Static | ZeroBOX

PE Compile Time

2024-04-07 20:15:50

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000658b4 0x00065a00 7.99702553514
.rsrc 0x00068000 0x000315a8 0x00031600 5.91933598627
.reloc 0x0009a000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00068378 0x00031028 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000993a0 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x00068130 0x00000244 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000993b8 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
+7o.lm\wM
Li=9,^wi1|
:7jaX!
FNr6&Y
#)%|^AA
vp}N4~
Mv1d'>
7!Na;V
q%c8#s
"4MPS?
{'NL&
`<=)b@
i-Cr5y
Y8Ku;t
j7fnPk
-Tb["M
%OcX,D
xO &DKi
uv]kYE
FKFs<_
#iBx&"m
oilO\#
h+f>h<=
J#}l!<c
_C0~U1
+{Cao
kG(Z:V
3$4h;C
C{5hC
`ziP5CM
nbziP5CM
TIg&?
M?saz(l
Tq/Bx0
hY(5q\P
bt3X*
EA
u'eg@X
QOlti
qF7%sI
+Qk\66R
AS(om)
/N7O8U
dA (n5
tjlZ>U
ir8KN'
RUc%qw7|
k;#&f~
GwLLZ`_
u 6!|V
@Hp%!M+
H/!5x4
I I}t>:
h.CPww
|L>BT&P
J_R#x0&
HURTAN
eh>)NWR
br"]y:
"E2V2-
-C:!PL
T+x$#Q
5F:W OD
1j%\ M
RFSiV3
ve#S7_p{
bYfK $
}=[&|d
5@U$=?AZ
lV.Vv*/S
Q/Ul7M
Ya*[Y*
[wwar2_
dm6_E*69
hV DEGO
S?sn \
G*FCbx3
=tlISR
*g1[eM
946961b"
*X3U|7
wXvUY[
DjlD^:
;tB:jS0
VunQG&G
w0V ~~
+Std*S
d0f@E"
+RNb[2i
RKD(tM
a6FCl/M
^<G_&R)
q,ep?C(
#M`68j>
4I%ZDgc
ZJb5g:/
i6PYiJ
kEMSPb.@
g^zb0]n`
u`7,Jm
'V+\>mP
\&&be'
8"JVQ"
1WgM:5t
R4s^|]
|gakq?
=z%<mr
kI0^Rf=<ku=
<ol1OH
2w3s}3
Ctx3)@
P}#"XR
sj5-Ps/C
vV?^-9
=r#Ori
@.0!K93
:&TmC>
t-MNA2gk
59u^5e
e+p0Sa
DTgU?^A7q
*XeCi[0|
=r`D}<r~?n
,JAN"=
T/?,+3
:r{~,la
5B$TBn
7_#|<X
; DO$ce
CJ4x=@
'3Tqt!
G:bX**
,4{c)0
2L4SS2c
/&$'F&
">>7{8
oPf(!9K
70$+3H
M84_reM
"[rX5:_
z&)]F^:
6rJ~'I
v;:*SCH
;'l2z@
~.Fw!e#
oq/V,@
ES*{&H
t9<x\X
di5Y=$
sVL24q<
WXil{,e
|aN5y)
s8?0)}
nl_Eo~O
k@.X\P
-q(tXC
4UTF;n5J
);`hk7[
#q!3!sk
`RC(XU3
Nzb%D3<
RW"8R&
+BKm$
-KJ>y;<?j
q#Y/oM
;>,lDe
HY6a==$
rT+0?Wp
jR!Iss
lvr.m
J5yNL!"H+OJ
}.9!_O
t0(8I[
]#0roJHKG
>$2-=0@
/4:u:6NCZ7
G3W/tj
i/`sAa
;A},4\
zi\pWl
*eSRiAK7
=(#@1\
y.\ZMpj@
gA%0S8
]+Zz7dbfe
,falXi@
z%.$kh
/i:NLRp`
V(3\),e
0nx+qK
c^iE1n
N8# 2\
1v_Jej
M;+lW3
[BiXaS
'je)2C
L_FWBc
SnH1,.Rh
Ux18VD
!R/[{w
e\&@%{
?36nv /=
>]|p0C
9:BkfU1
H(.?h(
bjGsOC
2?<?`n>
.y5gJ
ks#4i2
},4+T
'(-?Q^r<
Bz0H'CcEzN
6>Qwsv
7U@~4#R
!Q.%_
P]z(-)Dp
8w#KHWxD"sI
!ll|m?
