Static | ZeroBOX

PE Compile Time

2024-03-31 04:30:37

PDB Path

c:\tx2yxmt09kx\obj\Release\Croco.pdb

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0004aba4 0x0004ac00 7.99215221731
.rsrc 0x0004e000 0x0000063a 0x00000800 3.57209577037
.reloc 0x00050000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x0004e0a0 0x000003b0 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_MANIFEST 0x0004e450 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
p{{.J{{{{{{@
o{{{{{{{{{{{{{{{{{{{{{{{{{{
UKU*K*L$7)
{.J{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{
{{**{{
{{KKLKLKLKLLKLLLKLKLKLKKLKLLKLKLKLK{
1{1{1o1{1{1{1{
|{{1o3{k{{1o1{
7|{{1{1o
|{{1;3{K{{
;CZ9+
hr)me:u
0%`M6,
%!GtO<d
2=S3@h
S`f=b0
h[sJ@urF
T2JtN[
K9opns
@w)Q=}
f*N#^bM
bEuQ7m
q]5!A"S
/J!IxZ
e\|/qm
8xu^pY
lYH:GfxU
M?QfP;x'
;.fU`m
Xp"?x.
%>rsde
tnXqyB
_N,xM4
=INgK^}
L!:Os,
)M=2d!
kNP;d8
8B}Q#`%
iK7IwjU
WcO7on
hVg0IIN
,6w?i7
`w8u_o
3GeY`\
uX_:XY
ujG,"F4
VOE55h
3EZ'nV
nuucRV4
HroWI{
J$h=4U
IqdV e`
$!o*M{
vk/JO8
Qf-Tbho@
xEHa=z
h_,mM&
G@;0Gy
~J?r5g?d[
mM[mGo
D|OzH!s
V&>{j
|8\Rf[
C#*nQhZ!U
klfzH*
x~Ty6_
I$rZ*t
Mvw=x`
qd6hV-`
T}d,yD^
!|!i
>~,ok?
-WLd.M
[R4^*;
JVg5Cb
-M0:/Q
R&~gM{
`ICXq}
,%'Co%
kVm/-(
`+N82
Q_eaT5
Z:\l]Y
}7f<tgd
[#Y\90o
SD*t)7
`6Gt.+
taGaCna5gyD
dysne5
Cviu=T>"
cVL|l_
24b-`JK
x|Uwe1
Y{dZ~|4Q
MKH4]@e*
?:mKq
"vPlR+P
V{Os,f
7]&BA|7
@ur9D.q
M)9jjhD
hYyF-2
Zfr}n6
s\r>?f-d
{`hnH"
~Z0LOi!r
7[d(l,J.
>>!(%gz
Fc#QPM
"{Y~awK
#y7_SAJ
?{l'2DT
y|@x2|
zY$BXXj
5lR:b8<
0DJ;uqm^-
plml.<
Qn[+v(
du}Px=+
UXxAQY
f$j@+jh
k}0f5.
lF`Lz6
~${`w
f]usGV2%
A2h*4=T~S
[yw,Sk
h9JOzy
?$pI8O
.7mPfM
yOp~#&
DaN:dC
cbI)ys[C
$YBu\Q<
84ylz.
{?0bLE
[8jnHM2:
bg:Gv0
\xy3]6
tGq!|m
'SxExh
vxH?N&C*!K
OP:K0g
bwr[^x
A6v>?S
aJo/@VGiI
d;JQ3N
@V.xgv
|(t?ik
fxZtd[
QT=RCw
w%oXE
=FC%&.I
=#V~ Yh
]k>h=At`K"
29lIW\U
)2x'Q2S
w!^0;.
