Static | ZeroBOX

Name	Virtual Address	Virtual Size	Size of Raw Data	Entropy
.text	0x00002000	0x000f7ce4	0x000f7e00	7.43594951163
.rsrc	0x000fa000	0x000005c8	0x00000600	4.16211699861
.reloc	0x000fc000	0x0000000c	0x00000200	0.101910425663

Name	Offset	Size	Language	Sub-language	File type
RT_VERSION	0x000fa0a0	0x0000033c	LANG_NEUTRAL	SUBLANG_NEUTRAL	data
RT_MANIFEST	0x000fa3dc	0x000001ea	LANG_NEUTRAL	SUBLANG_NEUTRAL	XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

!This program cannot be run in DOS mode.

`.rsrc

@.reloc

Z?_b`

BZ QF@{a+

ZtZ G[

TZ ^^V

Z s;k0a8Q

u{.XZ U

h-aa8l

,;|%&8

_y(Z ]SY

RG V\Z{a%

oJtmZ

_Ooa%

T-B@%&

_bj/

_bY*

Z grB'a+

bXea8n

Vw:Z eW=ga8=

I=@Z 5Qm

h1xN%&

oaIAa%

Z_bX

ujxj+

g<k&%+

Zu%&8*

z$?a8O

E1!eZ

Y_cX*

mUZ #=d'a8

C~Z NT'

:cl5Z

H4HZ @

WG{< e

cebZa+

Z vT2Ha+

7=WZ q

"yX:(

K J7PGa%

JZ W>"za8v

X#s.

T(s-

>K`RZ

%(ra8S

X#s.

*QLHZ

#Z #q\Na8

uK'KZ j

xZ c<f

~`%Z q-

AZ Du5fa8

f#*-(

Z |N3$a8u

w`<7Z

{*[=Z

TWs-

m_.9Z

1\c0Z

6@ta89

c_lZa+

GYaAZ =

22s.

xknZa8U

U @%Z Xsdqa8-

+K{"a%

FX$CZ

6mZ s#z

a@\pZ

Z <O]ja8

2.1a8g

Q3Z ,V

zb BZ

yesZ ^

kpGa8~

0L[a86

Z 6psra8

lZ m}\

>8Z)(

4,?F(

c)Z 10

}Fd;Z

+`Aa8L

w^FZ J

jwZ 6K#

TlOa8\

wp6a8M

Z Y;Zua8

^|^](

Z -%-fa8

B=`5Z (

\6Z R

,oZ ~6

n`hwZ

hp8a8T

Y.`A

Z [+x"a8%

fPfa8t

2CZ F]

$)'Z $

&;Na8Z

>41aZa8

c.ea8a

xF>RZ

{*EZ 9

IqdZ 0[

_b_-

"Z [Rq9a8y

Z E\#ma8

+; h+R

_c_-

cP6q%+

',uZ R

XZ OUIEa8

Z q=[ia8

'23G8

Z l*sXa8

.DIZ 9Z

Z &N.Fa8

;)u6Z %

RN0%&82

,N FU,

4Z -+E

ea1WZ

Z rYD a+

bq+4%+

+hy%&8#

Z winTa8%

T`Z ^$

y #Uz)a%

Z^"Za8

Z _oQ#a8

/Z i1C

LZ xBO

.g}Z -

[^ba8@

$|YZ ;

&F(a8+

8Z !a&*a8+

Cona8"

ijJZ E%

Z >4d[a8z

Z aW7ra8g

Yqc"Z _D

}RZ Aq|

rsaZ D

J6"tZ

42@a88

m2<a85

Z vAJ{a8b

Z (WdAa8&

A$6Z F!VQa8

Al7+Z

FlJZ O

'a[>Z DOM

e%:Z \C

kZ d=}ma8

mFtfZ W

bLdZ f9

+_|^8

X0\a8E

bA"Z h

.Z Xxt

-lc!8V

@J/Z T

euMZ O

Y;9+Z

j=n!Z

F8\a8L

'L*X8;