7L>@{O
ff\WR
M{HpSp
a0>K-
_YK`/}
iljVlb
r9y&"m
~*&w+?
j\FXvU
G[M1iI
v<pLZ3
Xs!Sz]
i)lJ1
7\-01n/
9v%F5B
{3jV/ ?8
?3i?}Du
=yi_I;
d%{gGD
%oscq/DF
:]:$"{Q^
?M:}F>
0n=#pKA
muX0Nx
xV@|jJ
_(X=j)}
wpBoYnf
F)4.3Lt
9sLw%G
]OD5t&
lnE^XZ
t=X]Icb-o@
H$>7(>6
km^#`c
&"%LH[
x@i~f4
-|@AWb
g$i,(E
%VxX9X
Q|%+Ty
2#C0sUB
|d}v6$X,#;
2\9.x_
k~W%lX
(*mFQiaF(
)U+Q7X
Y!aoM
B8-yCb
sKrC[T
BXYz0}
3[&[YD!$H1
/8wIExB
Slil3t
F="sg5
_#X<8F
Jx[nn
Wk+X]qo
Z7JPf:
;%"vg)C
.$"c?3R
(:4,T}
a7!~JB9
7nW#9o?Y
>6oz%#!
[WfnY"
AlH@@,
[^;m0hk
x/DD2!
K-(k;o
;=)hk8s
Ot[(!_
(jb_uBC
k {8*dE
p&/}!)
nazQG)1
7]+=9}/
/t;w\5/
L-^R-z`
I}sm=ukL
Bma]@ke
_[E;N4
:^U]>uL7
V0b{8mq-
7sfwgg
YK$g%/I
<<ccbm
}6j^m
seU7MRL
b2mN!=Q
uj2"W <js
Eu~iu=
@FVil+9
5J?KY?
s0S2]'
Jp1E_~
l`8?Y;
#Y$Y#3
P}Hx]pP
E*SU1st
</3].b
gjGPAp
8qf!F9
Bg6c} 4F
wtxlrO
Nq9>Ep|V
=5v>"wW
-',I1=Z
/f|0l3r
g[`K0.
vjAh"F
yKzT+#9
8*Y\1qa_
VR)+UnjE
^i%,KIwJ,
8c1U9O
7BFkea
|788t4r
k55JWr
VHm.&(U
8kE5}>
?RO0)I
^hCGje
^-V[z-/T7-uyFy
Mv<RN<h
P35yT3
oj;OgF
)i&G3b
W4M+SS
$5IE[#=
6"`-QT]`'
"@"jqr
dH'7Dt
yl)UNr
\vA(#[
q*Ay2,e
h:1%dr;N
)qDc^^
w6r],v
\{Td.6
'Src?z
*wOqv
cThE*7
KTov3B>
}A(]Jn
aU *D/PqO"
2bU,Es
8rr=e8
GQJIJ$AQ
`(Uq:,u
`c@] `a}
x2OSu]
;yFOCXs
8T\z=B
*nX2$#
;_=a?G
sh$~g/
q=|0#{
o+<2.e
,s_(lX
lnVI5:=
ET[!o'
Hou$/6
3[Tc#&
\|WjVBz
9WXm[.C
`m="-G
>xTTgPN{
Pr)73#j
w3=X>nb
*#m#[u
MupAH
${M7`M
PD=RC)
uHO}'@<
/a*5[Ag
3AlT$+O
8(iE?nn
vtXnpK
EvENc-
)9?aF<
UfQy?=
e1:YhdZ
(-3pH"
RQ^$PL
3D{ lhY
kHr9FY?
Og"|B<
c)d)tE
Bs\)57
3n7faM
D!*Stt&.
