popup
Static | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Static Analysis

PE Compile Time

2068-11-10 11:07:17

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0000d5e4 0x0000d600 5.563479485
.rsrc 0x00010000 0x00000800 0x00000800 5.0072880977
.reloc 0x00012000 0x0000000c 0x00000200 0.0815394123432

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x000100a0 0x00000574 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_MANIFEST 0x00010614 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
• 0x402000 _CorExeMain
!This program cannot be run in DOS mode.
`.rsrc
@.reloc
%rw%
% r{%
%%r{%
%Br/%
%Hr3%
%Ir7%
%Jr;%
%Kr?%
%LrC%
%MrG%
%NrK%
%OrO%
%PrK%
%QrS%
%RrW%
%SrG%
%Tr[%
%Ur_%
%Vrc%
%Wrg%
%Xrk%
%YrW%
%Zro%
%[rs%
%\rw%
%]r{%
%br{%
%tr/%
%zr/%
%~r3%
%0r3%
%1r7%
%2r;%
%3r?%
%4rC%
%5rG%
%6rK%
%7rO%
%8rK%
%9rS%
%:rW%
%;rG%
%<r[%
%=r_%
%>rc%
%?rg%
%@rk%
%ArW%
%Bro%
%Crs%
%Drw%
%Er{%
%Jr{%
%]r/%
%dr3%
%er7%
%fr;%
%gr?%
%hrC%
%irG%
%jrK%
%krO%
%lrK%
%mrS%
%nrW%
%orG%
%pr[%
%qr_%
%rrc%
%srg%
%trk%
%urW%
%vro%
%wrs%
%xrw%
%yr{%
%~r{%
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
v4.0.30319
#Strings
ValueTuple`1
List`1
ToInt32
ConstantSplittableMap`2
System.IO
RemotingXmlConfigFileData
mscorlib
System.Collections.Generic
Microsoft.VisualBasic
Synchronized
Replace
Evidence
set_AutoScaleMode
IConstructionReturnMessage
IDisposable
RuntimeTypeHandle
GetTypeFromHandle
CallByName
System.Runtime.InteropServices.WindowsRuntime
CallType
Capture
ApplicationSettingsBase
Dispose
EditorBrowsableState
CompilerGeneratedAttribute
OnDeserializedAttribute
GeneratedCodeAttribute
DebuggerNonUserCodeAttribute
EditorBrowsableAttribute
DefaultSettingValueAttribute
UserScopedSettingAttribute
ParamArrayAttribute
WriteByte
ToByte
get_Value
set_ClientSize
ToString
disposing
System.Drawing
get_Length
System.Security.Principal
System.ComponentModel
ContainerControl
MemoryStream
get_Item
set_Item
System
Boolean
System.Deployment.Internal.Isolation
System.Configuration
System.Runtime.Remoting.Activation
System.Globalization
System.Runtime.Serialization
DuplicateEvidenceAction
Interaction
System.Reflection
MatchCollection
GroupCollection
WebHeaderCollection
Exception
CultureInfo
ToChar
ResourceManager
System.CodeDom.Compiler
IContainer
CaseInsensitiveComparer
DynamicResolver
IEnumerator
GetEnumerator
.cctor
System.Diagnostics
System.Runtime.CompilerServices
System.Resources
.Properties.Resources.resources
Matches
System.Windows.Forms
Contains
System.Text.RegularExpressions
System.Collections
get_Groups
get_Chars
get_Headers
Concat
Format
Object
System.Net
System.Reflection.Emit
WebClient
get_Current
Convert
DestroyScout
MoveNext
set_Text
System.Security.Policy
get_Assembly
ContextAttributeEntry
IIdentity
YQOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
!QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
qQOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
QOsOtO
O]OgOyO^OfOzO
:0:):,:&:):+:
:.:&:$:
:):#:2:
3System.Resources.Tools.StronglyTypedResourceBuilder
4.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
16.6.0.0
