Static | ZeroBOX

Name	Virtual Address	Virtual Size	Size of Raw Data	Entropy
.text	0x00002000	0x00010664	0x00010800	5.38059552855
.rsrc	0x00014000	0x00000660	0x00000800	4.8846977558
.reloc	0x00016000	0x0000000c	0x00000200	0.101910425663

Name	Offset	Size	Language	Sub-language	File type
RT_VERSION	0x000140a0	0x000003d4	LANG_ENGLISH	SUBLANG_ENGLISH_US	data
RT_MANIFEST	0x00014474	0x000001ea	LANG_NEUTRAL	SUBLANG_NEUTRAL	XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

!This program cannot be run in DOS mode.

`.rsrc

@.reloc

lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet

PADPADP

v4.0.30319

#Strings

EnumInt32TypeInfo`1

List`1

ToInt32

System.IO

mscorlib

System.Collections.Generic

Thread

Synchronized

Replace

set_AutoScaleMode

Invoke

IDisposable

RuntimeTypeHandle

GetTypeFromHandle

Capture

MethodBase

ApplicationSettingsBase

Dispose

EditorBrowsableState

CompilerGeneratedAttribute

GeneratedCodeAttribute

DebuggerNonUserCodeAttribute

EditorBrowsableAttribute

DefaultSettingValueAttribute

UserScopedSettingAttribute

ContractArgumentValidatorAttribute

WriteByte

ToByte

get_Value

set_ClientSize

System.Diagnostics.Tracing

System.Threading

DownloadString

ToString

disposing

System.Runtime.Remoting

System.Drawing

get_Length

System.ComponentModel

ContainerControl

UserControl

MemoryStream

get_Item

set_Item

System

Boolean

AppDomain

get_CurrentDomain

System.Configuration

System.Globalization

System.Reflection

MatchCollection

GroupCollection

WebHeaderCollection

AllMembershipCondition

FileNotFoundException

MethodInfo

ITypeInfo

CultureInfo

ToChar

LocalBuilder

ResourceManager

System.CodeDom.Compiler

IContainer

BitConverter

IEnumerator

GetEnumerator

.cctor

System.Diagnostics

SoapServices

System.Runtime.CompilerServices

System.Resources

.Properties.Resources.resources

Matches

System.Runtime.InteropServices.ComTypes

System.Windows.Forms

Contains

System.Text.RegularExpressions

System.Collections

get_Groups

get_Chars

get_Headers

System.Diagnostics.Contracts

__HResults

Concat

Object

System.Net

System.Reflection.Emit

WebClient

get_Current

get_EntryPoint

Convert

LegacyEvidenceList

MoveNext

set_Text

ToArray

System.Security.Policy

get_Assembly

XmlEntry

xfxxxKx

3System.Resources.Tools.StronglyTypedResourceBuilder

4.0.0.0

KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator

16.6.0.0

_CorExeMain

mscoree.dll

d/N/X/L/Z/p/F/v/s/N/z/\/|/T/L/

d/N/X/L/Z/p/F/v/s/N/z/\/|/T/L/.

d/N/X/L/Z/p/F/v/s/N/z/\/|/T/L/

d/N/X/L/Z/p/F/v/s/N/z/\/|/T/L/.

d/N/X/L/Z/p/F/v/s/N/z/\/|/T/L/

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>

</requestedPrivileges>

</security>

</trustInfo>

</assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDING

(eLQLxlhqYJgcbTXIeEdlMGmVeFiUPgBqcUIOnFGd1*0(

!buCrVAbkZRrYnwqxzVHSdmBSiPZgkjvyY1+0)

"ZjsdVaEDXVXPCcFElpsYNaOSKjfAVZQwSa1

omXuEUdpf1)0'

rDdFNtCZUdzkZuztMUdHYfBWBNsGRKxV1$0"

yUxoHDrgsaVtQoSxaSaZHgmcheZ10

aWijFELeXlMjCXpYjhDLzA1,0*

#iQSxVRNklzrfwRMNOejUmoIxcsidUDsANsq0

210330221904Z

220330221904Z0

(eLQLxlhqYJgcbTXIeEdlMGmVeFiUPgBqcUIOnFGd1*0(

!buCrVAbkZRrYnwqxzVHSdmBSiPZgkjvyY1+0)

