Static | ZeroBOX

PE Compile Time

2051-03-16 08:14:58

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00052534 0x00052600 6.03201572101
.rsrc 0x00056000 0x00018cc8 0x00018e00 4.70005098792
.reloc 0x00070000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0005df00 0x00010828 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40
RT_ICON 0x0005df00 0x00010828 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40
RT_ICON 0x0005df00 0x00010828 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40
RT_ICON 0x0005df00 0x00010828 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40
RT_ICON 0x0005df00 0x00010828 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40
RT_GROUP_ICON 0x0006e774 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x0006e774 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0006e7c0 0x0000031a LANG_NEUTRAL SUBLANG_NEUTRAL ARC archive data, packed
RT_MANIFEST 0x0006eadc 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
(^! E*
(srXCs
(Gn5Q~
(n+gs
('".as
((<Oi~[
(]cCL
Y_c
Y_c
(yGN\
(C4w/
(.L$?~
(|]3:~
(~%%:
(z=!l
(+;:Z
(4`\f(v
_b_9
Y_daT
_bj_:s
(:no7(v
((W$Q~
Y_b`*
(r$G.~
([x)0(V
(X3U1(}
(vSm?~
(N0UG
(wEW5
<jX(Z
jX jX(
jX$jX(Z
YZjX(Z
({NWk
(,8uR
(*yy4~
(Wj|5
(Y\`=~
(qAMCs
(~,"Cs0
(d7YP
(oM4\~T
(6StN~k
(XP/g(
(Mn+=(F
(0^5~
(O!`g~
(cQDO(
(K5uP~e
()doX(v
(2m\=~
(7E7V
Z?_d
_b`*
xe p8|aa
#j :WQ
=/Zgff =/Zga}
be .dV
b `MCia}
U,Cxa
_ I[ sX G
x F?7~a y
x F?7~a
x F?7~a
b `MCia}
#j :WQ
#j :WQ
v4.0.30319
#Strings
$*$9$H%w&~&
&d(m(v(
Gabionade
ExtensionAttribute
System.Runtime.CompilerServices
System.Core
System
mscorlib
CompilationRelaxationsAttribute
Boolean
RuntimeCompatibilityAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
ComVisibleAttribute
System.Runtime.InteropServices
AssemblyTitleAttribute
System.Reflection
String
AssemblyDescriptionAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
SuppressIldasmAttribute
33d76e69-9762-4c0c-a74f-59f67da78852
Gabionade.exe
<Module>
Object
<>c__DisplayClass0_0
<>o__8
<>o__1
<>o__0
<>c__DisplayClass2_0
EventArgs
MulticastDelegate
<>c__DisplayClass8_0
<>c__DisplayClass12_0
<>c__DisplayClass12_1
<>c__DisplayClass16_0
<>c__DisplayClass16_1
<>o__17
<>o__31
System.Windows.Forms
Exception
Strings
ValueType
<>c__DisplayClass1_0
<PrivateImplementationDetails>
__StaticArrayInitTypeSize=6
__StaticArrayInitTypeSize=12
__StaticArrayInitTypeSize=16
__StaticArrayInitTypeSize=30
__StaticArrayInitTypeSize=32
__StaticArrayInitTypeSize=48
__StaticArrayInitTypeSize=64
__StaticArrayInitTypeSize=80
__StaticArrayInitTypeSize=256
__StaticArrayInitTypeSize=1024
__StaticArrayInitTypeSize=6160
<Module>{1E4DC81B-296B-489A-8F85-7D36B3AA166E}
Attribute
<PrivateImplementationDetails>{7E618856-26C5-40A2-B3A9-B784419FB8A3}
__StaticArrayInitTypeSize=18
__StaticArrayInitTypeSize=40
<Module>{8a5a2cdf-ab85-4999-8203-3a1e4a76e18c}
m8DCD0189D19B012
.cctor
Field1
List`1
System.Collections.Generic
IList`1
profiles
IEnumerator`1
Enumerator
Func`2
IntPtr
Enumerable
System.Linq
Select
IEnumerable`1
GetEnumerator
get_Current
FileInfo
System.IO
get_Directory
DirectoryInfo
FileSystemInfo
get_FullName
Contains
IsNullOrEmpty
get_Chars
ToString
ToUpper
Remove
Concat
Func`1
MoveNext
IDisposable
Dispose
IEnumerator
System.Collections
Field2
profilePath
Combine
Exists
IsNullOrWhiteSpace
op_Inequality
Directory
EnumerateFiles
Substring
Field3
dbPath
DateTime
ToLower
Convert
ToInt64
get_Now
AddMonths
get_Ticks
StartsWith
ToInt32
Replace
CallSite`1
Func`3
CallSite
Create
CallSiteBinder
Target
CSharpArgumentInfo
Microsoft.CSharp.RuntimeBinder
Microsoft.CSharp
CSharpArgumentInfoFlags
Binder
InvokeMember
CSharpBinderFlags
GetIndex
Func`4
GetTypeFromHandle
RuntimeTypeHandle
Invoke
ToArray
StringSplitOptions
Encoding
System.Text
GetEncoding
GetBytes
get_Count
Environment
GetFolderPath
SpecialFolder
Format
AddRange
XmlTextReader
System.Xml
XmlDocument
XmlReader
get_DocumentElement
XmlElement
XmlNode
get_ChildNodes
XmlNodeList
get_ItemOf
xmlNode
get_InnerText
op_Equality
get_UTF8
get_Length
get_Name
ToCharArray
FromBase64CharArray
GetString
IEnumerable
FromBase64String
get_Item
System.Text.RegularExpressions
profile
profilesDirectory
KeyValuePair`2
FirstOrDefault
NumberStyles