9>Qj1UXH
)R=dgw$
7d'lL1x:
(X4;l!qcV
gZn:{[
aMJNtI
krLGC@N
*}O:z,,2
QiQ@fX
=Be`bw
8dU^Cc
:>QIYj=
C>$n)rB
70h(K-J
|;2[vl
P,=kuL`
_%8S9X
%g\u0
qL-YJ<
e`=wU+g@
oAAcZ.
(.}:`,
[#j[#R
[#$w"&
|Co^v[on
~~_1B5
Lt&U&v
(Q+?(%
0$LkP6
BRn{JR
{lL=r.
x,q-y6B
](_X=o]y
M'Uq__
KZ*7][.
HM!A?2
f8UN3
-c05?]
B{j-ss
5zoVa
})=2}G
?#s_:+k
3aPHE|
cXD{}2
f~7#[f=#
QH"Yb~
uR;A-q
J3ZgW:s&
{ezux]
<1lVPi
3G*0%{
3`[mH3
&JrvuN
@A`I`[0
nm?*Y8Q
,rI[=9
e@6>sIZJJ
2DQK/_`
0<@D3e'2
P-ccx4y
*[>ZKEA
@<\jwE=
u"ZfcQ
jr%Nov2D
Bj2`cP
@/Q#o{
[d".e|98T
V<Xna]
[P+'W5RH
Sp0SNc
Hxu N4
8Ew0E@
/EA;$`
Gx 6*V
+t3FpP'
GU.8qh
$|%~O|
\~e%B.w^
=]&h.x
JR(n{}x
#cOz_<
|chjzb
74E]^<`
?xuzJ&]
p-TFLe
,FS/Li
&gH=%e
FECd:=
@Z7wYTq
`O(=]:
`N=$Ny
IVqY`f
pqt`Kx
*lX^UEA
HPk#x{
^$v0rf
Mqq"mz
>>ZE.e
uIX1221
$,~}ryZ
E:g_OB!
@j]&E0
ST^Pm1
*=>d9%
w"eOoUR&
{h}gc>
446^50
<J(f%sf
7}"^tK
MdZ)$0
+[m}dZ
[pK^;U*<,s_
dB+rP.
v'*K{7eKZC
ESKB\TY
]Ju(y1I
2"+f]f
\>CJmB
,mAjUO
I?jp#vy
(#Lm>-
bn[1N[
t)L[0$
XS)TPOq\
9+5vhA8|
^/3r&
X642+3
xyfiF<R
A(.i830
U25bII
8yX{ze|
Jkif~rk1
-AD`T<
WCO=xvo
WAMN3:6
;B\=W5
N@#Gg'X
>nAtH|T
eT/.vE4
fr~},?Rz
43*9`Cu
<wT%'\
S,ijZ&
^[14R:r
i3~y~i
2}Z&n9!
cH]b:Mo
XjhA27-|
4ZtTIS&Y
4W@\R.
>%D,l; %
=m#(4?6
|#S3{%
a,b!Jq
cwB5^zl
z}iR{pvf
: mU4b
A B&HZ
rH!`-Ca3K
g0xeJ38}Y86
F'aS/9
&|C+]u^
o6)V|4(
|ipj`?
y*~aI74
{tn{nho
ApY-Vs
4D:zuw
RBkG!2
$+iWT#
.%=EoQ
h.EneD
B*!&;-!
rW3?=qj
pm@Dzja
tVM!Q{
ZixKw|
]/wv_y
@4O9~H
K#fS$C
b.` CT
#V01=iNWe(
Zh,2wG}q
f>ruA[6
@B1Ds
i9]+h>g
AFMaIM
mQV@G.4;
uY dZM
NSiPm%
&}Cuc{
};&n}s
}VlWZD
{&2i+8b
58*t*>
:h6?|`
Y :;]%
<Ad&J`
,_sz70
?`xg>R
Nz @%~K
KvwIl'
tM3! B
:0K9Bt
hEJy< l8jII
N)_3%
o)Xyp9
JcWZ?
