Static | ZeroBOX

PE Compile Time

2021-08-05 17:15:51

PE Imphash

fb0fb8edc31fffe9bb05edbac608d5c5

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000f420c 0x000f5000 7.76719005415
.data 0x000f6000 0x0000248c 0x00001000 0.0
.rsrc 0x000f9000 0x0000025c 0x00001000 3.3727476261

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x000f9058 0x00000204 LANG_GERMAN SUBLANG_GERMAN data

Imports

Library ADVAPI32.DLL:
0x401000 RegOpenKeyExW
0x401004 CryptCreateHash
0x401008 CryptDecrypt
0x40100c RegCloseKey
0x401014 CryptDeriveKey
Library KERNEL32.DLL:
0x40101c VirtualAlloc
0x401020 RtlMoveMemory
0x401024 CloseHandle
0x401028 GetTickCount
0x40102c WriteFile
0x401030 RtlFillMemory
Library MSVBVM60.DLL:
0x401038 _CIcos
0x40103c _adj_fptan
0x401040 __vbaVarMove
0x401044 __vbaVarVargNofree
0x401048 __vbaFreeVar
0x40104c __vbaStrVarMove
0x401050 __vbaFreeVarList
0x401054 _adj_fdiv_m64
0x401058 None
0x40105c _adj_fprem1
0x401060 __vbaStrCat
0x401068 _adj_fdiv_m32
0x40106c __vbaAryDestruct
0x401070 None
0x401074 __vbaObjSet
0x401078 None
0x40107c _adj_fdiv_m16i
0x401080 __vbaObjSetAddref
0x401084 _adj_fdivr_m16i
0x401088 __vbaRefVarAry
0x40108c _CIsin
0x401090 __vbaErase
0x401094 None
0x401098 None
0x40109c __vbaVarZero
0x4010a0 __vbaChkstk
0x4010a4 None
0x4010a8 EVENT_SINK_AddRef
0x4010ac None
0x4010b0 __vbaVarTstEq
0x4010b4 _adj_fpatan
0x4010b8 __vbaRedim
0x4010bc EVENT_SINK_Release
0x4010c0 _CIsqrt
0x4010c8 __vbaExceptHandler
0x4010cc _adj_fprem
0x4010d0 _adj_fdivr_m64
0x4010d4 None
0x4010d8 None
0x4010dc __vbaFPException
0x4010e0 None
0x4010e4 __vbaStrVarVal
0x4010e8 __vbaUbound
0x4010ec __vbaVarCat
0x4010f0 None
0x4010f4 _CIlog
0x4010f8 __vbaR8Str
0x4010fc _adj_fdiv_m32i
0x401100 _adj_fdivr_m32i
0x401104 __vbaStrCopy
0x401108 _adj_fdivr_m32
0x40110c _adj_fdiv_r
0x401110 None
0x401114 __vbaI4Var
0x401118 __vbaAryLock
0x40111c __vbaVarDup
0x401120 __vbaVarCopy
0x401124 None
0x401128 None
0x40112c _CIatan
0x401130 __vbaCastObj
0x401134 __vbaStrMove
0x401138 _allmul
0x40113c _CItan
0x401140 None
0x401144 __vbaAryUnlock
0x401148 _CIexp
0x40114c __vbaFreeStr
0x401150 __vbaFreeObj

!This program cannot be run in DOS mode.
`.data
@h$p<p
-C000-Rekmsiscsvew
VB5!6&VB6DE.DLL
euisfdjsxadfds7
Rekmsiscsvew
Rekmsiscsvew
murenosamw
umnewrdcnakw
modReplace
ademfsnsefsds
Kefmunaedsfxecsds
vusedsycxsefn
frmODBCLogon
frmLogin
Rekmsiscsvew
VBA6.DLL
__vbaVarZero
__vbaErase
__vbaI4Var
__vbaStrCat
__vbaHresultCheckObj
__vbaAryDestruct
__vbaAryUnlock
__vbaAryLock
__vbaRedim
__vbaVarMove
Shell32Ctl
__vbaFreeVar
__vbaFreeObj
__vbaFreeStr
__vbaStrVarMove
__vbaStrMove
__vbaStrCopy
__vbaObjSetAddref
KERNEL32.DLL
RtlMoveMemory
GetTickCount
ADVAPI32.DLL
CryptAcquireContextW
CryptDecrypt
CryptDeriveKey
CryptCreateHash
RegCloseKey
__vbaVarTstEq
RegOpenKeyExW
__vbaVarCat
__vbaRefVarAry
__vbaUbound
__vbaR8Str
__vbaVarCopy
__vbaFreeVarList
__vbaVarDup
VirtualAlloc
CloseHandle
WriteFile
__vbaVarVargNofree
__vbaStrVarVal
9~MarkupLabel1
Em>C:\Program Files (x86)\Codejock Software\ActiveX\Xtreme SuitePro ActiveX v15.2.1\Bin\Codejock.Markup.v15.2.1.oca
XtremeMarkup
_D_eDockingPaneFrame1
C:\Program Files (x86)\Codejock Software\ActiveX\Xtreme SuitePro ActiveX v15.2.1\Bin\Codejock.DockingPane.v15.2.1.oca
XtremeDockingPane
;e4CommandBars1
)C:\WINDOWS\SysWow64\CODEJO~1.oca
XtremeCommandBars
lChartControl1
3ShellFolderViewOC1
C:\Program Files (x86)\Codejock Software\ActiveX\Xtreme SuitePro ActiveX v15.2.1\Bin\Codejock.ChartPro.v15.2.1.oca
XtremeChartControl
WindowsMediaPlayer1
+bWMPLibCtl
FlowGraph1
C:\Program Files (x86)\Codejock Software\ActiveX\Xtreme SuitePro ActiveX v15.2.1\Bin\Codejock.FlowGraph.v15.2.1.oca
XtremeFlowGraph
8DockingPane1
PropertyGrid1
C:\Program Files (x86)\Codejock Software\ActiveX\Xtreme SuitePro ActiveX v15.2.1\Bin\Codejock.PropertyGrid.v15.2.1.oca
XtremePropertyGrid
C:\Program Files (x86)\Microsoft Visual Studio\VB98\VB6.OLB
FtxtPWD
