Static | ZeroBOX

PE Compile Time

2056-08-28 16:25:27

PDB Path

C:\Users\clubpc5\Documents\HeaderFinder\HeaderFinder\HeaderFinder\obj\Debug\HeaderFinder.pdb

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00088e74 0x00089000 7.98804193081
.rsrc 0x0008c000 0x000005cc 0x00000600 4.10715604753
.reloc 0x0008e000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x0008c090 0x0000033c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x0008c3dc 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
Q#y:oJ~
Zv9VBS
7Jtoef
w(.q0.
@b*J0Y
z!+ws)8v
\Q~>K4
*X0h>^wt
Pz(7'7
W<t~Fm
-@(y8K(
`6J\6E
e;wAut
1'o;^7
b?z7bv!
GX=@'b
-]fEmoZ!
M~t+F7Kt
y^"y^*y^&y^
Rq($vsgL
bO&Zlf
?i0,'P
"Hjcx<I
Aag`PH
"hg@PJg:
8?AS\T
`k`onw
N4\x A
G;;KpJJI
AlG{XF
M+:\C
>+|>(4?
x{Tx{\x{Lx
0MFsg2
0V)z_"
d4|V%'
0MFsg3
N8o_NE
oK5i/cCp
?3s^Z yj0i
8M3=DT+
J%;%kk
t2x%cZ
:!7j19
<>!<~Cx
b|$ko_o
A`hf,5
2x5nxq4?
f%BG%B
"3en_
5w&T;~
Ob3OFI
=r/Rf1S5f
|<*/r&r
s'841@
)f:3 q
/.r{-0rWq
* K7=T
_iB~dz
Y>~V0S
;@8PGi
LfqZ=wW
]Q{/9{
3MFsOa
Z#m5VF
lk(nZN0i
11;5wA8
BP?Rb?
{F&cr*
y]p9`.
tp@E(&
xZt/:M
:`6WkgB
N0il[l
5m8yW=
][Kc&o8
mFQ$bmX4%W
I%y^8`
\`gj!!
Y\C*LJ
;JzOsI
Ss}{'[
i?=cPQ
kAy@d6
ddWk(q
7{_@q~
7_\|sp
;%XsuJ
RdM)FS
W/Yx2p
0jSjMC7
JWKh9k
=fQyi_|
Q2F[p[}
lxM$B
pCNaq&
#VPvXg
v/4!7 R
c4/z*-
&_b 1lK&
.k+e,/
)Mb"gW
S<)[R&:
]G'&i2
v|W;vi
h6;<k&t
H7-XY$3
npl^78
QRT9)E
($BVHxY'
UV"aYM
./$i'?
?|eah/b
uDe[za-D.`
&H,sR(
`RK{-B
^Al\4t
?Z/iur$
K]);r1f
vm,kTC
*%\JTW8?
xWzbpL
A0P4}l-Z
xUaLsG
XW*2R
1gD{8+
W9b"8ZnDb
:Lt""9iS
pPv8ht
Hx_K${M
%"|&x/
_kX?o*
i9e+_jh
f2>>h:
9U(0vA
+Rl+Rl
$$A4b.cc
sY[x>+
0KY[NJ
Jf]naX
(\;lO+
ioY|zX
qj!M`H(
,X}OCY
b.{\o$%M
rijG/9
UQS[!}ay
>w`U(V4
Rt]7"S
@ nsCd
l \jnE
\b#$!X
kC$skV
}.y|3by{~
;<^#1m=^
-dFY/B)
hHI<RP
)"|F[:7DM'u?H
Y'b&VP
I]F7ii
Sc<=r $
N{+N=
EJNOJ=*
AzD-+s&
6Cm0ok
ku%t:X
st1|v&
M#H#TI|4*
l6gf.p*
~EyL=pJWxlJ-4
rq{%K{
mznyY+
p\2PrB.S
~@FZ/9
k(<$Aw
m{tMsa
@/k2`eO
{S{`^'
snH$\%
5(k0$QX
Dt7uM9
UWkbm"z
E)MQ*'>
Kl; KcCK
v'aMqD
5oEkE2
iggmme
%Rtl~k
++46uX
4|bZqO-
k(dzO+
JDKMI
'kUFfxe|
56}hNmP
mC.R4v
Xf(w{#P
X&!E=W
Fjr,>M=8
mS3l3d
uv_F8R
Hz\Gb}
L4#,QrmQ
{3FD8B|d
"hz#c$X
&q).{8
*MXXC]g
S714!&
p{&SP=h
./=b://A0g
C2?FsS
6|MYKq
:e]O9)
Mg2Zs&e
#3w88K
(gs!55
MT>|N`
(wgA_.MS
%kTH,~
R:SXb+Y
hNITrs\h
L5>$Z)]C
~1C`t_
OZHODr%r
T'hscA
kw 2_"?h
cnW" #
z3DJ%?