`]A=8

.q*C8

VsPZ (

]Z KlA6a8

6Z fr#Za8*

fzZ p#

ms(Z oL

M:AsZ

<F,58

.%r7Z

_B?NZ

jy{{Z w

q Qa8r

Z v|QHa8

g/d~Z

xZ 9vf

yj]a8j

SWjfZ

\ ZgI^a%

F]Z 9?wea+

Z xZKYa+

H/? by

'l*%(

lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet

hSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD

QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a

System.Drawing.Bitmap

VIDAThC

RA@l\,

^I7O(R

lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet

hSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD

QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a

System.Drawing.Bitmap

QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a

System.Drawing.Bitmap

IDATXG

lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet

hSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPADM

QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a

System.Drawing.Bitmap

IDAT8O

QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a

System.Drawing.Bitmap

IDAT8Oc

QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a

System.Drawing.Bitmap

IDAT8O

m_,!8T

s+B/,{\

Lech2(

QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a

System.Drawing.Bitmap

IDAT8O

m_,!8T

s+B/,{\

Lech2(

QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a

System.Drawing.Bitmap

IDAT8O

Iu'[}gJ

{3T[2_

QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a

System.Drawing.Bitmap

IDAT8O

Iu'[}gJ

{3T[2_

QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a

System.Drawing.Bitmap

XIDAT8O

)%<QEh|

QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a

System.Drawing.Bitmap

XIDAT8O

)%<QEh|

QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a

System.Drawing.Bitmap

WIDAT8O

0Cwa&`Bt

QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a

System.Drawing.Bitmap

IDAT8O

QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a

System.Drawing.Bitmap

IDAT8O

QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a

System.Drawing.Bitmap

*IDAT8O

QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a

System.Drawing.Bitmap

*IDAT8O

QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a

System.Drawing.Bitmap

IDAT8O

QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a

System.Drawing.Bitmap

/IDAT8O

]t[Sc8

QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a

System.Drawing.Bitmap

/IDAT8O

]t[Sc8

QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a

System.Drawing.Bitmap

IDAT8O

$dX_wUFvC

fj;I=

RcFJ.D

QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a

System.Drawing.Bitmap

IDAT8O

lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet

PADPADP

lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet

PADPADP

lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet

hSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD?b

QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a

System.Drawing.Bitmap

IDATx^

JeHe(E

u~TDcvz-

Bl%f}+

Qpb\X3

T7jR.q

&a4a7cgx

X_&xO2

azcXab

%SNMnf

XN>LF9

|8Axv3

OM:k

E{k6J7

{l8-QB

k=4Ejq_6C

8"w9`rv

agj0;P@

ryN6t

7@tt0kn

OdET!q

dnL#O#

LBxx:;w

$*NG3uI

,vKdNq

rW,X~

<KJ$0a

91|##n\C

ku:Kd

h[rG|d

rmC>*'

+2C~;Y

CFd,ySF

gL`rZ"

:|lXL

a$gN!<^

s<7v;quP

k,5w#;

-RCj\7O

a$vpa

dm4rj_(

2lT>3rC$u

TKMI<!

e)SC#I

N\jcYt

2lU _T

'R+w"4

tzJYf8

;-tL3"

d9B'UQ

mVNxM&I

5YAed<<Ai

n)5>V$_

dnV1u}}

HSIVTFEEe

I%EHI$]

K%ccsX

!;~-[F

MuYtt&

%}j,wj<

8u;BTT

"hC:Ua

q`~\&S

$Aq2BQ

K@O5?s

iSuh]n

>c1v:>u

5#{t$?

1N(inc

JRoDfS-&)

SsO`FQ

>QD<~I

/9Sn``XN

%tW?2e

\&d'1!e

fczK/Q^=

Ib&75j

FaY1R`

g]ZX^wg_

|lL!Ff

>K?wP,

maDhM%u

ug&:kR

ibn{"~T

| Bwv!