System.Globalization
get_ASCII
get_Key
Equals
get_Value
get_Exists
EnumerateDirectories
SelectSingleNode
address
MessageHeader
System.ServiceModel.Channels
System.ServiceModel
IContextChannel
NetTcpBinding
set_MaxBufferPoolSize
TimeSpan
FromMinutes
Double
set_TransferMode
TransferMode
XmlDictionaryReaderQuotas
System.Runtime.Serialization
NetTcpSecurity
MessageSecurityOverTcp
get_Security
set_Mode
SecurityMode
AddressHeader
EndpointAddress
EndpointIdentity
ChannelFactory`1
Binding
ChannelFactory
get_Credentials
ClientCredentials
System.ServiceModel.Description
get_ServiceCertificate
X509CertificateRecipientClientCredential
System.ServiceModel.Security
CreateChannel
OperationContextScope
OperationContext
get_OutgoingMessageHeaders
MessageHeaders
set_MaxReceivedMessageSize
set_CloseTimeout
set_OpenTimeout
set_ReceiveTimeout
set_SendTimeout
set_MaxDepth
set_MaxArrayLength
set_MaxBytesPerRead
set_MaxNameTableCharCount
set_MaxStringContentLength
set_ReaderQuotas
MessageCredentialType
set_ClientCredentialType
set_Message
set_Security
get_Transport
TcpTransportSecurity
TcpClientCredentialType
CreateDnsIdentity
get_Authentication
X509ServiceCertificateAuthentication
X509CertificateValidationMode
set_CertificateValidationMode
CreateHeader
configs
Func`5
SearchOption
InvokeConstructor
GetMember
BinaryOperation
ExpressionType
System.Linq.Expressions
UnaryOperation
scanners
baseDirectory
maxLevel
GetDirectories
GetFiles
GetFileName
patterns
GetLogicalDrives
rootPath
searchOption
searchPatterns
Distinct
scannerArg
filePath
browserPaths
get_NewLine
fileInfo
Nullable`1
RuntimeHelpers
InitializeArray
RuntimeFieldHandle
StringBuilder
AppendLine
ParseDiscordTokens
levelDbPath
Matches
MatchCollection
Capture
RegistryKey
Microsoft.Win32
Registry
CurrentUser
OpenSubKey
GetValue
get_Success
get_Groups
GroupCollection
ToByte
BeginInvoke
IAsyncResult
AsyncCallback
callback
object
EndInvoke
result
OrderBy
IOrderedEnumerable`1
Random
Dictionary`2
InvalidOperationException
CreateDirectory
Thread
System.Threading
ThreadStart
set_IsBackground
get_UserDomainName
Assembly
GetExecutingAssembly
TimeZoneInfo
get_Local
get_UserName
ToList
Action`3
get_MachineName
get_CreationTime
op_LessThan
Delete
ThreadPriority
set_Priority
ThreadState
get_ThreadState
get_Location
InputLanguage
get_CurrentInputLanguage
get_Culture
CultureInfo
get_EnglishName
ApartmentState
SetApartmentState
get_DisplayName
IDataObject
Clipboard
GetDataObject
DataFormats
GetData
UInt64
UInt32
get_Unicode
BitConverter
Resize
CompareTo
get_BigEndianUnicode
StringComparison
Compare
IndexOf
TrimStart
ExpandEnvironmentVariable
GetTempFileName
ExpandEnvironmentVariables
SafeFileHandle
Microsoft.Win32.SafeHandles
SafeHandle
get_IsInvalid
ArgumentNullException
Finalize
Marshal
ThrowExceptionForHR
DangerousGetHandle
SuppressFinalize
GetHRForLastWin32Error
JavaScriptSerializer
System.Web.Script.Serialization
System.Web.Extensions
Deserialize
set_MaxJsonLength
set_RecursionLimit
Serialize
ChangeType
IFormatProvider
get_InvariantCulture
get_HasValue
SelectMany
GetValueOrDefault
PropertyInfo
GetType
GetProperties
get_PropertyType
SetValue
Action
System.Drawing
Single
ContainerControl
set_AutoScaleDimensions
set_AutoScaleMode
AutoScaleMode
EventHandler
Control
ResumeLayout
Button
System.Threading.Tasks
get_Factory
TaskFactory
StartNew
SuspendLayout
set_Location
set_Name
set_Size
set_TabIndex
set_Text
ButtonBase
set_UseVisualStyleBackColor
set_ClientSize
get_Controls
ControlCollection
set_Enabled
set_Opacity
set_ShowIcon
set_ShowInTaskbar
FormWindowState
set_WindowState
add_Load
DialogResult
MessageBox
MemoryStream
BinaryReader
Stream
get_BaseStream
Reverse
ReadByte
SizeOf
MD5CryptoServiceProvider
System.Security.Cryptography
ICollection`1
AllocHGlobal
FreeHGlobal
HashAlgorithm
ComputeHash
IsDigit
Append
ArgumentOutOfRangeException
ArgumentException
TrimEnd
AppendFormat
ConvertFromUtf32
HMACSHA1
SHA1CryptoServiceProvider
Buffer
BlockCopy
SHA1Managed
CryptoStream
ICryptoTransform
TripleDESCryptoServiceProvider
StreamReader
SymmetricAlgorithm
set_Key
get_IV
CreateDecryptor
CryptoStreamMode
CipherMode
set_IV
PaddingMode
set_Padding
TextReader
ReadToEnd
Rectangle
get_Size
ImageFormat
