Static | ZeroBOX

PE Compile Time

2057-02-27 00:40:15

PDB Path

WindowsApp7.pdb

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0001e4d4 0x0001e600 7.73093974507
.rsrc 0x00022000 0x00000e14 0x00001000 2.49109296496
.reloc 0x00024000 0x0000000c 0x00000200 0.0815394123432

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x000220a0 0x00000b88 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_MANIFEST 0x00022c28 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
(4YRW84
(FKng~
(d NT~
(Eul7
($s]I~
(A8o/8
v4.0.30319
#Strings
WindowsApp7
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
mscorlib
System
Boolean
RuntimeCompatibilityAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
AssemblyTitleAttribute
System.Reflection
String
AssemblyDescriptionAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
SuppressIldasmAttribute
75ad7ad9-f430-4162-8b35-3dc120bffdaf
WindowsApp7.exe
<Module>
MyApplication
WindowsApp7.My
ConsoleApplicationBase
Microsoft.VisualBasic.ApplicationServices
Microsoft.VisualBasic
MyComputer
Computer
Microsoft.VisualBasic.Devices
MyProject
Object
MyForms
MyWebServices
ThreadSafeObjectProvider`1
Resources
WindowsApp7.My.Resources
MySettings
ApplicationSettingsBase
System.Configuration
MySettingsProperty
Module1
<Module>{15970DCD-8EF6-4F25-9A0C-40CA9C3ACB83}
Idt5pgryuYoFVQiX6j
oRZtxCaSAYh6EEGEIZ
SFU4mbT3GMret7THonf
MulticastDelegate
hHEYokUTtehNq5ji0d
rE4lpnT863QnijKQK5
<PrivateImplementationDetails>{670BE8F9-1111-4EDE-9EE1-CBC372FD9537}
__StaticArrayInitTypeSize=256
ValueType
__StaticArrayInitTypeSize=40
__StaticArrayInitTypeSize=30
__StaticArrayInitTypeSize=32
__StaticArrayInitTypeSize=16
__StaticArrayInitTypeSize=64
__StaticArrayInitTypeSize=18
PtnpFdTa6rs7XnXbfD
XxUkuh2utPOLx3IK1G
Ntc48tpxiBQj7sKnq3
R90oRyo2o4bddxDuL9
AucX0AmKGAseUXP7pQ
oV2uWE1ElIGkiSggcS
P0gRa8dN8cSbaGa01m
m_ComputerObjectProvider
m_AppObjectProvider
m_UserObjectProvider
m_MyFormsObjectProvider
m_MyWebServicesObjectProvider
iTdWnAIwkh7cjQyKOb
.cctor
get_Computer
get_GetInstance
get_Application
get_User
get_Forms
get_WebServices
ThuEfBkCHauo5w4Q5o
tk12ddi8M6oj9gXS2H
Application
WebServices
m_FormBeingCreated
Hashtable
System.Collections
kKgYv4wEcVbPH9canc
Create__Instance__
System.Windows.Forms
Instance
TargetInvocationException
Control
get_IsDisposed
GetTypeFromHandle
RuntimeTypeHandle
ContainsKey
Microsoft.VisualBasic.CompilerServices
GetResourceString
InvalidOperationException
Activator
CreateInstance
ProjectData
SetProjectError
Exception
get_InnerException
get_Message
Remove
Dispose__Instance__
instance
Component
System.ComponentModel
Dispose
Equals
RuntimeHelpers
GetObjectValue
GetHashCode
GetType
ToString
DYKE51HVDmZ4GEV3Xh
OLPnQmbKWY5svtq8Ds
mMxiPCt0LY2AqZZrV7
NsTT8jRh3qMS93uq9Q
C9gjRIabCBVlUFNwIl
RPD1qc5YtP1HpvDKWr
bImyd4xEniSU1lDOfm
d1ZHKHO3cwa7vsynnv
MhEPgCNpSRFuE4FdNa
BnFAmHgp0UerEEZvfS
m_ThreadStaticValue
zw9CXrh5kOV5M5bxgb
YRP8S89Wp9yLJIAQ6I
wbgcr2lf3Cbm3YrPt3
GetInstance
resourceMan
ResourceManager
System.Resources
resourceCulture
CultureInfo
System.Globalization
sn1kRwErNcd0sdEhmR
get_ResourceManager
get_Assembly
Assembly
get_Culture
set_Culture
get_Brw4Nk
get_Free4All
SMEtESQFIp4EucHFV9
ReferenceEquals
QX9TEyuFGq5lxygZuF
tA0LhxSlZl93c6CtH5
LFdO8bLvupcAtVkAsB
GetObject
Culture
Brw4Nk
Free4All
defaultInstance
NEeLcxKl6QT1jCgEbN
