Static | ZeroBOX

PE Compile Time

2044-09-23 19:43:25

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0002dc04 0x0002de00 7.92282115455
.rsrc 0x00030000 0x00029f14 0x0002a000 4.29881779878
.reloc 0x0005a000 0x0000000c 0x00000200 0.0815394123432

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00059410 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00059410 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00059410 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00059410 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00059410 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00059410 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00059410 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00059410 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00059410 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x00059878 0x00000084 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x000598fc 0x0000042a LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x00059d28 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
v4.0.30319
#Strings
IMG_608943011
IMG_608943011.exe
<Module>
TemplateConfigurationDic
IMG_608943011.Dictionaries
Object
System
mscorlib
<>o__8
<>c__DisplayClass9_0
Settings
WindowsFormsApp1.Properties
ApplicationSettingsBase
System.Configuration
Params
IMG_608943011.Objects
Configuration
IMG_608943011.Listeners
CreatorContainerTask
IMG_608943011.Tasks
ParserAdapter
WindowsFormsApp1.Adapter
ProccesorContainerTask
Candidate
Publisher
FacadeReponseStatus
WindowsFormsApp1.States
Broadcaster
Tokenizer
IMG_608943011.Definitions
MockReponseStatus
IMG_608943011.Candidates
RegistryRepositoryService
WindowsFormsApp1.Services
HelperConfigurationDic
SetterAdapter
FieldBasePage
IMG_608943011.Pages
Product
WindowsFormsApp1.Descriptors
AssemblyLoader
Costura
EventRepositoryService
.cctor
LoginCallback
TestTests
Boolean
TimeSpan
Exception
Stopwatch
System.Diagnostics
get_Elapsed
get_Seconds
Console
WriteLine
String
Thread
System.Threading
StartNew
RemoveTests
PublishTests
ManageTests
CollectTests
FillTests
SortTests
List`1
System.Collections.Generic
IEnumerable`1
InstantiateTests
CheckTests
get_StackTrace
CSharpArgumentInfo
Microsoft.CSharp.RuntimeBinder
Microsoft.CSharp
Create
CSharpArgumentInfoFlags
Binder
SetMember
CallSiteBinder
System.Runtime.CompilerServices
System.Core
CSharpBinderFlags
CallSite`1
Func`4
CallSite
WhatsApp
ClassLibrary
Activator
CreateInstance
InvokeMember
Action`2
Target
Invoke
get_InnerException
ExcludeTests
Assembly
System.Reflection
Stream
System.IO
MemoryStream
GetManifestResourceStream
GetManifestResourceNames
Func`2
IntPtr
Enumerable
System.Linq
SingleOrDefault
CopyTo
ToArray
CalcCallback
DisableCallback
RegisterCallback
GetCallback
Concat
ListCallback
RuntimeTypeHandle
GetTypeFromHandle
InterruptCallback
SetupCallback
CallCallback
InvokeCallback
GetExecutingAssembly
_Request
_Repository
_Class
_Reponse
ConnectCallback
IncludeTests
Contains
PrepareCallback
DefineCallback
defaultInstance
FindCallback
get_Default
SettingsBase
Synchronized
WriteCallback
PrintCallback
Default
OrderCallback
VisitCallback
CollectCallback
ReadCallback
PostCallback
AwakeCallback
IncludeCallback
InstantiateCallback
PopCallback
RemoveCallback
VerifyCallback
