Static | ZeroBOX

PE Compile Time

2021-09-27 14:01:27

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000f9634 0x000f9800 6.90435708479
.rsrc 0x000fc000 0x0002adc8 0x0002ae00 3.3283482764
.reloc 0x00128000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00125bb8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00125bb8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00125bb8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00125bb8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00125bb8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00125bb8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00125bb8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00125bb8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00125bb8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x001260a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x001260a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x001260f0 0x00000324 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x00126414 0x000009b0 LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF, LF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
U(v,,`
@XD[#
EAI+-#
n<V!P~J
&=Z<H'
+Jkb_r
+|nr Q\c
hn[0v#F
?<2U!I
fREs^M^
H;CJdP
+uKWCk
#PCOoS
G)RasD
ma0j3O
,oq.S'7
84~Q\cr
i9#FeS
|!Fd*{
yI-?R:
S-&WVf
5i~f}a
,@uj aU
$Z&DAF
l<;<'
GD?\oJ
.a90?zv
_8,%.l
qJqX_(
11kT=$k
aS<`H}
!/Z[v}
A)LsQB
{%(}P2s
QTh`0=
Z#}Gs>
R.D{xz
URrhy)
Tu`q`\
NtCoT
, /u]%Z z
ZCia8x
NtCoT
wZ ts'Ma8S
MF*a8:
ntdlT
Z ;Nxa8Z
X l.dlT
FiiZ g
X ntinT
b)wZ g
/BZa8$
ntdlT
X l.dlT
X ntinT
&ZiZ BX
mHxa8S
Z?_b`
q,Z \[N
.9)a8G
eBU:Z
_ A w7r
cLr0Z !
$e*E #
}"%&8|
Z g?Aca8
aTKZ '
G^ U%&
_bj/
_bY*
'# &Uzca%
epZ +1
eyZ cG
E.et8
:AOf%+
Z HEl'a8%
|Z 5vy
mZ Vf>Va+
Z_bX
Nk7%&+
_4%&8[
fxkK%+
JP.Z c99
Y_cX*
uPxe%&
.D 7+l
YU~NZ
YEKE(
pi| )UU
Z ,}bUa+
dA?) )UU
9 . ;6a%
ywZ /rs
B?Z %l
f'WZ ]
N"1D(
|^ea8-
)/4%&+
 MZp/Z aa
4x<7+
J`vHZ
JZ =lua+
qO3%&8
.W{Z D
?Rll %`E
S:BMa%
o1Z )B
k3k (=]Ma%
\&2n
e7 Z
r!IZ 3
!tZ B8
*N/P(
K5Jb%&
_GQ/ :R
exZa8e
mZ 0QPea8W
@ -l(
XZ Lt3
Z zm{Sa+
P.Z
eTZ i7
'Z 5Ck`a+
RQ^e
l$N]Z m
8EBA '
U'@a hS
J8nZa+
+ ,K%h(
