Static | ZeroBOX

PE Compile Time

2021-08-20 10:43:36

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0010df0c 0x0010e000 7.26698922801
.rsrc 0x00110000 0x00006ec0 0x00007000 5.48759700304
.reloc 0x00118000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x001126d8 0x00004228 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_ICON 0x001126d8 0x00004228 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_GROUP_ICON 0x00116910 0x00000022 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x00116944 0x0000037c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x00116cd0 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
; sZ
% sZ
; sZ
% sZ
7 sZ
T"sZ
T"sZ
MGsZ
MGsZ
}7sZ
eHsW
X]sZ
X]sZ
X]sZ
v4.0.30319
#Strings
_Closure$__R47-0
get_c10
get_d10
get_h10
get_Label10
set_Label10
get_s10
get_c11
get_d11
get_h11
get_s11
get_L1
set_L1
cardPositionX1
cardPositionY1
IEnumerable`1
ThreadSafeObjectProvider`1
get_c1
get_d1
get_h1
get_lbl1
set_lbl1
get_Label1
set_Label1
get_Panel1
set_Panel1
get_Button1
set_Button1
Number1
get_lblSelectedCardBorder1
set_lblSelectedCardBorder1
get_Timer1
set_Timer1
get_s1
get_PictureBox1
set_PictureBox1
get_c12
get_d12
get_h12
get_s12
ToInt32
get_L2
set_L2
_Lambda$__R2
cardPositionX2
cardPositionY2
$VB$NonLocal_2
get_c2
get_d2
get_h2
get_lbl2
set_lbl2
get_Label2
set_Label2
get_Panel2
set_Panel2
Number2
get_lblSelectedCardBorder2
set_lblSelectedCardBorder2
get_s2
get_c13
get_d13
get_h13
get_Label13
set_Label13
get_s13
get_L3
set_L3
get_c3
get_d3
get_h3
get_lbl3
set_lbl3
get_Label3
set_Label3
get_Panel3
set_Panel3
get_s3
get_Label14
set_Label14
get_L4
set_L4
get_c4
get_d4
get_h4
get_lbl4
set_lbl4
get_Label4
set_Label4
get_Panel4
set_Panel4
get_s4
get_Label15
set_Label15
get_L5
set_L5
get_c5
get_d5
get_h5
get_lbl5
set_lbl5
get_Label5
set_Label5
get_Panel5
set_Panel5
get_s5
get_Label16
set_Label16
get_L6
set_L6
get_c6
get_d6
get_h6
get_lbl6
set_lbl6
get_Label6
set_Label6
get_Panel6
set_Panel6
get_s6
get_c7
get_d7
get_h7
get_Label7
set_Label7
get_Panel7
set_Panel7
get_s7
get_c8
get_d8
get_h8
get_Label8
set_Label8
get_s8
get_Label19
set_Label19
get_c9
get_d9
get_h9
get_Label9
set_Label9
get_s9
<Module>
GetDifficultyID
difficultyID
ParamF
W__________W
X__________X
valueX
get_NumericUpDownX
set_NumericUpDownX
oldNumberOfCardsX
numberOfCardsX
numberOfObjectsX
valueY
get_NumericUpDownY
set_NumericUpDownY
oldNumberOfCardsY
numberOfCardsY
numberOfObjectsY
Dispose__Instance__
Create__Instance__
get_WorkingArea
get_CspProviderFla
ProjectData
FromArgb
mscorlib
System.Collections.Generic
Microsoft.VisualBasic
add_Load
frmGame_Load
frmGameSelect_Load
frmMainMenu_Load
get_Red
NumericUpDownX_ValueChanged
NumericUpDownY_ValueChanged
add_ValueChanged
remove_ValueChanged
add_SelectedIndexChanged
remove_SelectedIndexChanged
lstDifficulty_SelectedIndexChanged
IsGameFinished
IsRevealed
SetRevealed
set_Enabled
set_FormattingEnabled
get_backred
get_IsDisposed
m_FormBeingCreated
Synchronized
spaceAround
CompareMethod
HideCard
RevealCard
get_PictureBoxCard
set_PictureBoxCard
InitializeCardBoard
ClearCardBoard
SaveLeaderboard
InitializeLeaderboard
Replace
set_IsSingleInstance
CreateInstance
get_GetInstance
defaultInstance
instance
GetHashCode
set_AutoScaleMode
set_ImeMode
set_SizeMode
PictureBoxSizeMode
AuthenticationMode
ShutdownMode
get_Image
set_Image
get_Message
AddRange
Enumerable
IDisposable
Hashtable
set_Visible
Double
RuntimeTypeHandle
GetTypeFromHandle
Rectangle
Single
get_panEasyTitle
set_panEasyTitle
DockStyle
set_ShutdownStyle
set_BorderStyle
set_FormBorderStyle
FontStyle
MsgBoxStyle
set_Name
get_exitgame
get_newgame
RefreshTime
get_lblTime
set_lblTime
SetTime
GetPlayTime
CheckForSyncLockOnValueType
GetType
System.Core
get_Culture
set_Culture
resourceCulture
WindowsFormsApplicationBase
ButtonBase
UpDownBase
ApplicationSettingsBase
convertToUppercase
