Static | ZeroBOX

PE Compile Time

2101-08-27 22:19:00

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0006b2b4 0x0006b400 3.72952710207
.rsrc 0x0006e000 0x000002a4 0x00000400 2.18053226059
.reloc 0x00070000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x0006e058 0x0000024c LANG_NEUTRAL SUBLANG_NEUTRAL data

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
v4.0.30319
#Strings
Thronging
Thronging.exe
<Module>
TaskAnnotationSerializer
Thronging.Serialization
Object
System
mscorlib
Thronging.Common
<>c__DisplayClass2_0
BridgeDispatcherRule
Thronging.Rules
IdentifierDispatcherListener
Thronging.Listeners
<>o__4
ConnectionIdentifierMap
Thronging.Maps
MockDispatcherRule
<>o__5
Reader
Thronging.States
Database
Thronging.Templates
ConfigurationQueueList
Thronging.Lists
AttributeStatusStructBuilder
MulticastDelegate
InfoDispatcherRule
FacadeServerStatus
ValServerStatus
Authentication
DispatcherDispatcherListener
DecoratorStatusStructBuilder
ServerDispatcherListener
WrapperIdentifierMap
Prototype
TokenizerTemplate
Iterator
StatusDispatcherListener
ValueType
PoolDispatcherRule
AnnotationDispatcherListener
Publisher
ProducerTemplate
MapperAnnotationSerializer
ProxyAnnotationSerializer
InterpreterQueueList
<PrivateImplementationDetails>
__StaticArrayInitTypeSize=423176
TestParam
String
EntryPointNotFoundException
SetupParam
ConcatParam
PrepareParam
reference
Func`1
Boolean
IntPtr
Invoke
InvalidOleVariantTypeException
System.Runtime.InteropServices
m_Worker
UpdateParam
UInt64
UInt32
UInt16
op_Explicit
Marshal
SizeOf
Application
System.Windows.Forms
get_ExecutablePath
op_Inequality
Thread
System.Threading
ToInt64
GetTypeFromHandle
RuntimeTypeHandle
AllocHGlobal
FreeHGlobal
identifier
m_Status
.cctor
ForgotParam
column_cont
m_Annotation
Replace
FindParam
PopParam
Binder
Microsoft.CSharp.RuntimeBinder
Microsoft.CSharp
Convert
CallSiteBinder
System.Runtime.CompilerServices
System.Core
CSharpBinderFlags
CallSite`1
Func`3
CallSite
Create
Target
ToCharArray
InsertParam
config
FromBase64String
Encoding
System.Text
get_UTF8
GetString
VerifyParam
m_Record
dispatcher
MapParam
StringBuilder
ToChar
Append
ToString
CompareParam
CollectParam
RuntimeHelpers
InitializeArray
RuntimeFieldHandle
Exception
DestroyParam
Action
GetParam
ListParam
_Queue
SelectParam
CancelParam
CSharpArgumentInfo
CSharpArgumentInfoFlags
InvokeMember
IEnumerable`1
System.Collections.Generic
Func`4
reldnaHtnevEdegnahCssergorPdaolpUteNmetsyS955
Func`5
_Exception
_Candidate
attribute
m_Decorator
m_Utils
WriteParam
instance
LoadLibrary
kernel32.dll
CalcParam
FreeLibrary
CallParam
GetProcAddress
kernel32
_Listener
ExcludeParam
InvokeParam
GetDelegateForFunctionPointer
Delegate
RestartParam
_Message
hProcess
isWow64
BeginInvoke
IAsyncResult
AsyncCallback
callback
object
EndInvoke
result
lpBaseAddress
ledoMnoigeRedoCmoDedoCmetsyS71705
lpNumberOfBytesWritten
caller
exitCode
visitor
handle
hToken
lpApplicationName
lpCommandLine
lpProcessAttributes
lpThreadAttributes
bInheritHandles
dwCreationFlags
lpEnvironment
lpCurrentDirectory
lpStartupInfo
lpProcesecarTscitsongaiDmetsyS51639
hNewToken
hThread
pContext
ProcessHandle
BaseAddress
ZeroBits
RegionSize
AllocationType
Protect
selection
nCmdShow
_Specification
_Adapter
m_Creator
m_Strategy
m_Test
m_Base
_Indexer
_Template
_Singleton
_Visitor
m_Merchant
policy
m_List
m_Exporter
m_Algo
m_Parameter
m_Observer
m_Mapper
_Serializer
_Order
_Manager
_Thread
_Configuration
interpreter
