Static | ZeroBOX

PE Compile Time

2021-07-26 18:02:27

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0011028c 0x00110400 7.65581180019
.rsrc 0x00114000 0x0002b5a4 0x0002b600 5.26689771377
.reloc 0x00140000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0013eb4c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0013eb4c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0013eb4c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0013eb4c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0013eb4c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0013eb4c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0013eb4c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0013eb4c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0013eb4c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x0013efc4 0x00000084 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0013f058 0x0000034c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x0013f3b4 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
d[sN
6%sN
NAsN
'RsN
zRsN
"IsN
FKsN
TOsN
:!sK
g_sN
g_sN
g_sN
g_sN
g_sN
g_sN
g_sN
g_sN
g_sN
g_sN
4JsN
*RsN
S$sN
r2sN
c+sN
v4.0.30319
#Strings
get__10
get_ParamArray0
get__71
get__1
ThreadSafeObjectProvider`1
m_aceh1
get_aceh1
set_aceh1
get_Label1
set_Label1
get_Button1
set_Button1
get_RadioButton1
set_RadioButton1
get_PictureBox1
set_PictureBox1
get__2
get_Label2
set_Label2
get_Button2
set_Button2
get_RadioButton2
set_RadioButton2
m_sumbar2
get_sumbar2
set_sumbar2
get_PictureBox2
set_PictureBox2
get__3
m_jakarta3
get_jakarta3
set_jakarta3
get_Label3
set_Label3
get_Button3
set_Button3
get_RadioButton3
set_RadioButton3
get__4
m_Yogja4
get_Yogja4
set_Yogja4
get_Label4
set_Label4
get_RadioButton4
set_RadioButton4
get__5
get_Label5
set_Label5
get__6
get_Label6
set_Label6
get__7
get__8
get__9
<Module>
Dispose__Instance__
Create__Instance__
pertanyaanjogja
m_perjogja
get_perjogja
set_perjogja
pertjogja
m_utama
get_utama
set_utama
ThreadSta
ProjectData
m_perjakarta
get_perjakarta
set_perjakarta
pertjakarta
m_papua
get_papua
set_papua
m_perpapua
get_perpapua
set_perpapua
pertpapua
DialogsLib
mscorlib
Microsoft.VisualBasic
Thread
perjogja_Load
perjakarta_Load
perpapua_Load
add_Load
peraceh_Load
perbali_Load
persulawesi_Load
perjatim_Load
perkalimantan_Load
persumbar_Load
perntt_Load
get_Checked
get_IsDisposed
m_FormBeingCreated
Synchronized
get_Hand
set_IsSingleInstance
CreateInstance
get_GetInstance
defaultInstance
instance
GetHashCode
set_AutoScaleMode
set_SizeMode
PictureBoxSizeMode
AuthenticationMode
ShutdownMode
set_Image
set_BackgroundImage
get_Message
get_DarkOrange
IDisposable
Hashtable
RuntimeTypeHandle
GetTypeFromHandle
set_ShutdownStyle
FontStyle
set_Name
CheckForSyncLockOnValueType
GetType
F_Secure
get_Culture
set_Culture
resourceCulture
WindowsFormsApplicationBase
ButtonBase
ApplicationSettingsBase
Dispose
DebuggerBrowsableState
EditorBrowsableState
ThreadStaticAttribute
STAThreadAttribute
CompilerGeneratedAttribute
DesignerGeneratedAttribute
GuidAttribute
HelpKeywordAttribute
GeneratedCodeAttribute
DebuggerNonUserCodeAttribute
DebuggableAttribute
DebuggerBrowsableAttribute
EditorBrowsableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
StandardModuleAttribute
HideModuleNameAttribute
DebuggerStepThroughAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
DebuggerHiddenAttribute
AssemblyFileVersionAttribute
MyGroupCollectionAttribute
AssemblyDescriptionAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
get_ArrayAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
AccessedThroughPropertyAttribute
m_ThreadStaticValue
WithEventsValue
GetObjectValue
Remove
ThreadSta.exe
set_Size
set_AutoSize
set_ClientSize
ISupportInitialize
get_senang
System.Threading
NewLateBinding
System.Runtime.Versioning
get_UseCompatibleTextRendering
FromBase64String
GetResourceString
ToString
disposing
System.Drawing
pertanyaanaceh
m_peraceh
get_peraceh
set_peraceh
pertaceh
get_sedih
get_Length
m_bali
get_bali
set_bali
pertanyaanbali
m_perbali
get_perbali
set_perbali
pertbali
get_URLStri
m_sulawesi
get_sulawesi
set_sulawesi
m_persulawesi
get_persulawesi
