Static | ZeroBOX

PE Compile Time

2021-01-27 03:18:12

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0015b824 0x0015ba00 2.77868832337
.reloc 0x0015e000 0x0000000c 0x00000200 0.101910425663

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.reloc
v4.0.30319
#Strings
Ldc_I4_0
Ldarg_0
Ldc_I4_1
UInt32
Ldc_I4_2
<Module>
System.IO
ProjectData
System.Web
mscorlib
Microsoft.VisualBasic
Thread
Versioned
DynamicMethod
CompareMethod
GetMethod
Replace
CreateInstance
get_Code
get_SubCode
SoapFaultSubCode
OpCode
get_Message
Invoke
RuntimeTypeHandle
GetTypeFromHandle
ObjectHandle
get_Name
XmlQualifiedName
get_FullName
CallType
GetType
get_InvariantCulture
MethodBase
WriteByte
ToByte
Stelem_Ref
System.Threading
ToString
System.Runtime.Remoting
get_Length
Decimal
System.Xml
MemoryStream
System
DnsPermission
System.Globalization
System.Reflection
TeamFoundationServiceException
SoapException
get_InnerException
LabServerException
ArgumentException
ConvertException
ApplicationShutdownReason
MethodInfo
CultureInfo
Unwrap
Binder
CreateProjectError
ClearProjectError
SetProjectError
GetILGenerator
Activator
.cctor
Newarr
UIntPtr
System.Web.Services
Microsoft.VisualBasic.CompilerServices
OpCodes
BindingFlags
Strings
Equals
System.Web.Services.Protocols
System.Windows.Forms
Conversions
get_Chars
DataFormats
Concat
Object
System.Net
System.Reflection.Emit
Microsoft.TeamFoundation.Lab.Client
Microsoft.TeamFoundation.Framework.Client
Microsoft.TeamFoundation.Client
ToArray
GetAssembly
op_Equality
_CorExeMain
mscoree.dll
DigiCert Inc1
www.digicert.com1200
)DigiCert High Assurance Code Signing CA-10
180105000000Z
191231120000Z0d1
Virginia1
Fairfax1
Invincea, Inc.1
Invincea, Inc.0
(http://crl3.digicert.com/ha-cs-2011a.crl0.
(http://crl4.digicert.com/ha-cs-2011a.crl0L
https://www.digicert.com/CPS0
http://ocsp.digicert.com0P
Dhttp://cacerts.digicert.com/DigiCertHighAssuranceCodeSigningCA-1.crt0
Washington1
Redmond1
Microsoft Corporation1)0'
Microsoft Code Verification Root0
110415194533Z
210415195533Z0l1
DigiCert Inc1
www.digicert.com1+0)
"DigiCert High Assurance EV Root CA0
:8P[w1
AA"Nea
Dhttp://crl.microsoft.com/pki/crl/products/MicrosoftCodeVerifRoot.crl0
DigiCert Inc1
www.digicert.com1!0
DigiCert Assured ID CA-10
141022000000Z
241022000000Z0G1
DigiCert1%0#
DigiCert Timestamp Responder0
https://www.digicert.com/CPS0
2http://crl3.digicert.com/DigiCertAssuredIDCA-1.crl08
2http://crl4.digicert.com/DigiCertAssuredIDCA-1.crl0w
http://ocsp.digicert.com0A
5http://cacerts.digicert.com/DigiCertAssuredIDCA-1.crt0
iW!]4/q
DigiCert Inc1
www.digicert.com1+0)
"DigiCert High Assurance EV Root CA0
110211120000Z
260210120000Z0s1
DigiCert Inc1
www.digicert.com1200
)DigiCert High Assurance Code Signing CA-10
.http://www.digicert.com/ssl-cps-repository.htm0
http://ocsp.digicert.com0I
=http://cacerts.digicert.com/DigiCertHighAssuranceEVRootCA.crt0
:http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl0@
:http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl0
}@f&3/DU
z2 >l&
DigiCert Inc1
www.digicert.com1$0"
DigiCert Assured ID Root CA0
061110000000Z
211110000000Z0b1
DigiCert Inc1
www.digicert.com1!0
DigiCert Assured ID CA-10
.http://www.digicert.com/ssl-cps-repository.htm0
http://ocsp.digicert.com0C
7http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
4http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0:
4http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0
DigiCert Inc1
www.digicert.com1200
)DigiCert High Assurance Code Signing CA-1
DigiCert Inc1
www.digicert.com1!0
