Static | ZeroBOX

PE Compile Time

2021-06-04 20:42:59

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x001026d4 0x00102800 7.23366453872
.rsrc 0x00106000 0x0001e0b8 0x0001e200 5.1225826307
.reloc 0x00126000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0011e728 0x0000539b LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x0011e728 0x0000539b LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x0011e728 0x0000539b LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x0011e728 0x0000539b LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x0011e728 0x0000539b LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x0011e728 0x0000539b LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_GROUP_ICON 0x00123ac4 0x0000005a LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x00123b20 0x000003a8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x00123ec8 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
l6yqX
Sc(tZ6)x
R+Dp>l
O#t1.o
R&D}$D
h~}=f?6/
moIl0k3
]RgUd2-
d.QmJ]h
r9jHbh
lD$['-
D9jiu-
y$V`/nZM7
, f#@UZ
, ?o:YZ
d:a8!
ntdlT
NtCoT
X ntinT
X.T9%+
, DnNCZ =8
NHj%&8
c#%&8`
X ntinT
t,%&8G
NtCoT
m]7a8p
X l.dlT
, HX;IZa8
(:w%&8
Z ne"ba8
<!Z !C
\&Rq%+
( o`ii81
&XGR ~2
ntdlT
X l.dlT
ZXlS \_c<8
Br(>%&
XGR p%
'XGR }A
yLk%&8
Z {]#oa+
Z?_b`
Z @p'Wa8?
mZ >RHma8
%x$%&8
;7Ra8S
_dwz%&89
!Z g?[Za8Q
V@ Eba%
Z 2-!%a+
Z bK*ja8
5vE%&8
`QV Z
Z /7=ca8A
GjgZZ u
Z 2L>Ea8{
McZ B<
DzH%Z Gk
Q.Ia8q
2IZ 0,
MV628l
_bj/
_bY*
2`%&8k
6Z t3*=a+
>^)&Z D
"4S Y,1/a%
*z&Z Pt
Kg'a8d
7%#B8
Z O22,a8k
Z_bX
>bDa8F
q?-a8:
Y_cX*
J%AT%&
t]f9Z
M\wa8t
~6%&8?
j?Z W;
Z $s4sa+
-E*a8|
4^5rZ
dLT1%+
8P7a8u
i0 cEb
4U}_Z 7T
%JR ]$%aa%
N;tMZ
d Kfh9Za8
U6Z 8+(
"Z'Z B
Jo/Z s
j=Z %%
8Z Slc`a8F
d lX.yZ
dE29%&
\udZ Z
k2_a8!
+pcZa8
d R[: Z 9`
SRZa8
HqAF%+
"Z "/ZMa8Z
d z7i}Z zb
w+%Za8a
(QZa8*
D6-Za8
;wSZ w
)Z DQypa8[
~c4a84
~9Z cE
1!0)%&
Z 1e,Qa8
QZ JO[
.E(x
T'WZ >Tboa8
Z7iZa+
1#Za8J
9\Z p
CfZa8c
Z d%Gea8p
vnZa8(
5/Z ~4a
D7|fZ A
gp2eZ
O:Jd%&
_?em(
Z {c4?a8
6)zp(
BZ |9&>a+
PGZ Om
jX\Z ?
G>8=Z
Z zPF}a8:
$o08(
Z v-7ia8"
XPuZ w]
(sZ j5=
;*^E*
BZ m.N
; 5@3EZ
I>6t%+
; )p'Z
`Z JT"
roZa8c
5U G)8
Z TiHwa+
W} M7_ja%
BZ NE/
Z Txiaa85
Z mxi5a+
qSpZ m
~ $p U
\+fa8!
Z aoda8
#A%&8j
3~vsZ
Z GI"<a8
zyAv(
m?g>Z &
KZ dCS
Z K0?
gZ Yb7La8o
SD?a8B
Z =ywZa+
C(<KZ K
:`0a8
YsZ +-
>B)Z l
46:a8H
'Z ||y
dZ gn<
Z )P. a8N
9^8Z Es
Ntk/(
wmUZ 0=
IM]0Z
5g>cZ '
9BCZ 0_
.,_a8f
}}Za8U
7xO3(
li8a8C
Nan|Z OFa+
ALP@Z
9tZ <k
elZ E7
'XZ <'^Ya8k
QZ KJf a8i
k4erZ d
L8oa8.
