Static | ZeroBOX

PE Compile Time

2021-08-02 09:36:03

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000ed6b4 0x000ed800 7.50326873587
.rsrc 0x000f0000 0x000005c0 0x00000600 4.1140097789
.reloc 0x000f2000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x000f00a0 0x00000330 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000f03d0 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
/=Za8t
}UvZa8m
#Z }X)
ntdlT
7HMZ <
Z [Bs;a8
X ntinT
DqQb%&8
NtCoT
u,T%&8
8L?Za8
, *wYZ
Wf/a80
z~.Z zw
ntdlT
Kup<%&82
@ aB8
X l.dlT
'XGR ~
Q_ %&8
u;%&8G
NtCoT
X l.dlT
X ntinT
~Z h[qwa8G
?4Ia8R
Z ^"d9a+
Z 9Bu9a+
UZ Hf4
oZ q+E%a8
m3"a83
'_Z U9
`*CZa86
}"Z /I4
gNJwZ +d
?E}a8Z
Ne Z
4/F4
4qAZ l"
Au+mZ
Z AL<]a+
1Z 41@
w-sO
,4FxZ
\sO
Z k@]za8=
O?pZ ?
)QZ Wf
z-sO
56MZ B!00a8
u^sP
q:aZ "
yL+a8g
D9Z x3
{[;UZ
DsO
bALBZ
Z 5#`Ha8p
EnxK%+
Z 6(dua8
p6Z |c
Z ;Bzwa+
qCjr%&
wZ %\?La8
)Z 8S#
InZ fPGYa8
y^sP
q*sO
96v>Z
Z |fF%a8
DsO
/^sP
/1sP
DsO
y1sP
lZ m;
DsO
q*sO
=^/Z <
Eq9a8f
q*sO
{E"Z
hZZ g0
z-sO
\Z .A!~a8
3Z p_,
z-sO
U^sP
K1wa8<
DsO
gajZ t
)IUY8e
(j0VZ
Ofc}Z
)9Eta%
/-Z :@
d&sO
Z CQUsa8
YUZ 5
?ubZ i
d&sO
bMbZ j!
CK:Z D
exaEZ ;]Aa8
Z lixLa8\
-PV[Z
27dHZ De
)*=a8"
VsO
J1sP
hRiZ O
SZ w4$ca8b
f|=a8O
d&sO
VsO
VsO
}t@a8]
VsO
VsO
JosP
VsO
VsO
/+>VZ &
Z 0ofaa8o
uZ tB&la+
*63qZ w
q+sO
y5Qa8"
q+sO
WF[Z 7k
jPZ O9\
EixQZ (
DsO
j!Z Z0
4^sP
DsO
jc&`Z j
nG@Z `
l;t0Z
b)OZ (
Z Ck^Ra8
JZ o2-ua8
=G@Z X
5oz"Z ,
~WsP
H'8Z @
q+sO
4,sP
-m$/Z
{TDa8Q
DsO
$Z43Z
DsO
~)sP
iZ i!f
HKZ P+
x7-a8s
CWZ 55
~Z i"h
oRsP
VsO
fi3Z 5s?
VsO
KZ B3.Na8
l'sO
;Z MYx
dwZ :9
l'sO
OZ ~k'
+Z ]g[
Z *5(Aa85
B0LZ g
Z (aSka8"
i'RfZ q
VsO
{OZ _:
=JrtZ L
o La8H
e-i#Z Y
#{-Z ui
<&Z SM
eZ 3}d
3Da8b
`]Z jo
M.,a8<
?"sP
u7Z Y'
.Z #4WWa8`
2,S{+
$sZa8l
Z r_rza86
a"vZ
?lia%+
MZa8d
BI0%&8e
l'sO
!qra8,
oRsP
D4UIZ '
?"sP
?-EZ h
[H\a80
LZ dvWfa8
hpoXZ
VsO
VsO
l'sO
oSZ DG
=(Z $Z
?!Z JC
|[Z ZvP
Z KCu4a8I
\zZ gZ
R-F\Z
3GD'
~xZ /d
sH+KZa8
DZ XcZna8
!]Za8p
aeGa8G
Z ^XG+a8:
rz &Z `-y
[^PZ ;=
EZ [_,
i#uZ '
IJ3CZ
&Z >3HIa8o
mZ ;'C
GJMD%+
ZNZ Sie
2:Za8]
8NZ wg
"z-OZ
Z ^6 Ma8/
Fg;a8C
~Z IO Ta8
0~"Z 8
s}gZ :
H_ra8d
xZ UX
iwZ ]<
Wq!dZ
Z @#xGa8
.Z )I31a8d
tIjcZ du{
Z ;B)Va8
gZ ?/zYa8"
hZ Qhr
0W-Z !D
XZ 8gj
TkKZ )
<1\BZ S
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aBj
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
dIDATx
O Ok?/
18,m^?
W_W{oM
1NfwIk
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
hSystem.Drawing.Bitmap, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD<P#A
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATx^
?.\7>K
<2E6|}
laKPL'
2b"|<
?Hfj u
Hg[[6}=V
hj_G3v>
dkY?|3
2Xxq7?n
ou0nYD
{e_BB}
^2}(,j
xj^%0qk,W
ed#Rxv
Zo."e
5j,gO
Leb7;3tq=
'fT&G*Mxc&E
q&u,{7
F8ntDR
`;q:g+
H{-OgO?
