Static | ZeroBOX

PE Compile Time

2021-06-28 01:04:46

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00062a1c 0x00062c00 7.97954125806
.rsrc 0x00066000 0x0005b6a8 0x0005b800 2.51471122007
.reloc 0x000c2000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000c0ca0 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000c0ca0 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000c0ca0 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000c0ca0 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000c0ca0 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000c0ca0 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000c0ca0 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x000c1108 0x00000068 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x000c1170 0x00000382 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000c14f4 0x000001b4 LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with very long lines, with no line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
  s$
((s$
  s$
((s$
00s$
88s$
@@s$
HHs$
PPs$
XXs$
``s$
yas'
yas'
yas'
yas'
  s$
yas'
((s$
yas'
00s$
yas'
88s$
yas'
@@s$
yas'
HHs$
yas'
%-&~2
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
hSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
tEXtSoftware
Adobe ImageReadyq
IDATx^
W(lV!n^
y)}^Ue;
H.dfjb=
/mQsBj
*4fU||
1Q PTh
-n;60-
+Be^8b
f}8}Fu
&1ynE8
^?0kBu
sgH`lj
"B#Pq<
RmT'LZ
P!`?g;
-, K]Gq(g
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
dlIDATx^
|+,"r+
dK%^sr
`goZ\y8z
r;5p0[
klCIk
=tyMXt
LWoGtl
A)1qC}t
;]CR;x
_oDmw<l
T}98Q8y
NByy9N
OumY^X
/OOLNL
g^Ge>4
"bCo8vXz8F7
$pwvEEU
Wbd_%&
GK12+C
deeYgffZs
bh95VT
zvTahO
iu[.,B
6Lq!wD
(HEZ^*4
&Re]EY-j
M<N!|<
]j{JR*
')I/nQ
*L,F*_*^*1
8J7,)@
$07;5U
B`TD$6o
{e`meK
6BBB>/
'Sr:VzZj
&$'f#)1
EZ\L:b
qHoLBl
~K&j[;
TVd*+*5
yE9coi
4$$$#..
crl5-p
OEzP0B]=
XZYth<BCh}
x,?9o}
#k*Q][
KtFEV.I
0Vu#>&
@-2*bPJ
oTw$BC#
0mHDjZ
MU`)s2
@-nTY"
Sd;;:"0
+8EX!$
T]mcGk0
zrt]ij
R92>1n
Uc9h^T
(MIDAb
{_/V1y^v
3NRGL0Nd
w'(|:7
cc!w#Ff
P3,]bj
oXQ`"n
9 dZnK
mHr3l#
a2oJ(z
ht{Yhn
<&/2" q
+UjcKk
}eh|9i
CPL^NF
r'iAr5
yU[f#P
%0[hg<|
h^Bi]Rt
%G8'eK
#}I)Hag
"PW;9G>o@
-ILn=]
6B^8el
=9zMa\u
r7E}4~"=
xvJsYbd
|epy,Cu
x*0 aa
xjPc1|e9
/N#DSR
pIRl64]
iTY<iK
#.$U61~
huG&!!
">m(Jn
2Z?d}JY
MIOuHLw
$CQQW5
9V[U1Q
Q8^<u>
[Rw`jz
%~]C$"{
tKn'9H
b2h(aUo
?#sqg76|G
#rS)5y
N-z`}{"
d"g>0(S
)\Ix/>
{;;v\0
6)"`;y
^cXp?S63S
x{>V;d
97Ji)
Z{-va27
\w$LHx"
IlYwm
W<VH?J
?l/AGS
kFhC5
hIdDv#
[T2<>F
jJj73|
?a4as7
=j;g}eQ
w<O d*
Z\#yo>F
B!Yq['
~q'ZpR!
9!,^%(8'I(
=S2fmQ
Ra-3g8
ndwH9Wa:
(nwy={
V88(&E
_D107yHO=
^)I>_
k)M8P"
i&iT_O
B;Lcg78
XKMb<t
L+JNi9U
?V*q'y
\mI{/qm
(`8D!VcV
t2.Tnm
E?cKwp
3&1Hx7
Ysq;^U
1prnOQ
(jfquq
Ra)JFC7
J?QG?e
:jx-X/
jWR;A^M
v}~Fzp
x-;T>#
EcpnK~
&Zh9y!
