Static | ZeroBOX

PE Compile Time

2021-06-22 18:29:37

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x001613a8 0x00161400 7.26127664563
.rsrc 0x00164000 0x00011ae0 0x00011c00 5.47598124962
.reloc 0x00176000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00174f04 0x00000568 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00174f04 0x00000568 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00174f04 0x00000568 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00174f04 0x00000568 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00174f04 0x00000568 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x0017547c 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x001754d8 0x00000408 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x001758f0 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
@@@(
d<sY
d<sY
@@@(
KKK(
q/sV
qQsV
qssV
p@r&I
"AsY
p@rMM
KKK(
v4.0.30319
#Strings
get_Button10
set_Button10
get_Button11
set_Button11
ThreadSafeObjectProvider`1
get_OpenFileDialog1
set_OpenFileDialog1
get_FolderBrowserDialog1
set_FolderBrowserDialog1
get_Label1
set_Label1
get_LinkLabel1
set_LinkLabel1
get_Panel1
set_Panel1
get_Button1
set_Button1
get_SplitContainer1
set_SplitContainer1
get_PictureBox1
set_PictureBox1
get_GroupBox1
set_GroupBox1
get_CheckedListBox1
set_CheckedListBox1
get_TextBox1
set_TextBox1
get_Button12
set_Button12
get_Label2
set_Label2
get_LinkLabel2
set_LinkLabel2
get_Panel2
get_Button2
set_Button2
get_PictureBox2
set_PictureBox2
get_GroupBox2
set_GroupBox2
get_CheckedListBox2
set_CheckedListBox2
get_Label3
set_Label3
get_Button3
set_Button3
get_PictureBox3
set_PictureBox3
get_CheckedListBox3
set_CheckedListBox3
get_Label4
set_Label4
get_Button4
set_Button4
get_CheckedListBox4
set_CheckedListBox4
get_bnF5
set_bnF5
get_Button5
set_Button5
get_Button6
set_Button6
get_Button7
set_Button7
get_Button8
set_Button8
get_Button9
set_Button9
<Module>
AZXCCCCCCCCCCCCCCCCCCC
get_DESCUNION
System.IO
SSSSSSSSSSSSSSSSSSSSSSSSSSSSSS
Dispose__Instance__
Create__Instance__
get_bnActDea
set_bnActDea
get_taringa
System.Media
ProjectData
get_Carpetita
get_bnExa
set_bnExa
FromArgb
mscorlib
Microsoft.VisualBasic
get_bnOpc
set_bnOpc
add_Load
Main_Load
Instalar_Load
CfgChooser_Load
CfgEditor_Load
Opciones_Load
About_Load
CheckedListBox1_SelectedIndexChanged
add_SelectedIndexChanged
remove_SelectedIndexChanged
GetItemChecked
LinkLabel1_LinkClicked
LinkLabel2_LinkClicked
add_LinkClicked
remove_LinkClicked
set_Enabled
set_FormattingEnabled
get_IsDisposed
m_FormBeingCreated
Synchronized
SystemSound
get_FileMod
set_FileMod
get_FolderMod
set_FolderMod
tempmod
set_SplitterDistance
set_IsSingleInstance
CreateInstance
get_GetInstance
defaultInstance
instance
GetHashCode
set_AutoScaleMode
set_SizeMode
PictureBoxSizeMode
CompressionMode
AuthenticationMode
ShutdownMode
set_Image
set_InitialImage
get_Message
IDisposable
Hashtable
ToDouble
RuntimeTypeHandle
GetTypeFromHandle
set_Title
DockStyle
AppWinStyle
set_ShutdownStyle
set_BorderStyle
set_FormBorderStyle
FontStyle
MsgBoxStyle
set_Name
get_FileName
set_FileName
GetFileName
tempmodname
WriteLine
set_Multiline
CheckForSyncLockOnValueType
GetType
get_Culture
set_Culture
resourceCulture
WindowsFormsApplicationBase
ButtonBase
ApplicationSettingsBase
Dispose
StrReverse
DebuggerBrowsableState
EditorBrowsableState
GetItemCheckState
Delete
get_White
ThreadStaticAttribute
STAThreadAttribute
CompilerGeneratedAttribute
DesignerGeneratedAttribute
GuidAttribute
HelpKeywordAttribute
GeneratedCodeAttribute
DebuggerNonUserCodeAttribute
DebuggableAttribute
DebuggerBrowsableAttribute
EditorBrowsableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
StandardModuleAttribute
HideModuleNameAttribute
DefaultSettingValueAttribute
UserScopedSettingAttribute
DebuggerStepThroughAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
DebuggerHiddenAttribute
AssemblyFileVersionAttribute
MyGroupCollectionAttribute
AssemblyDescriptionAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
