Static | ZeroBOX

Name	Virtual Address	Virtual Size	Size of Raw Data	Entropy
.text	0x00002000	0x01648bf8	0x01648c00	2.14988792946
.rsrc	0x0164c000	0x00010e98	0x00011000	2.19087216332
.reloc	0x0165e000	0x0000000c	0x00000200	0.122275881259

Name	Offset	Size	Language	Sub-language	File type
RT_ICON	0x0164c100	0x00010828	LANG_NEUTRAL	SUBLANG_NEUTRAL	dBase III DBT, version number 0, next free block index 40
RT_GROUP_ICON	0x0165c938	0x00000014	LANG_NEUTRAL	SUBLANG_NEUTRAL	data
RT_VERSION	0x0165c95c	0x0000033c	LANG_NEUTRAL	SUBLANG_NEUTRAL	data
RT_MANIFEST	0x0165cca8	0x000001ea	LANG_NEUTRAL	SUBLANG_NEUTRAL	XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

!This program cannot be run in DOS mode.

`.rsrc

@.reloc

Zd[XdX

v4.0.30319

#Strings

__StaticArrayInitTypeSize=20

<procecsodre>b__25_0

<>c__DisplayClass25_0

<dir_ques>5__1

<procecsodre>b__1

IEnumerable`1

Queue`1

IEnumerator`1

List`1

dataGridView1

__StaticArrayInitTypeSize=32

Microsoft.Win32

ToInt32

<procecsodre>b__25_2

<files>5__2

<procecsodre>b__3

<>s__3

<procecsodre>b__4

<>s__4

<sDir>5__5

<procecsodre>b__5

ToInt16

<i>5__6

<procecsodre>b__6

10F82BF87BB46EC5A37A38E2DAB5660220BF4BA7

get_UTF8

F8BEB5A0A1C2EF6B22A1C1022A5B14607D3B5C49

<adwwefiles>d__9

servsIuPD

DIEEROWD

EDRNEFRE

DIFRVFSEF

MOIGIIRFM

System.IO

SREMEINS

loadsQEta

System.Data

LoadidData

dowEdata

mscorlib

System.Collections.Generic

get_CreationTimeUtc

get_Id

get_CurrentManagedThreadId

<>l__initialThreadId

funtdsVad

objsTdead

Thread

Form1_Load

add_Load

monthCalendar1_DateChanged

monthCalendar2_DateChanged

Form1_DockChanged

get_Connected

Synchronized

pawdifird

Replace

defaultInstance

dowrrce

objsVurce

set_DataSource

set_AutoScaleMode

set_ColumnHeadersHeightSizeMode

DataGridViewColumnHeadersHeightSizeMode

FromImage

DataTable

get_DataAvailable

IEnumerable

IDisposable

set_Visible

Double

RuntimeFieldHandle

RuntimeTypeHandle

GetTypeFromHandle

Rectangle

dtnwdivfile

set_FormBorderStyle

prowsEme

get_Name

set_Name

GetFileName

get_UserDomainName

get_UserName

get_ProcessName

GetDirectoryName

DateTime

WriteLine

ValueType

getsEtype

procss_type

procecsodre

get_Culture

set_Culture

resourceCulture

ApplicationSettingsBase

System.IDisposable.Dispose

get_Date

EditorBrowsableState

objwsHdtate

<>1__state

Delete

STAThreadAttribute

CompilerGeneratedAttribute

GuidAttribute

GeneratedCodeAttribute

DebuggerNonUserCodeAttribute

DebuggableAttribute

EditorBrowsableAttribute

ComVisibleAttribute

AssemblyTitleAttribute

IteratorStateMachineAttribute

AssemblyTrademarkAttribute

TargetFrameworkAttribute

DebuggerHiddenAttribute

AssemblyFileVersionAttribute

AssemblyConfigurationAttribute

AssemblyDescriptionAttribute

CompilationRelaxationsAttribute

AssemblyProductAttribute

AssemblyCopyrightAttribute

AssemblyCompanyAttribute

RuntimeCompatibilityAttribute

