Static | ZeroBOX

PE Compile Time

2021-08-12 11:47:39

PDB Path

C:\Users\Administrator\Desktop\Client\Temp\oygZsalPsT\src\obj\x86\Debug\PinnedBufferMemoryStre.pdb

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00132370 0x00132400 6.38886662255
.rsrc 0x00136000 0x00036054 0x00036200 6.04955258555
.reloc 0x0016e000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0016b5bc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0016b5bc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0016b5bc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0016b5bc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0016b5bc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0016b5bc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0016b5bc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0016b5bc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0016b5bc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x0016ba34 0x00000084 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0016bac8 0x0000038c LANG_NEUTRAL SUBLANG_NEUTRAL PGP symmetric key encrypted data - Plaintext or unencrypted data
RT_MANIFEST 0x0016be64 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
%rsJ
G sM
G sM
G sM
G sM
%CsJ
d sM
d sM
% sM
;sM
%ddsM
%ddsJ
ddsM
ddsM
%ddsM
%ddsM
v4.0.30319
#Strings
get_ParamArray0
$IR21-1
_Lambda$__R21-1
$IR27-1
_Lambda$__R27-1
ThreadSafeObjectProvider`1
ObjClearToStage1
get_ButStage1
set_ButStage1
get_Label1
set_Label1
get_Button1
set_Button1
$STATIC$Timer2_Cilck$001$io1
openTimer1
m_FormstageAns1
get_FormstageAns1
set_FormstageAns1
get_ListBox1
set_ListBox1
$IR21-2
_Lambda$__R21-2
$IR27-2
_Lambda$__R27-2
user32
get_ButStage2
set_ButStage2
ClearArrRank2
get_Label2
set_Label2
openTimer2
get_ListBox2
set_ListBox2
$IR21-3
_Lambda$__R21-3
$IR27-3
_Lambda$__R27-3
ModStage3
get_ButStage3
set_ButStage3
openTimer3
ModStage4
get_ButStage4
set_ButStage4
<Module>
butColorA
$STATIC$Timer2_Cilck$001$labC
$STATIC$Timer1_Cilck$001$formC
RectangleF
LabNaSizeH
baSizeH
CardSizeH
picMiniSizeH
FormGaMainSizeH
LabTitSizeH
ButExitSizeH
ButStartSizeH
TxtSizeH
POINTAPI
ModWinAPI
ImageURL
timHideIntFPS
timShowIntFPS
picNESW
LabNaSizeW
baSizeW
CardSizeW
picMiniSizeW
FormGaMainSizeW
LabTitSizeW
ButExitSizeW
ButStartSizeW
TxtSizeW
XXXXXX
$STATIC$Timer3_Cilck$001$labX
AddPicX
LabNaLocX
baLocX
CardLocX
CardDistanceLocX
picMiniLocX
CardTmpComLocX
labInfoLocX
IsGetpoLocX
LabTitLocX
ButExitLocX
ButSatrtLocX
TxtLocX
CardTmpPlyLocX
Tim3ToAddX
OpaddX
LabTiX
picCliX
MouCliX
AddPicY
LabNaLocY
baLocY
picMiniLocY
CardComLocY
CardTmpComLocY
labInfoLocY
IsGetpoLocY
LabTitLocY
ButExitLocY
ButSatrtLocY
TxtLocY
CardPlyLocY
CardTmpPlyLocY
Tim1ToAddY
OpaddY
LabTiY
picCliY
MouCliY
_Closure$__
Dispose__Instance__
Create__Instance__
picLoToNa
ProjectData
FromArgb
DialogsLib
mscorlib
ModStage1Sub
ModStage2Sub
ModPublicSub
AddminiPic
IsNumeric
Microsoft.VisualBasic
hdcSrc
Dialog1_Load
FormstageAns1_Load
add_Load
Form_Load
FormGameMain_Load
StartStageObjAdd
optionAdd
labInfoAdd
timHideOpAdd
timShowOpAdd
picArrAdd
butArrAdd
timerShowAdd
get_Red
add_TextChanged
get_Checked
set_Checked
Interlocked
set_Enabled
set_FormattingEnabled
Versioned
GetUsed
get_IsDisposed
CardComused
cardUnused
GetUnused
CardPlyused
m_FormBeingCreated
Synchronized
get_Gold
gameEnd
ansRnd
get_Hand
get_Millisecond
UBound
Game_Round
get_Goldenrod
txtPoswod
comCard
makeUpCard
bmpCard
ComSelectCard
PlySelectCard
plyCard
menagePossword
FlatButtonAppearance
get_FlatAppearance
set_IsSingleInstance
CreateInstance
get_GetInstance
defaultInstance
instance
GetHashCode
get_KeyCode
set_AutoScaleMode
set_AutoSizeMode
AuthenticationMode
ShutdownMode
set_Image
set_BackgroundImage
m_FormMenage
get_FormMenage
set_FormMenage
get_Message
Start_Stage
AddRange
CardNumRange
txt_Change
LabChange
CompareExchange
get_Orange
AddLabBake
comEle
plyEle
IDisposable
Hashtable
set_Visible
ToUnVisible
ToVisible
RuntimeTypeHandle
GetTypeFromHandle
set_ShutdownStyle
set_FormBorderStyle
set_FlatStyle
FontStyle
MsgBoxStyle
set_Name
labName
get_Lime
labTime
DateAndTime
DateTime
set_Multiline
CardImageType
CheckForSyncLockOnValueType
GetType
PinnedBufferMemoryStre