AccessedThroughPropertyAttribute
get_Blue
get_DodgerBlue
m_ThreadStaticValue
WithEventsValue
GetObjectValue
Remove
RegistrySecurity.exe
set_Size
set_MinimumSize
set_AutoSize
set_ClientSize
ISupportInitialize
System.Threading
Padding
System.Runtime.Versioning
get_UseCompatibleTextRendering
GetResourceString
ToString
GetString
add_FormClosing
Instalar_FormClosing
CfgEditor_FormClosing
Opciones_FormClosing
disposing
System.Drawing
OpenFileDialog
CommonDialog
FolderBrowserDialog
ShowDialog
get_firstlaunch
set_firstlaunch
get_SelectedPath
GetFullPath
GetFolderPath
set_SplitterWidth
get_Length
get_Black
Button10_Click
Button11_Click
Label1_Click
Button1_Click
PictureBox1_Click
Button12_Click
Button2_Click
PictureBox2_Click
Button3_Click
PictureBox3_Click
Button4_Click
Button5_Click
Button6_Click
Button7_Click
Button8_Click
Button9_Click
add_Click
remove_Click
set_CheckOnClick
set_Dock
get_floppy_disk
get_Asterisk
LinkLabel
System.ComponentModel
set_FixedPanel
SplitterPanel
updatefail
get_bnUtil
set_bnUtil
tf2modutil
ContainerControl
ListControl
ObjectFlowControl
GZipStream
MemoryStream
get_steam
get_Item
set_Item
get_FileSystem
imimimimim
set_MainForm
OnCreateMainForm
resourceMan
ToBoolean
set_TextAlign
System.ComponentModel.Design
m_Main
get_Main
set_Main
set_Margin
set_Icon
MessageBoxIcon
Conversion
System.IO.Compression
get_Application
MyApplication
set_Location
set_ImageLocation
System.Configuration
set_Orientation
System.Globalization
Interaction
System.Reflection
ControlCollection
CheckedItemCollection
ObjectCollection
set_StartPosition
FormStartPosition
TaskCanceledException
TargetInvocationException
InvalidOperationException
get_InnerException
ArgumentException
set_Description
set_ShowNewFolderButton
add_Shutdown
CultureInfo
m_logo
get_logo
set_logo
get_tf2modmanagerlogo
get_Gainsboro
CompatibilityMap
Bitmap
set_TabStop
set_HorizontalScrollbar
Cargar
m_Instalar
get_Instalar
set_Instalar
get_bnBorrar
set_bnBorrar
Actualizar
m_AppObjectProvider
m_UserObjectProvider
m_ComputerObjectProvider
m_MyWebServicesObjectProvider
m_MyFormsObjectProvider
SpecialFolder
sender
get_ResourceManager
ComponentResourceManager
ToInteger
addedHandler
LinkLabelLinkClickedEventHandler
FormClosingEventHandler
ShutdownEventHandler
System.CodeDom.Compiler
IContainer
SplitContainer
get_User
m_CfgChooser
get_CfgChooser
set_CfgChooser
StreamWriter
TextWriter
set_Filter
GroupBox1_Enter
add_Enter
remove_Enter
ColorConverter
get_Computer
ServerComputer
MyComputer
cfgdir
get_steamdir
set_steamdir
set_ForeColor
set_BackColor
set_UseVisualStyleBackColor
set_VisitedLinkColor
set_ActiveLinkColor
get_RestrictedError
ClearProjectError
SetProjectError
get_ValueEnumerator
Activator
.cctor
m_CfgEditor
get_CfgEditor
set_CfgEditor
get_texteditor
set_texteditor
Monitor
System.Diagnostics
SystemSounds
Microsoft.VisualBasic.Devices
get_WebServices
MyWebServices
Microsoft.VisualBasic.ApplicationServices
System.Runtime.InteropServices
Microsoft.VisualBasic.CompilerServices
System.Runtime.CompilerServices
Microsoft.VisualBasic.MyServices
System.Resources
tf2modutil.My.Resources
tf2modutil.Main.resources
tf2modutil.logo.resources
tf2modutil.Instalar.resources
tf2modutil.CfgChooser.resources
tf2modutil.CfgEditor.resources
tf2modutil.Resources.resources
tf2modutil.Opciones.resources
tf2modutil.Utils.resources
tf2modutil.About.resources
DebuggingModes
GetDirectories
GetFiles
set_EnableVisualStyles
m_Opciones
get_Opciones
set_Opciones
GetTypes
set_ThreeDCheckBoxes
Strings
get_Settings
AutoSaveSettings
MySettings
LinkLabelLinkClickedEventArgs
FormClosingEventArgs
ReferenceEquals
m_Utils
get_Utils
set_Utils
get_Controls
get_Items
get_CheckedItems
System.Windows.Forms
get_Forms
MyForms
set_AutoScaleDimensions
Conversions
System.Collections
MessageBoxButtons
set_ScrollBars
RuntimeHelpers
SystemColors
Process
components
Exists
Concat
addedHandlerLockObject
GetObject
MyProject
EndInit
BeginInit
GraphicsUnit
get_SaveMySettingsOnExit
set_SaveMySettingsOnExit
get_Default