ReadByte

savealeue

Dequeue

Enqueue

GetValue

SetValue

zomvdalue

sourevalue

hdbtrsDive

loovwrive

vhcrvdh iobv.exe

get_Size

set_Size

get_ReceiveBufferSize

set_ClientSize

ISupportInitialize

geysAsize

desenEsize

scvEsize

desdsVsize

dsecrsize

bufrsdwize

get_Gif

get_Jpeg

isweUwig

rowsVding

System.Threading

Encoding

System.Drawing.Imaging

System.Runtime.Versioning

ToString

GetString

Form1_FormClosing

add_FormClosing

disposing

System.Drawing

get_ExecutablePath

myepsfath

getapdiath

<>3__path

get_Width

filesPweth

get_Length

SetLength

StateObj

TimerCallback

button1_Click

bindingNavigatorMoveNextItem_Click

Form1_DoubleClick

dataGridView1_CellContentClick

iswqsEncel

System.ComponentModel

ContainerControl

scrvmsDeam

NetworkStream

GetStream

MemoryStream

newdifseam

Program

get_Item

set_Item

OperatingSystem

resourceMan

retsdn

diem_frdeen

CopyFromScreen

get_PrimaryScreen

desksrRvien

seyesWcren

isyDeskgcren

isaivdtren

DataColumn

DataGridViewColumn

set_ShowIcon

GetExtension

GetFileNameWithoutExtension

get_OSVersion

get_Version

Application

set_Location

SystemInformation

CopyPixelOperation

System.Configuration

System.Globalization

System.Reflection

BaseCollection

ControlCollection

DataColumnCollection

DataGridViewColumnCollection

DataRowCollection

DataGridViewRowCollection

NotSupportedException

CopyTo

FileInfo

CultureInfo

DriveInfo

FileSystemInfo

DirectoryInfo

seynrsAuto

Bitmap

procdAloop

get_game_app

mywafpp

maisdwtp

set_cordup

mainvp

set_ShowInTaskbar

expfsdlder

sender

get_ResourceManager

FormClosingEventHandler

System.CodeDom.Compiler

IContainer

CurrentUser

StreamWriter

TextWriter

Form1_Enter

BitConverter

Form1_DragOver

ToLower

desqsRitwer

get_Major

get_Minor

IEnumerator

System.Collections.Generic.IEnumerable<System.String>.GetEnumerator

System.Collections.IEnumerable.GetEnumerator

.cctor

nietusiwdtr

info_svtr

fileinfwtr

codtEivr

Graphics

System.Diagnostics

get_Bounds

System.Runtime.InteropServices

System.Runtime.CompilerServices

System.Resources

vhcrvdh_iobv.Form1.resources

vhcrvdh_iobv.Properties.Resources.resources

DebuggingModes

irvrewdes

seelwfes

GetDirectories

vhcrvdh_iobv.Properties

movsWles

trasfWeles

GetFiles

adwwefiles

EnableVisualStyles

GetProcesses

AddMinutes

ReadAllBytes

WriteAllBytes

GetBytes

GetDrives

shsend_drivwes

Settings

DateRangeEventArgs

DragEventArgs

FormClosingEventArgs

DataGridViewCellEventArgs

iswgdchs

<>4__this

iswedadks

imageiWails

filersAtails

get_Controls

System.Windows.Forms

Contains

get_Columns

systerAons

setwewCons

set_AutoScaleDimensions

System.Collections

minsbnfdsns

accosAffos

scrnicsdaps

atmsips

savesWepps

exiofers

RuntimeHelpers

seeswdrers

sydnresdifrs

macEsrorcss

Process

bytesEdess

dirwsceess

System.Net.Sockets

fileFexits