System.Drawing.Imaging
get_Png
FromHbitmap
Bitmap
Screen
get_PrimaryScreen
get_Bounds
hObject
lpDeviceName
lpTargetPath
ucchMax
hFileMappingObject
dwDesiredAccess
dwFileOffsetHigh
dwFileOffsetLow
dwNumberOfBytesToMap
lpBaseAddress
lpFileSize
nIndex
Handle
ObjectInformationClass
ObjectInformation
ObjectInformationLength
ReturnLength
SystemInformationClass
SystemInformation
SystemInformationLength
PathToFile
dwFlags
ModuleFileName
ModuleHandle
DestinationString
SourceString
lpFileName
dwShareMode
lpSecurityAttributes
dwCreationDisposition
dwFlagsAndAttributes
hTemplateFile
aBuffer
cbToRead
cbThatWereRead
pOverlapped
cbDistanceToMove
pDistanceToMoveHigh
fMoveMethod
pDataIn
szDataDescr
pOptionalEntropy
pvReserved
pPromptStruct
pDataOut
nXDest
nYDest
nWidth
nHeight
hObjectSource
nCmdShow
GetDelegateForFunctionPointer
Delegate
ProcessModule
Process
GetCurrentProcess
get_BaseAddress
DllNotFoundException
FileNotFoundException
ReadInt32
op_Explicit
MissingMethodException
get_Modules
ProcessModuleCollection
ReadOnlyCollectionBase
get_FileName
EndsWith
ReadInt16
PtrToStringAnsi
get_TotalSeconds
EventLogEntry
EventLog
EventLogEntryCollection
op_Subtraction
get_TotalDays
get_Entries
get_TimeGenerated
UnicastIPAddressInformation
System.Net.NetworkInformation
IPAddressInformation
get_Address
IPAddress
System.Net
NetworkInterface
GetAllNetworkInterfaces
GetIPProperties
IPInterfaceProperties
UnicastIPAddressInformationCollection
get_UnicastAddresses
AddressFamily
System.Net.Sockets
get_AddressFamily
IsLoopback
WebRequest
set_Timeout
GetResponse
WebResponse
GetResponseStream
adapter
GatewayIPAddressInformation
GatewayIPAddressInformationCollection
OperationalStatus
get_OperationalStatus
NetworkInterfaceComponent
Supports
get_GatewayAddresses
set_Item
Decrypt
chiperText
value__
UInt16
StringToHGlobalUni
PtrToStringUni
ShowMessage
GetProcessById
FromSeconds
get_Milliseconds
ManagementObjectSearcher
System.Management
ManagementObjectCollection
ManagementObjectEnumerator
ManagementObject
ManagementBaseObject
ToUInt32
LocalMachine
GetSubKeyNames
FileVersionInfo
GetVersionInfo
get_FileVersion
get_SessionId
OrderByDescending
get_InstalledInputLanguages
InputLanguageCollection
ToDouble
PropertyDataCollection
PropertyData
Application
get_ExecutablePath
GetCallingAssembly
get_ManifestModule
Module
get_ScopeName
WaitForExit
WriteAllBytes
get_Properties
get_Is64BitOperatingSystem
AesManaged
TransformFinalBlock
HMACSHA256
set_BlockSize
set_KeySize
IsLittleEndian
KeyedHashAlgorithm
get_HashSize
EnableVisualStyles
SetCompatibleTextRenderingDefault
0136DBDBB565C4299A42594BA3ADE25CCCB25711
0249E121E46F319288B19BFBADD218333D6F96C8
02B7C2A23FFABB121E04D100AE0710D24C71E983
03C3631EA4A74B9C45D4A1B1319167DF290F60BA
04D2A79C8A779AFAA779125335E9334C245EBB46
0A4860D3709576FED0833F565BE572458CDB04B2
0B1B5ED07150AB90E4B511DAE1365E4BC59E1E87
0B5826DD0891F96C05EBAE0BA086304C63CB7250
0BCC73C80EA504D26BC0A5CC47942817AD0B5449
0C4110BC17D746F018F47B49E0EB0D6590F69939
0CB70358318D3EFE6F92A298C4C696ABD0247212
0CD5832F602B06DC6DEC8FECBA2C3EE6F16B68EA
0DF6226220068FF0264389F0F01D9A2578292A48
0F700FCB90C50709410F180487B3B98FDC623C1D
0F99220A4EEA9F1517F923DE707282EE5142D036
102C522344FCAC1545BDA50C0FC675C502FFEC53
10E23FFBB271ADA19313883706485C9107919C82
11C7886C8A3189D0E71559306CB2DC49062F2096
12E376AE91ED100BD827CD4F5EE0AB893F42EF67
13AA8B2BB755F6F9DBFFBC67CB9982356612AD32
13DBDBDD0D0CDDA7969EF8AB0361E44A38D1C4A4
15067988E2AF892E037E52A6F78923BCB7220B95
1975598B48B84C03728809A452277426DC97546C
19D2B59C318F79ABC8DECF3B1F12049EBD42504A
19F3004F3BCC4FF13586D8F332CB60AB7AB08037
1ACF71E40BB1D446E76D0E6712602C60AB7EDE1B
1AFB455399A50580CF1039188ABA6BE82F309543
1DE5D03F74F42641A4B63E8C442CBBB9A7F984F9
1E0FEAE1AA03BCB85BF02BD1719F74A7DE7CA36E
1E3F3ECB104DF3C300C59C47B9A4A0E28B23A46C
1E44FA2925FE83CD16DD89FECFE287C8BFD4FF76
1F7C7AD14AAF9310F85ECD4BBB0B73927DB7610C
2319EB2B4D010B9CF580AA9E4AE9BF4B65652F5C
237D77F147474AE80483C87E6128BBC5AB46A3BD
26EED431556B273AB776B81D66690D2CD3B11BC7
270D3E101A2C5A946C40ED79CC629ABE43C54883
271B729F3D14B3E09DCEE846F822F5F151664B17
2929253F9B95B769883A0D69BB25D489A447251F
29EC5E8FCA12DB9EC0B5E6D2DE67B624D2E2372C
2A75ADCAFEB4313ADEC9075AAF7E5C2AC0E93B3C