d.EdJc
3P\BpBp
HHHN\H
wwwhq)
V*oif1
oWN@'.
0xXyz~
]6RjNhn
5?>Om"
oVD%?@
Z~+T=)
?_{K~
$NO']/
OnE$g,W
:;8$4A8w
Z.9I,78
GEcfZ_
{Drsey
pOej4q
Lt5Ni
YLu3qtdq
%yDt'-
YG(giM
^qS,/L<*.
<5(|'<7~5
2MO|o-1
5i3t}3q
xhOC~e
o9@v 
!AvfIR
mRHDEG
dG{`<o`
^|>jD=p\
JMd8CW
bPTUeQc
GUSNX
*c-^+=
dx^6U
.$IyLx
gUHSj#
W_:~VR
bx?`Cl/
{\{"IO
j(r}^^~
K-C8.~
8_G^W\
KP9Z6
VWy6N:
Gxzr1}
g[\0_\
y]Ch?`
i{`d5
i{h\
j#ho=x{h
D{yaD
OcC/Q=
2,^b/?
r7Cp&;
~mQq>;3[!
u_noFVe
ceu2wv
O7su7Z>
GfWd8?
XoBo?j
V} ~xz^
>ztz}=
'kyi;]^
8_6qw]`^
UWH4E8
CtH\i\(b
kI_Gix
et\NG>
^kDP?~
CdzKzd?
M9~]3v
|I^wLX
i?vR:
<j}}AR.
B;]c_C
3O]c|@
qIr?:
<^lF;,F
eUHOU8
Nt)\&>Px
'gs:3
0z.@9A
d>Y8J}
&COs}|
wXoz?}!}
~:H/*+
E|~2u1
)~f~2
x>H/~gy
<O:cy}1
IC-^O:
IC]^O:
oidieqZ
j1YKX+Z
ofac
3Ek9[d
Y;TQ_7
!r^_s9
E6R.A5qY
o@5qS<
>(fis"
C{YF@{[
z^o=(>iZ
z\-hV\
Y%kC?)Y
8InB\JnA\J
F\I^B\I^A\Y
q#Yq#
i>`>a>g
w~5<?wos
PdF1`5
9;Lgn=
Q]{i\HPPI45
fj,+;u[
@\n46j
Go5GIj_
^]mVa8
Yoo6ap
gpfAc~
D@]y<%
jzFjTyAR
f2rI[c
qj`XGJ
F}:V7@c
<W26,Jg
qb*yjo
)^%bGrf4[
xB`ws8b.5
oPHidH
W$])=M
P'u)zB
'3Wk(q
bqn^5fuNC:
7))_]rF
.O`+:H;
P`o?@,
7cV9bu
vUh/$>
:Yf)rN)
2KfQ,G633
>T%h}0
1atKaL8S#D1
fqf(R\
q0^1y7
#C(g2d<
.djN'dr
L"`EcvqE
9#W@Ny
='B8*r}B
C23]&O{
S2*4RvIj
SY&2:4
ri//Jy
%9nSi3=*
.CQ9o8
XR)Q*Z,
BQ5TWV
L-C^w?