DigiCert Assured ID CA-1
191217003542Z0#
DigiCert Inc1
www.digicert.com1503
,DigiCert SHA2 High Assurance Code Signing CA0
171220000000Z
210313120000Z0d1
Virginia1
Fairfax1
Invincea, Inc.1
Invincea, Inc.0
*http://crl3.digicert.com/sha2-ha-cs-g1.crl00
*http://crl4.digicert.com/sha2-ha-cs-g1.crl0L
https://www.digicert.com/CPS0
http://ocsp.digicert.com0R
Fhttp://cacerts.digicert.com/DigiCertSHA2HighAssuranceCodeSigningCA.crt0
$e7O7>j
Washington1
Redmond1
Microsoft Corporation1)0'
Microsoft Code Verification Root0
110415194533Z
210415195533Z0l1
DigiCert Inc1
www.digicert.com1+0)
"DigiCert High Assurance EV Root CA0
:8P[w1
AA"Nea
Dhttp://crl.microsoft.com/pki/crl/products/MicrosoftCodeVerifRoot.crl0
DigiCert Inc1
www.digicert.com1+0)
"DigiCert High Assurance EV Root CA0
131022120000Z
281022120000Z0v1
DigiCert Inc1
www.digicert.com1503
,DigiCert SHA2 High Assurance Code Signing CA0
232dus(&
http://ocsp.digicert.com0I
=http://cacerts.digicert.com/DigiCertHighAssuranceEVRootCA.crt0
:http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl0@
:http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl0O
https://www.digicert.com/CPS0
DigiCert Inc1
www.digicert.com1503
,DigiCert SHA2 High Assurance Code Signing CA
20191217003553Z
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Timestamping CA0
191001000000Z
301017000000Z0L1
DigiCert, Inc.1$0"
TIMESTAMP-SHA256-2019-10-150
gz8wT@
https://www.digicert.com/CPS0
,http://crl3.digicert.com/sha2-assured-ts.crl02
,http://crl4.digicert.com/sha2-assured-ts.crl0
http://ocsp.digicert.com0O
Chttp://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
J/nz<cn7
DigiCert Inc1
www.digicert.com1$0"
DigiCert Assured ID Root CA0
160107120000Z
310107120000Z0r1
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Timestamping CA0
fnVa')
http://ocsp.digicert.com0C
7http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
4http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
4http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
https://www.digicert.com/CPS0
8aMbF$
V3"/"6
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Timestamping CA
191217003553Z0+
1e"b R
DigiCert Inc1
www.digicert.com1200
)DigiCert High Assurance Code Signing CA-10
180105000000Z
191231120000Z0d1
Virginia1
Fairfax1
Invincea, Inc.1
Invincea, Inc.0
(http://crl3.digicert.com/ha-cs-2011a.crl0.
(http://crl4.digicert.com/ha-cs-2011a.crl0L
https://www.digicert.com/CPS0
http://ocsp.digicert.com0P
Dhttp://cacerts.digicert.com/DigiCertHighAssuranceCodeSigningCA-1.crt0
Washington1
Redmond1
Microsoft Corporation1)0'
Microsoft Code Verification Root0
110415194533Z
210415195533Z0l1
DigiCert Inc1
www.digicert.com1+0)
"DigiCert High Assurance EV Root CA0
:8P[w1
AA"Nea
Dhttp://crl.microsoft.com/pki/crl/products/MicrosoftCodeVerifRoot.crl0
DigiCert Inc1
www.digicert.com1!0
DigiCert Assured ID CA-10
141022000000Z
241022000000Z0G1
DigiCert1%0#
DigiCert Timestamp Responder0
https://www.digicert.com/CPS0
2http://crl3.digicert.com/DigiCertAssuredIDCA-1.crl08
2http://crl4.digicert.com/DigiCertAssuredIDCA-1.crl0w
http://ocsp.digicert.com0A
5http://cacerts.digicert.com/DigiCertAssuredIDCA-1.crt0
iW!]4/q
DigiCert Inc1
www.digicert.com1+0)
"DigiCert High Assurance EV Root CA0
110211120000Z
260210120000Z0s1
DigiCert Inc1
www.digicert.com1200
)DigiCert High Assurance Code Signing CA-10
.http://www.digicert.com/ssl-cps-repository.htm0
http://ocsp.digicert.com0I
=http://cacerts.digicert.com/DigiCertHighAssuranceEVRootCA.crt0
:http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl0@