TestCallback
DestroyCallback
EnableTests
SetCallback
CheckCallback
SortCallback
DeleteCallback
ChangeTests
InitCallback
FillCallback
PushCallback
CustomizeTests
ResolveCallback
ExcludeCallback
AddCallback
PopTests
FlushCallback
ConcatCallback
MoveCallback
ManageCallback
SearchCallback
NewCallback
CalculateCallback
CloneCallback
CreateCallback
ReflectCallback
CustomizeCallback
SelectCallback
ResetCallback
ViewCallback
PatchCallback
LogoutCallback
ResetTests
StartCallback
UpdateCallback
AssetCallback
DisableTests
RestartCallback
QueryCallback
InsertCallback
LoginTests
RateCallback
ComputeCallback
CompareCallback
ChangeCallback
PublishCallback
ForgotCallback
DefineTests
ValidateItem
RunCallback
RevertCallback
EnableItem
InvokeTests
CalcItem
CountItem
LoginItem
nullCacheLock
nullCache
Dictionary`2
assemblyNames
symbolNames
isAttached
DisableItem
CultureToString
CultureInfo
System.Globalization
culture
ReadExistingAssembly
AssemblyName
AppDomain
get_CurrentDomain
get_Name
GetName
get_CultureInfo
source
destination
LoadStream
fullName
DeflateStream
System.IO.Compression
CompressionMode
set_Position
IDisposable
Dispose
resourceNames
TryGetValue
ReadStream
stream
get_Length
ReadFromEmbeddedResources
requestedAssemblyName
ToLowerInvariant
IsNullOrEmpty
ResolveAssembly
sender
ResolveEventArgs
op_Equality
Monitor
set_Item
ContainsKey
Attach
ResolveEventHandler
add_AssemblyResolve
Interlocked
Exchange
ListItem
RegisterItem
GetItem
InterruptItem
GetAssemblies
SetupItem
CallItem
StringComparison
Equals
InvokeItem
StopItem
MapItem
EndsWith
CancelItem
ConnectItem
PrepareItem
op_Inequality
DefineItem
AssemblyNameFlags
get_Flags
FindItem
ExtensionAttribute
CompilationRelaxationsAttribute
RuntimeCompatibilityAttribute
DebuggableAttribute
DebuggingModes
AssemblyTitleAttribute
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
STAThreadAttribute
CompilerGeneratedAttribute
GeneratedCodeAttribute
System.CodeDom.Compiler
WindowsFormsApp1.Resources.Njdytmwqabvubi.dll
WindowsFormsApp1.Resources.Qytestmsnb.dll
costura.classlibrary.dll.compressed
costura.costura.dll.compressed
WrapNonExceptionThrows
Discord - https://discord.com/
Discord Inc.
4Copyright (c) 2020 Discord Inc. All rights reserved.
$8ea56dcf-61ec-4afa-853c-b28474156da2
0.0.52.0
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4Y
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
11.0.0.0
9ZWC&4
*~~~KE
)75=}o
M-6afr
6!qaau
6;G_ &l
O.:tTc
S]W["~
s>~ff`gN
zk|-R^
!a-Oa
jR&bRD
eXTW1(
@6RO(^
?u&G@>
zqN`)J^
\3Gw[E*
-c;26CP'm
p;!=)Y
-&J<|h&
l@tA6
D'x'Jni
uYw+hA
"ov8i27
M\>NMhO=
CF..U(w
_7nuq6
ke\Vt{
~bTWFb
?~9?~*V
NYzsmY
vFANNLfp}
zqN.+k
!))#-(
l}iiq1
ghl`v?
m`u`E`k@
WMt\-]
/Q9Gl1X
z=}4+5
4]j^7xi
<-x_pY
O*0{shw
Om:NSy
;rW@r7
W`/h]7
g\2L,m
?19e_w
aQ=vT9
7eJ%Oy
hzXe4HS
&.he$H
Rp:8wH
X>bKD^
DCG50m
<jPza!;
f\]#Q-
c6T:((
v=|BGC
|B"n-y,B
?ckP{ko-M#
Alvj-3}
~vu=%cv
d3u3\I
KU`yRP
?^$*j-
^-Kl?]
y" t4Q
%eQRU$
C3\3gt
k/?@)J
oUk[z<S
u0]=cOU7
X!S)b*
=au>(b
a^e)Nxt
lHG~ 3M
"@QTE7
%/9j!/
eSPZ7>
>&0oV1
}SemET
7wK^ktUH
qU Srtx
jqU StwaoMa
Xa1N2P
RNE@N'
(9<Of><
#PP^A-5
UCP]J_j/R
DY=QoK0
fA3 ~
AzA_ /
AJAw ;
2~>hhhds
~5#sc!
k)~//<
\\xUw:c^
D&-^,
SXFX"3
.>A>mD
p4B(7X
YV]FVS\
UJbFR|
{|wUk
-"(f\.
/e]YY?
+~YN=;uA
.- *$(
yj>!+:
mf:> #
Bmh78h
N??w,
(mc"f-)k/*
YEUi}usG
.$"/&(#!*
.-%"+*
Llmn>!.
