Static | ZeroBOX

PE Compile Time

2021-04-16 07:44:51

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000408c4 0x00040a00 7.79247145766
.rsrc 0x00044000 0x0000472c 0x00004800 3.53638750573
.reloc 0x0004a000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00044130 0x00004028 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40
RT_GROUP_ICON 0x00048158 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0004816c 0x0000040a LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x00048578 0x000001b4 LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with very long lines, with no line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
-<&&&&&
-M&&s@
, &&s@
-5&&rQ
&&&&&&&+
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
V2zZX[
?:m=B0
~4R['e
RO]F\8
VF.:%k,Z
1(CgC}v%
3`s/jDe
]klv^f;k
U>77Ep
R\IV/Ew
n*wg&i=4
x}0J41W
`b9:.3m
yvYr\N<
>Zt:L5<;
J;tisZ
O|u!_e
VW=J2@
#Lp289
#y|nBh
v4>A7lN;
-ge>_x
_O_CWmat
kC_833
Y\q$Ii
K8<VZi
?U5zJ:
3W1?Qq
%yG~DQ
qiwDO'
Zz/N|S
%EXiWszN
K`$4;\
8)Qtr)k
v}#h'e
mbhugN
,Q6?rcbk
w%<3e9
Vx*vQBS
r/10':
o,G<fmJ
4({&A!u
Se>/Y$`m
}P^A6i/
?&Ir1!9
tWWWWWWWwU
{"Igsg
i'6cp`
[ljxl-
$iSB{;
({IM#E
KJUp\)?H
[J=]e,
"t/yXa
EM"_''
mtJ[K<:
#r92Y{
rU1xgT
Gqbw2?
UCnc,f
g4p.o|N
r@[t(q`<
vnAs+hQ
xpnyOC
L3?Vbt{p
Z+mD 8
B{bxKt
OJ/X_/
o3eI9Z
&>8F[
RolQl~U
RGRo:h
}kV<kV
!C$&VaI
+i#@??
D`=8s%
KX3`Qh^
=;#Ti1
5).o"V.
Vp%1dmT!u
2U"j|C*
g$kxl}
GMxn+Ih<
x}v\y6
eRm}yw?E>#
q1yw$a|
Jp~5'$
Jm'}<J
_K]'K9
1R6sKk
m.)5Ss[
A%Dx<o
*C`7vN
1-0S]s.
VFoCe_
^s3]5re
8@eb%f
m9D<#G
::}\c
S;#n2}
2#ggD!
fxD&^S
p%0Mz]W
wDPG!l
dcv:%o&
|tJnI1
tc>:-G8
vC^fjH~7
g[yj7e%
j;IQ[
RZV+:F4b
S,Q<S*Q*S'
QL;(d<
>D;mJ}
ne8m*Ci
XK6[wX
1o-C0VJ
)%U>UNT
MIUvU:%
K6RWVRy6
DJYfO'
h@qX>
(N79kGy
`]_#yQ
gy4kp0j{+x