get_Culture
set_Culture
resourceCulture
WindowsFormsApplicationBase
ButtonBase
ApplicationSettingsBase
TextBoxBase
Dispose
get_Chartreuse
get_Chocolate
DebuggerBrowsableState
EditorBrowsableState
get_White
get_AntiqueWhite
Tim1ToWhite
ThreadStaticAttribute
STAThreadAttribute
CompilerGeneratedAttribute
DesignerGeneratedAttribute
GuidAttribute
HelpKeywordAttribute
GeneratedCodeAttribute
DebuggerNonUserCodeAttribute
DebuggableAttribute
DebuggerBrowsableAttribute
EditorBrowsableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
StandardModuleAttribute
HideModuleNameAttribute
DebuggerStepThroughAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
DebuggerHiddenAttribute
AssemblyFileVersionAttribute
MyGroupCollectionAttribute
AssemblyDescriptionAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
get_ArrayAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
AccessedThroughPropertyAttribute
ToByte
get_AliceBlue
get_SkyBlue
m_ThreadStaticValue
WithEventsValue
GetObjectValue
add_MouseLeave
but_be_leave
RndPicMove
picMove
add_MouseMove
picMouseMove
LabTitMove
timButMove
butRemove
PinnedBufferMemoryStre.exe
set_Size
picBoSize
picMiniBoSize
set_AutoSize
set_BorderSize
set_ClientSize
LabNaFontSize
InfoFontSize
LabTitFontSize
ButExitFontSize
ButSatrtFontSize
Randomize
set_Tag
StaticLocalInitFlag
Tim1Delag
Tim2Delag
System.Threading
NewLateBinding
System.Drawing.Imaging
IsNothing
ioOpening
get_ButOpening
set_ButOpening
opening
System.Runtime.Versioning
get_UseCompatibleTextRendering
GetResourceString
CompareString
ToString
Substring
disposing
System.Drawing
VBMath
MusicPath
set_Width
nWidth
get_Length
set_MaxLength
get_Khaki
MouPicCli
ForNextCheckObj
ForLoopInitObj
labBack
get_Black
picCheck
add_Tick
timer_Tick
ButStage1_Click
Button1_Click
ButStage2_Click
ButStage3_Click
Pic_Click
add_Click
remove_Click
ButOpening_Click
FormGameMain_Click
ButMain_Click
OK_Button_Click
ButEnt_Click
add_MouseClick
butArr_MouseClick
txt_MouseClick
MaxClick
Timer1_Cilck
Timer2_Cilck
Timer3_Cilck
$STATIC$timerFormShow$20211C1280A1$Al
get_Teal
ConditionalCompareObjectEqual
ConditionalCompareObjectNotEqual
set_Interval
AddLabel
System.ComponentModel
SetPixel
LateCall
gdi32.dll
backCol
$STATIC$LabTitMove$001$col
$STATIC$ButMove$001$col
get_Control
IButtonControl
ForLoopControl
ContainerControl
ListControl
ObjectFlowControl
System
picCardCom
AddCardCom
set_MainForm
OnCreateMainForm
Exitform
comNum
CardMinNum
bmpNum
ElementNum
CardMaxNum
plyNum
picXSum
butXSum
picYSum
butYSum
picSum
CardSum
ansSum
butSum
resourceMan
ToBoolean
get_Green
get_YellowGreen
StartOpen
set_TextAlign
System.ComponentModel.Design
IsPlyWin
CardMain
m_FormGameMain
get_FormGameMain
set_FormGameMain
bmpMain
get_ButMain
set_ButMain
AppDomain
get_CurrentDomain
set_Icon
Conversion
get_Application
MyApplication
set_Location
Information
System.Configuration
System.Globalization
IncompleteInitialization
Interaction
System.Reflection
ControlCollection
ObjectCollection
set_StartPosition
FormStartPosition
TargetInvocationException
InvalidOperationException
get_InnerException
ArgumentException
get_OK_Button
set_OK_Button
RadioButton
set_AcceptButton
add_MouseDown
picMouseDown
add_KeyDown
txt_KeyDown
add_Shutdown
get_Brown
picNaToLo
AddInfo
CultureInfo
get_Audio
AddLabIsGetpo
labIsGetpo
get_Tomato
add_MouseUp
picMouseUp
Bitmap
picCardComTmp
AddCardComTmp
picCardPlyTmp
AddCardplyTmp
AddBackGr
InitVar
set_ShowInTaskbar
ObjClear
Linear
get_KeyChar
FormBackImageAdr
m_AppObjectProvider
m_UserObjectProvider
m_ComputerObjectProvider
m_MyWebServicesObjectProvider
m_MyFormsObjectProvider
sender
get_ResourceManager
ComponentResourceManager
ToInteger
stage2AddHeadler
addedHandler
MouseEventHandler
ShutdownEventHandler
KeyPressEventHandler
KeyEventHandler
System.CodeDom.Compiler
IContainer
get_User
ConditionalCompareObjectGreater
but_Enter
butEnter
get_Computer
MyComputer
gameOver
but_be_cover
Player
picCardPlyer
AddCardPlyer
labInfor
set_Anchor
set_ForeColor
get_BackColor
set_BackColor
set_UseVisualStyleBackColor
backColor
picBoColor
picMiniBoColor
SetProjectError
set_Cursor
Activator
.cctor
Monitor
picArr
ImageArr
colorArr
AnsArr
