Static | ZeroBOX

PE Compile Time

2021-04-19 23:32:38

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0004ca14 0x0004cc00 7.95614877537
.rsrc 0x00050000 0x0000472c 0x00004800 2.28525668084
.reloc 0x00056000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00050130 0x00004028 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x00054158 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0005416c 0x0000040a LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x00054578 0x000001b4 LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with very long lines, with no line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
v4.0.30319
#Strings
Zyxtp.exe
<Module>
Settings
WindowsFormsApp1.Properties
ApplicationSettingsBase
System.Configuration
System
ModelAdapterAuth
Zyxtp.Authentication
Object
mscorlib
TaskEventContainer
Zyxtp.Containers
HelperClientMock
WindowsFormsApp1.Mocks
TagComparatorLicense
Zyxtp.Licensing
Zyxtp.Descriptors
ImporterRegistryExpression
WindowsFormsApp1.Expressions
CustomerAdapterAuth
Candidate
InterpreterOrderID
Zyxtp.Identifiers
ProductSchemaDescriptor
Adapter
WindowsFormsApp1.Consumers
ListenerCandidateDef
WindowsFormsApp1.Definitions
EventPageRecord
Zyxtp.Records
ConnectContext
.cctor
f0659e5905454a5e99b9752afc78b700
SortContext
CreateContext
Boolean
SelectContext
UpdateContext
SettingsBase
Synchronized
CustomizeContext
StopContext
configuration
wrapper
Dictionary`2
System.Collections.Generic
String
resolver
_Request
_Client
PublishContext
ManageConfiguration
CultureInfo
System.Globalization
get_Name
ReadConfiguration
Assembly
System.Reflection
AssemblyName
AppDomain
GetAssemblies
get_CultureInfo
ValidateConfiguration
Stream
System.IO
RunConfiguration
MemoryStream
DeflateStream
System.IO.Compression
GetExecutingAssembly
CompressionMode
set_Position
IDisposable
Dispose
GetManifestResourceStream
FlushConfiguration
caller
TryGetValue
InitConfiguration
instance
ComputeConfiguration
connection
ToLowerInvariant
IsNullOrEmpty
Concat
ChangeConfiguration
ResolveEventArgs
Monitor
System.Threading
set_Item
ContainsKey
get_Flags
AssemblyNameFlags
op_Inequality
SelectConfiguration
ResolveEventHandler
IntPtr
add_AssemblyResolve
Interlocked
Exchange
VisitContext
CancelContext
CalculateContext
get_CurrentDomain
ComputeContext
GetName
GetContext
OrderContext
StringComparison
Equals
DefineContext
EndsWith
InstantiateContext
CheckContext
RemoveContext
AddContext
get_Length
ConcatContext
ViewContext
WriteContext
ForgotContext
op_Equality
ReflectContext
DestroyContext
CalcContext
CountContext
ManageContext
PrepareContext
AssetContext
ReadContext
AwakeContext
DisableContext
ChangeContext
TestContext
FillContext
insert_PARAMAt
min_counter
InitContext
DeleteContext
RestartContext
SortConfiguration
Console
WriteLine
Thread
ResolveContext
MapContext
_Listener
ResourceManager
System.Resources
_Schema
PostContext
OrderConfiguration
GetTypeFromHandle
RuntimeTypeHandle
get_Assembly
CallConfiguration
InvokeConfiguration
FindContext
SetupContext
ExcludeContext
MoveContext
PatchContext
_Comparator
CollectContext
VisitConfiguration
ToString
MapConfiguration
indexOfdef
CheckConfiguration
reference
Func`2
Enumerable
System.Linq
System.Core
SingleOrDefault
IEnumerable`1
CloneConfiguration
ConnectConfiguration
StartConfiguration
QueryConfiguration
res_min
ViewConfiguration
offset_setup
PopContext
ClassLibrary
set_Bytes1
FlushContext
RunContext
EnableContext
IncludeContext
NewContext
Serial
PushContext
set_Bytes2
QueryContext
LoginContext
GetManifestResourceNames
LogoutContext
InsertContext
CopyTo
PrintContext
ToArray
SearchContext
CallContext
server
ResetContext
SearchConfiguration
Contains
ValidateContext
CloneContext
RateContext
StartContext
ListContext
VerifyContext
CompareContext
RegisterContext
RevertContext
ConnectFactory
CreateFactory
AssemblyProductAttribute
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
RuntimeCompatibilityAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
AssemblyTitleAttribute
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyFileVersionAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
AssemblyCopyrightAttribute
CompilerGeneratedAttribute
GeneratedCodeAttribute
System.CodeDom.Compiler
STAThreadAttribute
DebuggerNonUserCodeAttribute
System.Diagnostics
WindowsFormsApp1.Properties.Resources.resources
WindowsFormsApp1.Resources.Djxrcyvhakejj.dll
WindowsFormsApp1.Resources.Xmtgnkeww.dll
costura.classlibrary.dll.compressed
costura.costura.dll.compressed
/AUZHgG.