set_persulawesi
pertsulawesi
Callstack
Button1_Click
Button2_Click
PictureBox2_Click
Button3_Click
add_Click
remove_Click
Helplink
m_awal
get_awal
set_awal
System.ComponentModel
DotsCell
ContainerControl
ObjectFlowControl
System
m_jatim
get_jatim
set_jatim
m_perjatim
get_perjatim
set_perjatim
pertjatim
Random
set_MainForm
OnCreateMainForm
resourceMan
pertanyaan
m_aturan
get_aturan
set_aturan
m_kalimantan
get_kalimantan
set_kalimantan
m_perkalimantan
get_perkalimantan
set_perkalimantan
pertkalimantan
get_DarkOliveGreen
System.ComponentModel.Design
AppDomain
GetDomain
get_Application
MyApplication
set_Location
System.Configuration
System.Globalization
System.Reflection
ControlCollection
set_StartPosition
FormStartPosition
TargetInvocationException
InvalidOperationException
get_InnerException
ArgumentException
RadioButton
add_Shutdown
CultureInfo
Bitmap
set_TabStop
pertanyaansumbar
m_persumbar
get_persumbar
set_persumbar
pertsumbar
Linear
GetChar
intRandomNumber
m_AppObjectProvider
m_UserObjectProvider
m_ComputerObjectProvider
m_MyWebServicesObjectProvider
m_MyFormsObjectProvider
sender
get_ResourceManager
ComponentResourceManager
addedHandler
ShutdownEventHandler
System.CodeDom.Compiler
IContainer
get_User
Hunter
get_Computer
MyComputer
set_BackColor
set_UseVisualStyleBackColor
ReturnError
SetProjectError
set_Cursor
Activator
.cctor
Monitor
System.Diagnostics
Microsoft.VisualBasic.Devices
get_WebServices
MyWebServices
Microsoft.VisualBasic.ApplicationServices
System.Runtime.InteropServices
Microsoft.VisualBasic.CompilerServices
System.Runtime.CompilerServices
System.Resources
F_Secure.My.Resources
F_Secure.aceh1.resources
F_Secure.sumbar2.resources
F_Secure.jakarta3.resources
F_Secure.Yogja4.resources
F_Secure.perjogja.resources
F_Secure.utama.resources
F_Secure.perjakarta.resources
F_Secure.papua.resources
F_Secure.perpapua.resources
F_Secure.peraceh.resources
F_Secure.bali.resources
F_Secure.perbali.resources
F_Secure.sulawesi.resources
F_Secure.persulawesi.resources
F_Secure.awal.resources
F_Secure.jatim.resources
F_Secure.perjatim.resources
F_Secure.aturan.resources
F_Secure.kalimantan.resources
F_Secure.perkalimantan.resources
F_Secure.persumbar.resources
F_Secure.Resources.resources
F_Secure.ntt.resources
F_Secure.perntt.resources
DebuggingModes
set_EnableVisualStyles
Strings
get_Settings
AutoSaveSettings
MySettings
EventArgs
ReferenceEquals
get_Controls
System.Windows.Forms
get_Forms
MyForms
set_AutoScaleDimensions
Conversions
System.Collections
RuntimeHelpers
Cursors
components
Concat
addedHandlerLockObject
GetObject
MyProject
LateGet
set_RightToLeft
EndInit
BeginInit
GraphicsUnit
get_SaveMySettingsOnExit
set_SaveMySettingsOnExit
get_Default
SetCompatibleTextRenderingDefault
DialogResult
InitializeComponent
set_Font
Convert
get_ntt
set_ntt
pertanyaanntt
m_perntt
get_perntt
set_perntt
pertntt
SuspendLayout
ResumeLayout
PerformLayout
set_Text
set_TabIndex
MessageBox
PictureBox
F_Secure.My
ContainsKey
get_Assembly
MySettingsProperty
WrapNonExceptionThrows
F_Secure
General Auto Repair
Avafica
Avafica (C) 2020
$41488171-5017-41e2-9d48-db66764c0ccb
1.8.0.0
).NETFramework,Version=v4.0,Profile=Client
FrameworkDisplayName.NET Framework 4 Client Profile
PictureBox1
PictureBox2
Button1
Label1
Label6
Label5
Label4
Label3
Label2
Button2
RadioButton4
RadioButton3
RadioButton2
RadioButton1
Button3
MyTemplate
11.0.0.0
3System.Resources.Tools.StronglyTypedResourceBuilder
16.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
16.0.0.0
System.Windows.Forms.Form
Create__Instance__
Dispose__Instance__
My.MyProject.Forms
4System.Web.Services.Protocols.SoapHttpClientProtocol
Create__Instance__
Dispose__Instance__
My.Computer
My.Application
My.User
My.Forms
My.WebServices
My.Settings
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
hSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
Adobe Photoshop CS3 Windows
2013:04:06 09:59:08
Adobe_CM
dEU6te
'7GWgw
?[/n\Q
&,.pt
>UxO{/
ul$6vX
b&7Gf=
RI%#aI$
GHVe*9:IJWXYZftu
5&DTdEU'
()*6789:FGHIJVWXYZefghijtuvwxyz
ee^#S-f!P
<SNw=U
OMco[^
/IM(iz
RSb2E!
;><v+z(
cx.4%l
:58~tgo
}V~tmi
X[6f'%
.\f6QS
}%.!Lo
AI,~h3WO
r7S=Dt_
7fvVo!