Dispose
StrReverse
DebuggerBrowsableState
EditorBrowsableState
get_White
ThreadStaticAttribute
STAThreadAttribute
CompilerGeneratedAttribute
DesignerGeneratedAttribute
GuidAttribute
HelpKeywordAttribute
GeneratedCodeAttribute
DebuggerNonUserCodeAttribute
DebuggableAttribute
DebuggerBrowsableAttribute
EditorBrowsableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
StandardModuleAttribute
HideModuleNameAttribute
DefaultSettingValueAttribute
UserScopedSettingAttribute
DebuggerStepThroughAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
DebuggerHiddenAttribute
AssemblyFileVersionAttribute
MyGroupCollectionAttribute
AssemblyDescriptionAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
AccessedThroughPropertyAttribute
ToByte
get_LightBlue
get_Value
set_Value
m_ThreadStaticValue
GetCardValue
booleanValue
WithEventsValue
GetObjectValue
SetInputValue
get_backblue
add_MouseLeave
remove_MouseLeave
imgHelp_MouseLeave
imgStats_MouseLeave
imgExit_MouseLeave
imgPlay_MouseLeave
add_MouseMove
remove_MouseMove
imgHelp_MouseMove
imgStats_MouseMove
imgExit_MouseMove
imgPlay_MouseMove
Remove
XmlSyntaxExcepti.exe
set_Size
set_AutoSize
set_ClientSize
ISupportInitialize
Randomize
System.Threading
set_Padding
NewLateBinding
System.Runtime.Versioning
get_UseCompatibleTextRendering
GetResourceString
CompareString
ToString
GetString
Substring
disposing
System.Drawing
VBMath
get_Width
set_Width
cardWidth
objectWidth
get_Length
XmlSyntaxExcepti
ForNextCheckObj
ForLoopInitObj
get_cmdBack
set_cmdBack
get_back
get_Black
Timer1_Tick
add_Tick
remove_Tick
Button1_Click
add_Click
remove_Click
cmdBack_Click
imgHelp_Click
imgStats_Click
cmdReset_Click
imgExit_Click
cmdStart_Click
imgPlay_Click
PictureBoxCard_MouseClick
set_Dock
ToDecimal
get_LightCoral
ConditionalCompareObjectEqual
set_Interval
System.ComponentModel
get_Control
IButtonControl
ForLoopControl
ContainerControl
ListControl
ObjectFlowControl
get_Item
set_Item
System
get_panBottom
set_panBottom
set_MainForm
OnCreateMainForm
set_Minimum
set_Maximum
resourceMan
ToBoolean
get_Screen
spaceBetween
set_TextAlign
System.ComponentModel.Design
set_Margin
set_Icon
Conversion
get_Application
MyApplication
get_Location
set_Location
System.Configuration
System.Globalization
Interaction
System.Reflection
ControlCollection
ObjectCollection
setBorderPosition
set_StartPosition
FormStartPosition
position
TargetInvocationException
InvalidOperationException
get_InnerException
ArgumentException
set_CancelButton
set_AcceptButton
firtRun
IsFirstRun
SetFirstRun
NumericUpDown
add_Shutdown
CultureInfo
Pexeso
get_pexeso
Bitmap
get_imgHelp
set_imgHelp
m_frmHelp
get_frmHelp
set_frmHelp
get_help
set_Top
set_TabStop
EndApp
get_ParamXGroup
System.Linq
Linear
lblNumber
get_lblEasyNumber
set_lblEasyNumber
m_AppObjectProvider
m_UserObjectProvider
m_ComputerObjectProvider
m_MyWebServicesObjectProvider
m_MyFormsObjectProvider
sender
PrepareLblSelectedCardBorder
border
get_ResourceManager
ComponentResourceManager
ToInteger
addedHandler
CardHandler
MouseEventHandler
ShutdownEventHandler
System.CodeDom.Compiler
get_lblTimer
set_lblTimer
ClearTimer
IContainer
get_User
ConditionalCompareObjectGreater
get_Computer
MyComputer
set_Anchor
set_ForeColor
set_BackColor
set_UseVisualStyleBackColor
SetProjectError
Activator
.cctor
Monitor
System.Diagnostics
gameplayTimeSeconds
zeroForSeconds
numberOfSelectedCards
spaceAroundCards
ShuffleCards
RecalculateNumberOfCards
get_lblTotalNumberOfCards
set_lblTotalNumberOfCards
SetNumberOfCards
HideAllCards
spaceBetweenCards
HandleLeaderboards
Microsoft.VisualBasic.Devices
get_WebServices
MyWebServices
Microsoft.VisualBasic.ApplicationServices
System.Runtime.InteropServices
Microsoft.VisualBasic.CompilerServices
System.Runtime.CompilerServices
System.Resources
Pexeso.My.Resources
Pexeso.frmHelp.resources
Pexeso.Resources.resources
