Static | ZeroBOX

PE Compile Time

2018-04-05 05:59:53

PE Imphash

09d0478591d4f788cb3e5ea416c25237

PEiD Signatures

PECompact 2.xx --> BitSum Technologies

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000a6000 0x00020600 7.99728690458
.rsrc 0x000a7000 0x00003000 0x00002400 5.76003548352

Resources

Name Offset Size Language Sub-language File type
RT_CURSOR 0x0001c000 0x00000134 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000a7b28 0x000002e8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000a7b28 0x000002e8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ACCELERATOR 0x0001c138 0x00000170 LANG_ENGLISH SUBLANG_ENGLISH_US PGP\011Secret Key -
RT_RCDATA 0x000a4b78 0x00000476 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_RCDATA 0x000a4b78 0x00000476 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_RCDATA 0x000a4b78 0x00000476 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_RCDATA 0x000a4b78 0x00000476 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_RCDATA 0x000a4b78 0x00000476 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_RCDATA 0x000a4b78 0x00000476 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_RCDATA 0x000a4b78 0x00000476 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_RCDATA 0x000a4b78 0x00000476 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_RCDATA 0x000a4b78 0x00000476 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_RCDATA 0x000a4b78 0x00000476 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_RCDATA 0x000a4b78 0x00000476 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_RCDATA 0x000a4b78 0x00000476 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_RCDATA 0x000a4b78 0x00000476 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_RCDATA 0x000a4b78 0x00000476 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_RCDATA 0x000a4b78 0x00000476 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_RCDATA 0x000a4b78 0x00000476 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_RCDATA 0x000a4b78 0x00000476 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_GROUP_CURSOR 0x000a4ff0 0x00000014 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_GROUP_ICON 0x000a7e10 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_VERSION 0x000a7e38 0x000005d0 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_MANIFEST 0x000a8408 0x00000298 LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document, ASCII text, with CRLF line terminators

Imports

Library kernel32.dll:
0x4a86b0 LoadLibraryA
0x4a86b4 GetProcAddress
0x4a86b8 VirtualAlloc
0x4a86bc VirtualFree