*Z ta-fa8
Z !=Xya8
sgN)Z
MZ ghS
|},)Z )
d@-Z 3
UK`$Z
mEjB%&
<-Z <w
n{M\
"AqZa+
H*mZ q
cDGZa+
CZ LUrMa+
Z eQp{a8G
.Z i,a
tlF_Z =
Nvpu%&
eZ tMJPa8
Z ?^+5a8z
rZ F'DBa8{
 NZUbZ ,n
 DcWxZ
bp.3(
0iZ Mp
xZ `1T`a8
2Z |dq
e7/Z I
4KZ \Cq
[tNSZ z)"qa+
Z U[y=a+
hZ gaFha+
8 wkZ
yZ Iu/
|A=a8b
jkZ ;MQ
NGZ W,
?,ua8x
;gFa8F
Z 2@[.a8,
b^GZ 
&>`CZ
Ghoa88
Z r)`;a8
:\Z ;hv)a8
^}Aa89
{^Z Fo
-ANQZ B3t
~_AZ I
Z @^sya8
g"sz
hZ dr8
g2sy
1C:a8"
/cF2Z
h"sz
?RF2Z K~2
jZ }R"
Z tn\va8
m[t;Z
qn=-Z x
c98ZZa+
hunA%+
VK{QZ
XwLRZ
~0$FZ
+ l-'(
b3Xa8H
j 2n
V#MZ m-
%3xbZ \
Z 75dra83
9>6~Z
~{oPZ _
s),d(
&HZ #G<8a8
>3-CZ
Z ))' a8
gZ ;Dt
p\vZ K
h\<$Z
qT7 Z +
CP_Z |w
k sz
goT=Z z
\mZ w:d+a8
k sz
GO>Z 4d5la8z
POg`Z Y
Z jn}Sa8K
8e(aZ
?AyZ Q
eZ W)2
G+Za8x
@]f>Za+
j[lZ i%&
Cet, Z
AtZ [^
^!C`Z
Z jy)Ia8t
x]Z Ek
zZ ]~/
7Z =G:9a8[
2+k5(
t(pa8)
S8ZZ g
Z 8QRma8
Z 8lRDa+
Z ZM^1a+
OrJZ vE[
^OqZ X
Z\7?Z
%jZ =R
|6U{Z
\}Z @3"
{PZ `$
Z }2EMa8r
Z 8nwPa8
5Z (-w
a{Za87
Otp9Z
Z bgNza8V
&<Z iK
5Z h_8*a8
.W8a8w
l<Z h!
H~=Z U
c+u5Z
2:SZ r
!d8a8v
DG+nZ ]
z"u(
)7Z 'sw
M#pa8o
Z UiBa8G
<Z Y<5
},Za8^
4 @$Z
P%mZ pcV
.ODZ ~,aUa8V
`YZ o/
Z u[0Za8
b;+a8a
{-ZZ [@mga8
,c#IZ R
-dDH(
Z hNFxa8(
sZ PYj
[|_Z x
m`>YZ
v-URZ
h/VuZ
5JDrZa8
.E(x
>;Z Ab
FZ `3r
q%q.Z
V5%Za8c
t+/'Z /
R X5l4a%
e?Ta8*
qZ -=5
Z ma:$a8.
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
hSystem.Drawing.Bitmap, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATx^
{~dVo
g/,Xj~
-_kDdqt
_dlbE]
hn!Aff
-v@Mrj
F /.~m
Z'R4Y#j
Yxa/}U
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
hSystem.Drawing.Bitmap, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3agSystem.Drawing.Point, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
O%<GO*
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDAT8O
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDAT8Oc
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDAT8O
m_,!8T
s+B/,{\
Lech2(
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDAT8O
m_,!8T
s+B/,{\
Lech2(
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Point
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDAT8O
Iu'[}gJ
{3T[2_
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDAT8O
Iu'[}gJ
{3T[2_
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
XIDAT8O
)%<QEh|
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
XIDAT8O
)%<QEh|
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
WIDAT8O
0Cwa&`Bt
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDAT8O
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDAT8O
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
*IDAT8O
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
*IDAT8O
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDAT8O
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
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
/IDAT8O
]t[Sc8
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
/IDAT8O
]t[Sc8
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDAT8O
$dX_wUFvC
fj;I=
RcFJ.D
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Point
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Point
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Point
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDAT8O
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
hSystem.Drawing.Bitmap, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPADC}8
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATx^d
))-TH+E
eEg$fh
`XJck
rx}w3,
u/>=I
B(D>/
|oq,%5
ANC)l_
5<-9>
t*\>~D
ZwP,^U
.}uUXt|
\t27WX
>vz>_d
f*jWY[
G*?84G B
TFW"y\U7!C
cVTG@P
E3R7qE
[5m>-n
edn};=
)HQ;MW
bN:/,;
&wtT.a
~T~?ie4dtm
{\&bY:
wDGTKn
_eQgT
1Z/#\u
,B(s(>
P1'4q}
6W_Z<#
Q2o{,_
d$` hP
K.z>{~
n.ySuJt
4Acao+@@
sP6Ll)OH\
RZ8e9,
3S5TyK
yvR2PS
d&VZ<c
l2okx:5
?GGKk6
-mi^vz
6qo]a=
ECvd5 0
d`jf\i
"-|@3T
uQ1;q
_YM|]Zq
w;6(.5pW
b*jOOc
agSy~
KxJ]p8
M7"oG?[
uR7yaz
crg9q
m~VD9\
3/lI(u
%' P8S_j
Kig/o+
J{]vP7
q4TG@C^/
@O^?5e
=w;-~_
V}>.i~v
\4DF@E
=H4]1
2CxQCp
q;4Q[:
GnKu=9}
l4W\FJ
A*krbG
^]nZ.6
A9ruwo
VqQd19
*S=;,U
&b|z(T
>M+EO6
b%>b~
1JST4A@
jjsRN7e
TKaY#j&4
6ri5>\
(m0iQd
%JO0EO:
@@]Nn9
=>+4iK
J_v<{Km
3"t3P!
k8c]V0:
/PAGn#
.,c[t-X
2lqoqos
zU1?I;
,0,+WP8u
8J5@E<
{a<@q8B
DSX/_2T
v;|_m\
Q}]DTp
zp )(A
x2p8%
&TRn<Q
g/<H\~
Q)1&ukq
U<,1>]
PUVF"3^
pPI~D)
WNvGCJ
{EbFkJ
L'T}DJ
8q-(&&
K'Cp]T.