components

Exists

get_Rows

Concat

ImageFormat

PixelFormat

GetObject

Connect

mainiVdket

System.Collections.IEnumerator.Reset

mgsEeight

get_Height

EndInit

BeginInit

get_Default

SetCompatibleTextRenderingDefault

TcpClient

Environment

InitializeComponent

System.Collections.Generic.IEnumerator<System.String>.Current

System.Collections.IEnumerator.Current

System.Collections.Generic.IEnumerator<System.String>.get_Current

System.Collections.IEnumerator.get_Current

<>2__current

dalsacifunt

remsAcogunt

bytsAount

get_Count

coreviQart

ThreadStart

Insert

Convert

SuspendLayout

ResumeLayout

MoveNext

System.Text

set_Text

get_HeaderText

vhcrvdh iobv

vhcrvdh_iobv

DataGridView

get_Now

DataRow

NewRow

fInvrdx

fileEdex

set_TabIndex

porfisdtex

midfix

set_MinimizeBox

set_MaximizeBox

timeredlay

InitializeArray

ToArray

getcswfsray

get_IsReady

OpenSubKey

RegistryKey

get_Assembly

Antivirus	Signature
Bkav	W32.AIDetectMalware.CS
Lionic	Trojan.Win32.Finac.4!c
tehtris	Clean
ClamAV	Clean
CMC	Clean
CAT-QuickHeal	Clean
Skyhigh	Clean
ALYac	Backdoor.RAT.Crimson
Cylance	Unsafe
Zillya	Trojan.Agent.Win32.3953674
Sangfor	Trojan.Msil.Finac.Vd0k
K7AntiVirus	Trojan ( 005b67de1 )
Alibaba	Trojan:MSIL/Finac.86ddd63f
K7GW	Trojan ( 005b67de1 )
Cybereason	malicious.c3e073
Baidu	Clean
VirIT	Clean
Paloalto	generic.ml
Symantec	Trojan Horse
Elastic	malicious (high confidence)
ESET-NOD32	MSIL/Agent.ETX
APEX	Clean
Avast	Win32:DropperX-gen [Drp]
Cynet	Clean
Kaspersky	HEUR:Trojan.MSIL.Finac.gen
BitDefender	IL:Trojan.MSILZilla.125423
NANO-Antivirus	Clean
ViRobot	Clean
MicroWorld-eScan	IL:Trojan.MSILZilla.125423
Tencent	Malware.Win32.Gencirc.11c19114
TACHYON	Clean
Sophos	Troj/Rat-IE
F-Secure	Trojan.TR/Agent.tlwkt
DrWeb	BackDoor.CrimsonNET.14
VIPRE	IL:Trojan.MSILZilla.125423
TrendMicro	TROJ_GEN.R002C0XES24
McAfeeD	ti!DDE5BAE63660
Trapmine	Clean
FireEye	IL:Trojan.MSILZilla.125423
Emsisoft	IL:Trojan.MSILZilla.125423 (B)
huorong	Backdoor/MSIL.CrimsonRat.d
GData	IL:Trojan.MSILZilla.125423
Jiangmin	Clean
Webroot	Clean
Varist	W32/ABTrojan.NLJQ-8579
Avira	TR/Agent.tlwkt
Antiy-AVL	Trojan/MSIL.Finac
Kingsoft	Clean
Gridinsoft	Clean
Xcitium	Clean
Arcabit	IL:Trojan.MSILZilla.D1E9EF
SUPERAntiSpyware	Clean
ZoneAlarm	HEUR:Trojan.MSIL.Finac.gen
Microsoft	Trojan:MSIL/Crimson.A!MTB
Google	Detected
AhnLab-V3	Trojan/Win.MSILZilla.C5626607
Acronis	Clean
McAfee	Clean
MAX	malware (ai score=81)
VBA32	Clean
Malwarebytes	Trojan.Dropper.MSIL
Panda	Trj/Chgt.AD
Zoner	Clean
TrendMicro-HouseCall	TROJ_GEN.R002C0XES24
Rising	Backdoor.Crimson!1.EA63 (CLASSIC)
Yandex	Clean
Ikarus	Backdoor.CrimsonRat
MaxSecure	Clean
Fortinet	PossibleThreat
BitDefenderTheta	Clean
AVG	Win32:DropperX-gen [Drp]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_70% (D)
alibabacloud	Trojan:MSIL/Finac.gyf

Static Analysis

PE Compile Time

PDB Path

PE Imphash

Sections

Resources

Imports