SetCompatibleTextRenderingDefault
DialogResult
MsgBoxResult
ContentAlignment
Environment
InitializeComponent
set_Font
get_Count
Convert
FolderBrowserDialog1_HelpRequest
add_HelpRequest
remove_HelpRequest
get_BnInst
set_BnInst
set_TopMost
m_About
get_About
set_About
get_picAbout
set_picAbout
SuspendLayout
ResumeLayout
PerformLayout
get_Text
set_Text
ReadAllText
WriteAllText
get_ControlText
set_TabIndex
MessageBox
PictureBox
set_MaximizeBox
MsgBox
GroupBox
CheckedListBox
InputBox
TextBox
xxxxxxxxxxxxxxxxxx
tf2modutil.My
ToArray
FromBase64CharArray
ToCharArray
ContainsKey
get_Assembly
set_InitialDirectory
RegistrySecurity
MySettingsProperty
FileSystemProxy
WrapNonExceptionThrows
Tf2 Mod Manager
DActiva / Desactiva / Instala modificaciones al juego Team Fortress 2
bluFiles
Tf2ModManager
Copyright
bluFiles 2013
ola k ase
$b87eb131-34ce-456a-8038-b215473ebffd
1.0.0.0
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
PictureBox1
Label1
Label2
Label3
LinkLabel1
LinkLabel2
Label4
PictureBox2
PictureBox3
Button1
Button3
FolderMod
FileMod
CheckedListBox1
GroupBox1
GroupBox2
CheckedListBox2
bnActDea
CheckedListBox3
CheckedListBox4
BnInst
picAbout
bnUtil
bnBorrar
TextBox1
Button2
FolderBrowserDialog1
Button4
Button5
Button6
Button7
Button8
Button9
Button10
Button11
OpenFileDialog1
Button12
Panel1
SplitContainer1
MyTemplate
11.0.0.0
3System.Resources.Tools.StronglyTypedResourceBuilder
16.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
16.7.0.0
System.Windows.Forms.Form
Create__Instance__
Dispose__Instance__
My.MyProject.Forms
4System.Web.Services.Protocols.SoapHttpClientProtocol
Create__Instance__
Dispose__Instance__
My.Computer
My.Application
My.User
My.Forms
My.WebServices
My.Settings
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3ahSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPADPBj
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
DXz&7~z
}Ulge%
#bcR]X
d]R^*cFV
9+<<+
x.*-F;
!nA0qI!;h
%Iw "QR
6x&J~*Io@
r$|v3h
'Qi2R
$x:+uJ
DdZ+ZS'"
TLEFLMJNMN
ZVMMMJKJKVJQPY
`\WY[WYWZWYY]b
gff_a^babc^edh
Es una aplicacion que le permite facilmente activar, desactivar e inclusive instalar nuevos mods al juego de Valve: Team Fortress 2
Esta dise
ado para facilitar y automatizar los procesos mencionados.A
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
UNICODE
"1#2aq3A
G:gjqT
.7*/2te
!1Aq2Q
|Zm]Tr
KWgp5H0
A@UmSU
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aBj
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
DXz&7~z
}Ulge%
#bcR]X
d]R^*cFV
9+<<+
x.*-F;
!nA0qI!;h
%Iw "QR
6x&J~*Io@
r$|v3h
'Qi2R
$x:+uJ
DdZ+ZS'"
TLEFLMJNMN
ZVMMMJKJKVJQPY
`\WY[WYWZWYY]b
gff_a^babc^edh
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aBj
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
DXz&7~z
}Ulge%
#bcR]X
d]R^*cFV
9+<<+
x.*-F;
!nA0qI!;h
%Iw "QR
6x&J~*Io@
r$|v3h
'Qi2R
$x:+uJ
DdZ+ZS'"
TLEFLMJNMN
ZVMMMJKJKVJQPY
`\WY[WYWZWYY]b
gff_a^babc^edh
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
hSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
ZIDAT8O
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATx^T
H;]"}{
&=2;hWV
4d;N3k
sx8~PZ:
qv~fFp
1KG^:d
L(&/z+0
WN~B2x
t}|;+T&
DSS;p~
oOgV~d(
"^RmRO
}VTf^\
^d<{R`
`6%?5Ql
J/<eAp
p!&OA0
= DS8G(
rsac6 Q
~`mfVz
9>pL3`$N
-iVhcnqC
CO`Q8gM
<Lg/p&^
DAOqu`
%iU)aK
i3xiN0
7I<}gHK
[g@-p.
4-ymmx+
](q.{@
k1FE1J&
3'E#LUq
^_]OP'
b;-(?W
85<?Fyj.Le
@1JUEf5e
iKT:3p
x3K1ga
tx\mfK
/vbf]d&
W$kd;K
]Am3M}
hLs_k"a
j]{p){
TOH_7^
yKvHoZ
>N|q1[
!kzmvg{*.q
@9ie6N
#LE/-[)mr
l0w5.:
{hD\`t
n#\'M
\CyZ|[%
KL_,<
mHB!0@
~q+W}h9
7w|dkI0
zyoKRuD>
@\jn5m
*3ByAZQI%h
}YTch=7T
*SI?|R
QhCwVO2
!Fax={
wx/x(<
axQP5.
qL,mx'
_u5Mh@
_-k8!N
@9Mj8sxor
MqzFK$
Ch$~apw"7
Y{R:4ab
zqdZp#
?/&Juq
^9:d!S
l9bY^%
N+1Zt\0
,Q@]Z=l
Dy@E6QQ"ZY0
,^zC9c
dq,`*@.[
{"r2((
8iH6[UE
)1CeI(,
CgU>"@
ISA=ft
'rhB!y
Mz[po]
:8*Ih*
sv'hWXN
;< i@
;?slb&
ty>\{l
Fbcp3F
5+Eman^
M8?F{#
ZuFud*
CtPZ}]
~AU=-{
UHRRe:
ljPaP@@Z
G@G'<m
4&JVd\
Tsaju5
<7n(9g
j~!)0"
G{_r9B
@@18-P
0@F7@Zd
T7>&xH
/DNmiO
,:|Dx
02FyRy
?\0[J*
31LKWry
kqNn4fZf
c05PLZ `
F!GB/
|!T>=.