E2dY(w

.Xc<_C

@`Uj}X

WJ/S,jx8

vQrl$N=

3RWHR>&

EzN#.Y+9

,]9%YD

%.my,]z

,GS`8{j

It~*0j

BnK+[?J0

=)0>9S

o[0wkb

q~<mG'

vgZ|4~R

o|i+O"&

iw89x7

CjI$fa'X=

2Dc*9O

~(uDsd

Qy6|_k

gG60yz

.&6Ih\

v_dhJ8

A`md&

V&Qyu0k

vXvG0?}

YIQg,{

Lg$6h2`

D:e#w\

jj=liV

ZRA}Q)

%'^0:q

/u`Cs/

IDATyNh

)pA|'R

_dzX`a

v>@!s4

+6*QSp

i#Pq0%Pf 1#

^3ejw0

NR#KP6

+}UV:(0

e.GFa'0

"T]V!

J?rRl>-

QV3@2

'{Fqc

nZv,Gr

~TtFQ1

l g=g

.CID+)

0~_kfd

%0ga=Y

|*5:Yl8

X"Do">

'Qgw"!

|~vt1Gn

1[b!}c>

5b./<d

JVw=g

MG4a:)

rEeU5vo

h_rBhX"

3iL*/KC

Ia&rwW

9v99.b

>.9*2"

f[Lmg

){+Msw

Hel?Q<

r|"NSV

zr v&

^ubqz

Gnx0+}B

y^G@v<

[/Tr;

EIq*Gg

/pv1dC

%z)m\o

}??A(*

l;NdE'j

b[W)*':

aNMo(qG

$F1iG-W

}:%g{X

_$pHPf+f

acv/5_

wV2_a*5

-A2j"7

{0z\(?

#YVH`r.

cH!_=

K!(x?q

3ayh.R%i

Z6|2Gg

IKV6Rw$

fe1Fh7

L.vCNPj~

17l")2

'fa3g#.

<.]i`z

iRf}"!

t{"+Cw1

=dYye"

(jMb@K9

iTwk3DJPD=

f:d/pp

@{rK>b

<\Y|.B`

='tM-6

[FKxu.

'>^ZT/J

iRBEI[v

6weVc5E

&w'J'D

G3Si5}

TV)B;Q

JH**I*

t1;+[)

M|V_")

mN9Y3*

mPZ+GN

8eiadt

6rwt*

uX)*7o

?eo8;<,

i[(-KBp

k2yLs9

H7O&ow

H]P~AD

!=_/!cc

1?B'{cp

iruG~F(

pgFN?D

=~?"

o,:g{y

a?7[-y

z5EE?X

1#4c>0

?V1>j&

gf`7e*9o

Ho/l*:p

fSm,cF|

[4U^G?

8%Cfqz

;?vu<E

:#"0'_

}9ub=O

!?Wl h

fc6g2{

:9X)N&I!Z

f4GZS0

IjN&Gs>

}[#i_g

7nl(3@[

q<(=N.^

4JP0+fZ

J`<Q;

+MPS)G

7=<IyAx

0K~U"9`

7aSnsz

V`[A{3

f^'":K

[FI^%J

x=9aAd

Fxx+

C?21o>

CY^<;w

K6F$3a

/{eh6T`

bVW&2b

8mpCOf

*J\[)/Ww

K'HHl"O{%w

LF[{=Z1

}bd]=M

xf/[Z"

\<pJpN

&r(O}

V#)&Sp-

KApVg&

1t)}chF

}(_3bk

4WB^{3j_9

z7KvY\'

"pa:m#

V3r\(Q]=

bDcx<C

FO?2qY

-EFGoB

2e?*)Qt

qpY!RSr

"bn"O

`IHG.?\

;$ck8<J

[MiU /"

vyR4Gb

NTcb

NOJ(Xs

Gke0m=;

Np(kI

.g_J<S

\6gbo_

H*Gb!n

O>N|L:

BzGz"t

[Os~u~c

!AHx4j]

GiAq62

T"JRfDI)I

uJ1!FFh

|82R%(

%}S)Gbd

m;*^e,m

d6KG4s!

/U`JU=

rF<@vl*G

$2%MF`2

""?5ylPJ

HZo/~2

w4zBal

mFhc,k.