0r,+@+H
*f^8\W
Ce~Q5}H
!wJ4`s
b3$Hqp
MdT5J5
[DEGFU/
LfFGQr
P!G6z4
N^n*^
Kd<|A+I
U65[)I
lJJuuR
<{%SC|
ES_f}q:
'hn=*Xv
#hD@2_
lT%@xK
)8X}*e;0
:]dD-?
cghLl&Z
,eS>)Lz
8_j1yJC
R>R|-.A
$N!>41
Emjmmj
H6jn9m
Nd:Me>HM
I!T<alqH
VV.^e;
St&1;M
|}~n*Zn
9u2=9-
3Q@F\&Tp
`T`Tal
j5Q)):
%1<68V
QVAeOy
D:]m-F
ym)hKQ[lm
P2^)NQR
dUTzGi
AV>+f"
~^A8VhI
0>N,hq
( |Oy,
WTKQx,.
\huBk6
If//0"
|(R9(d
Ua;DX<
cpeyNc6A[
MY._4\
GFwl_=Jp
|&*a20
b1yB.K$
(Ur\!"
jM6.+"
P)L4NF
JT^ #4&
,xkn}```
&p70h5
r{Aa@_
Go_':2O
`al>pd
]k/{<9
Relx3b
&uO?q:
v`UCau
G#uS/@!
A&!BtK!
OWVe`ZZ
`6gvgggggf
mTabKg
^VCiw|=
D21"+I
48#S@f@!*
,&%M`t
^WBua
GJxb~f
5QxR?hh2G
J!e|!S
b#Y5E-
$'Gg'gg
jnphe}
BE!!-R\7
4DDN@
f2c"CX
o$d/ "I|Z]
_SZhPH
H29C$L
I&zy3z
36<CG?
9QHo[7
g7\y3l
/3{OKl
(TNRDOt&
&"Fu3`
T&m(Vs~
co9;N*
[Emg-l
wDzvF#xC
e.3Wk'm
E>*Z:Z
3I[%N=LI
26`Qyl
Fh6B#j-6
L)A:G%
A;6Tb)tK
|+.jKc
t"v`|3v:
{H@{YI
%yriFB
2@Nc)5
|Y`njj
9i2(Lrv
U9i9y9*
QBd."S
#F4kV3A
nliH mB
Q>b/_/
"HBufs
D]KdM\
9*C#Z
/^={zk
GjGnuXU
AtZP;2?mC2y(Vh
yqmKQsa
^uGsVI
VBQtlu
GE}L?
+)62|G
LXrVI%
HU2vi<
m8<O<Lt
rQ71).sJ
nHV^yV:
x|<$P)
6'BHM
U@QBe
),DEd"*"
*bDiUi6+
shXt+l
rrQ|eZ
4,tY|Zv
#{f$j
l3_!#>
p:v1tMxG
LY]sz{
R,"\AE
9@ju's
hT`j[ME
^J$/%2+
j{6A@-%
PIsIpDsi
h"]l!EG0lq<
'u<N8h
w2'L-9
m;&E0}e
fwmvW9
bF1uM{?
DLJURU
>=?+9eOY
X?X4;jP
]J"_\q
<9eAi;Zgg7
o#.N{~h
Pvy}jC
+6kO4x
+g5*Z,
-=&?R\
QmCkH5
;@)8 c
/R1:o5
CKYZa
Be9R:T
O[#g9SL
E*fM*4
eK^vT^Y
"uVwHk
_@>@5
gtt*EO
(ZWG7R
-e=>u+b)
O/8FO3
]?tH_4\
YBt2.:i
@2U@*@1
1&/bL^
/mLm`G
"8LGid
HBx-~;!