@ L_99
PVjy^&.2v9
zNHwT3
5~0|B}
-E.>zgy/
8f"#B/
`;/\?AC
]RxN?tF5
*{r@8#]k
u\Af)=y:y
oa?u=7I
1EN2m/
Kc~vrS
/L:I"@
VQ7M,,Pj
+q[(cf
|U`nL^
,_[5Yv
4/(lOO
M=7c|j
YlxDSg{
C;_/pgj
S}Ox9mT
wb%\q%Z
e@ABDy:-g
/"i+X#}
N52a*$
)cFZn&
|1'{oc
88,SU_
?5(;n%[
t%E#l
jY07SOX2
G,fI6f7
_)2Wic
UGY_76
\'jvgGE
1|Eh\o
|xqnQh(
`^tMTM
!K<~!|
@}Ja"tK
Sv1K`3
+,kf78
"of*ivrF
E>j>,{
|:yrbJ
,z0xn,V
,J+pRt
n}c+4N[}
Vd}x,
X{fEdifNt
!(5d1W(
WBzn 7
Gz(hoO
egw?ev
h6G}=_
'H$n{W`
D:!MxA
J\iyk
&kYvI=n)I9
R#NYv_
-C()Oq)*
Z d}F"
N^L52B~}j
QGHx|a
lA%S<t
Qb~3:<
m[i*xI
QJtE'0
!~MPLB
^I#eU`\
yAfb,
B=H)`**P
}<v(iMJ3_
HcUxy_^
_WfZ'#sww
/nH$ay
Km%w<
YM(D^{Ej
&,RiR
ruxQup
C}4aQi
#/f(U]
\_S8ey
ydboox-]
^'+'~g
o#~!%n/*
'H_[$hO
C7wL0`
a|(RGv!E
K:*YKb
V*I<:$$
V:QBg@
Ei#lO-
~_Muu5<
ZQ(4/\(
.F,52(
?Z>)+?:
^PpOd.M
mt<8L-
0THSEd4
+UV!N/
|Z"?$Vb<2
4`}OFPa_
Mw<P#T]`
{tSpb
[;9u KQ
];?M:V*Q'&
+<hP5T
SBNQH5B
nE~UV
=0DX0\
FJ/wDX
N>Hf;?eO
SCzeIpa
l*\s8rf
y!y@k~.
"r[r~-
LpQBXl&
pFQb^\#
,_9]rV
G5AO(t"
eeVD9eP
b,KZ~W
RaeKm/
p]oPjWk4po
T/$}5
)HfEJJ<P
5H]VNd
U'DE8t
CkIh~S&?
&#?gi]
.^)"5`%
21&u-x
Z%:jQA(J
GGrNO!
Nf!?rF
Uw3Db>,P
p;fc4Lk
.W^[87
_GN:sw
pNS3e3
PP2SrPK*Q
1MMWWz
%yI[*%Ax
zV @V\
}ccLJL
saRi+Ai
elna~rI
%'-oTnj
~:Okw9Z
w&"k]E)
v1UGa8
tp2:VZ"+2C
[8,RW}
@UPu9Z
?-.UOh
{s+^U
ovK7Lf[
)?EFy
u8eEUKi
[M?V}
$_ .#4D
J0f_$9Z
o.V;<h+Q-{O
M=d]f%~
&P2pqT
q8.pPB
5ANkdg
JBo#mS
q%cP9t
{ujDL)
?ITIHf
@E_6hB3
8~0b2i
U@De]5
T]In5J
op[_d}
NCy0Rt
_%PU}j
t[R<E)
Cr,JQ?