\I9YI)
<L.'AN
;z\iYQe
]1tlyY
SR.zL(
O"qUD
~F`cfMa
BT:C:0
XUf=Bssr
u$dht:Z
?X49FC
5|h1r`b`
RH4+9REQAI
-Y<nD<m
R",(%T
TI/*21E
+Ec(a1
?zh.chO
2LGCuf
:*WI2D
Bc9vjS
Jy~"O*I
U}_ &
;AHTiu
tb>Wzz
.!-=$[
,h(sp
qG|AFf
i-sSxX
tc8s#UN
pu.VYT
;MvSf#
vrP;nn
C3NAZn
GR"Wz`
8+P*pm
`?l%G~
=+VTO_
W=r/36
a7f=Z=
ta*}zT8
lCkBKG=)lc4
nlU8!z
4Z9#vC|M;
O?2&q`L
optn8Q
6_Roe`
?2<z-<x
pKZ(t+Wzo^A
huDjNR
6z}|s)5
 `gM/
;$+mnD
Gb7!DK
No{Vo^
WZ6iv]
dA'dA_
fcs_jR
s!IunL
XaQpiE
yL]SEW
yHw=k@~
qxNv1j
!TujT#
+y,#.=
>-$N>dY
WYv*A^
m;JRmkzkWA
XeSq0A
BXfLXK4
@ELHKH
( ~H$G
SBzG!+%d
Pji $n
v]_t<.J
\O&6UT>gY
H,P;y/q7
U~M##>
6D+Z;K
!wwdxI
r,>gN'
:1B+ss
et%h1z
CcGYZ[
|0>}J8
rkI{L+z
_\b~3!l"
5@+(c'
D1 .ls
yQTnG@
AobeT@[
umIM]Cf
2z O]<pT0
L<m{QZ
s%#?zc
1CeN3d
*a<En"
,|(0c"
AJeA4}
00SMe]"
d<+MvZ
WYI*+9
]Ki;K8*J
W.W'=S
X-Sf)g
:]OnOM'U
IG~"&#O^
Zgr>>>
dzNN.sR
KHUkB*}A
~35|EP]
EOFQ%{/
_zTuzQw
<Thi$'
((8g_n8
j*eZA~
Bsxc $
`q`CWNZ
||\4!_
3{9t)|
V+C+16
VE,[X
n?TG,V
Da>r.aZ
I<9#+k
|2Mgke
^Qwd=i
B0u.Cs"(
[}5|n-
-6v[#%
uVUCsx4
M#.qvr
_7/3r2nF1
cM.8j'
S]WW*`
3}yPX5
e-N&V[
/p0:Nr
-U2Nwq
p;!=)Y'
|v!_3\
YY7=:MYe
0u0m0E
0t0l0E
XhONEh
.t+Dto
6$N+v4
lp9o#DJ
>q{*2&
?~5?~*
?~5?~*
L>:'GTSE*U
UmveDy*3
M6vzbb
uz,|a>
5mu[mV
NQSX6B
n[6"+*
D3tiP{
<?|(x^
?_=[ d8H
#w>k_x
y-vi-c?
)~<#vy
7_Y?^|'0
Ec>AxD<
aLXd}C
;!xZpL;Tq
`rW9Q+
glt/;h
gp_]/X
p;]+}K
&G.oRu
pOCCCEK
+G0(9WPu3
Mjot}R
{O'y%V
3_l6Q\aP
KU`9RP
7BVc7.
u/$}W$
"+7N/TY
V&Pv&p
F`}Pcc
MdQS7N f
W:+zY:
ceQm[*
mGtPHP;
h3AZw&
7WK^nu
+rIgV3
!HzBb~
a2%hBW
HHmHvm
qL=T]I
p/bpnzF
eEci,m
AL@L@c
AT@T@#
uSW;TW
fA|A3 >
&A\@\A
>AZ@Z@
SMcCssSIl
TMc<<YtMm
FZZ_}w
u^\NST8/
thDNf3]
Yq>IQ}w>
Y|JOM,
M:8EfL
tLPuk:m
}?>h[j
pMHUIB8
*/H77
z5iek4
-~uM+#QP
)#1',t?
Q9knnlk
Q8dfje
%[/^e,2JV
9aU^#{0
irjBjNq@
mDUA>l!