Discord - https://discord.com/
WrapNonExceptionThrows
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
Discord Inc.
0.0.52.0
$e128d6af-3331-40d1-8574-bd54a4efc519
4Copyright (c) 2020 Discord Inc. All rights reserved.
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
11.0.0.0
3System.Resources.Tools.StronglyTypedResourceBuilder
16.0.0.0
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
`Wk>H1
1&aQ;T
V45:m}k
)Dw']d,}{
UW~?11
$Nut>I
Ot:K?y
fc(%K7b
:kyT%K
?=Ujf'
";}/;$
j@h<3`V&
a%8&V8^
@E|-n7
tj6qb4
KK?\Ni
etY\R[
+E|cdB
EICwS}
Dka>Pxg<SL[
l|57
Jh%;\T
\^(@}p)
-vdP=f
~3{h[l'C
2IDSHk
I~m^#VgC
%"*~B(
],}&7DnQ
W+,[Ry
Y;@`g??
2vly8K
/iQ+j1=C
S2&yST
|_w`&b`
\}]B-
HJ**\[jd)f
E<E]Up
oT}`1;
U(gw,(
lLyR0wJ
.cV4M9
4vh5.
\E5A\4
(=d~X1
sy"q7R
XtE_KN
==6Rst
gyaQ3l
?'G?%E
FaX;V}
QDLrdz
61Fe0`
pt.#q
8MLPzm,"
8GiaY8
,\o>?zg
5^{&MU
6g?L{rk
-v#1udv
)+.ku
~aT"37M_
Z"Bnn6
u;e8~F
nUx4@QX1
J\2F b.
~EDZi$
$v.X,}z
8P wi|
QlB8`](
Lf&5n\
T&q<,?
8#@?lfe=K[
o!<#xTR+P
dZ/Q?\
eX7v5o
F(2-G-
ZLyrW^
8`gl^ZY
OePKp!K
"OJOAB
gjNyW*
r wIv}
F]6aV=
8r(HO^O
3]:`$'
]9/N-
y&.4-J4
R{\#8PV
J3a)!-
|v'Mml-
5%#/sOq
u,evcM
q1.*=^
yatZkk
W'X(9z6
0=~$S="
L2U.Xf
AA}`hY
0v{bMP
8ocSsTe
Pf;bw/
54YjgF
#2H\Gq
\:!4tc
I`W=}XF
h RB^^
(7(2b
;-'{`KE4
BMCn1g
mu%<U9
aVmP!0
Dtem3{&
|?0uT
'wN&dG
;@M;*o
kz0lyC
u-tqaW
<B}S@.
0ITcC3
.?)KsK
_%#c3va
27x5w>,
^W(yya
0cPyzJ
M/?{o2
<43lx/
e%%05}
8&b^R^
!Mz9#c
2#)<?4
4~f2U/
$DIC1(
KMw%hX
8.Vl\_f
,";uF5O
X@Bdqs9
Z!SKY:
V0f%"f*
$Gt./@
+[]E]aE
i7bs%+Y
B)z`>.
