ResGen.exe

File Path: C:\Program Files (x86)\Microsoft SDKs\Windows\v10.0A\bin\NETFX 4.8 Tools\ResGen.exe
Description: Microsoft .NET Framework Resource Generator
Comments: Flavor=Retail

Hashes

Type	Hash
MD5	`2CE714E5B060916C5906D89652B1950A`
SHA1	`2C5CFD46A12CE04C6FE221E81FF18B49AEA39386`
SHA256	`2A6F7E904A822302C7D659EC976E897DFF8BCC7F3643DE877C6F87CA9B0A5DF9`
SHA384	`DBF38279D1EB8AC43DC969B36421BB128DE4A1C5AC1D1E99D3CF5A912DE39E90967404569A3B86DEC053CEABD560298E`
SHA512	`2296DBE9C10DC63CC55801A0FFDC22BA9E6514EE78FD447FB6E31A4E58FBBDDAA01A4F4AC064853482F888DF7915B10D82A45E4C3C388410F3053034ED1DF166`
SSDEEP	`1536:AKR6BqOrMJ0OjEirbeMlGQddeXHsYendvLHdjJXu6HV/EgLsqmXitf8TLCnffbe8:e+DEglG+deX2ndD1JeqtEg4qmXitf8TJ`
IMP	`F34D5F2D4577ED6D9CEEC516C1F5A744`
PESHA1	`845A7B3D5CC651723B548FBEE64AA4FC84D1D0EC`
PE256	`6C75F0215DDF05C2334AAF7E2C501180FA6E0190D463F3227F15D4C748E4065C`

Runtime Data

Usage (stdout):

Microsoft (R) .NET Resource Generator 
[Microsoft .Net Framework, Version 4.8.4084.0]
Copyright (C) Microsoft Corporation.  All rights reserved.

Usage:
   ResGen inputFile.ext [outputFile.ext] [/str:lang[,namespace[,class[,file]]]]
   ResGen [options] /compile inputFile1.ext[,outputFile1.resources] [...]
   ResGen inputFile.ext2 [outputDirectory]
Where .ext is .resX, .restext, .txt or .resources
and .ext2 is .resources.dll, .dll or .exe. outputDirectory must already exist.
Resources will be extracted under outputDirectory in resW format.

Converts files from one resource format to another.  If the output
filename is not specified, inputFile.resources will be used.
Options:
/compile        Converts a list of resource files from one format to another
                in one bulk operation.  By default, it converts into .resources
                files, using inputFile[i].resources for the output file name.
/str:<language>[,<namespace>[,<class name>[,<file name>]]]] 
                Creates a strongly-typed resource class in the specified
                programming language using CodeDOM. In order for the strongly
                typed resource class to work properly, the name of your output 
                file without the .resources must match the
                [namespace.]classname of your strongly typed resource class.
                You may need to rename your output file before using it or
                embedding it into an assembly. 
/useSourcePath  Use each source file's directory as the current directory
                for resolving relative file paths.
/publicClass    Create the strongly typed resource class as a public class.
                This option is ignored if the /str: option is not used.
/r:<assembly>   Load types from these assemblies. A ResX file with a previous
                version of a type will use the one in this assembly, when set.
/define:A[,B]   For #ifdef support in .ResText files, pass a comma-separated
                list of symbols.  ResText files can use "#ifdef A" or "#if !B".
/allowUntrustedFiles
                Process files that are in the Internet or Restricted zone or
                have the mark of the web on the file.

Miscellaneous:
@<file>         Read response file for more options. At most one response file
                may be specified, and its entries must be line-separated.

.restext & .txt files have this format:

    # Use # at the beginning of a line for a comment character.
    name=value
    more elaborate name=value

Example response file contents: 

    # Use # at the beginning of a line for a comment character.
    /useSourcePath
    /compile
    file1.resx,file1.resources
    file2.resx,file2.resources


Language names valid for the /str:<language> option are:
c#, cs, csharp, vb, vbs, visualbasic, vbscript, js, jscript, javascript, c++, mc, cpp

Usage (stderr):

ResGen : error RG0000: The file named "help" does not have a known extension.  Managed resource files must end in .ResX, .restext, .txt, .resources, .resources.dll, .dll or .exe. Response files must end in .rsp and be specified as @respFile.rsp.

Child Processes:

csrss.exe wininit.exe

Loaded Modules:

Path
C:\Program Files (x86)\Microsoft SDKs\Windows\v10.0A\bin\NETFX 4.8 Tools\ResGen.exe
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll

Signature

Status: Signature verified.
Serial: 33000001519E8D8F4071A30E41000000000151
Thumbprint: 62009AAABDAE749FD47D19150958329BF6FF4B34
Issuer: CN=Microsoft Code Signing PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: ResGen.exe
Product Name: Microsoft .NET Framework
Company Name: Microsoft Corporation
File Version: 4.8.4084.0 built by: NET48REL1
Product Version: 4.8.4084.0
Language: English (United States)
Machine Type: 32-bit

File Scan

VirusTotal Detections: 0/73
VirusTotal Link: https://www.virustotal.com/gui/file/2a6f7e904a822302c7d659ec976e897dff8bcc7f3643de877c6f87ca9b0a5df9/detection