&[qhmn
++(ulN
uH0GEi
T%dG]t
sWP1*\
5=(~$9
elo>u
eE*Tc8
w0KYB
o.JR0I
,2%8p*
%Ga0}k
8m&-O]KJ$
t!av;I
qKyJ&I3
Nj3WRq)q
KMUM26
)aete=
xjija`
$rFAVR.
o:WM[4P
J[YH4K
I$lt|+
vT?Oy_
Qy4Vz
nAU-=?
4hP{u:r
's}rT}
}#'esr
zMl tS
JyRxz+
?)LR?5
qZi>^x
+g.EVEf
})'esR
}1'erz
):$A*W
GCOKU<
(m$kRb
@[i*mITA
6f|vzl>
U.)G"#
$hQYJB
KK%<q1y
ZKj))-
aKRR_rcC-
*'I=tzT
,pzj,:
TEM5L`
pj<H*z
CiummKiJ
)*JOX$
~#&W=
.)KPPH
SQ]QK6
4t5U55
+2?X=C
a#1>%A
b.3'-.-
c&IQF$
j1(0\)U
il-A%J
a1;Kn
Z_QAy)%]
#HT%iH
-(,).-
Q% $jB
WQWA,2CSQ
O6'_,QK3
T23(WV
==EL/$RD
7;%uN!
*R@P =n}
T42E*G
RQKWWS[[",m=U^!,
BA!)JR
}Q4W.z
7Fuxy3.Sd
/PRWUT6*
QQb)OOY/
.\KjQ#
XY2I#B
Sn*@(a
SiPvRe
$L{1E
ow73sr
lZ!E#TB
MY%2M;
I}B`]j
IRJ.\a
f_{vn
kvWnSn
R[qaR
tTM5U&'
i$h:@
** m1'
@B_Z\'
Xe"6,
Gb-[qKL
={##o?
zi?J2oW3
e>G5EEb
Oonz+eU
WDx__`
hZ'A1h
AI:!I
Gu'I(Z
7PERe<3
jA]KQZ
6@|B|S
yS#c5t8\B
T[ua)BD
a4U9O
y~h]J[^]{
JwC P/b.
i'Yp)%=
5;'~#>
n!W-=<
.#-Dq)
)QP@+B
|:t-?sgYL
%eHSOH
K}\tg+
=`Y_fn:
9SOO.a
BKA'\(
KWWKV)b
[D/CiR
A@HJBA&
$:a%@/
G=St9
SW!hZ[}n
2t7&~(X
N1R}8
mJl)*D
>,NLn7g6;
1$f*r
Pu*!g@Z
(IXkQR
KAI^;O
kr=%5^
AZRKzA
H0l:L_
A))JPJ
<bj9dI
U8mWMp
AqcCn)
AeWdJ[q
.-Zy:\HRz
C'b8-$
G]A_C"
>!4*Q$
7~oNd
*o.SRa
%e!IY
'SOI.B
'3w6b
)d$U,b
7hBn<:
M=UBU4n
LVWXf;
JsR@JJ1]6
R#ycl4
N $)JV8
y(gQJT
n-48|T
e,Xu:c
$-N% a2
_{wKt-2#
^5sbs,
U@in@b
%D+A)L
VZja ]
jBBRTIRH
*\8C=UJ
%%RLLl
iajeM$ i
tK.`]8
%RuDH$V9
&Tu*S$
!*--jmD
UTT3I4
{diB}I<I<I
5=Mem^#-3
)2kc>d=q
/({5VZ
hB[(_v
H) XV#\
n!$2TGE
@qzROEb
]ajqjJ
5i{khn
gw6U6k
X]]Z5mx-
o~_mpm
^fley>T
-,)JHL
=UM*oB
?ev[}6
AL$T.B
">Z]~Or
A18a8TI
:qWQQO9
k5`8N'Q
$ey Y.D|C
QQUCO$
Qbx]%|
j(3__:
+[##Y|'
A*I;AD
jSaIR%CPB
[f[ygJB
ie(+!P
o%7%A'
@qjX@;BB
JG%KQE
RVSGWKR
AuUp<Z
pq;F7*
5BSK5^
{<G7U5
\]7!Pv
1okgpg
,!J<JR
y.?=owb
uE,@,@
*{sUq]
[M^'_(>U5:
&)[9TjZ
RTz#`=b
\,Ut{>
Q>og3C
ygeUI
ee{71K~w
-QM)*q
o1PCSM
aX}m;=
8}4QVa
!.g)+C.
@ej%.6
qK!(!!i
tPpnky
)u%%&$
gJj>EIk
%CY+44XE
%)%)HR
])ybX0x*
+}MuN<G5f
ij1<FH
7&t_+z
@ I!i
d!N%HJ
EW:WWU
UKO[MQEY
zy]&G$
UPRA=ed
ez{VSU
B9(g96
{X+)**p
:IiXPK
k&g9s6
I2I;I=4
CGLe p
y^>|~W
W529':
p>?G=^
~${sX?j
tlZ*ys
~6\r7?
2u34`fS'O*
VZjy*&
YIQ_A,?