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>PA
/evrUDZYahXVeuBHnCekpBCNOLZDkzjuTVJdHsboJYEFOofa1
RXeGlhuKCICjDvOAXD1503
,ciLyaUBPBrWYAFZLmuCjLBZBZPRKnjeHlXotXjevGdNF1200
#JcDEKBfvurHMXaeKfnhSoNoIKsplxOeylVp1
NngDIYmRUqC1:08
1wWeuptVqWOVTsmUYGmiAbLrwZJzUcWusiVtgcyLDqEtYsmlvd1+0)
"nkIhbulMYqJwanZuDKwTOWhBFkwstdMydQ1!0
PLkhBitdibgprtEPCPCprdgC0
210324225034Z
220324225034Z0
/evrUDZYahXVeuBHnCekpBCNOLZDkzjuTVJdHsboJYEFOofa1
RXeGlhuKCICjDvOAXD1503
,ciLyaUBPBrWYAFZLmuCjLBZBZPRKnjeHlXotXjevGdNF1200
#JcDEKBfvurHMXaeKfnhSoNoIKsplxOeylVp1
NngDIYmRUqC1:08
1wWeuptVqWOVTsmUYGmiAbLrwZJzUcWusiVtgcyLDqEtYsmlvd1+0)
"nkIhbulMYqJwanZuDKwTOWhBFkwstdMydQ1!0
PLkhBitdibgprtEPCPCprdgC0
1(N-{Z
/evrUDZYahXVeuBHnCekpBCNOLZDkzjuTVJdHsboJYEFOofa1
RXeGlhuKCICjDvOAXD1503
,ciLyaUBPBrWYAFZLmuCjLBZBZPRKnjeHlXotXjevGdNF1200
#JcDEKBfvurHMXaeKfnhSoNoIKsplxOeylVp1
NngDIYmRUqC1:08
1wWeuptVqWOVTsmUYGmiAbLrwZJzUcWusiVtgcyLDqEtYsmlvd1+0)
"nkIhbulMYqJwanZuDKwTOWhBFkwstdMydQ1!0
PLkhBitdibgprtEPCPCprdgC
>Rx>(0
20210324225034Z
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Timestamping CA0
210101000000Z
310106000000Z0H1
DigiCert, Inc.1 0
DigiCert Timestamp 20210
http://www.digicert.com/CPS0
,http://crl3.digicert.com/sha2-assured-ts.crl02
,http://crl4.digicert.com/sha2-assured-ts.crl0
http://ocsp.digicert.com0O
Chttp://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
QJxy6z'
dwc_#Ri
DigiCert Inc1
www.digicert.com1$0"
DigiCert Assured ID Root CA0
160107120000Z
310107120000Z0r1
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Timestamping CA0
fnVa')
http://ocsp.digicert.com0C
7http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
4http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
4http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
https://www.digicert.com/CPS0
8aMbF$
V3"/"6
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Timestamping CA
210324225034Z0+
,)WeGL
aGIfpUBtFn
{0}{1}{2}{3}{4}{5}{6}{7}{8}{9}{10}{11}{12}{13}{14}{15}{16}{17}{18}{19}{20}{21}{22}{23}{24}{25}{26}{27}{28}{29}{30}{31}{32}{33}{34}{35}{36}{37}{38}{39}{40}{41}{42}{43}{44}{45}{46}{47}{48}{49}{50}{51}{52}{53}{54}{55}{56}{57}{58}{59}{60}{61}{62}{63}{64}{65}{66}{67}{68}{69}{70}{71}{72}{73}{74}{75}{76}{77}{78}{79}{80}{81}{82}{83}{84}{85}{86}{87}{88}{89}{90}{91}{92}{93}{94}{95}{96}{97}{98}{99}{100}{101}{102}{103}{104}{105}{106}{107}{108}{109}{110}{111}{112}{113}{114}{115}{116}{117}{118}{119}{120}{121}{122}{123}{124}{125}{126}{127}{128}{129}{130}{131}{132}{133}{134}{135}{136}{137}
{0}{1}{2}{3}{4}{5}{6}{7}{8}{9}{10}{11}{12}{13}{14}{15}{16}{17}{18}{19}{20}{21}{22}{23}{24}{25}{26}{27}{28}{29}{30}{31}{32}{33}{34}{35}{36}{37}{38}{39}{40}{41}{42}{43}{44}{45}{46}{47}{48}{49}{50}{51}{52}{53}{54}{55}{56}{57}{58}{59}{60}{61}{62}{63}{64}{65}{66}{67}{68}{69}{70}{71}{72}{73}{74}{75}{76}{77}{78}{79}{80}{81}{82}{83}{84}{85}{86}{87}{88}{89}{90}{91}{92}{93}{94}{95}{96}{97}{98}{99}{100}{101}{102}{103}{104}{105}{106}{107}{108}{109}{110}{111}{112}{113}{114}{115}{116}{117}{118}{119}{120}{121}{122}{123}{124}{125}{126}{127}{128}{129}{130}{131}{132}{133}{134}{135}{136}{137}{138}{139}{140}{141}{142}{143}{144}{145}{146}{147}{148}{149}{150}{151}{152}{153}{154}{155}{156}{157}{158}{159}{160}{161}{162}{163}{164}{165}{166}{167}{168}{169}{170}{171}{172}{173}{174}{175}{176}{177}{178}{179}{180}{181}{182}{183}{184}{185}{186}{187}{188}{189}{190}{191}{192}{193}{194}{195}{196}{197}{198}{199}{200}{201}{202}{203}{204}{205}{206}{207}{208}{209}{210}{211}{212}{213}{214}{215}{216}{217}{218}{219}{220}{221}{222}{223}{224}{225}{226