Ln0~~0&
Cv'az7$
H%<1se
kcb2hk
3+[;5(
9o3uNE
D8w=m"
sSFA'EM
|t~BKB
OHM6H~.H&
67|f<v
Bnu&k{
_RtBSK7I
ZQ:NbN
'/(t
V:fn4<
r#8/M
3=}SlG2i
&JihtJ
-fHpP7
BN~wRl
Z}H [S
l3)"Sz
bKl;4<
8;li<Hz
OQR>~,
X|_'|e
4x2fN-
`?&d`V
lQY/Uu
d*@0(N<
s&N`Y^d
hF\wB$
Ib88PcR1
[Y'3S&
|U!LCJ
n@tL.d
KI|7>P
IJ\^~V&
p$7HX&
#7|on
KMAbOi
lSKTH{
t!H.XT
a@|PM#
U:wl'$
#5UI<B
@A[q%OZ[
.|hC0<1
C{$'P:
MGFQ3=M
l.";*h
L*NNG6
9RnaR1
D6;uAn*k
&@,?0`@
n<S}'8$
]<;orN
9,@VTl>
xq#K`G
K4(b7
2_<;5vP
O}V9Vh
wY&H+7*
4 ~],+
[h///
LSHZY#
d)I^a8
R+<pM;
nap;<K
^vm(%+v3i[
dpw,k6
&88Y?&
[,=Et4
Fb31Ow
M]~`IE
^h\d~V
|4W&aY
)/q{;^_
Ytn$Zl>
8v?T&J
opUR1 r
E:}TAHZ
.4X,UU
P7OaS2
yhyCtBLd
lSi8r4
>x;"Cv
^Qc,YK<
n<PGdv
9y6%(3V
nb9'HL
+l2;RWY
yq5ZLw
OMCa?D
K~bNd.
|WIAE:%<
Hj(MaU
YPrtmc
rR%Sr<
|mp0$*
hEl9wQ
6P !(_R
{LI~og
0azllA
U}M|S2O
NdK+Yz
MJK fA
)qM9b\gW
^5^~2
xD)H*J#
b6A&wc3T
QteaR\
q\:?p9!6A
HuJxHQ)
&6jS<'
S#nxf#
*N!Hs~
!+ukh`{=
0mdAhST
u6?1CL
_tUn_;`d
Qs;3PE"\
p n/VW
foh/Wh
U"f-g[
V/f PT*
,A~I9T
|*C>^9
o0BB?+
>u;M8V
aN\Ft5
WAS!T|
L&=b.a``
1Q(eU-
GY Ut#
PO}V9)
_wmi{^=
l_n)z3
eEO.NaBB
b1L/Ra
3qcE"=
%v]tx}
{PIjpq-
$8E{5{
oRr/;*wSXL
oSR'Fps
}QQ][D
[5,-6ht9
NCK`6q
H[ 1ZJ2
6P]m`X
W~u/bt
4@n!Mu]
P\=Sbo
,GH^2jJ
)!w#nk/
j0tcg|
%Vg7G`
`LnQo6
_g5-!CLp
+'L_$
CMeS#B
K!%l4M)
yN&r/]
:8O"4)
TNPX{N
)8r:RX
Lp>.f}C
ry;!4$#E
f5Aya
kG9V)*N
KQ^5Z_]
C^Xt49hm[
|yv[![
kITakWXW
DU*Fu9J!
Q"I N0
D`IysK
5VZ)`H;
S\cKDY
Rz<=?^D
s5t&^wKU
V<ScGsX
`#Wa:3%
-K&@?c
fm/nag
VU9GIZR66
-=0J1p
qaKI/S={
!>C2b
8+t#Ma&
H_vIT6
"vUapC
2@*v9.0,
t y;Dj
'XKJ:z
zE/MMY
&E8,3K
-<aSUr
qQ;g;C
EPhGO1
;QXZ}4
|$F:l0h
)}p9G*
w$g*?/
g:9a]|
k(p.H.X
X 0L6
\/=c|Zw
4\2:Q;1
[T\It,
SKG]R1
~D)J6e
*R(Ff}
s7<J:<js
(PmmS.
<gYUjA
NK"o6z
uVdXuq.
&C)$wy2T
_hi~81
`G.EI}
r'QuxZ
]X.%>_^
Ih:u<J
jEKB<m
Ho\tv&
S)S\6c@
074[gQ<*
=TqYX1b
&*CayT
@cd7@ec
#P9#=P^
~ZNlSM3
fN[#!rZ
lbh]^"
%o|Bb5
\gr{:\r
u/zq:>
tf2gt@
MdrcIYp
aQ$z>R5
U5@Eqw{2_
j>U%ss
,[,M@z
B-QsowF
Vx@9SeMD
sL**I6
5L+8F,kw
bGmQfl
^h>`U_msA
kX%}GA<
dQ~2RB
*i1mqK
WE"?9cO
/oeTX2
k,B:8M
Z-%S6
8g_7"2
<#d$s*
[A&LtV
nKM~K]
Fq`Ulr&YC7Vq
sK7v<q
|&hKZ{J
@$dz4
8+htS
(ZKp~L
4<$xBC%RK
Qfbjq@A
}W}VNf`
N{}yT9m
SQ9f(&
~[>z?ZgQ
=ftGWm
uB"l'I
Wr;li 6
&jCqYBU,zE
`NVg-q
f*zAmU>Y
U;P!P6
0U<&9
"M-|"j
G]&h+.
