Static | ZeroBOX

PE Compile Time

2073-11-17 08:09:06

PDB Path

C:\Users\Boss\Desktop\Gang - Kopie\Gang\obj\Release\Gang.pdb

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0000319c 0x00003200 5.71492845504
.rsrc 0x00006000 0x0000059c 0x00000600 4.03427226353
.reloc 0x00008000 0x0000000c 0x00000200 0.0815394123432

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x00006090 0x0000030c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000063ac 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
v4.0.30319
#Strings
<Harvest>d__10
<>9__4_0
<Evaporate>b__4_0
<>9__4_1
<Evaporate>b__4_1
<>u__1
Task`1
AsyncTaskMethodBuilder`1
TaskAwaiter`1
button1
errorProvider1
checkBox1
comboBox1
textBox1
Microsoft.Win32
<oracle>5__2
<ConjureAndExecute>d__9
<Module>
System.IO
set_IV
Enigma
KeyZeta
mscorlib
set_Verb
GetStringAsync
<<Evaporate>b__4_0>d
Thread
add_Load
set_FormattingEnabled
AwaitUnsafeOnCompleted
get_IsCompleted
encrypted
Synchronized
NewGuid
ReadToEnd
VerbCommand
RegistryValueKind
defaultInstance
set_AutoScaleMode
CryptoStreamMode
IDisposable
RuntimeTypeHandle
GetTypeFromHandle
IsInRole
WindowsBuiltInRole
set_WindowStyle
ProcessWindowStyle
set_Name
set_FileName
get_ProcessName
keyName
Combine
IAsyncStateMachine
SetStateMachine
stateMachine
ValueType
get_Culture
set_Culture
resourceCulture
get_CodeBase
ButtonBase
ApplicationSettingsBase
Dispose
Create
Evaporate
EditorBrowsableState
<>1__state
STAThreadAttribute
CompilerGeneratedAttribute
GuidAttribute
GeneratedCodeAttribute
DebuggerNonUserCodeAttribute
DebuggableAttribute
EditorBrowsableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
AsyncStateMachineAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
DebuggerHiddenAttribute
AssemblyFileVersionAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
ParamArrayAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
ConjureAndExecute
set_UseShellExecute
Transmute
SetValue
keyValue
Gang.exe
set_Size
set_AutoSize
set_ClientSize
Materialize
ISupportInitialize
System.Threading
System.Runtime.Versioning
FromBase64String
disposing
System.Drawing
CoreLaunch
PowerShellPath
GetTempPath
GetFolderPath
DataPsi
RoleCheck
PrincipalCheck
get_Task
System.Security.Principal
WindowsPrincipal
interval
System.ComponentModel
set_ContainerControl
ListControl
CryptoStream
MemoryStream
System
SymmetricAlgorithm
spectralForm
ICryptoTransform
resourceMan
origin
Fusion
Application
get_Location
set_Location
System.Configuration
System.Globalization
Action
System.Reflection
ControlCollection
SetException
PauseExecution
Button
procInfo
CultureInfo
ProcessStartInfo
System.Net.Http
set_ShowInTaskbar
StreamReader
TextReader
Loader
ErrorProvider
AsyncVoidMethodBuilder
AsyncTaskMethodBuilder
<>t__builder
SpecialFolder
get_ResourceManager
Linger
EventHandler
System.CodeDom.Compiler
IContainer
TaskAwaiter
GetAwaiter
set_UseVisualStyleBackColor
.cctor
CreateDecryptor
System.Diagnostics
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
Gang.Form1.resources
Gang.Properties.Resources.resources
DebuggingModes
Gang.Properties
particles
EnableVisualStyles
InitiateProcesses
WriteAllBytes
Settings
EventArgs
millis
System.Threading.Tasks
get_Controls
System.Windows.Forms
set_AutoScaleDimensions
PowerShellArgsForExclusions
LaunchProcess
LaunchPowerShellProcess
GetCurrentProcess
segments
set_Arguments
arguments
components
Concat
Format
Object
EndInit
BeginInit
get_Default
SetCompatibleTextRenderingDefault
GetResult
SetResult
HttpClient
Environment
InitializeComponent
GetCurrent
Convert
Harvest
SuspendLayout
ResumeLayout
PerformLayout
MoveNext
set_Text
set_CreateNoWindow
set_TabIndex
CheckBox
ComboBox
TextBox
ShadowPlay
set_Key
System.Security.Cryptography
get_Assembly
GetExecutingAssembly
ModifyRegistry
set_Opacity
WindowsIdentity
WrapNonExceptionThrows
Microsoft
Copyright
2023
$cef65898-47b6-43d2-b441-07f3cd9c27e4
1.0.0.0
.NETFramework,Version=v4.7.2
FrameworkDisplayName
.NET Framework 4.7.2
"Gang.Form1+<ConjureAndExecute>d__9
Gang.Form1+<Harvest>d__10
#Gang.Form1+<>c+<<Evaporate>b__4_0>d
3System.Resources.Tools.StronglyTypedResourceBuilder
17.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
17.6.0.0
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
C:\Users\Boss\Desktop\Gang - Kopie\Gang\obj\Release\Gang.pdb
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.SecurityAndMaintenance
Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
EnableLUA
powershell.exe
-command "Add-MpPreference -ExclusionPath '
'; Add-MpPreference -ExclusionProcess '
'; Add-MpPreference -ExclusionPath '
{0}.exe
textBox1
checkBox1
button1
comboBox1
/XwBl64f1P4
YshBxvQmXyZQrUQNAJK
PEiy30QCB5XQk=
GbOYzg
oxc722zRB
RcbpfuQ==
1A1drQ0P1PXVuPBt3y5g
aqzK7wzVPQitQkSE9JdISzEdef1Bzk
+HzCIRPQEGcBqx
Gang.Properties.Resources
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
FileDescription
Microsoft
FileVersion
1.0.0.0
InternalName
Gang.exe
LegalCopyright
Copyright
2023
LegalTrademarks
OriginalFilename
Gang.exe
ProductName
Microsoft
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
No antivirus signatures available.
No IRMA results available.