Static | ZeroBOX

Name	Virtual Address	Virtual Size	Size of Raw Data	Entropy
.text	0x00002000	0x0007fe24	0x00080000	6.11064133563
.rsrc	0x00082000	0x00001200	0x00001200	4.61795514575
.reloc	0x00084000	0x0000000c	0x00000200	0.101910425663

Name	Offset	Size	Language	Sub-language	File type
RT_ICON	0x00082100	0x000008a8	LANG_NEUTRAL	SUBLANG_NEUTRAL	dBase IV DBT of @.DBF, block length 1024, next free block index 40, next free block 16776176, next used block 10526884
RT_GROUP_ICON	0x000829b8	0x00000014	LANG_NEUTRAL	SUBLANG_NEUTRAL	data
RT_VERSION	0x000829dc	0x00000524	LANG_NEUTRAL	SUBLANG_NEUTRAL	data
RT_MANIFEST	0x00082f10	0x000001ea	LANG_NEUTRAL	SUBLANG_NEUTRAL	XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

!This program cannot be run in DOS mode.

`.rsrc

@.reloc

$}n(

yP(

+l#ffffff

{3('

S$(2

|%(=

6P(>

22s-

/.(

D{(M

/.( >

/.(

+`X(X

+l#ffffff

n1(j

x&(

l2(

+)k(

w2(s

2g(L

;s(J

G0(2

''(X

Ju(M

/.(

g/('

<N(B

h('

he(C

|C(M

ob(C

+5=(-

+om(:

+%[(

+U+(

+z)(

- (C

h6(

<J(G

Xd9I(

Zd[XT

+70(

UX(C

"t(L

x<sF

}.(K

5c(L

8p('

/"(C

)$(C

-~(K

/y(L

!r(K

/.( X

/.(

/.( W

LA(C

#k('

/.(

p}(C

$w(K

/.(

NC(C

/.(

/.((h

y sF

/.( m

/.(dD(

DvsF

/.(

/g('

/.(

/.( F

/.((h

D*sF

Nq(M

/.(

h=(6

h('

:r('

/.( Z

;m(L

/.(Ww(

/.(

/.((h

h(J

eZ(M

*sF

/.( r

/.(

8J(B

/.(

gE(8

/.(

/.((h

@hsF

/.((h

%%1w(?

Y0(@

$jsF

$AsF

ro(Z

l{sF

/.(

y/(L

/.(

1y('

/.(

Pxp(

/.(

/.(gG(

/.((h

i.(l

q6(l

B2(H

Q!(H

kT(M

?M(B

j"('

f4sF

XU(C

a7(L

m(B

u&(K

:r('

o9(L

busF

bVsF

e3(L

b7sF

RwsF

B0(B

|)(6

RWsF

R7sF

b7sF

bTsF

btsF

/.((h

xB(h

3t(_

/.(

k8(K

/.(

/.( p

b1(K

/.(

r!(K

,`($

l:(L

#k('

/.(

?w('

/.(tT(

h('

/.(

!i('

/.((h

Q,1l

uEQL o

#es-8R

S<(V

+9f(

+(V(

+T*(

+^ (

+*r(

+O1(

+V((

P[[X(n

([[X(n

[.^(

fY(M

OB(C

)a('

"4sF

<z(x

/.(

/.( _

8p('

/.(uU(

YT(C

/.(

/.(?(

/.( v

CN(C

/.( z

tK(M

cwpwaw

vnbP}{Ky|NL

F'pxGTw

$\uHuiu/k

O_Plf?Q)a

<*(l7V

K"ubjO\k7[

)W#WyW

6s"$=X

_LUL6Lgf

y_X'nkYHi

3E4EGE

J0Jr] j

a7aC@iv"A~q

K:_f@Hv

q*eizNL

X$LsSPe

lY^r'|'

``zRo^

AZj?lV

v5Q{t$3yA

]uJuXu.k

6H"@=j

6$"^=s

6 "R=g

"\=|0b0w0

^tJ-UcBTQd

RQMc{>L

FJRWMa{>L

F~fsfjfjx

tKWGWQW

%M$M9M

4HUCUjU

uYYRYzY

,Iy~PN

Io~PN

eOWEiLivi

D'PgOJy

_/KsTCb

_)K}TZb

_9KyTAb

_}KxTYb

-y94&9

!?5k*@

!65l*]

