Static | ZeroBOX

PE Compile Time

2077-10-25 04:23:37

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000699f0 0x00069a00 7.99854043255
.rsrc 0x0006c000 0x00002e68 0x00003000 6.13366324633

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0006c100 0x00002868 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT, blocks size 0, block length 10240, next free block index 40, next free block 0, next used block 0
RT_GROUP_ICON 0x0006e978 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0006e99c 0x000002cc LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x0006ec78 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

!This program cannot be run in DOS mode.
`.rsrc
v4.0.30319
#Strings
WindowsFormsApp1
<Module>
System.IO
mscorlib
Thread
Synchronized
GetMethod
defaultInstance
CompressionMode
DynamicInvoke
IDisposable
RuntimeTypeHandle
GetTypeFromHandle
GetType
get_Culture
set_Culture
resourceCulture
ApplicationSettingsBase
Dispose
CreateDelegate
EditorBrowsableState
STAThreadAttribute
CompilerGeneratedAttribute
GuidAttribute
GeneratedCodeAttribute
DebuggerNonUserCodeAttribute
DebuggableAttribute
EditorBrowsableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
AssemblyFileVersionAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
WD10.exe
System.Threading
System.Runtime.Versioning
System.ComponentModel
BufferedStream
GZipStream
MemoryStream
Program
System
resourceMan
System.IO.Compression
System.Configuration
System.Globalization
Action
System.Reflection
CopyTo
MethodInfo
CultureInfo
get_Jnqnxsxdp
Decoder
get_ResourceManager
System.CodeDom.Compiler
.cctor
System.Diagnostics
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
WindowsFormsApp1.Properties.Resources.resources
DebuggingModes
WindowsFormsApp1.Properties
Settings
GetObject
Aspnet
get_Default
ToArray
get_Assembly
assembly
WrapNonExceptionThrows
$3b42716b-845e-478c-8b7b-6f04fa063e1d
1.0.0.0
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
3System.Resources.Tools.StronglyTypedResourceBuilder
16.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
11.0.0.0
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
gwgggggggggO
YhVWzl>+
%ON!=9A
',p09T
w(e*tcv
k}SLDT
+i8eWP
t7$O%)
IJOQM|0
a99 Nx4
P:&Oi2
b>-[a(
Zr:OKu
xE\\RT
gK|PS1
6@R& $)
=/{@S~
e73{3,
S5m{c&y&
)Q;oWZ
w:O+s8
OpF6(=
lJ<VIy3
V"e?A"r
"d5=VN#
%*F?wW
Ft OI}k<
qiR3#"
:VDWcg
E@xc"xe;
Y`#{\R
<}#Ng5<
:^?D#,b
:ebHDt
r54d1r
~;gIb=
([hf%f
^hFfOl>*
f#3g4I?bvR
;%U~@_
<BiwR}
gL+xQS
AdYW)<Vqd
*{\$d*
|$8H(W
S)br:@
*KKLrRp
}EIR(U
csz ]u
8ruqFn
N,V2-m
Te %c'E5]((
bv=UD\1MUIEU
j1Zpea
Sprt/fW
4s"q2tm
8{S%{K
1T"RUU;
_j<U/0
pB/2#F
m'5ivj
e5m@6
kFLbp`R
$VA&m3
vR(?Kv
9;<XThY
?dnw,/
hdzu.3
q1h:xD
2h*mO
HFjN8J
w#9M=j
{Z5T-t
I6k9-6
xu6R4Jj
O"N8eM
)l~m4o
!=3!P4
2yFh~xW
dLdyp~
-|PJA;
w14sf],
B^1e1c
BBH.Id0
PUU-ZJKUU
;$?Rw0
W'Nh`<L[
!*Dq\j
YRy.et
>E-N1AA
< E],@
KWYT_.