butArr
get_TokenSour
System.Diagnostics
AddCards
Microsoft.VisualBasic.Devices
get_WebServices
MyWebServices
Microsoft.VisualBasic.ApplicationServices
System.Runtime.InteropServices
Microsoft.VisualBasic.CompilerServices
System.Runtime.CompilerServices
System.Resources
.My.Resources
.FormstageAns1.resources
1.resources
.FormMenage.resources
.FormGameMain.resources
.Resources.resources
DebuggingModes
set_EnableVisualStyles
AnchorStyles
GetTypes
Strings
get_Settings
AutoSaveSettings
MySettings
MouseEventArgs
KeyPressEventArgs
KeyEventArgs
ReferenceEquals
get_Controls
get_Items
System.Windows.Forms
get_Forms
MyForms
stage1RecallAns
stage1PlayerAns
set_AutoScaleDimensions
Conversions
System.Collections
GetCursorPos
RuntimeHelpers
SystemColors
Cursors
Operators
add_KeyPress
FormGameMain_KeyPress
Address
components
TxtFontPt
Concat
get_PixelFormat
AddObject
AndObject
ModObject
IntDivideObject
addedHandlerLockObject
OrObject
SubtractObject
GetObject
MyProject
AI1Select
AI2Select
LateGet
LateSet
LateIndexSet
set_Height
set_ItemHeight
nHeight
labTit
timTit
op_Explicit
$STATIC$Timer2_Cilck$001$labC$Init
$STATIC$Timer3_Cilck$001$labX$Init
$STATIC$timerFormShow$20211C1280A1$Al$Init
$STATIC$LabTitMove$001$col$Init
$STATIC$ButMove$001$col$Init
$STATIC$FormGameMain_KeyPress$20211C1280F5$dx$Init
StartStageInit
GraphicsUnit
get_SaveMySettingsOnExit
set_SaveMySettingsOnExit
butExit
BitBlt
get_Default
SetCompatibleTextRenderingDefault
set_DialogResult
MsgBoxResult
get_ButEnt
set_ButEnt
Tim1Int
Tim2Int
Tim3Int
Element
HorizontalAlignment
ContentAlignment
InitializeComponent
get_Transparent
labComPoint
comPoint
lpPoint
IsPlyGetPoint
plyGetPoint
labPlyPoint
plyPoint
set_Font
CardHandCount
stage2Start
Stage3Start
stage4Start
gameStart
butStart
Convert
ToShort
nXDest
nYDest
hdcDest
ModConst
SuspendLayout
ResumeLayout
PerformLayout
get_Text
set_Text
set_KeyPreview
get_Now
timerFormShow
get_Yellow
TimeMax
$STATIC$FormGameMain_KeyPress$20211C1280F5$dx
set_TabIndex
PictureBox
set_MinimizeBox
set_MaximizeBox
MsgBox
set_ControlBox
ListBox
TextBox
$STATIC$Timer1_Cilck$001$y
get_DimGray
$STATIC$Timer1_Cilck$001$stay
$STATIC$Timer2_Cilck$001$stay
ContainsKey
get_Assembly
set_Opacity
MySettingsProperty
vxeW[1
vCQ }-
TCQ }(
NxeW['Y
`O1YWe
WrapNonExceptionThrows
Li Auto
Copyright
Li Auto Inc. 2021
Li Auto Inc.
$87e2143a-8cb9-462f-84aa-c78e00bdf97a
1.0.0.0
).NETFramework,Version=v4.0,Profile=Client
FrameworkDisplayName.NET Framework 4 Client Profile
ButStage1
ButStage2
ButStage3
ButStage4
ButMain
ButOpening
Button1
ListBox1
Label1
Label2
ListBox2
OK_Button
ButEnt
MyTemplate
11.0.0.0
3System.Resources.Tools.StronglyTypedResourceBuilder
16.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
16.10.0.0
System.Windows.Forms.Form
Create__Instance__
Dispose__Instance__
My.MyProject.Forms
4System.Web.Services.Protocols.SoapHttpClientProtocol
Create__Instance__
Dispose__Instance__
My.Computer
My.Application
My.User
My.Forms
My.WebServices
My.Settings
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
hSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATx^\
kz\[=;
iNLg}{
4e0hZL
v=xLm&F
|Zv<M)?:
/$V77t
jW"1fu
:1xL{t>+t}f
m=t*&;
i3mu I
)7]x}tM
zmZO(F
a$nEgj
Rn (t8hiY.
d^psYO1Q
qK.$UX)
3hAfcH
PyaW:2
_jNy!
,L!aj
Mt+0%p
SezZvj5
b> | @
2:rU\mb0k
jy=| &*
$j"G)gp!
V)"R8AtFr
WnZ`<RD%;{
0w)>tI
<#l5'L
>@ntP=
'Q=>fC
>">HR3
[E;Y0$
)Ag=YJ
j<#|*EW(
@06a0>
82I(fh
ktGyqg
v8%?L&
C"-5O@
V~fmrE
J@}!8hx
Kg^ZB[4
>Dnh-(
X;[AQ-R!
u\=Qx-Iu
nIQve[
n\`jvd
Q9.jlD
qb^7A@
tg}G:"
iguYQU5
P7uNGi;
}Sbe@T
lr_-|s
v|\r-u:Q
0/E $\
IZ~eLV
`_S!t$
aWI;s?l2G
AzD]P!R
L\"&q~
erPZ'.
]gQce9d/
b|8]Jj
NE>Zjun
%$%h,z
[vNcc<
dh03ec.
f6LKkMCU_F{:
:R5Q_G
"D}$lT
bIdeRyy
9GV,N;
1,G?w
(N_o&_9
X4&(&Q
6%(fNzh
-iU;c
CnbGXx
T;!)q
sqIv*~]'
<tAit,
;(KG"=
cxi"`JAD
*0[+Z3
(U'%<A
w@1k@5
nFqe29
nsx7qi
GV_h6
Upj6;@
i-BN/dD
{)/>CP
go<waL
K'`6ue
wR`{^W
#:}-Z
Mb2+Z$>
cxo"w_Pl<
,>.&Av*
d=]U8E
84H!+
[B`jc}G
fJ.dQZ
:h$U5=5
*^lN}6
n/1>1%1
+k1aS=
Y#jh;
>wGSjg
SZo\z_g
%!R:AD
bwJnvG
2Qo(0)
d/'Ukp
{@X*HU
Zf0Y*;y
jJL[gf
CBH6HQ
O,CHJz
n:H9f
DCN#(.
g*,P-D
2GkbiU`
1( v[j
OY_",%~
%}_e=[`
<n>(UU8C
%.IC*d
u?h:m2%t
WIhTs{
p{.b^:
N*+Rnp
_xmA_<
'~I(Io
(%$R~P
wQ\s#o*.