!~5z*F

!'5?*Q

<o9oxo

Mqt@|@1@

^aJgUcGTpd

^hJ&ULcZ

0">"`"`<

7!w>O

5;!a>W

|9"424C4

XXyoO6x=H

g#YoFLp

}3inv]@

ORP=f.Q

3`VGa>Q

q6ewz\L

(X((?p

w>AtvtF

^3JoUEc

+K?M o

FE$`39

Rb*|Oa

CvC]K3

>[l"0b3>tb

:W9P=A=u

a}P!YQ

Me=F+5

/S0fA:J

Lb+A0;L|

'!kyl

!oH5Vmg=

'cbvC4N

"Q`hgr

<}?H)hwj

$hBQ1l

vxAL&aV2-

2C`-?{

+v%=U~

DnQos.B

r&O0A7

jdUjmz

=z'Z;4

|00,w{

U*{9~~

W3R&U8

^IUG`b

|U]fWH/.\

$4,U!.)

J[uu^*

=D*9C/:w

6t#?PZ

mM>$_

r:xcg-t

nK3y&9k

G%a_L 8

:-8`=

8eyq?

p>!$unb

b@.VS~

2%p"wl!i

4\1-`_

d?|G]:w

r)r+M@

5d9h}C

!;d>9bj

V.@#3Z

nR.lH

tL3w\)

rmV]hR

~Vj 9o?

E!qfs9

C' T2>R@

8O\ko}

p@Je@5

M0Y@A]O

f[CvGo

HG[)"`

VW,cRTO0

C7Wn2>

q61yiM"[g=

+@S($[

N0Aov0*k9X

DzE~G\

j+iljO

XK^Vq^

G>cpfw

,|kYC`

aR2eZA

A;TI]/W

UH8j,T

nT?aVx

/55.[D

0&kKx36

DV @P~

6@VQZuO]<7,;

oH,,7k

!k=C'M

'bYgfb@

Os*#6R

|.FL:^2

-y59& n@

_:n+mW=

f&qp:`

hgr<I`

"<~HG*

3^'S8u

i5_hhcXx{p{|{GQ

W9/;/</

+r/r r

/u;:$

o{n{w{

W,_j_5_'A

H8i9i"i

^9N9C9f

<i(w7Z

<?(w7k

ViB3]LkY\{l

VnB3]LkV\vl

VcB4]9k

C;ucBIr

C=uiB_r

H@\UC-uyBOr

C~ueBYr

y\X~n>Yji

q7a737

vyphvov/v

nYqJGp

X0X-I-

:ldmd#d

HxHsH(H

y;t;*;[

x_y_._+A

nQqbG<p

nIq6G&p

n\qsG.p

nXqaGhp

nIq6G:p

KM^M*M

Q9W999

J1^qAZw

J6^5AMw

J=^qARw

J8^gAQw7@jp

<Y>YSY

&32w-@

Y o_X*

T.@i__i

T(@y_Gi

Y6FXpCGnw

}~s~,|,

e'[lDp

ykm*r4DXsqC

LFL0rpm

fbr#m?[

(k<K#'

(}<]BEB

R>\zZmMaA

K]Tvb>U

KATkb{U

K\T`b-UQe

KOTib{U

KXTdb3UQe

K[Tqb:U

5q0q%q

&A(A0A

!- -:-*

[YZYzY@s

E2[e]ereP{

$+9 <

D9C9k9

:<M?E?{?

qJ{JIJ

kSRARjR

i3}nbBT

@3v`ACq

wfqYWHW

!h&hwh

jZgZ4Z

PiG|p^@

eYzsL!{HK

eQzoL1{

qVeDzlL-{

eAz}L0{

H-I-$-e

=8:8F8

jN~oaMW

gQgwY6FVuTu

g(9./

s(8*/

Db[.m'Zj

`A`}^-A*w

oXo5QsN

.7:L%F

.W:K%p

i8isW5H:~.

v4.0.30319

#Strings

1\k

% 2 W ] k

%(%K%i%

&6&B&k&

'G'M'\'