7iH"?]/JMxaR
T_R)gg.|
B~h7#"
0Pvhy7
mYb)wT?^X<z
bk{ S&_
@i(/IEt
@qe9<|3
f]6@F3
oRz=PHVg
PIPX*s
q'Rb$3&
u9U#w3
?|C!`#
d(BFcb
ku}7Ny
.i2.j2
*~WBsK
T0Rk^"
-I46j6
cpY0Z&
kI0;iU
xo}*[k
fS.[Ov
{c*=q
?iquhcG
[V%Zx,l
,?shZj,
f,9hRR
0{Wq#'
U!YVHY
Rg2,A-
fX@X.G
#AL#N.J
H:LxD
,IzSjo
~CCiV8
DbB_~GuA{~
Ysf7t.u
OE5b#Q
~C;=qK
_K~rLj3
~Q~avC
>g8(Qa
P|fl]Q
#<k07z
q7;"bH
u5VdBC
=9jr"xp
pT0%L&
M%{{jA
ZNiFdL
^!yB(\s
op_/y3
=dJ=_=G
W7|EgM
zc$Vp7
-OJ*lz
>liA9H
z*P6r9
aoo[ON
~K$Rr1
zsWY27
O`"pB*_
>enHLqU
swgC5_
Pb@/J)*
G@Uw9)
|f>g37{3
\+qfEy
wv0YxD
f@c|(6
_HuwW5o
}k+pm
D\"#=^
#y&zIh
uB]c Ex
HH>b(zJ
jSl]\}
IaNO#}
0o9ZOx\b
0$<"m&
-H.l>P
9NY^8T!e
-c^?acD
@mU{mq
0H[;xS
4bE<{H
|$grFfX
SSdrl4
]y{{Py
eDDGTLT\'
,Zz9ab
Db6[3m
dLr1R'
xwnXy.U
F)AeR
=A\P#r}w
t!s7nQ1
2NhMt{xU
OWgY`3&u8
@1FAkw
w{3}huu
+I4=Oe
@GChn
@%Mj*v
<fm7cI
d/#J~\'
yW!i39
7znlRA
Ud$#g
O/]bTN
(1%.$2
T!~^r&
3Q_FY'
;FgCW;
_{0cS\
+6N2AeL(Gx
sGG88u
}Zg:j m
sJi;~N
7>Hr3b
j_E&F|
XZJ^23
x*u#ROF=5[
`;2l\Y
WWKy%jS_
pVR2V
g9?"V2
5dz|i5
'H%r9{
$7moUy
HwH7CK
iCmU|;3)
oD$!8Q+
cpU1vh
wmleBi
ObB3^E
If34m'
RlF5`|
[7gF,v`
]`'\u
P`C\)&
O?<WbQ
nLm`T(
sk4c}@
(RC'D$
YZa'4{
D^rzwt
d>]~HY
RG/l!<M
gQalB)
e/06+g
9bzTaQ
,_w[68
g5@lD9j
|zA5RX2
B=?c \
;.L4WZk
"k*7Z;
\WuCCFx
~0^zTL
.c_H{0
&7S"D
q$2 kZ
q Qet_Tus
{/v&V_
r@pZ_M`
X>NwCa
A[=fw<0X
+14L3i\
AX`CZ@%
UGI{TRx
~)VGoKC
gbA k7
,QbY T
iP7IM^
k~m(Ij
62HYdC2+
I}/7Sf
A4<1_%(
_vh4xAb
CKG!*+
.yzolK
&s4eeI
~Qt$_?y@
ToA577
;Tvu=V&
8}A<[=UTG
vw3+PP^*E
^T9wFL
h#|mCOh
1N~s^x
-C_Z-
%]y ga
VA4P&a
@"5@bI(;
B^C!1R*
w%)f<N
/YzRXop
^.x[9Z"
DA^~0\W
tt>M<qD
9oE=fM\
7S08RZ
@,ha?pL
{UT6wqx
Oj$SpE
XlmH :
Urfp8e
yu'@^4
[!gp>
@i`@T0
A%>VA%z[
Ubrtqy
b}Hw?gs
96qBph/s
,tW3(r
}daPPkQc
t@&vms*
DW@"c
elrL-N
(!7#;>
r4sa7R7>E
WwRFkA4
^Hr'V^
,1N?ca
=>f6%f
~[Kp-q\.
Q2SSN@6b
@`kOAC|
U7CuU?:
Bpc}Os
dg"7T^
$b26@
ufT\3)
D6RvRg
Dl;G.6
^;,ff#
c{sV';o-
KP9ttR
e4h^MOVo
.OIJc}
X_98fE
6E@QgRhP\
Ztb)Ii
!\g!-#
|IV"5a
76r1,?
y_n8xOX
xi11mj
Zygz]<
9[x7vJ/w]
&~B(AB
be=dR_^j_
qZ%?4mSx\
;9YSPf-19J
Id+){d%{
#YAc,c
6)1r(K
Us=[34
FWDd?\<
elEV]3Q
n%Oim}
LP)spc
7q^3TE
m?<$b$
IsX;f%
A"$&<)
!@w5c&
z{>U<w
M`8Fb9
:obP=p
catI(7X
^|;]H#<
!`c&cR
HU?_Ro
\[3]OKz
$qJZ<A
:h/G#0
CZhK3ZI0T
J/t*|
FcMy%>sk70
o #{ZoV
q"Iyp<
[$T&=D
aNg;4\
Hs*O`ovF@9=
"Y%bbP
gJZaIvcp$F
=Wmet}
k1E(?K
8-M<-Rt
@)`_;#
a=9{#PO
e1xV_pZO!
Pb<==
-*xf]x=
b?#Y)Z% :
-dBXQEM
dV$bWf
z)s"XD}
Vzx<uD
330A)0
rCRilK
}nfWTcg
$ON]/oS
k_T5]'x
o7L~p.K
y!!9Y[
O$$@fv
~~;4%z>
wIV.m#
C[@?N+
LI!$F~
?7nP!/
`@BEX
Xl^N|Z
<} Gfc1
go#qKBf
)d@";{
JOIno8
%b/<*7
I6rLL6970
"O+BOY
ok`.p'
Dyx&#O5
^1$=|<
T'CAy>
C++w^|
J67Qv*
)T-?1e
"K:Cl9
SJQ[X
cT#tL
}Ig|a'S
g&]:B1
m&j,.R
|V+aUp
?bw;CE
#)xsAPIH ,
"A~ZnR
MZAG_Y'
A!ogyr
\<OfdX
!;}:
5&g,x{
wvC!zHq
R>R,S|
=x(|/H
bf#bS*
%z?hgTo
96_4rTB
H2(Hj!