U>iTqoi
\~|"<HW
A1Byg5
icEzk!R/
E<"!#x
Y;}Uj/
5: jZmyR
``24kb*9
i}=D6(%$S~
/]&g5/
)W:]YN
a7zQ!
vS&1`]
!Pg{%^?
IU{?kR
wzc#$0
syD16V
XZm?.|{
*^^Mz`
&7``ne
T2S7G'
|;OQiK
MoC)/DDZ
}Hl{Rz
tegb&F
W['14B)(m
]WLk3T'
Oi;Jki
<};HL!
_snBd&%i
*TCA31
( EUB!N
1]\Gs!P
@.Gi;H
UYz+!I]G
lo+.:o
kT%%ix
\;m+.1ECz\
vS#NsE
\/3*Z72
JG=S8/
FCGT\G
;<M`nzgz
y_~.h:]
'2Y)L.G
l'Vqp0
(73yeub
37[~q/TM
zQ#f*Sr
6dtX'j
R]gZqj
@d'odA
So)7o@
G} I[E
u-c)7BA
njKkkB
unn,{G6
UK.Nx<E
d><^jw
S]AOHM]
eya7,i
.BtqB^W
?LGjq$
{R-ZxEa,
},xy?`!
4--LV"F
JX(H%0
eA,9T@
%>3;y
Vg'{S
k7$k9b9
!CaL%Q
`?+w=i
-Q2(B\
w0bgl"
m/9Bx\_
W>Hy3x
BE\#-&
8%<&<0
i1 C1F{FTu}3m
U+^iV|Xn
>=cGt=
#-|(@ %
VS9,B.z
aXahbw
2)^$(t
a~T:|~c
toU}L{
\xTPjd
z:5hta
'\X=;'
%scCol
$u82H<
=@CZxX
z$[:&W
;FdwF9/
$IBsZwm
5Ce;4<
h/;G1 R
:TJ5dyN
3`P]&I
C@s*b!G
?!+0e_a"
\naPUO
D;]$x9
T}+F2^
2d}Dyo
I`QYK3
Jsj+}t=#
""0@}mA
@@AJ't=
m/$JQLbKd
50XiSZDJC
..Pm{X
<P26,
U,-\|4
Se9c9/mX
B@!i>9
`\W)7BM
K<SAv<
!ZFr\@
6Qj9=N,&
/gg[p'M
1V#>e*
4H2KiY
e7B;Ol
@sU1 ^5A
S7d6zS
>4uFwi
8Vn`/hPe
M.0\_s
JAV|P|
YW]p=*
seEApJz
~T_^uu
P%#l9\
#B'd![
$cEK=,o
Ze(Ckr
X8p%cC
8Q\,yW
5;.l9_Q
k]'XwY
z?aFgz
Y:d/0K
_z:&dD
[\U%*|
Vp=9r}
fMPIh'
-<|vks
$^Ef0Q
M%@7L
J2>_XLt)
AVW)GDK!
Wg6\X7
DHUT~*
KfxWp\
fi\ZeX
::rCGe
gx"GSx
-[t5V/
%I7I:%
[8r'!I
mM!:jV
y[Ay=>$'
/gQ#w/
t@RS$!/
|!*)A1
>r5C1f
EkoM*Zrq
5RaBOu
!Lr=q!h\
s~*r`
jLkvt\
<"h{hQ
r~X\?=
DMK#f$
9.&or?
?;rJK=K
/}gs87b
cKbC<m
4|SUG(jZ
[BMrm
O.}]4
)q1FR]
4Ej4t-
''>o|V[rx
l$,hJz
En=rVX
=8iq03
{]DW&H!:
`}rX-'}U
X0?/(4
7STdLS
{^wnBy@UY
u^61PD$
IxbO.?
0x3u2X
lD%65{
vYgKi9N+
>{RL,CU
BZ%`Ep
@x5Zo)
?r</'/
;kGXEz`
{`FXs3
<obYfZ
&0VP7!;\
#!Ce`f/
5~dSv#`
(?'0OKe
Gro}nu
\K%p[43
hHO#e5
%]4*kY
t-j?2'T
#N\8?`
<V@Lj!
ipGd4YO
#6}0Q4,
E=ObpZ
x&s,u
AOS~3P+
R#b!mH
1j"j}e
BQ)IYpW
9Sn Y-:_
(ul9,xK
;Q+P;'
n2\~9lZ^
HZ:,*"S8
maZs=w `@I
&'M|a?
X:2.PY
@j-tMx
0j-x/h
,)O7&g
0/t&<q
m$,,b"
S sJ_n
GJ5F96I
nePEEw
|F<<.9
Bs""7K
R;-84m
=Q]@\es
|Yq [=
X$_twQ
GXDVK8f
MR |Q`
vP<~'<Q[
39}'R^
],>OZ_y[
8,N6D3
J",7BSS
/7}8ym
MH;;E4
3wOyuh
q:lA~,
wYC$Gi
-m"6Cp
{"kL1/!
Bc{_<p
#{:GVLY
ImXW<\
,u/=7,
kL(`"B-
^*wl{h
aho<O@c
"W{S+bK
(itFm4Mv
LX-0nUc
?;b,+
{?e?hc
,<#Sx&
FyyBxL
0{Aro@dpIqH\
|SLRs'
LQ$>b6
7ObC"P
=ED5o Q
E:Q~:gb
:)~?'`
@a%YX.
1)F}P$>
f0zyTO
P1QlqiA
Dxa$Q\
/^%RWe
Sb=:i;5
/^e7bK
V.G2We
bzaYdI
zrB>n\
]S[[,>\,
{H<vX:9[
G^?,,6w
or\Ng5X
K~)VoL
NMt?sh
Vr@SnZn
m=h`XS
19XZ`0f!6
fhO=dY
`i9^X-{&
i]wtr>v
SnpurM
WnumZ
|O#dzD
2N)bYh
q6tlye}
3[0tN+
?8d!ktPi
S'j,Zw
}||ZIh
5|)Wn
}#f\uk{5
6vl'J!