+l.53R*
*!yCS`
+9QXIg
HjrGrG
+j7;1g
dmghf>
,6QELr
cKf0Us
6K6FY!jv
g60Se#
Us$}5%
k_1/S
R^*Me`
yogsdl(
@#vZ-fA_[f
,jRFLT
/UpKm'
GrG1WFLg
%_qSs2
.ow!FX
a)Fr#I
pn_8#X
>W,Q;7
#G|U)Z
x9~#gf
3Zm4B/
!ZI9LX
ed/5Cf
/GEj$_
gwR<cv5
p~|_t?
{fq+k2
2=D_YL
O/rwnf
S4}3;L2
6*EL(_I
$BT9o3
C?DWMC
7Ax,BY
?r<~1N
qfHDae
_?\Gv
#g;Orb
1?l\mP
^HMA15
m$T?%j
()Blu,
B"y<{\^r 2
QE,}GZ3ko'&{
'P:q?'
#Py#LY
6:b$^M
._B(`!
\BqH25
JxOGS;
,[ty5p(9
d=6NyArS
jt}1&bl
/zeY%SF
?3$wa#
WBm}!W'*
v14c1?\SY
^z<*8X.
kJQA-q
l{JDZ8
6-EET"2KFF$
eRh/}D
},G/fH
cWi(r+W
fUML:x
9,3.2B`,O
"%C'R
~0Ds7R
ZJut6EG
\a=?>j
oqoQJY
IDATu<C
m1/0T<
)z8lsG
}C7S7}
#oI=)&
$be').]
~J$#t"Q}y
bJw$52
'gjpBm'fg
7C,Z)-
80c#v7B
':ciPN
(/yEUj#
z(D`M'
N:,Kve
?vSF3|
$&=N#p
5M@*o:
cl?xsbc
6@}l+q
j<]cuQ
euZ/SVE
,8DI@9?+
e9HN0d
~:KIO
5(vJq9p
.;|7z!
.x=m36
cu|%(7
b_Z9#m
63gA6+
3r'vU.
5M7hQS
"I>OxK
|1<J7
dENf-$
a6?3Dyp
'~H7n
{PLqu6r-
=?N0Rb'
iTJFRJ
DzK(A:
P}t'ib7
;O2#*h
#ocW0:
h*]#Kq
9eOD?w
]sn)_c
k:K?,
~0qcTP
9FNhB$
zN1(,UB
'e8=|%
;'AWC`z
E,`3[c
W9xv 3t^
_c9{|2cu
(%>o Yc'
wauo?.
Y'(Tk
{CWC#3R
T!:w;:
!4?9Fo
wq4WFO
k">O$3
n-`YH0
F<|"w7
=MQ"f>
]c\?#.n
|`"!_
tBq]$#
,cvd81
DgU()}
X";^`i1
GEm9co
E}x^-&(
/?vw9p3
iZ[w1H
"Xga6y
Vz<#1:
hr[>RQ
me|\7c
FN!cW6
9S^X-&
/%qbus
DP6e!?S"yk
PvKQJRQ
8&|sG2
"n5r"^
}ebi?&
%D?~C6W
BLf41[
zDt8!-
h|4ON=g
>d&6MJ
7DqOz-
'7W=" u
N%cr;&
!En*1:
4@Ih(k
S3Q9"M
-1KJXQ
SI4\nA
][>`Z
ZxNxIc
iWAc[5
3T_{!q
RxMmzr
{WH`Zn
r/+&(T
L@x-_,
=LNe"T
xZR<8
Va/w*k
& UhB{
q f["k
Ix.|A
wEb'.8k
Bq4fgpVL
("tF*OcD
k@5p9[%
0d)f[7cN.
Vjn/evi
|AQZ9!-C
&z.4cb2
bH;.b
;x6r3m^
a)B7~Q_
DP+xGs
w)Kkcf
/t2zb/
_p3g2TmE
%QW0#{
n.oVe0
ci{<|bPT
;6}7!Xj'
edLZ@{
aJV+_[M
NJ%he*#b
6F1ok8
60sC9-
x.0YyW
"DDEQ)
cxr?f*
:W&mav
\QeuJ:
PL;w`-
c{k4u)
8Cxqv3
u!W8'l$0
v~T_&T@n
-'$^?eE
nr!a"Y
Q*}T@A
fiL*gp
HWV;"MeDl\@
QGpu3dA
3eg*IT]L
"dFV]8cj
u><xO~z
4Xqj!{
F/M.V.g
FZsdL#
lV?E^{:%
VG#>|1
P.txqLq
?5%*r0
ODz/!1
xj kECH
`tvcG ~
r{R,wM<Xi
/cw_3"Sw3}
|FG-Bx
GF+fOU
;2VPr[
[~N_A
yvLMJ
xTn#UQ
73_2cz:
;{F`M
P;47:"'
3xS7#
3FbNv
ccC8Fn
:_jDX8
~T~],x/
Qh&eWj
Wk]Ho~B
#:k%88e93~+
gN"4b%
o#wH0K
Zr\gR<Q
_tW-eQ5
-BNA|y
!;v=ry
Q8Z0+k8
(nX y
Rv}%B-
e\V5:1
}^q|I;w
[Z^kq/
iFcti:
SgEt,7
Zq\(3!