2B98D381648B5D3BFA22E6A7C64BC324AE84064C
2C77D909FB20E9AF90C2437BE571E2E905348266
2D8CEAEB700919301D694D7B7CC4ABE7343508E2
2EAB4C9348234BAA4E29A389306A003E48103E46
2F2618B352F888ED93380F1527DE56F5DB598D1D
3110815899103E6D29173A796231D038F6B36B40
331F816C687427342D388510D371E57B151FCEA5
334D6A140BF2B6B7D6CF0A167D24409913E04E77
347EAB364355E95F4D6912B7F3DA2BF94035612F
34C5A8656CEE1F296091D19DBB40964718471AC4
34ED2A77F0498F25010D8EC0FF77411B49EC0101
352D0932166FC77FCA8A558D488462CAAAC5C6ED
3595E03C919EC4A41DDC9C761632F16EC8C5D7F2
380D4BF65F19187479A95A684BE615D3CCD73FA1
3866D6C495CBDA2C8E3C2568CEC50DAAC6D59E1D
38EE02779C8DFC5EF38F676A4CC90293001790F2
38F431A549411AEB32810068A4C83250B2D31E15
3ABFA893B784901EEC54C86F03D166F6F85DF7BE
3C1FDBB8F5B42AC569B9D1C86190EF1703BD2067
3D151213EFEC96B082BFBCEAE748DD3606B5F4F0
3EE4B072E7EF27342EA5DF5FD89391E862E34B1C
3F3D940E62D104BCF068BFD1EF41B900D4E66201
3F62F78C998F91DD603680D3B53C1E842E63FBD3
413E50A8D5908F090866FF62BE1922B0B979919E
423ACA01AC170A50869ECDEF572CD96995576718
425236ED0CDB0D7A8372B350771A208CF08103A1
42552354C5AE55588AB3AD8B13D0A55E2D5E0C5F
425E7A080A7A763AA4512633A462D6202A50D1BE
4392C8E5F93B46FE512F949AC7AE723DC070FDF1
43E86D851562C69BBB7B12B120FB790DB626BFED
44338D2335C8FF0D17359A85993D7D6D8F3741B0
4453629928F2DD17ADE90B71C04E64D141F06B7D
4899EDBD02DE868FAACF46828B3A02E35A482448
495B251D4201C7A4A849E9FF44E374A419F8E632
4A2E9CA5595BA0C828778894EBDBC40F6A7437A8
4ACE896BEF91BF9B27658C19AC3058124AB12588
4BD7892A020D2EB0B4251FD2B4E665856ED95412
4D2A1296DA4D6715569E4CAAB512F94BDCADD80D
4D9F6E671E394FC7A1800DBD35899C2304FB2AE1
4E732D2144C6FB34B2C6DECEB9EBDBDFBB86E8AC
509060E3B060F0A65BDAC3E5B337C2F5DC2B9A04
50C7EAA0BF8DFF96CA033830B77EE593DCDB7F3D
50E960222752870E2F21D5659D3415CE23567164
516BE686A536F9C3138B6B4F8B5BD9DFE3C7F084
51C330CCA03405249574040964986920707DE892
53131DF2DDC9F606EFB6CEFAF7B02CE1B1D628BD
5344C3822F69AE09255D8890E3CB649B90DE677B
53CE2EBA4154035C0F2CC16464F3A031DD598F65
5458EAE2EE13D66F829C1147A128D6C47C656870
548C54A4D0DA700EA87A305DC5EDBBA41E1E69D5
548E99CD050642ACF0C04B7C5F6487B8A179E02D
58672B2BD3F1DE4076C0C6DCCCA0E85C69934C6D
595DE6C6F322A473E1351C45C360EDC0096A9B30
5A825D2CD9A2668A79F3CFA2883D01786A625869
5AAA596B18D79F61A297C3087848DCF1D4AF61A1
5BA1A0AFFCB19DBA1C0FD1B9E904F53E06B8C09F
5C38F9965DE5E6552CF3D62C690E81DB5A7F035E
5ED1FC786D75628CBBF77BBB9A2EE8DB1EF5B2F4
60E0595B84DDC6833263BF1BB77EF49292F91F58
6632D4EA7F9CE7F32BFB359C701658AC867A4D49
6640DCC2691E5EE8B86EE439AADCF71D1D0864D0
67279B87EBFD052D07B12C7898FBE1B9155781D5
68A79970FFCD117934E0101620BF51A35ADBAE6F
6ABB8C49CE8360765435053B037A261965E1578F
6B70C7EC3211D36B10086D1B9F9D6F47751854B8
6B729F443DEE408739A5904C9F030A704F12B55E
6B888380DFF84BE8CFAA0DC97A6CD95B22F3D214
715379D1BB3AC5641ABEE7CA06F471CE2648999D
758EB4FC0B6D8B3113F51A53DB5F2D317158AE3B
75C3C1BB0191D6ABA8658FA0D00FEB95CFE4EFCC
7A788FD009DD031119A7496181AE329DCE288A29
7CEEE2D02BE17CB7C2E69185754B9CFA8D289DF7
7DE7C9CB17934A55942EA1A0DD982948BF7C29BE
7DF9FA49D1EC6E7CC16E79F9D0F2DBB51FEB83D8
7E838AE0AA050D9681B6BE10C8E39810B203E8BC
819982256943A2962DBE5425FB4E3891FE0C4F08
827738304E7C82480894D3D8D67AEB91EC25D3BB
83F00159094BEA4E4720592242DE1A5FB375DB6F
844EDB5BEF7E0A01F7A2063A2DA8A21EAB1C82A0
861361AA88BBFF30AA222FF175B856F23CF0914F
87BD4B580833FB2CF5BD4F0C5FD6E79D7497C51F
87CBFC592AD911AF21434C90C3DAE8EB6EAFAF36
891B56C4C0C887D6C4D327807291921380199FCC
89F1D5DA50AEAABB6E3881DFD1C3E4339DA0D707
8A77B32DB7A66534D3D37C4E4D6EBB4DD1E08F7C
8AE4259CBAD7193289ADC253A3B7B2F881CC4540
8F22C9ECE1331718CBD268A9BBFD2F5E451441E3
9041929C157DC6EEAD73F14F4F275F8D77E4266E
904A097FE9D1C87E3BE5E931FF61DBC3603560F0
95CA85749ADCFBF9A2B82C0381DBCF95D175524C
9746CC8292D1BEAE6DD2DAFA187655A6B6E0EC1C
988FAEEF7E7FBB4445CD36F51410600508A4BC93
996F4C2351BF268D8E9DCDE2A5D514BF73C58C57
99BF3280D8204739E00143ECF379A68D91944C23
9BB4F45974073B006606EE3C67BFD47436B97998
9D2C9F3657FDB5FA6A74FA2F53E5509368855CF2
9DE05D5DC42B2E584FAC08D3421801D66A49CD91
9ECC49CAAEA58B12A0FCDB4A68E27FB0438A051A
9F894C32573BA6B358C940E062297D38A2BBF148
A1F78BD7BA8180AAA48CD424D61F42AA529807D0
A2CC314BE01DBF76ED07DB78C71BD09ABD481349
A373F36A477FBFB628B3FE02198E8B996DC92EB0