get_Default
BY0kRg0iUvWd1j1AOr
TgNpOpf5JBvBmSH82Z
SettingsBase
Synchronized
oxWiSPyhNhhoqk0olg
vMTflkW2vv6iATyCw0
Default
kFX15x7KthTYK3ZWG8
get_Settings
IrXvZJvem1C2HCqePl
yXEhl1PfpUTnL34e5u
wARnrmBuFxElJ7Rd6J
Settings
ws95cr6yVYohNRIIrR
get_ExecutablePath
Thread
System.Threading
AppDomain
Conversions
Versioned
CallByName
CallType
Replace
UTAcZaJkA6At3QSFFb
SLlXHlAquukoXGUadY
jBSbmGZGpbikOb9lqv
VqtThasBTSrMZD4uU4
GetDomain
D95cgK3PEkQ52cmlR0
nnEp8RnvmNwoN2El4i
C65vNHYr8QVhFld6fG
jI3dBe4D8yqbebgUdS
jkdajdsjhdsjhsdjjjhhjdsjdksjkddsjdhjjdskjdksjddsjhdsjhdsjhdsjkds
StringBuilder
System.Text
upthh1COyMGJQq5DiH
xeCIeRG9TRuZJgseRn
Cl5MRdrvMt0ay2a8Ig
CompareMethod
Strings
sT6acbXVtmlSKXXv6e
Double
ToDouble
ljlqjDVCpvrCZ4mavt
zMkakne14L7RFvq2lV
qlp7oDcqpScfNL3fRG
Append
vewBSFDw3qjK40REUK
cxdsjjkdjkdjhskhshjkjjdsjhsjdsskj
MD5CryptoServiceProvider
System.Security.Cryptography
AesManaged
System.Core
ICryptoTransform
set_Key
Encoding
GetBytes
HashAlgorithm
ComputeHash
SymmetricAlgorithm
R96B0lMPRxqHYIk3EV
KGqlsMUZM01X5gt1iU
xouGlbzcDRwgFAnLPx
get_BigEndianUnicode
ubic1KjqM7C1VniA3e1
CipherMode
set_Mode
IeZcm9jjsk7TMPidVXu
CreateDecryptor
pQmqUVj8fE5NM9c645J
TransformFinalBlock
DktDdmjFEcGLHi3sg6e
hgkdshdgshgdghghdsdshgdshgdsh
qH9sVrjpEXcQ1LLplLv
eVp4ZtjT2RSTpEynTTI
suEUDUj2t8SnqB5r3Sd
A45NEUjoepFnO0Y7ClR
uvGnStj1TdGh9ySj4qE
GXIMZwjddjx62pbqjx1
IACNsyjmsKny1vu2j64
GjKZvXjI9HGupdStf0N
kUG7Y2jkqhvyWPIixny
Kh2o8BSHbd
Module
SELYZNjSL4R3c3RtxOO
AELoasVVfRK6g
typemdt
FieldInfo
MethodInfo
GetFields
SetValue
ResolveMethod
MethodBase
ResolveType
get_ManifestModule
hhanukjKipQqmYIWwtd
MemberInfo
get_MetadataToken
LuMnRJjyFosHGKhPNS7
Delegate
CreateDelegate
gBPsTqjQjZYY9wVDEvb
p6HHGwjLXn0eclJobCX
tnjA0fjWXRJYlfLFynY
object
IntPtr
method
Invoke
BeginInvoke
IAsyncResult
AsyncCallback
callback
EndInvoke
result
Hh5kRkRi0A
JHtoasVTxAr5w
$$method0x6000317-1
$$method0x6000332-1
$$method0x6000332-2
$$method0x6000340-1
$$method0x6000340-2
$$method0x6000353-1
$$method0x6000395-1
$$method0x60005b3-1
GeneratedCodeAttribute
System.CodeDom.Compiler
EditorBrowsableAttribute
EditorBrowsableState
DebuggerHiddenAttribute
StandardModuleAttribute
HideModuleNameAttribute
HelpKeywordAttribute
System.ComponentModel.Design
DebuggerNonUserCodeAttribute
CompilerGeneratedAttribute
STAThreadAttribute
MyGroupCollectionAttribute
ThreadStaticAttribute
WindowsApp7.Resources.resources
WindowsApp7.g.resources
aR3nbf8dQp2feLmk31.lSfgApatkdxsVcGcrktoFd.resources
WrapNonExceptionThrows
WindowsApp7
Copyright
2021
$cfdb1430-f76e-4dc9-ab30-d5d25120b052
1.0.0.0
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
MyTemplate
11.0.0.0
My.Computer
My.Application
My.User
My.Forms
My.WebServices
3System.Resources.Tools.StronglyTypedResourceBuilder
16.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
16.8.1.0
My.Settings
System.Windows.Forms.Form
Create__Instance__
Dispose__Instance__
My.MyProject.Forms
4System.Web.Services.Protocols.SoapHttpClientProtocol
Create__Instance__
Dispose__Instance__
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP3
#SA?}zn
l|~X c
x+!lK&A
FwsAcK
>(AdWC&
|qRgy@
P^9E/q
aZonP<9
W_:8\_^
23-8af
4UPdN\
\xYq*qZ
gxI{d~
B)#aDs
I;zcL>
R/IGSB
+#8p^i
@mPQ7{
h`dNGeg
/(7NijD
`=;,eC
qghdP7
6bExCs
8Sj|e<
L)>%9}
bTPZ?,L
etlWvj
9gE!IgC
W/V/~L
W^0w7\
;9%=Cc
f*6cZe
$94pY
^;f Bw
XpVJ6S[
QO=$q"Ctd!