${8L'w
YfFKtM
Eoue)}
lp`}b&
,&3wE9z
cI^~w$
<Vj#j^/
AK"se)
MLMx~4[
D[U-y7
GC=hb0P
%@r"f-
4(IEt6
]vb7Bi
hHU|Oq
zAsC{f
FpycK
QGA_&+
\uka6PA
Vp,9F
W.z"xqk
Qr8(6n
94>0nqHJb=
GUIW^]~
l}1t|c&9
NBlScb
0Vow3QX
`$0B:fgk
:^=F+]4
e.cekF
wg<`^t
/|cJ:_
ZF|T},
wd'd>dB
>O 5'Q
jYt w!G
D0K^XP
%t8Hv/&|
Ju5`8`
sy;w~6
'RLf }9
a%!&<1
{V$c*Y
nK.oG6D
785w41
umdbH;
gM1Fyie?
="'HOh
":Sp/ab
C~ELq/
E%=tLz7
d6Wsf5o
)}$&oy
N^qI`d
g5t,dYZ
cOS!;Q+
h1UD%c
_5b~{U)
;:/<,5
I>@kZ\
n@UTpH
Xs%o p
yIK4w,
XZs@Q;*f
PR`{6+
ed? RZ
lwgoAO
sdHjl^5
/vc|/w
Qtx)eO
Cdzu"|
cxi%bA|
%mI;Kuz
N)O.~W
$3bMT}9t
~~|:5K%=Q
|n-+*l
u|u(Mk
2:1~2m
B85?\.
$Y<G/q
q/(/m!
}esq|%G
B.2[Km
(4[2t)
S@lko%OS
mm5?qG7
<Z`]f@
zZ;dgQtp(
NkaD2G
y=JY?!
)Qd!{F
\*>bghg.!
:^Mq[6KE
S) vDiN
jscn,C
Ck<Z@/
Q[@H9q
~ZRvh[
.}G@hgR
YR@4oU
B3UkM$
Xu)HKhJ
vU^N7m
a<;W\l
IY'@xC
N]f7*^
@P7bg[
\T$Ou7
9#%5#mk
e7RzBa6
_"2x&,|
kTtuTHCB
;wV368
cB%Hrn&
yzkp2x3
3W%K3Q
&'C\vZ,
(m/xrY
"p1M",
U>Ja Q
f\v{1Ji
CE>)E(t
M7OOkHv
khm_VG
EQ ^%0!
+Pvou
`(,VUbF
3g!:[|
S1W'5L]a
>X='4s
?,'B*[
=K7'N>
8eJ(u$5:
tCWgkiu4
::5B&<ilih
V?8NX;
|WOV|(K
y+^-WN
J0OR.A
Q3kYa0
L1Tu{X
xDXk4oa#
j*J-#Au
;.s6bK
0VoFxJA,
;"\j$sQ
~9rAt6
orDni9r
}DX\`-
c8IaMMK
V9BJ5N
A^t:be
[BQE^[
K~I;~z
r5<\aS
D]%Y)s
gq}T!S&
0ej=c
l[3bco;
2X=vRRpU
\Q&wi8
K}_Ckz/
]Ix>|W
hj`Tx;{
6o>NzwX
=7Z,qy
[:X~K?f`
LJqX4N
3DAi&KS
^?MDak`
9JS32<6
51eCf8
o\dd13
-FFNam
GEEMch
DxoQrl
(>UaTcUn
m= zg<Y_N
Cg"Q7b:
3Q'Mz
-j$k.#83
U_jC-(p
3'4!v7(
;;ZeYy
J~K#T.LH
nBzj`e
g[7e[$*7
)CgbJk
2zC6'(
8ts>k)BSM2m
V"iVG}
#TH#byX
C#O<=U
wfg92]AH
zZw 8o
u&$|En
d'hx@?
z94^;qb
L10M`
t>]"Sl(
VS!o,k
VT7h$(
nP@e{,I
eT^5qTH
kjDqzg
AaZDWC
'tFiU[
"y2`6U
QMpIH;XY1
ky['8]
6^}$#F
fjRJP|>/]
Ww:k(M
?F9p\>.