_Proccesor
_Getter
m_Container
_Printer
_Instance
_Registry
m_Expression
_Importer
m_Callback
_Rules
m_Definition
m_System
InstantiateParam
AddParam
7D2D07C3DE990C0B45244F673D03D0D0807BD90D
CompilationRelaxationsAttribute
RuntimeCompatibilityAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
TargetFrameworkAttribute
System.Runtime.Versioning
UnverifiableCodeAttribute
System.Security
ParamArrayAttribute
DynamicAttribute
ReliabilityContractAttribute
System.Runtime.ConstrainedExecution
Consistency
CompilerGeneratedAttribute
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
WrapNonExceptionThrows
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
_CorExeMain
mscoree.dll
CCSporetnI44668ncwLDIpHSslGQIPMQIeJg==
CCSporetnI44668Ss0PjIDPC0yJDMJ
OCSporetnI44668nYsOQkcGTQ9KwEMMncwLzN0Jy0MJB0DCSggJgYzdmU=
PCSporetnI44668QIwLDITJy0xOxkWPg0sIwl2HSILFHZH
OCSporetnI44668nceIzN2HRExNH4RCQIzaA==
OCSporetnI44668B0oDTJ3KGomJQkDCXcoOTN3BmU=
PCSporetnI44668ys0AzIpejALJREKMR0CBQooBTQxUBkKCXdSaA==
PCSporetnI44668ys0FzIDMy4xUQ1KMRM8JTMqGWkxNDM0MRJXIzMqIGU=
PCSporetnI44668XYsJTQDHQkLDnIQMR0oLwQTHSwKUAFP
PCSporetnI44668XdfZh4uGRAyOxkvCg0sOQkTGRwKUX5KMR0OZQ==
OCSporetnI44668XcwZQYDIyEyNA0ROndfIDQDHWwMInZH
PCSporetnI44668XdfZh4uGQwyOxkvCg0sOQkTGRwKUX5KMR0OZQ==
PCSporetnI44668ncwZQYDIyEyNA0ROndfIDQDHWwMInZH
PCSporetnI44668igwLzQTejQ+JCMDMRIgPg==
CSporetnI44668
OCSporetnI44668XcwZQF2ci0LUXIJMRMCJTIpGS4MFHZH
DCSporetnI44668x0oOTMuBiEkDhkJCQRbaA==
PCSporetnI44668ncOIzR1LygKDhkMDzJbaA==
reldnaHtnevEdegnahCssergorPdaolpUteNmetsyS955
Replace
FromBase64String
GetString
kEfUPDKXhcKz
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
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
FileDescription
FileVersion
0.0.0.0
InternalName
Thronging.exe
LegalCopyright
OriginalFilename
Thronging.exe
ProductVersion
0.0.0.0
Assembly Version
0.0.0.0
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic malicious (high confidence)
MicroWorld-eScan Clean
FireEye Generic.mg.2c18994aa3fa5b1b
CAT-QuickHeal Clean
ALYac Clean
Malwarebytes Malware.AI.3409103260
VIPRE Clean
Sangfor Suspicious.Win32.Save.a
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
Cybereason malicious.214aec
Arcabit Clean
BitDefenderTheta Gen:NN.ZemsilF.34170.Am0@aCsf56d
Cyren W32/MSIL_Troj.CY.gen!Eldorado
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of MSIL/Kryptik.ACCF
Baidu Clean
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky HEUR:Trojan-PSW.MSIL.Agent.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Tencent Clean
Ad-Aware Clean
TACHYON Clean
Sophos ML/PE-A
Comodo Clean
F-Secure Clean
DrWeb Trojan.PackedNET.972
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Generic.gz
CMC Clean
Emsisoft Trojan.Crypt (A)
Ikarus Trojan-Spy.MSIL.Agent
Jiangmin Clean
MaxSecure Clean
Avira HEUR/AGEN.1144480
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Microsoft Trojan:MSIL/AgentTesla.JPX!MTB
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan-PSW.MSIL.Agent.gen
GData Clean
Cynet Malicious (score: 100)
AhnLab-V3 Trojan/Win.Generic.C4628732
Acronis Clean
McAfee GenericRXPZ-YL!2C18994AA3FA
MAX Clean
VBA32 Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Clean
Yandex Clean
SentinelOne Static AI - Malicious PE
eGambit Unsafe.AI_Score_100%
Fortinet MSIL/Kryptik.ACCF!tr
Webroot Clean
AVG Win32:MalwareX-gen [Trj]
Avast Win32:MalwareX-gen [Trj]
CrowdStrike win/malicious_confidence_80% (D)
No IRMA results available.