txtUID
__vbaCastObj
__vbaObjSet
RtlFillMemory
cmdCancel
txtDatabase
fraStep3
txtServer
cboDSNList
cboDrivers
txtPassword
txtUserName
shell32.dll
Shell32Ctl.ShellFolderViewOC
ShellFolderViewOC
wmp.dll
WMPLibCtl.WindowsMediaPlayer
WindowsMediaPlayer
Codejock.ChartPro.v15.2.1.ocx
XtremeChartControl.ChartControl
ChartControl
0q# a{
ForeColor
BackColor
Caption
Codejock.Markup.v15.2.1.ocx
XtremeMarkup.MarkupLabel
MarkupLabel
Codejock.DockingPane.v15.2.1.ocx
XtremeDockingPane.DockingPane
DockingPane
Codejock.DockingPane.v15.2.1.ocx
XtremeDockingPane.DockingPaneFrame
DockingPaneFrame
Codejock.PropertyGrid.v15.2.1.ocx
XtremePropertyGrid.PropertyGrid
PropertyGrid
Codejock.FlowGraph.v15.2.1.ocx
XtremeFlowGraph.FlowGraph
FlowGraph
Codejock.CommandBars.Unicode.v15.2.1.ocx
XtremeCommandBars.CommandBars
CommandBars
Codejock.CommandBars.Unicode.v15.2.1.ocx
XtremeCommandBars.ImageManager
ImageManager
vusedsycxsefn
frmLogin
txtUserName
faefsefsaef
cmdCancel
txtPassword
frmODBCLogon
cmdCancel
fraStep3
txtUID
txtPWD
txtDatabase
cboDSNList
txtServer
cboDrivers
ademfsnsefsds
waremuinasdsdcsm
ArialD
FlowGraph1
XtremeFlowGraph.FlowGraph
PropertyGrid1
XtremePropertyGrid.PropertyGrid
DockingPaneFrame1
XtremeDockingPane.DockingPaneFrame
MarkupLabel1
XtremeMarkup.MarkupLabel
ChartControl1
XtremeChartControl.ChartControl
ImageManager1
XtremeCommandBars.ImageManager
CommandBars1
XtremeCommandBars.CommandBars
DockingPane1
XtremeDockingPane.DockingPane
WindowsMediaPlayer1
WMPLibCtl.WindowsMediaPlayer
ShellFolderViewOC1
Shell32Ctl.ShellFolderViewOC
J_T_^/
8w0.nOQf
XTl$O#
9{ A+O
,rHjK+
0Toa@o
{pzGMd
#$Cp6A
N~w"@?[
'<DR_
VTu*uVc
G&8;Vg
'bhH}vZ
<[bK5G
FA9"6Qn
$PX]5l
wz5|D1
@lr7~Qg
Xi #A`a
II?6^=
F<rT8v
LGSS#{N
{y8BSfn2c8|zYbuF{cMRmmlTi5hIipIYXNKKT4|Co083YsfFcYOfL1Rm7cweyA87uRWE1V5u2jZEld2ppg6dZUhwmuz0lY3wgBC55GzfSL1AGVrWwZu1oZZLNNT6HmtHKgr8XTbMRons8wuYggD6veQCGTzGBOFzsVIDXGmzVxZhxRzfKqcsUMRG1gTD2BUW{jeJlu38NHKwj{BkiuJpdP21w0pXlWbzb9nqb|kwMZeFYtbdDr9dNi20WY4LvtKuAADEvPK7LWBPkTIhzHBbwWuxbZ06AtvTAodbkTA3MO{YN{bzAsKPlQndx6UjC4DOWtSz3Ejqgw|iUA2BAdyg30lnLGkDX26oUFlgj6OhR{ECPni1wMWFKwxPhmOwsnB3FieCSNLlPkSB92iSBc6BYmQIeRAJIwgCD7pk1CBG9TRCQV2pkmwAAJ5hv2iwkB60AVdQ4szSZcIY6rcN5SKowq0YNBnmz|SUVk5yFxDkiizv7ZwYJNljmZsij6z6FoWSRvrFCbxFDNUVGEdzdc1BOwtrsNVEZz0QxGEFr3{k9XlELoCO|bgiqUzmyGX8f31Ejwp5JVXu|QAN9UHmbASXFxEvGsI949xpO{yTqJofk1JMYLtYjlMrylHv7AAiHVd4YDA7ihNRI6YA3be{5xYDoDS5|EYw3jqzZ3gdAbkTG4VB0hZ65w6pnLAuUtliKpFq9AwlMKWwH{r{zzr061yfhxhhee3QiLN7V15bikeFMWd9j5Nq|EIyB|7H{DC1cw7m74yu2eZf|BEUdN7OQbQ|U3MO4ZRP2M2uOGxEMgbXRh0NyVJEYIs15uIe0crPINru6cFRVsls838MHJqqSh8ljr96myyhdfcEtfdpC46s7xT4DAifwxl54LxROeHzDADGFVG3HhjQKgYGHxpvOQ2i5lscl9hG8WMm2Yb8BEc{4gbuWYNbR1gAqVsZbblctiuysUvEr5UoCRxMG3694PI6BEEL9{R0gN9CZRpkuMoG6gOj5OhsXxqeg9AV7d7WElr|
0<mganiR
JbNncOvnQ
!I*U/[
6[9'|`
\=|Y~>{i
bn60{8u
#b!;yj;
enE<0r
Gc/x0K<
R<sw4|
W"c 5X
W;s-&x1
P:#[4*`+h3z
z'}'d
>ah02-+
M)([\t
KKN^jG+
hUIN?.b
EO=FQ#
4pgnB{
rT6}o$;
39$Dk[
-6oN+{ksV
Hv\!6i
Si'IE[%Qg
aYSp|X}
T~zTwVy
KPF9F%+8
u#4MEg
<Q]VWC
`2En*UM
"t TzU
9`QC0P
Pd7T-u6H
?sSMAB-
G;XgJK
=TEPi<
cjLaw6_9
I9v(<l=
U;wh1
b0O8T$
,+.~0Hi
kmC0Io
)\PT^Ewkg
_tz^k$
FWV]EU|
\'Qa:R(N
YYR;#5Zm
fJ{aI6
^+()ap
\D+p\j2
l!O]gPJTg
40A |o
a+YS$C
Yb!D1F
bkR:l6
F9zS~~
z;+-z~0
mN*7la:
z"a>Q3-LDy<a
@v!G3?z
P@Dw/R
s9"N<3
#!7A1M:
cmO}[[
NHP8X5
c}thKq~
bkaVA uY
aLJBd7Y
9NO)ke
U]2*M~S
&I]dO[n
>6`JCnU
(4ZNS:{"@
TOV`8=X
0O'QtlIc
RHk)}.]
c2S+d]S
;wOmDI
,)&1?L8?
:?n<643
\[/Q8'
7_5nin
NZUau/
5M`R/y
:WJebf
!@IFDh=
-N}Bo?
]96bTp
Ly*:#E
Nhc#w \
LR? PGG
6Z,eKz
*wGT/\
;&B_69L
$rx=9(
sgb=9!
;c@Y&`
|KRh18
T*lypP
jfWx!l
y$%c'o
5S-oc,U
^p|9w-8B
>S:~\j
}~z^]Ufy(dV
hkDB^R0
rA>d|-
{gpzD~
xKJ$,nnd
J>H3sPd
EW\h8
i-#u:U
ehH^('
J\;5B
(eT]6#|
T/l7}h
:#'oKw
)gi$)b
^mjN)7
Y839t5_x@
wh @xa
}8Otpe
H<M\5\/
Yf+)I.
&xsxz*5
s-668>piW
';=|e0&
L<7SFm
q(_STw^l4
'fH}v.
Am.G{o
"mw;>4w
{u2@>=
3!h$vRN
($%5}-
J-D7f1l
ajWA(Br
H{LuZ<
A~h[.b
Be<AlB
UA}vWl
^,ykVe
g//k81x
K!yl.'`
VZ74g,i
&[a<zl
.|}xo=
c}W`vJ
H~5"a?