~*27+y

?+q{,,

|:^i:4

CVr=u%

$7/,$WP

<h&ofm

{9FO;I

2qi:1;

*req*B

vN$- wk

Y*013RvGS

O38iVC

`dTTiu:

\~L`u02v2\

N|GN&a

^CVT*.

rvdv3_

r0':+QzjLs

dD9Q:z

Yj<i[f

>c<Z5N

SDQ_cD

0Ac="*

V(j"Fl

#(G{Q?

TSw}4r

IDAT6g

^zrB|!

prS13^

Hc<+bDx

A1.z;0J

f={$zx

+d8wh

/c{[.

S~kEsB_

H0#v2y

?nd.?<x\&

n*K4txl

QV(&O$

OJ&G{;

5#`x's

/9!]lZcDO

}\]0+[

XtRMy!#(

F6rhb:

O5C'lc

-AFo5/Z

X@xeOC

;r #2n

47qC``N5

h$_\a_

+d73($

CRRQJ

"'Musv

LTNG<q/%Z

+&q'f*

rfh7.

tYl&a

)X`]0

LOyp)i

dnkfpiY

_3NWp?

`n\5S#

Yu3*`0W{

*"*.1%L

gC%9~r

|Z4#X6n-

lQ!EbF,

]GYT83o

S$aM}e

&Q'6q'%

-,C^d*"

1rm2Sz

O')o3f

D5LEW.

dKrJ_4

EVi4#sjY#%(

`7gf*qz

H<. Y]

r_h5Jg

cBn|7{

,v_|Ja

kr0TxB

z;k>p&

#P_,OR

h3<n%9

.Ky RF

/Ocwz)

eKSx7!

E-Y*eC

C?6r1a

hS1R&i

ARr$3?

4.Zql)

+Jl{!E

RQ,OZsy

R,";&1

xBrgPq

Kh%tqr

HvN_K4

.Dsy%6

l<YgCI

6)gvP<

@y_Gz-

,~^WBz

3}./#l

Z12*f'W

p(i%7n

sF4o5'3]d

.cqg4C6O

Bq#*A

#yw47_U

}?R7b'

$5n/[LD

!Iz-x{

=*Y|J

^=doQ(

>d;:1+

,O?o{V

4",WqAP

ysd|bp

kH'&"%u

]y ;BP

Y1{2?`b1

htScOY.7

'Vob^K

tk_fDy

sAJDE(

R!rz;9

0}>^Ai3

MYXj\!fq

,JC^3H

=y!wo,

MoX/[u

[<:5Yp

($VFqj@

(S=93s3

<'?=%z

;3,v4-;l96.

j.l^AU

+g$`&4

s =sDP

.t'#y f

"t`!#+7s>

'V5}fT\

Dihs5'

-Cf~q#

da1R3's

Ptv;3v

oExx-z

`x7W|k

)G{84J

83'nCqE-

O1eS?o

DE?_Dv

>}"_|D

S>Ahb9{

s?|`Be,

oSbla7

QH&Yt/kTg

l+gD^+v

GvqpC .]#

`5rO_"q

`NVo 6f

_*2KH@

~)3{C(

DDOG:;

[:^+Qj

X?Qd"~

5T00v=

khzcNS

zzn`wo

DG&7;&

H*mI!I%

'Cpn;j)

/<'<Bb

DIx5}l

`4sk:8

w5 :{

>3kX1U

/aQ0Q`

jC&{1

d,\MI5

~ssw9"

'0!c:C

r!Vh2[

`qq8S>J

ig_3g\

l93^L*"0w

zS%>\>

(N_N$wT*sjo

gXZ=sF_

\_b4q$k

<Kp{]D

uMf$g39K

KB';ve

~.%9VP

Q{^0+^

5}%}o|

jb7,%oI&O

[+]K^a

G^FjK i7z)

/f3kz/

rM ScN2

c;qg?az

G'Iw^D

!bM*<_

$>MPNW

uJX,ne

Vn*F_

ha="7:(

HA|K*[

yo_~HJ

De`4;'x

H~NAZ?