Wa.km&T
tVhn_k:T
IMvV@L
X2.2ZC
7!!*xCA}
t]q|J5RM
id(4 K
wGXW8Z
%]vbzqA
6"q7~i^
Xf(\0`
(H~\D7T15
]V{wbO
3.YP>:
#GR]H'`
c?kux2I~
@Boy2}
r@*oyVc
S[U2fL
a"(KUR
)&HzIb
iF{!JQ
4/XPJF
&D#W|4`
}'Y5_n
W(]kqZ!
%{R'>Qzs
w:':8[
n!Y\O
_){b<[
MlDu*o
T)NnWK~i
56\kV
E|&"\
8$+Odn@
f-(Oeb
5a0_.x
X5,02c
7?mb6y
ksixE&
f~39[G
lBCO3%
Q)Vv!+
SG!%L
,IGqEv7.
$3 pl1
Y9 Gs5
^o64*_
W#!NEi
--*'1dN
jgmR[v
ygXQ2AL
#h/4m
Zc=2I'
FH!f>/
Hf,2qGJ-
^nXFkp
QKWTg*Z;0Eje
_wyx?ywp~
m}@\vH
Zwc;+/`
wB-x D{R
,b<mD9
+8d.Rl8
BJN[%f
J0-E4:6Y
fsa(Qyv
hhTg.BF
)(=>*Z
|pFRM1S
6_?&z4z
%8n[C+
*RQ 58
BOR:j+f
#!JvPK
1b.'a
y6s#0Z|
>!5DYf
fsct`1.?
J+sSb?jL
;dr:o
:jvR1p
8II76~In!E_
nT"o6I
J\]OZp#.lM
^jyfq{hce
:.}%Yyl
!rv*}_
|:s,ub@
o\2/+>
?5>678
5f1r"K
IS2BS1n
fU!fRZ
]yDyiS$
mGwJ`rQG
_1\*fme
m6{Xt>
Fuu1%~
jbZJ8+L
12\:qFY
7`>_rV
m6Iq?a
V`:bAZ
<DB\hw}
SK~h)1
SGb e?I
8led4H9
CRHWL>ES
M4Pu3vCW
vulpc1A
YLje86Q
TEB=Va
kDOz*=
fM|,%u
CVa_wP"
8b(pit
$@.Ah{
.ShJ"\
U$mwlC8
B,#sf{sI
1)"\j
K+]$pQ
u{BC1
s1on^q
J%z|Wq.Sa
H:3>v_1^
ost|k$
.6 3/h
)byO4ljB)
i{SukQ
wD^'+Mv
>-=?.D
7,OS5Qqd
yf%'ry
}u0lY|
eoF9aT
d#,vU4
`8a4Yee
]]5VF5
af`7m~
0QyGh'b
w2YPF4
S@|QY#
D,C_)2
li}Fq9;
CY76'd
t^xw1rQ
g0k6@9
]bG0@ u
c*m_Q'j
ry&C7bMqtq
R.*+]'
'jDdF1
Vx0Y.uh
?^vCNL
]>!v!d
uadxw]~
HVjiR2
X?H^zS2
QE-h ?
3f&FjF
3jo~w$
W$)OV\S>
i!J}/U
1ZJ^*d
e7q1s~r'
!hkcFh
\$HUP'
iZ{|4xI
ax7sAm
<gr)PNf
+*[~zw
=}H)'[
uv<KO|
2\C#Vj8>
Z|Yj\4
(81%XB
*hn5"E
f;LF+&
}/i8s(
egMd
=x YAN
+5';(d{0(X
Tl$(Xl
.W7l@zI
|g8c1Qb
mGCM'
kKpa4_
ko4'UP
;b3pSZ
yD+x8f
59nl+xt
z,G.)Z=
.RTZ$*s
mup-k6
e)P*ha3
ol`9\=
1dDW4E
4q|vm3T
sXir]]
-<<[*[
R&:Th\0
fWt1\}@
6}AyY'Bs}
rGmzn5
`1*aa}
I*~[q4
Nyu*9
:F2U{DN}?