Pexeso.frmStats.resources
Pexeso.frmGameSelect.resources
Pexeso.frmMainMenu.resources
Pexeso.frmGameplay.resources
DebuggingModes
set_EnableVisualStyles
AnchorStyles
RedrawCardPictures
ClassPictures
gameplayTimeMinutes
zeroForMinutes
Strings
get_Settings
AutoSaveSettings
MySettings
MouseEventArgs
ReferenceEquals
get_Controls
get_Items
System.Windows.Forms
get_Forms
MyForms
set_AutoScaleDimensions
Conversions
System.Collections
HandleOddNumbers
RuntimeHelpers
SystemColors
Operators
cheats
get_imgStats
set_imgStats
m_frmStats
get_frmStats
set_frmStats
get_stats
components
Concat
AddObject
AndObject
DivideObject
ConcatenateObject
addedHandlerLockObject
SubtractObject
GetObject
MultiplyObject
MyProject
m_frmGameSelect
get_frmGameSelect
set_frmGameSelect
LateGet
LateSet
get_cmdReset
set_cmdReset
set_Left
get_Height
set_Height
cardHeight
set_ItemHeight
objectHeight
EndInit
BeginInit
GraphicsUnit
get_imgExit
set_imgExit
get_SaveMySettingsOnExit
set_SaveMySettingsOnExit
get_Default
SetCompatibleTextRenderingDefault
set_DialogResult
MsgBoxResult
HorizontalAlignment
ContentAlignment
InitializeComponent
get_Transparent
set_Font
BringToFront
get_cmdStart
set_cmdStart
Convert
get_lblLast
set_lblLast
get_lblFirst
set_lblFirst
SuspendLayout
set_BackgroundImageLayout
ResumeLayout
PerformLayout
get_Text
set_Text
m_frmMainMenu
get_frmMainMenu
set_frmMainMenu
ResizeWindow
CenterWindow
window
set_TabIndex
get_SelectedIndex
set_SelectedIndex
PictureBox
set_MaximizeBox
MsgBox
ListBox
InputBox
Pexeso.My
get_imgPlay
set_imgPlay
m_frmGameplay
get_frmGameplay
set_frmGameplay
get_ParamXArray
cardArray
ContainsKey
get_Assembly
set_ReadOnly
Multiply
get_panEasy
set_panEasy
GetDifficulty
get_lstDifficulty
set_lstDifficulty
difficulty
MySettingsProperty
WrapNonExceptionThrows
Sous Chef
Monk Home Funding Services
Copyright
Monk Home
$c840a6a5-6310-468b-8ccc-894fe4d107a6
1.8.1.0
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
PictureBoxCard
lstDifficulty
cmdStart
cmdBack
NumericUpDownX
Label1
NumericUpDownY
Label2
Label3
Label4
Label5
Label6
lblTotalNumberOfCards
Label7
Label8
Label9
lblFirst
lblLast
panEasyTitle
Panel5
panBottom
Label14
Panel6
Panel1
Panel2
Panel3
imgPlay
imgHelp
imgStats
imgExit
PictureBox1
lblSelectedCardBorder1
lblSelectedCardBorder2
Button1
lblTimer
lblTime
Timer1
panEasy
lblEasyNumber
Label10
Panel4
Label13
Label15
Label16
Panel7
Label19
cmdReset
MyTemplate
11.0.0.0
3System.Resources.Tools.StronglyTypedResourceBuilder
16.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
16.10.0.0
System.Windows.Forms.Form
Create__Instance__
Dispose__Instance__
My.MyProject.Forms
4System.Web.Services.Protocols.SoapHttpClientProtocol
Create__Instance__
Dispose__Instance__
My.Computer
My.Application
My.User
My.Forms
My.WebServices
PPlayer1;Player2;Player3;Player4;Player5;Player6;Player7;Player8;Player9;Player10
;00:15;00:20;00:25;00:30;00:35;00:40;00:45;00:50;00:55;01:00
;01:10;01:15;01:20;01:25;01:30;01:35;01:40;01:45;01:50;01:55
;02:00;02:10;02:20;02:30;02:40;02:50;03:00;04:10;04:20;04:30
My.Settings
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aBj
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
-++:311
*58x%R]T
#R]T+58x
(;@0)EMx
#R]R%@G
$O[R"O[R
'EMx(:?0(;?
+**b#Yg|/15$!Xe
+13$$Yg|+**b
201(Xw~
[ZZZ988
`__^IHG
?<<2LOJ
aqh$HQ
.12*&\j
+/2&!HQ
#KVP+/1
!P[`MMM
))*&+IP
.//^'59D645
'59D../^
%DLZKFC
,+,L$br
_or+/3$!S`
+.3$ _or
&9@>RMP
+,,~#Zh
+,.|MFG
-12l(-/P!_p
',/P+13l312
,,,&%OX
-01rjhh
-,,<"Ubr
$Uar.+,<
)9>2,@F|
*@F|^ov
^mv)AH
"R]|*BG
+13,'MV
\mx,.1& `o
.,,` P[f
!P[f$Yf
0/.Tdu
,./|du~
#PZ`857
dt~$[i
!Zjt;:3
/,-D2--
#hy|$Wed
,9?f#P[
311,.,,D,7<f'CL>
-00Z..0
+6;.%MW
067<*)+2
-*,2/67<
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aBj
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
-++:311
*58x%R]T
#R]T+58x
(;@0)EMx
#R]R%@G
$O[R"O[R
'EMx(:?0(;?
