Static | ZeroBOX

PE Compile Time

2092-01-15 01:25:31

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00001c08 0x00001e00 6.45117564701
.rsrc 0x00004000 0x0000059c 0x00000600 4.04980906621
.reloc 0x00006000 0x0000000c 0x00000200 0.0815394123432
.css 0x00008000 0x00052400 0x00052400 7.99954209965

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x00004090 0x0000030c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000043ac 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
F N/2'
Z };7%
v4.0.30319
#Strings
AD446C34F2704865A9E424BE5755BC8F9140414FD7E1456F1A4581F8C2D778A0
__StaticArrayInitTypeSize=11
List`1
ToUInt32
ToInt32
6F8B6C8D8D4E5E20E07E3EB7427D146D6812E5C67C4979187757735552D85263
__StaticArrayInitTypeSize=1355
ToUInt16
__StaticArrayInitTypeSize=36
<Module>
<PrivateImplementationDetails>
CallWindowProcA
B86C921CDC504CE0C498E5F2E9548A01E33F930047FB5D22BF2DA2270E113ECD
get_ASCII
System.IO
inputData
ioAdhugxya
mscorlib
System.Collections.Generic
lpPrevWndFunc
TrimEnd
RuntimeFieldHandle
Console
WriteLine
ValueType
CompilerGeneratedAttribute
GuidAttribute
DebuggableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
AssemblyFileVersionAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
SetValue
Brought.exe
dwSize
Encoding
System.Runtime.Versioning
ToString
GetString
get_ExecutablePath
kernel32.dll
user32.dll
GetActualProtocol
lParam
wParam
Program
get_Item
System
Application
System.Reflection
ArgumentNullException
ArgumentException
Brought
BitConverter
.cctor
System.Diagnostics
System.Runtime.InteropServices
System.Runtime.CompilerServices
DebuggingModes
ReadAllBytes
GetProtocolSettings
System.Windows.Forms
get_Chars
RuntimeHelpers
lpAdress
Object
lpflOldProtect
VirtualProtect
flNewProtect
iuogfht
sectionContent
Convert
System.Text
cjhgay
InitializeArray
Sygcydy
dataKey
WrapNonExceptionThrows
Brought
Copyright
2025
$5c249bfa-2dd8-4f1a-9314-11e3fed61454
1.0.0.0
.NETFramework,Version=v4.7.2
FrameworkDisplayName
.NET Framework 4.7.2
C:\Users\users\source\repos\Brought\Brought\obj\Release\Brought.pdb
_CorExeMain
mscoree.dll
o%2E`L
*#Cs9ve9
+q%FL`p9
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
,"Rp#V`
XK9n,t
q3O+(H1
94[aT;
|1M"F
{>ZB}P
LM1$^}$
oO!aU#v]c:
dwCj0V
+ZL _`^
&{,(Fq
6(AGQ6
ima+*D
O>pxfQP6
B~m|Ux7O
q60Hl5
cbl^2zGT
)B4L
>Swau=
[r^;`l
h-hS#5
"PI$^et
&nUO?
XRt3Wu
QvZl-D}V
,#`X`F*.
e=`v`
}l{XXm
FHzBm#
X*2zL5>gV[
CR}t6aX>U
]:,d4QxvU'
KFQ5G7
[W^f]f1$1
OY+c[3{w0
W^RH5Ap4
%.9H_-g
GK#Pwt
a^4N/p
r_K#D
gUs|3g
Jf\"#}
dMD'er
mOo![5
'm{b4
uo}phnc
Yp^2gN3Ez
%sn}(f
.8M\B|!
-8OZ,o
u%z"sd
W2+^;@O[{
[?DA9H
L{M3,g
~Ge$V^2
mo8KMh1
,Lp]@gw
`p~T,}
QkeFI+
^ONX=%
k?8RAa
t1r4\!