<KB_]g
HUt\vp
`Xy<GoZ -
^d92y
O6TODYq
D}d;F;
pXJ^d,
FLs2G'
v*9#vQ
k8~H a
}8moFub8/
b*!cBhym
o.B$~>
5zElH*
GWI*CW?
})a<K/E
YZg's<
Fr$q;-
30-;NN
l.N+EJ
?c?VkZa
#2N1)0
vzkfc\<
2Sj[Y<Z
+cDT(g
bfH?%c
DbOfr^
/fT"A`_
{y:w&
,IdEw-
ti/-rmX*
B[}'w=
`p?JK_1
bN97Wy
ss_zRJ
/bYN2W
7":x&Z
4WGF|y
a{W0[`
=#nd7S
OVsug7
T?'J'/&
SL(\@x
TGbWoG
>hP7o4#+GP
Gc:br=
|#*m8oW
7mN21v3
u#_1M~$
Kr_1Je1u^
l45Sl8
"O+~jv
u7D_CMq/
EG`uz.
,B[IU|
^GI3hr
POp[*V
L:E\1Z
3F:qzk
V2\\x_`
Bah/2?
f\~x"u+
*l+.2FA
W;U7rq
f+EZDJ
Iq}B,bgV1qK
AQ[ kB
>f%V1S
CR^e1v
'^1l[R
o7[wi!n
mkfrIpnK
WpkOqc{6F
aJ?!nL
J4%L|7
auvZY
cJyd`Bb
/0lU:Q
IV?8k'x
GqZ-%0
B^q:1<
FDRuu8
x.Lw`P
-Vsvp-
g2bb';
My$1^@
5m$_v`
K#pJs"~r2Ww
pu,dOe.
8pJpf=
/#RQ5
.EwS(u
XIk|6r
Q>b@_a
_L6Kg`
vrdY3K
ndvg+V%WY
r)"C`I
"OgQ0`&
#\x;/J>1
KB2Sy?,
t6j91z
x#m#2xa
aj#(d;-
smJo%r
:ChG5v
)8N_m3
oE]d6l
qarH_?
T>+{c#;
P/k.=d
O3<b=o
pw$Md;
\zh5}L
r{^<U
Ypl5(5
uF&{*{
q9C#F
}@w{)?
3?f+21
rwYfaA
C=C\_)0
,"0W,%
tY3y'y
o"Zg6w
>&nu!]
zU0Q_
(]RA~F
!'bLd
.g=6)7
}@ia*v
zvW? |
1Cbjy0a2
(oiBgv
nF#c?s
N{659El]
l')u8Gt
K^&9St
Mt?>L3
R"(&C|
2X`fa.
Oqpew
vw7rSN
dlJ5hq
_Dd&24
rturY:T
GXrb]7
Gd3^i7
V&d@+1k^rB
#)d<v$+
u[#fI{
%'|Vo#
I?&AOZ
Oa4e(o
[4-.Si
Fe=Su/
xsR`^y
mB>MVY
)$>DsNo"
co=V_x
o#Ah?U
x{N)9c
r<r\Y(
XOZk>.
Nv6;Fn
rNu?)V
Mj`OT4W
m/uRN'
gt(o8I
)s5Yve
^:MBYf
>cOd+>
;y3X`H~
guS3
o>Dw1r
52Yw,w
Bh<+CC
i:jGG~0
JEb5o/
jX)yb-4
NEy3As
~O5WL\
F1rd+*
STG#`&#
^R0gs}y
qeiI%=
Po8ukV
<W#}v8
67b#3
!jj!m&
:r3MZW
-_J92`9
kL_ac,65
;u7n.KyPx
t:YPPw
Yy5RnW
[qH_A
gpzn([
tz3C47a|<
RJ")4HJ
()SI%)
`lKw"t
,cr^pA
nJ:jj?p
G:~G~`Y
Ko^5gZ
O152G6"
GaO>m-m
F^bTj(
k'\XhE
8i6Oic
9yl"oTr
Bg@ 3?
gl=l x
{]x9x2C
9<m4wJ
OsOsst$
?S_JTO
AOVFNeO
ctB0_ct
8$dqjg
:9pR@{
<i[:x-(
+1Lk3n
qkZ$vcG1b
Ws$g;OC
W0Cm7O~
Et?Dbqt
j2v5P9
;~z~@(
&%92;
Q`^WpP5
=gRX0c3
9=R k`#
~W_D~+2u
>n$_D{
I!h7<dD
C^P2:{~q
A*;0N~
lU4YT#
63em';b
Gga.K.f
~4gyl+
msxxk)A
A +^N`
++BF`o
Aa}&;K
_\ZVBGr+
H)C"J*
6\N=B=
WF(ac`
fY<.9;X:
v'3c&3
G=Q5/ |
/-cV!e
O!uP5u'v!5f
q,\*JiM=
eWA!)2
;-H_,B
+&/~EA
csLGgpc
t;7s:p
42E8e'g
u3VR'u
ibKn3NBO
PG*.7a
K~E]av
vg0MC@
AoWr'V
#rg%GG
:TB?Af/sy
Qm72O{
eUXiH!t
GFn-rQ
x8}?zC
WNM6cY
.@{a59*
$F2eD="f
vHGGq8+-
:s;19Y$
a&t9Md
D"/1@(
:>rhM6
G_W!3C
G[Fq,|
aa?99j!