A3D2A2874137E2BDB06DADF433686859B22CAD1E
A43B650CBB541A763364EB97646D87A36E0CF793
A4AFF65A6B438B9FC4CA5EB09CA37392D814C1C1
A4B80D8BCBB5751FF4BA160D2859BACEF7591CBB
A5B82150F858C7BD008764A5C7AA920CE344A277
A79A88340EA098CC21CA500411CA101953F5E887
A91FFEE8DA2AE581A3727B60FC0E983A806BCE34
A966A0307E61B3F40C5A177373B29F2513116E59
A96940DBFF2D20849853BD780931A16598E67895
AA5BB4DA39E964FBEC2944B5F6142609DD2C7965
AAB47456420C7298D5A54C3B86D74E5BD10BE976
ACB7276AC7047AC4B248E9716B338D18048A3F31
AD4CD3574A3FAFF540B61D0B723A4D936FAE8142
AD9CE8F9852CC3D699C14AA059537CF48E0D5342
AE2F9E34942D33F71351B002AF2F89F89E40BBA3
AEA620E4FBEBCAB377AF2C8A04BE9414D3B48878
AEF97E89A76DE2AC7C03481ECC92CD949692A752
AFB00D6725BDD873D74025E22EDDBBAAF452BEA7
B069D71976800B926B48F57B93C3D3C3B0858E07
B41B02A65FEB0B64145AA31141DA368092E2554A
B633BAE9805D62E69F19A72233BB848E1B75E089
B655447F032317515D53664574A8F9EC2D24527B
B68637EF60D499620B99E336C59E4865FFC4C5D7
B7A2A92A8DBA2D188A5989566DD0C6A4F18F9ADE
B8365103E96ECF14470CA2EBBE81A07CFF348D78
B8DB0CB599EDD82A386D1A154FB3EB9235513DAD
BB4D68DE4D90DDECBE1E85089A54C0D1C885210B
BFA0926061F155F9E1B6AE98D859CCD81CE3AF16
C0D6EB65301762B2F0D27C42E20386DC6D875709
C4DDD5278FB3DE5F4C6A7A12762DD1AB7F9A4948
C5FA5FDF14A23D270B21A7F71F03A801B5729E48
C6126CEBB08BD6574E393B606046AD1924123737
C6A1A8F4C017195EDA467FEC924D59C2591BB515
CA2272F3E5A5269374C94C0B9E3CB16E7DB0851A
CF99A7370D68C963606A7C4264B80AF4F4AA5EF7
D2782FF81DC240C4E8E8CE8788C369BEC3D25F58
D38846911AB6D77DC8CE3AD59DB9383A691DE9C7
D740D791B236FFF7331D12D0924730F8978FEF50
D8EEB3EE615A640902F97941581717B678A596C1
D9C221237B647EC215A7BCDED447349810E6BF9C
DABCD67A6D9B40BE07CB2E6CABF527F8782318C6
DC26D24987080997B26636131BB6994C09590848
DD1B31438CBF49A98324489C12E54773A481F815
DE01493344FB0F5DC487F50D799B174A0D913256
DE46C1DB2896372C02F32DACFFD2C39884495108
DEBE786BCD61D2D6D235E5903C3A7D8B987E7F63
DEE92C9E2CFF59412AFAB2CA18565F0405CFE821
E301C632C1A01499DA0BC9BA8DB95E8AE6A1FF19
E400F52ACCEBFE03A90271A86AE7F017F6C0603F
E43F6BA634642FB90FEEE1A8F9905E957741960C
E4497144197FE58CFDB2B3D77259D8193893B578
E6E99C690F8D16787F234BEBCB922B576EF1EA89
E72BEB086F94BB853B7BD7EC96620A75BACACA3C
E85AB64F7A54C8AB7E4B0F9C0E0314D9A0A06195
E892EC17909DFCFAA61FDB37B15A9AAD2F1EF958
EBCB64B8BD685A0E276AB6C78830D5B68741087E
EC978E4ED3EAE10177E6E77D094AD06BC125932E
ED1DF50703FF7CA26EA9FA66C08EB33520BACA47
EEC90E1ACD14E14C55D926BA42D48F25E8B7F0D5
F147B7A5FB4B81C0F6374565C09E0B52725DB48D
F2C3D8F70FB3CC2DAA72F9C77D8E842EB74B7DDC
F3D5E183EACB4B0B6C420A0B4415B8470484CD64
F67609755EC431BF3135B36E60C7BBF6B67869D1
FA3B28A72054EBE90834FDC3EF5B314E6A9D17D9
FF8ACB051FAE442326D5581C4DBCC11C318AD0B4
typemdt
FieldInfo
MethodInfo
GetFields
get_Assembly
ResolveType
MemberInfo
get_MetadataToken
ResolveMethod
MethodBase
CreateDelegate
SortedList
Hashtable
AesCryptoServiceProvider
RijndaelManaged
Activator
CreateInstance
ObjectHandle
System.Runtime.Remoting
ReadUInt32
ParameterInfo
DynamicMethod
System.Reflection.Emit
ILGenerator
Monitor
BindingFlags
get_Module
GetGenericArguments
get_IsValueType
get_DeclaringType
MakeByRefType
OpCode
OpCodes
Ldarg_0
Ldarg_1
Ldarg_2
Ldarg_3
Ldarg_S
Tailcall
Callvirt
set_Position
GetName
AssemblyName
GetPublicKeyToken
FlushFinalBlock
get_EntryPoint
RSACryptoServiceProvider
set_UseMachineKeyStore
GetMethod
get_CodeBase
GetProperty
LoadLibrary
kernel32
GetProcAddress
GQitAJFJE
FileStream
FileMode
FileAccess
FileShare
Unwrap
CryptoConfig
get_AllowOnlyFipsAlgorithms
TransformBlock
GetManifestResourceStream
ReadBytes
get_IsStatic
get_FieldType
GetParameters
get_ParameterType
get_ReturnType
GetILGenerator
Debugger
get_IsAttached
hModule
lpType
lpAddress
dwSize
flAllocationType
flProtect
bInheritHandle
dwProcessId
CreateEncryptor
ToBase64String
classthis
nativeEntry
nativeSizeOfCode
g38PJ8K3c0
lpName
hProcess
buffer
lpNumberOfBytesWritten
flNewProtect
lpflOldProtect
DeflateStream
System.IO.Compression
CompressionMode
GetManifestResourceNames
ResolveEventArgs
AppDomain
get_CurrentDomain
ResolveEventHandler
add_ResourceResolve
kLjw4iIsCLsZtxc4lksN0j
CopyTo
0E448EF5E5E60630BDDB19388CB6378436E3C65D03DD66DA7C6EBFF563BD857A
4BED3ADC52D4904075F6BBF279EC4ACEDE079533B95E229A29809542EA324A7B