8~5ehi
|mN6(w>
%oVYcf
n"K/8*
[t@,-?
/|[_fE
z0Ig;61
?Ax;mvl
mP#+[j
"ipy58q
Ea/EP_
?:;A?Gp
+*1L/o+
EF7\gGj
C:*o:%I
k(y)N]c
|u4$w,
n 2d*j="
!<%Dt$
}M y6JHdgr
V_kO:;A
T{P7&N
~gw0"9
q$FWy@g
}6>Om i
?tyVfw
M}KvWY
e9e0iDFt.
Y}vv'=
/(Wz*r
O)BrPlY)
YrNIN8
k+b-5OrG
@1uk;z
r{;?mr%
V=efef
gFKGs8
///<4@
a]:V;\P!
wBW/!&
B>=S:U,(G
CqvJwX
KW<JxGs
w%-iof
*#gdad2
F^A'S9
NY({bY:
'kU)Rqz
+o~HEw
AhxDx<
aePL<H
=e&&ZJ9B
H&[wRY=
cC0g8Ff
6&O]bK
z={!1D
"&G_$2!
~!cLF5
R8.d,I
O-uAay
6NhpkUft
htM)m=
n'`*:+@
[l8W.R
l9%%Y
El.V8j
e]*F]0
Po5Tgr}
JO:SSSc
&%3JJMr
Vi&))=$7
y#t7n0
$ZZV])
A9W2[h
0?BmgE
@xWS{}
/U+-Aa
Py\Li$
K4^!w5
!&Nl.t
}]4DJ
n`nfPD
oG+2g"
8Ji]-g
1Sygz
fUsr+n
_T!&R,
8s]aWf4
s|:WyM
asYYen|%)aHR
tkoJd`oQ
u'O]{l2
]cQ,Qa
Zk4,M7x#
n<L1FZ
Rsr/ij
|8pS?s0
\zSaCF
/+%w%
}q|(*[
otl^Sq
[<dTYm
ZX Bb^
&)~)MMWc
2fDm<c
Xc-]xm
'GO'UusSuss
N4`7t?
@[{%NkU
uxc#JKc
>KzkWd
M"$Il1_f
s>+3'T
, kN:_
XyD^/sc
a`^O,u[O^
36a,NQXH"
XPZp|7
hqB5da
K$!?g>
877FHB
t"?}84*
=P{k['W[
NbX}%w
NZcmTo
rR}87\
W3c6ggds
)}* ,^G+
eln!&@
y09K|z[
XX.|B:KQ
G5nuEMi
iW9,:J
S.gFFJ
ut=9:/
1oc<O+>
}P(kwU
LQ|Hp<
`qv$J
bMztqO
poKM G
}Z+1Na
.(3*#"
D.N".+
2_Vl*
f1v3qB
6uYep{g
K^.9~
v"5R R
Ter'nE
q3`K:T
/Dt0vG
",b*\:
Dr)G9c
ilYvN3
R-C/!i
B{8\k}
:CoF@H
=SbqN@Ln
r.}9{I
bT~G4{X
y5GEB7
g>]+0U
R`M%H
x&Hogh
!Gf[);
bEPt'*
E!%<7J
pQC%Nu@
bIOt^tfe
?[4qB0
CJX~{9d
[Go$=rp$
C2vHT-
u|y^]b:
A9n7Fx$S
/x7H|
VFz^~A
'rT=!$~
&{?]AM~
+pM3DR/
RCg{.i
QzU8k(!
dF~-4P
w3')F)Y
zka[;x
T%>r]<
?dn$73
9Mv]te
-*}-)n
cWx(Xo
V>'Fg
?Ld^m&#
X0DjRBA
nxv.1z
p.^mWKB
]c\9_-,
x~'W7E
($Dk=+sG'e
ewkC[+
|'\Jti
lw=pPB,P
*wqprp*
T%Z~Hf*
nU_dGm
)!G)$0
rD/bX?p
iR0&(@1
>~wfl`
x}ZVQ\
La|52$A
9`BDLo
;xzd-;m
[V?g<R
q-R6E!]