:@Hb`H
Qp;tTV=:
pEqxh{
1NN:}b
18#@?3
ahzjSo
Uv_N2[
O>HIT!
['KY(9a
n9C>}.
_bEW,
@x?7I<
/?]C}6
d=="S/C
CgS)RZ
^M+}t'
^;V"hx
?wh=x=
JiA.YfihX
>oAPD
hBI:PO
_") t6
*/nh%1
V)b09
g/a9<rM
'R=Yv}
e9#64N
C5?f].
~%f.0!
-;wojP
E4J'@&b}
F%$5=c
\Jzt121
j@Q"/#@
'HiA1fX
99O,,7
^SS9"\
3=bi{d
+gB]%UY
IBDcR|
v*/.K5
*%T(VQ
nC4@JB[
|l7K&EY
?>?/)U
$<Qn<{&
X`_snv
oNwwvn
Y@to@.CV
)=o$x?~
b|/<c)
4MIfr,Mc
h?zUC=
82FF.+8W
i30R=8l
W%[\#i
qhWh~X
fO@ss7
Mcd-(
aE|D6&
4SJ!$}a4&;
E"I$)c
u6U1sc
C"@~,K
-]i8<[
,w+#T">
t""PP6
M.4e>oK
+58N{n
9/VNWB
Wuy{Ng
Gh"&@p
T1f{|!
YKclc5
odo{'
#EvfJI~
R0'=ko
Y*S04[
JR}[jD
|Hit2G#
Wr;;.L
8AIQ|QQ*7o
_d"QK(S;@
IclyM
nK^)~G]
odUt:m
?YK8.
d1a*dv
fX3#Sf
"d\)tY
{4[++Q
ku*bR
_xJ}&a>:
R]zk:m
yR$fm|
c#8{MJC
"]^"hnnM2
(Tz=.9
4;?D}3
)5|T;%
PZ8>;B!
#,DN<[
7d_ q?
.)40N~
7.efllT
3t|vW%
\GX0Kg
|"tTxx
hI'\mM&zZ
1>S}buOn
{5](Ry+
"HLY8O~j
7~hmyP
=.}]]j
A:Dd#S
Eitt*
`JeEYU
Y##Ut>
g?lHYK
`c,NEqI
Waeg?F
Ys]U&X<5
/u%L'au
Nk;1tZ
&~)C[&
Xc$JU8?
67TKQ-
DRvYMm
+Q3"%G
yxw_9
JR3p29:
Mb4g@.
(DY!J}
CIA~IN
Ti8 s9I
CRUc(1
]CHNGky5
>OwlS-&V
bkrjQbh
<m`]_leE
r---'y
=sw_LV_
D/I2DF
*>^tX96
;mXz]_
U]X@B%
?fR~F^:
<Mq+aq]4)
\y gX!a
G^8B/`68
jT-XcX
-jh#6O
4'u\Hl
d#,=JI
~C@=0xU
o:G%~[
$:C%;'
x"L_-G
'=kUxh
[/Y&wj
"4Rk+#
WB.SVz1
J$Wjgf3|;
fZ\;GGM|
no1&f[%
U,+D]D!
rkOC8O
I0!404
vtO_g-t
=k+7Ie
z2Tl]L
F[5DDO
z~;r{7%eg
?/54j88
.KN!sV
7FH_D5?
/aArpQ
+F.~[V
BceOi"(
:@"u(&
Ofg!%',
AKKPw(
lJhLzTr0
C2PK#0
xpn'%+
0gN<na
3Be$"*p
Bx~@x"
?g&hr9.
\Kn0l34
G 1@'D
i\"Vx3]
E?x,>\
`;vSR5
<p/zV`
6y>Fr&
Dy3d+$
@cd_#t
Xbe`S
3'442h
Bvi?LhuK
|7WZU6
{'?i:9e
a8^R! 2
YRl={c
1m8jN6
BG5!/<(
+:nrbv
zB"jQ.
stZq4f
dqJq~:M
;t]@s4
I!9]V_aQx
=pwUM=K
>IJ=sLU
Fq~,=3v|
rRP3=z
6Knx`}
J^FyJ6:>
b[Y5#Q
)-{817<
nMH,mR
ld*$kz/
8F_ 3_
?%?x7gc
tldpE2.Q
/'kq2O
R^fQ^4
B]0%N
7#s)V^.
D*fs5=
WeneL9
uyHVb])
mq[%,uSi')
m?<Yt(
"MT0nHw$T
FH_k~c
ryiw'\
-NYu2e
J* & %
7:~DD/
}^9HL$!
lUVmL\
},Oz7k
(pUysR
RAa'Q<G
KCs2Mi
>(r.FR
G0yG>|j
Oh UuA
yX~qQxf
!x\('(
3Q|)W?X.