zFQYHNR
~:eal(
X'5m5m
wBZ@\@X
[WeiEM`
WOkkGgGo
`PIk0f
]y>W
N&mlc&
eUM]RJZFVN^A_
8^NRWE
MemUWq
lTCd$20$&
{2u<,_
y8p<HKm
nLJ2*
i1eq,"j
}~^**K
@BPS\:%
h9Q[0X
o7;ii9
A^ZATJFQ\;&
QTDYP\;
u#[$t`dq
=,YDyDyx
$XhhQx
$DRIE%$
v4.0.30319
#Strings
Ttcmb.exe
mscorlib
System.Core
System
WindowsFormsApp1.Properties.Resources.resources
Action
Action`1
Action`2
Action`3
AggregateException
AppDomain
ArgumentException
ArraySegment`1
AsyncCallback
BitConverter
Boolean
GeneratedCodeAttribute
System.CodeDom.Compiler
Dictionary`2
System.Collections.Generic
IDictionary`2
IEnumerable`1
IEqualityComparer`1
List`1
Enumerator
Queue`1
ApplicationSettingsBase
System.Configuration
SettingsBase
Console
Convert
DateTime
DebuggerBrowsableAttribute
System.Diagnostics
DebuggerBrowsableState
DebuggerNonUserCodeAttribute
Exception
FormatException
Func`2
Func`3
CultureInfo
System.Globalization
IAsyncResult
IDisposable
CompressionMode
System.IO.Compression
GZipStream
IOException
System.IO
MemoryStream
SeekOrigin
Stream
IntPtr
InvalidCastException
InvalidOperationException
Enumerable
System.Linq
EndPoint
System.Net
IPAddress
IPEndPoint
SslStream
System.Net.Security
AddressFamily
System.Net.Sockets
IOControlCode
NetworkStream
ProtocolType
Socket
SocketOptionLevel
SocketOptionName
SocketType
NotSupportedException
Nullable`1
Object
ObjectDisposedException
Assembly
System.Reflection
AssemblyCompanyAttribute
AssemblyConfigurationAttribute
AssemblyCopyrightAttribute
AssemblyDescriptionAttribute
AssemblyFileVersionAttribute
AssemblyProductAttribute
AssemblyTitleAttribute
AssemblyTrademarkAttribute
Binder
BindingFlags
DefaultMemberAttribute
MemberInfo
ResourceManager
System.Resources
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
CompilerGeneratedAttribute
ExtensionAttribute
RuntimeCompatibilityAttribute
RuntimeHelpers
SuppressIldasmAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
RuntimeFieldHandle
RuntimeTypeHandle
STAThreadAttribute
SslProtocols
System.Security.Authentication
HashAlgorithm
System.Security.Cryptography
X509Certificate
System.Security.Cryptography.X509Certificates
X509Certificate2
String
StringComparer
StringSplitOptions
Encoding
System.Text
Capture
System.Text.RegularExpressions
CaptureCollection
GroupCollection
RegexOptions
StringBuilder
UTF8Encoding
CancellationToken
System.Threading
CancellationTokenSource
Monitor
System.Threading.Tasks
TaskCompletionSource`1
TaskContinuationOptions
TaskFactory
Task`1
Thread
WaitHandle
UInt16
UInt32
UInt64
ValueType
<Module>
FrameType
WindowsFormsApp1
Settings
WindowsFormsApp1.Properties
get_CanRead
get_CanSeek
get_CanWrite
get_Length
get_Position
set_Position
SetLength
BeginRead
BeginWrite
EndRead
EndWrite
Dispose
get_AsyncState
get_AsyncWaitHandle
get_CompletedSynchronously
get_IsCompleted
.cctor
value__
Continuation
Binary
CanRead
CanSeek
CanWrite
Length
Position
AsyncState
AsyncWaitHandle
CompletedSynchronously
IsCompleted
GetTypeFromHandle
get_Assembly
GetObject
Enqueue
Dequeue
Invoke
get_Count
get_UTF8
GetString
get_Success
get_Groups
get_Item
get_Value
get_Captures
ToString
set_Item
get_Token
get_Connected
get_RemoteEndPoint
get_Address
get_Port
GetBytes
IOControl
get_Factory
EndAuthenticateAsServer
FromAsync
ContinueWith
Listen
get_NoDelay
set_NoDelay
get_LocalEndPoint
BeginAccept
Cancel
get_IsCancellationRequested
BeginAuthenticateAsServer
get_Exception
get_Result
EndAccept
Intersect
SetException
get_Task
ToArray
get_InnerException
get_Message
Concat
AddRange
NewGuid
get_InvariantCultureIgnoreCase
TryGetValue
get_CurrentDomain
GetType
get_FullName
CreateInstance
GetMember
get_Scheme
InvokeMember
SetSocketOption
op_Equality
get_Host
IPv6Any
Format
get_AddressFamily
InitializeArray
Synchronized
get_Now
WriteLine
ContainsKey
ToLower
Contains
IndexOf
RemoveRange
Append
AppendFormat
get_ASCII
Resize
get_Array
get_Offset
Create
ComputeHash
IsDigit
IsLittleEndian
Reverse
WriteByte
IsDefined
get_HasValue
ToBase64String
op_Inequality
ToUInt16
ToUInt64
ReadLine
ToList
GetEnumerator
get_Current
MoveNext
ForEach
Remove
3System.Resources.Tools.StronglyTypedResourceBuilder
16.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
11.0.0.0
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
WrapNonExceptionThrows
0.0.52.0
Discord - https://discord.com/
Discord Inc.