];lJ[y
m`ttYVj
Rwn``1
.HUI|V
>.Z\ef
t.Ht[JL
VS7wo$
`PU~3V/
jAy4bu
;uj<d=
!>(@99
O'djQ?
fKGSUpT
0G*s{4
achc#L
eo;JAi
X[\@S0
~MYqSN
\4w_p6
.D(S?=
)b{9xc
z3X.j6
#wgu.]
jzJ5Ye
qNA j>
ln:2T:
u.n\1|
W/^X6H
n1.bUL
~~x)|:
)zgj``
Cn1HOi
-UMyi[
0X%!u:
~#+(Ab
e!@Av'x
uT&yx#
"1b/y*
rqC~9*%
}~1)}WG
Y.L{uI
8{dv{Sl/
65B@1<$Q(
I>vc&&oS@v
`Dt]:UvM
.bKvz(
T*zcUS^
?]xl|t;v
4POCUJ
$5@D0i
:09O0/4
?*w]KI]v
M"~km*
7ekn.r
d:Qi<uO
s[9,+z
iLUD=3MGq
f9[g1h
ih 3!Rk
Q1Fmd&D
n}8#0`
A-SvGWZ$
sXp,PZ~
?2im|^(q
>@D6}b
{"!=y$
~[]mxJ
Gj-mkU
T(#KuMcC
jGM/\m4
7]sk[F
5FkR`
"e20j3
l&|.vJ
/Z6(B:
4\4l-5U3"c
_9K^p)
dqY8?N
W HMS$
._m;Hkex)
,Oe,1H
>}I{3{
qTJYml
s PY[h
Y.d`V+
PZ~&!
"4c@Q/
O$olPgf~r#
~[]H.4Q
'"QqyEe
R=joNn
#C~C B
.!h(=*
L:d(Z3
,"lBzI
c;t94?d#
(UTVpA
[qu(2u"
'KkaH
@"|CdL
whZCuyR
~^fUp)O{
c3-ive
l%A`0D'
'=oTN
'mq3}6
A+w1gWk
^4@Gm-
as\T1)
'hU.e+>y
{/I35Y
T~~+c7
1560`<
nl{5x1
J-D5yB
8-1wvr3
H<<mYf
brv"s
:*Yg`Tb
xyGIx1
*[tRhL
Iy7}v
O2Xy{W
elWLs~e
;VLoxv'
BMrx/0n
/;-jn2
/,{%|5
=MonsE
i0*Aid
,:jqbtIC
'APt,=Q
s7W^-U)
*y55V*
p&zghr
48kM}f
Cfn~\
8/P_p%pY<}<
,QED_3Q
v'T.xr)k
VlS]JT
yv!s++
cc2\a|*%^
o\2!&N
?uQKzV
H@)e9d*
qgP C1
&p^2D.
in~~9]
&`z<"/
N^ZtB@M
!lCoS(
G,0^Dc
f5;n|;1
a&xUq5x
DkA0-THN
JANGM`
_ y}/y
)1?cl1Y6
)hKb"#
Q'7Ct/
WLS*3g
tN<sKAU
kWuf^Rt
UvV|@Y
k5z5m"
XL(pj?
Ub R6:
d1.! 0
./,,ub
c@WZc1
M}w(S}
#B%!+
ks8i&}A
X76Sfa/J
28-"y%
Ag/]r`
?%U%r
-83P6
vFk,\?ct
-gOz6y
3t_szW
K4Z*KPl
]z}vsit
jY^%xH;
@F4[$,tC
L(`>w7
grO!{po"
qlYPQ&
N_YfB%/
V1)-=4
lrrhAY
TsggGi
-Wt7G
$Cf>d-
+LK'~>n
SKw&*y
QJ*$x<&
vt(mYH'ih
yB|: Ol
J?+t-J
B\!fiC
AGs!Vt
Ri4'p?CfA
[JCF;}
NK*R?9,
Vg"=b%6,%B8
9jkAV0
\cn}w~a
xTt\d&
s5-n2d
I}A3@s
n/F>_6
bGD<k|
/;aDFg
T~9ItB
Og4-\wK
O_hNj
t5m$IU
&c}v{d
9K}-<Nm
~3U]f
. V_z^
[VEa5h
_,]isO
u8JrA9
kf7H9)
3xxL{MC}
i;*Nm9(
Q7sv8&
/2[IKf
oqQ>JvQ
:$DE9
pOx*8O
$urTBt
XB;y(&
ZB?iz/
p$|~oz~O
3s7^9'
Tr_Gup
(&%&}5BC
p}YJw0Z
Gq0CYY
uzD;!
Vm'M&
D@q/~|:87
nXbs.oa-
^7\*JZ
qt\.oe
iOC+2>A
Awc8YE
ULD:'Ib_
_R68o<
0D%'DM
8X^MV=
s9#l69
3vC+vh
zvKW&a
eJklm
?G,V2<
y9$[}];
WM]XBa
^Q~}M
m0/$^l
_sJ?29
;IBK|B*g
K/v}7|
)7^ZfYNL
<tk `/>
c2N1L?8t
#xMioe
y#bW|g
N49hFAtm
u$hvag
THvQq<
NdimR,
=5MQYoG
N-\IQ'5
usm;/N}
kK,wV'Q
^+(K{0
z"2kdX
|+E?w$
Jxm#fo$
s*gKkb
"nyHzh
FYe&dg
Nk?jz@[
T*S1"]C
d/zQJP
%['~J`
;>?&6$nx
l.!xD=
3qDuiq
Vw#^|}
(^.f`C
d*k'?`
=-->B'
LHde.I
@%==-4
'ovB^D
u40dS[A`
E6%?.\
/81>e/IE
Sh<V%P
ze-dY40
8MX;_6
v>a/Z\
=$T.|H
{A="z
~jr8BQ
WD4r[k
BAm4*]5
%*OUMg
t-$lD=
e2Uv.z3
+a`K1i
w9-DFtm
|xi9 [$
:P"[wEG
Dmb6g
2VM4H+C
0u5i?2
Y~VhjNJ.