`8kG`R3
],S\7/'w
g>6f)^y
Sq}[eB
IDAT6g
Q),m.
jaqa1/se@*
UpVuG5
=_@lw;
Ny!DuF
)xVRa)
ZDDq84
/Z)x=
!G.~q>{
y2G_wM
-hk"dI
IGZ;v9
Gwv>=^k
cK](*7
([B}Rf;
ETl1Ai
dp]'My
r4w'\C[s
B0B@oi
]~|<thK
< xsY
*fW%'J
0Y?!%4
[`K}<ru?
I(Qb2C5
j99k_t
%Oemz!g
Pi1\H\
PL9G{b
HZ(~Q;a
)2e)zo
L?&f^Y
IoN_0
Xy87P8(
D^:<_2j
5NF-=v
>Xk;=Mzod
W9O.w5
W7X$6G
2~En`
e<>gG=
]/tK)e
^)3Wxs
?_':q7
$r.fF=E
X+G.[D
*WvEkIMm
G:tFjV
pkkdg@(Q
py}=0 }
N4DbL=10
.(z2Vj
sV^YZ|?
z$&q)
\]]{l]
y*). <Pj
y @*Q4
8@iipK?
FA1;GM
xM(kx?(
h3;]`+
chkN<'z
pyx/|]
~[tWx?W
{{"=f1
zt4(^W
$x}&Rr
*w"Uzp
=QL0tis
=_d\T;c
-9lcIbQ
[eEY`$
2a@`@D'L
eI2\3d9
|~`}(>
*kC`%@J(X
u%fK/El
DNz4vE
/F ?p,
YU~v\uQ
~@x%M@m
hAE7@X
PfZN?
sBafReX
*Rbs,KP
0c#@I:
@q<BAqv
@4u)TtW
M&TT'w*
yhg_'N
p@#qi~
jw81<C
i'[O/xN
vaxR"Z
EgW>@KtB9"`A
w{1t?x
EaZPA>]
Bs?vOG`
vLD}I=uO
D?;l)s_
p|W0s[Q
5|-ctx
}?1Qa9. y
9}=tU\
2Xb|eSS2
wit(PW
():?CU
PU`N(P
^l4Toey
}xab0H}
6T.N~m
^{#h]_
dmq{V
2r? p"
ggq6<0
0V{PkZ
<V%XCE
\rO3R
DanxdK
4C0CPW4
BfX)n2
$}m91aX
ee*T}8
v)bp;
F?m3Tpe
tE\kwZ
-#0:<*
``,g0N
<4,9+1K5
%ZD3d!
$^4G`E7
m&"O{Am
-%5M4`
}IBZKD
Y[$47\
mg">#o;
K p(vP
VO!EJ,
3B5r>\
%@3V-X
"1;q?*
b(,llf
eAlBVM
}H{vM\bC
=\x\-*~Cd
3[aD\n
-zFu;
}^.(5P
hCk9t
uxC+QX
dmPbi8]E
Q#p42X
(~W3%b3Y>
O(x8Nx
e?HFwn
p`u1t`5
M (\lfb
\O3]<9
u2X-|}q
Ozko_=
[~<-t\
-8AE+&
~XyP|!
"U%md:
F$4@ _:Pa?
;F#aR3
|m2.1
"cbA_
USyWvO
R0J(Bb
doG^+R
R^S,oD
&g#[Sf!S'
R<UbhV
:9WF(_
dcYD=_di
3]{U\
]Z+u%s
|m~c7'
SK 8] 0
P=_QS:
\Zzs\v
ghZ^~v
MHYQSI
mfEEFI
)U;.?
2`%_l0FR^
,v1JY$;tZ/
hWs__?m
-y;&-P
iak+y
6s?Zs2
\8og !}Z
L6K`sb
lXcZ)H
f&;g<9]
,t#C@t
O9Y^N:
\/y?\
JyW2as
Yfy'f\
LvF~Z
tN4^`$\5,>
3r@<-_
oQYv(E4
`qEw1cvD
oy*(mQ
Yep(xI
+&OC$aO{
3Z[Q^6>
e~X^cIKl
s-@xG5
@BF#0g
.TBFTCK!