MBj/sk
"k)jYM
f1cvf0
9)I@G$
sV}L{
GXhaF?
:KR[cK
X1-|7>BG
@{ Q?>r
=Lo6$b
gv+pJf$
}[Gbq=
i_RIfr m
,epM09C
d<]/r,Q
BK};}i
W!<5]OIv
ThQZR$
yV79t>
%l_+E[
Mlu6ah
(?^LMF
('46(rg
3qU%?{
p?i6V,
p4n:Wo
ALL>sa
(z$%^o
e&E?Mq
zb""7#P
BV(ld
}:^lMN
h(O`oJ";
p#&Cx}1
yV8&G1
]+j6m ki
w2ha)J/
#/t'^%7
CfM1k>
Pi wi-'z]A72
i1UeR\
l9=y6gz:
oJWnbiB,
g>Ag:y9
5wrd^R
e&2fQ6
@{Y?dn
SfHp,1
"~W+R`
4NN/x<~?v
bzp!;-
'*K6r$
z{(kHg
#ff0!+
kU>ZW0)
7ywx-7l
Mt$)?V
.c$m!c
\{##ZM
Y4t{r6g
9f^tnOG
WqKi3_;
8e1b1;
%2Gm(3
9!~L)&
kM#C-t
6w~dc>b1
}TBzZ"
|:}\i2
)a2K7Zr
,G22r1
q{>'lf`
\B+Gb"
[<Hs[B{
S`p*3B(
,@=e<^c6q
=OBWx%
3? ?b>
Gc|s+;
*V3rr?
8rKW0J
MT/)ew
^~9GTz
CW3@l(
|N.gTE;F
b/eGosPr
9rv5u=
mgtR5m
}j+bP=s
V`aO#3
L!t{1)
2'&DtP?
5o {I>q
9Euc={
-kB-R
K`/kqe
CI~',]
s4f/%iat8
}E;o~\
0-s"+<
pu[:?S
^Ilshc
:6F%|
?SuFqB
&|Kb^k
EqH:>W
JJIi"
/~_f{K
2#+oq'j3
VIIo%V
35yj_)c
FrdG&9
q.o8;f/
:oO>%F
t/`zL'
Wqlc9r
{g6U_k9
_9w|%
,,ocac
7wbG2H*
}(mUaZ
F4bUE
8E3r^9Jo
C+dOS 1
rL_<BW
q+oRwsckor
3fi/NM
E7|m9i
]&ahUVa
Su9tp!
UE|u_LN
.Gu` }
}2%KhXh
T;Or"f
,(Seft
*L:w`9.
*U$=}D
~8JXc=
7tWmbm
lelp8uWM
Tv'F"i
ldGC!'
Scflu$d
:f6IC61m
>W.sRt={?y
,MnP,R
u:yO\I
^8'q`_O
sK@6d
`J]9V?
UMN8~z
$uodw?
zQu`7'
?3fA_bT
BNr&W
6tdg w
ckF6e8#
l.]NgP
wD'j-#
@t5#6N@Gl4
+"*z9o9
'E^gJ3J
i<2VPX
F "84!
C2qY-K
9Tv$qz
N2U|PVeK
92&Fq[~5f
"Xm9:N
z1Q`CaY
5tfTcS/
i\ kW,
:Tv~F"
qeeU6':[1
3CRx'+=
u/@.r<
CHt8I*~
Il)>Mv
9s6u0.
pKm.ySm
tW`G''
U.n[48
`QsbEJH47
/2o^f|
gZ6TRx
jL.\!k
0ul0O&
.$dW!9
e+@DK.4$b;
-"x/{C
H]nAXi
k</oYS
`<x/{_X`
*duS(e
|@/ai{9
Gy0buW
3x2c jR
j?Fks$Q
BM[|ze
BCEZd&Z
6a*|Nb
Vep7%Qp
i]$y)=,0
;6Q%-B
sl#w?)
I{q,V
L3DAj6_
E0wVKs
o0fMv$
}8!%IRW
Z<'6R:[
"roCcNm
7#Ng0_&yprd(o
F1W}2W-@zy)
+9V]GA
AYEg"D
nBBs2K'
`VNU!]b21R
P2IBP
ITM0aIg
{>gtA
^[+.;)p
]f0Pm*2bv
sMd/AU
wi?F-Y
Jk0r}~
V;H/=$
[wic7j
w8/+!Br
xTFHqg
Y U'Gw^&:c?a
+_EX6/
DPpM$]
\dT},+~.
d-]^gla
v]T{-I
c-vRjH
^H^q%cg9
5y&/%kQ
ZGpfy2Q
o3|Y2=.%
^9s8blHj
SINH"lb$-
ppO.fiw
3E+E0q
a7yyt8
q?Y&bC
*>owbKr
Y~uG/
q8HY#y
/Xqgz&
ckF2D`
g0bZ+F}
,ptB3n8/
KlBxh0
kAQ4Sv
-g#p|h
>!'H]*
#m'.J=
CdUNsZ
MVN3ZZ
2$b4J>
$l4Dnu
cO1%y
[gTgof
WslX(9
d.t ao
cb$)G3
U"cX&o
/9%Q\5h
jv V2;
S+Ex^,
(#k\1]
:,]=HP
}a|a>[
$Cw`q
cRMdN+!n
12IxV;`
''ae1ZZS
MYIEJ1
hu-eaQ/
,FUJ3e
g?vwNA
inD<!f
nscBj"
,GtE+cg
jl26wF
%Wd>a17
bEw<cW
J;KF^!