?LRM]r
$^BrK
5 ^S@M
Q"]$DW{
:B'uX"
U^Fo"9
QlFO:/
zr=D:=
5E<]SDm
7D\+V'
7R`{Cmo`
^Ff`Y9
]0PsA
yXoJz8
u0'tFb}
_F>DF~
y[dC^d
J_7d_74fi
7DQ+Ni
->El!Gl+\
SFl+Gl
I_a_1
c)ZD}%>
J,JO![<5+y
6I?D0y
K5'|Ny
s;1:di
@W+k=:
QydmXU
ni@2d
UFdw5'9
_@vhL2
*M}.DI
/!/wx#
%d<d`Y
G:#4O~-
i$''\Vmh7
"$?o^:
R3CJuJ
K?os?2
{0flj~
BG+*tF
M_}oa@
,Y6FgRV
2O)pXy*
4kGJsA
J!&mv
5Xd)Xj
];I!mR
ri;H?j
H#mzf8(M
{nHsU}
5EJ(Wf
'qfmCT
MK~S*l
%onqaZ
LI ~?d)J
_5D^
ecE-]q
XQKW\'V
6 ~L>B
>fbzdk]
h9LU2V
9Q2^.~
1hilW7
`4-~Od0
A9G=t
_1Eyi)
l}%VHMe
V VO#%
\ VOSe
+Wm%=Y
Fwlt=H
x+oK4oq
{}r_47
7~L\Gv
5u_Nca
+sWU_~
mM.eG55);
R'$u~6%D
VB_F_A_
BFA
":?:?
Oxs">x~x
UB_F_i
N;q/u|R
]B_F_A_
xEx%xe
2X!_%o
/J>N<A<I<E<
tEt%xe
2X%_%oLd
LR'I>E<
O<H<H<D<
Gn&s>x
u<"7_r
jv?Zqo
WZ5;O
?&7;p^;p^p
'<o?a\p
_-+,3|
ldV1mf
d}79U{:
sqn-gvnmgnn
:N~Kg
[2{l*]~hR?5==
mI}y:On
]{+MHz
csecN9f
poU=]j
SUwI5k
< |Bk<
& |Bk=
-x,N-X
| ,pro
6 lor%p
d{$p[{4p
^hj4pHj,$C
>4v:YO
tnA~s6+W
:~&dvL
G8zpTq
RIw;+r
\UrawD
Wf6wQ5
y$B=PP
D$0CD"
FjHp$[{o
x%)zqx
r%|gs=
+f5+pQoZ
ShIME%J#
.:B{9]
gk/6Wa
rm;m%+
A6#j3P
dNd%X
SBJkR>4
>I`r:p
=(d?. tg
90`=s9"
Dxk;9RaP
/$FA|{
ZHz5.&
V$%R%9R$
:~[.S}r]G
R3'GZ'
\%MUIS
Z~ m5`un
%r!EK$
&v8BQ}
mSf#1^
caW4g
MUb*Rw
r^9j^9j^9
YQ|V<>+
mizIip
RB9^|?
~W'5X[
-J"XG`
sZnVLBNnI6
!|(r81
x"Q"iK
SFYr$K
#]*b2j
l:<3Y(
O=>V=A
yS!Psr9
8BSqGy
A^LAyZ
'Ynj=S
"'j&9O3
']lW{Nf%
5sv+?rQ
VZP^UK
dp&8\
~V-0W{
OM+MAK
zVc{K}
RC\Q4T
(PeG{>P
M}T rP
jm8~kf
/8/XX3
shysi{
MToqJn
%_/N1{
K^9;>^
oCu[z|
a{O1j_
x?Ai
GL]DOQ
"tWYd/
eIK5En
~g}W?_
+[(z=h
c;7s(w
&n s&SW
=.E\{0
N1iAka
Pq[C`t
pFh`E|
|]JnS6l
c?lO^["AqY
Mn#?,n&X
okv~.c
XiU),h
^,<bqs
X+WV*c
)Ey|g4
\r%1|o5A5
x,qSMC
)x/#LVk
7Wii^[9}
TcXeuk
\') ji=
>L%0jpL
gkP^9~
?,~"jau
tm/.F4
HL$uVt!