aT~ClB
-_N}i~
f>=~( q
n[xpwR
nwM]\j}$
KYdsj;
na>8Qy
5ty*@Z
(C,d2=
[~#pr2
wk$2q^
l,__T5j
!6!xKq$
!wU$a_H
k~03.%
xh9Bet(
Cltfx
+~"[;}
o~,K.bx
`{A\{r
6"U{1=
kq`OR'paeO
Mo`O`!
f&d*Eg^E&
X.*vE,
1SP8b=
""&H#&&f
]gCi1%(
qgUM]u
l|09|e
5dimD"p
qetj#`
<w+&}V
ftl9u(
m]pq-E
B%=^`T'_
%\syI]
-H#)Q
+)UXPV
'K2{6wN
o01}1/
piuxrg%
SvX*6&O
o.t+F`
*uJ)P
h>8>L0
T{M Sb
E|6Fj),'
=y%=je
mnDYh?3
fJkJl&
K^_7q6
KMWH.F
|*W"S5
*#C6dK
NX/(vf
Y,Ju/B}
s?M5'd<c!
OIAjM7
q)#?Z:\
4FS^9o@
IHu<stZ
eMv=~eD
Kv]5`G
)@>"\yl^m
b!nT(h
qQ*\Z8
BpviH;
JWh'Hy
.'hlkq
^9Oh3Y:
*2AI8?
&:(KGSW02
mARE^(
`g1*k!kt
W9RYykA
1edpiks[
"]y"4U>
9ncy@
w _*TNQ
.>VPiz-
U@sdX0
^ %ALe-QY
rM!*k}
yeImZ|
Q{.7=8
( ~Gz,v
d //$,0
w}X;lv;}
f,,'Z%
2flCfk
M.<wS2 ~Q
2)HG(6
*=g6>]
F#7U=(P
rdby&G
,P]_itx_
zUri d=h
\5X%SL
y,Z^^
r"Sjk?
5_99O
OT_K`>
7B +e7
Rg4-.J
9h!aybR
R00$H@
sO3yOv>
/`gK9~
GLntX-)
A,3SaJ
=*\VSt
I@kAHNH
n?{[Sz*
}O4uf7
a0Po"\@
~&]93B
Nd<N#
'O|~Vq
HLEv $
(sv4x+
|h}2Pk
]LD96}*
P2@*%
^I~]Q9}b<
L25/<K
{(6f_RE$N=
@it;;0
5rU4,9g
`tROND\J
{thH]O
vPfP7W
b%/*O=@
eWLDe-
5-]7L]
SuxB->
'hR ap
gqQ`aCh
9N^T\@
Kg}xk[w
nO'x/2
QcXj#6
y<wb:}
)UW~G@v
cA*xS> ptA
%4#%`l
k{71&%N
Q`;C]3h
Eqk6Vy
gm-]0z
hA6&*'
P3E74,
=rDUB(
P`c@_3
\qVy1EI
H=D!z?
JP/{}C
uLMoB_
xbRrsah
6f`Z?3
4D3);sp
_2Hd`h
`@8Z~mxA
.]4My[
bzb+u]:_
"Aw-{>
5S+v*Zr
!mdzg4z
6G9Y*h
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
tEXtSoftware
Adobe ImageReadyq
IDATx^
g]"]o@9
kv)* -
jZoynzY=
g>WX@v
s5G>TO
+VX8bWa
WQ, Q"
7O@\&]o
5+i0{
&]oeSw
&]/2`Sw
=83Y1@
7O@\&]o
`rx8K]
F1K@ 
8vougM
O@|;
W@<;
cP@( &
#P@( &
#P@( &
#P@( &
rx8[]=K]
dB},=
9x0JV> g
- 0A,C
/W/( w$
#P@( F
w#P@( &
#P@( F
w#P@( &
WQ, Q"
7O@\&]o
:U\@0c
Prd6Xh
+VX8bW
#S@^{-J
#P@( F
Prd5XN
2<npFX
&]oeSw
V\@|;
=\\@|;Y
[9J^_=FN<?
uQ7nX!