0..9J`\
DMCzdzQ7
b(Jv;y=
j7-rc)]$N
r\jJeb
}i#VA.
3_'0Q(
>o90h>
v0NRVLZl
$v}%E/
'3jz4.f})=
9x=y7[
^F1l<<
ET$KRT
cY2d/v
?.*FrZ_`
#MY^&}
SRvH`a
),!s])
hCC~2{
c9n=Vb
*ZR\p,'
l26}ob:
w3D/WPT
T0\sV&
|:lf!V
0ez-)W
FQ6y>5
#|{6:{
Yyr%U-3Y4;
s(y0S>
>L4+Cz
~"[z8F
eU(lPa
'IEgx.<
'Or^813z
?W+Ey'=
/&D>Dw
f'cgOf
n]5jyFd
1;NuQr
j:K?^A
CX4Y`(
)hoYO_
\b|J89Z
/LQM'}
h+FP-X
%3;&=6a
,Fgz-Gd
sjF96~'h
se=hf=
dJR<85y>
^z&gN}
z+";5P
7u$ r<k
3?yqT=
a/-0n1
%4~tqSe
z!$4Dp
t{923(
],YVGzd)
A_YKVM
]">h$R
/-S4)S
no(4
xg5&+#
V_~ZWbt
mY3w^5
_mAih"
w<~%+x
AgS:w'
'ZP3p!
]3^piQ$
_az\22u
*0<v$IC
8"iLh`)
z]yFmx
TPL5Yc
LAn-^7
hySL_=G
j)w6|B
y1`N.
H.BK6r
sbf,^W/
R+"]"0
z7bbUCE
RO='.~
WKfS:qu
xEXan{
FOeE`(#
e<Qi7y]
z8sv1M
fPk"&}
u`oZ<.JK
V79j'8?
aFr&>U
{$S(mM
 Gm|:
zu%X'}
RA&l;H
E7<V\@
9:*s8<
C$Gfrv
S~n3Wg
e?wq!S
&j?r:
ocSX3g
-^2<:v
C#z}$(
U$;Ysgo
f~x**ng
T_4$5S`
2a~_V\-
!On%2GB
G-c]R<7W
[QoFGl"z
mJ%x7~
ev):2]
~IN9|'
<F25q-
h#{n:q[]
v[v${rI
X'72D6cx
>L@V<^'V
,%CtqZ
='1fX!
$&V\C\
.fld4[
ITLA5})
[8uv.k
B?&6Z#&(
2zk,~!
>`+)KS
0t2S,2Y8D
x(N5Spxu
x^xl"c
ckbHj`7
'x4s8}
q<Am'qR=G[
$^5R,X
SYyh):
_pG;X`
}\`]3.
^zHM{A
M,aRe\
B)iTDV
ZKb<>Sn
do00|?3
)ap{*?
bhH/CNC
o399a1[D
NceQOGc
+ehO>
C?3H8g
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
v2.0.50727
#Strings
#Strings
#Schema
rmhQPCz.exe
mscorlib
SuppressIldasmAttribute
System.Runtime.CompilerServices
<Module>
.cctor
System
Process
System.Diagnostics
CloseHandle
kernel32.dll
IsDebuggerPresent
OutputDebugString
VirtualProtect
Thread
System.Threading
ParameterizedThreadStart
RuntimeTypeHandle
Module
System.Reflection
ValueType
NtQueryInformationProcess
ntdll.dll
Win32Exception
System.ComponentModel
AndOTA
stuSys
System.Windows.Forms
convertWorker
BackgroundWorker
transferList
ConvertWorker_ProgressChanged
ProgressChangedEventArgs
sender
ConvertWorker_RunWorkerCompleted
RunWorkerCompletedEventArgs
ConvertWorker_DoWork
DoWorkEventArgs
buttonConvert_Click
EventArgs
buttonBrowseTransferList_Click
buttonBrowseDataFile_Click
checkReadiness
setReadiness
buttonSaveOutputFile_Click
loadTransferList
updateStatus
status
ProgressChangedEventHandler
DoWorkEventHandler
RunWorkerCompletedEventHandler
OpenFileDialog
DialogResult
CommonDialog
FileDialog
SaveFileDialog
Object
get_OffsetMarshaler
get_ReturnMessage
OffsetMarshaler
ReturnMessage
MainFrm
components
IContainer
pictureBox1
PictureBox
menuStrip1
MenuStrip
ToolStripMenuItem
ToolStripMenuItem
ToolStripMenuItem
ToolStripMenuItem
ToolStripMenuItem1
ToolStripMenuItem
statusStrip1
StatusStrip
toolStripStatusLabel1
ToolStripStatusLabel
ToolStripMenuItem
ToolStripMenuItem
ToolStripMenuItem
ToolStripMenuItem
pictureBox1_Click
MainFrm_Load
ToolStripMenuItem_Click
ToolStripMenuItem_Click
ToolStripMenuItem_Click
ToolStripMenuItem_Click
ToolStripMenuItem_Click
ToolStripMenuItem1_Click
ToolStripMenuItem_Click
Dispose
disposing
InitializeComponent
ToolStripItem
Control
IDisposable
ISupportInitialize
ToolStripItemCollection
ToolStrip
System.Drawing
ToolStripDropDownItem
EventHandler
ImageLayout
DockStyle
PictureBoxSizeMode
ContainerControl
AutoScaleMode
ControlCollection
MyTool
connStr
myDataGridView
DataGridView
currentUserName
student_id
student_name
class_id
class_name
Reverse
getStudentIdByStudentName
studentName
getCourseIdByCourseName
courseName
getClassIdByCourseName
className
getStuListByClassId
ComboBox
classId
comboBox
queryDataToComno
sqlStr
columnName
comboBox1
queryDataToGrid
gridView1
executeCommand
sqlstr
System.Data
SqlConnection
System.Data.SqlClient
DbConnection
System.Data.Common
SqlCommand