AXY9VO

K\-Vcd{

&kj?#t

i8qqV<

~u,FYp

&Bg'2t

al7I3f

((Y5V]6

^r4y~D

~/6b.(

eov/Ud

E3b[d0

WYNQX_>%g

OY}Y3]

2q:{?FQ

Iv_xK[

#)9%x(

X26:!#6

f$Ksq}

~fO)\8

7UKL?h0

s{*s=6

MJo8"o

JL!MOw

F9Zo(`

*X=oeur

UQKo~1G

?[~<`a

_dg{o"

s|Q2r

@;s>ea#

zU9>SP

Qq=Fp\

(W>DN~

R}Lb^"

-5]_x$

gJ(o6d

)q4&jz"7

s)BOzI

]qoH}m

x/)ofb4U

Ghpmg@

Z!On;m

o<'cc.

N_DaT6

Q/88s+

n?asU>N

]b jv-

O,cB}$

\z3_&f

nhcHj#/]

_d[2L1

(5&KyST

$#04Wb

g6r4g#

S5nv*`

.mgbT1kF

;]s&S}Z

O5UcfqF*

eS:g5_

ULuD0t

HNO-]W

ayu1a[fS

!.I5x}

}uhWj#0

j,cE'Bc4'

sfw2qY

P6N 4R

RW\0Wu

+!TiU1

LAE0[)

/QZPl?p

A}|g|&

N7WR[92

7rzxc

r_nF:#W

LDdI*)

.C[&b=WP

XF::2m

l#X`D=K

$#<s(+

CI+,bb

PPRwZ7

H=vVPJR\

3HtWp;

QVwI`y}Y

@Zx-)^/

pBa!/6

n4e.abf

i72CVsl

a{y57V

jussv,

j(k=}y

*&6NA*`0

bF+7]^3

SVOWft

n~$ll4g2

t3o~8sd

Dk~,W?

\jfxr`}

m%1i+J

DGMB$:

-'mS9-u

X/#[`vS

c4F>bG

(dF^`I

ov]w'y

u7&y;p

Xy|(Bk

V*[7s$m

>tXipi

-D9,di

&pxD$#

\\V, |

'>h-#x

dE5^TvQ

OECFP@

fof>;OAc

gV3-P

i6qwQ8

<Rk70y

ZcBCB8

8<k9F+

,=a"|RX

xj$NQ[

:D1Vx%{&

[8X/Ib

S5y 'JS

a#7_h3

6 <s*_n

G#1~+F

T<'_@/R

%(N%b\E

Vc6g-I

XFCe7}{

50wYA

r%Ib j

="H,-ah

YC`xC(

*0b889M`P

$y3gjZ

`=,h[j

;v*.`G

Syg(}}z

CO 68R`_

H|!C``5

GX`*bB

R|_lHE

GDo7e.9

0'pg1B

^p$Nc7BC2iU

0>(tS{h)

=F4i|f

po(AXc

t;inugN

~Faze;

z%D-J8

V.!yG

=6N`vF

'roV3o

TKj%dX

t*>cYp#

2Y6j"S

ric_F.

U;1aQ,U

y65=:XHG

s(#~y -

4?V#nL8U

g #Xr!

u9f$\Ej

`~sbI{

xa<aoG

Ex3m0=i

#|7hCt

*F$*yr

m\NR%O

V|6:C~

B{a7]_

e..6JD

V,Gqo*=

fSC?R{

Jf&7L*8

C^9Pp*

ms/w'N

.|Cf3b

&h>4`G

b<"Wbx

#g7f2cf<C'm

G,;~}b

-Cgy.[

@Wn,TF3

@q%aE;IRH

WEP).(

/h En<

i*lm9B

}x5Wsg

H^^OEwf49

0Io`n<\6V

q$n-Em

y:m"BkG3

tv3rn+X-

t|nIr]