SZ[mcm
Ag|7>{
jO<Fn/
K{njye+
z{gT]Q
|w4ug/k[
%W-%\$k
5#-W1wUL
SdI,_-
|;"AE-
gO~T7T
zB_~Ir
OVHl?q
4ja'{6
\He`v
R[Mbrn4
(`35cN
~( sTZk
*UW<hww#
#p,V~/
H:sA:
X\"/&r
|K084s6
mz9P)1(*
6UeEC.
k9d,GJF
4.>KEK
Yk`8Z'
EGa;%1 AD
G">_tZ)
-N4JL>
nLW~" 0
MM72H{
]$WM7?
SgX>&1+
w%IqK*U
|$XIgk
uo"J6`
zM}&)+
]A3VS(=+f
mmgMs1
7^_yY^
H4Je4L
N}~&f\O
x&TmCR
j#W7Q2
j>W~o4
m-g7c7
d&}$x8
wZ$E#%^
5x`H3'
nW/6"lFX
!K6:am*v
iWg"6m
9pjq-.
<&mevD
kF0`Qj^T}]
TA'_=x 3
@J-GE''
BYO<Wd\/
LT1e5
8[H!WAZ
WPg_w[
=T&4Yfu
IcJ|:r>
b/8.Ff
>lec 8y
@0C&{n#@
lGVY[1
\suD9ky
UTM49G
&PO*TI
K]&NwHI
*v=r>.;W
8@\S|r
~O Mb5
B.?'+
"*{%1N
p0vSc7
i*#Hb
Ta^X@j
/:1D#T
#~ju_S&0
*bRC+H9
Lul}QFSk%
c4j3`
SkP#Vi>
:I-NNN;
a0Z<Q
A`oZN|
b;o:x
g.=9DD
cb4Gr$
u/@(#8
J/#c72
aT4r4>OF{
E3g[ #/Dq7
Y.5m5Qf
-UB}~_
1BD+Q#
3-9TYw
}F"_Ta
!H=Y|4
:%+`r5
~C"L`~
(}LA~%
*"`L.
wR{7c3
75-Zxt
ReGPS*j
H(T6g&m
67P<qx
7fwCTS
GzS$@@
-B0:H)
j8a+Mw
#F;6=\
f7xLUWw
>n6lf0
a<$3l_
'Y9u{6
,]$CAx
$.5t31z]
yuK)a9
jj||,I
X]gA3T
2{1G6E[C
Ks,T([
oI<&\u
;R-j3\
8U$2(5
w~GaAU
;qN-R
fo}OJp
BQg@~
L?*qM 
Fn{N_mg
#~jz(Y.
{7k)/f
=~yQQNj
3tH Hj
6*: ~F
1qdq<Kr7
LCN1G\
Zf"9_@
1)j-;/
2wBiKP
:E[nu3p
N#YAHly
t|BRS=Gs
i2mS4R]
`/E'Cb
mn}p+j
@%BB^.J
fC|"9e
C\1R)U
JhPj}R
w.Ep49
=V*B8K
H,{'A^
m&/ZYv
(%Mg'[
N/yoZF
RhcQn4+>
~l{F!3
\@Aj;J
^iKO"L5y
/|b9g2|W[\
!uG4eX
|'BE0Gc
/9=zC4:
Xy{7_F
q@5VBs
=e({Th_
W|B|@
'KnFnj
gz5{Ym
hwqgb'`
UC#=q1{
}'W"AcLu
`5gp,i
J->aTp
^T_A-8
bu+WTb
0?)-"
QO{Lk
w3Yqi7
0+I)Yl
w^7Os>]N/
]j\Karfj47
(5!dfm
fe;Vk,
=byj^@og2
4So*}3
#(rlKU
c;j]/X"yn
kMA$A
GJ$2zf
A2b!_8c
v4.0.30319
#Strings
<Module>
Croco.exe
dYuVXzkLLVWbcxpNkzwMQNycwFrMShzJDdw
MSG_NET
ZtrbobDfRVDVSYJDbiTjJYMtnApmznZIIGm
Correct
Program
Angelo
DgasyudguygiuxHIA
fJhisuAIUO
ThrSgtrjyt
VProtectEx
RemoteObjects
mscorlib
System
Object
MulticastDelegate
XcPUCXlXkRnyAdQ
SEpkIxkGeQJmaOu
SuperBook
GetRemains
EternanExplicit
GetProcAddress
GetModuleHandle
LearnProcessManager
ReturnSpecialList
Invoke
IAsyncResult
AsyncCallback
BeginInvoke
EndInvoke
userBuffer
target
dataBoost
xnbcoiAi
fwerdwef
gwserdeaww
AScsrhgtr
cmnzIAow
object
method
cbjxBAuiw
zokpcihUw
callback
result
cnxnUIAuwBuwwqq
sjinxnSCe
kmvoSnci
cniuABiuw
vpja2bx
kjcbkjiw
protectonType
oldProtect
System.Runtime.Versioning
TargetFrameworkAttribute