"ZjsdVaEDXVXPCcFElpsYNaOSKjfAVZQwSa1

omXuEUdpf1)0'

rDdFNtCZUdzkZuztMUdHYfBWBNsGRKxV1$0"

yUxoHDrgsaVtQoSxaSaZHgmcheZ10

aWijFELeXlMjCXpYjhDLzA1,0*

#iQSxVRNklzrfwRMNOejUmoIxcsidUDsANsq0

(eLQLxlhqYJgcbTXIeEdlMGmVeFiUPgBqcUIOnFGd1*0(

!buCrVAbkZRrYnwqxzVHSdmBSiPZgkjvyY1+0)

"ZjsdVaEDXVXPCcFElpsYNaOSKjfAVZQwSa1

omXuEUdpf1)0'

rDdFNtCZUdzkZuztMUdHYfBWBNsGRKxV1$0"

yUxoHDrgsaVtQoSxaSaZHgmcheZ10

aWijFELeXlMjCXpYjhDLzA1,0*

#iQSxVRNklzrfwRMNOejUmoIxcsidUDsANsq

20210330221905Z

DigiCert Inc1

www.digicert.com110/

(DigiCert SHA2 Assured ID Timestamping CA0

210101000000Z

310106000000Z0H1

DigiCert, Inc.1 0

DigiCert Timestamp 20210

http://www.digicert.com/CPS0

,http://crl3.digicert.com/sha2-assured-ts.crl02

,http://crl4.digicert.com/sha2-assured-ts.crl0

http://ocsp.digicert.com0O

Chttp://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0

QJxy6z'

dwc_#Ri

DigiCert Inc1

www.digicert.com1$0"

DigiCert Assured ID Root CA0

160107120000Z

310107120000Z0r1

DigiCert Inc1

www.digicert.com110/

(DigiCert SHA2 Assured ID Timestamping CA0

fnVa')

http://ocsp.digicert.com0C

7http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0

4http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:

4http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P

https://www.digicert.com/CPS0

8aMbF$

V3"/"6

DigiCert Inc1

www.digicert.com110/

(DigiCert SHA2 Assured ID Timestamping CA

210330221905Z0+

C1M)[O

nbHNPrWOqY

[^\u0000-\u007F]+

HacivatNishane.Properties.Resources

VS_VERSION_INFO

StringFileInfo

040904e4

Comments

CompanyName

FileDescription

FileVersion

6.149.341.44

LegalCopyright

InternalName

LegalTrademarks

OriginalFilename

ProductName

ProductVersion

6.149.341.44

Assembly Version

6.149.341.44

VarFileInfo

Translation

Antivirus	Signature
Bkav	Clean
Elastic	malicious (high confidence)
MicroWorld-eScan	Clean
CMC	Clean
CAT-QuickHeal	Clean
McAfee	GenericRXOD-FX!3A5AB9CBC129
Cylance	Unsafe
Zillya	Clean
AegisLab	Clean
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Clean
BitDefender	Clean
K7GW	Clean
Cybereason	Clean
Baidu	Clean
Cyren	Clean
Symantec	Clean
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.HRA
APEX	Malicious
Avast	Clean
ClamAV	Clean
Kaspersky	UDS:DangerousObject.Multi.Generic
Alibaba	Clean
NANO-Antivirus	Clean
ViRobot	Clean
Rising	Clean
Ad-Aware	Clean
Sophos	Clean
Comodo	Clean
F-Secure	Clean
DrWeb	Clean
VIPRE	Clean
TrendMicro	Clean
McAfee-GW-Edition	Clean
FireEye	Generic.mg.3a5ab9cbc12960f6
Emsisoft	Clean
Ikarus	Clean
GData	Clean
Jiangmin	Clean
MaxSecure	Clean
Avira	Clean
MAX	Clean
Antiy-AVL	Clean
Gridinsoft	Clean
Arcabit	Clean
SUPERAntiSpyware	Clean
ZoneAlarm	Clean
Microsoft	Program:Win32/Wacapew.C!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Clean
Acronis	Clean
BitDefenderTheta	Gen:NN.ZemsilF.34662.em1@auHgU3fi
ALYac	Clean
TACHYON	Clean
VBA32	Clean
Malwarebytes	Clean
Panda	Clean
Zoner	Clean
TrendMicro-HouseCall	Clean
Tencent	Clean
Yandex	Clean
SentinelOne	Clean
eGambit	Clean
Fortinet	Clean
Webroot	Clean
Paloalto	Clean
CrowdStrike	Clean
Qihoo-360	Clean

Static Analysis

PE Compile Time

PE Imphash

Sections

Resources

Imports