OX}@cpE
XT@^{-J
#P@( &
;K&>f{
A@^k^-
7O@\&]o
WAjV?*
sW?*T
&]oeSw
<K@js<
6e^XY9f
QX@<;
#P@( &
P@( F`
^@\&]/20
*HP9|h
g]"]/2`Sw
4>4+Y1@
wjnr~/Z
._., {n
#S@Fvo
#P@( &
69( %C
#P@( &
69( %C
#P@( &
69( %C
;K&>f{
D_}%Q,
C@fG=d~
7O@\&]o
P{%G|n
Ew.]BW
g]BWsL
U(9|\5
HrMyt]
#G(}b(9
|Y4jOM
'G(}b(9
\\@*3$
'G(}b(9
X0Z\Tg
V> g75
M5Zak4
!G(}b(9( 6
!G(}b(9( 6
!G(}b(9( 6
!G(}b(9( 6
!G(}b(9( 6
!G(}b(9( 6
!G(}b(9r
d]4X6G
\&]/2d
U(9|\=
dB},=
+l}zpq
m0=sFIk
LX<5hS
C@<;:
gI)P@( &
#P@( &
P@( &`
#P@( &
#P@( &
D_}%Q<
~\.8f{
*o@?}:
WAjV?*
?5hSr
:Z@t7b
7O@\&]/20
1mlH4jZ
IzT/ izT- (
8lY9P=
w=~a~t
~7e03f
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aBj
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~wwwwwwwwwwwwwwwwwwwwwwwwwwwxyyyzz{|||~~|~~}
}~~|}}
{||{||z{{yzzyyyyyywxxwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwqqqqqqwwqwwqwwqwwwwwwxxwxxyyyzu{}~~
}~~zu{zu{ysywqwqwwqwwqwwpwwqwwqwwqwwqwwqwwqwwqkqqqqqqqqqqqqqqqqjqqqrrqrrsssvwwr||e
wyywyytuuqqjqqwqqqqqqpqqqqqqqqqqqqqqqqqqqqdkkdkkdkkdkkjqkjqkjqkkrlkrlmmmpqqswqu
uyyuyyUUUjlkjkjjkkjkkjekjqkjqkjkkjkkekkekkdkkdkkdkkdkkjqkjqkjqkkrlkrlmmmpqqswqu
uyyuyyUUUjlkjkjjkkjkkjekjqkjqkjkkjkkekkekkdked^dd^dd^dd^ed^ed^edeedeefffijjmpprwwrwwy{
sxxsxxfnn_ee^ddddddddde^dekd^ke^ke^ke^^_k^^X^^^^^^^^^^^^^^^^^^X^^X^^X___abbeggkookooqxxx
qwwqwwgkk`aa^^^^^^^^^^^^X^^X^XX^^X^^^^^_X^XXXXXXXXXXXXXXXXXRXXRXXRXXRXYYZ[[]__beebeehnnowwv
nvvnvvdbhZU[XRXXXXXXXXXXXXXXXXXXXXXXXXX_XYRSLRRLRRLRRLRRRRRRUUURRRRRRRRRSSSUUURZZRZZWaa_jjguuw
ksskss`ddVWWRRRRRRRRRRRRXRRXRRXRRXRRRRRRXYRSLRRLRRLRRLRRRRRRUUURRRRRRRRRSSSUUURZZRZZWaa_jjguuw
ksskss`ddVWWRRRRRRRRRRRRXRRXRRXRRXRRRRRRXYLSLLLLLLLLLLLLMLLRLLRLLRLLRLLLLLLMMMOPPOPPRTTX\\`gglwx|
gppgpp[e`PWRLRLLLLLLLLLLLLMLLLLLLLLLLLLLLLLMLLLLLLLLLLLLMLLMLLLLLLLLLLLLLLLMMMNOONOOPRRTWW[``fnou
gqqgqq\bbQSRLLLLLLLLLLLLLLMLLLLLLLLLLLLLLL
$++0<<CUUCUUVppe
EXX3@@3@@$++
!(()334AACUUCUUTmmg
FZZ4AA4AA%--
$$'000<<:JJEYYEYYTlld
J``7FF7FF'00
$$'000<<:JJEYYEYYTlld
J``7FF7FF'00
#**2hq=
Qhh<MM<MM)33
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;<==@BBFJJFJJNTTI
drrdrrT\\FJJ<==;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6;;6;;6;;;;;;;;;;;;;;;;;;;;<<<?@@DGGDGGJOOR[[Zeeanne
essessT]]FJJ===;;;;;;;;;;;;;;;;;6;;6;;6;;50560660600600606666666066066067179::<??<??AEEHNNNVVS]]XccXcc]jkdssm
_mm_mmOXXBFF8996666666666666666666666606600560660600600606666666066066067179::<??<??AEEHNNNVVS]]XccXcc]jkdssm
_mm_mmOXXBFF8996666666666666666666666606600++0++0++0++0+++++0+00++0++10+-1,.2-/61/612::7??;EA?JFCPKCPKIXTQb^[ooh{|h{|n
SkkSkkK``C
XlkVih^ss^ssh
UmlUmlGPO<@?2.3++0++0++0++0
11+11+0000000++,++,++,++++++++&+&&++&+++&+,&+-',,(-,(--))/,,2/454899=99=@CGJQUU``_mm_mmc~
LaaCUUCUU:II4AAHQMGPLQZZQZZ\iigyyb
eyy`rr`rr[kk]jnL
O\`CLPCLP8B>.61--)++&++&++&++&&'&&'+&'+&++&++!&&"&'&&&&&&&&&&&&&&&&&!&&!!&!!&&"&&'&&'&&'&&&&&'''))).00.007==CMMK]]UkkUkkH
ARR6CC6CC*44$++55:56:AKKAKKN\\[mm]
[rrRfcHZVHZVAQMBQMFQM@II9??9??115,).
&&&&&&&&&&&&&'&&'&&'&&!&&!&!
""!""!"
%&!+)-+)-18<?JMK^^J
7EE*44*44%%
"#($&+18;18;?KNR_bV
NcbCSP7D@7D@-83.98/95/40,/+,/+$&&
""!""!"
%&!+)-+)-18<?JMK^^J
7EE*44*44%%
"#($&+18;18;?KNR_bV
NcbCSP7D@7D@-83.98/95/40,/+,/+$&&
#%.)%.)5>:CPMK
1<<#**#**
/61/61?JFJ_[Q
IUU;AE,.1,.1#!%"
"!'-,'-,3=<@\^@
Idg@QJ*33
*00*006EDEYXK
DRR4==&**&**
#%%#%%-33<
@OO@OO8FI.88"((
$*&$*&2=9@OLD
7HH)55####
**-bl,78+6=+6='06!((
#&.28>A>
:EE/66$''
!%&/00t
0;;0;;*33"))
!%&/00t
0;;0;;*33"))
######
~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~wwwwwwwwwwwwxyy{|||~~}~~
{||z{{yyywxxwwwwwwwwwwwwwwwwwwqqqqqqqqqqrrsssr||e
wyytuuqqwqqqqqqqqqqqqqqqdkkdkkjqkkrlmmmswqu
uyyUUUjkjjkkjqkjkkekkekkd^dd^dd^edeefffmpprww[
sxxfnn^ddddddeke^ke^^e^^RRLRRLRRRRRRRRRUUURZZ_jjw
kss`ddRRRRRRXRRXRRRRRRRRLLLLLLLLRLLRLLLMMMOPPX\\lwx|
gpp[e`LRLLLLLLMLLLLLLLLL
0<<CUUe
3@@$++
!((4AACUUg
4AA%--
'00:JJEYYd
7FF'00
;;;;;;;;;;;;;;;@BBFJJI
drrT\\<==;;;;;;;;;;;;;;;0660606666066069::<??HNNS]]Xccdssv
_mmOXX8996666666666606600++0+++++0++10+.2-/617???JFCPKQb^h{|n
SkkXlk^ssh
UmlGPO2.3++0++011+000000"&'&&&&&&&&!!&!"&&'&&&&&))).00CMMUkkH
ARR6CC55:AKKN\\]
[rrHZVAQMFQM9??115
&&&&&&&'&&!&&!&"
%&!+)-?JMJ
7EE*44"#(18;?KNV
Ncb7D@-83/95,/+$&&
#%.)CPM>
1<<#**
/61?JFQ
IUU,.1#!%# %
0;;"))
0;;"))
~~~~~~~
~~~~~~~~~qqqqqqssse
wyyqqwqqqqqqRRLRRRRRRRZZ_
kssRRRXRRRRRLLLLLMLLLNOOu
gqqLLLLLLLLL
;;;;;;;;;FJJ>
drr<==;;;;;;"&'&&&!&!'&&.00UkkL
6CCAKK[mm>
HZV9??