Ex$4,< 0
QtMY&L
RBDJPHFF\GC
]3nv*>n.i
]S>.m)N
nUu>!Ne!
hQ1n`g
\|}|.>!V
ineQNQueea-3
p0>62*'
J)ML^U
^sq{<^'
-i?45U
j>?2mo
hP`nc:
]gL<;A
Fm1@A?I
4,UCj+
X97Vd_B
&|F<;%E
Wl-w:Zc
?<%@v2
[hB=eq
H-2nix%
'r62?5OX
I<C)nU7G
^KedS\#
`\ <?Q
p&(?^t
a`,1V2
v7P}AW}r
f rdH7e
h_>Nko<
R.%JBR-
%b<n\0V
fM{h47q
7<id#x
(u0S@x
01s7@R
&B#Nv+
]X5f,|`
ARVJYV
,rD%EtI>5
="Mo1`h
u.AFo9o
#'Y4+#rN_
5"q^d3Z
da97d]
B8 bAB
6@W"MLJ
:Vq>>l
B{l9LpI
b`6f5f7fd4be
<L_h#/Lo
wgenG>
dRw*XZk
S5s6/y
Gb5d?"x
QJ5S7.\
=-u_{R
KnZZ@k
*8H#'h/
)FMKXVh
ZFAW9n
x="9R
|5cC0l
#!<&a4)
WI/<p4
:uM63'
n?_IG
CSoc}bC
U08~x+0|
SI|f2;@
{9\Zfq
UFGYT=$
,]*x\0c
:0IKiY
+y,#.=
>-$N>dY
WYv*A^
m;JRmkzkWA
XeSq0A
BXfLXK4
@ELHKH
( ~H$G
SBzG!+%d
Pji $n
v]_t<.J
\O&6UT>gY
H,P;y/q7
U~M##>
6D+Z;K
!wwdxI
r,>gN'
:1B+ss
et%h1z
CcGYZ[
|0>}J8
rkI{L+z
_\b~3!l"
5@+(c'
D1 .ls
yQTnG@
AobeT@[
umIM]Cf
2z O]<pT0
L<m{QZ
s%#?zc
1CeN3d
*a<En"
,|(0c"
AJeA4}
00SMe]"
d<+MvZ
WYI*+9
]Ki;K8*J
W.W'=S
X-Sf)g
:]OnOM'U
IG~"&#O^
Zgr>>>
dzNN.sR
KHUkB*}A
ivKDfZ
c3}qzo^
4l[C;s
mbZfHp[Y
:+-"Ge
.ZMh@r
4|V^PO&/p
)_TIC(
6EW{wld/
6<.^6Xc
[Z58=1u
pCFd$k
CF)440
Pjlfrv:
{0xepE
[_|{^1
ogOZ8d
Kw7Trv
"L3!zL
>><sf$
%XfI`h
z%++5~j
:rFtZu
AVP?}:
kFhU8
WVB}(Dz
}vJa}8
~8%#>X
ASnr~`
F-(.d9
h18]0f
fde!4}n
:x;#FE*
z![qG3c
"Ndl-
}AC2|k
aDPV#JD
,<LFAF
~Z(f9@
"RH*k*
@s}C}SC
el3aG-
tXXHV:
]N')<O
X:3/q+ND
qll8yeS"
&VcZ>I
z`W+63,
.6\^xr
7~wX_M
_CorExeMain
mscoree.dll
z[]>!^
"^h#O;
Nwo]_:|
Ld`%N2
f{l7;E
n&5z9nv
`fr-.|
zKr]7h=%-!