IoQC\~B"
;k+- }M~$
aD$LLeU<
8)~25u
;}Yt#v?G
Nm8wiYZ
&VOcFm
coRG1
QR`d"E
OX'&K\[!kb
\h}K&0
cgUeY
G;I/n%;#
2)VMNB
5IVXMm
+nGZju
/9<b$[
$I[=>
9AiK)a
#|+i/O
j:A@wr
d,U{J+
j0E=];
L=s|lK
/-vNq8
`U2t+J
DJ7.-E
*$b(li^
@Z4lJv
fXL$[c
fE>-pZ6a6
6]|v8/k
otkFAo2
QH kVN
{VT"s)
ASnFh
->w#RPS
Q|1.)5%T
&^p$VU
^UXdHo
Tx-zc??
#=K0r4
j|`VhMk
f3Cn$-
M"Erax<
_+-k^
aZ;&1*#v
DtRj'/
2f$ B@
#\zF.-
!mGhkF:
Ii57}p
4HDj+-S
2]Qg}
KN8~jHN
&e;Q0v_
"UJ9n6
1^5H,a
+1U2>$
C{O/6O
WU[Lc>
h[C"m2j
N>A-mn
{eUU[w
[q.+~&
fw:gPa=A
cEFcP`
\\E5T*W
aNS\_]
wF70r:(-
?>^_=X<B
kZS*9f4
U<yalRat
,A//3!
\:5n@J
Y0`6&z
uSROi9
jDPiC.
PqOIm3
vH<9&e
HPoRw;
dJhx(.
$UCT-P[|
>~-=po
Ii{<C*c
KnYz(35M
JILh}7c
Kdldbo
MUZu9m
sHL.#8
:_$ARj
zvDEnB
/@ NCo
`3 "7J$
^7# #R
t]yD8x8
',-B(5
@2[|Iq
rjh.*3
_M8A4]P4
LTa`V7
0twWNv
*&9Qr#5B
1c,`v*5
K1S=fW
ts#UY:8
zA/hN3
+F64YK
=|M^AV
#k%&)Q
qidyi
5Y]vSpLc
/5quTA
]GdXgmNac
s0-$(Wl
?1TK#hQ4
7J6F@u
"f4&SU
q`XA\GvD
<S-Q50
/>VGs=K}$V
]M:583
^9{=^I
|K^?RS
_w6"(
1:#Y[Dh
(1 cyV
c/amW?D
k=+";<
N@6q[P
lXY,gZ
Jl^RdJ
ieG^JZ
Ot!W>PO
ePnB."
]n+Ag`$
dr$+T.7
S[*5<}
^b=k7K3
*%t02f
;f0RP%
R<zhz1
%>|Z-W
cxzU]i
:\GD1g
q`EU^A
d6Q"+:-p
e1mXw~=
m+cj?M
QyN.E;
8qi`eS
sd1G#T
^64&+J
`m<u9V
40.jmb
,7d&1>
Rt#`Z>
[vX)`c
9\`:pQ
&v\@h)
}\U}b9
$|6gT^
Qt}X<
3NU^4+q
T_+9wQL}4
9WqGZ9
=H\<yZ
,z8DM3|
<" A"=
:45{X@
aalM#M9K5
pG)`96
-PS]gC
rtmkH)
6PO,#6
u>9]<>T
nJW`7eG
d}WK\}SZ:L
h7Imvn
u1s),9
x`w8Jk
!|`Zy
s@*gc^
{-(eqc
|d)O?v.
>&Mg-r!
o#HN#Ap
6=7Vo4
<scW=c
I~I#E!
Ja)-L1
$hNeHKzx
M^_J*z8
#Jp;=b
\bc{D&G(L
0\\O\h
f!]&KJ
CJ[`"q
0L9w;"
\<5;`4
V+6Az
Q#'fl
Gr agN
~rvOd)
gFEUU~
E@=Xw
56dM&HZQ%
e3O'{M
+ 3,[Q
xtv/nI
>u`W2xx
>{Vs=\
y2FG.*
(^_J cA
yvH'KCbn_
fQ%:lS+
m#'oVo&
_C}uI\Vb
dv@Y?0
VF~+(w
%x`-7'
_* ?r,
1XTAw=
rs/]Pt
}&=1UvI
s$OS[+
0}dK0b
Yp3_xs
@M/]2Q
-3-uu]
]s~"&]
lcRc&Us?
8'$^lS
t<G~`Qd
G8 {,}
{t~ZI+
'M*3,.
Lt'k!/
^.g3}G
VE,'x8H
#HG(+m
'tYUW9
^E(F5d;
3`f%=S
ErHxevE
M(+.OD
qh9%:I
Xr@X$E~
%wD&{c
C-5&Oe
xuU{nS
m6hCoV
0`J2j&T
JAYU}E
*55t.B
p4z"}H%ElFiP
iVEU*L\
2:[iaK
j}-c0!
Ca_z$b#S^
v.=f+}BM
eqj0J-
BpZWsOD
j%sYD.=
A}-RYB
Wk%o`L
\Qf"/yx
t";XA*
<",}@f
{)]#>:
6;=D8 p
]*!*P6o
ZeULq[Z
_;)4Bv
)u>[aO
.3%G`g,I
k+/@l]#
PaS[rWv
DWHROx
!XMo+5(u
Swf7?<
*%j|YE
&6w(n#
#8 c-3l
w%.1}&T
9%Cf-<(q{%
oj95^>
3'Ni*
i_qmm[
R]*_ >
H&ShK
S>*+F9
_YI9'N|pq
tVW)5P1
<l5>*[n
za20kzA
rtc?*|a
Z4Da2CY
P7ne8&(
##XA^7
%/`hm2
(Gk[n<
d`ygza
L2|?,I4
7|Gi)0
\U:gg
G]YejO
D#L)&1
Z[5Mu
j/zMY>
[v"=3"
=Drv2:
xg_Nifw
E';i)"<
/8LvVF#!
aOp]3&
aA3jC^
<0]It;
K^2;|^
2/3=4?
<>`F`[n
OvSv1`
=(,x"$
.*5KB4"
,8-lhM
n{NJ+9
YcNc/1(d
@Bgb<eN'
8jtU c.F
1`c56KZ
}NVJlgX
l9RxBf}
'kAs3L
h>(qiI
`PWzRx
;<SH$B
U5\DA%
f./F~X
^}PE*-
\mi>YD
Hc-$_y
g~>p*3P
;9qOPd
9~OS^.8
y'92?Q^
oH)a\w
:LtMNT
lAHV:QQ
<2@WT!t
;p;e)^
4aq%:1
(;ew"W
c)"3*}
uy,c/&
8jI@ 0
a~\l[wN
[.l@m-H
.kGGVx8
KC9?0mJ
e`2AYa
#wQUu1+?g
'</o#'
~^)~u4
]cetb{
alEA0d&
xuu]N(
~,s |h[
yzY.UD
1:^>Z?
tJU5K=
'W(:I8]
X!+l+d
J}8f~`
Bs=osH.:
^R!r 6
H8Ha&Q
Jx[2B^
^gz-P2?
1K1:ER
9;SLymd
E11
M>Itjwh
JVY_lGmR
8m0De$
25O~R@
U?',H3X
_ KlKUs
18WqN#U
6iFiZk
UYxV2p
\oE@d>OY
3.*T5j'
[xE4~.
xQ?|=f
wFrIyu
_$&`0[
(>|+054V
q\*TV!
bB9i5S
2W94]c|
Mo-@nB
Ekhr8[
)g7!NCN
(Foudc
fIcp^M
WC=H28
A"l7yQN
,PHad!