7[3K3

?GCa#=

E:v rw

@.&>eT

F'|'|"q

:%2Y-n

9FZ<!0

7g";"D9

WI%EA#

Xka?{*i

mx4uP*

9f}iYfN[

~G%N)5

|=w.'q

w&N~NP

K;_2M0|

'1-b;

y/$B_KU

k7'6?|

SCdX![

46saU>

G1Fo=6

>\imasy

3v(c']

=zk(Yk

.jdq{Z

t!}7<CAF

pu#[4G

$5Ofql

E:Yv?9

Cl'gs/N

"B|HNx

04f>"u

s\RO'oB<

|h._CV

< GwR&K

-_7N'O

Q/K~l&

Umed.8

35|I?[

|g8W2>P

x~x1qa

Git+4H3

%{I5+c

ANkXZ]

~G- w[

bf-g$C

QT1BzT_

5pM0/]

\lhaom

pr!vT"

U1Cq;S

/!nl'r

qrS/ co

rbi_.,

zoFO8

}&b_oGc

BL^N!t

t=bgN<

Q*om!oY='

l|8z*

HpD)?:wQ

gjL:!(

[82w+K

64gb~&[

`Vn95R

rzW2m=

(KP|KpI

Cm.'5[Y

K*=6g(^

#{#K@D

*>^f,Mv'

cvXvsg

]^5?Bj

TU3Jj

enwMCfr&

%E6Y,J

[n7Dbz

D|wN"y

po%n<h

Z=S)(U

6vX&r}

{AB|!Uf

9-(8j#

J%){&K

-M_&,pDcB

N1aO"O

F[*L@'

IR|5*#

q72+nqE

@#6no@

$Bu%':

f&y]F{

=>uZ3d

=>E_8^S@

{%9~~~

^e*:{I

"+r?MR

o%:n["

g=!o&

=K:6^')#U

6|;"qJ

5W3z{<

b2~3_-

H"FVsbD'"

y0a76o

QtmfSV+

oX{^`n

@[Rs}Q

)EP=d3

;>yya0b

._Yum!I

S~Y2kp.v

/18y)2

iN,|O|

;kd?0u

sZdkOa

<_fOez>9

5adf3&{

J?{|+l

dH6-!+_

W?ryo3

:h3?e3

-\ptDr

yx"oN\`

ny.DIZ

uL$#g0

S/fpie7

14UCxp

vmbm<H

6mvf%A!Q`-wY2k"

FNOZB`

Iflw|E

m.$,VFRl

+G?\k2h:

qfV?&>s

/dcv /

L!/on&X

=qlnP@

/EK}07B

n_@yO

oI 6l"

|>1sM93

ucDgtRe

cLSR%f{.

zn_.g^

xTj7!j

wEYg<S

Xfc]"GG+16}

Vc6y5j

I_+i^oi%

o [P2m

,r7>s8

1Ev7'

9$0RCS

GYY>ZJ

/")|!*EB

,y4p /

Q5RUuN`~

Lg=LdE

.,h"9O

k64n /?

LdTo>S

U{f0D5

<~iy!:

u1WqK[

+0lZ-3'n@

e8.bCW

j:7OISR

G~FBi*

9r:UaaHx

mS7qWd

F_#zo91

/q0IAJ

5i_IV

`_@3]~

<G$`q3

O/'/}=

iM~e *o

77soH6M

';1Qc

4g(b+F

&J2jHT

tFj1,;

Xyv5R_

7;..Gm

uc9|a)

#*Yr|8

FOz*Om

|2"*=|

ptH;7;

0~}o#k

o&KqA0

v="c{$

p^-wgJp2G

Seyzl-

ho8BQI)

}'x0o({K

X`;a7/

ro7fK4y

?%V-?"

30+xJo

?r6]BfB

Uo3&J*

`mfg'3?Z

dX2m2%.

L{Gb|;"7m

NP{?Q-

GC4y|

Vo)nGH

PU$sJ$

!Zf+{~

Cpp z1

/rcJXXl

'fR&Xw

b-sDna

/b3[K

~$>o3([0

|,;./%P

s4#Z(|VN

ki1gDO d

xhD\C

wWlMgb${

X^y=fIT

}g-yG-P

Ot:^"r

QKUE=j

B~r43b'

rV^U@EB

&n13<M

"e^;}'_

94}9vM

M.lJdj

^p0e15

YCET.g

f4^\&XE

O9ug5]#

}oq8c8

j,</DR\

1w*j>34?