['U@O@
h 9KGgx
(,.Ql
F#|LCK
dG}E(PNgs)'
3p}a:i
g-8E[;
Ic5!]h[v
{H%4W$
?XV|<f
i_pu)/
_@>}>]
tu|'!+Y
uSf0V.
n {,jSh
v(VB6B
'tFYB(
y&#z1l0k
1-~hMK
D?#T>U
h11 >
j|Z(`&
=[$PxSL[+PBS/
^c9I]|
Jb<G{z
8snD+
RWnlO'
X`VH]c
d]w`&I]
8UJE)'
P$|pR
\I<`5gg
KWU5#Z
l):DJr@'9~5
G3BvP4
*omFwv
;Zd7N
y9_w6;s
gY(JH&
HBu\4R<
Dk u#w
YBa7pi
Ds|(\~
LYE69d
,wHgjc-6
@we)cl+9#0n
6LF{GZ
m_[/yy2
c"\-tl
@IouwQ
R)[*_)
(Q,0Ha(
e!kdTV2k"+
`6<Vo3
h=LWVy
a0=30@aU
yUSL"gf
TE4K S
dDA CK
V NbH`
Cr!1:@
#La$;R
QreShXH1
y,=h88\
r0dFikH
yh/*8+b_O5
DygOAD
gzJZox
B#g1A`_RI
p#HZ:P
@/X~iXE
"qW;4
-"P^ v
tN!fMP
YMS[Im2
p~b>Ar
fW#6sR
-hjsGG
dGGg3T
36<zhdBJ|
9*^ZSWO
'1#4d
c=mgu])
?eDP*Pt
/bD%>isU
SG""o&u
6oIx'i
'I9I2^
S)ewW|
EuE<MI
/&\UbI
"-806z
EnYojX
<:CO$N
qHG{]Y
5\EH;'
*]ZmEg
05a)oBI
%@HyZ{/
31YtvY
NkcA1m
&%YZiG
zlE1%-V
DD,!*)
%*d)2V$
U"DL=l
hrj87}
xRpHk]
J{[1.*z
(-{d2?
HadM!}
k*#$5S
"2e[?5@
||w^{G
zfgDAOX
"w }(<
H>gRJn
2YYhyk
<`-9l?!
?=PHr2U
fNO5AE
RB,%zGa
;uZ[0"
h~&FJb
-9Q1)S+p
=$sHqT{h
< IK/S"
GN?`+.
:KP__D
EV^4fE
=BYKGAJ]I
E!;;3\
hr7+.&
x@F)g|
\F?Pt"B
*vY|[6
%._i0
Ba#_.T+J7
S@ng+&
Scx1UO
<jc~;v
Pt!$&@
X$@6N.
LHb?:u
+T;vMs
[R8[AZdf
zv5E_F
r{ly 2V
FA#/Qd
ATLK&Z(
@A:-fa
Z/.n25
niQ5Q'`
[mS#%L
r?n{P
#@'Iu|
XYRWTu ;
iC^'JS
+!cw}L B
ZY7=m!)a
iuC:fB
/]jW@o
D.w^L0uEj
1SvVNS;
Q>~C^O
)@Ezs)%
#mU*"U
\e";`
0J_LH4h
`t(t(y
K; w$
mPGK23
S(L;Q<
,E}&#i
f%&Z$e
d&Oo^T
eM;%dkM
p?N]_|rPV
29\:ku
a>%jao
J{AYW|
^D}+OXU
Se'2r-
kvdtqZbe
y\EZtn
_}iT*-Fw
8V37'a
%a'9)dm"['
:iW9{
prO{_,
-bQs,P64
MKZ)Vd
M(A~s1
)^h`L)y
[PEo?K
bRJ5a^
lg:_P{
SDd)Jn
zQw$uQ
~#9ebps)J
J?S!\O
Sqyt@k
bhf!hHW
yx Ac|
cDA!Ic
Hz8Rcw_z
~[oRidHy^
eBjzc+
#K:SV"
Qjg(>
e&`^r3
fy(3vb
Htmm,&