+**b#Yg|/15$!Xe
+13$$Yg|+**b
201(Xw~
[ZZZ988
`__^IHG
?<<2LOJ
aqh$HQ
.12*&\j
+/2&!HQ
#KVP+/1
!P[`MMM
))*&+IP
.//^'59D645
'59D../^
%DLZKFC
,+,L$br
_or+/3$!S`
+.3$ _or
&9@>RMP
+,,~#Zh
+,.|MFG
-12l(-/P!_p
',/P+13l312
,,,&%OX
-01rjhh
-,,<"Ubr
$Uar.+,<
)9>2,@F|
*@F|^ov
^mv)AH
"R]|*BG
+13,'MV
\mx,.1& `o
.,,` P[f
!P[f$Yf
0/.Tdu
,./|du~
#PZ`857
dt~$[i
!Zjt;:3
/,-D2--
#hy|$Wed
,9?f#P[
311,.,,D,7<f'CL>
-00Z..0
+6;.%MW
067<*)+2
-*,2/67<
Start a game and pick level of difficulty. You can choose from Easy with 4x4 card matrix, Normal with 8x4 or Hard with 10x6. Your goal is to match cards with same picture. Guess random card. Remember it's position and then keep looking for matching one. After all cards are matched you win. Keep an eye on timer for best score.
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3ahSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPADPBj
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
-++:311
*58x%R]T
#R]T+58x
(;@0)EMx
#R]R%@G
$O[R"O[R
'EMx(:?0(;?
+**b#Yg|/15$!Xe
+13$$Yg|+**b
201(Xw~
[ZZZ988
`__^IHG
?<<2LOJ
aqh$HQ
.12*&\j
+/2&!HQ
#KVP+/1
!P[`MMM
))*&+IP
.//^'59D645
'59D../^
%DLZKFC
,+,L$br
_or+/3$!S`
+.3$ _or
&9@>RMP
+,,~#Zh
+,.|MFG
-12l(-/P!_p
',/P+13l312
,,,&%OX
-01rjhh
-,,<"Ubr
$Uar.+,<
)9>2,@F|
*@F|^ov
^mv)AH
"R]|*BG
+13,'MV
\mx,.1& `o
.,,` P[f
!P[f$Yf
0/.Tdu
,./|du~
#PZ`857
dt~$[i
!Zjt;:3
/,-D2--
#hy|$Wed
,9?f#P[
311,.,,D,7<f'CL>
-00Z..0
+6;.%MW
067<*)+2
-*,2/67<
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
tEXtSoftware
Adobe ImageReadyq
IDATx^
z%Wr^b
1*c$g&4c=
ErOF[K
@!' Ff\
#mf 8I]*
Zq/?*N
c;;\XH
C>O#<29Ep
g'\F(N
L7c=Gxz4
+78G)&
.yGxu0\c8
hp#Sp>
q$L{v2
I4DpK+
DX}*NW
,>'?1B
O:<]-5b
Ny|hM-
|z050}^
;e$m]k
svqFVu
1>G2{.
!FN=[O5mq
F1D<b3T
v\Cil8
"h<k[d5R
F[8{c7
a#:=?y
WvpRqv
m}hddlz#
j{v2f
+ndS~~
O]+>Z#
vd'~8,
4z(<O#@
BhDUiq
g{pW45
H>8={q
Lkf?+V
:8gIG%
GG6LlZ
0>Rp%WrQ
I^z%Wr
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
tEXtSoftware
Adobe ImageReadyq
IDATx^
z%Wr^b
1*c$g&4c=
ErOF[K
@!' Ff\
#mf 8I]*
Zq/?*N
c;;\XH
C>O#<29Ep
g'\F(N
L7c=Gxz4
+78G)&
.yGxu0\c8
hp#Sp>
q$L{v2
I4DpK+
DX}*NW
,>'?1B
O:<]-5b
Ny|hM-
|z050}^
;e$m]k
svqFVu
1>G2{.
!FN=[O5mq
F1D<b3T
v\Cil8
"h<k[d5R
F[8{c7
a#:=?y
WvpRqv
m}hddlz#
j{v2f
+ndS~~
O]+>Z#
vd'~8,
4z(<O#@
BhDUiq
g{pW45
H>8={q
Lkf?+V
:8gIG%
GG6LlZ
0>Rp%WrQ
I^z%Wr
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
tEXtSoftware
Adobe ImageReadyq
IDATx^
z%Wr^b
1*c$g&4c=
ErOF[K
@!' Ff\
#mf 8I]*
Zq/?*N
c;;\XH
C>O#<29Ep
g'\F(N
L7c=Gxz4
+78G)&
.yGxu0\c8
hp#Sp>
q$L{v2
I4DpK+
DX}*NW
,>'?1B
O:<]-5b
Ny|hM-
|z050}^
;e$m]k
svqFVu
1>G2{.
!FN=[O5mq
F1D<b3T
v\Cil8
"h<k[d5R
F[8{c7
a#:=?y
WvpRqv
m}hddlz#
j{v2f
+ndS~~
O]+>Z#
vd'~8,
4z(<O#@
BhDUiq
g{pW45
H>8={q
Lkf?+V
:8gIG%
GG6LlZ
0>Rp%WrQ
I^z%Wr
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aBj
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
-++:311
*58x%R]T
#R]T+58x
(;@0)EMx
#R]R%@G
$O[R"O[R
'EMx(:?0(;?