al_MMP
B`3^Ka+
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
DigiCert Inc1
www.digicert.com1+0)
"DigiCert EV Code Signing CA (SHA2)0
180314000000Z
210218120000Z0
Delaware1
Private Organization1
51288621
California1
San Francisco1
Discord Inc.1
Discord Inc.0
_v<WBP
US-DELAWARE-51288620
1http://crl3.digicert.com/EVCodeSigningSHA2-g1.crl07
1http://crl4.digicert.com/EVCodeSigningSHA2-g1.crl0K
https://www.digicert.com/CPS0
http://ocsp.digicert.com0H
<http://cacerts.digicert.com/DigiCertEVCodeSigningCA-SHA2.crt0
DigiCert Inc1
www.digicert.com1+0)
"DigiCert High Assurance EV Root CA0
120418120000Z
270418120000Z0l1
DigiCert Inc1
www.digicert.com1+0)
"DigiCert EV Code Signing CA (SHA2)0
+.+1Xf
http://ocsp.digicert.com0I
=http://cacerts.digicert.com/DigiCertHighAssuranceEVRootCA.crt0
:http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl0@
:http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl0
.http://www.digicert.com/ssl-cps-repository.htm0
DigiCert Inc1
www.digicert.com1+0)
"DigiCert EV Code Signing CA (SHA2)
20200910175959Z
DigiCert Inc1
www.digicert.com1!0
DigiCert Assured ID CA-10
141022000000Z
241022000000Z0G1
DigiCert1%0#
DigiCert Timestamp Responder0
https://www.digicert.com/CPS0
2http://crl3.digicert.com/DigiCertAssuredIDCA-1.crl08
2http://crl4.digicert.com/DigiCertAssuredIDCA-1.crl0w
http://ocsp.digicert.com0A
5http://cacerts.digicert.com/DigiCertAssuredIDCA-1.crt0
iW!]4/q
DigiCert Inc1
www.digicert.com1$0"
DigiCert Assured ID Root CA0
061110000000Z
211110000000Z0b1
DigiCert Inc1
www.digicert.com1!0
DigiCert Assured ID CA-10
.http://www.digicert.com/ssl-cps-repository.htm0
http://ocsp.digicert.com0C
7http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
4http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0:
4http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0
DigiCert Inc1
www.digicert.com1!0
DigiCert Assured ID CA-1
200910175959Z0#
==============================================
CatchAndThrowEx:
CatchAndThrow:
Didide by zero error
DoStuff2:
Contact1
Dailup
Contact2
Qytestmsnb
Njdytmwqabvubi
Inner exception:
.compressed
costura
costura.costura.dll.compressed
classlibrary
costura.classlibrary.dll.compressed
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
Discord - https://discord.com/
CompanyName
Discord Inc.
FileDescription
Discord - https://discord.com/
FileVersion
0.0.52.0
InternalName
IMG_608943011.exe
LegalCopyright
Copyright (c) 2020 Discord Inc. All rights reserved.
LegalTrademarks
OriginalFilename
IMG_608943011.exe
ProductName
Discord - https://discord.com/
ProductVersion
0.0.52.0
Assembly Version
0.0.52.0
RAny use of this Certificate constitutes acceptance of the DigiCert CP/CPS and the Relying Party Agreement which limit liability and are incorporated herein by reference
RAny use of this Certificate constitutes acceptance of the DigiCert CP/CPS and the Relying Party Agreement which limit liability and are incorporated herein by reference
RAny use of this Certificate constitutes acceptance of the DigiCert CP/CPS and the Relying Party Agreement which limit liability and are incorporated herein by reference
Antivirus Signature
Bkav Clean
Elastic malicious (high confidence)
DrWeb Clean
MicroWorld-eScan Clean
FireEye Generic.mg.5f0e74e8c039c771
CAT-QuickHeal Clean
ALYac Clean
Cylance Unsafe
Zillya Clean
Sangfor Clean
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
Cybereason malicious.9a2908
BitDefenderTheta Clean
Cyren Clean
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of MSIL/GenKryptik.FEMF
APEX Malicious
Avast Clean
ClamAV Clean
Kaspersky UDS:Trojan-PSW.MSIL.Stelega.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
AegisLab Clean
Rising Clean
Ad-Aware Clean
Emsisoft Clean
Comodo Clean
F-Secure Clean
Baidu Clean
VIPRE Clean
TrendMicro Clean
McAfee-GW-Edition Clean
CMC Clean
Sophos Clean
SentinelOne Clean
GData Clean
Jiangmin Clean
Webroot Clean
Avira Clean
MAX Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm UDS:DangerousObject.Multi.Generic
Microsoft Trojan:Win32/AgentTesla!ml
Cynet Malicious (score: 100)
AhnLab-V3 Trojan/Win.Generic.C4432936
Acronis Clean
McAfee Clean
TACHYON Clean
VBA32 Clean
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
Ikarus Clean
MaxSecure Clean
Fortinet Clean
Paloalto generic.ml
CrowdStrike win/malicious_confidence_100% (W)
Qihoo-360 Clean
No IRMA results available.