/&/0/=/n/|/

1&1H1_1

"!#=#F#V#o#}#

,6-[-F

EdmScalarPropertyAttribute.exe

EdmScalarPropertyAttribute

mscorlib

System.Xml

System.Drawing

System.Core

System.Windows.Forms

System

Microsoft.CSharp

NariviaCore

user32.dll

RuntimeHelpers

System.Runtime.CompilerServices

InitializeArray

RuntimeFieldHandle

.cctor

SecuritySafeCriticalAttribute

System.Security

Object

TextWriter

System.IO

DateTime

StreamWriter

String

Concat

IDisposable

Dispose

XmlDocument

XmlNode

Convert

ToBoolean

SelectSingleNode

get_InnerText

ToInt32

Boolean

ToString

set_InnerText

GetTypeFromHandle

RuntimeTypeHandle

CSharpArgumentInfo

Microsoft.CSharp.RuntimeBinder

Binder

SetMember

CallSiteBinder

CSharpBinderFlags

IEnumerable`1

System.Collections.Generic

CallSite`1

Func`4

CallSite

Create

Target

GetMember

Func`3

Invoke

Exception

LoadCursorFromFile

ISerializable

System.Runtime.Serialization

IntPtr

Win32Exception

System.ComponentModel

Cursor

FieldInfo

System.Reflection

Cursors

get_Arrow

ColorTranslator

FromHtml

op_Inequality

add_FormClosed

FormClosedEventHandler

Thread

System.Threading

get_ManagedThreadId

PictureBox

Control

FontStyle

set_Font

set_Size

MarshalByRefObject

Rectangle

PaintEventArgs

Graphics

SolidBrush

DrawImage

StringFormat

set_LineAlignment

StringAlignment

get_Font

get_Width

get_Height

RectangleF

op_Implicit

DrawString

OnPaint

EventHandler

MouseEventHandler

add_MouseUp

SetStyle

ControlStyles

EventArgs

Refresh

MouseEventArgs

op_Equality

set_TextAlign

ContentAlignment

ResolveEventArgs

get_RequestingAssembly

Assembly

ToSingle

DialogResult

ShowDialog

value__

GroupBox

IDeviceContext

set_Height

get_Transparent

get_Text

PointF

SetValue

ToolTip

set_ForeColor

set_OwnerDraw

set_UseFading

ValueType

IContainer

ProgressBar

get_Gold

ICloneable

FontFamily

get_BackColor

get_Value

get_Enabled

set_WindowState

FormWindowState

get_ClientRectangle

GetToolTip

DrawToolTipEventArgs

get_Graphics

MouseButtons

get_Button

CheckBox

get_Checked

GetManifestResourceStream

Stream

FromArgb

NewGuid

Bitmap

LinearGradientBrush

System.Drawing.Drawing2D

set_WrapMode

WrapMode

FillRectangle

FillRectangles

IComparable

Environment

get_CurrentDirectory

set_Enabled

ComboBox

set_MaxDropDownItems

set_Alignment

AppendText

set_StartPosition

FormStartPosition

Message

get_LParam

set_FlatStyle

FlatStyle

AppDomain

add_AssemblyResolve

ResolveEventHandler

TrackBar

NumericUpDown

TextBox

FormBorderStyle

SizeGripStyle

set_BackColor

set_Visible

CenterToScreen

get_DarkRed

set_DoubleBuffered

add_MouseDown

add_MouseMove

get_CreateParams

CreateParams

set_ExStyle

set_Location

get_Location

Dictionary`2

Enumerator

KeyValuePair`2

GetEnumerator

get_Current

Contains

get_Key

op_Explicit

set_Result

MoveNext

WndProc

TimeSpan

get_Now

set_Name

get_Black

set_TabIndex

ContainerControl

set_AutoScaleDimensions

set_AutoScaleMode

AutoScaleMode

set_ClientSize

get_Controls

ControlCollection

Padding

set_Padding

set_Text

add_Load

add_SizeChanged

ResumeLayout

PointToClient

set_BackgroundImageLayout

ImageLayout

MemberInfo

GetType

set_CheckState

CheckState

BrowsableAttribute

EditorBrowsableAttribute

EditorBrowsableState

ObsoleteAttribute

Random

Replace

AssemblyName

get_Name

DrawItemEventArgs