QNBh>Fe
1A9(x30
&1|)C0
XNhv58
X?GakM
!4|5k
~YsMLun
G/doQV
T;3GNcA:a
}ES1H(4P
e)n_}v}
UNIx*U
P(d@Vf.
s3{]g8
^jT~5~R_
i!keE:
*!RCT*H$
(YV2DKI
X"DPel-
VU^__l
])_~\l
'|/bO=I
{0V.E+
tj`h/d
GT+@X
;zd++o|
3uZxNw
0E.|3.
{bM/GO
D?Y,:fH(
oU [hr
/&W?k|
7o&j.B
\3'%9_qNx
mR/[I?N
i1`Q|\a
mQlpvt
*s^E9i
yUcG[P
od&H;HC
'#e/Xc4A
*E[HX|
$$q3F
dt-5xA
SGzT,&
aVf#~F
}n;|;+D
`@zKvm
y-Gn/1
h;BwNW]tN
xQ7GCG
iLNPpN
Tg;R;S
}h Mlb3(
$}\Uso
*ybjZ3
R]NAbB0
vj(AJI
@1C1A1BQBQ@
5QqI&5I
p4pscKU
b}_dZW_
?8ES[{
:]rMi)H
K.3W\^*.
][nxD@
=K!4|?
3#`|9@
cRy5:v
|7cr5cr
?]&s5:M
R4i7TJ
BMuAh$
o+Ax% W
5u7Rx%
X>Hcgi
K8z0EX
D_KO&H
z-SS!m
[+owkN
a}:.z5
costura.costura.dll.compressed|5.7.0.0|Costura, Version=5.7.0.0, Culture=neutral, PublicKeyToken=null|Costura.dll|F1F25C01F6ACF33BDD62C4F82D3EF078E76F0906|4608
costura.costura.pdb.compressed|||Costura.pdb|6C6000A5EAF8579850AB82A89BD6268776EB51AD|2608
costura.newtonsoft.json.dll.compressed|13.0.0.0|Newtonsoft.Json, Version=13.0.0.0, Culture=neutral, PublicKeyToken=30ad4fe6b2a6aeed|Newtonsoft.Json.dll|7D0AD03FBDA1C24F883116B940717E596073AE96|701992
costura.system.componentmodel.annotations.dll.compressed|4.2.1.0|System.ComponentModel.Annotations, Version=4.2.1.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a|System.ComponentModel.Annotations.dll|CEACBD53B6A02E1F7337A6B0058924E1E11949BB|43152
costura.system.diagnostics.diagnosticsource.dll.compressed|4.0.1.0|System.Diagnostics.DiagnosticSource, Version=4.0.1.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51|System.Diagnostics.DiagnosticSource.dll|85DC92EDD4B0049ED9049E075C4DEF8A3D64E43B|35760
costura.system.runtime.compilerservices.unsafe.dll.compressed|4.0.4.1|System.Runtime.CompilerServices.Unsafe, Version=4.0.4.1, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a|System.Runtime.CompilerServices.Unsafe.dll|2D68C648A6A6371B6046E6C3AF09128230E0AD32|16768
costura.system.threading.tasks.extensions.dll.compressed|4.2.0.1|System.Threading.Tasks.Extensions, Version=4.2.0.1, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51|System.Threading.Tasks.Extensions.dll|2242627282F9E07E37B274EA36FAC2D3CD9C9110|25984
costura.telegram.bot.dll.compressed|19.0.0.0|Telegram.Bot, Version=19.0.0.0, Culture=neutral, PublicKeyToken=null|Telegram.Bot.dll|2731C5006EEE31455C98B2DD2CCD8217F5333FFD|387584
costura.telegram.bot.pdb.compressed|||Telegram.Bot.pdb|A73775ABC5657D5211A200516792EC8F15275F35|174208
v4.0.30319
#Strings
List`1
User32
Dictionary`2
<Module>
System.IO
Costura
costura.metadata
mscorlib
System.Collections.Generic
get_Id
dwThreadId
chatId
ProcessThread
isAttached
Interlocked
costura.costura.pdb.compressed
costura.telegram.bot.pdb.compressed
costura.costura.dll.compressed
costura.system.diagnostics.diagnosticsource.dll.compressed