:http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl0
}@f&3/DU
z2 >l&
DigiCert Inc1
www.digicert.com1$0"
DigiCert Assured ID Root CA0
061110000000Z
211110000000Z0b1
DigiCert Inc1
www.digicert.com1!0
DigiCert Assured ID CA-10
.http://www.digicert.com/ssl-cps-repository.htm0
http://ocsp.digicert.com0C
7http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
4http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0:
4http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0
DigiCert Inc1
www.digicert.com1200
)DigiCert High Assurance Code Signing CA-1
DigiCert Inc1
www.digicert.com1!0
DigiCert Assured ID CA-1
191217003542Z0#
DigiCert Inc1
www.digicert.com1503
,DigiCert SHA2 High Assurance Code Signing CA0
171220000000Z
210313120000Z0d1
Virginia1
Fairfax1
Invincea, Inc.1
Invincea, Inc.0
*http://crl3.digicert.com/sha2-ha-cs-g1.crl00
*http://crl4.digicert.com/sha2-ha-cs-g1.crl0L
https://www.digicert.com/CPS0
http://ocsp.digicert.com0R
Fhttp://cacerts.digicert.com/DigiCertSHA2HighAssuranceCodeSigningCA.crt0
$e7O7>j
Washington1
Redmond1
Microsoft Corporation1)0'
Microsoft Code Verification Root0
110415194533Z
210415195533Z0l1
DigiCert Inc1
www.digicert.com1+0)
"DigiCert High Assurance EV Root CA0
:8P[w1
AA"Nea
Dhttp://crl.microsoft.com/pki/crl/products/MicrosoftCodeVerifRoot.crl0
DigiCert Inc1
www.digicert.com1+0)
"DigiCert High Assurance EV Root CA0
131022120000Z
281022120000Z0v1
DigiCert Inc1
www.digicert.com1503
,DigiCert SHA2 High Assurance Code Signing CA0
232dus(&
http://ocsp.digicert.com0I
=http://cacerts.digicert.com/DigiCertHighAssuranceEVRootCA.crt0
:http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl0@
:http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl0O
https://www.digicert.com/CPS0
DigiCert Inc1
www.digicert.com1503
,DigiCert SHA2 High Assurance Code Signing CA
20191217003553Z
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Timestamping CA0
191001000000Z
301017000000Z0L1
DigiCert, Inc.1$0"
TIMESTAMP-SHA256-2019-10-150
gz8wT@
https://www.digicert.com/CPS0
,http://crl3.digicert.com/sha2-assured-ts.crl02
,http://crl4.digicert.com/sha2-assured-ts.crl0
http://ocsp.digicert.com0O
Chttp://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
J/nz<cn7
DigiCert Inc1
www.digicert.com1$0"
DigiCert Assured ID Root CA0
160107120000Z
310107120000Z0r1
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Timestamping CA0
fnVa')
http://ocsp.digicert.com0C
7http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
4http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
4http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
https://www.digicert.com/CPS0
8aMbF$
V3"/"6
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Timestamping CA
191217003553Z0+
1e"b R
UUxImx;ssxmxOxmxmxmxsxmxmxmxECCxECCxmxmx;]sxmxmxmxmxmxmxmxfsxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmx;E]xmxmxmx;sxO;x;]fx;sxmx;]mxIxEmCxOOx;]sx;xUfxEmCxOOx]sx;msx;mCx;;CxOEx;;Ex;;sx;;;x;mOx;;sxIUx;mIxOExIIxIUx;;mx;;mx;;;x;;fxOExI]x;m;xOEx;;sx;;Ux;;mxOEx;mCx;;mxOExf]xUIx]OxOEx;mIx;;;x;mmx;m;xsfx;Ox;Ox;mxOfxmxmxmxmxmxmxmx]mxfIxmxmxUfx;xOxmxEEUxIEx;fxIfxmxmxmxmxmxmxmxmxEEsxmxOsxmx;;x;x]mxmxmxsxOxmxmxfxmxmxmxmxmxmxU]xOsxOxmxmxOExmxmxmxfsxOxmxmxmxmx;fxmxOExmxmxmxExmxmxsxmxmxmxmxmxmxmxsxmxmxmxmxmxmxmxmx;E]xOxmxmxExmxmxmxmxmxmxExmxfsx;OOxmxmx;fxmxmx;fxmxmxmxmx;fxmxmx;fxmxmxmxmxmxmx;fxmxmxmxmxmxmxmxmxmxmxmxEssxOOxOxmx]UxmxmxmxmxfsxOxmx]sxOxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxIfxOxmx;ExmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxOExmxmx]xmxmxmxmxmxmxmxmxmxmxmx]xOExmxmxUExmxmxmxmxmxmxmxmxmxmxmxsfx;;fx;m;x;Emx;;fxmxmxmx]sxExOxmxmxOExmxmxmxsxOxmxmxExmxmxmxmxmxmxmxmxmxmxmxmxmxmxOExmxmxIfxsfx;;sx;;Cx;;sxIIxmxmxmx]sxOxmxmxmxfsxOxmxmx