3n:giZ
RvsY1/e
MOlprw
lJx<#*
+ly0`2!+cK?l
+u$.Rj
kQJO>j
~M/{("|
=.q~`o8
>8e}Xd
6wjJqDk
SQlF<Z
O&f'v7W
2\+3gG
"qA>qs
2\'_.
mB!7UL
a"4Xmo
#(-#Gf
/2>VE\U
aD[3t_
#nA&i2
F#is=^
D4P8,E
Q!niYo
!i"4KB
f7)+b!!
63Y~gHk
2}{E?77J
q=3O=L
$16ozM
=ZpT3k
qZ9$jh+0
ZK))jP
`:F0SA
z6.}NA
?+x85|
w#u>mB
`(31fW
?Uv#sD
E^:UIx*
+'B?h
Qt{ZL[
kaj~>
n}E(O$
1mZly
Ni`/^Z
hLywh4
#^o',mE\w
I:p$hl
..(Oa|
-z^ u;F
Wc(ybG
Aub5ym:
sI"&It
33f&|8)(
TUlkKAC]L#d
7]HQ\wD
A xLF8X!l
>[_e"3
Zogl)cp(FQ
$Xz^&s
w#bAA%
K&I@_o
Noq"1hR
'HD^YV
x8=<B5l/ T
*,nfXK
x9~}l~
!L9-|\
rd *Z:V
M.6mpc
~nD0,w?
&]wWX9
|e9[Xp
B4Ul8)
> Ggo^
wv*\Im
1Gza%l-
Tlk;3J
[\<W_d
l5B]jI
74ha|i
>rG$Q
{*.5j`p
E!N{jQ_
ck/Sx>
W;9{d0q
3Cayh*
vem%+}H
!NQ|Xl
A\&,#
/YVM%!
4I|&MI
,KQvN.^
}BbO&
I Q>S<&a
k-ap1S]
hp]p[lK
BFI>#wx
C{{djv
+45|N1
n9<*+8
hWoQSj
N[S;o,
h C@Q-/G
7r2-<.
E[MbS}i
JBdhmJ
m;8j6;0
Zoye)b
+JvQga
ycJj[9
X-Gt-^f
kTMe|1i
b;=*OR<P
+k~,`p
:*@b&%c
T6I^1xHA0
v]qMMc
G&sJh{`_V
L'C=KX
H|[u=K
azr1QVx
bV*D^FH
!=fAW&FBz
'a>H!Y
Q&})R{
l<zbCHr!
O:CY@.
Hea{<[~
P}i\<_M
yS;"IV
^CIEA4<
Hq3D@&
}$cQmM
J/fpft0
-MDt[
_7OH2h"
R5Is4y
T~28q=
*N[5Cp
DPTO' %
1aDZ9-
`"EE)>
3u2wUe!
#L"^_H
j/m#7=yabO
T}?VBg'n
"iwl-q
5msr:U
tB1H$6>
t\(XL}
^Un(v&
i,]&%1
klcwN?
@H*.EK
>q>N<J&7y
^({QU%
l:*6hS
FH3P]+
vs5R<O
GZ#)0x["
:mOw7+
{86Q&;?n9
2'\'TC
_G4otf
4'y'pupRn0
AZAyj?
8Bz%Ug#
r"b*W`
nC@yU@
2P-J)S
4[,w<e
59vI>N
dUpwgh
E\6VDx
pBk#J!
~w]f*uW9
?a,1a8w
;:Ee{_'G
rz!B`v+
a[(P*[
FggQc]m
mfCRe]
SN1L;2j
Gt,f[G
!This program cannot be run in DOS mode.
`.data
@h$p<p
-C000-Rekmsiscsvew
VB5!6&VB6DE.DLL
euisfdjsxadfds7
Rekmsiscsvew
Rekmsiscsvew
murenosamw
umnewrdcnakw
modReplace
ademfsnsefsds
Kefmunaedsfxecsds
vusedsycxsefn
frmODBCLogon
frmLogin
Rekmsiscsvew
VBA6.DLL
__vbaVarZero
__vbaErase
__vbaI4Var
__vbaStrCat
__vbaHresultCheckObj
__vbaAryDestruct
__vbaAryUnlock
__vbaAryLock
__vbaRedim
__vbaVarMove
Shell32Ctl
__vbaFreeVar
__vbaFreeObj
__vbaFreeStr
__vbaStrVarMove
__vbaStrMove
__vbaStrCopy
__vbaObjSetAddref
KERNEL32.DLL
RtlMoveMemory
GetTickCount
ADVAPI32.DLL
CryptAcquireContextW
CryptDecrypt
CryptDeriveKey
CryptCreateHash
RegCloseKey
__vbaVarTstEq
RegOpenKeyExW
__vbaVarCat
__vbaRefVarAry
__vbaUbound
__vbaR8Str
__vbaVarCopy
__vbaFreeVarList
__vbaVarDup
VirtualAlloc
CloseHandle
WriteFile
__vbaVarVargNofree
__vbaStrVarVal
9~MarkupLabel1
Em>C:\Program Files (x86)\Codejock Software\ActiveX\Xtreme SuitePro ActiveX v15.2.1\Bin\Codejock.Markup.v15.2.1.oca
XtremeMarkup
_D_eDockingPaneFrame1
C:\Program Files (x86)\Codejock Software\ActiveX\Xtreme SuitePro ActiveX v15.2.1\Bin\Codejock.DockingPane.v15.2.1.oca
XtremeDockingPane
;e4CommandBars1
)C:\WINDOWS\SysWow64\CODEJO~1.oca
XtremeCommandBars
lChartControl1
3ShellFolderViewOC1
C:\Program Files (x86)\Codejock Software\ActiveX\Xtreme SuitePro ActiveX v15.2.1\Bin\Codejock.ChartPro.v15.2.1.oca
XtremeChartControl
WindowsMediaPlayer1
+bWMPLibCtl
FlowGraph1
C:\Program Files (x86)\Codejock Software\ActiveX\Xtreme SuitePro ActiveX v15.2.1\Bin\Codejock.FlowGraph.v15.2.1.oca
XtremeFlowGraph
8DockingPane1
PropertyGrid1
C:\Program Files (x86)\Codejock Software\ActiveX\Xtreme SuitePro ActiveX v15.2.1\Bin\Codejock.PropertyGrid.v15.2.1.oca
XtremePropertyGrid
C:\Program Files (x86)\Microsoft Visual Studio\VB98\VB6.OLB
FtxtPWD
txtUID
__vbaCastObj
__vbaObjSet
RtlFillMemory
cmdCancel
txtDatabase
fraStep3
txtServer
cboDSNList
cboDrivers
txtPassword
txtUserName
shell32.dll
Shell32Ctl.ShellFolderViewOC
ShellFolderViewOC
wmp.dll
WMPLibCtl.WindowsMediaPlayer
WindowsMediaPlayer
Codejock.ChartPro.v15.2.1.ocx
XtremeChartControl.ChartControl
ChartControl
0q# a{
ForeColor
BackColor
Caption
Codejock.Markup.v15.2.1.ocx
XtremeMarkup.MarkupLabel
MarkupLabel