Y~)zq*
u B-@x
>.=zno
O#Hhbus>
Ka.*Kj
o#!l}U
|RGyiP20
$csw\M
JL\ZeD(
8g7"H7
>m{yMm!$
p,&%Z
uTXZ([
*A!]j?p
*f(^[P
H8[h>[
{N6/<\
O]7jVB
=xSarb5Z
%{AEh6Qa
pn${C
.uCHWuLrr
kr<^O-$
wfyXta
U:%*S
]@3^Hc
a&qqO:
A{K:`W
p4Mm5Y
`C12QW
EB]BMj
i"-r8x
j=}vJO
gzR`<X
=z w)D
MlSbcTZ
8z=!J.
V|Wf@q
o6x7|V
~*[?_sK
nmsJB]
M:n7T\
:NTiqn3KTp
V' V"7
w@S,aV
P/wmI{
;bJyaQ2x
<r=F0??
P$yM=}
rwg>/D
0WvY+=m>If
kN%dL3
d$hMj:
M-,qmx
&Wm $R$K}*
RizG_W
(mhS3U
_Ia*S+
d1aVC%
~_rZBD)
B1[}'X
0&Q5)'
*"ECd9>
hW .LO
]Q@y"8L
D?Gm>9
3yH5j3'
s8H<Ol
UlwMFC
-$lj4c
q$;hd.
w"efU:
h8^KR
,uPBr(
eRv#vD
[?^OzE
pc5hx0
}"~`aDF
FtkoB?_
e?vza??`
=1`I~c6o~
-y*{Rb
f@sogLe
1B=4
o}vqg4n
kn+{3J
"o$'/Qu
?j+lV_
k-Ho<&
)h2hZ,
orr0&0
~\sgmE#[
;oO\~A
ZX[#@D
yR"upZ
|gpY\x
|%&v7<
Ng#k;+/{
]$6'jH
czU@th
DBWx*Ua
koH"\_|
ORiB'm
9mer|V=
P2U_+e
N*XNuZ|
xd-QJ\F
4"F't}
ZQ@g;F
LOwhDQ
V71L<n]
geWBIq
dw:^<l
3J\5O
M;o;UA
CzLjhk=U
TEUsGQg
?+ [f
f$yM3\
\< tqW
e6f='?
}S.M T
81E|-e
adiu#97Cy
j>"o`X
Z9. ra
:KJIBV
3-fz+'a
Vpi1C-
lEhRVrG
lIc+xuv7C
V_V~jVC
g@y8>1e
eCYm:8
W)!kR3
6aZJ%1Lu
ziJj@j
x_`}bO
+mZ{^>e
.RTp#\
G;OVbye
9g3tI0(
mrgtU
XhaNDM
.A(u@>
)k=CsM
k4G6-s]zi
iav+e_
R^LZO(E
?=9>n6
prGU[>}+
so6L&'
`bD1@7\
sN rt:/vvDX
&k\E9Y
_iN$/,`B
9H084"
S}_A$U
ILUw/`:
pum_{)
4c^,sV
a<|(B?
lm{7KC
^KpB6;h?
50b]^Z
={ys`bO
.,<*8L
TAq(/tyb
Ur2Mz~
y?=b0}
OHRm-'
,xW;nQ
$yWV-u
6z=bbVT
Z)9pSG]
%L6%Uq_6
ZB=xz8
4_<Lk.
~^.viO%x
Frl}+s
L<SxML
ldA}7a{
A_gm}g
mPQ5ZV
cn,8?/
\J@Cq_
!k@mar
4Hf:OP8
wYs4sI
)o~+I3
3|+vl#
V[qp1Y
3<hz"DeX
|g@9i
Zuca\q
{OVoI?
w~sebq
9cY|w.I
B2C*7(
CDA7VTj
)l|r]E
'eT<KJ
-+C5[,
Z n;Q
rkO3ao
vn_e|Mq/
$pp'$&
l~>C0hv
w$m/B?
$ %J9jr.