'%EF/
==DSp
_KQ&l
?MV/*?
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
hSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
UYIDATx^
lb;aO
|e'y5q
&oO!*I
S^ePu/'
HR.D!|
)V0mYF
WWWTWV
#RL-a9
f_&z$#Po
A,]''H
UH-jEY
HEvU?|
^+GnM3r+
nEs[$.
Inzere
;a<TfM
Id-oO
hkJje4y
c3N{m%
LVx>q=
btJVFf
k2L9SI:
|DT^ELY
j$}FMu:
sjz/=AE
>A_/IA;
8E^~Dg
rk)qb9
=y"%Z3Q_
o~z$SZ
1ROJP6\
`E|l7s6
di+3F%Q
clL>vs
8v6G=r(
+BL^;*[n
:yR)%,i
edU]DI
~hYl Y
K{%T-7A
G59Gfe
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATx^u
(^j&5y
I/b8C5
xRVB_$
z&Bc3uwK
KG}Q">z
I|u~/*
UWF7%q+u>
;<-Np3-
-`K'X|
};R4EQbJ
GtF8,9<
Cf@C)i
G*LI~H
T:TDl.
3e[p*w
HCMN$`l$
5z"(p:b
*G<~O
&LVXqn
4yV5g(
Hfy-eW\K
(zP(^pr
VebK{6
HK`>JSs
6m.LEn0d;
hZVH#T
`]_"^}
L31/p!
#yxz]1
jz,y:\%
wus>)c
`$Q-eV
<d"/3{
c?nr3].N
8DO>3#@
e(s2iE
a,[u5d
QZ_FMG
&KyQ@2
)M~#Q!
-DFC 9
p1v j~/
W?}g>x
`h{>z6
p!&wf!2#
3yvJtvfG8i%
T(mCQh
x~s$6==
(hdB.
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
sGIDATx^
qwwwwwwwwW
\\Dbm:
ATH>RDy2
8MnuQdi
8}xGk#(
DMvQ"H
3C]3Y[
:XD7Sj%
Dv[:z.
WL]}H2
Ml%i>I1
1dVMp)^
HX\%Q0
?n?@Jn
(N"Ar.
(/Ah9Z
k'k-|w
*MQTZI
,eqNa
:,}EI5
bKIzWz
=FE`ME
|zgfc/
at/LHX
J(,RA~
1kb@m!
J,bk<(
!zs )?q
_=TI<hEv
48[JAu;
v-Wtrk
v6nO;d
2Is]wIhyK
EMc2r)fb
9'9HiuN
@[W':(
;.AIMW
Yd7-rp
<FuG^}
=)9)8D
1g)@[P
ZzIAZ.
:(jrAz
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATx^
P\Cpwww
CY[J[
+i{aemw
UOV>6yZVFY%g
^zHNqBeE4:
l@C/%5
\o1AY@0
E&\CY0
qj3<#,
PRKJfl)
+6MD\z
2s%&MV
Ne7)\&
2Js4)ke
_~F@\9
B1!)}pn%
/\Azn&
#9-g}r
jo>EbU;
fW('0!
H'_qLr
P.^&]42
P2RZVE
pn8EcI
2y{qQQ
^|>i|[L>AR
|g6j[R
r46E#3
9+xDj#
du=EHy
(wGAU Z
6~HB(
J(OsRb
BEw+JZ
#\0o'A7
rzAk3j
CGo#LOm
^Ey\?1
E'NVX)
1oR5JL
yb9%.|
<]o2RC
+#'-\2
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDAThC
9qj+a'
8vd!AAv
,^8L49
w#mVOR
[>Zb`O
:XNb5(
1wvW6n
%8-_Fr
c$f>")
BJs^KI$;
TB.arF
QLZ-my4
5e`uC2j7
F8G2rU
3I+Vrq
_&P2(1
8DimBm
uZ Wl:V
")850Z+1
J;+/ZY
2^5u_w
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
-yIDAThCe
%vcL4&
9x}++N
\,WNxI
D{3&5o
C{~h)|
Q}gx**
*m~_[^}
-or;4_>
+ni\qO
Mpb93WY
'2SK]L
HT)~b}
%#s0(n
>[S/cs$
Lb%X$M2l
]9r'^+
|i "a.9
SLMM8s?E
RMOf`L;
y\D;*9
ZMC-.Y
;P^6F[X
=,^ILi0
xiQAn$
>)Y^zg
8si%A>
wv`{~5
=38n?C
KG1Uv,
0qr?ll
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDAThC}z
U(MW$,
HTW"NaFl
/X~'cePT_
_z;4T
?3XNBte
r4kGQ-q
O2(hCT
)jS?B]
1]@Nn<b
H)i@hn9
Qd<-qWs
["+>&n[
m<<VND
"s)%G+hQ
AwBA+;
/CJq9"3
u(P7CSq
[]'A6b$
4j>flO
0uk2&lL
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATx^]}
)p+6Bh
Zzj0}q=
kWU0B]
(-x0}n
*j(e^#
.I:pJ%
qldrdt
!!DT3ZgY
LFZ[(6
g#OnvAN
9B-08y.
tnnSf<
d JYt-
AQ0}C'v
S)PydY
ylc~Vo:
Y.&m*rh
M)kFHbt-=
tI(2f0B
GL|p9i
'^JXJ1
F^Quvj
KfgD2zNJ
kC\S'(
(yS`J9
&"8U[y1
lYM&]
%kYICY
J=\*W
^%z",i
]3AOvu
*]R9r/9_U
udTt !