+ij/:F
uE)Nv$
@3M:_l
*h$0RpQ
0xbAJ\
5z]Xy7
dB*-)jz^
Si<T:.M
!ZTi[j
OsMf'8
1@1]!C
.Lap6a
"tSUMS
r94%io
t{4S tVJes
;\M%oH
g3|DbS
N^\0I
b n;Pq
=Z$J{)%
zJ46K
cFn[uXP
QSRBR7G_}
:sHdc.
2x[y??F
5dMYZc
TMoQHT
+e.-0D
Rp<sA(
T[.n!<s
@}Jo@=
p#E]w
_}zkCo
y!Z:(j
3_:VJe
Q)z8Q4
.oJ^UM;
M*X4a|C
%;UVWAE
g,I~?T'U
lT0tOjO\
nD^r^U
Tt3NPa7<?!n
+Yjz_xW
5B-F&
[&;D Ou
sZ?gpt
(Z*M+SR
t;{;gb
Q^`N`i
;b?FV5
[LMwl;
hiOwOy
o_PzWv
?PO0TI
j}{['au"d
rwU.8r0
h{ku4m
%{3<ed
Ja}KVc
WL^C%n
T+*y^8
!x1ps
?2+{Su
C0Ce[,
+68N}%
yo8g-V
P&[>&[}
x{{s+T
c*c_Ra4
)Px]dQ
A@ETDA
^qZ60`
IDATPx
ofi\)}
SK|ol[
p3uAdIr
M`vN4k
O{ud#r
kgoQ*Z
*Y!_z4
Eq8Z@[
rv\'B%Sv
a^(j \
UgB%Kx
#/NWm*
L=Fm~gll
9jL$Y
;;i+-N
p4op(\
@AS5RU
aIEW*7W
(!CP7xZ
L6P2V>l
v@6TjH
%y4)LA
h3asl#
I8*R#")
:ezbyI
:sQwaA
! `sG{
Kl6A0!
Ht|@^+
s?XWd-
@~"Sak
ug=sVf
#5>so"
^ru&vv
'K^<|?
\_3L&;"
@0npAJ5
nxW3Ej
moz_z|
=v #V<
2?b![t
7?5yUr>
G4D|[T
x@(BBiV"
=N$@xf
+COj.=
xI]!:e
=uuu;Z
"G$V k
y|*}{Q
.T+%fw
Ns,9ph
?GQt,V
NJx)o:c
>o[Y|<
~8EEp+i6@
#ZN/>~
r,x8O9
Dy;#%q
~ZO/$1
"2_-b4
NFA7U~q
(HG0kB
7b3%F/|
myQrtq:~@
T({&vj
neilqe
m1KR:p
7+X3TOPX
84(]Mj
jLIh5*
p#:YX?D=
q.=!^
4KxN4q
#\}{^Vl
"}^l;Q
M%z1iL9)<
~6B`oej
.<UdR;v
/M-bWO
~w.O:0u
ts$T#z
O}Lac
p'B/ac"Z
&8?0I-
\Y=/$98
d[ @6_
4G=h5g
lCt/v[
vrkY,0
~jn9h}
Nkd_83o
Ks,W//K(
IDATZ=
87%W~q
GA-B:
T(nz5F"N
x[6<7~=
~-[K^X
$#}1-~
Qq$; .
}'KUI_
_"+1|w
OO;Y,<
+2T`#
];%E{R
l3t-es
gQExJa
:9"yOX
HY~)`N$H/SBF
wh>S}h
h'ysuo
H3HQVg
>{!M@E;
)<#RLD
r'duI2
$G=^?
X\Pid*[
t`D2{Y
].8;DCF\V
vJ1a%=
Zw[)eM
>ULE7
UvQxImY
e6>r+^
_YGzm
<}STl]mtg
wH+/Xl`
TxVo&V
l3~ME_
FiV_te
jm~>$5s
bpnzn>
=GH6ce
A\q:q
W7^\Li
#?O;zl
}D9WPuy
CpN4@h
_$Hdaa
0>H!1^^*
b %#A:
-L2c=)
QV{[Ki{
K@\r6?
W^sE#B
.oJzwV8~m
GRWn"s
pft2_?
00?GY:
ZJ)mOc
"?v-w"
3i\)w
7g<rMn
XeM!f
[B2`@:
+Zb6W
iRBYJX
TR5X^w
7$"L:M
^h%T={
R([B~3
MHp;p7
KCFzWG8)
JvuR<Z
Nr>qCoS
Z7[ksq
n1pT=4y
at9IB!
4gJ4#W
Va.X!C
l3}IZq-
@750p8
c>YtJ4d
8a7L,5S
b(Q/w,
S.+N=]s
ZR9HBg
~1y(,P1
?2g$3n
pCAhv']
+f2(_
^;7$]?
-h!U.4
HAyN3~
%_]6$]i
kf3?tK
h^6EN[
)POX&YR
n7M~8-:
d6WW<a
TrBYlk
>gi<yk
9x|oDd
lv=nWxW
Mk?KX_
`0lw{UA
jp*7`V
j23@6k
t=_$w~
e G+<N
:rV5Y)l99
-=SVCa
T&NV(.