Codejock.DockingPane.v15.2.1.ocx
XtremeDockingPane.DockingPane
DockingPane
Codejock.DockingPane.v15.2.1.ocx
XtremeDockingPane.DockingPaneFrame
DockingPaneFrame
Codejock.PropertyGrid.v15.2.1.ocx
XtremePropertyGrid.PropertyGrid
PropertyGrid
Codejock.FlowGraph.v15.2.1.ocx
XtremeFlowGraph.FlowGraph
FlowGraph
Codejock.CommandBars.Unicode.v15.2.1.ocx
XtremeCommandBars.CommandBars
CommandBars
Codejock.CommandBars.Unicode.v15.2.1.ocx
XtremeCommandBars.ImageManager
ImageManager
vusedsycxsefn
frmLogin
txtUserName
faefsefsaef
cmdCancel
txtPassword
frmODBCLogon
cmdCancel
fraStep3
txtUID
txtPWD
txtDatabase
cboDSNList
txtServer
cboDrivers
ademfsnsefsds
waremuinasdsdcsm
ArialD
FlowGraph1
XtremeFlowGraph.FlowGraph
PropertyGrid1
XtremePropertyGrid.PropertyGrid
DockingPaneFrame1
XtremeDockingPane.DockingPaneFrame
MarkupLabel1
XtremeMarkup.MarkupLabel
ChartControl1
XtremeChartControl.ChartControl
ImageManager1
XtremeCommandBars.ImageManager
CommandBars1
XtremeCommandBars.CommandBars
DockingPane1
XtremeDockingPane.DockingPane
WindowsMediaPlayer1
WMPLibCtl.WindowsMediaPlayer
ShellFolderViewOC1
Shell32Ctl.ShellFolderViewOC
J_T_^/
8w0.nOQf
XTl$O#
9{ A+O
,rHjK+
0Toa@o
{pzGMd
#$Cp6A
N~w"@?[
'<DR_
VTu*uVc
G&8;Vg
'bhH}vZ
<[bK5G
FA9"6Qn
$PX]5l
wz5|D1
@lr7~Qg
Xi #A`a
II?6^=
F<rT8v
LGSS#{N
7hRpxghL7ZOEo5xsbD2Hk0c8qjuJELAH2zMwuA72SC2uvpyvr9Ngf2zIOyCi1ohrUNzrDQEKoQdXm8c0sAFb3ZG{kx9c4Ce6Dg{HGw{McgQusyQJGi2J3QFrs4P{{mBs1UoqFsM4LM17HZv5zhhViU3iHl3p7ONY{FvRwNeKkHZun3gxkSCv18BgWIegHjsUvu9zFAd6TIcN8quvn7FALmH4MB8vODxPUonrYRC|jRyHLfzY53{2JgZrIlpsvhWouevQUsWy{XiV3xtwev0|bq|OsCD{oJQT5NXxyOz7xPVUghUQzguDgU0o|Xv4MGWcRLXMW7uS6isN4qTnSm0fvuIlJotFy|eFRdxnq8nVXMPOjeDMlH0Y1s3i3mcfOpdwBhoRnFu4sdTiylyShMI2Ym{flNQuqxsKxrN6kjRywfOCjz|9JKvBJSoX3H5YoETGGi4qZQjPDuWKNCxl6HGtXLPNCZfWyMFlhyJLRLDEgtv3AASb27jsuW3rlPb6Jypi4k1RxeXDXg7UD38y7wvGNuLkJjj4mHn{L2xLhF2AxbquQysTsngvKo6uvm06ObW2vQCAJbvYxkIJfyX8gKtNHvgBV6JDc74PWfkcvOQUthBKscWH4wO0d|XXw{q9tXN0V5CjDnJyn1zzhWJX29Ng4WPvOvuMSxTmr{cTDEy03VspLWXgMrfdnsjUyuT71EjTz7nDgjvimn5vuUdySCumzLd3Mffvo7UHFYU75qOXSusV4zyIu{Kt35ObLoelVEOSuL6cy1F4{zNkzbXj1K0JlVhHGnWYOCFObDtVXYf7xFoKZuN0{5ywjAzMJdWuviQhB5OVJo9fJ7ysjII3uhZYgFt3Vrmg1On1Dev0pjTYIcSxcItvH77TE6yJOjKB|89z|z17{iCivpZ0rs1Ye3PJDtnAVyTRBPAl0MqKvTRnFqRi9yxxBrOPQLOWX8GhAHheveJN{D9k6|fqN|qlP4nbhHjydQMY8WkNgnG33tiwvoYcFWEAs7NeW9BoMUkgqLUk
G=xk#@Y
TTKzRy
&mH_Pm
w7+Jo$
=&sNt"
UU1e-O9
U8gL-[[
kk\vt,Z
i-x9e5
_q>Pt
(gXJj|+k
~5a"0A
'bwaNL
X\lMZhr
*q(j,2'\
$Uze#P
@Gs&lJEwVA
)$*x_UXU
*-Cnd
[!*j':
x(" ZE
P'zl5E<
vlSeF;#
F1};JAWiY
s!BY>I
YCdl-n
.*RwlJ
XHzKO:
`SVW8$
>DPkU-
4v90~-p
YfI3_ZO
hP;42d
0u&VG*
a(-\T#y}(
!T}(o#
zEwhg{cDY
!DMo[`
Sv{!S1t
4Pk;,S
{[3TkvU
T;{m'U
sjWYE{C
QH+F_e
zFm"rV
kDO= 6o
Hx^7&d
e.[(m7
h$&g1
!2u7Da
)Z8e/Fn
%g&^=>
g|1eB$
B7(I4nW
&2O2?&
V5(m\8
IuHzOdM-?
rwo5GM
\S7kFY[
0;/X_^P
-e@-`p
rZHHoWYM
<1Z?*'
Wf$NV|o
s7tnj
zq6qf6
%WaP:&
V)<eA|JLB
YjWZT}
ursu^iZ
}w+`YI
c1A0`L
+[^Y_=$
xXgt0U6
AZ)]s>
@+2_TE
&$tv%L
Yf-7G
7-$x5i;
&T|8~l
zgL3b8}
d|y<14@
=rDnN8
ANw^KP&
f1H-t<KZ]d|
(m)]bo
n7 24u6e
{@p&=f
.?in}#
w2;p)T
CQZ8~H
'){+{<
rzOnPR
"Ve4*o
2EG`gLt
K^qBZ&
KQzvrU
|\p,_
bO[ZAQ
S=^v"N
-}oT,s
/; x$@H
Nz+!_]
w",[$)De
L<-\g79
^|6Z>0r
srNH79
<t=kMfU
?6i7xI
|+T^u'
ylL1Sr
8s_R U
Ztf(cW*j
}8!0@(a
Xm)Q+:
u"KQ$`
n$7/?<
_B<:nv
D$B%c}
(*E'r:'X
pEaQ,<
hK}+z5xH
{LY5S
\Vrs2Z
x}|y|(
mdi|zM
FL?&/R`K
X$d76s58
d5^Mu'kJ9
1gC&xs
X+d+hl
;LMO?a
E<;_XmG`F6
@O/^**~)
8HxUi
!q-lN5
`C<A*,
/(^V|J
^i~aeb
60ajK<-
*C&!KR
fx\6`5
D?.^$M
yzF)?*
P7s(Gks@%
+_'Qya
N%0lX #
z>H[]y
'g-pQ"
AF8i*K
&@w[Pp
E?(Lx[>1
#04A@%
nzXl^|wa
yrb/`j
Uzl(gm-#&0
9B`vaN:
etHPqEf
s~ 8('
h*6.~q
P7V:c6
u;MoiV
CKMw=XK
gKy/V\
:/5!OW
RgxdH:q
Bm<a{}
]%Df(fX4
W0z'2'b
dUgumX@
]Jg?m+
|;J#}K
C}7FS}
bs5zA6
w=*m4=
"j,t2UO.