!This program cannot be run in DOS mode.
#lRichn
PEC2^O
%nn99z
t/[X!X&
rlt!`iv
#$0ue@y
SdBi:_7
ZQa3}!
CLN +E
/BS[hac
A(TRV
r$H. v
+R1hP#
IS,u[b\k
yCi%4kU
W;h}GB
!z:e9^
x/*ecRnM
X#58w@
{NsDp
*k6W@9
C!3KC?
{]\p9ntY
sPF[5P6
9f<W;F&
bac>^
.5r +A
+(AkpM
|9z/+#
M\}wO4
m|M\,\
-VDdr5
N! \95,hm
Z$_2KO;d
}q%hJ4
~8|7|&
w\wr0p
0QMrD!6O
@X?Z2`
A`x<>=
.a-76K
*J$<1j@
^VT4'1
b'""ff
i?4%~~
{_#%N,
Z{?i7`
Gi9e)_
r|ddgv
tA`m%$-
a%vcv8k
4a`Pks/
d5jL-a%
bWzlx<
6I$,<Aj
7l/hY]
.'#1`#T
4hp#3W
x-)xat4$7
:wpM5/
{r|w_,9
.*>dWm
I%)kIX+
dqBYO{
9wxknKh5
<&k3t?a
VIN97}
R#[d|7
wo~-7t9|
&4lcVW
i(i<|
eecd D
RhMC=~M,
\&pd:"
ceu%;B
&]} -jX
'DUfqZ
Sa?{o0
ja~K8h
5ze?aq
z$;Pd/
Y=(A%u
[Ch'gO}
?},R}B
FG6n$"
&i'H7g
epQ#_t
)=E-TF]
fTLsrAX
RNjB#l
.J6TZYnI
2[/ul?
6,8g7;
@4fX?)
@@Fvt%
PECompact2
WbH8P3
*Y2ypf
c>GWYe
vX*]mW
eR06]S
aZNR"$
H2[b-'X
q'`fCm
d,X%-<
tja"e_N
+ojb::
8zy54{
yn}rUr
<4li~T
/Wm.47
1$~8~o
q'CvD
2GwA?
FK:$@U*
4x'c$;
'] *NMY
8e>%=XL
Xm<PY0d
:R=cc;
`~ ^j<P$PY
!HusX/
0tP?2j
?q(?]J
xj4#I?
-K+Zz9h
6Z@t%A
PhJX3i
7Si"gO
)g$.7Z
GlZ8RLt
`paA3#g-T"
`;hUE3
egVDu}
X.X\MX
6-uz~'
A)vvIpv
:97\uz9
7b!6|_
WV?BEd
>Z$)X|
EIwZ h
K5--R)
G&'rXn
ZH#ipMV
n}} !
w,nWvu
/h:Old
3%;kqMq
=:<Mr2
d+:/ec
=VR;V>
j\NFT#
$y,$qh
C`K3})
Tj9kw08
,)N/a+
F|_rEf/(G7
sw>zZw:
wa/Jm8
K^(e,{
D_A9f&
0oh23L
.;aSE9F9
%vXf1Q
}>G*<(
ci0gz<
m,MYayw
A!ZC=OM
MD,0nex,
^5!fTc
X97Ee=
~&tp&F
*G:oom
bKyO.C"v
<wRPvw
X4"P!)
qM-D=3
mMAmNhE
%l7$Lg?
+pz-SW
APgQYLiR*"t
,(^~2Q
\UrBRS'
QKK*T
o(cpy2
T=8ns*
/%lwLc
z[C1aO
YZnt&fu
Fj4H3"T
Ss)J]*]
AhGpUqUL
N1V5i
XnOwJ2
|FhQLcN{l
3lm!sx
&!{#`+
9 kx|n
JVND8`
RQ$rY\
^QU2UoYQ[N
fyKgk8'0
m*88n-
.G~Ek
pp4YlD
<[]j2VYy
'^|r ^_nnV
7^2EjOb37
*'<z6x
xEE3Hi
9@9@lQ
WV;Sw?
1Y$I|n
Y?&DEV
jl]W9,
!,\Ec%
>HJaVP>
dD$EV'
a2haV>
<mO32'
5bPC}+
P/D+x&
,6%-:=D
yT`MXb}m:
DP #q5
>*3*c;
$|]MgtM
m#GDlZ
?iSnP/
|E-m6`.Y
w4(Snp
_GBFR4
|i*&/#
`Le>UJ
_!uJqW
s=&+60CE
)$4Rhi
Hf:<sg
i@u\&2
=]!AhQA
W~NTuN
]1b<&9
e0*a%@6
85{C8]
#-tM/y
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity
name="DNS"
processorArchitecture="x86"
version="0.0.0.0"
type="win32"/>
<description>Domain Name System Research Utility</description>
<dependency>
<dependentAssembly>
<assemblyIdentity
type="win32"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
processorArchitecture="x86"
publicKeyToken="6595b64144ccf1df"
language="*"
/>
</dependentAssembly>
</dependency>
</assembly>
kernel32.dll
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
P-XpT@
C`fK\@>
@t6[sF
!{@PWQS
:dMMZh0]o
UW`msvb
%sy5|l
id|SDqL
USQWVR
Z^_Y[]
DigiCert Inc1
www.digicert.com1+0)
"DigiCert EV Code Signing CA (SHA2)0
190415000000Z
220420120000Z0
California1
Private Organization1
C14118121
California1
Laguna Niguel1$0"
Gibson Research Corporation1$0"
Gibson Research Corporation1$0"
Gibson Research Corporation0
US-CALIFORNIA-C14118120
1http://crl3.digicert.com/EVCodeSigningSHA2-g1.crl07
1http://crl4.digicert.com/EVCodeSigningSHA2-g1.crl0K
https://www.digicert.com/CPS0
http://ocsp.digicert.com0H
<http://cacerts.digicert.com/DigiCertEVCodeSigningCA-SHA2.crt0
DigiCert Inc1
www.digicert.com1+0)
"DigiCert High Assurance EV Root CA0
120418120000Z
270418120000Z0l1
DigiCert Inc1
www.digicert.com1+0)
"DigiCert EV Code Signing CA (SHA2)0
+.+1Xf
http://ocsp.digicert.com0I
=http://cacerts.digicert.com/DigiCertHighAssuranceEVRootCA.crt0
:http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl0@
:http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl0
.http://www.digicert.com/ssl-cps-repository.htm0
DigiCert Inc1
www.digicert.com1+0)
"DigiCert EV Code Signing CA (SHA2)
-3h{I-
_vJ$VW
20190421204124Z
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Timestamping CA0
170104000000Z
280118000000Z0L1
DigiCert1*0(
!DigiCert SHA2 Timestamp Responder0
https://www.digicert.com/CPS0
,http://crl3.digicert.com/sha2-assured-ts.crl02
,http://crl4.digicert.com/sha2-assured-ts.crl0
http://ocsp.digicert.com0O
Chttp://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
DigiCert Inc1
www.digicert.com1$0"
DigiCert Assured ID Root CA0
160107120000Z
310107120000Z0r1
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Timestamping CA0
fnVa')
http://ocsp.digicert.com0C