/rqx69
U-X|%z
:i|4+V
`9+t.cY:
^/cgQm
{omnCYk
)W2,h|R
pB'`^9
4:^?4,
6h)tk;a
W=yQH1
/!z5G.A0
ft=oIWg
GcK'1}
R[y(#I
F1M*(W
|2/.~e
@h%zaG
^Rp0}B
@F1Y1C
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
hSystem.Drawing.Bitmap, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATx^
C/VjFe
rj?"Fz<+Tl7
j=,Zz<=
Dsan-;
3"<3'{
c58?DL
{6d%!mPv,
*hdE)
;"BKv^V@V
'n5z?E
N!+C6d6U
e!Tx^,\
0cC<u^w
/*ofVX
YmCltaL
I1o6zg
yq\OETQ
T;t:Nl
(do6dNu
-Y#<5:2
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
v2.0.50727
#Strings
#Strings
#Schema
!1!6!<!D!I!X!_!s!|!
!>"E"["d"j"q"
%#%4%L%^%t%
%d&k&r&
+&+/+8+B+L+V+
$;&Q&]&
CallContextSecurityData.exe
mscorlib
SuppressIldasmAttribute
System.Runtime.CompilerServices
<Module>
.cctor
VirtualProtect
kernel32.dll
System
RuntimeTypeHandle
Module
System.Reflection
ValueType
Object
Stream
System.IO
MyApplication
Mailslot_Client.My
Microsoft.VisualBasic
ConsoleApplicationBase
Microsoft.VisualBasic.ApplicationServices
MyComputer
Computer
Microsoft.VisualBasic.Devices
MyProject
m_ComputerObjectProvider
m_AppObjectProvider
m_UserObjectProvider
m_MyFormsObjectProvider
m_MyWebServicesObjectProvider
get_Computer
get_Application
get_User
get_Forms
get_WebServices
Application
WebServices
MyForms
m_FormBeingCreated
Hashtable
System.Collections
m_connectForm
m_DirectoryExplorer
m_HostsMain
m_HostsPreview
m_HostsSettings
m_mainForm
m_MDXs
m_scanFrm
m_startupSplash
Create__Instance__
Instance
Dispose__Instance__
instance
Equals
GetHashCode
GetType
ToString
get_connectForm
get_DirectoryExplorer
get_HostsMain
get_HostsPreview
get_HostsSettings
get_mainForm
get_MDXs
get_scanFrm
get_startupSplash
set_connectForm
set_DirectoryExplorer
set_HostsMain
set_HostsPreview
set_HostsSettings
set_mainForm
set_MDXs
set_scanFrm
set_startupSplash
InvalidOperationException
Exception
ArgumentException
connectForm
DirectoryExplorer
HostsMain
HostsPreview
HostsSettings
mainForm
scanFrm
startupSplash
MyWebServices
ThreadSafeObjectProvider`1
m_ThreadStaticValue
get_GetInstance
GetInstance
Mailslot_Client.My.Resources
resourceMan
ResourceManager
System.Resources
resourceCulture
CultureInfo
System.Globalization
get_ResourceManager
get_Culture
set_Culture
get_CopyToolStripMenuItem_Image
System.Drawing
Bitmap
get_CutToolStripMenuItem_Image
get_HelpToolStripButton_Image
get_IndexToolStripMenuItem_Image
get_MenuStrip_TrayLocation
get_NewToolStripButton_Image
get_NewToolStripMenuItem_Image
get_OpenToolStripButton_Image
get_OpenToolStripMenuItem_Image
get_PasteToolStripMenuItem_Image
get_PrintPreviewToolStripButton_Image
get_PrintPreviewToolStripMenuItem_Image
get_PrintToolStripButton_Image
get_PrintToolStripMenuItem_Image
get_RedoToolStripMenuItem_Image
get_SADXHIJU
get_SaveToolStripButton_Image
get_SaveToolStripMenuItem_Image
get_SearchToolStripMenuItem_Image
get_StatusStrip_TrayLocation
get_ToolStrip_TrayLocation
get_ToolTip_TrayLocation
get_UndoToolStripMenuItem_Image
Assembly
Culture
CopyToolStripMenuItem_Image
CutToolStripMenuItem_Image
HelpToolStripButton_Image
IndexToolStripMenuItem_Image
MenuStrip_TrayLocation
NewToolStripButton_Image
NewToolStripMenuItem_Image
OpenToolStripButton_Image
OpenToolStripMenuItem_Image
PasteToolStripMenuItem_Image
PrintPreviewToolStripButton_Image
PrintPreviewToolStripMenuItem_Image
PrintToolStripButton_Image
PrintToolStripMenuItem_Image
RedoToolStripMenuItem_Image
SADXHIJU
SaveToolStripButton_Image
SaveToolStripMenuItem_Image
SearchToolStripMenuItem_Image
StatusStrip_TrayLocation
ToolStrip_TrayLocation
ToolTip_TrayLocation
UndoToolStripMenuItem_Image
Resources
get_LazyInternalExceptionHolder
LazyInternalExceptionHolder
MySettings
ApplicationSettingsBase
System.Configuration
defaultInstance
get_Default
SettingsBase
Default
MySettingsProperty
get_Settings
Settings
CompatibilityMap
Mailslot_Client
get_RestrictedError
get_ValueEnumerator
RestrictedError
ValueEnumerator
ISectionEntry
sDomain
System.Windows.Forms
AutoValidate
