Static | ZeroBOX

PE Compile Time

2055-01-09 10:46:29

PDB Path

C:\Users\Administrator\Desktop\2023CryptsDone\CBIR\obj\Debug\Erlnb.pdb

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00005014 0x00005200 5.57554448331
.rsrc 0x00008000 0x00001164 0x00001200 6.35504451618
.reloc 0x0000a000 0x0000000c 0x00000200 0.0815394123432

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00008100 0x00000b33 LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_GROUP_ICON 0x00008c44 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x00008c68 0x000002fc LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x00008f74 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
i=s>
%<<sA
%<xsA
%<<sA
v4.0.30319
#Strings
<>c__DisplayClass10_0
<>9__1_0
<FindSimilarImages>b__1_0
<>9__3_0
<.ctor>b__3_0
<>c__DisplayClass7_0
<>c__DisplayClass9_0
<FilterSniffFile>b__0
<GeneratePictureBoxRowForImages>b__0
<>9__1_1
<FindSimilarImages>b__1_1
<>c__DisplayClass7_1
<FilterSniffFile>b__1
IEnumerable`1
IOrderedEnumerable`1
Action`1
List`1
button1
CS$<>8__locals1
ConvertFromUtf32
<>9__1_2
<FindSimilarImages>b__1_2
<>c__DisplayClass7_2
Func`2
CS$<>8__locals2
onlyCreateObject2
<Module>
optionNPC
unitGUID
System.IO
value__
System.Data
DownloadData
GetSpawnData
mscorlib
System.Collections.Generic
textId
menuId
Thread
add_Load
MainForm_Load
Synchronized
casterGuid
CreateInstance
defaultInstance
set_AutoScaleMode
set_SizeMode
PictureBoxSizeMode
WeightedImage
OpenImage
language
DataTable
Enumerable
IDisposable
RuntimeTypeHandle
GetTypeFromHandle
FilterSniffFile
FontStyle
set_Name
fileName
senderName
targetName
filename
ValueType
SecurityProtocolType
casterType
objectType
targetType
System.Core
get_Culture
set_Culture
resourceCulture
ButtonBase
ApplicationSettingsBase
Dispose
EditorBrowsableState
STAThreadAttribute
CompilerGeneratedAttribute
GuidAttribute
GeneratedCodeAttribute
DebuggerNonUserCodeAttribute
DebuggableAttribute
EditorBrowsableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
AssemblyFileVersionAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
set_Value
Erlnb.exe
set_Size
set_AutoSize
set_ClientSize
ISupportInitialize
System.Threading
OrderByDescending
System.Runtime.Versioning
PacketFiltering
ToString
GetSimilarityAsPercentString
Substring
disposing
System.Drawing
CommonDialog
FolderBrowserDialog
ShowDialog
ForEach
get_SelectedPath
add_Click
btnSearch_Click
changeFolderButton_Click
speedWalk
pathLabel
similarityLabel
System.ComponentModel
resultsPanel
FlowLayoutPanel
guidFull
set_SecurityProtocol
ContainerControl
Program
get_Item
set_Item
System
confirm
MainForm
resourceMan
set_TextAlign
AppDomain
GetDomain
DataColumn
Application
set_Location
System.Configuration
System.Globalization
System.Reflection
ControlCollection
DataColumnCollection
DataRowCollection
set_FlowDirection
clientOption
set_Description
changeFolderButton
speedRun
CultureInfo
set_TabStop
System.Linq
similarityProgressBar
OpenImagesFromFolder
sender
get_ResourceManager
ServicePointManager
EventHandler
System.CodeDom.Compiler
IContainer
container
Parser
set_Anchor
set_UseVisualStyleBackColor
GetEnumerator
.cctor
System.Diagnostics
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
Erlnb.MainForm.resources
Erlnb.Properties.Resources.resources
DebuggingModes
FindSimilarImages
GeneratePictureBoxRowForImages
images
Erlnb.Properties
GetFiles
EnableVisualStyles
AnchorStyles
fileNames
ReadAllLines
optionFlags
unitFlags
Settings
EventArgs
numberOfDecimals
GetDataTableForSpells
get_Controls
System.Windows.Forms
Contains
get_Columns
set_AutoScaleDimensions
GetDataTableForSpawns
filteredPackets
components
GetDataTableForTexts
get_Rows
Concat
Object
Select
System.Net
SpeedPacket
SpellPacket
GossipMenuOptionPacket
SpawnPacket
GossipPacket
TextPacket
SimilarityLimit
EndInit
BeginInit
GraphicsUnit
get_Default
SetCompatibleTextRenderingDefault
DialogResult
GetSimilarityAsPercent
WebClient
ContentAlignment
InitializeComponent
get_Current
set_Font
get_Count
TrimStart
ToList
filterList
blacklist
optionCost
SuspendLayout
ResumeLayout
PerformLayout
MoveNext
set_Text