62E6F13B53D67FDD780E20D89A6E8EE503B197AC16AC3F1D2571C147FDD324C9
7F535673D836D3D77A97DB03EB3D71EA780F44372F5AEBECEBEDD696AAEB8378
97E613E5A3A47DEC76B7E50D47644B35EA4322F00D594D80D2F1C1F3644F8A4A
C356AFF1A01C2B0DA472E584C8E3C8F875B9A24280435D42836A77B19F5A8C18
C61B1941CF756EB7551F7C661743802362728B785ADC22E860D269713DFB01A6
D5B7247C497788CF0031CEB06E3DF77A45FEF59F1E49633DC7159816D64759B5
m_9390b58ebf884f22aeffba50c18a3413
m_dcf0bfd2ea32456b8b0dbf5d4776633d
m_18d5689cdf16440bb49008f23fee62a2
m_73870d9bf6364a47b41559afa0853b2a
m_6126ba3ada0845eb88b180dd3bbbc465
m_d0500faaf2fd49b0981727a579e6ef2e
m_fc80ce7f768e4dd6b177c0b99cee28aa
m_22607a22cb284afdb6f6b139c8d5af3b
m_cd4c02307e514bee92db64ce66e096fd
m_0bf7822c01f9406094671804923d981a
m_c22678d4d93545c481bd4d2f11ba5258
m_ba8b095e0c2b489d937b4ec80f3a6e8d
m_f3fc9fb947404d28b87a732ec3ea96d9
m_7ae559a0a5524f6e9f908addc0d3101d
m_948d1d643045463c915b47e91c6d3d17
m_aff19e8c92244dd2aa5ca9e12026c85d
m_c29dd25214294fcfa867e30860622def
m_084d963d4c334086a97e83c0dd5c29b2
m_1e35627f353b4b439807c3050a69df32
m_dab40cdd973d46e5ab5ebbbac22cd914
m_ea508d78d73142298443133253911d70
m_fb24b834e91745c8a745934efb3d6ee1
m_43c81d68bc19467ea6e00a1f0ce463fc
m_1cd1495a08f04b558257d7229e3994f3
m_8c7394090a144d7aa2a1ee24e44c7046
m_49812b61098d46a5b0eda8d59c6437fb
m_1b175e27466f4f85a6a5e5db2b98bd53
m_d870e1dceaed439da2ef66ebb8541c23
m_52e383f2a1794c60bc1bf7bf170f580a
m_6ca905a20b104aa7a3b01989075d6027
m_9050225eaf86428e82261df1cd0292e6
m_81348580382d47cb986db62a4df4ea0b
m_2caf7475b2a74c069f8973616b1ddb79
m_1fcb96cc2c1e4b00b183be6595a7660f
m_5306eb6ec93344708e1be928981267b1
m_1a1391d1715b4c35959c29755c08d256
m_4009ff5da41b4265bde29eb65c7668f3
m_fe32d18a285b41438a66de6c87c9d05a
m_3c4dccc5c4444e11ade330faedada0c7
m_3e80cbfce73a437cb419f24b5d2f05bb
m_9839088e47204313ac804d1a60bce4b3
m_c6713863bcde471bbdb86affbb498fbf
m_8c0ccebb163543429c49e202f93930f1
m_256c261355f04a6185834c5deb6740c5
m_81e681f741fa4b37a3e54b20ec06c43f
m_76e8d89ea1294ea2ba72ac05a65f655d
m_c58cc13c772449a495d08a433b34ba63
m_fd6cd6d162f740b98d00f8ab7bc480b0
m_fed4ffd4694c4227bc5c35b717f5dc3e
m_a85ac4c79b9e4613bb6824a3e7d88073
m_ab5dc973ee0f4cddb1b27db25386e03a
m_10cf5ac5172f41319305040978377deb
m_50c75b7722004dec936f74a6a02401a6
m_481b8a08d83f4319aea85cc0d57f4585
m_75d1d606496443f99d87e43738fc4c48
m_f9992f3490904eddb2990bd8d335fbc7
m_0a3b0bad0227444d97742ad3c9e394be
m_5f1117030be04d7eaaac2ac118203187
m_ed28563447be42d88f801a3e6bbba072
m_5d94d37e13f242d7aa09188166fcf195
m_e53672b4d2d643d8a5321d080dd17707
m_eaa8266f7d424724a52e20376ee26aba
m_3e13a5bdb99c4c31b874d55b0426ed34
m_f6a24bbfa02547f195ca7ef6d9f19413
m_f4255d1570594e72bfac96840802c56c
m_6d7c451e49724059868fe6b92cad0bca
m_376ce8c80c6b4f68954b220c4d4103b1
m_3f1c1fb66dcb4346bab7488fa18f8cf7
m_b45579410e9446f4b227fe897cc6df4e
m_b78e0768124f45f78484177912cae8ed
m_e60c95afe9d64fbcbd56785f15499c8e
m_fb9dfeac9d37400e8a873772047253b5
m_bd774662a85541c28a3baf3429a87e0d
m_e30f4699cf064197b3135162a4d43e35
m_7b1c26fcad1341a08bc4c274074614c6
m_012df85dae6d415a93b43ba772adc402
m_1c4b5df9f4d34fea9091e9ebdfe88554
m_09e2c63754a34d7e8a48a7331b62090a
m_359935260f8242b39efb4359aae84f07
m_bb1051f39a1742ffbbe0c8d2736e9786
m_fc6e1a9c4ba04a16aade01ff68b88246
m_b27ebab4b3c04d28a91aadc52a42b282
m_a06106f847414f7ca9451589836f7572
m_96a278246bf741b39d9f6100065cc957
m_4deb002117fb42f099038e1518298b58
m_ab7ebe521dc8457a90495b05a6309ebb
m_61fcfcd72f504f538870f271bd4c5785
m_7ce55b1c039b462a8db6cfb578886011
m_437a541fd4324a1896df64086c0048c3
m_eec4fae7c5d54bb9a87e3ed0072bb45d
m_3e615e3c4ba64b45ae472b61c6233108
m_17d890b11e1b41269f87f7c0faa7a292
m_90e2b9f25b5740a89710833c6a7f3f44
m_435784cd5c394131b1417c6e839aaff5
m_1807c38f805143628cd81737261fa9c5
m_8f78c31e6a1742038cd0141950ee021e
m_80519e18eac74734985d0e304b3e4f70
m_9dffaac1b8d5445da7dba4140b5ffefd
m_f9376f8710034dc79f37d2c6630411a0
m_2784f50981374c8a8579c208cecd1f1e
m_7822ce3969474d7eaf731f7ff23d6a53
m_db94cf21a5ed4c78a83c9d000a1e94d7
m_1101febf13234aef9610865e25191d0f
m_442ae04b8fc642489c132d03f4d6dca7
m_bf668daeba254b6a988f5a698fdf5ddd
m_2ec8ade3c766455abe77d4b9b4bedb5f
m_6a90587e95234e0ea79075e1b6d1ca3e