M60rji
}"$)|*
u8Ujp8
!mCoN"
Pj8Zn.?
rT?kDI
Hglvp*
&\%oHl"
zGw)tt;
Jv<g|oh
wSoB}X
U[1DA>
zT+0N{
,PMAE;
^H_\c&
P:EOohk
djQvCV
|u}Aexh!s
ENnE\6
.E_@]cn7
e?,zGM
P->rpX
cHZ["%Jc
F32wI]
1MoP%t
+.-tYA[
\MKLS)a
PYCiM#
.!fR}F
oolX6>
}Q/C)7
%"L;>;M
aH4?w@
2!/@6x
V*$+[fn
6`w;Uq
|fHy%r
97os/U
GYac*g
2[*edb
=LIF$I
f<h/>M
z%}$;V
?L,lBo
KTA.&o2
ogG,Ae6
Hm,cJ%9k
lf~*F\
*x8Vh*
of[p.Q
~b:E3.v
arKhH,
^I5uj>
:oO2Ce_
4APFj*
{.RXnz
]Fr$[z,
mkY4#G?
;I]i-S
n1t:t
;4utM>
*cX4K{
hSJImD
Sf\|jG
gKsI#P
'u97-H
@o<wS,d
K:cz4z<g
z__gC`
Db[~k6%
$J=W`J
ch*T/.n
{>mtUU
jPe*g,
XEp$nq
\yV>3T
MMwPlr
e*]V'+
I{$Wei
:G?oVi
|!Mokm
5@5E0pQ
MFlxjR
usA|i*.
>DI}TU_
+D?'dD
n"1)xtaL%`
1h>-po
Iou<CRpf
cXK-e4
6W3]2e
fJi-Ti
R`H\~Q
k5$}B
72WJ&E
O1SL]1
Bk#t"#o
o/uF7J
T#Jt,J
f\0fSa
SDT>b.
O`$Ej(
[]a7&X
&PpJo(
PLwRoKS
ZOO_?.
#7i@SqC
bCFaqA
(WTruD
9lQ\W\
'>&@6x
Rx4^5e
|{N2OG
Q!l$Cu1
$e[+fv
`Re6FP
A.a^x)
esS,Yg*
>kTL%gho
/(Kxy?U
Q=>aI]
gWd!+A
:0><a!.
BXpq&'
l#kj9k
A~@x4Q
XgW&'X
15'`-Em
bc|y92
CHe2_
n0Q.g:Xl
eKZZ{Bx!yjYP
C_J^]$3
J)@5T>
0#{[OE
H(o9N9
da?xY-3
_PqA2p
r\fUN}
Y>J2m5m
UpW(`'F
2Cw9'xu
11#B:9
a@=Hy&
jdx(2?2
l=,)pKV
VIZd~&i
tM7NZ~
.*p+_~
Ie{oo(7
24;U)b
(dU98B
Vmn{iHt
ok 1ov
3/"6gR
F8XBg@
!0\`P,
0!Hox
8j1YTVpU
5i& CG
~v]gQm3,
kCz$:9
J!#=`F
4&eb8
k'*lBN7
$wt^ c
d{\C[BwK
B M"H}|
,nh{&
)-&_Jd
)t0g4p
^_]F5')
NJK%8m
cFn)2X
{&'EjX
TWzw,o
jszGNx
P]0CUHD
-w:;O|K
{[z]8s
\`f9^:
:|+#j(w
W|_VCW
[$,E0{uR
nC/9 N
92k};,2W
z;FxwaS
*Y4dR~d
I3a!d(
&{$:A-u
5J.W[}
?Zx;R[
E!jwXK
T!C"6.
OiIc:!