IVCq6`$
W5S^jZ
mpe@eFv
M|6ML0F)7X $
:r9U W
{O_VHi
A%E3QJd
|h(Y$kw
Rm4f'9z5
5W~j;}
?qs]ja
iN<UKr
=D6uh|
K<+kk8}
J+ 7!d
KAF'==
u|eO\]
bVDA.0
RH,[a=
I$Q'#4
\JP@]
Y9CNn+
#LPThx
v\+h4j
&'UX.2
Nj-{>]
OSNr\!<
zb0:g0
6UHPlr
?a)AG$
xrubZw
J9-7:KpE
NZl?w=
-<DFqgf
yO7MZ'
N;y^s@F
Bu/odg~W
0OD`]q
, 'E5zR
e535XD
vq6? 95
#G^j1"
=m`F**
G|nHYF
T'x|Hv
\5WXR
j^AH,*J>
*jhqF
4X"`Yx
v.]A^X
&sy&J1
g @x^~;
Ez2m\6
je|?eJ
0sHN?Abs
1[?u'Tx
P|5#sEK}
#!4A{i
4W7]=A
n]P45`]
>QRU%H
nzM'4/
OD]/lK=
EY'CqM8
V57qzF
40[-.rr
MbIj?-
^%)r\7W2
rr*8<e
4SbRbO
-o4NHgs
W,("yQm
hvaKK
J1]^f1
XE%gUY
Wd/N,u
]Itpj
}OYb^L
VJN!Aq
o(kBGu
x_R6l8
C;(=<UEZ
kR&[QtqL
csO]|C8
Z9)<-U
eKN=[U
F^5g>%
4h,r0d
(Fv }
EA]3kH
>{wam
;z{0y4
A:i5oq-
VFURG3
D)7tW0
<-*v7d
:O6"5.T"
@Kw=V[
_h$/v|}Q
@/@\x
n$YRbw
HfzTF8
s>5C:>
pYJy-T
93$UV^
,zR%IQX$b
6>fZp9'
Q7e+;F
|&5*"=
]?R3&C/
o'="XD
An*N-
9(_!s=`}
PJ_]'Gq
sw\pF
J!xyN'm
4\GQ&1iT
C+LM]<-J
Xv;]ce
`JX9GW
o<4Em2
T(}h+cG
{o=O^?
A,Lt7-5
Lyv Pg
.Rd!,A
ctvI61
j<`LA*
4ZBJHMQ^
qLG5UC
b.frdY
9:'dHz
GF!Y&t8
RMqjb5*
4IbzoH
=PjBXZX
829<Rn
.9rc}HH
!G?EU/.
EQ c,T
RFw4&N
&[04x*
]q2a~K
u{=}#i
Qlr^ml
DG"^hhdny
+I%][2c.
i<WYe)
Z)RJ_d
FAURwb1
G5.~(am
=\~AG'
N?I%:/
D^49YQT
whZ2Ofp
3xPJ^1
61`F$H
@KI<^B
U9<5BY
PXF<_L:
W<{da^R
_B0m}/
c9$nJ=
LUF{w\
^GL%:Q?
OOc0U
;vte'>.G
{G$JT-F
4=Q1tK
l(s'6F6
lX5E&F
h]ie+V8
ql|Ev,
8'ZmH\
0d)=V<O<
3/!w1fSX
&uJ(Vt
`9J )?
w"F|DhgY!
/md=/Y
x0'k)H
,Pz(0sC
^%]S|%
.uKej-
pu'Z|`
M&L4G]
. r .J
f0IsX@
b4FJXU/$JdW}
z5eB$
()S_Nxj{
G+/Jt gi
HKz-^1
{(9dgs
=]E&Ej
Z`V:nO
)v`r+@
{2SSqF
xs?Rfe
16>L=Mg
'E/,zX.
7f6s'~
#!zK>~
"2j*q<?
RnaAx5
V-/6#GC
s4|p};
?}k,tK
1U),Z`h
e^AQs`
IvQlt_
[jM#Ji
nEHi4MCS
AlT6a_
cRk@Zw?