7http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
4http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
4http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
https://www.digicert.com/CPS0
8aMbF$
V3"/"6
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Timestamping CA
190421204124Z0+
H-(Mh
DigiCert Inc1
www.digicert.com1 0
DigiCert Global Root G30
210429000000Z
360428235959Z0d1
DigiCert, Inc.1<0:
3DigiCert Global G3 Code Signing ECC SHA384 2021 CA10v0
http://ocsp.digicert.com0@
4http://cacerts.digicert.com/DigiCertGlobalRootG3.crt0B
1http://crl3.digicert.com/DigiCertGlobalRootG3.crl0
DigiCert, Inc.1<0:
3DigiCert Global G3 Code Signing ECC SHA384 2021 CA10
220224000000Z
250203235959Z0
California1
Private Organization1
C14118121
California1
Laguna Niguel1$0"
Gibson Research Corporation1$0"
Gibson Research Corporation0v0
US-CALIFORNIA-C14118120
Hhttp://crl3.digicert.com/DigiCertGlobalG3CodeSigningECCSHA3842021CA1.crl0N
Hhttp://crl4.digicert.com/DigiCertGlobalG3CodeSigningECCSHA3842021CA1.crl0=
http://www.digicert.com/CPS0
http://ocsp.digicert.com0W
Khttp://cacerts.digicert.com/DigiCertGlobalG3CodeSigningECCSHA3842021CA1.crt0
DigiCert, Inc.1<0:
3DigiCert Global G3 Code Signing ECC SHA384 2021 CA1
\EzP/0
20220224033814Z
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Timestamping CA0
210101000000Z
310106000000Z0H1
DigiCert, Inc.1 0
DigiCert Timestamp 20210
http://www.digicert.com/CPS0
,http://crl3.digicert.com/sha2-assured-ts.crl02
,http://crl4.digicert.com/sha2-assured-ts.crl0
http://ocsp.digicert.com0O
Chttp://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
QJxy6z'
dwc_#Ri
DigiCert Inc1
www.digicert.com1$0"
DigiCert Assured ID Root CA0
160107120000Z
310107120000Z0r1
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Timestamping CA0
fnVa')
http://ocsp.digicert.com0C
7http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
4http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
4http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
https://www.digicert.com/CPS0
8aMbF$
V3"/"6
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Timestamping CA
220224033814Z0+
/1(0&0$0"
^rna-:0C
DigiCert Inc1
www.digicert.com1 0
DigiCert Global Root G30
210429000000Z
360428235959Z0d1
DigiCert, Inc.1<0:
3DigiCert Global G3 Code Signing ECC SHA384 2021 CA10v0
http://ocsp.digicert.com0@
4http://cacerts.digicert.com/DigiCertGlobalRootG3.crt0B
1http://crl3.digicert.com/DigiCertGlobalRootG3.crl0
DigiCert, Inc.1<0:
3DigiCert Global G3 Code Signing ECC SHA384 2021 CA10
220223000000Z
250203235959Z0
California1
Private Organization1
C14118121
California1
Laguna Niguel1$0"
Gibson Research Corporation1$0"
Gibson Research Corporation0v0
US-CALIFORNIA-C14118120
Hhttp://crl3.digicert.com/DigiCertGlobalG3CodeSigningECCSHA3842021CA1.crl0N
Hhttp://crl4.digicert.com/DigiCertGlobalG3CodeSigningECCSHA3842021CA1.crl0=
http://www.digicert.com/CPS0
http://ocsp.digicert.com0W
Khttp://cacerts.digicert.com/DigiCertGlobalG3CodeSigningECCSHA3842021CA1.crt0
DigiCert, Inc.1<0:
3DigiCert Global G3 Code Signing ECC SHA384 2021 CA1
20220224162320Z
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Timestamping CA0
210101000000Z
310106000000Z0H1
DigiCert, Inc.1 0
DigiCert Timestamp 20210
http://www.digicert.com/CPS0
,http://crl3.digicert.com/sha2-assured-ts.crl02
,http://crl4.digicert.com/sha2-assured-ts.crl0
http://ocsp.digicert.com0O
Chttp://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
QJxy6z'
dwc_#Ri
DigiCert Inc1
www.digicert.com1$0"
DigiCert Assured ID Root CA0
160107120000Z
310107120000Z0r1
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Timestamping CA0
fnVa')
http://ocsp.digicert.com0C
7http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
4http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
4http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
https://www.digicert.com/CPS0
8aMbF$
V3"/"6
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Timestamping CA
220224162320Z0+
/1(0&0$0"
ph8M&k
DigiCert, Inc.1A0?
8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA10