get_Index

IEnumerable

System.Collections

Encoding

System.Text

GetString

set_TickFrequency

add_KeyDown

KeyEventHandler

get_TextAlign

XmlNodeList

IEnumerator

ThreadStart

Process

System.Diagnostics

Application

IEquatable`1

Version

CompareTo

IConvertible

_Exception

System.Runtime.InteropServices

WebClient

System.Net

ArrangedElementCollection

System.Windows.Forms.Layout

Button

IDropTarget

Remove

Component

RemoveAll

IComponent

StringBuilder

Append

op_Subtraction

ButtonBase

FlatButtonAppearance

set_BorderColor

get_FlatAppearance

set_MouseOverBackColor

set_MouseDownBackColor

set_Image

MessageBox

get_WindowState

Decimal

op_GreaterThan

EnableVisualStyles

set_BorderSize

MeasureString

DoEvents

set_TabStop

Marshal

Brushes

PointToScreen

RadioButton

DrawMode

DrawItemEventHandler

add_DrawItem

ListControl

ObjectCollection

get_Item

get_Bounds

get_Items

DrawFocusRectangle

get_FontFamily

get_Size

GetData

set_UseVisualStyleBackColor

FillEllipse

add_DropDown

set_InitialDelay

PopupEventHandler

add_Popup

DrawToolTipEventHandler

add_Draw

PopupEventArgs

set_ToolTipSize

get_ForeColor

DrawRectangle

ICustomAttributeProvider

SecurityContextSource

DynamicAttribute

FromFile

set_Cursor

Exists

set_Width

set_Maximum

GraphicsUnit

add_Click

set_MaximumSize

set_MinimumSize

DrawItemState

get_State

Console

WriteLine

ToCharArray

IWin32Window

get_ToolTipText

ISynchronizeInvoke

get_Parent

TextBoxBase

set_Multiline

get_Style

IDeserializationCallback

GetName

LockBits

BitmapData

System.Drawing.Imaging

ImageLockMode

PixelFormat

Double

ScrollableControl

ISupportInitialize

BeginInit

set_Anchor

AnchorStyles

set_AutoSize

SetChildIndex

EndInit

PerformLayout

IComparable`1

get_NewLine

get_ProductVersion

get_SelectedIndex

set_Checked

FileSystemInfo

ToDouble

CopyTo

set_BackgroundImage

SetToolTip

SelectNodes

XmlLinkedNode

XmlElement

Address

CreateElement

AppendChild

Antivirus	Signature
Bkav	Clean
Elastic	Clean
Cynet	Malicious (score: 100)
CMC	Clean
CAT-QuickHeal	Clean
ALYac	Clean
Cylance	Clean
Zillya	Clean
AegisLab	Clean
Sangfor	Clean
K7AntiVirus	Clean
BitDefender	Clean
K7GW	Clean
Cybereason	malicious.58f9b7
BitDefenderTheta	Clean
Cyren	W32/MSIL_Kryptik.EMO.gen!Eldorado
Symantec	Clean
ESET-NOD32	Clean
Baidu	Clean
APEX	Malicious
Paloalto	generic.ml
ClamAV	Clean
Kaspersky	UDS:Trojan-PSW.MSIL.Reline.gen
Alibaba	Clean
NANO-Antivirus	Clean
SUPERAntiSpyware	Clean
MicroWorld-eScan	Clean
Ad-Aware	Clean
Sophos	Clean
Comodo	Clean
F-Secure	Clean
DrWeb	Clean
VIPRE	Clean
TrendMicro	Clean
McAfee-GW-Edition	BehavesLike.Win32.Generic.hh
FireEye	Clean
Emsisoft	Clean
SentinelOne	Clean
Jiangmin	Clean
MaxSecure	Clean
Avira	Clean
MAX	Clean
Antiy-AVL	Clean
Kingsoft	Clean
Microsoft	Trojan:Win32/AgentTesla!ml
Gridinsoft	Clean
Arcabit	Clean
ViRobot	Clean
ZoneAlarm	UDS:DangerousObject.Multi.Generic
GData	Clean
AhnLab-V3	Clean
Acronis	Clean
McAfee	Artemis!86C9CDDC86F2
TACHYON	Clean
VBA32	Clean
Malwarebytes	Clean
Panda	Clean
Zoner	Clean
TrendMicro-HouseCall	Clean
Rising	Clean
Yandex	Clean
Ikarus	Clean
eGambit	Unsafe.AI_Score_99%
Fortinet	MSIL/Kryptik.ABIK!tr
Webroot	Clean
AVG	Win32:MalwareX-gen [Trj]
Avast	Win32:MalwareX-gen [Trj]
CrowdStrike	Clean
Qihoo-360	Clean

Static Analysis

PE Compile Time

PE Imphash

Sections

Resources

Imports