4Copyright (c) 2020 Discord Inc. All rights reserved.
$54b4ac77-a02c-40b9-b80e-d5216098af2f
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="utf-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="1.0.0.0" name="MyApplication.app" /><trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"><security><requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"><requestedExecutionLevel level="asInvoker" uiAccess="false" /></requestedPrivileges></security></trustInfo></assembly>PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD
DigiCert Inc1
www.digicert.com1+0)
"DigiCert EV Code Signing CA (SHA2)0
180314000000Z
210218120000Z0
Delaware1
Private Organization1
51288621
California1
San Francisco1
Discord Inc.1
Discord Inc.0
_v<WBP
US-DELAWARE-51288620
1http://crl3.digicert.com/EVCodeSigningSHA2-g1.crl07
1http://crl4.digicert.com/EVCodeSigningSHA2-g1.crl0K
https://www.digicert.com/CPS0
http://ocsp.digicert.com0H
<http://cacerts.digicert.com/DigiCertEVCodeSigningCA-SHA2.crt0
DigiCert Inc1
www.digicert.com1+0)
"DigiCert High Assurance EV Root CA0
120418120000Z
270418120000Z0l1
DigiCert Inc1
www.digicert.com1+0)
"DigiCert EV Code Signing CA (SHA2)0
+.+1Xf
http://ocsp.digicert.com0I
=http://cacerts.digicert.com/DigiCertHighAssuranceEVRootCA.crt0
:http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl0@
:http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl0
.http://www.digicert.com/ssl-cps-repository.htm0
DigiCert Inc1
www.digicert.com1+0)
"DigiCert EV Code Signing CA (SHA2)
20200910175959Z
DigiCert Inc1
www.digicert.com1!0
DigiCert Assured ID CA-10
141022000000Z
241022000000Z0G1
DigiCert1%0#
DigiCert Timestamp Responder0
https://www.digicert.com/CPS0
2http://crl3.digicert.com/DigiCertAssuredIDCA-1.crl08
2http://crl4.digicert.com/DigiCertAssuredIDCA-1.crl0w
http://ocsp.digicert.com0A
5http://cacerts.digicert.com/DigiCertAssuredIDCA-1.crt0
iW!]4/q
DigiCert Inc1
www.digicert.com1$0"
DigiCert Assured ID Root CA0
061110000000Z
211110000000Z0b1
DigiCert Inc1
www.digicert.com1!0
DigiCert Assured ID CA-10
.http://www.digicert.com/ssl-cps-repository.htm0
http://ocsp.digicert.com0C
7http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
4http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0:
4http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0
DigiCert Inc1
www.digicert.com1!0
DigiCert Assured ID CA-1
200910175959Z0#
Adkwkhzqmy
Xbjhfno
!*)0/43657598;:<:KJLJMJ
>ABCDabcEFGHdIJKLMNOPQRSTUVW
sXYefghijklmnopqrstuvwxyz
WindowsFormsApp1.Properties.Resources
Adkwkhzqmy
Xbjhfno
QueuedStream does not support synchronous write operations yet.