S~/qvZ^
]3#GQN
,Z/Qm%E]y
B7d0wnr
p`4>=Y
g+O<Qod%
0_kOkVRdTQ&
NZa/Z_wl
1lvaL%=nuL
NbyNMi.
m["zD/
qf?k?p
XJ2z:&
0J9hh5P
\`uRQ%&
czLx~"f
#_k@zj
2S0FApg
rrZ1Hg
gGTT/A
?5[ xY\I}D<#KHG&
W2OJqO
pAnb])
1J\vlp
dJ+hl7
I3:p{Z
z7n|H2
A/MEJK
BQ8)ZLL
PjDnl?
LvNVJ5
Z\'mM]
MtZ(AiH
>MIt}$S
gWFq C)
-W:M|~
O*CB w
!~JP0=
tc{L]7
~2)E)Z
r.[8!w
%3`$4~X
Xe_BT4'
vnop#V
(hri3L
+C9xYM!>
/8SOTN
6AoGJs
*n~nc
|UDG}+V^
U5QxFW
+<Pjha
x]>-H;X
H/ozGk
TR/8Dn
a04Rud
z%~2S2yk
]E\{Vj
V\c]wp
U]^IUve
T(F}r{
f95#[Ms
+78'_E
{@&*f$
fP!,9A^}
O`>x(|
{ xVz
"JCzdN
E"M<9/:u
f!u>L
~d=3Q0
| )Rr%
6iMrUZ
eOr=J
8LoL:i
/h/~3+
ex@Kjk
<B0|q$
S}ewmU
,K+j|f
3XoleNn
P}k904
-[i@f
jh?lE&
kb~4'y
df~&3i
F:cnt$
QP\VC>;
N]|?T'
OP(X6~
wu5@np
DoXsV"
x]KH-a
}bMK8z
J, ?h{{?
o&7^OJ}
3gm4%X
_"(&"*
QHDMTEg
sjv7V2
l5!`Qp
TJH5+
2P-WNJ
t18PUS
B(NNqL{S
bVZ7"l
? "!neN
vLtAph?3
89Y%9Uk
.8 %f}a{
H|\a+H
3dc9NJ{
K`3)Qm`P
Tf}}Gm
#orH];
y l1~@
@bz#rG=
~6GCKJ
~Z.;"Qh4
0VwKv+
R"n'g|
Bf3Y+#
2p{-DQ
;(p=A'
ExNRFc
"Zs&l,
680sB=
|%}G}7
f0BtC.%
J0(Ihg
|u3Oi@
t7vL&&
A5lrD`
Q6rh@l
G/Q.eqmt
=ueu>1[
WRTVf/
X.Mw!7
p#Wa~
S}sHPq+
;w:K,Q
ODYg8*
j`ae>i
DigiCert Inc1
www.digicert.com1!0
DigiCert Trusted Root G40
210429000000Z
360428235959Z0i1
DigiCert, Inc.1A0?
8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA10
[K]taM?
SA|X=G
http://ocsp.digicert.com0A
5http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
2http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
jj@0HK4
DigiCert, Inc.1A0?
8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA10
230113000000Z
260116235959Z0
California1
Santa Clara1
NVIDIA Corporation1
NVIDIA Corporation0
Aoi0Ka
Mhttp://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Mhttp://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0>
http://www.digicert.com/CPS0
http://ocsp.digicert.com0\
Phttp://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
DigiCert, Inc.1A0?