@%cRy"5A
4jMZTy
EdI*m0z
I:?%hP
|]y1)WM
3'-U2(
~N,*zB
a?UG@%
&KP9o+V
C&sAh
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
}mIDATx^
(T,JBf
RZWf!wQ
iYehlH
BQ^6rKRp
%%Yhhm
hnkEw[
6mAGW;JK
6AKz?o
i}.rSp
j6N_uGx
gG;iD8
yx*^>J
2BH6-g>
;Mauk!HX
oGHw@*
DEV')1
-fF79R
,#W59!u6
R+9O+
mPNM#P
WRO-IC
ubBPX0)Dw
E2)pE"zX
hYO1v/
=SvXUQ
sCw?EX
"&,D6P
`&Br#=n
o+-0iB
}s[>E
l~.*Y&
WGqUg,gxf
g?u`uj
H(HEnu
gP3o+J
pG2VlQF
G5[mO+fE
*\LJp E
&?$7yJA'
V1ZL6*
i8C>sB
7?1`ZD
kX8j$^
#0m&!OT%3XT
|O|.`]
*]u%%L"
BJ!uMa
"GMm24
V^j</k,\W
YvpN1E(
Z(KUDN
2Ef_8b
lw&X.:
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATx^u
uDV^ET
jAjy?2
qWANS=j
2gS:u2
C(+2B^
PPWGf5C,]"
ed4npV2
XMD$j#
7fMaTb
^"9Km
:=[v@Td+
1%eHnX@d
g)"7B#
.,HlEu
(3hz(S
,bK]QD
q^()C}
H(+AYO
/0MAe|
Ur=BJG
2-*j(O
S|=<2j)
tbRE3<bj
|A>st`
0&p.Fv
vRq0r{
mgYHkBg
o Ya@2
5[54Owc
RrIi4!
[pI0GfK2J:
)DLV.b
'6z"&N
vDqk9J
D\i5,|
Yt;t#Z!
y#hIA/
95N_Ey
yd4\Bb
HlZ%9q
.Dli4%
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATx^
V$[| u
J7o\lZ
sVNLXXr
JaM Ye
jV;%CT
0s2J[I(#
4pu$F_
]vNcJf
-%y|~=
Eu~dW8
GxN;YI
/k#._V%g
VR]PF}q$iy
!f$eIP
wh7V7p|
1F-BeY(Y9
Ck1]P}
C2}Zc
V9.mw=
W*)QMl
H%V(7P
Y;GPV
)Ou.C\G
^J[G)(o
\G{z/):I
@hz=^Q
0:p6AQ?M
d\KDH`
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATx^d
4xx>I+
Qg6&W:|
nx X=*s
[@p!3;
F=YYrv
#QYL[B#
[Wy&.]sa
R3!JLJ
xRFl%ozMw
['m<9(c
I6M}f
x.H]b(G
V>Xk7*r
@!/dldRhBQj3
U+fTqR
(ffP-.%
w`#T;c
Zad<*p#)t
{96=4]P
oLztkC3
pc@N`/g
d@6`SsHG
~?0u[^
omAlv4
,4rtZ5l"
E}uaL1
eIgw0O
KG!,QG
TD9pqT
b$g)Kb
!IL8~!
]QZ6X
V]?zw}G
cDfK1`
'T.[r|Y
X3qW?k
W(fBF&
6`sDUn
5nUr_Z
_fcu'ug?[
/kpc7.
D!VD8b
CbzeI9u
&gmz6bL
'/)3V=/
CP<Em]
W\Jz_'
z7]@@/+@
A'M0:X
3QG' 7
FHW{-!
zA+sw_k
cdW&H|
.vG{yx
&aFr:Xt
G9>=<!o
BN}/~%.
hb[Acm@
KT{:G'|_T
nxvqp)aQ2
~Iqo&k8
D]g&~=tx
98-l1j
Eg#g}9
P9|ukOd6^
&?xqlo
Dg^|zf
z@Z:P_
wg@P+F
LpBIfh)
(RKk$o
/U@_l;
I]gL^SMb
Tb]WtW
IL3MiT
o$e4BJ
RM:Lkr
,6`_IWD
}jE2f*
KI7MHH
$Pv$FrzX
y5?eVI
y5]'P/
UDGNMsaCS
l[uW%l
Ew~nJY
hu:)gG
}P+}]*
6` ";D
:8#q?