QueuedStream does not support synchronous write operations. Please wait for callback to be invoked before calling EndWrite.
Queued write operations do not support wait handle.
^(?<method>[^\s]+)\s(?<path>[^\s]+)\sHTTP\/1\.1\r\n((?<field_name>[^:\r\n]+):(?([^\r\n])\s)*(?<field_value>[^\r\n]*)\r\n)+\r\n(?<body>.+)?
^[<]policy-file-request\s*[/][>]
method
field_name
field_value
Unable to negotiate a subprotocol
Cannot send before handshake
Data sent while closing or after close. Ignoring.
Swallowing ObjectDisposedException
Error while reading
Application Error
0 bytes read. Closing.
bytes read
bytes
Failed to send. Disconnecting.
((;)*(\s)*(?<cookie_name>[^=]+)=(?<cookie_value>[^\;]+))+
Origin
Sec-WebSocket-Origin
Sec-WebSocket-Protocol
Cookie
cookie_name
cookie_value
Nzmwnufwhzhr.Lists.Utils
RateDic
0.0.0.0
[0000:0000:0000:0000:0000:0000:0000:0000]
Failed to parse the IP address part of the location. Please make sure you specify a valid IP address. Use 0.0.0.0 or [::] to listen on all interfaces.
Server started at {0} (actual port {1})
Scheme cannot be 'wss' without a Certificate
Using default TLS 1.0 security protocol.
Client connected from {0}:{1}
Authenticating Secure Connection
Listener socket is closed
Listener socket restarting
Listener socket restarted
Listener could not be restarted
Failed to Authenticate
{0} [{1}] {2} {3}
policy-file-request
Sec-WebSocket-Version
Sec-WebSocket-Draft
Sec-WebSocket-Key1
Building Draft76 Response
HTTP/1.1 101 WebSocket Protocol Handshake
Upgrade: WebSocket
Connection: Upgrade
Sec-WebSocket-Origin: {0}
Sec-WebSocket-Location: {0}://{1}{2}
Sec-WebSocket-Protocol: {0}
Sec-WebSocket-Key2
<?xml version="1.0"?>
<cross-domain-policy>
<allow-access-from domain="*" to-ports="*"/>
<site-control permitted-cross-domain-policies="all"/>
</cross-domain-policy>
Building Flash Socket Policy Response
Received unhandled
Building Hybi-14 Response
HTTP/1.1 101 Switching Protocols
Upgrade: websocket
Sec-WebSocket-Key
Sec-WebSocket-Accept: {0}
258EAFA5-E914-47DA-95CA-C5AB0DC85B11
Mono.Runtime
Cannot be cast to T
Unsupported Size
ws://0.0.0.0:8181
Close!
Echo:
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
Discord - https://discord.com/
CompanyName
Discord Inc.
FileDescription
Discord - https://discord.com/
FileVersion
0.0.52.0
InternalName
Ttcmb.exe
LegalCopyright
Copyright (c) 2020 Discord Inc. All rights reserved.
LegalTrademarks
OriginalFilename
Ttcmb.exe
ProductName
Discord - https://discord.com/
ProductVersion
0.0.52.0
Assembly Version
0.0.52.0
RAny use of this Certificate constitutes acceptance of the DigiCert CP/CPS and the Relying Party Agreement which limit liability and are incorporated herein by reference
RAny use of this Certificate constitutes acceptance of the DigiCert CP/CPS and the Relying Party Agreement which limit liability and are incorporated herein by reference
RAny use of this Certificate constitutes acceptance of the DigiCert CP/CPS and the Relying Party Agreement which limit liability and are incorporated herein by reference
No antivirus signatures available.
No IRMA results available.