System.Reflection
AssemblyTitleAttribute
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
AssemblyCultureAttribute
System.Runtime.InteropServices
ComVisibleAttribute
GuidAttribute
AssemblyVersionAttribute
AssemblyFileVersionAttribute
System.Security.Permissions
SecurityPermissionAttribute
SecurityAction
System.Diagnostics
DebuggableAttribute
DebuggingModes
System.Runtime.CompilerServices
CompilationRelaxationsAttribute
RuntimeCompatibilityAttribute
System.Collections.Generic
List`1
ToArray
Convert
ToString
TryParse
get_Count
get_Item
SetValue
String
get_Length
GetValue
Exception
.cctor
rivateImplementationDetails>{71BEF145-2505-4EAC-B958-FB2D1C295846}
CompilerGeneratedAttribute
ValueType
__StaticArrayInitTypeSize=1196
$$method0x6000020-1
RuntimeHelpers
RuntimeFieldHandle
InitializeArray
DllImportAttribute
kernel32.dll
Concat
IntPtr
Marshal
GetDelegateForFunctionPointer
UnmanagedFunctionPointerAttribute
CallingConvention
__StaticArrayInitTypeSize=16
$$method0x6000021-1
__StaticArrayInitTypeSize=297472
$$method0x6000021-2
System.Security
UnverifiableCodeAttribute
.NETFramework,Version=v4.7.2
FrameworkDisplayName
Production Catches Collagis
Overchills
Copyright
2023
$d17b41c9-3955-4890-95b8-887aac006e01
1.0.0.3
WrapNonExceptionThrows
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
c:\tx2yxmt09kx\obj\Release\Croco.pdb
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
DigiCert Inc1
www.digicert.com1!0
DigiCert Trusted Root G40
210429000000Z
360428235959Z0i1
DigiCert, Inc.1A0?
8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA10
[K]taM?
SA|X=G
http://ocsp.digicert.com0A
5http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
2http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
jj@0HK4
DigiCert, Inc.1A0?
8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA10
221018000000Z
251015235959Z0
California1
Santa Clara1
NVIDIA Corporation1
NVIDIA Corporation0
L/I=Ht
Mhttp://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Mhttp://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0>
http://www.digicert.com/CPS0
http://ocsp.digicert.com0\
Phttp://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
DigiCert, Inc.1A0?