costura.system.runtime.compilerservices.unsafe.dll.compressed
costura.newtonsoft.json.dll.compressed
costura.system.threading.tasks.extensions.dll.compressed
costura.system.componentmodel.annotations.dll.compressed
costura.telegram.bot.dll.compressed
method
source
CompressionMode
SendMessage
message
Exchange
nullCache
EndInvoke
BeginInvoke
IDisposable
get_MainWindowHandle
windowHandle
get_Name
fullName
lpClassName
GetClassName
_className
GetName
GetProcessesByName
requestedAssemblyName
culture
ReadOnlyCollectionBase
Dispose
EnumThreadDelegate
MulticastDelegate
CompilerGeneratedAttribute
GuidAttribute
DebuggableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
AssemblyFileVersionAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
TryGetValue
add_AssemblyResolve
HeaderFinder.exe
System.Threading
System.Runtime.Versioning
DownloadString
CultureToString
Attach
get_Length
GetWindowTextLength
EndsWith
AsyncCallback
EnumThreadCallback
callback
StartCheck
nullCacheLock
CompareOrdinal
System.Security.Principal
user32.dll
ReadStream
LoadStream
GetManifestResourceStream
DeflateStream
MemoryStream
stream
lParam
Program
set_Item
System
AppDomain
get_CurrentDomain
FodyVersion
System.IO.Compression
destination
System.Globalization
System.Reflection
ProcessThreadCollection
set_Position
StringComparison
CopyTo
get_CultureInfo
AssemblyLoader
StringBuilder
stringBuilder
sender
HeaderFinder
WindowsFinder
ResolveEventHandler
IEnumerator
GetEnumerator
.cctor
Monitor
IntPtr
System.Diagnostics
get_Threads
System.Runtime.InteropServices
System.Runtime.CompilerServices
ReadFromEmbeddedResources
DebuggingModes
GetAssemblies
resourceNames
symbolNames
assemblyNames
get_Flags
AssemblyNameFlags
ResolveEventArgs
Equals
System.Security.Claims
System.Collections
Process
process
EnumThreadWindows
Concat
Object
object
System.Net
IAsyncResult
apiResult
result
ToLowerInvariant
WebClient
Environment
get_Current
GetCurrent
nMaxCount
TelegramBot
windowList
MoveNext
System.Text
GetWindowText
HeaderFinder_ProcessedByFody
ContainsKey
ResolveAssembly
ReadExistingAssembly
GetExecutingAssembly
get_Capacity
op_Equality
op_Inequality
ClaimsIdentity
WindowsIdentity
IsNullOrEmpty
WrapNonExceptionThrows
HeaderFinder
Copyright
2024
$72581246-1a2c-4eb4-b911-64c11e62dc7f
1.0.0.0
.NETFramework,Version=v4.7.2
FrameworkDisplayName
.NET Framework 4.7.2
C:\Users\clubpc5\Documents\HeaderFinder\HeaderFinder\HeaderFinder\obj\Debug\HeaderFinder.pdb
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
https://api.telegram.org/bot
/sendMessage?chat_id=
&text=
6793674542:AAEjYnOydQhE7gLx39JbjSvx2sfABzhX3qM
726886014
Chrome_WidgetWin_1
chrome
PARI -
- Google Chrome
FON.BET
1994
- Google Chrome
BetBoom
! - Google Chrome
- Google Chrome
Winline.