+**b#Yg|/15$!Xe
+13$$Yg|+**b
201(Xw~
[ZZZ988
`__^IHG
?<<2LOJ
aqh$HQ
.12*&\j
+/2&!HQ
#KVP+/1
!P[`MMM
))*&+IP
.//^'59D645
'59D../^
%DLZKFC
,+,L$br
_or+/3$!S`
+.3$ _or
&9@>RMP
+,,~#Zh
+,.|MFG
-12l(-/P!_p
',/P+13l312
,,,&%OX
-01rjhh
-,,<"Ubr
$Uar.+,<
)9>2,@F|
*@F|^ov
^mv)AH
"R]|*BG
+13,'MV
\mx,.1& `o
.,,` P[f
!P[f$Yf
0/.Tdu
,./|du~
#PZ`857
dt~$[i
!Zjt;:3
/,-D2--
#hy|$Wed
,9?f#P[
311,.,,D,7<f'CL>
-00Z..0
+6;.%MW
067<*)+2
-*,2/67<
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
hSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD=
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATx^L
N>a5c
4%BoH3m
Drx&q]
sv>>6ta
b%6,M$
U-9%ZU
u+RC>Y
xML+41
du{G//:
+'-a!xk
4XVC9:
uDh`DK
1A~ia<
z+.'^[<
P4\C>m
$GJHp0'
Al4Vo/,
.?kq{o
_ |:6V
"@P]Gk
(zh~(p_
q~-+8>=
WlHs7/
+4b'gz
ludPjd
#d89z"?jWX<
6wX<A:
OP6T?O
!#_n8qN
xN{V#\
QR"DIQ
c3uN^4sx
jM'jCG
go3F>*
'xyvii
&m,6E[
YqR#s
t0"{p8
7[3pc9&E
lh'l_a
|'S.:B
ga67+\
`b1a!~3
\h%Vs|)
oLJYrs
Q++eV8a4
}_\Z^9m$
~iQ#&%(
xj}]r!
wu P^Y
@={jSaO
;Yz:Ul
E=zn_
XmI[XB
kUn_My1
lX1cZJO
5Sx$O0
=&<A\,
Q8V4o|6gu
cT;($>
G+>2[sU
,/64JU
}(t~!*
a6#g9mq
),)IuL
#nhU!%:
jY2x}8
,;/MvQ
G7h_0"
jr%dolC
_kXM f
(qh|f
p8w,[lB
238`&a
?sb/,:
y8aAL6
J%|eYg'
Nm*2Z6
]<*>R}
!Zg>u~a
Qxd@fO
w**@WEo
OuOA~8
F\3H]=s
WKk7fF4
@=0ZM)
!w7cr9
]vkLZ_
doOY1u
7,[>/:
?*&#M3(
MGJ~d
\}rIsQv
<1zTxg
M*K|3&W
O4'MZd
W+83"W
%-:"a4
:_ysVF
|}>1J2
.[q^vp
0<&H`%
J%w]#Rq#
U\J:wjcC
T?KJLEB
3HPcG!E=
t[e/6a~YaYi
t"5}y?z
]))/R%
,8n>Nj
}-` $(H
GjyKl:
F]}+@j
l?@Mrde
'H9>^V
{o~6]8
4X3eOX
vrCRuO'o?
YB$Rri<?6
A1YJ"{
-ixtVT;
%y1z]_
H*v7o#
F X<`X0
-zO4{f
k)B1Tm
g nx6_m
_DQbB|p
}Gd/stBL
@Q>[Bh
)OE>"6
z1rQ#FQ
mjJ \{3
,6%wS&
LN@&$A
xF$qL4I3
L7s}Q~
>s/^9r
9Y:koz
Czuk~?t
/V\4>L8
mL8y2u
j=,zH2
)%<2Lz@
H|~x4O
hR>PE.
t.RD/P
z>JWc{
|nN`KK
uHC2`
I?|_pO
<iYAdH'
N~&V&pTAD
|&rl^^[
HiB]p]BD
W?K=}E
%#4z'I
8[nfmx
[/Ok2M
>&xl&k
0PwSBWdb
iLJZ?
o(cX`P[
kO9$GE
i_6,-,Kr
Q=2rwlK
AM5sUe
NV7/\B
Lq0u7b
E.dwdN
HJEDzv
9RR0Cj
ST*ca4ma
S_N.)}
{;C?Q?
7"}|\g
>O/5d_
QXX6w^
m\.iZ,Fd(
LNFPWr2
G&|%G=W
p IpT08
7@1^-RQ
A.\'Qzr
"@}*d
W7L/]e
j76[,y
wIrvrI
u}g]qD
/,|kr3
ASZ0WB
B;5iuf<
ovvIOe
xO1Ns:i
>+j=7g
m)IQ6.
J?>B^S
q_iisH
IYMNK7
T6Z;D1z-C
=S%zIt
:^'W!g\n
p>WKR"Os
B)c_}!
Dg2s<@z!