8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
;h0al\
20240207171407Z
DigiCert, Inc.1;09
2DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA0
230714000000Z
341013235959Z0H1
DigiCert, Inc.1 0
DigiCert Timestamp 20230
Ihttp://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
http://ocsp.digicert.com0X
Lhttp://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
l2|X/gGe
(f*^[0
DigiCert Inc1
www.digicert.com1!0
DigiCert Trusted Root G40
220323000000Z
370322235959Z0c1
DigiCert, Inc.1;09
2DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA0
http://ocsp.digicert.com0A
5http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
2http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
DigiCert Inc1
www.digicert.com1$0"
DigiCert Assured ID Root CA0
220801000000Z
311109235959Z0b1
DigiCert Inc1
www.digicert.com1!0
DigiCert Trusted Root G40
]J<0"0i3
v=Y]Bv
http://ocsp.digicert.com0C
7http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
4http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
~qj#k"
DigiCert, Inc.1;09
2DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA
240207171407Z0+
/1(0&0$0"
@WhA6o
xR}JlW
ztJVdNS
Washington1
Redmond1
Microsoft Corporation1806
/Microsoft Windows Third Party Component CA 20120
230914191423Z
240904191423Z0
Washington1
Redmond1
Microsoft Corporation1;09
2Microsoft Windows Hardware Compatibility Publisher0
'V:VAP
Microsoft Corporation1
232825+5014930
chttp://www.microsoft.com/pkiops/crl/Microsoft%20Windows%20Third%20Party%20Component%20CA%202012.crl0
ehttp://www.microsoft.com/pkiops/certs/Microsoft%20Windows%20Third%20Party%20Component%20CA%202012.crt0
ItEPxe
Washington1
Redmond1
Microsoft Corporation1200
)Microsoft Root Certificate Authority 20100
120418234838Z
270418235838Z0
Washington1
Redmond1
Microsoft Corporation1806
/Microsoft Windows Third Party Component CA 20120
-g<'<V
}PH.=C
Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z
>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
p%|Yi1$
Washington1
Redmond1
Microsoft Corporation1806
/Microsoft Windows Third Party Component CA 2012
(https://www.microsoft.com/en-us/windows 0
aOC,3
20240208082516.974Z0
Washington1
Redmond1
Microsoft Corporation1%0#
Microsoft America Operations1'0%
nShield TSS ESN:A000-05E0-D9471%0#
Microsoft Time-Stamp Service
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 20100
231206184534Z
250305184534Z0
Washington1
Redmond1
Microsoft Corporation1%0#
Microsoft America Operations1'0%
nShield TSS ESN:A000-05E0-D9471%0#
Microsoft Time-Stamp Service0
~|,sZb
PwO?8:
Nhttp://www.microsoft.com/pkiops/crl/Microsoft%20Time-Stamp%20PCA%202010(1).crl0l
Phttp://www.microsoft.com/pkiops/certs/Microsoft%20Time-Stamp%20PCA%202010(1).crt0
Washington1
Redmond1
Microsoft Corporation1200
)Microsoft Root Certificate Authority 20100
210930182225Z
300930183225Z0|1
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 20100
3http://www.microsoft.com/pkiops/Docs/Repository.htm0
Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z
>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
as.,k{n?,
Washington1
Redmond1
Microsoft Corporation1%0#
Microsoft America Operations1'0%
nShield TSS ESN:A000-05E0-D9471%0#
Microsoft Time-Stamp Service
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 20100
20240207215120Z
20240208215120Z0w0=
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 2010
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 2010
OmmLUOYnOXYPbQacJiJgtIiOzIZqtuzkkZYgGzISElssPeGNll
RuJwfBUCLwnFkjrsmBeNtwwSyNBZKewfylZFqqPiXRqujAEskL
kernel32.dll
FreeConsole
VirtualProtectEx
WaitForSingleObject
CreateThread
VS_VERSION_INFO
StringFileInfo
040904B0
CompanyName
Microsoft Corporation
FileDescription
Microsoft Connection Manager Profile Installer
FileVersion
7.2.19041.1 (WinBuild.160101.0800)
InternalName
LegalCopyright
Microsoft Corporation. All rights reserved.
OriginalFilename
CMSTP.EXE
ProductName
Microsoft(R) Connection Manager
ProductVersion
7.2.19041.1
VarFileInfo
Translation
$NVIDIA Corporatio
No antivirus signatures available.
No IRMA results available.