get_MainDomains
set_MainDomains
IIIIIIIIIIIII
Button
TaskCanceledException
CallType
AppDomain
StringBuilder
System.Text
MainDomains
components
IContainer
System.ComponentModel
_Label1
_PictureBox1
PictureBox
Dispose
disposing
InitializeComponent
get_Label1
set_Label1
WithEventsValue
get_PictureBox1
set_PictureBox1
Label1_Click
EventArgs
sender
IDisposable
ComponentResourceManager
ISupportInitialize
Control
FlatStyle
FontStyle
GraphicsUnit
ContentAlignment
ContainerControl
AutoScaleMode
ControlCollection
FormBorderStyle
FormStartPosition
EventHandler
Label1
PictureBox1
exDirectoryTreeView
ListView
selectedNode
TreeNode
DirectoryTreeViewOnAfterSelect
TreeViewEventArgs
RefreshTreeView
Splitter
ColumnHeaderCollection
ColumnHeader
HorizontalAlignment
DockStyle
TreeView
TreeViewEventHandler
MainMenu
MenuItemCollection
MenuItem
Shortcut
ListViewItemCollection
DirectoryInfo
FileInfo
ListViewItem
ListViewSubItemCollection
ListViewSubItem
DateTime
FileSystemInfo
FileAttributes
ExtendedDirectoryTreeView
BuildTree
AddDirectories
currentNode
OnBeforeExpand
TreeViewCancelEventArgs
ImageList
ImageCollection
TreeNodeCollection
IEnumerator
f3parser
Mailslot_Client.fincad
parseResult
List`1
System.Collections.Generic
f3_result_string
parseResultRows
parseResultRows2
parseResultRows3
f3mlToHashTable
StringSplitOptions
f3platformInterface
objSingle
blCreated
_g_uri
get_g_uri
set_g_uri
getInstance
HttpGet
method
f3PlatRPC
ContentType
Accept
SendRESTRequest
jsonDataBytes
contentType
executef3ml
callstring
session_id
ExportModel
file_name
GetSessionID
DeleteSessionID
GetStatus
ListSessions
WebRequest
System.Net
WebResponse
HttpWebResponse
StreamReader
HttpWebRequest
Encoding
F3Formatter
IFormatter
System.Runtime.Serialization
m_binder
SerializationBinder
m_context
StreamingContext
m_surrogateSelector
ISurrogateSelector
Deserialize
serializationStream
f3_style_serialization
function_name
Serialize
Serialize2
get_SurrogateSelector
set_SurrogateSelector
get_Binder
set_Binder
get_Context
set_Context
MemoryStream
UTF8Encoding
PropertyInfo
StreamWriter
ICollection
IEnumerable
TextWriter
SurrogateSelector
Binder
Context
JavaScriptSerializer
market_data_template
result_post
NotImplementedException
common_template
_format
_definition
_external_id
get_name
set_name
AutoPropertyValue
get_format
set_format
get_definition
set_definition
get_external_id
set_external_id
get_tags
set_tags
format
definition
external_id
_category
get_category
set_category
category
trade_argument
_trade_argument_type
_value
get_trade_argument_type
set_trade_argument_type
get_value
set_value
trade_argument_type
_trade_template
_arguments
get_trade_template
set_trade_template
get_arguments
set_arguments
trade_template
arguments
trade_valuation_template
_model
_trades
_valuation_specification
_valuation_requests
_expiry_time
_callback_url
_as_portfolio
get_model
set_model
get_trades
set_trades
get_valuation_specification
set_valuation_specification
get_valuation_requests
set_valuation_requests
get_expiry_time
set_expiry_time
get_callback_url
set_callback_url
get_as_portfolio
set_as_portfolio
trades
valuation_specification
valuation_requests
expiry_time
callback_url
as_portfolio
filters_template
_field
_operator_
_property_type
get_field
set_field
get_operator_
set_operator_
get_property_type
set_property_type
operator_
property_type
extractor_template
_count
get_count
set_count
selector_template
_include_filters
_extractor
get_include_filters
set_include_filters
get_extractor
set_extractor
include_filters
extractor
index_fixings_template
_f3name
_fixings_data
get_f3name
set_f3name
get_fixings_data
set_fixings_data
f3name
fixings_data
fixing_requirements_template
_index
_required_days
get_index
set_index
get_required_days
set_required_days
required_days
model_recipe_template
_fixing_requirments
_model_fragments
_market_data_selectors
get_fixing_requirments
set_fixing_requirments
get_model_fragments