viPP9h
*ol]G
\k,&N+
oCnvz3
i>f9b"
HXp"u
`htXJf(
,!*1xk`
!i=p*K
Y4F[6j
r:|W}`
\gwEaR^W
.#*xD>
=)N.ctC
!;^,Q9
|+htFD<
edP'&wwja
kGU<77
xGdg:2
,jBMA3
Pc<cZ=
`;~\LR
@g.Wi^
>vtL4T
,.Z,P;
7~]T)T
VAYf7*X
5z$+~J
fRR+'d
Dh84$Y
Mi?bni[
.{F.oT]do
G)"5?.
tK/T1;
^I(#|Dx
MSVBVM60.DLL
KERNEL32.DLL
ADVAPI32.DLL
RegOpenKeyExW
CryptCreateHash
CryptDecrypt
RegCloseKey
CryptAcquireContextW
CryptDeriveKey
VirtualAlloc
RtlMoveMemory
CloseHandle
GetTickCount
WriteFile
RtlFillMemory
_CIcos
_adj_fptan
__vbaVarMove
__vbaVarVargNofree
__vbaFreeVar
__vbaStrVarMove
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaRefVarAry
_CIsin
__vbaErase
__vbaVarZero
__vbaChkstk
EVENT_SINK_AddRef
__vbaVarTstEq
_adj_fpatan
__vbaRedim
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
__vbaUbound
__vbaVarCat
_CIlog
__vbaR8Str
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
_adj_fdivr_m32
_adj_fdiv_r
__vbaI4Var
__vbaAryLock
__vbaVarDup
__vbaVarCopy
_CIatan
__vbaCastObj
__vbaStrMove
_allmul
_CItan
__vbaAryUnlock
_CIexp
__vbaFreeStr
__vbaFreeObj
PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDING
!This program cannot be run in DOS mode.
`.data
@h$p<p
-C000-Rekmsiscsvew
VB5!6&VB6DE.DLL
euisfdjsxadfds7
Rekmsiscsvew
Rekmsiscsvew
murenosamw
umnewrdcnakw
modReplace
ademfsnsefsds
Kefmunaedsfxecsds
vusedsycxsefn
frmODBCLogon
frmLogin
Rekmsiscsvew
VBA6.DLL
__vbaVarZero
__vbaErase
__vbaI4Var
__vbaStrCat
__vbaHresultCheckObj
__vbaAryDestruct
__vbaAryUnlock
__vbaAryLock
__vbaRedim
__vbaVarMove
Shell32Ctl
__vbaFreeVar
__vbaFreeObj
__vbaFreeStr
__vbaStrVarMove
__vbaStrMove
__vbaStrCopy
__vbaObjSetAddref
KERNEL32.DLL
RtlMoveMemory
GetTickCount
ADVAPI32.DLL
CryptAcquireContextW
CryptDecrypt
CryptDeriveKey
CryptCreateHash
RegCloseKey
__vbaVarTstEq
RegOpenKeyExW
__vbaVarCat
__vbaRefVarAry
__vbaUbound
__vbaR8Str
__vbaVarCopy
__vbaFreeVarList
__vbaVarDup
VirtualAlloc
CloseHandle
WriteFile
__vbaVarVargNofree
__vbaStrVarVal
9~MarkupLabel1
Em>C:\Program Files (x86)\Codejock Software\ActiveX\Xtreme SuitePro ActiveX v15.2.1\Bin\Codejock.Markup.v15.2.1.oca
XtremeMarkup
_D_eDockingPaneFrame1
C:\Program Files (x86)\Codejock Software\ActiveX\Xtreme SuitePro ActiveX v15.2.1\Bin\Codejock.DockingPane.v15.2.1.oca
XtremeDockingPane
;e4CommandBars1
)C:\WINDOWS\SysWow64\CODEJO~1.oca
XtremeCommandBars
lChartControl1
3ShellFolderViewOC1
C:\Program Files (x86)\Codejock Software\ActiveX\Xtreme SuitePro ActiveX v15.2.1\Bin\Codejock.ChartPro.v15.2.1.oca
XtremeChartControl
WindowsMediaPlayer1
+bWMPLibCtl
FlowGraph1
C:\Program Files (x86)\Codejock Software\ActiveX\Xtreme SuitePro ActiveX v15.2.1\Bin\Codejock.FlowGraph.v15.2.1.oca
XtremeFlowGraph
8DockingPane1
PropertyGrid1
C:\Program Files (x86)\Codejock Software\ActiveX\Xtreme SuitePro ActiveX v15.2.1\Bin\Codejock.PropertyGrid.v15.2.1.oca
XtremePropertyGrid
C:\Program Files (x86)\Microsoft Visual Studio\VB98\VB6.OLB
FtxtPWD
txtUID
__vbaCastObj
__vbaObjSet
RtlFillMemory
cmdCancel
txtDatabase
fraStep3
txtServer
cboDSNList
cboDrivers
txtPassword
txtUserName
shell32.dll
Shell32Ctl.ShellFolderViewOC
ShellFolderViewOC
wmp.dll
WMPLibCtl.WindowsMediaPlayer
WindowsMediaPlayer
Codejock.ChartPro.v15.2.1.ocx
XtremeChartControl.ChartControl
ChartControl
0q# a{
ForeColor
BackColor
Caption
Codejock.Markup.v15.2.1.ocx
XtremeMarkup.MarkupLabel
MarkupLabel
Codejock.DockingPane.v15.2.1.ocx
XtremeDockingPane.DockingPane
DockingPane
Codejock.DockingPane.v15.2.1.ocx
XtremeDockingPane.DockingPaneFrame
DockingPaneFrame
Codejock.PropertyGrid.v15.2.1.ocx
XtremePropertyGrid.PropertyGrid
PropertyGrid
Codejock.FlowGraph.v15.2.1.ocx