NeZa8$
.Z |)T
}6Z G}xDa+
O[B~Z a
>(ElZ
%q|Za8D
;VYZ u_i[a81
]Z )}U
153a8^
': 5
Z kR`(a+
+ XZxW(
&RHZ N
J;LZ `
U/x}Z
b|YZ Y(
\ 0;Oxa%
RZ `m[ja+
Y,KqZ
^OwZZ OeD
Q;yZ '
/.oH
!eqO
Z 31n2a+
G&Wra%
Z ik8a+
rUV`Z
Z -]47a+
+ XZxW(
kF\Z ]
zN`G(
+ ,K%h(
d=Z @(
8Z,a8`
:iLa8S
`vJU
+zZa8c
VVRZ Ps
qf<a8/
wuc:Z
"Z Y*i
,X4a8J
z!aa8w
7IZ :-
^Z iHi$a8
YMZ )9
hYZ ^D
]T8a8<
Xv ~'^
g`y]
;AZ w5
7s;RZ V
VPdZ
~Z _Xy
??xZ
8+%iZ
OIz<(
lV4Z r`x}a8<
I^vA(
OIz<(
T=Ua8R
grj;Z
.L&%
Z [\UMa8
,R T}9F
~Z Xh$
`<2nZ 4j
#ac(Z
Z 6gYza8;
I^vA(
VZ \?f
Z +:(}a8
Z GaH-a+
Z -UUja+
IaZ jK
xN{\Z %
7Z qP7
5RMZ &
u6rZa+
HM|1Z
h'BDZ
+Z Z?u
hi{?a%
!vtZ V9
] hi{?a%
9d hi{?a%
hi{?a%
Z i9n%a+
}UZ e"
_+Z M86
bc&JZ
~2%Z /
Z .Hk2a8U
[8QZ
&[Z AV
Z @Cg;a8
bf'0Z
F6!a8s
eH@jZ
G|Z ^4
:YZ M"Y
4x;SZ
eZ 1%)
5<%a8s
# ~lr<a%
q:OfZ n+T
voZ Dl
Z UIlTa8
B@SWZ
Z [U/oa8f
QnLa8S
^8J (
[Z 6-x5a8
FTe`Z
qhfGZ
Z ;o])a8
U@%!Z K(g
s+C-Z
Z :GEEa8
Z GB8!a8
lZ \d]'a+
'=p_Z
FgV)(
Z ^5o,a+
Z ?.qsa+
S+O|Z 6z
Z BvDKa8r
}eK@Z
h{Z 0c
v>xYZ }
;"Z }?1^a8
*Z {!^ua8$
Z y&p7a8&
{tkZ n
,W'Z P?U(a8
WrZ w)
Z y~A%a8
#2I3Z &n
c|Z !i
Z pP8*a8P
v1WEZ
K `Z U
)Z yKrGa+
+w +T5
@ "Kr:a%
ZUbl 5
D`-a80
Z :HaUa8
- fa8M
7~Z tn{*a8x
RZ=Z s
IJ`IZ
JZ!$Z 5N
ES(3Z
FHu/Z
\Z 0+
Z HWIHa8
Z Btia8G
Y3NBZ
z`&VZ Q@*
%y\Z K
aZ ~A)
ClPZ G!HBa8
*+(0Z
;Z ]'_
Kg#a8@
%_ra8"
sZ 7(9{a8
`%PGZ
_Z $y5
9QoHZ
CsyDZ u
I~Z E)%
rrZ ~W
wWya8a
1Z E'IJa8
_@+a8`
B7SZ (F|
9u5a86
Z PH_=a8
w-Z "h
7Z %\\
+j -N`U(
m{"a8?
MZ 7#$9a+
J 1DZ D(
1Za8u
FZ xU}Ba8
HSFa8r
qZZfZ
9.~@Z
WCqQZ K
g6uZ n
Z hntwa8
8/y`Z ^^Z
){@a8|
$&Z Hy17a8
Y5@a8w
Z \7#_a8
4Z +N|a85
09la8G
SJZ TW
R62,Z
Z 9I3la8G
Z RU]Aa8
<07a80
x;a8O
nXWZ x
M:Z g.
i6Z n7X
Z sHqXa8w
UZ v(J<a8%
';Z yR
Z So^Ha8'
jYjYZ &Z
xMZ UQ
CVsHZ c
xx=cZ
\[Ua8K
*ekZ (
GA9nZ
w?<fZ 2
`R2Z nPOKa8.
8gZ eY
Z L!}a8I
6& r=w?
r4bZ 9
{1:Za+
wSpCZ
6& frB[ z
hJZa8(
Z Z(n+a8
hN#a8F
0)$(
$:Z >x2
Z k1(La8h
t.tZ {
0b!a8r
Y9? X8
iaUDZ
Z 0Duba8r
Z `Q6Ua+
<Hya89
D<V!Z 7
NZ T/1,a+
Z I8[La8k
Z 7!h8a8<
z4wa8#
&J<`Z
fl;lZ TA^Qa+
ZqQ^a%
nRZ 4.\
[Z j*
}6H7Z
Z +H8sa8
{Z 1xP?a8
Z B3Rga8]
va*Z i|
Z Y.2a8
NZ 8L'
mdZ HM{'a8
hH/a8i
?Z BpE
*U,WZ
[Q5Z 0
& \qZ
[Z HQ,
qc$AZ ~$m
)QybZ
KMkZ ?