,J[Qb9
/?/I
=cjAKO
4@1-e(es
9RIj.-
iy>w~7
IWB@Z%
"Z?L6g
5k-oMQ
VX-Him
]HW*0q
Vm.<6b
77JkcC
nSv^(x
oj]0{V;
>^mWar
YM[j]Zd
]eOXcl
M98Sl<q
{>r,sp
ohER0Z2vd
GJg;2&nX
4Ssf0t
;_}ch/
YUUm"YQVQ
%4/[6p
U=tz>2
Ra{v^Q{
^ws&x3
"?)3vq
=ch38]{
7TE1:
'T{"0
a=oq8
)RZUgd}y
t>sxYPp
/)8.}T
[]2l0idA
pFE[cCN
6gdd$bN
g>Py?t
e(a,0'
wVYo8s
!<W~"-;
D+9;[_
rL2,A@
sB&x1Nd
0.KY|!vg
.;0yj.<
iXcoWQ?^Pg^
FR#!*!U
t@ejz~
d;_+8~D
1&]{bL
^\O:qI
WSPqr}
9bL>OC
CX^Rka
@VjC{-G5
j?]=3+K
J?&;nTi
^1 b TL
yQJ<]j
fF"+wE
h@gy|
uD_F<5
i$;Ow_
WGCaUQ
t!GY*t8
D;qfS`[
OJLS6x
Pb[LgF`
"1^PGf
+Ng)&y
Hw<b^W
3Sdw}~
~9Pw&mX
wE-@#^
nYAAY^
u8J#a=
pSD116
BXarAs
A'Zv}Q
MtO7<x
:S.o_x
+Fp$0(I
J:$5@5
r'Hf3{
0:JyzS
\VU/3M
XBIk f
'<Xf\,_
VnH]F
UC~]V_
K5cq
,wqv]0
RPp.a
YWv{mN
q.=XR:S
k2Opd9
~hGW|p
f|L[un
N$_U,5%j;(aE
d~0'E
YLluFD
|<Xtlm
EvXrQ&
R(=dA{$
HXpVkE
zSu,W?\
EjS}B8S
?w>}0d
#9,Cv
Z!Z+EO
e)q_h4
^ac+4w
b0QZ51~
fpisDA@
.0Qf^2&
P~61WK
VhtD;m
qtW\Je
[`f`/q
# 8F6-
=E@z3H
hdLDgb
wtgCdq
tq-U}Pi
wIG4,>\r.`
KyEV*t)i
hJ%rI#
=9h&<umZ
jWgg^wk
C"[XIZ
'\L:rIu
P%H{}7
K&q[g
Xw9M5
IjLd\t
"c65&JH=
Z?Yr_ Y}l
^/1)UJo
)//{[}
0O@FJ)
-q8mvF
i~<}^GF2X
2B6V@VR` *
T"[*+
Fm;}jAD]
~r&+Eo
nHk6T
DE6W7sL
[$Wf<e
%5>7ew
gK.6^S
\hc18;
2*%T$e
ec;R-,J
VXutgL
)gqthc
%'\R~Zn
$1sq B
"#&aLB(
ee^WcI
'AACc.
e=W[jw
Nn;GopP3<
UBDe^VJ
L>O^Zc
cA^s1{
Nm}Y$@
o+6!h'
>iI;77
j8s_z*eX
Ivf:9o
~~Wn7XT
^n}nqKS
LP'4H.
JcBZd-
BBwWv5
'fS;(o
_&(3(
Qj]8Qp
!v`uU4
9C2BRM
nQR8&H
w^~+RW
:oW%,LH
<}zRGj_
J:sGH%e
a9-DKL4[
C"*JVP
V__}qr
M>_o8m]
351_~p
q#z=C@
t''lza
iCPP>J
ehoV.a
TG!U,A)o
.dS_7
('7<-o
>>ffj=
l;_%XX
%B``E'
U77Q=$@
Km#oCG
Y]j[_i
TINx#O
u4_{ 2W
P>Q$i#
H(,GBOs
;6yR]
/>+(;.g
p6b#7n
juc6^J;
}<IFP$
\<b/'
2@$B#{
Z(*\D!/7
>wXy`od
!wm*|Ky_
I5Tj>=k
ga+Qd-
;w.zv|o
{7<v#`
4jiVB&
9dATl\d
9v5K#s
nRzc<}
_f3HQ
,0v"yG
8~o.j?
4pL_s&
`B4IdX(h
@oPK_Zq
UeQ[KV
wc1<&z
y[kkX|/
xn+GZ.nj
r]4f4D
EA7ig(
*C$"un
aVW2|
2I8nfk
kSA@Y_P
Ad3zqH
m"eQd:
?^H,+
Zx`<6YoE
S<`6>P
sVc9TE
)NOPBc
i|'-_&q
'2vOv]a;
X9e^3w
b&o7tn
<ljzrm
9!o.tn
yd2-!B
i8=V'T
>pKwH7
]~@?D2
6s< IPy
'8YX3C
;^V~k{@6g
"8W9Gp
,1Sd5Z
Tij{eac
#7YW,WL
)UT|*@jM
I_3eP&
Cclvn+\
{j~GZFpk
q78xcYy
{'t~xp
dS7_Fr
_r19"snjoo
:roBP{
nlU8{jO
0R{9vDw
iHZO%Og
Lb]t{X
S.FV:A
,bM2`,Ko
<z_VlQ
D5ZB`}
?<.u>-
!DhLjiME;!