5.uY @
ALSUE+
x-Plhz
H(qs'RZ}j
i}V!!Z
N6k$'^
7n%oP#
%#%+Rw
]='xX"
a6dd'DF
Y#KU{w
HUo6tR7N|
f)qo)z
?aHb](5
hl%iM%
@9 (rz
1.Lo6
v==7OQ
y^~wW)ec
3'v+A9
*JkhOX[q+
9m lN!
C/kGubP
Y6/=.]
MDl M-
!JYdG;
XIfsAC
MxeZ"3
O6<]>K
IF:1yp
VDGBH!
A.i>_<
Isg_I{z
TU{3^K:
Z}0~]w
wFi4]YZ
v,,&<4
kL0z-N
o+Bn.G
P1x#;3;
siZ'~7
xSrN~b
I"-r>g
$h*[L>j
R\q_4M
FDK`y
EWDh4g
YS+7p
EWDh4g
YS+7p
EWDh4g
YS+7p
EWDh4g
YS+7p
EWDh4g
YS+7p
EWDh4g
YS+7p
EWDh4g
YS+7p
EWDh4g
YS+7p
EWDh4g
YS+7p
EWDh4g
YS+7p
EWDh4g
YS+7p
EWDh4g
YS+7p
EWDh4g
YS+7p
EWDh4g
YS+7p
EWDh4g
YS+7p
EWDh4g
YS+7p
EWDh4g
YS+7p
vFWx]
_<:R36
DzPI}U
`VjdY[
b.n3ZQ
)2`eta
ii-N{[
hvALb#
<>+[YD
`Yj5l7
:j3-Y'
u0dNO\
.?SJePJ
`]~U{K+
e>r}6Q
LeQK[@
NQ>kQti
.".WQQ
*/CHv_
FWG>|$z
kwfN.n
CF];}k_K
VGNLkc
4Q'wB"
JH'SPur
sM[^oM
`DL]lM
e =|K|
,Z5$dh
l}5|lC!M
a~S;mMwN
{xuYe m
r3e&w+G
!X+:IL
Ytz=a8
|973-EJr
rpzC/[A
Q%Z7ns
C9|1*ZC
WZu09I
5(<0pd
"6{WO6
KNB*'{
.t`),x
obTAZ7
I>x0Eym`
nt-1wQ
8N,"-Mn
=s[0?%
N|MUz'
ex)2w~
jU`{7m
!%+lr
Z[.v[Q0
PQ~&r8
}9RqK19A
Z^bt8
'v&kMS85
:M_#k>
Q3)nKtA
ls'+_!
C2C:U2
=[@E
,ILL.?$
_biz}\<
k0q/st
<v>wvU
'u/kwhD
q(qD53
#?F^<:
1^*mNT
E=!kc.
c3/e{*
6~?p\0k|o
SSJIgpR
9Kyt%&l
*egizP
}CuU6!