m_96220ef859d345cc87dfa410af425413
m_e0747a2af530466fa268c6e0522e3da9
o6feb1450ae9144bd9a8ca1af8764b3cd
UnverifiableCodeAttribute
System.Security
DynamicAttribute
ParamArrayAttribute
CompilerGeneratedAttribute
FlagsAttribute
DataContractAttribute
DataMemberAttribute
EnumMemberAttribute
SessionMode
ServiceContractAttribute
OperationContractAttribute
STAThreadAttribute
UnmanagedFunctionPointerAttribute
CallingConvention
CharSet
vkG2VwucLcF6bULd5S.f09bpF8SnE9XPFG9g1
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
WrapNonExceptionThrows
Sheerest
Gingerous App
Sheerest Corp. 2021
40.47.92
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
RuleDetailsFieldT
Namespace
modelModifiedAssessment%
authenticationAmountAlert
shipmentEndAction@
RecordValueQueryT
Namespace
modelModifiedAssessment
changeUnloadedCount)
notificationLikelihoodMessageA
UserPlannedModuleT
Namespace
modelModifiedAssessment)
employeeModificationStatistic
shipmentDueFeature%
invoiceDeadlineConference!
ruleSubmittedSolution
eventNumberAnalysis#
regionUnpackedComponent$
itineraryPlannedPlatform,
Name specificationLikelihoodStatisticH
CommunicationTrackedInfoT
Namespace
modelModifiedAssessment%
productLoadedNotification$
accountProcessedStrategy#
performanceRemarkPlugin$
notificationPackedMetric%
calendarProbabilityRecord$
permissionApprovedRemark
roleReceivedDesign
mediaValueCount
scheduleOptionLog
toolAuditedFlag
productArrangedPlan
orderStatusWorkshop$
enhancementBookedMeeting
vendorReviewData
accessStatusDatabaseI
DepartmentDeliveredSignalT
Namespace
modelModifiedAssessment
modelPriorityModel"
policyCommentPrototype*
designEvaluationInfrastructure&
complianceEffectiveNetwork)
promotionProbabilityOperation
issueUpgradeFunction"
prototypeScheduledDataD
DesignPlannedSessionT
Namespace
modelModifiedAssessment
bugStatusMessage#
taskInspectedConference"
licenseFeedbackTracker
logScoreRelease"
logDelegatedAssessment%
communicationCodeFunction&
equipmentSeverityProcedure
orderBookedPage
accountIssuedLog$
releaseApprovedStatistic#
transactionQualityModel"
contractModifiedColumn
regionTypeStatistic#
countryPriorityWorkshop'
improvementCompletionDesign"
accessReviewedTraining!
accountTotalStatisticA
LicenseBookedListT
Namespace
modelModifiedAssessment
goalAmountHistory%
productFunctionEvaluation$
transactionUpdatedDetail
vendorLikelihoodFormD
InventoryAddressFileT
Namespace
modelModifiedAssessment!
audioCommentStatistic
brandAssessmentForm!
featureAssignedSystemH
AgreementLoadedPrototypeT
Namespace
modelModifiedAssessment
planAllocatedCount)
optimizationCapabilityWarning)
complianceExchangedEvaluationF
DepartmentRejectedFormT
Namespace
modelModifiedAssessment#
paymentCommentPlatform&
equipmentScheduledMonitorB
GoalCompletionToolT
Namespace
modelModifiedAssessment#
permissionExchangedTool
licenseSentService"
transactionUpdatedPlan
IPrototypeNumberReportTUwSystem.ServiceModel.SessionMode, System.ServiceModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SessionMode
AnalyticsAmountNote
RouteRoleProcess
RecordGradeFlagF
ScheduleAmountDatabaseT
Namespace
modelModifiedAssessment!
changeValidatedMetric"
projectAssessmentAlert
roleSettingMeetingL
RegionDeadlineInfrastructureT
Namespace
modelModifiedAssessment%
featureRevisionConference
roleDelegatedComment
imageBookedSignal
modelValueDiary"
notificationOpenedFormB
TicketUpgradeScoreT
Namespace
modelModifiedAssessment%
transactionQuantityRecord
routeUpdatedWorkflow&
scheduleQuantityCapability
messageIssuedModule&
permissionPrivilegeService#
helpDescriptionStrategy
prototypeStatusCode$
requestCompletionWarning
meetingTaxOperation
userRateBlueprint
featureEndSummary"
performanceBookedCount
serviceDateCode*
assistanceDesignatedAssessment)
departmentCreatedNotification
couponConfirmedPage
countryRateBlueprintG
RouteAssessmentFeedbackT
Namespace
modelModifiedAssessment
brandNoteIndicator$
reviewLoadedArchitecture!
transactionOptionData
PqOpJ.Kpk+shg+Php`1[[System.Object, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]][]
SUsSystem.Runtime.InteropServices.CharSet, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
CharSet
Bms?Ka
~I;vBhcT
;iYld7
e=.7o9
eQ^#~;
?sA@c.(
/ uHb5C
PQAeS~
~4[C)v
D0.N9\
gg}V++
jL&&Zl66A~??