RXG|%d
L6K4TG$
!xbbCP
F!cV.{
o\*XvN
>+t\)=
`*LP}n
YA%]s=
o+nH>s
~?<PPN
Y(iBV.R7
?b7/EG
c|&$H>
[O=q9A
1c8+ip
#KBbF?q
2}ie)v
yn`5|n[
YSuEsx
'f%Ar0
5_=1'l
`Dvghd,
hp4oW[Z
AW(XcQ''
[j/29z
aIH\gA
1::!SM
*=dp0Sj
5TBbO.(ZT(
G*z~*`
7c|uSV
J=Q8If
p20GA1
jcK|pP
.L/bK`
Gu.0+Z
O/]uHZ!~i
Q<=E#L
H c.8V
X;#T}x)4
*P>9P/
BRVI98y3
#L'9nM
,K;h"V
"wRF?]
,1M+dH
F0Jd+rpGk
,<p;F81O&0
q,KzwX
~^i-y"
&__+#f
T?cV=fz
@ldC(a
$WHI!~
EL&h8Kb
cwRrY^
V]/r!,
gO!I{Wj2
Z{WSx`'
z\)(/,J
cl$g35%{:
(7tvaKx
yD\P O
4h:UX0
1]F(7i
D{E1C'
'1uSpIz
at7!>Y
2k"iQ'
=3<&UbO
Z)=L-J^
T.n5%W
>9bUXPW-"
/V$cc_
WEo5/v
>fbJa:r
T'J(O<k
^r>J1g
_UC!{r
|/4RIQ
:+ZBgb#G
^Kj@2M
!me1`cr
)N|9rG+
N8^8F5h,
=l:\6+
[=t[r6
u@8v7^B4G
m0oS;-X
X^3`$Vm
Ez.iP+hc
>FQo`b
MAPemJ
;9]rU
a~8TPu
3$<ne~0
b820&l
vzimS5
P J#B4
^Fy|;Iq
+eyx~Ml
JU"#:a
^&Gq?Z
XMS3lu2
tYKb7
ZC}xi}
2m-HjxB
MGg:I\
N2|iY
#KK#&J
*(w3<
l_b{'w
!W(|Z
$PS)6aj
!_T-&J2w:
-V[lt.?
KnU`PHn%\
!BkG]V
)2e#E
+X4NNP
=R P+P@
]!0H,A
n/L_VIB
o>(zmJv
aU8Nu
05YMIni
s;}%^$|
A8A6[cyq
]:iPB2
9<T7'C
DY8ZWO/
0BTLAzi
:["q.M
H'`^*+
:|aK[M
ET?>>:
gG9gJ'
xOh6H|p@
$\6pd$
G.QCK=
>bsmd/
[;IEI6
>9Z2/}"]-
QIX::_~
]rgC4[
}/6Zi)z
pP{zdtv
G/2B-7p^
S&fMkQ^
'iz1{_@
@t f%h
Y,fpi,
^<W/wZ@
LLMD8!
Q0q\}&
&_^>J9
)CELA2|
YjF. V
,Jd7/$
^3`N1n
Uu|LHFg
^g/t(0(L
hdK9;
A%JW:
Mljcm[
o3%ju]
Y(Ic4a
$T%>c6
5d+lp{
<6znzVJ
NmNIIw
ukl~AQuiT
l~3pazc
ER<B@g
Bk?#`J}
GSs[2Y|
VqF^E`
E~xxwv
6uV]x(
<Q3|U]
g=Sxg7
Tfwx('c
wgtw4xC
7(nm?9hv
g'shH|
6ax`yXR
1l6gUNX
}6}mh|
8gjh2s
S#ScW|hw
~w4XvD
t7x7DX89
{5Wwwvu
WhwVgW
}X8W;w
seZsIvx(
7r|l&Ug
m1:merv
PNx3x55
x7va@m~
UMxUX<
ww}w7hulw
7QwZxxw:gH
lMX[cx
&jw'W[
[gN=c.