8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
joS&;J
20231102033749Z0
Ontario1
Ottawa1
Entrust, Inc.1+0)
"Entrust Timestamp Authority - TSA1
Entrust.net1@0>
7www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)1%0#
(c) 1999 Entrust.net Limited1301
*Entrust.net Certification Authority (2048)0
991224175051Z
290724141512Z0
Entrust.net1@0>
7www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)1%0#
(c) 1999 Entrust.net Limited1301
*Entrust.net Certification Authority (2048)0
Entrust.net1@0>
7www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)1%0#
(c) 1999 Entrust.net Limited1301
*Entrust.net Certification Authority (2048)0
150722190254Z
290622193254Z0
Entrust, Inc.1(0&
See www.entrust.net/legal-terms1907
0(c) 2015 Entrust, Inc. - for authorized use only1&0$
Entrust Timestamping CA - TS10
T=A^C_(F
http://www.entrust.net/rpa03
http://ocsp.entrust.net02
!http://crl.entrust.net/2048ca.crl0
Entrust, Inc.1(0&
See www.entrust.net/legal-terms1907
0(c) 2015 Entrust, Inc. - for authorized use only1&0$
Entrust Timestamping CA - TS10
221004172103Z
290101000000Z0u1
Ontario1
Ottawa1
Entrust, Inc.1+0)
"Entrust Timestamp Authority - TSA10
_Xg>gX
http://ocsp.entrust.net03
'http://aia.entrust.net/ts1-chain256.cer01
http://crl.entrust.net/ts1ca.crl0
https://www.entrust.net/rpa0
Entrust, Inc.1(0&
See www.entrust.net/legal-terms1907
0(c) 2015 Entrust, Inc. - for authorized use only1&0$
Entrust Timestamping CA - TS1
231102033749Z0)
Entrust, Inc.1(0&
See www.entrust.net/legal-terms1907
0(c) 2015 Entrust, Inc. - for authorized use only1&0$
Entrust Timestamping CA - TS1
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
FileDescription
Brought
FileVersion
1.0.0.0
InternalName
Brought.exe
LegalCopyright
Copyright
2025
LegalTrademarks
OriginalFilename
Brought.exe
ProductName
Brought
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
Antivirus Signature
Bkav W32.AIDetectMalware.CS
Lionic Trojan.Win32.Stelpak.4!c
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Variant.MSILHeracles.179021
CMC Clean
CAT-QuickHeal Clean
ALYac Gen:Variant.MSILHeracles.179021
Cylance Unsafe
Zillya Clean
Sangfor Clean
CrowdStrike win/malicious_confidence_100% (W)
Alibaba Clean
K7GW Clean
K7AntiVirus Clean
huorong Trojan/MSIL.Agent.vl
Baidu Clean
VirIT Trojan.Win32.MSIL_Heur.A
Paloalto generic.ml
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of MSIL/GenKryptik.HGSD
APEX Malicious
Avast Win32:PWSX-gen [Trj]
Cynet Clean
Kaspersky HEUR:Trojan.MSIL.Stelpak.gen
BitDefender Gen:Variant.MSILHeracles.179021
NANO-Antivirus Clean
ViRobot Clean
Tencent Win32.Trojan.FalseSign.Xfow
Sophos Mal/Generic-S
F-Secure Trojan.TR/AD.Nekark.jcdze
DrWeb Clean
VIPRE Gen:Variant.MSILHeracles.179021
TrendMicro Clean
McAfeeD ti!FAD4E974CC16
Trapmine Clean
CTX exe.trojan.msil
Emsisoft Gen:Variant.MSILHeracles.179021 (B)
Ikarus Trojan.MSIL.Krypt
FireEye Generic.mg.936f4b47e08ca094
Jiangmin Clean
Webroot Clean
Varist W32/MSIL_Kryptik.MAV.gen!Eldorado
Avira TR/AD.Nekark.jcdze
Antiy-AVL Clean
Kingsoft MSIL.Trojan.Stelpak.gen
Gridinsoft Trojan.Heur!.000120B1
Xcitium Clean
Arcabit Trojan.MSILHeracles.D2BB4D
SUPERAntiSpyware Clean
Microsoft Trojan:Win32/Wacatac.B!ml
Google Detected
AhnLab-V3 Trojan/Win.Generic.C5731599
Acronis Clean
VBA32 Clean
TACHYON Clean
Malwarebytes Clean
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall Clean
Rising Malware.Obfus/MSIL@AI.86 (RDM.MSIL2:ajG9bOr4a0giQjH12GC91w)
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Clean
Fortinet MSIL/Kryptik.ANCY!tr
AVG Win32:PWSX-gen [Trj]
DeepInstinct MALICIOUS
alibabacloud Clean
No IRMA results available.