! - Google Chrome
- Google Chrome
- melbet.ru - Google Chrome
CSGOPositive:
| CSGO, DOTA2, LOL, VALORANT |
csgopositive.com - Google Chrome
- Google Chrome
1win - Google Chrome
- Google Chrome
| Dragon Money - Google Chrome
Zooma Casino -
- Google Chrome
CSGO Market -
! - Google Chrome
Youngzsoft iCafeCloud admin - Google Chrome
- VAVADA Online Casino - Google Chrome
VAVADA Online Casino - Google Chrome
Gama Casino
. - Google Chrome
Gama - Google Chrome
Buy & Sell Bitcoin, Ether | Cryptocurrency Exchange | Bybit - Google Chrome
| Bybit - Google Chrome
- Google Chrome
- Google Chrome
MEXC |
MEXC - Google Chrome
| Binance - Google Chrome
.compressed
costura
costura.costura.dll.compressed
costura.costura.pdb.compressed
newtonsoft.json
costura.newtonsoft.json.dll.compressed
system.componentmodel.annotations
costura.system.componentmodel.annotations.dll.compressed
system.diagnostics.diagnosticsource
costura.system.diagnostics.diagnosticsource.dll.compressed
system.runtime.compilerservices.unsafe
costura.system.runtime.compilerservices.unsafe.dll.compressed
system.threading.tasks.extensions
costura.system.threading.tasks.extensions.dll.compressed
telegram.bot
costura.telegram.bot.dll.compressed
costura.telegram.bot.pdb.compressed
6.5.5.0
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
FileDescription
HeaderFinder
FileVersion
1.0.0.0
InternalName
HeaderFinder.exe
LegalCopyright
Copyright
2024
LegalTrademarks
OriginalFilename
HeaderFinder.exe
ProductName
HeaderFinder
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
Antivirus Signature
Bkav W32.AIDetectMalware.CS
Lionic Trojan.Win32.TelegramBot.4!c
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
Skyhigh BehavesLike.Win32.Generic.hc
ALYac Trojan.GenericKD.71742547
Cylance unsafe
Zillya Clean
Sangfor Trojan.Win32.Telegrambot.V7rm
K7AntiVirus Clean
Alibaba Clean
K7GW Clean
Cybereason malicious.804bf6
Baidu Clean
VirIT Clean
Paloalto Clean
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 a variant of MSIL/TelegramBot.G potentially unsafe
APEX Malicious
Avast Win32:Malware-gen
Cynet Clean
Kaspersky Clean
BitDefender Trojan.GenericKD.71742547
NANO-Antivirus Clean
ViRobot Trojan.Win.Z.Telegrambot.563712
MicroWorld-eScan Trojan.GenericKD.71742547
Tencent Clean
TACHYON Clean
Sophos Mal/Generic-S
F-Secure Clean
DrWeb Clean
VIPRE Trojan.GenericKD.71742547
TrendMicro Clean
Trapmine Clean
FireEye Trojan.GenericKD.71742547
Emsisoft Trojan.GenericKD.71742547 (B)
SentinelOne Static AI - Malicious PE
GData Trojan.GenericKD.71742547
Jiangmin Clean
Webroot Clean
Varist W32/MSIL_Agent.GWX.gen!Eldorado
Avira Clean
Antiy-AVL RiskWare/MSIL.TelegramBot
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Trojan.Generic.D446B453
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/Casdet!rfn
Google Detected
AhnLab-V3 Trojan/Win.Generic.C5415737
Acronis Clean
McAfee GenericRXVM-YH!5F3C52C804BF
MAX malware (ai score=83)
VBA32 Clean
Malwarebytes Malware.AI.985663552
Panda Clean
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002H06BM24
Rising PUA.TelegramBot!8.18C7D (CLOUD)
Yandex Clean
Ikarus Trojan.MSIL.PSW
MaxSecure Trojan.Malware.234999163.susgen
Fortinet Adware/TelegramBot
BitDefenderTheta Gen:NN.ZemsilF.36802.Im0@aO9UQSp
AVG Win32:Malware-gen
DeepInstinct MALICIOUS
CrowdStrike win/malicious_confidence_100% (W)
alibabacloud Trojan:MSIL/TelegramBot.G
No IRMA results available.