8}j5;UH{
swx3ywiz~
7xuXxw
wgu;u<5ws3v
ww>\luj
mvQUa#
ui^Xx2=
~vbuwi
8{tvqvSwvMc
7`zwl<:
'xu\7U:
}hx<~us~w~x5
xsgW#g
vx3X|Cg7
fwcfxW
u"W;We
v7Xu37
c\}6[U
hsv:hH
gxW:G&xm5
PVwuG6
XhThU'q
|%q6rZ
%8hBtwxxW
fe:u8H7
cXcg(6|
HVq=Vi81
;uGvcsgh!w
r[te~8
X8uHuV
{WzdmX=z
6Z7XVvG
vywHq6U
4(;\zh
wx7ggS
H3h5skGtfSX|
>wD5vz
V<XxW}7
(x~X%xSz
RVHxx8<U8
X8>3gZ
c{1;X0
Vs:fhU
>~we78
xSyXWyhyxbw7X86
w$chwg
vuhvyzh1xf
EBwg5zh
3Wx0Wx
[s66Hv
}j'Guu
Y(X3f6c
wI8t]s
;W6s{G*=
ms7Z<v
9vl57~q
7{QSW%
+8uwgv#WSlhc
u^wScPTX\
t+Zgwfw
xhFt(v
xg;7xv
sSiWhmQ1
~Ynf[A
;X8Hvwc
X(`CXZ
wR8fxt
Yg7g{%yx
uplcyw
w9xuU|
9AwVuf
=XdhwS&|
7swq#n
wQh>^e
2w'wv8
7V}<v8
7wx<q8
Vk|W!u
7euPyfDel
gx0sKq7
x8(k7beU|hw
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
LGGl6rIHd0IRLVGvCC.Bv13AQQEdLMqQi63ra
dvZEmfwEv
WindowsFormsApp1.Properties.Resources
Jnqnxsxdp
Jnqnxsxdp
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
FileDescription
FileVersion
1.0.0.0
InternalName
WD10.exe
LegalCopyright
LegalTrademarks
OriginalFilename
WD10.exe
ProductName
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
Antivirus Signature
Bkav Clean
Lionic Trojan.MSIL.Zlugin.m!c
Elastic malicious (high confidence)
MicroWorld-eScan Trojan.GenericKD.47139314
FireEye Generic.mg.a5959a6624804559
CAT-QuickHeal Backdoor.MSIL
McAfee Artemis!A5959A662480
Cylance Unsafe
VIPRE Clean
Sangfor Backdoor.MSIL.Zlugin.gen
K7AntiVirus Trojan ( 00581c5a1 )
BitDefender Trojan.GenericKD.47139314
K7GW Trojan ( 00581c5a1 )
Cybereason malicious.48e272
Arcabit Trojan.Generic.D2CF49F2
Baidu Clean
Cyren Clean
ESET-NOD32 a variant of MSIL/Kryptik.ACRC
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky HEUR:Backdoor.MSIL.Zlugin.gen
Alibaba Backdoor:MSIL/Zlugin.4d8e067a
NANO-Antivirus Clean
ViRobot Clean
Rising Clean
Ad-Aware Trojan.GenericKD.47139314
TACHYON Clean
Emsisoft Trojan.GenericKD.47139314 (B)
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Artemis!Trojan
CMC Clean
Sophos Mal/Generic-S
SentinelOne Static AI - Malicious PE
Jiangmin Clean
Webroot Clean
Avira HEUR/AGEN.1144057
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Microsoft Trojan:Win32/AgentTesla!ml
SUPERAntiSpyware Clean
ZoneAlarm Clean
GData Trojan.GenericKD.47139314
Cynet Malicious (score: 100)
AhnLab-V3 Trojan/Win.Generic.C4665762
Acronis Clean
VBA32 Clean
MAX malware (ai score=82)
Malwarebytes Clean
Panda Trj/CI.A
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002C0WJ921
Tencent Msil.Backdoor.Zlugin.Lmuf
Yandex Clean
Ikarus Trojan.MSIL.Crypt
MaxSecure Clean
Fortinet MSIL/Kryptik.ACRC!tr
BitDefenderTheta Clean
AVG Win64:Trojan-gen
Avast Win64:Trojan-gen
CrowdStrike win/malicious_confidence_70% (W)
No IRMA results available.