]uhOIf
){ZWSe
fN'g]i
u$ j|X
x]9%We
,Ab2Jd
xyf/n=
dsiFFaK
QH_qk:
Wacs_8
]?rCT~
hsB*BE
A9GAjD5
V%\]z
y9 Jh|
&SAZSpw
rm6fduM>
E8n_p4/
f7!t8V_
A;>$FA9
L0E B@
9:@x>q7
QjmT2:
U{FXb+
`O:#$u
N?{u$m
LB@w<Ts!
\3XiAe
oJ3}4g
.'RIF[
*VENxD
N^KHv:
k#Mu|W
*y?m}
TDCs7jL
7W$_U{k
}Uh.<
^\nX9}
u/67O|
ScsZrkZ
;}1%!j
4L=6NC
/\|DKm
CI'.Yc
5&GUF
Wx,2czo
/'KA+s.
z'$EIT
tjA@Rp
3o?8T:Y
[o_gM[
G_I^oi4O
[}T!1K
zXKZaZ2g
7Mors
18w-0z
s!qCO*
X%ZHM5
UDkOt.
or2NO.
3i{?1q"anb
$i9?^q
e1Lyn
Ev#RbD
3H@.0H
Ee5]m@W
LwE}m-X
N6jc6X
33rrrS
E`)!'~2=@
y00DP=ARl
6b:m C
i?kI^h\
8A`^j^
+r8s/u
WmPBA[z
kk;v<r
c"|'[hI
nl!^{a
`USNOF
e;w^~CWL
w]eOMS
TJ;EYx]yR[U
]pQ6ZyJ
?m6&<A
I@)oOy
PXoxAJ
^]4^LA^
1&]2as.k
2?jfbZh
3Dfz.u
_W]OACP
vcukvA
-WFW<=
2wO^+e9>
nPm@yIzM
?YqU?z
#9|X]N
7f6,;.m
,i3@MG
aZR0QAt
xpXj0Z
XQc~W}c
~#]{Ndevs
QvXy/y
O\dC,,
g063W2A
@iqtBq
y4QBfI
1~/opL
,l,94ac
N^hbw#y
dXd'p4AJ7
)20Frg
NYy'vh
"2|NtB
FwN0pH
(C.nmj
j@;@3ZO
m:2=Gh
ZcvhUm
gB{J74
9\vNR_
&a9Avg
;GMzzK
v,{8p~
q2W0aPJF
4p^e/y
f0^l#x
a=uLK+
m#Q!<8mq
xYc\rp
YMW'Nr
,T>}a|
&r{n_u
)-qX"gq
V95gk*
Jv%#}_
DCjG*9
<bu_[?k
,&B?H%@%g
=p6:p|n
9hq!CJ
DCGRk?+
jv{1q
yVGI; |Q
$HV}_n
zwO3%?|`|
2V{cI>:
z.x^%?7
~>7Bo!
Xb6'N/
OEd>mDI
(;O\3}
fb}sq^
I6V[=
iID'j9m
tsCA|&
j.8_t[Z?
9LLb?z{
l8%kDI
x8mc]q
4L7KAQ!5
1Cu]XR
AYh~szyPYN
}Mld"a
j-:(:Y
qk/u9.
ia;ctG
WaoVN^
Y(R!^B.
8bC&g}
%@CT{}
yK?s"E
20^mbc
>U/8Yug
dN:'YG
'8-$Ii
;:sMbx
88ibC'0d
4bH7@:
Z?L-yS
vU?rg|
}od-i@{
"#HA"
@[@/yL
L:;QI7
dpCML}
T?],QUd
O++sX
r!z<ob
=~KSm;?Y
VSmM{i
u6SO@^?
R9ajAgIdd
S:V6HBn"J
h|sOt_Ol
KXHn{
OnOaC_k
c-L{cr
x&SB7T?t
g<$H(o
.N>6#?
dk!?IgJ
(mR~zN
nkhrN?S
AvGy.H
>eX(=r
%EV0Q>=D
i'>,z1
}:HwL #
Fzlw6EL
3PE29V
I2: +k
Yxxe/e
*=[u5a{
pU/EZm
s><+}
@-Ej`A
F5L$0`
W9EF`Z
4:[Gjms
4o{r=!
t[^{WgC
-F`C=J
W'"-6Es
E/y'8G
3x|=pX
@F$pDP4w
_{^jN{
fNbnWy
Tg8hL;"3
r%R`jl&
T'XUL!
m26A@`;R
=eZfz
Z5X/-V
V^}^z"'HP
q3\ 7@_
x-~Ma*
TNZQX~
bmS)$1
J"#<j/
:;*)vk
!?9"vE
iJJ.Bn
H7xE1x
{nupQX
|`sBip
{PrCeZ
MmVWi![g
8mL_6uRXz
0ub/[eB
9Q6x<[L
Is?"J6
t! f=D
7,Dps"
2T]|o^
U"_\\th
4ah<wT
0Ak$h(*
m3+_{oq
L~2Bm"
?]hzQQ<
J{O*W;=
{^Ou}O-
Fat2|D
^b{`_rc
cW;M[\(z
%4fS<R
/EZM/
t= !2i
b)d0SwVE
m;]_?]