&'&&!&
#**/61J_[>
&/00;;
C:\Users\Administrator\Desktop\Client\Temp\oygZsalPsT\src\obj\x86\Debug\PinnedBufferMemoryStre.pdb
_CorExeMain
mscoree.dll
Na_UJy8
2RJ9Bz
BUf_U^
N$a@?4
uSi3~
iVn?sw
wChXR@*
!aQ9?b
f2BUC@
55uZn%!
oCzJG
~.j^Y}
:,hKH`
P`km-5?
CMp`9vD
X*w ,V#
FBR .@
/>|JUy
-ii$q
pWl5Hj
<U;Psr
>/<C|qo
(cD1#
<%%} pb
GQQ`GZ
G<jb"H
Z[QJKQ
w*LbXo
&]H\a/
RSHp:
<Jc`_B3
;;;t8[
EUI:v8
mjBMN6
d4I `2
nWbNmpfUE
jK_4uF
^~=apN"
r2JzZd
JK;$dq
u;r<eO
)+3jF1
5k;@z)N:p
o@l*El)#
>E8$hY
04XUEX
2q"Y={&(
7}+v-B
tHTb[R~^\
&6{=Hy
MxK9j]
Ol?z"u'
q[YFJKKp}m
.9$ef&
0mD=!f}>
Z][Kp[-
>r8Cy
LRt_l
D8|1hp
Eww${I
a=c^y9a
P$}qOF
:n"E#F
wG-T]C
(XPDQy
s>-eZ$`p$n`|
<p@\(m;
eCKvv
A/Y"ew
1b8|N'
H*V}GvQ
i!@dg#u
~7J0jr
0skB#(
12d]SY<vJe
$YK%>g6
m#jc#2
wou ~@
N<eexwW
<OLO'#
=/7d!w
kf&jy9.]$a,m
Z:vDNM
3Hr8PKJ
KIDATQ
b{1iWL y
NSC^<7
q:Y1z,
Y_s'&^>|
_(?i8{}
p8*TU-
DNMAJM
JjjLt
~IIL<~
0}KQ$|>
^/df 23
1o")yN,S
}1jo/Y/
>PiZ
**9QQI
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
.Resources
TokenSour
546F6B656E536F7572
68543157564138
ButStage1
ButStage2
ButStage3
Antivirus Signature
Bkav Clean
Lionic Trojan.MSIL.Taskun.4!c
Elastic malicious (high confidence)
MicroWorld-eScan Trojan.GenericKDZ.76986
FireEye Generic.mg.801affd34ae1974f
CAT-QuickHeal Clean
McAfee AgentTesla-FCTY!801AFFD34AE1
Cylance Unsafe
VIPRE Clean
Sangfor Trojan.MSIL.Taskun.gen
K7AntiVirus Trojan ( 00580d4e1 )
BitDefender Trojan.GenericKDZ.76986
K7GW Trojan ( 00580d4e1 )
Cybereason Clean
Baidu Clean
Cyren W32/MSIL_Kryptik.FEJ.gen!Eldorado
Symantec Trojan.Gen.MBT
ESET-NOD32 a variant of MSIL/Kryptik.ACJW
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Kaspersky HEUR:Trojan.MSIL.Taskun.gen
Alibaba Trojan:Win32/Kryptik.ali2000016
NANO-Antivirus Clean
ViRobot Clean
Tencent Msil.Trojan.Taskun.Dvze
Ad-Aware Trojan.GenericKDZ.76986
Sophos Mal/Generic-R + Troj/Krypt-AX
Comodo Clean
F-Secure Clean
DrWeb Trojan.PackedNET.996
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition AgentTesla-FCTY!801AFFD34AE1
CMC Clean
Emsisoft Trojan.Crypt (A)
Ikarus Trojan.MSIL.AgentTesla
GData Trojan.GenericKDZ.76986
Jiangmin Trojan.MSIL.agkuy
Webroot Clean
Avira TR/AD.Swotter.dmrdn
MAX malware (ai score=100)
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/Sabsik.FL.B!ml
Cynet Malicious (score: 100)
AhnLab-V3 Trojan/Win.PWSX-gen.C4588846
Acronis Clean
BitDefenderTheta Gen:NN.ZemsilF.34110.An0@aCeSg8n
ALYac Trojan.GenericKDZ.76986
TACHYON Clean
VBA32 Clean
Malwarebytes Spyware.TelegramBot
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Trojan.Kryptik/MSIL!1.D8E5 (CLASSIC)
Yandex Clean
SentinelOne Clean
MaxSecure Trojan.Malware.300983.susgen
Fortinet MSIL/GenKryptik.FIQL!tr
AVG Win32:PWSX-gen [Trj]
Avast Win32:PWSX-gen [Trj]
CrowdStrike win/malicious_confidence_100% (W)
No IRMA results available.