vbc.exe
- File Path:
C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\vbc.exe
- Description: Visual Basic Command Line Compiler
Hashes
| Type |
Hash |
| MD5 |
C189626864BC267D0321B7CCA6DD5586 |
| SHA1 |
B8587DC8C96F242D622F99128AB889A62E1FA274 |
| SHA256 |
1BAEA4A35DAAB07203753FD875D59E4058C2872A03587BF3FF933546A2EF26A8 |
| SHA384 |
454292F1E587AAF52996AE04B444E0A8EB732C4F933646A9616CF95E47C39CAF817A7132C0FBF5D9DBD2228FDD86CA33 |
| SHA512 |
32E0B95462423151EB34F9D094C4B7B2162522A3CD24E3AF71036B0F659ED8489662A076F25EE8E421A18B44F71645BA50DD94C6F834AC0CBB07D161051BBBB6 |
| SSDEEP |
49152:7Wt/e5tGMP6E/J2gEnA6YPLRU0hM5wKOcfOhGiLCa/Noz2j+19uPdQ0qXCcZ:NP4lApU0hM5w1RCgNoKj5a |
| IMP |
820E2A2386C426F41813BF1E25691EB0 |
| PESHA1 |
73E817FE140A36907C9E354B15DD43FC2C289A0A |
| PE256 |
B4B8A6CE6361E8B7F7ACC7E03A41ECDAF2443F6EE7D0966FF92C81B914F71EED |
Runtime Data
Usage (stdout):
Microsoft (R) Visual Basic Compiler version 14.8.4161
for Visual Basic 2012
Copyright (c) Microsoft Corporation. All rights reserved.
This compiler is provided as part of the Microsoft (R) .NET Framework, but only supports language versions up to Visual Basic 2012, which is no longer the latest version. For compilers that support newer versions of the Visual Basic programming language, see http://go.microsoft.com/fwlink/?LinkID=533241
Visual Basic Compiler Options
- OUTPUT FILE -
/out:<file> Specifies the output file name.
/target:exe Create a console application (default). (Short form: /t)
/target:winexe Create a Windows application.
/target:library Create a library assembly.
/target:module Create a module that can be added to an assembly.
/target:appcontainerexe Create a Windows application that runs in AppContainer.
/target:winmdobj Create a Windows Metadata intermediate file
/doc[+|-] Generates XML documentation file.
/doc:<file> Generates XML documentation file to <file>.
- INPUT FILES -
/addmodule:<file_list> Reference metadata from the specified modules.
/link:<file_list> Embed metadata from the specified interop assembly. (Short form: /l)
/recurse:<wildcard> Include all files in the current directory and subdirectories according to the wildcard specifications.
/reference:<file_list> Reference metadata from the specified assembly. (Short form: /r)
- RESOURCES -
/linkresource:<resinfo> Links the specified file as an external assembly resource. resinfo:<file>[,<name>[,public|private]] (Short form: /linkres)
/nowin32manifest The default manifest should not be embedded in the manifest section of the output PE.
/resource:<resinfo> Adds the specified file as an embedded assembly resource. resinfo:<file>[,<name>[,public|private]] (Short form: /res)
/win32icon:<file> Specifies a Win32 icon file (.ico) for the default Win32 resources.
/win32manifest:<file> The provided file is embedded in the manifest section of the output PE.
/win32resource:<file> Specifies a Win32 resource file (.res).
- CODE GENERATION -
/optimize[+|-] Enable optimizations.
/removeintchecks[+|-] Remove integer checks. Default off.
/debug[+|-] Emit debugging information.
/debug:full Emit full debugging information (default).
/debug:pdbonly Emit PDB file only.
- ERRORS AND WARNINGS -
/nowarn Disable all warnings.
/nowarn:<number_list> Disable a list of individual warnings.
/warnaserror[+|-] Treat all warnings as errors.
/warnaserror[+|-]:<number_list> Treat a list of warnings as errors.
- LANGUAGE -
/define:<symbol_list> Declare global conditional compilation symbol(s). symbol_list:name=value,... (Short form: /d)
/imports:<import_list> Declare global Imports for namespaces in referenced metadata files. import_list:namespace,...
/langversion:<number> Specify language version: 9|10|11.
/optionexplicit[+|-] Require explicit declaration of variables.
/optioninfer[+|-] Allow type inference of variables.
/rootnamespace:<string> Specifies the root Namespace for all type declarations.
/optionstrict[+|-] Enforce strict language semantics.
/optionstrict:custom Warn when strict language semantics are not respected.
/optioncompare:binary Specifies binary-style string comparisons. This is the default.
/optioncompare:text Specifies text-style string comparisons.
- MISCELLANEOUS -
/help Display this usage message. (Short form: /?)
/noconfig Do not auto-include VBC.RSP file.
/nologo Do not display compiler copyright banner.
/quiet Quiet output mode.
/verbose Display verbose messages.
- ADVANCED -
/baseaddress:<number> The base address for a library or module (hex).
/bugreport:<file> Create bug report file.
/codepage:<number> Specifies the codepage to use when opening source files.
/delaysign[+|-] Delay-sign the assembly using only the public portion of the strong name key.
/errorreport:<string> Specifies how to handle internal compiler errors; must be prompt, send, none, or queue (default).
/filealign:<number> Specify the alignment used for output file sections.
/highentropyva[+|-] Enable high-entropy ASLR.
/keycontainer:<string> Specifies a strong name key container.
/keyfile:<file> Specifies a strong name key file.
/libpath:<path_list> List of directories to search for metadata references. (Semi-colon delimited.)
/main:<class> Specifies the Class or Module that contains Sub Main. It can also be a Class that inherits from System.Windows.Forms.Form. (Short form: /m)
/moduleassemblyname:<string> Name of the assembly which this module will be a part of.
/netcf Target the .NET Compact Framework.
/nostdlib Do not reference standard libraries (system.dll and VBC.RSP file).
/platform:<string> Limit which platforms this code can run on; must be x86, x64, Itanium, arm, AnyCPU32BitPreferred or anycpu (default).
/sdkpath:<path> Location of the .NET Framework SDK directory (mscorlib.dll).
/subsystemversion:<version> Specify subsystem version of the output PE. version:<number>[.<number>]
/utf8output[+|-] Emit compiler output in UTF8 character encoding.
@<file> Insert command-line settings from a text file.
/vbruntime[+|-|*] Compile with/without the default Visual Basic runtime.
/vbruntime:<file> Compile with the alternate Visual Basic runtime in <file>.
Loaded Modules:
| Path |
| C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\vbc.exe |
| C:\WINDOWS\System32\KERNEL32.DLL |
| C:\WINDOWS\System32\KERNELBASE.dll |
| C:\WINDOWS\SYSTEM32\ntdll.dll |
Signature
- Status: Signature verified.
- Serial:
33000002ED2C45E4C145CF48440000000002ED
- Thumbprint:
312860D2047EB81F8F58C29FF19ECDB4C634CF6A
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: vbc.exe
- Product Name: Microsoft .NET Framework
- Company Name: Microsoft Corporation
- File Version: 14.8.4161.0
- Product Version: 14.8.4161.0
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/75
- VirusTotal Link: https://www.virustotal.com/gui/file/1baea4a35daab07203753fd875d59e4058c2872a03587bf3ff933546a2ef26a8/detection
File Similarity (ssdeep match)
Possible Misuse
The following table contains possible examples of vbc.exe being misused. While vbc.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.
MIT License. Copyright (c) 2020-2021 Strontic.