set_model_fragments
get_market_data_selectors
set_market_data_selectors
fixing_requirments
model_fragments
market_data_selectors
valuation_model_definition_template
_model_recipe
_base_model
_valuation_date
get_model_recipe
set_model_recipe
get_base_model
set_base_model
get_valuation_date
set_valuation_date
model_recipe
base_model
valuation_date
valuation_model_from_recipe_template
JSONTemplatesUtils
tradeValuationConstruct
trade_valuation_request
commonConstruct
out_common
tags_list
TradeConstruct
trade_name
input_table
out_trade
SelectorConstruct
filters
out_selector
IndexFixingsConstruct
index_f3_name
fixing_quotes
modelRecipeConstruct
out_model_recipe
fixing_requirements
valuationModelFromRecipeConstruct
valuation_model_name
out_valuation_model_from_recipe_template
IDictionaryEnumerator
Module1
CreateIRSJSON
platform_url
CreateCashDepoJSON
createSelector
selector_name
slug_name
createIndexFixing
fixing_name
f3_name
createModel_Fragment
out_model_fregments_list
createMarket_Data_Set
createModel_Recipe
recipe_obj_name
createValuationModelFromRecipe
valueProduct
valspec
requests
callback_endpoint
createTrade
createValuationSpecification
Random
RuntimeFieldHandle
Model_Response_Type
Definition
created
validation_results
modified
validation_status
Common_Response_Type
version_number
Is_active
RES_Method_Type
DELETE
GetServerResponse
getValuationResult
HashSet`1
_LbSource
_bgGenerate
BackgroundWorker
_fdBrowse
FolderBrowserDialog
_LbSettings
_txWhites
TextBox
_LbBlacks
_txSources
_LbWhites
_txBlacks
_LbSave
_txLogs
_LbGenerate
_LbPreview
_tipper
ToolTip
SourceL
WhiteL
BlackL
Loopbacks
startExec
errCount
sourceCacheList
Generated
GeneratedCount
get_LbSource
set_LbSource
get_bgGenerate
set_bgGenerate
get_fdBrowse
set_fdBrowse
get_LbSettings
set_LbSettings
get_txWhites
set_txWhites
get_LbBlacks
set_LbBlacks
get_txSources
set_txSources
get_LbWhites
set_LbWhites
get_txBlacks
set_txBlacks
get_LbSave
set_LbSave
get_txLogs
set_txLogs
get_LbGenerate
set_LbGenerate
get_LbPreview
set_LbPreview
get_tipper
set_tipper
SetVisibleCore
HostsMain_Load
LbGenerate_Click
BgGenerate_DoWork
DoWorkEventArgs
BgGenerate_RunWorkerCompleted
RunWorkerCompletedEventArgs
LbPreview_Click
HostsMain_FormClosing
FormClosingEventArgs
LbSave_MouseDown
MouseEventArgs
LbSettings_Click
TxSources_KeyDown
KeyEventArgs
TxWhites_KeyDown
TxBlacks_KeyDown
IsIPAddress
IsLoopback
FormClosingEventHandler
Container
BorderStyle
Padding
AnchorStyles
Cursor
TextBoxBase
ScrollBars
ToolTipIcon
DoWorkEventHandler
RunWorkerCompletedEventHandler
KeyEventHandler
MouseEventHandler
DialogResult
MessageBoxButtons
MessageBoxIcon
AsyncCompletedEventArgs
IWin32Window
MouseButtons
CommonDialog
FileSystemProxy
Microsoft.VisualBasic.MyServices
ServerComputer
Process
System.Diagnostics
System.Text.RegularExpressions
RegexOptions
LbSource
bgGenerate
fdBrowse
LbSettings
txWhites
LbBlacks
txSources
LbWhites
txBlacks
LbSave
txLogs
LbGenerate
LbPreview
tipper
SourceCache
_Domains
get_URL
set_URL
get_Domains
set_Domains
Domains
_txPreview
get_txPreview
set_txPreview
HostsPreview_Load
txPreview
_chSort
CheckBox
_Label4
_txtTargetIP
_chTabs
_LbAbout
_LbStatus
_numDomainPerLine
NumericUpDown
_Label2
_chParseErrors
_chUseCache
_txLoopbacks
_lbVersion
_lbParameters
get_chSort
set_chSort
get_Label4
set_Label4
get_txtTargetIP
set_txtTargetIP
get_chTabs
set_chTabs
get_LbAbout
set_LbAbout
get_LbStatus
set_LbStatus
get_numDomainPerLine
set_numDomainPerLine
get_Label2
set_Label2
get_chParseErrors
set_chParseErrors
get_chUseCache
set_chUseCache
get_txLoopbacks
set_txLoopbacks
get_lbVersion
set_lbVersion
get_lbParameters
set_lbParameters
HostsSettings_Load
HostsSettings_FormClosing
LbAbout_Click
TxtTargetIP_Leave
LbStatus_MouseDown
chUseCache_Click
txLoopbacks_KeyDown
lbParameters_Click
CheckState
ButtonBase
UpDownBase
Decimal
AssemblyInfo
ApplicationBase
Version
MessageBoxDefaultButton
chSort
Label4
txtTargetIP
chTabs
LbAbout