`Aj?us(
lC*V$%
D8DO*#
};%^r
3UO^9}J
ucE;5L
V-Y}c=
!v: ,R
H/Md!jf
) iOi
{A&p.g
`zNt7+
*q}vsS
pH217k
fFhL=s
7uMizd=64]
/;wsqg
j?hX>QhMd
%%9c67\
cJC%H8
h0V%V^ZV+b
-kYPY-k
0qK`3Bf
"g{~KZaP`LE
xjq?sP"
]<7eQ_Cr
<K*>o0
IDAT5B
}dVD)rh
:_%vEc
{,68gWt
XKcd5N
bP!Im6
@EZ L
^5rS=<
{1](q
T~tM=q?
~,.QtIq5
5b|e._
*5[&ctJ
N3_<?C4
s^*p{o
T>L]jt
sM]w)E/
9OUv+dXQ
peYQOJ
<HE`x*
9/bSj,
'fE5I|
9m}/ndg
d*]ZQaL
.[b]4<
or4xH*#
Jk]xn?38
q7Xgom
^8>=\q
0IbBb:1
+",>Bx
H}n7p-
Ucj?1Ldf
*fTU`?
HN;-1b
r?l.R;
<!W{c!Z
TBh1k*
75$"K@0
(9!.#2
9_2hs|^-[
:GDn 3
| +c]W
Z(>n<m
chN_:qj
!>nk,h#
Qa|L;Bj
SjX9p,2
~vGcR&R
)9;s;F&ru
gWg,^{W-1
SNH\t+@
e"S!2
N>=[l\
{WKhsN
xi=}X+/
~2A<q}
tu`PfS
e?=P|c
b|-b"
N fG&3
*/Ny9F\
d Z(%
4i^Grb
xProj'Ik
[l-N6v
dTL(D@V
=_V._
qn[CxN
uPEk]f
#RfbT
='qt,]z
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
XIDATx^
?@SM:] w(M
q7"S.s
eSFRCX
+V@Cu5
d''3M
8KRZYW
Q#xpPo
:~|_&>?f8
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATx^
|q&eO(}1
{W[An\
WgSV8U
Ct`OL{^
r@Y:4?O
'b*QxsI
KbWxE&
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
_CorExeMain
mscoree.dll
iU/XS(
sY2O3pB
j'B)?y
wHjX0N
k5@)7S
T@Dh,.
zhjj1
)I*uu])
}hjj7+uh]
H)A?-~
a&n~@p;
Xy+P8=
2DM+Hz
f!EV("
~Y9IL005
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic malicious (high confidence)
MicroWorld-eScan Trojan.GenericKDZ.76575
FireEye Generic.mg.b6af62dfb431da0d
CAT-QuickHeal Trojan.YakbeexMSIL.ZZ4
ALYac Trojan.GenericKDZ.76575
Cylance Unsafe
VIPRE Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Clean
BitDefender Trojan.GenericKDZ.76575
K7GW Clean
CrowdStrike win/malicious_confidence_100% (W)
Arcabit Trojan.Bulz.D8CA4A
Baidu Clean
Cyren W32/MSIL_Troj.BGR.gen!Eldorado
Symantec Scr.Malcode!gdn30
ESET-NOD32 a variant of MSIL/Kryptik.ACDM
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky HEUR:Trojan-Spy.MSIL.Noon.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Tencent Clean
Ad-Aware Trojan.GenericKDZ.76575
Sophos Troj/MSIL-RKR
Comodo Clean
F-Secure Clean
DrWeb BackDoor.RatNET.2
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Generic.tc
MaxSecure Trojan.Malware.300983.susgen
CMC Clean
Emsisoft Trojan.Crypt (A)
SentinelOne Static AI - Malicious PE
Jiangmin Clean
Webroot Clean
Avira Clean
MAX malware (ai score=85)
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Microsoft Trojan:Win32/AgentTesla!ml
SUPERAntiSpyware Clean
ZoneAlarm Clean
GData Trojan.GenericKDZ.76575
Cynet Malicious (score: 100)
AhnLab-V3 Trojan/Win.PWSX-gen.C4567443
Acronis Clean
McAfee PWS-FCUC!B6AF62DFB431
TACHYON Clean
VBA32 Clean
Malwarebytes Trojan.MalPack
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall Clean
Rising Clean
Yandex Clean
Ikarus Trojan.MSIL.Inject
eGambit Clean
Fortinet MSIL/Agent.GIQ!tr
BitDefenderTheta Clean
AVG Win32:PWSX-gen [Trj]
Avast Win32:PWSX-gen [Trj]
Qihoo-360 Clean
No IRMA results available.