D2|_sL
k&_j[v
[;XdlO
=t-Ky+\Rv
fYZK;PuF
Y`O_x
)B)`YE
6VeI&H
A~u&,wm
?U0P?z
7_{*}sv
?ZhIm6@
@0@(NBh
Sx`&2\^
T6<Wu
7_#*;Og
F|%wNJ
P;\Qz7
T3b@#'m
FyzX?4
K\#]7y2
$A0#GN
$mk4&
(o6lMb
YsW9,3E
wpW48EEb
)-HuAF
*RJ&'"u
4N^|=+
u?Gr+I
n1m>u\P)
==[\E4
=NJg*<
|MR[%a
6|?Oe&
wzGjk
;G8z~/
<||t8XL
w{Sdq
npG?R{,
XWunXdJ
@g0d->
d=eG-9
8'J#WO&
N,O^m9e
yj,\M!x
_TQ&cSffc
VED!6x
^Z92J
xkm2tL
yTC7<^&
GcUE+gr
2EGDmc
Dz^a_+
]8E!(B[
EuwS+i
M/z`w,
n?2"m|
d9\D/vB
j4G2q|..6
zF?Sz
Zdanp%
?D@"*q
AFO(N8
dr|@ !;1.~
g::2vw+=
O-w]q4G
'8,LGkE
[e0W?2e
LA3;q#LM
}JG3,h
#dxa#W
z^3oS>L
WFA&o<
u\(PL>
~wXgvI
#6amP9
^@K;6$
;{8u]s
"8-d6Y
SwiDnk
LJ(cf@
t._9f
+B9%tYS)
\+!LM,
12H-]80
,4\6NS/|)
jd.}!H
/W*&95
4D<1eS
Mtv^K+
Rb/Y+^m=
P`68GB/
(e%O71
VS)d0
6kLcTp
*)QsMO
(bPYFz
W<MOe4
'H|~\N;
.My6fH
U?>LeS
W~1;(7
F(RKG
+/V:Ro
)Il{_
0f0=d?
vCK^i|
@=W~+Kp
* XBju>X=
Jr^8'w
?jgJ9/k
));=1q
r?W/lr%T
i.,c>Xq,
$1Lt9@
\>U6R."mF
|?^unO
3'x 6O
vq{n@+
uIHhB_
)lSM&7
_*I;Ng
,-1qQ2
'fJ6%*
0<;U(m
j%~6(\
B[&2TV>
gtik6QVl
#]FJ#m
>$>xOa`
!=I]r{aDO
b/[I5:
C[EIJ~
ImO}xd
{X<@)w
*9jZ>j
|zn$\B
<MkA|Lip
Qx+E'$
v.eL}:p
"y?dt[
/zma1efv
zW\TT}
&EJfQr
u_{)[?
v6O%yKV
OQKHD~
_kgdRw
< U Z
R$t:75
T+ldaq
S.4Ke{t
_,Bc)X
zr9t|9
=HQfPB
CGb?Bx
|<OP@|-
JPa1LY_
}lZr=V
UEjr*V
+HFl+B
L<AeYP
#HuANK
;Z;BH~
f~o=])
Coa,5}
,t/@dP
pb;+_W`
UJ#UPp6
LI4P_d
nA`AM+
ZMW5Su
Bc-7cT
csnRm#
Im,Bkk4
4D~<<!
KHBem/H
FfdH=U
eIJi.~!
[b{aG>
gofis=
> /`M8
'I7T?#m>
"#Zu"x
^a$lxM%
Vl{A h
E5WQb)zT
Ca_[y%
+/y4xV
iH4jU:
V~z%?K
"]fPe
DpTp4^r
6Edy[T
i*iK98,d
P8c4;y
Tr<T>-
`>C7x.
D8MZ&j
5v/wQ7
nh pDam
Im|\$)
h~iqypS
tf$Z(X"
=3wzCj
gtQ2OE
*?BnO<x
znf{z4s
-/4<y$
\|#g>e
_qp`-RnVp~
?c!(d+
-eh]^m
JbyKQ$Bc
?T*y&&
RiS>u}ns
ipcN.q
:Q``G2
r sjb1
gxa=u}
Am-X5+
"`yW+-
:VI,dg
5B.S6A
#~)-7MB
bRp/10
d}c'v|
b#Wo@(
OlFoRc
ws|Blh
NT9&Q
3c*^?3
)"`cQS
23#]')
1bJ3>cL=
Sr'x:m
Yl<nY+
~+NYB=
w4Nf3
v32"F#
Rz_2P*
oO:)E{
_d$j-Y
NAFX"#n
R=G:Sjd
P>kW>h
={74iT+v
nP}%D$
xJ-|,yC
ka8,r}n-
#|;L6su
o1'hGY.$N
|B>ymZ#g
XQ)= 0pp
*;bdH}d
h1cA.o/s
x%X! A
2oTMF%
+hX!pz
Vt?Dl=
;RJU$)C
Si(o+?>"
nrERVzR
M6ZBZ[
;jfPI
)E}%}:
'c@M=P
\@RC#
ASfp*p
&^8?q
9*L6/v
I&*'<J
r(^} ~z
sCYDS.`
A7'{P[9Q
p=|.\J
ZkeUs2M
nk7W8/
']S4vw
dxOx,FC
j%^z9FIa
tZFynu%
_yKf&U
b0\M_Aj
?_X>uc
}BjVaH)n
kr|:3F
x$kLT[(
c4N-2^
i&v~s9
ztd}kt
Z,/*<K'E|
,eaW1k4
n8SDX
=Dr9Wq
Q(\VEE
`[Xoo
Jk/>)Q+
~:MFcq:
@t]tj%
/iQh?^"
`n9VJ^
aRZ1w|
_JxdL3
5C=37W
Q=G9KR
9tx]Nm.