optionText
guidLow
DataRow
NewRow
set_TabIndex
mostSimilarImagePictureBox
queryImagePictureBox
ToArray
get_Assembly
Directory
senderEntry
casterEntry
targetEntry
op_Equality
op_Inequality
Trinity
Similarity
WrapNonExceptionThrows
Copyright
2024
$5b04930c-e4ac-409c-96ec-26ea931d49b1
1.0.0.0
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4A
3System.Resources.Tools.StronglyTypedResourceBuilder
15.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
15.9.0.0
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
C:\Users\Administrator\Desktop\2023CryptsDone\CBIR\obj\Debug\Erlnb.pdb
_CorExeMain
mscoree.dll
JBXbbPQ
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
http://voucher-01-static.com/rkei/1085.txt
Path:
Choose images folder you want to perform search on:
button1
Search
queryImagePictureBox
mostSimilarImagePictureBox
resultsPanel
pathLabel
changeFolderButton
Change folder
similarityProgressBar
Microsoft Sans Serif
similarityLabel
MainForm
Content-based Image Retrieval
# This sniff file was filtered using Saltgurka's sniff filterer.
# The following packets were
WHITELISTED:
BLACKLISTED:
--------------------------------
SMSG_UPDATE_OBJECT
SMSG_COMPRESSED_UPDATE_OBJECT
CreateObject
CreateObject2
] Position: X:
] Stationary Position: X:
Creature/0
Unit/0
GameObject/0
Creature
GameObject
OBJECT_FIELD_ENTRY:
Spawns
type,entry,guidlow,guidfull,x,y,z,o,map,r0,r1,r2,r3,sourcefile
Spell,CasterType,CasterEntry,CasterGuid,TargetType,TargetEntry,Time,TimeDiff
SMSG_SPELL_START
(Cast) SpellID:
(Cast) (Target) Unit:
SenderEntry,SenderName,TargetEntry,TargetName,Language,Type,Text,FileName
SMSG_CHAT
SlashCmd
Unknown
Language
SenderGUID
TargetGUID
Sender Name:
Receiver Name:
Erlnb.Properties.Resources
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
FileDescription
FileVersion
1.0.0.0
InternalName
Erlnb.exe
LegalCopyright
Copyright
2024
LegalTrademarks
OriginalFilename
Erlnb.exe
ProductName
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
Antivirus Signature
Bkav W32.AIDetectMalware.CS
Lionic Trojan.Win32.ClipBanker.Z!c
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
Skyhigh Artemis!Trojan
ALYac Gen:Variant.Jalapeno.14877
Cylance Unsafe
Zillya Trojan.ClipBanker.Win32.21435
Sangfor Trojan.Win32.Save.MSIL_Inject
K7AntiVirus Trojan-Downloader ( 005b69bb1 )
Alibaba Clean
K7GW Trojan-Downloader ( 005b69bb1 )
Cybereason malicious.a312ee
Baidu Clean
VirIT Trojan.Win32.MSIL_Heur.A
Paloalto Clean
Symantec Trojan.Gen.MBT
Elastic malicious (moderate confidence)
ESET-NOD32 a variant of MSIL/TrojanDownloader.Agent.QUG
APEX Malicious
Avast Win32:TrojanX-gen [Trj]
Cynet Clean
Kaspersky HEUR:Trojan-Banker.MSIL.ClipBanker.gen
BitDefender Gen:Variant.Jalapeno.14877
NANO-Antivirus Clean
ViRobot Trojan.Win.Z.Lazy.26624.I
MicroWorld-eScan Gen:Variant.Jalapeno.14877
Tencent Clean
TACHYON Clean
Sophos Mal/Generic-S
F-Secure Trojan.TR/Redcap.kkhxi
DrWeb Clean
VIPRE Gen:Variant.Jalapeno.14877
TrendMicro TROJ_FRS.VSNTEV24
McAfeeD ti!0B91154F7907
Trapmine Clean
FireEye Gen:Variant.Jalapeno.14877
Emsisoft Gen:Variant.Jalapeno.14877 (B)
SentinelOne Clean
GData Gen:Variant.Jalapeno.14877
Jiangmin Clean
Webroot Clean
Varist W32/Trojan.OWEH-2536
Avira TR/Redcap.kkhxi
Antiy-AVL Trojan[Banker]/MSIL.ClipBanker
Kingsoft MSIL.Trojan-Banker.ClipBanker.gen
Gridinsoft Ransom.Win32.Banker.sa
Xcitium Clean
Arcabit Trojan.Jalapeno.D3A1D
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan-Banker.MSIL.ClipBanker.gen
Microsoft Trojan:Win32/Malgent!MTB
Google Detected
AhnLab-V3 Trojan/Win.Generic.C5623837
Acronis Clean
McAfee Artemis!9352DDDA312E
MAX malware (ai score=89)
VBA32 Clean
Malwarebytes Trojan.Crypt.MSIL
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall TROJ_FRS.VSNTEV24
Rising Trojan.ClipBanker!8.5FB (C64:YzY0OsQOuUyJTYtW)
Yandex Clean
Ikarus Trojan-Downloader.MSIL.Agent
MaxSecure Trojan.Malware.73489558.susgen
Fortinet W32/Malicious_Behavior.SBX
BitDefenderTheta Clean
AVG Win32:TrojanX-gen [Trj]
DeepInstinct MALICIOUS
CrowdStrike Clean
alibabacloud Trojan[stealer]:MSIL/ClipBanker.gyf
No IRMA results available.