DbCommand
SqlDataAdapter
DataSet
DbDataAdapter
ObjectCollection
DataTableCollection
DataTable
DataRowCollection
DataRow
InternalDataCollectionBase
ListControl
DataAdapter
sqlConnection1
sqlCommand1
sqlDataAdapter1
dataset
groupBox1
GroupBox
textBox2
TextBox
textBox1
label2
label1
button1
Button
button2
button1_Click
groupBox1_Enter
button2_Click
X_21398138721
X_1248931414
X_02312312
X_123123454363
X_85432343242
Assembly
X_12394147894
MessageBoxButtons
Padding
ButtonBase
FontStyle
GraphicsUnit
AppDomain
MethodInfo
MethodBase
NewChooseCourse
groupBox2
button3
CourseList
StudentList
ClassList
label3
dataGridView1
NewChooseCourse_Load
ClassList_SelectedIndexChanged
StudentList_SelectedIndexChanged
button3_Click
DataGridViewRow
DataGridViewCellCollection
DataGridViewCell
DataGridViewAutoSizeColumnsMode
DataGridViewColumnHeadersHeightSizeMode
NewCourse
NewStu
Stu_specialty
Stu_idnum
Stu_home
Stu_sex
label12
label11
label10
label9
label8
label7
Stu_position
Stu_politic
Stu_nation
Stu_age
Stu_name
label6
label5
label4
dateTimePicker2
DateTimePicker
dateTimePicker1
classList
NewStu_Load
classList_SelectedIndexChanged
NewStu_Load_1
DateTime
NewStuScore
NewStuScore_Load
TextBoxBase
Program
QueryCourse
groupBox3
button4
QueryCourse_Load
button4_Click
dataGridView1_CellContentClick
DataGridViewCellEventArgs
DataGridViewSelectedRowCollection
BaseCollection
DataGridViewCellEventHandler
QueryStu
datagridview1
QueryStu_Load
IEnumerable`1
System.Collections.Generic
IEnumerable
System.Collections
WithStep
startRange
endRange
Action`1
GetEnumerator
IEnumerator`1
System.Collections.IEnumerable.GetEnumerator
IEnumerator
<GetEnumerator>d__8
<>1__state
<>2__current
<>4__this
<max>5__1
<min>5__2
<current>5__3
System.IDisposable.Dispose
MoveNext
System.Collections.Generic.IEnumerator<System.Int32>.get_Current
get_Current
System.Collections.IEnumerator.Reset
System.Collections.IEnumerator.get_Current
NotSupportedException
System.Collections.Generic.IEnumerator<System.Int32>.Current
System.Collections.IEnumerator.Current
Toolbox
GetRangeset
List`1
source
TransferList
<Version>k__BackingField
<BlocksToWrite>k__BackingField
<FileContext>k__BackingField
FileInfo
System.IO
<Commands>k__BackingField
get_Version
set_Version
get_BlocksToWrite
set_BlocksToWrite
get_FileContext
set_FileContext
get_Commands
set_Commands
FromFile
FileStream
StreamReader
Stream
TextReader
Version
BlocksToWrite
FileContext
Commands
Tuple`2
Resources
stuSys.Properties
resourceMan
ResourceManager
System.Resources
resourceCulture
CultureInfo
System.Globalization
get_ResourceManager
get_Culture
set_Culture
get_iYStpvh
Bitmap
Culture
iYStpvh
Settings
ApplicationSettingsBase
System.Configuration
defaultInstance
get_Default
SettingsBase
Default
Method
stuSys.Functions
METHOD_TCP
METHOD_UDP
MinuFlood
Socket
System.Net.Sockets
connect
packet
method
IPAddress
System.Net
IPEndPoint
AddressFamily
SocketType
ProtocolType
EndPoint
SocketFlags
MainForm
stuSys.Forms
position
methods
attackButton
portBox
threadBox
packetBox
methodBox
githubPage
LinkLabel
groupBox4
logBox
stateLogBox
tabControl1
TabControl
tabPage1
TabPage
tabPage2
threadLogBox
stopButton
linkLabel1
closeButton
minimizeButton
attackButton_Click
stopButton_Click
githubPage_LinkClicked
LinkLabelLinkClickedEventArgs
linkLabel1_LinkClicked
minimizeButton_Click
closeButton_Click
<.ctor>b__4_0
MouseEventArgs
<.ctor>b__4_1
<.ctor>b__4_2
<attackButton_Click>b__5_0
<attackButton_Click>b__5_1
MouseEventHandler
ThreadStart
FormWindowState
BorderStyle