l"6Gs8
HfBxYc0|q
^J>a@X
E;sQHg
>=-<8
K!Se2|C[g
)Rn&hb
+y,#.=
>-$N>dY
WYv*A^
m;JRmkzkWA
XeSq0A
BXfLXK4
@ELHKH
( ~H$G
SBzG!+%d
Pji $n
v]_t<.J
\O&6UT>gY
H,P;y/q7
U~M##>
6D+Z;K
!wwdxI
r,>gN'
:1B+ss
et%h1z
CcGYZ[
|0>}J8
rkI{L+z
_\b~3!l"
5@+(c'
D1 .ls
yQTnG@
AobeT@[
umIM]Cf
2z O]<pT0
L<m{QZ
s%#?zc
1CeN3d
*a<En"
,|(0c"
AJeA4}
00SMe]"
d<+MvZ
WYI*+9
]Ki;K8*J
W.W'=S
X-Sf)g
:]OnOM'U
IG~"&#O^
Zgr>>>
dzNN.sR
KHUkB*}A
ivKDfZ
c3}qzo^
4l[C;s
mbZfHp[Y
:+-"Ge
.ZMh@r
4|V^PO&/p
)_TIC(
6EW{wld/
6<.^6Xc
[Z58=1u
pCFd$k
CF)440
Pjlfrv:
{0xepE
[_|{^1
>W.J|em
O(<>D//
/YN7Q/
s o ?QQ
97bZ?r/R
&qMj~3YH
[5"/)E
dNUVHUV
dz3=dP.
BJz[iW
l|#=wX
$H'q?z
EH'$-Aj
DK<;gP2P
$qjN`M
$q?JeK$
Q^;*lG
4XR!Ra
8e/6>Hk
*K4o4(
9IyHqN
ai5h1P
XoogYw
\`G\G!,<
m'S#ZXGV
9uhuuhun
0HmFYD/
Q8gSr%
;$6$!dx
bHph|h
kxrxZxvx~xIxexU
S+H+!{
iEyvwQi
_Y>>ox
HzjIE1T
vW^!(u$
KJsIY.
YLZ.iWE
$_.S,(
4%&Hg)
>?'g|LB
K"7Q:M
`cd\zE
\Y]j)+g"X
&#nA7r
<o|M>V
=n?KX
4p^J.J
nr[sy~
kE:qA/
z`W+63,
.6\^xr
7~wX_M
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="utf-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="1.0.0.0" name="MyApplication.app" /><trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"><security><requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"><requestedExecutionLevel level="asInvoker" uiAccess="false" /></requestedPrivileges></security></trustInfo></assembly>
DigiCert Inc1
www.digicert.com1+0)
"DigiCert EV Code Signing CA (SHA2)0
180314000000Z
210218120000Z0
Delaware1
Private Organization1
51288621
California1
San Francisco1
Discord Inc.1
Discord Inc.0
_v<WBP
US-DELAWARE-51288620
1http://crl3.digicert.com/EVCodeSigningSHA2-g1.crl07
1http://crl4.digicert.com/EVCodeSigningSHA2-g1.crl0K
https://www.digicert.com/CPS0
http://ocsp.digicert.com0H
<http://cacerts.digicert.com/DigiCertEVCodeSigningCA-SHA2.crt0
DigiCert Inc1
www.digicert.com1+0)
"DigiCert High Assurance EV Root CA0
120418120000Z
270418120000Z0l1
DigiCert Inc1
www.digicert.com1+0)
"DigiCert EV Code Signing CA (SHA2)0
+.+1Xf
http://ocsp.digicert.com0I
=http://cacerts.digicert.com/DigiCertHighAssuranceEVRootCA.crt0
:http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl0@
:http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl0
.http://www.digicert.com/ssl-cps-repository.htm0
DigiCert Inc1
www.digicert.com1+0)
"DigiCert EV Code Signing CA (SHA2)
20200910175959Z
DigiCert Inc1
www.digicert.com1!0
DigiCert Assured ID CA-10
141022000000Z
241022000000Z0G1
DigiCert1%0#
DigiCert Timestamp Responder0
https://www.digicert.com/CPS0
2http://crl3.digicert.com/DigiCertAssuredIDCA-1.crl08
2http://crl4.digicert.com/DigiCertAssuredIDCA-1.crl0w
http://ocsp.digicert.com0A
5http://cacerts.digicert.com/DigiCertAssuredIDCA-1.crt0
iW!]4/q
DigiCert Inc1
www.digicert.com1$0"
DigiCert Assured ID Root CA0
061110000000Z