RAny use of this Certificate constitutes acceptance of the DigiCert CP/CPS and the Relying Party Agreement which limit liability and are incorporated herein by reference
RAny use of this Certificate constitutes acceptance of the DigiCert CP/CPS and the Relying Party Agreement which limit liability and are incorporated herein by reference
RAny use of this Certificate constitutes acceptance of the DigiCert CP/CPS and the Relying Party Agreement which limit liability and are incorporated herein by reference
RAny use of this Certificate constitutes acceptance of the DigiCert CP/CPS and the Relying Party Agreement which limit liability and are incorporated herein by reference
RAny use of this Certificate constitutes acceptance of the DigiCert CP/CPS and the Relying Party Agreement which limit liability and are incorporated herein by reference
RAny use of this Certificate constitutes acceptance of the DigiCert CP/CPS and the Relying Party Agreement which limit liability and are incorporated herein by reference
RAny use of this Certificate constitutes acceptance of the DigiCert CP/CPS and the Relying Party Agreement which limit liability and are incorporated herein by reference
RAny use of this Certificate constitutes acceptance of the DigiCert CP/CPS and the Relying Party Agreement which limit liability and are incorporated herein by reference
Antivirus Signature
Bkav Clean
Elastic malicious (high confidence)
MicroWorld-eScan Trojan.GenericKD.36254252
FireEye Generic.mg.3f1165d54ebadca8
CAT-QuickHeal Trojanpws.Msil
ALYac Trojan.GenericKD.36254252
Cylance Unsafe
VIPRE Trojan.Win32.Generic!BT
Sangfor Trojan.Win32.Save.a
K7AntiVirus Trojan ( 00575cf01 )
BitDefender Trojan.GenericKD.36254252
K7GW Trojan ( 00575cf01 )
Cybereason malicious.54ebad
BitDefenderTheta Gen:NN.ZemsilF.34628.zjZ@ai7otGf
Cyren W32/Trojan.MDHI-2789
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of MSIL/Kryptik.ZLN
Baidu Clean
APEX Malicious
Avast Win32:PWSX-gen [Trj]
ClamAV Clean
Kaspersky HEUR:Trojan-PSW.MSIL.Reline.gen
Alibaba TrojanPSW:MSIL/AgentTesla.e95b49a9
NANO-Antivirus Trojan.Win32.Reline.iixiuy
ViRobot Clean
AegisLab Trojan.MSIL.Reline.i!c
Tencent Win32.Trojan.Falsesign.Lkxl
Ad-Aware Trojan.GenericKD.36254252
TACHYON Clean
Sophos Mal/Generic-S
Comodo Malware@#a8tsdfvu2uhs
F-Secure Clean
DrWeb Trojan.PWS.RedLine.21
Zillya Clean
TrendMicro TROJ_GEN.R011C0WAU21
McAfee-GW-Edition PWS-FCWL!3F1165D54EBA
CMC Clean
Emsisoft Trojan.GenericKD.36254252 (B)
Ikarus Trojan.MSIL.Agent
GData Trojan.GenericKD.36254252
Jiangmin Clean
eGambit PE.Heur.InvalidSig
Avira TR/Kryptik.ruome
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Trojan.Generic.D229322C
SUPERAntiSpyware Clean
AhnLab-V3 Malware/Gen.RL_Reputation.C4317176
ZoneAlarm HEUR:Trojan-PSW.MSIL.Reline.gen
Microsoft Trojan:MSIL/AgentTesla.AV!MTB
Cynet Malicious (score: 100)
TotalDefense Clean
Acronis Clean
McAfee PWS-FCWL!3F1165D54EBA
MAX malware (ai score=100)
VBA32 Clean
Malwarebytes Spyware.RedLineStealer
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R011C0WAU21
Rising Trojan.GenKryptik!8.AA55 (CLOUD)
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Trojan.Malware.300983.susgen
Fortinet MSIL/GenKryptik.EZWO!tr
Webroot Clean
AVG Win32:PWSX-gen [Trj]
Paloalto generic.ml
CrowdStrike win/malicious_confidence_100% (W)
Qihoo-360 Win32/Trojan.Kryptik.HgIASPYA
No IRMA results available.