~s-)(~
go}o/:
V3 bOB
(}0@s]
ysAm5@nC
D1zFEq5C$
nIz5P0
`a>@kV5^
cud}Kt
+j/_zV
W?~l0M,uE
@q3|8
5Hm-T!
g^zrZ\
0BHOM
6DX^8c
dl}RuHo
E1;G0N
{6C};}
k%bf\J
dWU9!w
P( JS.N
4y0x.}
C]<_l^~
R_:{#vf
wqqzUx
(ssKUe
8Px8h;
w,P_Mi
<5UuAD
d:REuU
oj{a{u
}}=Pq5z
|#UbEkk
?$pJLo0
S8pJO
rplH3C
ykT"NmD
~pf08K4
vH_c;Y`<
l]@=2wQ
TW/BaC
_wfB|m
;MAl{)
B*Pwr\
0,K>_$Y
> WZDY
]RL)37%;
b#_pWP$
Q~I,%i
(4b"9@
6q<4RL
6~7eo-
%AiMkD
%0iJj
ACyR=N
C!E<@l
nW>b]~j`x
7)<]Ta
(L{v&UH
$bCJ~Z&
([Pw/|
e_{D`V
}xZNJq
ncM^&~
Nw>sxfO
XWkfwo^`
~O:1*v
Q("4tA*)
N.oOYuG
bG~i}w}
!jRAke
i.,YYX
Tf9fn{
ZR2(JV
PN(d/Y
>-g?1oa
J9~\("
gC"EExi
Cmz^Ws
4~+{8&
sD2M*"
P!C<O
\6JK7BT
rCwaiK
GFRM,?
6X^0=A
!^o|P'*
;)y}]AI?
Nh. }
<?N>"*
B&u|-^
h[Pt0(
$bJq9+
G1bu.t
g]Ru^FW
5zPG\
9j"9UM0I
Ogs$,(
!dz^m%
7cu[Yd
I2_4D-
Rm^xf:
RL~M45mTzz
a#.cD9
W3^_*w
nH^HKdF
"=R\r,D
6*T06AEr
7:IIJ=
!c7gkOZ
;nQx_)
PFBc{Q
xF]:Rf
s7#C5i
I>N|zXG>]
v=b{QA
k<H~7n
PvjeTN
3AfuYz
Sm$Cr5
c;u~2~
GwQL)N
T3Ko||]
*|#I:&
+S\Z&G
h(MM2{w
kDTz3Ag\
}!_qj\
?Ww>+}x
b'\umw
-N*CMO
zuyS%(
K#?mzQ
*vrZfo4
"y(B)n2
(w~rK=
j~D]u|
BVm$1}
L>)hC{u$
=Rl9Z4
;u*E'I
/o?:Hl
~!qvK\O
*b\N~P
:FV6]z
9=0mv
;;,E9Zz
(V8rqx
}}!WG7
(a:?41
5umO=i
/-~s}=m<|
[:v>r[
JHkcup
d=xod@3R
w>y?xX
Wk;{i~
*-T2M4!
sh@*'
\oLo_yo
r5zG0
0o+e*k
7{=[9p
,;3=kt`
ksG=Ry
k)N-uy
!}[eUz
t{YS[sI
bk@k9p
-iEj~4/
eb#f>p
p[J!`/C
KBi+"{X
p" mpE
*"P;L=&
~&W=<fT
Pf)L'3
5/z}m
:4+y|y
6<x!.X+
wJ4LBP
Qf+jfS
?t?Vil
,;J>:o
!D_I%}
T@`@-!
5800J5
_$>LXo$I
m8zgMl
Q4XPc_
dIHP"q'
Y#%Nxg
d>*!nE
Ax~_(R
OfX^_
!5]zrB
Cn|5qs
pf*!u~#D
IDATnG
\0sT49,
3}l*mE
{gG&pp@`9
t:~nk8<g
L5c(l{ Wz
$tw"(~
;jQ@[i
>\YSo1/+8
1|gE0ws
QSZ;x_2
20<(]x
ny5^0L
[tmL.y
>{zP,
|>/\su
Fqay v\
FOY=1Ea
64=T[M
MfQio[
RX*|:;{
@RaB8K
+?&l*o
~iqS]*`;$98
rGx,70
{<7:*}6*gT
V`"@r]
/(~:iP
[7N}qzF
OMb[u=)l
]1RCa.`
D&(kmE
U/SOL[
hX#R_T
XxruQ8
(maWZ$
C ;<,W$4~
JR5x&^"
=xm6@
E Qxsa
Q{&<]b:~
#CP~v9f
]@5<?U
g$put3@
OxpR0p
xv(L~On
Yi7'dP
y$2V9 Dk
=a4c&%8
Yxlln}4
i\m}(5a
#gQa+xS
Q pp H
K8@$~.4A
a2Jsm@
?k3F|n
Ho"')_
Q7G>:?
`]2K!^
a6:vFDa
[5Y)Ry
cMP.(FA"OEG!!sU
eBd'g(|
{^?L>s
.]8tU[
&.|YxB
l4HQ_)
-23>>-1
v):4Dm
.O^~kc:
?U9@{P
?QYT|L}
Oq<:j"
#\INnD)
C6%3.nc5
dz"f~Uvb
shk?CEd{Ra
g<vpB`
{31RF$
2,('juP
nkFVJf
$Z5\H(se
nTqR(7
4PM<=<
Vomnx>-
W-h+D1J
og8>mE]
&eTX?/
Jqf+^x
\e&HKy
uVpE1hj
i!o=[wY
=]4$gL
[L\p?5
s(g4N|
EU.{L6
'RmBC
$-3O18*
`[2]n!
|J$G}5$
`YUnAW?
jkyNw<?
nA~{{2r
0>Z#<n*
(bzn,s9
N%m|\`l
o!"<U
Z.3A.'E
e980Xr
?9/g]p
KW_czS%?