Sb11?*
tX,,.4
RRMv;;a
MMUf33
PPDx<<
cB!!0
~~Gz==
fD""~T**
Vd22Nt::
xxoJ%%r\..$8
tt!>
ppB|>>
aa_j55
UUxP((z
lpG`r*
&jL&6Zl6?A~?
~=Gz=d
"fD"*~T*
2Vd2:Nt:
x%oJ%.r\.
t!>K
a5_j5W
r=rm5Z
~Mk,F:
~Mk,F:
~Mk,F:
=&&jL66Zl??A~
g99KrJJ
==Gzdd
""fD**~T
22Vd::Nt
$$lH\\
77Ynmm
%%oJ..r\
!>KK
55_jWW
cLk4rS
uJqGnSo
~Mk,F:
~Mk,F:
L&&jl66Z~??A
Oh44\Q
sb11S*
uB!!c
D""fT**~;
;d22Vt::N
J%%o\..r8
X sY\>
CNP,0.
[T:$6.
~Mk,F:
[.:$6g
j_FbT~
h4,8$@_
2\tHlWB
{+^&uh
x6|T0h
:w1(&
Q.<}E`(G
tlTkt2
SNa{n2
Kn#tO3
~I[ksh
i]Su17
DBRfhn M
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGX
&%,+-+/.21HGIGJGKGLGMGNGOGPGQGRGSGTGUGVGWGXGYGZG[G\G]G^G_G`GaGbGcGdGih}|~|
ToString
EnumerateDirectories
c70b781816f8bbe895ee4fe8d67b4238
localhost
GetFiles
FullName
Replace
Directory
ExpandEnvironmentVariable
Field2
Field1
Field3
IsNullOrWhiteSpace
ParseDiscordTokens
AddRange
eYy.oYN
button1
System
CywcJBcTIQMKWhwZJVs+QSVaLgAlWhgNEDwmRhRZLgIiPzIlJAM6OSQsJQ4jLiYNJC4YDhM9JUcfE0RJ
IjoABggtLjISPTIVFCEiABACOUUNWzlHEwIMHhwTRE0=
{0}{1}{2}
System.Core, Version=3.5.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.Security.Cryptography.AesCryptoServiceProvider
System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
DVK4x0oRQ5hgcEtkX9.4YvpPZZQHiu11fwI7m
{11111-22222-10009-11111}
{11111-22222-10009-11112}
Debugger Detected
{11111-22222-50001-00000}
GetDelegateForFunctionPointer
file:///
Location
ResourceA
Virtual
Write
Process
Memory
Protect
Process
Close
Handle
kernel
32.dll
{11111-22222-10001-00001}
{11111-22222-10001-00002}
{11111-22222-20001-00001}
{11111-22222-20001-00002}
{11111-22222-30001-00001}
{11111-22222-30001-00002}
{11111-22222-40001-00001}
{11111-22222-40001-00002}
vkG2VwucLcF6bULd5S.f09bpF8SnE9XPFG9g1
\tdata
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
Gingerous App
CompanyName
Sheerest
FileDescription
Sheerest
FileVersion
40.47.92
InternalName
Gabionade.exe
LegalCopyright
Sheerest Corp. 2021
OriginalFilename
Gabionade.exe
ProductName
ProductVersion
40.47.92
Assembly Version
67.14.82.0
Antivirus Signature
Bkav W32.AIDetectMalware.CS
Lionic Trojan.Win32.RedLine.i!c
tehtris Generic.Malware
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
Skyhigh Clean
ALYac Clean
Cylance Unsafe
Zillya Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Spyware ( 0059955a1 )
Alibaba TrojanPSW:MSIL/Reline.022d17a3
K7GW Spyware ( 0059955a1 )
Cybereason Clean
huorong TrojanSpy/RedLine.q
Baidu Clean
VirIT Trojan.Win32.MSIL_Heur.A
Paloalto generic.ml
Symantec ML.Attribute.HighConfidence
Elastic Windows.Trojan.RedLineStealer
ESET-NOD32 a variant of MSIL/Spy.RedLine.A
APEX Malicious
Avast Win32:SpywareX-gen [Trj]
Cynet Clean
Kaspersky HEUR:Trojan-PSW.MSIL.Reline.gen
BitDefender Gen:Variant.Jalapeno.18253
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Gen:Variant.Lazy.600298
Tencent Msil.Trojan-QQPass.QQRob.Lflw
TACHYON Clean
Sophos Mal/Generic-S
F-Secure Clean
DrWeb Clean
VIPRE Clean
TrendMicro Trojan.Win32.PRIVATELOADER.YXEIIZ
McAfeeD Real Protect-LS!805C6DFA454D
Trapmine suspicious.low.ml.score
FireEye Generic.mg.805c6dfa454dc8a5
Emsisoft Gen:Variant.Lazy.600298 (B)
Ikarus Trojan-Spy.MSIL.Redline
GData Gen:Variant.Lazy.600298
Jiangmin Clean
Webroot Clean
Varist W32/ABRisk.QHIZ-2446
Avira TR/Spy.RedLine.jnxwr
Antiy-AVL Trojan[PSW]/MSIL.Reline
Kingsoft MSIL.Trojan-PSW.Reline.gen
Gridinsoft Ransom.Win32.Sabsik.sa
Xcitium Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan-PSW.MSIL.Reline.gen
Microsoft Trojan:Win32/Sabsik.FL.B!ml
Google Detected
AhnLab-V3 Clean
Acronis Clean
McAfee Clean
MAX malware (ai score=80)
VBA32 Malware-Cryptor.MSIL.AgentTesla.Heur
Malwarebytes Malware.AI.4230420507
Panda Clean
Zoner Clean
TrendMicro-HouseCall Trojan.Win32.PRIVATELOADER.YXEIIZ
Rising Spyware.RedLine!8.197D6 (CLOUD)
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Trojan.Malware.300983.susgen
Fortinet MSIL/RedLine.A!tr.spy
AVG Win32:SpywareX-gen [Trj]
DeepInstinct MALICIOUS
CrowdStrike win/malicious_confidence_70% (D)
alibabacloud Trojan[stealer]:MSIL/RedLine.A
No IRMA results available.