211110000000Z0b1
DigiCert Inc1
www.digicert.com1!0
DigiCert Assured ID CA-10
.http://www.digicert.com/ssl-cps-repository.htm0
http://ocsp.digicert.com0C
7http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
4http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0:
4http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0
DigiCert Inc1
www.digicert.com1!0
DigiCert Assured ID CA-1
200910175959Z0#
classlibrary
costura.classlibrary.dll.compressed
costura
costura.costura.dll.compressed
.compressed
Original Grid
Solved Grid
WindowsFormsApp1.Properties.Resources
Xmtgnkeww
------|-------|------
Djxrcyvhakejj
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
Discord - https://discord.com/
CompanyName
Discord Inc.
FileDescription
Discord - https://discord.com/
FileVersion
0.0.52.0
InternalName
Zyxtp.exe
LegalCopyright
Copyright (c) 2020 Discord Inc. All rights reserved.
LegalTrademarks
OriginalFilename
Zyxtp.exe
ProductName
Discord - https://discord.com/
ProductVersion
0.0.52.0
Assembly Version
0.0.52.0
RAny use of this Certificate constitutes acceptance of the DigiCert CP/CPS and the Relying Party Agreement which limit liability and are incorporated herein by reference
RAny use of this Certificate constitutes acceptance of the DigiCert CP/CPS and the Relying Party Agreement which limit liability and are incorporated herein by reference
RAny use of this Certificate constitutes acceptance of the DigiCert CP/CPS and the Relying Party Agreement which limit liability and are incorporated herein by reference
Antivirus Signature
Bkav Clean
Elastic Clean
MicroWorld-eScan Clean
FireEye Generic.mg.2e2eba416b6ec3ef
CAT-QuickHeal Clean
ALYac Clean
Cylance Unsafe
Zillya Clean
AegisLab Clean
Sangfor Clean
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
Cybereason malicious.299adc
BitDefenderTheta Gen:NN.ZemsilF.34678.um1@amkU6Zl
Cyren Clean
Symantec ML.Attribute.HighConfidence
ESET-NOD32 Clean
Baidu Clean
APEX Malicious
Avast Clean
ClamAV Clean
Kaspersky UDS:Trojan-Spy.MSIL.Noon.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Tencent Clean
Ad-Aware Clean
TACHYON Clean
Sophos Clean
Comodo Clean
F-Secure Clean
DrWeb Clean
VIPRE Clean
TrendMicro Clean
McAfee-GW-Edition Clean
CMC Clean
Emsisoft Trojan.Crypt (A)
SentinelOne Static AI - Malicious PE
GData Clean
Jiangmin Clean
Webroot Clean
Avira Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/Wacatac.B!ml
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis Clean
McAfee Clean
MAX Clean
VBA32 Clean
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Clean
Yandex Clean
Ikarus Trojan.MSIL.Inject
eGambit PE.Heur.InvalidSig
Fortinet Clean
Paloalto Clean
CrowdStrike win/malicious_confidence_60% (D)
Qihoo-360 HEUR/QVM03.0.B19F.Malware.Gen
No IRMA results available.