LbStatus
numDomainPerLine
Label2
chParseErrors
chUseCache
txLoopbacks
lbVersion
lbParameters
IMailslotClient
Connect
Disconnect
lpszMessage
MailslotClient
m_pszSlotname
hMailslot
slotname
SafeHandleZeroOrMinusOneIsInvalid
Microsoft.Win32.SafeHandles
Win32Exception
MsgBoxResult
MsgBoxStyle
SafeHandle
System.Runtime.InteropServices
FileDesiredAccess
value__
GENERIC_READ
GENERIC_WRITE
GENERIC_EXECUTE
GENERIC_ALL
FileShareMode
FILE_SHARE_DELETE
FILE_SHARE_READ
FILE_SHARE_WRITE
FileCreationDisposition
CREATE_NEW
CREATE_ALWAYS
OPEN_EXISTING
OPEN_ALWAYS
TRUNCATE_EXISTING
SafeMailslotHandle
preexistingHandle
ownsHandle
CloseHandle
handle
ReleaseHandle
NativeMethod
CreateFile
fileName
desiredAccess
shareMode
securityAttributes
creationDisposition
flagsAndAttributes
hTemplateFile
WriteFile
numBytesToWrite
numBytesWritten
overlapped
_SerialPort1
SerialPort
System.IO.Ports
_updateButton
_IPsprMax
_IPsprMin
_IPsprVal
_Label3
_Label5
_Label6
_Label7
_comCombo
ComboBox
_statusLabel
_NotifyIcon1
NotifyIcon
_ContextMenuStrip1
ContextMenuStrip
_itemExit
ToolStripMenuItem
_itemShow
_itemUpdate
_manualButton
get_SerialPort1
set_SerialPort1
get_updateButton
set_updateButton
get_IPsprMax
set_IPsprMax
get_IPsprMin
set_IPsprMin
get_IPsprVal
set_IPsprVal
get_Label3
set_Label3
get_Label5
set_Label5
get_Label6
set_Label6
get_Label7
set_Label7
get_comCombo
set_comCombo
get_statusLabel
set_statusLabel
get_NotifyIcon1
set_NotifyIcon1
get_ContextMenuStrip1
set_ContextMenuStrip1
get_itemExit
set_itemExit
get_itemShow
set_itemShow
get_itemUpdate
set_itemUpdate
get_manualButton
set_manualButton
Button1_Click
Button2_Click
mainForm_FormClosed
FormClosedEventArgs
mainForm_FormClosing
mainForm_Load
Label8_Click
comCombo_SelectedIndexChanged
Button3_Click_1
itemExit_Click
mainForm_Resize
itemShow_Click
NotifyIcon1_MouseDoubleClick
PictureBox1_Click
Button1_Click_1
ContextMenuStrip1_Opening
CancelEventArgs
itemUpdate_Click
FormClosedEventHandler
PictureBoxSizeMode
ListControl
ToolStripItemCollection
ToolStrip
ToolStripItem
SizeGripStyle
ToolStripDropDown
CancelEventHandler
FormWindowState
SerialPort1
updateButton
IPsprMax
IPsprMin
IPsprVal
Label3
Label5
Label6
Label7
comCombo
statusLabel
NotifyIcon1
ContextMenuStrip1
itemExit
itemShow
itemUpdate
manualButton
readerOn
writerOn
instHandlerOn
_serialPort
writeMsg
readMsg
serClose
latestVal
mainFrm
serverOK
comPort
comFinderOn
startup
startupSerial
shutdown
comFinder
updatePort
sendMsg
stopSer
writer
reader
instHandler
httpReq
setVal
updateStatus
Thread
System.Threading
ThreadStart
ObjectCollection
CompareMethod
Delegate
Antivirus Signature
Bkav Clean
Elastic malicious (high confidence)
MicroWorld-eScan Clean
CMC Clean
CAT-QuickHeal Clean
ALYac Clean
Cylance Unsafe
VIPRE Clean
AegisLab Clean
Sangfor Clean
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
Cybereason Clean
BitDefenderTheta Gen:NN.ZemsilF.34722.in0@au7WjOe
Cyren W32/MSIL_Kryptik.DLO.gen!Eldorado
Symantec Scr.Malcode!gdn30
ESET-NOD32 Clean
Baidu Clean
APEX Malicious
Avast Clean
ClamAV Clean
Kaspersky UDS:Trojan-Spy.MSIL.Noon.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Tencent Clean
Ad-Aware Clean
TACHYON Clean
Emsisoft Clean
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Artemis!Trojan
FireEye Generic.mg.dcf27acafb4a26ac
Sophos Clean
Ikarus Trojan.MSIL.Crypt
GData Clean
Jiangmin Clean
Webroot Clean
Avira HEUR/AGEN.1140941
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/Wacatac.B!ml
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis Clean
McAfee Artemis!DCF27ACAFB4A
MAX Clean
VBA32 CIL.HeapOverride.Heur
Malwarebytes Malware.AI.574869759
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Clean
Yandex Trojan.AvsArher.bUbzqH
SentinelOne Static AI - Malicious PE
eGambit Unsafe.AI_Score_98%
Fortinet Clean
Qihoo-360 Clean
Paloalto Clean
CrowdStrike win/malicious_confidence_60% (D)
MaxSecure Trojan.Malware.300983.susgen
No IRMA results available.