Ru16;M
yJ{_+,
6$zO >
~lPx0DD)?j
<9=5Xj
(b{J h_f
*8guo&CL}
Z/-Ld\8u
OZ:\wT
>;`bwE[M
!1%_"*W
Yk.yKC
lg\Yq,sk
\Iz}z
FR69.[
nr8MTOG
,1DeT\
~62Zw/
kM7prh
9fad<i
?897b:
hp}SpU
Nqi\>R3D
zmb.u]D
!C(@}Y
'ifb;#:
a:\p_^b^
{(y6=sMT
[1r>:Gq?Q
M?nwlGW
f-TM'-
@!$+V1
+f5qZUC
Y1v,_Q
f2xXI"]
qP&.\(
~Q9sp=
AD9iw
ysyclk
["3,Aa
T]Wr a
"/fq1a
I5$Fgu
X282yY
`Qaw~Q
u.@/_}
`@\vzl
wx_pXo
ZhKZ'&
Dl83%}
ud@Xa
System.R
esources
Culture
=neutral
, Public
BfqADrawN@
5f7f11d5
0a3ajE@
obaliz
height
value__E
lendar
0WV5W&
GrouDp.!1'16
nan$cQ
2Digit[sA
xSQ*L5T
tSoftw#7
IDAT8O]
V:>zp3
f{9D]r
\vZ"ZB!
i_CorE
xeMain
scoree.d lll
v4.0.30319
#Strings
<Module>
instqll.exe
Program
WindowsFormsApp1
Resources
WindowsFormsApp1.Properties
Settings
mscorlib
System
Object
System.Windows.Forms
System.Configuration
ApplicationSettingsBase
System.ComponentModel
IContainer
components
Dispose
InitializeComponent
EventArgs
Form1_Load
Decompress
System.Resources
ResourceManager
get_ResourceManager
System.Globalization
CultureInfo
get_Culture
set_Culture
get_Orifaaywu
get_Vqmqsfffubp
resourceMan
resourceCulture
Culture
Orifaaywu
Vqmqsfffubp
get_Default
defaultInstance
Default
disposing
sender
System.Reflection
AssemblyTitleAttribute
AssemblyDescriptionAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
AssemblyFileVersionAttribute
AssemblyVersionAttribute
System.Runtime.InteropServices
GuidAttribute
ComVisibleAttribute
System.Runtime.CompilerServices
CompilationRelaxationsAttribute
RuntimeCompatibilityAttribute
System.Diagnostics
DebuggableAttribute
DebuggingModes
AssemblyConfigurationAttribute
System.Runtime.Versioning
TargetFrameworkAttribute
instqll
STAThreadAttribute
Application
EnableVisualStyles
SetCompatibleTextRenderingDefault
IDisposable
Container
ContainerControl
AutoScaleMode
set_AutoScaleMode
Control
set_Text
EventHandler
add_Load
System.IO
GetTempPath
Combine
WriteAllBytes
Process
MemoryStream
Stream
BitConverter
ToInt32
System.IO.Compression
GZipStream
CompressionMode
System.CodeDom.Compiler
GeneratedCodeAttribute
DebuggerNonUserCodeAttribute
CompilerGeneratedAttribute
RuntimeTypeHandle
GetTypeFromHandle
Assembly
get_Assembly
GetObject
EditorBrowsableAttribute
EditorBrowsableState
.cctor
SettingsBase
Synchronized
WindowsFormsApp1.Properties.Resources.resources
3System.Resources.Tools.StronglyTypedResourceBuilder
16.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
11.0.0.0
1.0.0.0
$378dc0a4-69bd-4e00-b366-cb0ac3f7384d
WrapNonExceptionThrows
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4|x
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
Orifaaywu
Vqmqsfffubp
Orifaaywu.exe
Vqmqsfffubp.exe
WindowsFormsApp1.Properties.Resources
Orifaaywu
Vqmqsfffubp
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
FileDescription
FileVersion
1.0.0.0
InternalName
instqll.exe
LegalCopyright
OriginalFilename
instqll.exe
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
No antivirus signatures available.
No IRMA results available.