Cursor
FlatButtonAppearance
FlatStyle
ContentAlignment
LinkLabelLinkClickedEventHandler
FormBorderStyle
FormStartPosition
MouseButtons
Encoding
System.Text
rmhQPCz
CompilationRelaxationsAttribute
RuntimeCompatibilityAttribute
DebuggableAttribute
DebuggingModes
AssemblyTitleAttribute
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
AssemblyFileVersionAttribute
STAThreadAttribute
CompilerGeneratedAttribute
DebuggerHiddenAttribute
DebuggerBrowsableAttribute
DebuggerBrowsableState
GeneratedCodeAttribute
System.CodeDom.Compiler
DebuggerNonUserCodeAttribute
EditorBrowsableAttribute
EditorBrowsableState
stuSys.AndOTA.resources
stuSys.Forms.MainForm.resources
stuSys.Login.resources
stuSys.MainFrm.resources
stuSys.NewChooseCourse.resources
stuSys.NewCourse.resources
stuSys.NewStu.resources
stuSys.NewStuScore.resources
stuSys.Properties.Resources.resources
stuSys.QueryCourse.resources
stuSys.QueryStu.resources
IntPtr
op_Equality
get_Size
UInt32
op_Explicit
String
Concat
Environment
GetEnvironmentVariable
FailFast
get_ProcessName
ToLower
Contains
set_IsBackground
get_CurrentThread
Debugger
get_IsAttached
IsLogging
GetCurrentProcess
get_Handle
get_IsAlive
GetTypeFromHandle
get_Module
Marshal
GetHINSTANCE
get_FullyQualifiedName
get_Chars
ToInt32
ArgumentException
GetProcessById
SizeOf
set_WorkerReportsProgress
add_ProgressChanged
add_DoWork
add_RunWorkerCompleted
ShowDialog
get_FileName
set_Filter
set_DefaultExt
set_Text
SuspendLayout
BeginInit
get_Items
AddRange
set_Location
set_Name
set_Size
set_TabIndex
get_DropDownItems
add_Click
set_BackgroundImageLayout
set_Dock
set_SizeMode
set_TabStop
set_AutoScaleDimensions
set_AutoScaleMode
set_ClientSize
get_Controls
set_MainMenuStrip
add_Load
ResumeLayout
PerformLayout
EndInit
ToString
ToCharArray
ExecuteScalar
get_Tables
get_Item
get_Rows
get_Count
set_SelectedIndex
set_DataSource
ExecuteNonQuery
Replace
get_Text
MessageBox
set_Margin
set_Padding
add_Enter
set_UseSystemPasswordChar
set_AutoSize
set_UseVisualStyleBackColor
set_Font
Convert
get_Length
FromBase64CharArray
GetDomain
GetType
GetMethod
Invoke
get_CurrentRow
get_Cells
get_Value
set_FormattingEnabled
add_SelectedIndexChanged
set_AutoSizeColumnsMode
SystemColors
get_ButtonHighlight
set_BackgroundColor
set_ColumnHeadersHeightSizeMode
get_RowTemplate
set_Height
get_Date
get_SelectedItem
set_ReadOnly
Application
EnableVisualStyles
SetCompatibleTextRenderingDefault
set_Visible
get_SelectedRows
set_AllowUserToAddRows
set_AllowUserToDeleteRows
get_ButtonFace
get_HighlightText
set_GridColor
add_CellContentClick
op_Inequality
WriteLine
Exists
OpenRead
ReadLine
get_Assembly
GetObject
Synchronized
SendTo
Connect
get_White
get_Black
get_DimGray
FromArgb
add_MouseDown
add_MouseMove
add_MouseUp
get_NewLine
set_Enabled
set_WindowState
set_BorderStyle
Cursors
get_Help
set_Cursor
set_BackColor
get_FlatAppearance
set_BorderSize
set_FlatStyle
set_ForeColor
set_Multiline
set_ActiveLinkColor
set_LinkColor
set_TextAlign
add_LinkClicked
set_ItemSize
set_FormBorderStyle
set_StartPosition
get_Button
get_Location
get_UTF8
GetBytes
S_MR{vF
Oo`U_eQ
O(uf[u
Oo`U_eQT
Oo`U_eQT
Oo`U_eQ
eQ(u7b
vpencL
WrapNonExceptionThrows
stuSys
Microsoft
Copyright
Microsoft 2015
$387011b6-c1f3-4c2b-b34b-f2296b826e53
1.0.0.0
3System.Resources.Tools.StronglyTypedResourceBuilder
16.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
16.7.0.0
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
$this.Icon
iYStpvh
_PROFILER
_ENABLE_PROFILING
Image file (*.img)|*.img
Parsing transfer list...
