gab%
e[<OOv8f
1L*a U
~?;uAt
&#_<f7
G9^QIt
PUKPK-
(ym/{.
l9ZqiF
C}H{hGqT
YZ[I*1
r<"qNH
#Gsw:(
7(X^JVm]
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="x86" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS></application></compatibility></assembly>
0p1+0)
"Copyright (c) 1997 Microsoft Corp.1
Microsoft Corporation1!0
Microsoft Root Authority0
970110070000Z
201231070000Z0p1+0)
"Copyright (c) 1997 Microsoft Corp.1
Microsoft Corporation1!0
Microsoft Root Authority0
r0p1+0)
"Copyright (c) 1997 Microsoft Corp.1
Microsoft Corporation1!0
Microsoft Root Authority
0p1+0)
"Copyright (c) 1997 Microsoft Corp.1
Microsoft Corporation1!0
Microsoft Root Authority0
970110070000Z
201231070000Z0p1+0)
"Copyright (c) 1997 Microsoft Corp.1
Microsoft Corporation1!0
Microsoft Root Authority0
r0p1+0)
"Copyright (c) 1997 Microsoft Corp.1
Microsoft Corporation1!0
Microsoft Root Authority
0p1+0)
"Copyright (c) 1997 Microsoft Corp.1
Microsoft Corporation1!0
Microsoft Root Authority0
070822223102Z
120825070000Z0y1
Washington1
Redmond1
Microsoft Corporation1#0!
Microsoft Code Signing PCA0
Il/$>e
r0p1+0)
"Copyright (c) 1997 Microsoft Corp.1
Microsoft Corporation1!0
Microsoft Root Authority
Washington1
Redmond1
Microsoft Corporation1#0!
Microsoft Code Signing PCA0
070823002313Z
090223003313Z0t1
Washington1
Redmond1
Microsoft Corporation1
Microsoft Corporation0
3http://crl.microsoft.com/pki/crl/products/CSPCA.crl0H
,http://www.microsoft.com/pki/certs/CSPCA.crt0
Washington1
Redmond1
Microsoft Corporation1#0!
Microsoft Timestamping PCA0
060916015300Z
110916020300Z0
Washington1
Redmond1
Microsoft Corporation1'0%
nCipher DSE ESN:D8A9-CFCC-579C1'0%
Microsoft Timestamping Service0
3http://crl.microsoft.com/pki/crl/products/tspca.crl0H
,http://www.microsoft.com/pki/certs/tspca.crt0
Washington1
Redmond1
Microsoft Corporation1#0!
Microsoft Timestamping PCA0
060916015300Z
110916020300Z0
Washington1
Redmond1
Microsoft Corporation1'0%
nCipher DSE ESN:D8A9-CFCC-579C1'0%
Microsoft Timestamping Service0
3http://crl.microsoft.com/pki/crl/products/tspca.crl0H
,http://www.microsoft.com/pki/certs/tspca.crt0
0p1+0)
"Copyright (c) 1997 Microsoft Corp.1
Microsoft Corporation1!0
Microsoft Root Authority0
060916010447Z
190915070000Z0y1
Washington1
Redmond1
Microsoft Corporation1#0!
Microsoft Timestamping PCA0
ipfx'f
N+"\hE
r0p1+0)
"Copyright (c) 1997 Microsoft Corp.1
Microsoft Corporation1!0
Microsoft Root Authority
Washington1
Redmond1
Microsoft Corporation1#0!
Microsoft Code Signing PCA
http://microsoft.com0
Kr/.czU
_7UAu@mI
Washington1
Redmond1
Microsoft Corporation1#0!
Microsoft Timestamping PCA
080730073554Z0#
<;HGQPRPSPTPUPVPWPXWYPZP[P]\^\_\`\a\b\
w3wp.exe
aspnet_wp.exe
, Version=
, Culture=
neutral
, PublicKeyToken=
Version=
Culture=
PublicKeyToken=
{807d8e5a-2e7e-4736-9bd2-353b86afe601}, PublicKeyToken=3e56350693f7355e
{22bb9b9a-9207-4cda-b051-7aa63c40ef8e}
ezgwN2Q4ZTVhLTJlN2UtNDczNi05YmQyLTM1M2I4NmFmZTYwMX0sIEN1bHR1cmU9bmV1dHJhbCwgUHVibGljS2V5VG9rZW49M2U1NjM1MDY5M2Y3MzU1ZQ==,[z]{f20406e1-40dc-425a-a152-8d8efd341e99},ezgwN2Q4ZTVhLTJlN2UtNDczNi05YmQyLTM1M2I4NmFmZTYwMX0=,[z]{f20406e1-40dc-425a-a152-8d8efd341e99}
{0}{1}\
Wrong Header Signature
Unknown Header
{data}
ERR 2003:
{71461f04-2faa-4bb9-a0dd-28a79101b599}
VS_VERSION_INFO
StringFileInfo
040904b0
CompanyName
Figma, Inc.
FileDescription
FileVersion
116.11.1
InternalName
LegalCopyright
Copyright (C) 2015 GitHub, Inc. All rights reserved.
OriginalFilename
Figma.exe
ProductName
ProductVersion
116.11.1
SquirrelAwareVersion
VarFileInfo
Translation
<<<Obsolete>>
dotnetfx35.ex
No antivirus signatures available.
No IRMA results available.