{Fq4}hR
PD-xUoP
2jIQL<
u2e&tE
tGB@sS-
v69}R$w
;#%"_!
08"r&_
Bu;YK2
q0Wl,dQ6
A+j-N)
7/:czdH
Mk5j>1
x|33}
WNtXQw
#jcv^Mj
4Z4G5W#0
j*%aYS
,GPA~T
0 #L#{
a'F;L\
%x@=.4Q
k/m{}P
rcGrH{
atNz|^
jWj?30'
C6F563
zo}G)x$
'\_3<*'E&
8)Z`pL
XslioM
et8xGq
65sRL8
k>;0d'
Dn<>[
5b5e<I
y{ XK8
v`{:E|S
cXV@QZ_2w
O2'BIp
I|M(2]F
OSMVG>
dS</J
ao*wqq
I1clgr
,q'W+_s
wLuzs~
R"}.b4
+7+vm>
sJM9+_
s6@yCP
C"b5!gDP
L&@zkd
85qz[e
Qny#G<
:i>aS
)qvrW9s
|OHQ&E
'uHFr.
#(;Te(
vc}I?A
8QMk]f,>C4
&ib{GD!A
H.'e\%
&k$ECA
oS6(9/
/Slc5^rO
5Uz}mc
sPPfbZ~
<TH/`O\
^>m}8v
\t;2`K
3l|/u\1r
Q*YP+l
d$ggk
{0cnb!
W,joq|
+cK4$iHA
]:ErX_
u _8u.
nOMJD
w>2o{g
@\3EE7
p?Sfy?
!DSQ0!
8@c#\n
wN%N8y
-*kieB
z74B]T
1^y#[aK
jxxAz{CP
`hL`IM
Oe=>|h
ZmR4&B
k&@zgd
/[e\Gc?
_{sgn
Y?mNe/K
,[DA?.
o%i<?i6e_)
7-Jzl?@
s- b=B~
2E'-M{,
bgJs^p
TMifhE
%]2YQ?
='Wue>ye
}{@*D.V
8IM&1!
+""-NST
X;S+^th
.\[A]l
.Y<jw
*uM8]7
CK^Gi'
|^aA7\?
}kQAWC
f't.Q]
[GONJr
%q6NAR/
C&PU&
*kkEJz
T}o%Z1
{}NAu}
,u1:UPZ
}l+3Yh+
QQ<s&
;Y&rt{ R
Fm+qRM
SQVxe5
zGa2zO
R5Yv),J
1wSZm{{
/.MZ"
Q&S!Oa(
:xT6 HM
|x\$<2
Gam(t;
u9rt@v
4f2.e%ci
]b<VPnQ
{|n"N$
GN]TWV6
+\(P/Ey
@=r.@c
O81rKa
/fGopD
zt^z4V<
TO=:u`
bNnOY*
=#NE$Q
+#IZQ_
28hrxe
4V)gO~
ZesYk^w
79@?X
z4}(^X
/l5QsH~[
&XU4GN
ah?4fq
wE6704
qh<p\+ts
|4D%x6
_/;a65
*fh#/Z
N_~f5_qq]
eK.+zY
/bj:e)
lovFdu7
_<idJW
H(qNWD
G9=z"U
<h}*m}
$hK|]!U
Exl$3cZ
VOhk32
-y; 9u3
;JE6=A
>Jl'J2M>I
@sMUyi
WLzguaW
~mBrmV
$R^m;J|
:X4uvln
!YSPs+
)fxCp'b/
IDAT}JK
9`7#<0
{e;=]K
iZ1eCd
1JE(-;[y
N;+)nB
e4R[^@
C'{XO*
S{</N)j
sH?kny
Z%e3W&4
f4}OCfN
n[Z5Sp
Y:6ij)
[j4s73O
]_9&6t
lgF+kNr
X/%^o
&uOnJ/
++ByNm
N^gr>7
-%^1%>
]0s_`/
.A~zSF
iBar6a
tKZqY,
rwILDB
|*:*/:
oC8"[{Z
Rr*$X@
[}mOg}m=
|OaZ*<
a[1t{V
?=]xtJ
l)_:e
|KBj=D
Na&#P"
{B RN
,$P%2V
>#ZEd9
\INp=E@
J6R$F:
>Wa"5:/
sW!C)b
ZS]1!kpM
U1 nZ|
'QN7Y-;:
J tm(B
XA^z#E
TCu952+
w@"Sy7
!Fd8A9*z
z~Y<V#
E\HzX#
E_wMU^wC
:mLj_a
WdB%*\J
R5z6$[
~YHH2'
):P!8q"B`yM\HR
{.*@C^)
_Vwly/
Qr#^KhE
=-ar#EOD(
4`x3g
7s.!9M
R9cWm;
wu|0.7
HTo]RT
~ z9Y`
vA.ypF
G_6N*|
?{#h:
7IG'xN
rF;&#z
^8piV
{<UeeCZ
,G3oE^n{
f2CEHG
tga2:"
c5RQx<
O^E(Ea
{1^c4*Pv
Q|U?{P
^w4I,D
p?L~w|
GO?^b~v
6vQJ*?
cera@n
Ia$~K!