JSJ&>EX

Xh-A8r5

L]Aq}<

!s?j5

nt3MsnQS|

=o9F6

&8c:,8

TJ/(q]}

KfW%3v

1fLX.(

1[ysk2

]H3Q3gS

aH&Ogu

?3Nt>w

^RS7b<_

~:NC^q

c7|9s^`

q_,W,FLp

(E~Grm%

b926rA

.vayL"

+{9sOpxg

t1pm>%~!

!|bbS

m7Yuq"U

%kMw i6

S'_r h)

;GRi^J

~\undx

D{Y.OL

^ApG3y]

1T;wa|

B~>J nm

K =d"i

7h0YE7

ZFSVT4

2JEiRT

xDc+Sc

S6e+_~~

4pNIb

jE6qJ

Yjak9G

;6[P;X

x+cFTa

+qb-cv

h6{.#i

7w?K_-&G

e3lB"c:

7/Djl:

'dw>gE

H^{j2h

.SF'0~

Hiu*S+

n3Gs%7jg

m:{&:!b

Q9x7\B

WFp+}-

lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet

PADPADP

lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet

PADPADP

v4.0.30319

#Strings

dZvg4Oi.exe

.cctor

mscorlib

ValueType

System

Object

Stream

System.IO

Windows_Forms_Books

author

DateTime

Antivirus	Signature
Bkav	Clean
Elastic	malicious (high confidence)
MicroWorld-eScan	Clean
FireEye	Generic.mg.964bd83c36b8ec52
CAT-QuickHeal	Clean
ALYac	Trojan.Agent.MSIL.Krypt
Cylance	Unsafe
Zillya	Clean
AegisLab	Trojan.Win32.Malicious.4!c
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Clean
BitDefender	Clean
K7GW	Clean
Cybereason	Clean
Baidu	Clean
Cyren	W32/MSIL_Kryptik.ECI.gen!Eldorado
Symantec	Trojan.Gen.9
ESET-NOD32	a variant of MSIL/Kryptik.AARB
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
ClamAV	Clean
Kaspersky	UDS:DangerousObject.Multi.Generic
Alibaba	Trojan:Win32/starter.ali1000139
NANO-Antivirus	Clean
ViRobot	Clean
Tencent	Clean
Ad-Aware	Clean
TACHYON	Clean
Emsisoft	Clean
Comodo	Clean
F-Secure	Clean
DrWeb	Clean
VIPRE	Clean
TrendMicro	Clean
McAfee-GW-Edition	BehavesLike.Win32.Generic.dc
MaxSecure	Clean
CMC	Clean
Sophos	Mal/Generic-S
Ikarus	Trojan.Dropper
GData	MSIL.Trojan-Stealer.AgentTesla.HY1VPR
Jiangmin	Clean
Webroot	Clean
Avira	Clean
Antiy-AVL	Clean
Kingsoft	Clean
Gridinsoft	Clean
Arcabit	Clean
SUPERAntiSpyware	Clean
ZoneAlarm	Clean
Microsoft	Trojan:Win32/AgentTesla!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Clean
Acronis	Clean
McAfee	Artemis!964BD83C36B8
MAX	Clean
VBA32	Clean
Malwarebytes	Malware.AI.643625791
Panda	Clean
Zoner	Clean
TrendMicro-HouseCall	Clean
Rising	Trojan.Kryptik!8.8 (CLOUD)
Yandex	Trojan.AvsArher.bUaQs6
SentinelOne	Static AI - Malicious PE
eGambit	Clean
Fortinet	MSIL/GenKryptik.FCYP!tr
BitDefenderTheta	Gen:NN.ZemsilF.34686.!m0@aya56sh
AVG	Win32:PWSX-gen [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	Clean

Static Analysis

PE Compile Time

PE Imphash

Sections

Resources

Imports