uPow]iCH
~*m\ri
}cH9j7D%eI_6
=ElWbx
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3ajSystem.CodeDom.MemberAttributes, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089mSystem.Globalization.CultureInfo, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089fSystem.Drawing.Size, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
ISystem, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.CodeDom.MemberAttributes
value__
System.Globalization.CultureInfo
m_isReadOnly
compareInfo
textInfo
numInfo
dateTimeInfo
calendar
m_dataItem
cultureID
m_name
m_useUserOverride
System.Globalization.CompareInfo
System.Globalization.TextInfo%System.Globalization.NumberFormatInfo'System.Globalization.DateTimeFormatInfo
System.Globalization.Calendar
System.Globalization.CompareInfo
m_name
win32LCID
culture
m_SortVersion
System.Globalization.SortVersion
System.Globalization.TextInfo
m_listSeparator
m_isReadOnly
m_cultureName
customCultureName
m_nDataItem
m_useUserOverride
m_win32LangID
%System.Globalization.NumberFormatInfo"
numberGroupSizes
currencyGroupSizes
percentGroupSizes
positiveSign
negativeSign
numberDecimalSeparator
numberGroupSeparator
currencyGroupSeparator
currencyDecimalSeparator
currencySymbol
ansiCurrencySymbol
nanSymbol
positiveInfinitySymbol
negativeInfinitySymbol
percentDecimalSeparator
percentGroupSeparator
percentSymbol
perMilleSymbol
nativeDigits
m_dataItem
numberDecimalDigits
currencyDecimalDigits
currencyPositivePattern
currencyNegativePattern
numberNegativePattern
percentPositivePattern
percentNegativePattern
percentDecimalDigits
digitSubstitution
isReadOnly
m_useUserOverride
m_isInvariant
validForParseAsNumber
validForParseAsCurrency
Infinity
-Infinity
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Size
height
DBRfhn M
WindowsApp7.pdb
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
)V71VDAV[QV[YV[aV[iV[qV[yV~
V7$V7,V7$
.S`.K`.c
.+`.Cf.;J.3`C
WinForms_RecursiveFormCreate
WinForms_SeeInnerException
WindowsApp7.Resources
Brw4Nk
Free4All
1010101092 1010101127 1010101120 1010101090 1010101079 1010101056 1010101092 1010101127 1010101120 1010101090 1010101079
1010101097 1010101091 1010101076 1010101089 1010101098 1010101076 1010101093 1010101079 1010101089 1010101099 1010101092 1010101086 1010101089 1010101092 1010101090 1010101076 1010101086 1010101076 1010101098 1010101084 1010101082 1010101098 1010101084 1010101090 1010101078 1010101089 1010101081 1010101089 1010101079 1010101093 1010101076 1010101093 1010101081 1010101088 1010101076 1010101097 1010101075 1010101098 1010101097 1010101094
A34CA69A952755AE681471D392365FBBEC94D29619EED53B7D9760FFDB10
`#$%`#$%`L`#$%`#$%`o`#$%`#$%`a`#$%`#$%`d
`#$%`#$%`
1010101081 1010101111 1010101126 1010101094 1010101131 1010101122 1010101111
*/*G*/*e*/*t*/*M*/*e*/*t*/*h*/*o*/*d
1010101083 1010101120 1010101128 1010101121 1010101117 1010101111
Brw4Nk
Free4All
$this.SnapToGrid
$this.TrayLargeIcon
$this.Icon
$this.Locked
$this.DrawGrid
progressBar1.Modifiers
$this.Localizable
$this.Language
$this.GridSize
$this.TrayHeight
progressBar1.Locked
VS_VERSION_INFO
StringFileInfo
040904E4
Comments
This installation was built with InstallAware: http://www.installaware.com
CompanyName
Eziriz
FileDescription
.NET Reactor Installation
FileVersion
6.7.0.0
LegalCopyright
All rights reserved
VarFileInfo
Translation
Antivirus Signature
Bkav Clean
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Variant.Johnnie.161012
FireEye Generic.mg.b3dba69bba89f7d4
CAT-QuickHeal Clean
ALYac Gen:Variant.Johnnie.161012
Cylance Unsafe
VIPRE Clean
AegisLab Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Clean
BitDefender Gen:Variant.Johnnie.161012
K7GW Clean
Cybereason malicious.bba89f
Baidu Clean
Cyren Clean
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of MSIL/Kryptik.ZEB
APEX Malicious
Avast Win32:PWSX-gen [Trj]
ClamAV Clean
Kaspersky UDS:Backdoor.MSIL.Crysan.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Clean
Ad-Aware Gen:Variant.Johnnie.161012
Sophos Clean
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Clean
CMC Clean
Emsisoft Gen:Variant.Johnnie.161012 (B)
Ikarus Trojan.MSIL.Crypt
GData Gen:Variant.Johnnie.161012
Jiangmin Clean
Webroot Clean
Avira Clean
eGambit Clean
MAX malware (ai score=89)
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Trojan.Johnnie.D274F4
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Backdoor:Win32/Bladabindi!ml
Cynet Malicious (score: 100)
AhnLab-V3 Trojan/Win.Generic.C4491642
Acronis Clean
McAfee Clean
TACHYON Clean
VBA32 Clean
Malwarebytes MachineLearning/Anomalous.100%
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Clean
Fortinet Clean
BitDefenderTheta Gen:NN.ZemsilF.34738.hm0@aO9G2Vji
AVG Win32:PWSX-gen [Trj]
Paloalto Clean
CrowdStrike win/malicious_confidence_90% (D)
Qihoo-360 Clean
No IRMA results available.