240117000000Z
261120235959Z0
California1
Private Organization1
14118121
California1
Laguna Niguel1$0"
Gibson Research Corporation1$0"
Gibson Research Corporation0v0
http://www.digicert.com/CPS0
Mhttp://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Mhttp://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0
http://ocsp.digicert.com0\
Phttp://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
DigiCert Inc1
www.digicert.com1!0
DigiCert Trusted Root G40
210429000000Z
360428235959Z0i1
DigiCert, Inc.1A0?
8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA10
[K]taM?
SA|X=G
http://ocsp.digicert.com0A
5http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
2http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
jj@0HK4
DigiCert, Inc.1A0?
8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
20240228221023Z
DigiCert, Inc.1;09
2DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA0
230714000000Z
341013235959Z0H1
DigiCert, Inc.1 0
DigiCert Timestamp 20230
Ihttp://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
http://ocsp.digicert.com0X
Lhttp://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
l2|X/gGe
(f*^[0
DigiCert Inc1
www.digicert.com1!0
DigiCert Trusted Root G40
220323000000Z
370322235959Z0c1
DigiCert, Inc.1;09
2DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA0
http://ocsp.digicert.com0A
5http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
2http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
DigiCert Inc1
www.digicert.com1$0"
DigiCert Assured ID Root CA0
220801000000Z
311109235959Z0b1
DigiCert Inc1
www.digicert.com1!0
DigiCert Trusted Root G40
]J<0"0i3
v=Y]Bv
http://ocsp.digicert.com0C
7http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
4http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
~qj#k"
DigiCert, Inc.1;09
2DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA
240228221023Z0+
/1(0&0$0"
@WhA6o
+'+kkK
uS+RClHAm
VS_VERSION_INFO
StringFileInfo
040904b0
Author
Steve Gibson, Gibson Research Corporation, http://grc.com
Build Timestamp
2018/04/04 20:56 GMT
CompanyName
Gibson Research Corp.
Description
DNS Benchmark - Domain Name System Benchmarking Utility. Please see this program's built-in help for additional information.
FileDescription
Measure the performance of DNS resolvers.
FileVersion
1.3.6668.0
InternalName
dnsbench.exe
LegalCopyright
Copyright
2018 Gibson Research Corp.
OriginalFilename
dnsbench.exe
ProductName
"DNS Benchmark", freeware by Steve Gibson
ProductVersion
1.3.6668.0
Web Site for Updates
http://www.GRC.com
VarFileInfo
Translation
<<<Obsolete>>
RAny use of this Certificate constitutes acceptance of the DigiCert CP/CPS and the Relying Party Agreement which limit liability and are incorporated herein by reference
RAny use of this Certificate constitutes acceptance of the DigiCert CP/CPS and the Relying Party Agreement which limit liability and are incorporated herein by reference
<<<Obsolete>>
<<<Obsolete>>
Antivirus Signature
Bkav Clean
Lionic Clean
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
Skyhigh Clean
ALYac Clean
Cylance Clean
Zillya Clean
Sangfor Clean
K7AntiVirus Clean
Alibaba Clean
K7GW Clean
Cybereason Clean
huorong Clean
Baidu Clean
VirIT Clean
Paloalto Clean
Symantec Clean
Elastic Clean
ESET-NOD32 Clean
APEX Clean
Avast Clean
Cynet Malicious (score: 100)
Kaspersky Clean
BitDefender Clean
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Clean
Tencent Clean
TACHYON Clean
Sophos Clean
F-Secure Clean
DrWeb Clean
VIPRE Clean
TrendMicro Clean
McAfeeD Clean
Trapmine Clean
FireEye Clean
Emsisoft Clean
Ikarus Clean
GData Clean
Jiangmin TrojanSpy.Zbot.fpyl
Webroot Clean
Varist Clean
Avira Clean
Antiy-AVL Trojan[Spy]/Win32.Zbot
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Clean
Google Clean
AhnLab-V3 Clean
Acronis Clean
McAfee Clean
MAX Clean
VBA32 Clean
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Clean
Yandex Clean
SentinelOne Static AI - Suspicious PE
MaxSecure Clean
Fortinet Clean
BitDefenderTheta Clean
AVG Clean
DeepInstinct Clean
CrowdStrike Clean
alibabacloud Clean
No IRMA results available.