XtremeFlowGraph.FlowGraph
FlowGraph
Codejock.CommandBars.Unicode.v15.2.1.ocx
XtremeCommandBars.CommandBars
CommandBars
Codejock.CommandBars.Unicode.v15.2.1.ocx
XtremeCommandBars.ImageManager
ImageManager
vusedsycxsefn
frmLogin
txtUserName
faefsefsaef
cmdCancel
txtPassword
frmODBCLogon
cmdCancel
fraStep3
txtUID
txtPWD
txtDatabase
cboDSNList
txtServer
cboDrivers
ademfsnsefsds
waremuinasdsdcsm
ArialD
FlowGraph1
XtremeFlowGraph.FlowGraph
PropertyGrid1
XtremePropertyGrid.PropertyGrid
DockingPaneFrame1
XtremeDockingPane.DockingPaneFrame
MarkupLabel1
XtremeMarkup.MarkupLabel
ChartControl1
XtremeChartControl.ChartControl
ImageManager1
XtremeCommandBars.ImageManager
CommandBars1
XtremeCommandBars.CommandBars
DockingPane1
XtremeDockingPane.DockingPane
WindowsMediaPlayer1
WMPLibCtl.WindowsMediaPlayer
ShellFolderViewOC1
Shell32Ctl.ShellFolderViewOC
J_T_^/
8w0.nOQf
XTl$O#
9{ A+O
,rHjK+
0Toa@o
{pzGMd
#$Cp6A
N~w"@?[
'<DR_
VTu*uVc
G&8;Vg
'bhH}vZ
<[bK5G
FA9"6Qn
$PX]5l
wz5|D1
@lr7~Qg
Xi #A`a
II?6^=
F<rT8v
LGSS#{N
{y8BSfn2c8|zYbuF{cMRmmlTi5hIipIYXNKKT4|Co083YsfFcYOfL1Rm7cweyA87uRWE1V5u2jZEld2ppg6dZUhwmuz0lY3wgBC55GzfSL1AGVrWwZu1oZZLNNT6HmtHKgr8XTbMRons8wuYggD6veQCGTzGBOFzsVIDXGmzVxZhxRzfKqcsUMRG1gTD2BUW{jeJlu38NHKwj{BkiuJpdP21w0pXlWbzb9nqb|kwMZeFYtbdDr9dNi20WY4LvtKuAADEvPK7LWBPkTIhzHBbwWuxbZ06AtvTAodbkTA3MO{YN{bzAsKPlQndx6UjC4DOWtSz3Ejqgw|iUA2BAdyg30lnLGkDX26oUFlgj6OhR{ECPni1wMWFKwxPhmOwsnB3FieCSNLlPkSB92iSBc6BYmQIeRAJIwgCD7pk1CBG9TRCQV2pkmwAAJ5hv2iwkB60AVdQ4szSZcIY6rcN5SKowq0YNBnmz|SUVk5yFxDkiizv7ZwYJNljmZsij6z6FoWSRvrFCbxFDNUVGEdzdc1BOwtrsNVEZz0QxGEFr3{k9XlELoCO|bgiqUzmyGX8f31Ejwp5JVXu|QAN9UHmbASXFxEvGsI949xpO{yTqJofk1JMYLtYjlMrylHv7AAiHVd4YDA7ihNRI6YA3be{5xYDoDS5|EYw3jqzZ3gdAbkTG4VB0hZ65w6pnLAuUtliKpFq9AwlMKWwH{r{zzr061yfhxhhee3QiLN7V15bikeFMWd9j5Nq|EIyB|7H{DC1cw7m74yu2eZf|BEUdN7OQbQ|U3MO4ZRP2M2uOGxEMgbXRh0NyVJEYIs15uIe0crPINru6cFRVsls838MHJqqSh8ljr96myyhdfcEtfdpC46s7xT4DAifwxl54LxROeHzDADGFVG3HhjQKgYGHxpvOQ2i5lscl9hG8WMm2Yb8BEc{4gbuWYNbR1gAqVsZbblctiuysUvEr5UoCRxMG3694PI6BEEL9{R0gN9CZRpkuMoG6gOj5OhsXxqeg9AV7d7WElr|
6O;7?y#:
='uA]hV
'8ymO`lTf
SVPSec-
_gB`*QZ
GeaAUE
S>3DQ-G
\e=\Il
l1PCC9
^4bvf<
~%FbpW
mTr6gA
}8]"A^L?+L|
/5wNLM
}_]gAj
%FpBc:
VS}u-Q
$Z28~<
7h72JM
XJs_m!
'+`"Ji$
N.-7~t
c[ZSq|
+P(*gp
Y+V$';w
HZ=.z|
L`e#|5&
En>!?ey
xuE272@
k?K\dqfA
asi>_D
@W;Zu 6
/jYGnQ2
&a&A4(
J;f*
]GhSkm
sT[`wB
Vwmskx
=lfWN^
rC~:=v_"
D2:Bg:>|
\_!5>g
E)EY"3
~.W^"r
J{NoOm
9]1J`Q0n
#s>6f]
~A[K5G
VbE&9y
ZbOnO=
,>UJ?NKhD
Hmz,s[
r$-~u>>
pY8mwA
p[ypP3
a',*I.
6)ar_r
o6j+nH
68Dv)u
:(.y&-
J5Dj94
"wO&=R|+
Tp~ogo
99_y:0
'l3'.[
<>V8xF
GrffpH
qKI};w
fT%vBM
\PeJF<
V4n5S"B
$hP4]A
(N+_^+
mOwDHH;
xz%0zO.M$
;a*Ylp&<
Rn+t)Ll
KqR^j(
X#(z}%3
1goj,
"iT`!#
dfG:k"*hI<
Uu+52$
W1<Rr6
[0x{U5G
DjA,HH
N>;8gr9%/'
f<+W:M2
mxtLdQ
@1QC>s
D:9+LA*]
Zg-cf="
Cr$0 g
ANKZir<
VVBN,n
oYg*p9
_=KS$T25
oYyiuP
=>s?%I
:Y~Qpz
N5VPE E
Ij9/]\D~
yQ|(:F
$pmN>p
>04F%
92vR}2
i4|w[D
>X'w'M
n0Z=>z
n}O>E#0
I"O9n[
-6nP'5Vp
T8RAw,
'/"7MT
*L<uaZ:
\<r<GuQ
q-P_Tk
O]>Bn9
jbKF($
&\!3wG
(Yw[sJ
iu*KEq%&
G%h=j3x
TQXnOz5
82e4B@
pGm=n9
cz!DT@
JbI0o|{
rTFeoyl
>vQ:'My;
0\o3Jc
`UkWUD/H
%K51;7N
9[:aGA
j\{L=Kujw
4hEP m
2)0FIn
S|%{0
>@"T"U
gC4<;A~
NY+\vXB}p>7
J~*vm\
6bhDw8
|<bKig$
vE)A0*
q*sxwK}nF(q
f\)>5m:C]~?
'-A&9R
,]/r9w
pBj>7B
?&O([BZ
$"CX09
`?j]\5
:LLk*R
fwK&qxZ9D
jnu@DS
$W7VE&e
xLK&Fd
P?T2y)
~mL0:J
I/3/l%%
z){rRa
ByzH0]
TX$_yl
iAe3Sd%e
Jv@.Z.f
e*vguez
of$`W?s
4\TG>#}
Kj@z~t
'Zx (:4
,IcKf.
l<"W(R[
I>94/(
8p*GS\~O
}c=vzi
&|^`n=9
)xfn$|az/$|WP
z(hB]$>
9n)xQ!
+wP 0]P
]x6hqa
}2|uvH98
VSIdRpC0`
J2~^o'R
KF^&g<8
3OVyJ(
~je<A/1
-Dvc=
ubmvjK
~EaoC1
:no9&6
4N#Fj1
E!%T%?