{0}{1}{2}{3}{4}{5}{6}{7}{8}{9}{10}{11}{12}{13}{14}{15}{16}{17}{18}{19}{20}{21}{22}{23}{24}{25}{26}{27}{28}{29}{30}{31}{32}{33}{34}{35}{36}{37}{38}{39}{40}{41}{42}{43}{44}{45}{46}{47}{48}{49}{50}{51}{52}{53}{54}{55}{56}{57}{58}{59}{60}{61}{62}{63}{64}{65}{66}{67}{68}{69}{70}{71}{72}{73}{74}{75}{76}{77}{78}{79}{80}{81}{82}{83}{84}{85}{86}{87}{88}{89}{90}{91}{92}{93}{94}{95}{96}{97}{98}{99}{100}{101}{102}{103}{104}{105}{106}{107}{108}{109}{110}{111}{112}{113}{114}{115}{116}{117}{118}{119}{120}{121}{122}{123}{124}{125}{126}{127}{128}{129}{130}{131}{132}{133}{134}{135}{136}{137}{138}{139}{140}{141}{142}{143}{144}{145}{146}{147}{148}{149}{150}{151}{152}{153}{154}{155}{156}{157}{158}{159}{160}{161}{162}{163}{164}{165}{166}{167}{168}{169}{170}{171}{172}{173}{174}{175}{176}{177}{178}{179}{180}{181}{182}{183}{184}{185}{186}{187}{188}{189}{190}{191}{192}{193}{194}{195}{196}{197}{198}{199}{200}{201}{202}{203}{204}{205}{206}{207}{208}{209}{210}{211}{212}{213}{214}{215}{216}{217}{218}{219}{220}{221}{222}{223}{224}{225}{226
WindowsFormsApp1.Properties.Resources
VS_VERSION_INFO
StringFileInfo
040904e4
Comments
CompanyName
FileDescription
FileVersion
8.937.783.845
LegalCopyright
All Rights Reserved
InternalName
LegalTrademarks
OriginalFilename
ProductName
ProductVersion
8.937.783.845
Assembly Version
8.937.783.845
VarFileInfo
Translation
Antivirus Signature
Bkav Clean
Elastic malicious (high confidence)
MicroWorld-eScan Clean
CMC Clean
CAT-QuickHeal Clean
Qihoo-360 Clean
ALYac Clean
Cylance Clean
VIPRE Clean
AegisLab Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
Cybereason Clean
Baidu Clean
Cyren W32/MSIL_Kryptik.DNK.gen!Eldorado
TotalDefense Clean
APEX Malicious
Avast FileRepMalware
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Clean
Ad-Aware Clean
Emsisoft Clean
Comodo Clean
F-Secure Clean
DrWeb Trojan.Siggen12.56601
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Artemis!Trojan
FireEye Generic.mg.ee27001b12f64424
Sophos Clean
Ikarus Trojan-Downloader.MSIL.Agent
GData Clean
Jiangmin Clean
Webroot Clean
Avira Clean
MAX Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm UDS:DangerousObject.Multi.Generic
Microsoft Program:Win32/Wacapew.C!ml
Cynet Clean
AhnLab-V3 Clean
Acronis Clean
McAfee Artemis!EE27001B12F6
TACHYON Clean
VBA32 Clean
Malwarebytes Clean
Panda Clean
Zoner Clean
ESET-NOD32 a variant of MSIL/TrojanDownloader.Agent.HPX
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
SentinelOne Clean
eGambit Unsafe.AI_Score_99%
Fortinet Clean
BitDefenderTheta Gen:NN.ZemsilF.34628.dm1@aOnHN0pi
AVG FileRepMalware
Paloalto Clean
CrowdStrike Clean
MaxSecure Clean
No IRMA results available.