A'v<rH
|g s{a
'6Q8gzf
t?y-kTuQ
osS'+H
Z7ka.mcr
zesUFR
"VosuZ
T-i~wr
n~lTAy4
@e|nc%
fNJ78
.l;l<h
4z4b'Z
:]x!zd
R2>+EL
?exm%@h
-%)%riC
{mss.q
]w~~S_
!LBpeH
Bns:NJ
eR~HI'
&eAg6Z
0t"Q=e
8_@O.T
Pr&:0j
GF&qBy
@Hz&?~Ys<
_' G=e
9-2T9
Qv?[%$
7:|:@
)7-=Jq
j".$>$
&/}YWfH
wiW2`[J
j]L 3d*J+
5Tkz1!
gT?}W!
/[iOFN^:
)U_Vx
EuGoxJ
cG/+q
#p;n6}
>l0(,]
x]b3S^e
HBU@g7!
p{Pw3I
lu~?SP
`<\-||oIQ=
sjtu1C
~V,v#.
r4GYVl<{
8K=s&>
Mp_t!j+
onBu0/
.cm5d!
O<'-\P
yTp;}w
(Ij =PH
-?'e|J9cN
`<=^c?
uS?86D
.lVd;d>
2?_z{|
M,T'E4
1F2up_l{
Q7Dh?"
?H}]$~
hQhyZ&
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
tEXtSoftware
Adobe ImageReadyq
IDATx^
z%Wr^b
1*c$g&4c=
ErOF[K
@!' Ff\
#mf 8I]*
Zq/?*N
c;;\XH
C>O#<29Ep
g'\F(N
L7c=Gxz4
+78G)&
.yGxu0\c8
hp#Sp>
q$L{v2
I4DpK+
DX}*NW
,>'?1B
O:<]-5b
Ny|hM-
|z050}^
;e$m]k
svqFVu
1>G2{.
!FN=[O5mq
F1D<b3T
v\Cil8
"h<k[d5R
F[8{c7
a#:=?y
WvpRqv
m}hddlz#
j{v2f
+ndS~~
O]+>Z#
vd'~8,
4z(<O#@
BhDUiq
g{pW45
H>8={q
Lkf?+V
:8gIG%
GG6LlZ
0>Rp%WrQ
I^z%Wr
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
dIDATH
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
cIDATH
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
mIDATH
We? +l
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
VIDATH
xX.rz\
$L9d0\^
Antivirus Signature
Bkav Clean
Lionic Trojan.Win32.Generic.4!c
Elastic malicious (high confidence)
MicroWorld-eScan Trojan.GenericKD.46832326
FireEye Generic.mg.aa9f4e6bb6c363e6
CAT-QuickHeal Clean
McAfee AgentTesla-FDBQ!AA9F4E6BB6C3
Cylance Unsafe
VIPRE Clean
Sangfor Trojan.Win32.Save.a
CrowdStrike win/malicious_confidence_100% (W)
BitDefender Trojan.GenericKD.46832326
K7GW Trojan ( 005813791 )
K7AntiVirus Trojan ( 005813791 )
BitDefenderTheta Clean
Cyren W32/MSIL_Kryptik.FHG.gen!Eldorado
Symantec Trojan Horse
ESET-NOD32 a variant of MSIL/Kryptik.ACNH
Baidu Clean
APEX Malicious
Paloalto generic.ml
ClamAV Win.Packed.Ratx-9888082-0
Kaspersky HEUR:Backdoor.MSIL.Androm.gen
Alibaba Backdoor:MSIL/Androm.274d7327
NANO-Antivirus Clean
ViRobot Clean
Rising Clean
Ad-Aware Trojan.GenericKD.46832326
TACHYON Clean
Sophos Mal/Generic-R + Troj/Krypt-BF
Comodo Clean
F-Secure Clean
DrWeb Trojan.Siggen9.48175
Zillya Clean
TrendMicro TROJ_GEN.R011C0GHN21
McAfee-GW-Edition AgentTesla-FDBQ!AA9F4E6BB6C3
CMC Clean
Emsisoft Trojan.Crypt (A)
Ikarus Trojan.MSIL.Inject
GData Trojan.GenericKD.46832326
Jiangmin Clean
MaxSecure Trojan.Malware.300983.susgen
Avira TR/AD.LokiBot.faqsc
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Backdoor.MSIL.Androm.gen
Microsoft Trojan:MSIL/AgentTesla.CMY!MTB
Cynet Malicious (score: 100)
AhnLab-V3 Trojan/Win.MSIL.R438113
Acronis Clean
VBA32 Malware-Cryptor.MSIL.AgentTesla.Heur
ALYac Spyware.LokiBot
MAX malware (ai score=98)
Malwarebytes Trojan.MalPack.PNG.Generic
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R011C0GHN21
Tencent Win32.Backdoor.Fareit.Auto
Yandex Clean
SentinelOne Static AI - Suspicious PE
eGambit Clean
Fortinet MSIL/GenKryptik.FJEE!tr
Webroot Clean
AVG Win32:RATX-gen [Trj]
Avast Win32:RATX-gen [Trj]
No IRMA results available.