[(1`R
Iy2=*x^
*,(jO1
^YOn_K
M&~W%2
LDjxr.>
zeX~5J
xySw$u
&@w[Pp
E?(Lx[>1
#04A@%
nzXl^|wa
yrb/`j
Uzl(gm-#&0
9B`vaN:
etHPqEf
s~ 8('
h*6.~q
P7V:c6
u;MoiV
CKMw=XK
gKy/V\
:/5!OW
RgxdH:q
Bm<a{}
]%Df(fX4
W0z'2'b
dUgumX@
]Jg?m+
|;J#}K
C}7FS}
bs5zA6
w=*m4=
"j,t2UO.
viPP9h
*ol]G
\k,&N+
oCnvz3
i>f9b"
HXp"u
`htXJf(
,!*1xk`
!i=p*K
Y4F[6j
r:|W}`
\gwEaR^W
.#*xD>
=)N.ctC
!;^,Q9
|+htFD<
edP'&wwja
kGU<77
xGdg:2
,jBMA3
Pc<cZ=
`;~\LR
@g.Wi^
>vtL4T
,.Z,P;
7~]T)T
VAYf7*X
5z$+~J
fRR+'d
Dh84$Y
Mi?bni[
.{F.oT]do
G)"5?.
tK/T1;
^I(#|Dx
MSVBVM60.DLL
KERNEL32.DLL
ADVAPI32.DLL
RegOpenKeyExW
CryptCreateHash
CryptDecrypt
RegCloseKey
CryptAcquireContextW
CryptDeriveKey
VirtualAlloc
RtlMoveMemory
CloseHandle
GetTickCount
WriteFile
RtlFillMemory
_CIcos
_adj_fptan
__vbaVarMove
__vbaVarVargNofree
__vbaFreeVar
__vbaStrVarMove
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaRefVarAry
_CIsin
__vbaErase
__vbaVarZero
__vbaChkstk
EVENT_SINK_AddRef
__vbaVarTstEq
_adj_fpatan
__vbaRedim
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
__vbaUbound
__vbaVarCat
_CIlog
__vbaR8Str
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
_adj_fdivr_m32
_adj_fdiv_r
__vbaI4Var
__vbaAryLock
__vbaVarDup
__vbaVarCopy
_CIatan
__vbaCastObj
__vbaStrMove
_allmul
_CItan
__vbaAryUnlock
_CIexp
__vbaFreeStr
__vbaFreeObj
PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDING
&@w[Pp
E?(Lx[>1
#04A@%
nzXl^|wa
yrb/`j
Uzl(gm-#&0
9B`vaN:
etHPqEf
s~ 8('
h*6.~q
P7V:c6
u;MoiV
CKMw=XK
gKy/V\
:/5!OW
RgxdH:q
Bm<a{}
]%Df(fX4
W0z'2'b
dUgumX@
]Jg?m+
|;J#}K
C}7FS}
bs5zA6
w=*m4=
"j,t2UO.
viPP9h
*ol]G
\k,&N+
oCnvz3
i>f9b"
HXp"u
`htXJf(
,!*1xk`
!i=p*K
Y4F[6j
r:|W}`
\gwEaR^W
.#*xD>
=)N.ctC
!;^,Q9
|+htFD<
edP'&wwja
kGU<77
xGdg:2
,jBMA3
Pc<cZ=
`;~\LR
@g.Wi^
>vtL4T
,.Z,P;
7~]T)T
VAYf7*X
5z$+~J
fRR+'d
Dh84$Y
Mi?bni[
.{F.oT]do
G)"5?.
tK/T1;
^I(#|Dx
MSVBVM60.DLL
KERNEL32.DLL
ADVAPI32.DLL
RegOpenKeyExW
CryptCreateHash
CryptDecrypt
RegCloseKey
CryptAcquireContextW
CryptDeriveKey
VirtualAlloc
RtlMoveMemory
CloseHandle
GetTickCount
WriteFile
RtlFillMemory
_CIcos
_adj_fptan
__vbaVarMove
__vbaVarVargNofree
__vbaFreeVar
__vbaStrVarMove
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaRefVarAry
_CIsin
__vbaErase
__vbaVarZero
__vbaChkstk
EVENT_SINK_AddRef
__vbaVarTstEq
_adj_fpatan
__vbaRedim
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
__vbaUbound
__vbaVarCat
_CIlog
__vbaR8Str
_adj_fdiv_m32i
Antivirus Signature
Bkav W32.AIDetect.malware1
Lionic Clean
Elastic malicious (high confidence)
MicroWorld-eScan Trojan.GenericKD.46751499
FireEye Generic.mg.7fb10b8ea68c1e00
CAT-QuickHeal Clean
McAfee RDN/Generic.rp
Cylance Unsafe
VIPRE Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Trojan ( 005807ea1 )
BitDefender Trojan.GenericKD.46751499
K7GW Trojan ( 005807ea1 )
Cybereason malicious.ea68c1
Arcabit Clean
Baidu Clean
Cyren W32/VBKrypt.AXL.gen!Eldorado
Symantec Trojan.Gen.MBT
ESET-NOD32 a variant of Win32/Injector.EPVS
APEX Malicious
Paloalto generic.ml
ClamAV Win.Dropper.Raccoon-9884067-0
Kaspersky Trojan.Win32.Chapak.ezwa
Alibaba Trojan:Win32/Chapak.d9a0d0f4
NANO-Antivirus Clean
ViRobot Clean
Rising Trojan.Injector!1.C6AF (CLASSIC)
Ad-Aware Trojan.GenericKD.46751499
TACHYON Clean
Sophos Mal/Generic-S
Comodo Malware@#1q24cl87q1w3h
F-Secure Clean
DrWeb Trojan.Siggen14.56985
Zillya Clean
TrendMicro TROJ_FRS.0NA103H621
McAfee-GW-Edition BehavesLike.Win32.VirRansom.dc
CMC Clean
Emsisoft Trojan.Injector (A)
Ikarus Trojan.Win32.Injector
Jiangmin Clean
MaxSecure Clean
Avira TR/Dropper.Gen
Antiy-AVL Clean
Kingsoft Win32.Troj.Chapak.ez.(kcloud)
Gridinsoft Trojan.Win32.Downloader.sa
Microsoft Program:Win32/Multiverze
SUPERAntiSpyware Clean
ZoneAlarm Clean
GData Trojan.GenericKD.46751499
Cynet Malicious (score: 100)
AhnLab-V3 Trojan/Win.Fareit.R432645
Acronis Clean
BitDefenderTheta Gen:NN.ZevbaF.34058.!m0@a4MIj6A
ALYac Trojan.GenericKD.46751499
MAX malware (ai score=100)
VBA32 BScope.TrojanPSW.Stelega
Malwarebytes Spyware.RedLineStealer
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall TROJ_FRS.0NA103H621
Tencent Clean
Yandex Trojan.Chapak!t3JZovcpQgg
SentinelOne Static AI - Malicious PE
eGambit Clean
Fortinet W32/EPVS!tr
Webroot W32.Azorult.aptc
AVG Win32:DropperX-gen [Drp]
Avast Win32:DropperX-gen [Drp]
CrowdStrike win/malicious_confidence_90% (W)
Qihoo-360 Win32/TrojanDropper.Generic.HxQBueAA
No IRMA results available.