gYx$S^*}f
Gw*Cy#
leacU<
seI_>a
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDAT8O
A.mx@;~
tS<@.m
BeUE|:
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
<RC*(l
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
?IDATx^
n?62RWW
bbb\{zz|
%~;V?jG
^^^~Xn
:\~(tP\
a2h8G5d
QpsXvv
gxEm;!q'ac
Am| lhH
&cr*r5l
' # wa
!tbXs\
EiqQxYiIxeEy
$m;)UB9
WSS3/)
,Ejjr@JJ
'&&p8tOF;
V?"{'
Jd3ArT
`bhOOW
E'@C7<
K.]X!"
`QDqaAD^
$m?9MD[X
h,\51>
ptOLX{FQc7
RxYidUEydeyYXqa
uPq`uM
@QU]]uZVV
@@F4 C
:--%"&&:p
*@cll$
/r6(4N=K
77~x~Y
,OJLL`
QlnQ44
(O**Z$
xaWG[ZW{[jg[kJG[krgkKRG[K
"effH9
r{{:PC
BR*#qN
8Y&<&#$s
nyd\q]S
E8~|$at
|<S^V"
1:j)u$
!%EE^r
w,=d7[:f
8Zkk*Yc
9y2 )C^
M^O8GV|
6|gcWI
{xTq6G
O|j*|
Q^^>/<<
H8;2"_
sm/GV^^q
C/x:GTD
<9d9#A
pli7y0
Ca2-sE
4|N0`y
WENwgz%
L)77[4g
8\***\*++
c6uPtX
KFF,Ur
hB!x89a
6~NvaO
<hoozvr
1afhh`=
skooW(
v_86f-
7JXVCC
z?M}n8
O!INNx
OGGKBww[
3x,Y2^
8\?2bj
\^4}Sw
,o:4v
4<SSS}RS
,U^^n, /
rr,kbb<
kQcUATbP[f
g!@ wxx0
VS$`Mi
bx5~7a}v
8//F-t
}Q{dd#
+WzBp|
L3Js}pkS=a#
&Gfff(
bE]]ETKK}|gg3
F`s}M@#
<{{{=;:
E\\lXJJR
@`IIAXEE
Xx677{
&y*>~`
%Kd+as
AOHHpI
G`KS}@sc
f46V+[Z
U*U@\\L@zz
sILLtIIIq
|lZyrq
#h(|#"
hPZZJ(#
GM{?Dt/
v)~{S
-Zhmn^
"ZWq^+
W455D.Y
rbF]m4
NM.--e
Fkkko(
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aBj
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
DXz&7~z
}Ulge%
#bcR]X
d]R^*cFV
9+<<+
Antivirus Signature
Bkav Clean
Elastic malicious (high confidence)
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
ALYac Clean
Malwarebytes Clean
VIPRE Clean
AegisLab Trojan.MSIL.Bladabindi.m!c
Sangfor Clean
K7AntiVirus Clean
BitDefender Trojan.GenericKD.46528738
K7GW Clean
Cybereason Clean
Baidu Clean
Cyren W32/Trojan.GKH.gen!Eldorado
Symantec Trojan.Gen.2
ESET-NOD32 a variant of MSIL/Kryptik.ABPP
APEX Malicious
Paloalto generic.ml
Cynet Clean
Kaspersky HEUR:Trojan-PSW.MSIL.Agensla.gen
Alibaba Trojan:MSIL/GenKryptik.4cfb21f8
NANO-Antivirus Clean
SUPERAntiSpyware Clean
MicroWorld-eScan Trojan.GenericKD.46528738
Rising Clean
Ad-Aware Clean
Emsisoft Clean
Comodo Clean
F-Secure Clean
DrWeb Trojan.PackedNET.867
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Artemis!Trojan
MaxSecure Trojan.Malware.300983.susgen
FireEye Generic.mg.501b60e1f6bc866c
Sophos Mal/Generic-S
SentinelOne Static AI - Suspicious PE
Jiangmin Clean
Webroot W32.Trojan.Gen
Avira Clean
MAX malware (ai score=86)
Antiy-AVL Clean
Kingsoft Win32.Troj.Generic_a.a.(kcloud)
Microsoft Trojan:Win32/AgentTesla!ml
Gridinsoft Clean
Arcabit Clean
ViRobot Clean
ZoneAlarm UDS:DangerousObject.Multi.Generic
GData Clean
AhnLab-V3 Clean
Acronis Clean
McAfee PWS-FCXV!501B60E1F6BC
TACHYON Clean
VBA32 Clean
Cylance Unsafe
Panda Clean
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002H0CFM21
Tencent Clean
Yandex Clean
Ikarus Clean
eGambit Unsafe.AI_Score_97%
Fortinet MSIL/Kryptik.ABPQ!tr
BitDefenderTheta Clean
AVG Win32:PWSX-gen [Trj]
Avast Win32:PWSX-gen [Trj]
CrowdStrike win/malicious_confidence_80% (W)
Qihoo-360 Clean
No IRMA results available.