2:|[pK
w9Gq]~p
u!GZ_d
% .hS7
^N+,~yZe
1jCH{
7Pcx;"
KY84M%_HB
R}htqU
Q9"Sb5
IJ>C(06
05p?ZQ
Xbw%Cw
mX;K9b
rO4boN*
%]j`I+M
M'8V1k
5}NaYz
Tqtee(Y
+f4[<>
1dF+)*
Gm|66SlY
'kbNu
Ue!2\|
gvwYh;"
.pgj`0B/
,Dae]c+
n8Y_Gc
Axu4Mf7#F
*N"\u=
|UHGwR
D:y:ZEk%
A}]Jw\u+c
[P<)w5;
+Yp~!TM
xtg]%m
4UGh!<
$'X&C`D&
VD'/8 e
y)0NVZ"
T4yIVxH
b9CQR@
-FaKCz>{
Wo~W0v7
Fh8T0]
-Qp($Tu|
6kBSJB
v4.0.30319
#Strings
ConsoleApp14
ConsoleApp14.exe
mscorlib
System.Windows.Forms
System
System.Drawing
Pvacpvkxeieola
Gmdbrtb.f.resources
Gmdbrtb.g.resources
Gmdbrtb.h.resources
Gmdbrtb.Properties.Resources.resources
Gmdbrtb.Pvacpvkxeieola.dll
ClassLibrary
Action`1
AppDomain
Boolean
GeneratedCodeAttribute
System.CodeDom.Compiler
List`1
System.Collections.Generic
Container
System.ComponentModel
IContainer
ApplicationSettingsBase
System.Configuration
SettingsBase
Console
DebuggerNonUserCodeAttribute
System.Diagnostics
Bitmap
EventArgs
EventHandler
CultureInfo
System.Globalization
IDisposable
Stream
System.IO
IntPtr
Object
Assembly
System.Reflection
AssemblyCompanyAttribute
AssemblyConfigurationAttribute
AssemblyCopyrightAttribute
AssemblyDescriptionAttribute
AssemblyFileVersionAttribute
AssemblyProductAttribute
AssemblyTitleAttribute
AssemblyTrademarkAttribute
Binder
BindingFlags
ResolveEventArgs
ResolveEventHandler
ResourceManager
System.Resources
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
CompilerGeneratedAttribute
RuntimeCompatibilityAttribute
SuppressIldasmAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
RuntimeTypeHandle
STAThreadAttribute
Single
String
Encoding
System.Text
Thread
System.Threading
ValueType
Application
AutoScaleMode
ComboBox
ContainerControl
ContextMenuStrip
Control
ControlCollection
LinkLabel
ListControl
ListView
<Module>
Settings
Gmdbrtb.Properties
Gmdbrtb
.cctor
Dispose
5dqx9f6jqjkce6msasu4ej76cblexqwqUP5a
Synchronized
WriteLine
get_UTF8
GetBytes
SuspendLayout
set_FormattingEnabled
set_Location
set_Name
set_Size
set_TabIndex
set_AutoScaleDimensions
set_AutoScaleMode
set_ClientSize
get_Controls
set_Text
add_Load
ResumeLayout
get_CurrentDomain
add_AssemblyResolve
get_Name
Contains
GetExecutingAssembly
GetManifestResourceStream
get_Length
GetType
InvokeMember
set_AutoSize
set_TabStop
PerformLayout
set_HideSelection
set_UseCompatibleStateImageBehavior
EnableVisualStyles
SetCompatibleTextRenderingDefault
GetTypeFromHandle
get_Assembly
GetObject
ForEach
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
11.0.0.0
3System.Resources.Tools.StronglyTypedResourceBuilder
16.0.0.0
WinDirStat 1.1.2
WrapNonExceptionThrows
WDS Team
WinDirStat
2003-2007 WDS Team
$62adcd3d-43e5-4a33-8634-a47ff7e83b6f
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
1.1.2.79
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="utf-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="1.0.0.0" name="MyApplication.app" /><trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"><security><requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"><requestedExecutionLevel level="asInvoker" uiAccess="false" /></requestedPrivileges></security></trustInfo></assembly>PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGX
monkaGun
bbcdefghijklmnopqrs
Nhwpcdkcpfsxfvtdt
comboBox1
comboBox2
comboBox3
comboBox4
comboBox5
comboBox6
contextMenuStrip1
contextMenuStrip2
contextMenuStrip3
contextMenuStrip4
contextMenuStrip5
contextMenuStrip6
contextMenuStrip7
contextMenuStrip8
contextMenuStrip9
contextMenuStrip10
Pvacpvkxeieola
Gmdbrtb.Pvacpvkxeieola.dll
label1
label2
label3
label4
label5
label6
label7
label8
label9
linkLabel1
linkLabel2
linkLabel3
linkLabel4
linkLabel5
listView1
listView2
listView3
listView4
listView5
listView6
listView7
listView8
listView9
listView10
Gmdbrtb.Properties.Resources
monkaGun
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
WinDirStat 1.1.2
CompanyName
WDS Team
FileDescription
WinDirStat 1.1.2
FileVersion
1.1.2.79
InternalName
ConsoleApp14.exe
LegalCopyright
2003-2007 WDS Team
LegalTrademarks
OriginalFilename
ConsoleApp14.exe
ProductName
WinDirStat
ProductVersion
1.1.2.79
Assembly Version
1.1.2.79
No antivirus signatures available.
No IRMA results available.