iYStpvh
lnfsze
menuStrip1
ToolStripMenuItem
toolStripStatusLabel1
ToolStripMenuItem
ToolStripMenuItem
MainFrm
ToolStripMenuItem
ToolStripMenuItem1
ToolStripMenuItem
ToolStripMenuItem
pictureBox1
ToolStripMenuItem
ToolStripMenuItem
statusStrip1
select Student_id from Student where Student_name='
select Course_id from Course where Course_name='
select Class_id from Class where Class_name='
select Student_name from Student where Class_id='
student
Student_name
54-56-71-51-_4D-__45-__2F-2F-38-_4C-67-41-____51-41-_______________________67-41-__34-66-75-67-34-41-74-41-6E-4E-49-62-67-42-54-4D-30-68-56-47-68-70-63-79-42-77-63-6D-39-6E-63-6D-46-74-49-47-4E-68-62-6D-35-76-64-43-42-69-5A-53-42-79-64-57-34-67-61-57-34-67-52-45-39-54-49-47-31-76-5A-47-55-75-44-51-30-4B-4A-41-____42-51-52-51-_54-41-45-44-41-42-65-56-38-72-73-_____4F-41-_69-45-4C-41-54-41-_42-67-__47-____4A-6A-59-__67-__51-41-___45-_67-41-__67-_42-_____45-_____43-___67-____4D-41-51-49-55-_42-41-_42-___45-41-_45-____42-41-_______4E-51-31-_42-50-41-__45-41-_4B-67-44-41-____________47-__77-41-_43-34-4E-51-_48-41-_____________________________49-41-_43-41-_______43-43-41-_45-67-_______43-35-30-5A-58-68-30-__54-42-59-__67-__47-41-__49-_________43-41-_47-41-75-63-6E-4E-79-59-77-41-_4B-67-44-__51-41-__51-__61-_________42-41-_42-41-4C-6E-4A-6C-62-47-39-6A-41-_4D-41-__47-41-__43-__48-67-_________51-41-_51-67-41-__________49-4E-67-41-___45-67-__43-_55-41-34-43-4D-_43-41-52-41-_44-41-_____31-_43-34-41-____________________
-14-14
server=.;database=StuMagSys;Integrated Security=True;
select * from syuser where Use_name='
'and password='
syuser
button1
button2
textBox2
label1
groupBox1
label2
textBox1
Resource_Meter.Checker
stuSys
FunctionInit
select Course_name from Course
Course_name
select Class_name from Class
Class_name
select Student_course.ID as
ID,Student_name as
,Class_name as
,Course_name as
, Student_course.Score as
from Student,Course,Student_course,Class where Student.Student_id=Student_course.Student_id and Course.Course_id=Student_course.Course_id and Class.Class_id =Student.Class_id and Student.Student_id ='
insert into Student_course(Student_id,Course_id) values ('
delete from Student_course where id =
NewChooseCourse
StudentList
button3
groupBox2
label3
dataGridView1
ClassList
CourseList
server=.;database=StuMagSys;Integrated Security=True
insert into course(Course_name,Credit) values('
NewCourse
select Class_name from class
insert into Student (Student_name,Sex,Entrance_date,Class_id,Birth,Nation,Home,Politic,ID,Job,specialty,Age) values ('
select Class_id from class where Class_name='
Stu_name
Stu_sex
NewStu
label8
dateTimePicker1
Stu_politic
label6
Stu_nation
Stu_home
label10
label12
Stu_age
label9
Stu_idnum
label4
Stu_position
label7
label5
dateTimePicker2
classList
label11
Stu_specialty
update Student_course set Score =
where id='
update Student_course set Score=null where id='
NewStuScore
course
Antivirus Signature
Bkav Clean
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Variant.Bulz.584517
FireEye Generic.mg.325fb848ba8b9329
CAT-QuickHeal Clean
ALYac Clean
Cylance Unsafe
Zillya Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Clean
BitDefender Gen:Variant.Bulz.584517
K7GW Clean
Cybereason Clean
Baidu Clean
Cyren W32/MSIL_Kryptik.EZZ.gen!Eldorado
Symantec Scr.Malcode!gdn30
ESET-NOD32 a variant of MSIL/Kryptik.ACEU
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Kaspersky HEUR:Trojan.Win32.Generic
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Tencent Clean
Ad-Aware Gen:Variant.Bulz.584517
Emsisoft Gen:Variant.Bulz.584517 (B)
Comodo Clean
F-Secure Clean
DrWeb Clean
VIPRE Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Fareit.dc
CMC Clean
Sophos ML/PE-A
SentinelOne Static AI - Malicious PE
GData Gen:Variant.Bulz.584517
Jiangmin Clean
Webroot Clean
Avira Clean
MAX malware (ai score=86)
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Trojan.Bulz.D8EB45
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan.Win32.Generic
Microsoft Trojan:Win32/Wacatac.B!ml
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis Clean
McAfee Clean
TACHYON Clean
VBA32 CIL.HeapOverride.Heur
Malwarebytes Malware.AI.3242361281
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Clean
Yandex Clean
Ikarus Clean
MaxSecure Trojan.Malware.300983.susgen
Fortinet Clean
BitDefenderTheta Gen:NN.ZemsilF.34050.7m0@a0Xu5Ie
Avast Clean
CrowdStrike win/malicious_confidence_100% (D)
Qihoo-360 Clean
No IRMA results available.