^M"a8q
Z I[%ma8I
6){uZ
}q[a8I
`3 a8'
Z 57*da8)
Z +mD8a8
Z +`P$a8l
vnMQZ
#D1Z P84
OZ 'F4
Z S2ka8
w+8Z
F.\|(
Z V2\=a8
[MZ td
TS'a8W
KU<o(
Z T=f+a8
yZ =F>
=6!cZ
@Q{a8/
SJ7a8^
ng&Z M3!
?gia8A
%xzZ b
99?a8t
u!Z wu,
Z n5y
'+UQZ L
y}Z b
1~[Z 4Xd
OZ y<osa8P
ZK'IZ r
xLZ .v^
oZ '{XSa8q
PF)xZ
SCZ D=
Z (*xa8~
&HnZa8
+Q 5fh
,N bc=
K.-Z s
.zv{Z
+SZ Fd
N^Qa8%
Z p8-qa8[
f0EZ +X`xa8Y
d#Z #_
ZZ [jP
0%^NZ
D`Z <U
E'Z >/
Z w8S^a8
Z XACPa87
hZ BrE
A<oZa8I
jZ 7 7
W+xKZ &
%9iYZ
+G z%.
HWZZa+
y_uT
8gtZ _
,= 0Hq
7 rZa8e
GIdZ "I
-Z+*Z
Z4_a8P
JxZ [{
GSU:Z
8Z J%!pa8
!3^Z @
=!Yx%&
/Z V?\>a8N
Z (|DXa8$
E+:a8s
(i_U%+
"333?"333?s
Q35yZ
Z @Au a8E
lZ Y.~
Kg`Z Q
T7"a8N
gZ 6[D
'f}}%+
]9Ja8>
Z j&>a8B
{PZ_%&8
{U.nZ
LZ o9
A/Sa8z
xZ uX+
cM,BZ
Z "q11a8\
~Z ycs/a8
ztB,(
L-`rZ
pMZ =O
|Z "q
U\O*8'
Eb[wZ
~Z >JU
Z fW]-a8
=Z :8f
jyH0+
-?)Z 2
Z vI6Qa+
cqza8@
26}tZ Z#i
QZ R03_a8
d})a8b
JRZ zl
Y>F%Z 4
gZ M D;a8E
%<@}Z I
Z q2j4a8
@-Va8E
}XRa8W
<-yfZ
"333?"333?s
u.p4%+
!y$Z *
{aO5Z
m/'Z q3
(U=yZ {
DZ 8&I
hsZ {MvVa8x
oR<a8_
Z DW8ha8
c7CZ =^A%a8
y<`ZZ
|NUM%+
6F{/Za8
WPs%+
]r{3Z
SC/d%+
*=Z =m
`Z xQz
x_(I%+
Z -{F?a8
A$7/Z
WK7; y
Le g8sPa%
5&QD8
Z <?E"a8
?zhZ .
xd^a8<
e!jlZ
CZ Lot
O6!Za8x
Z i@@a8
2+`fZ m
uz:5Z
5epZ ^
edNZa8
B_Z _Ng
g1^Z n
zWl^Z T{
4zZ .Q
BRZa8@
\Z @F<ia8
%CkZ =
~Z G8:Na8,
*[lZ #
+KZ v<
Z u_|*a+
NZ xlY
tI|QZ
h0Z 1,_La+
3YZ '_
8& 5PA
PzqBZ
lxX<Z
Bh,Z L
%rYZ8
8Z ^@b'a8
Z qMc;a8
nZ 8/x
SZ k/x]a+
k^Z r/b
\~Z '}j
psZ 0t
9.Z !L
$p$a8N
+X?a81
Z =;Hla8
smhTZ
lwNa8^
yZPZ p
LZ \cI
a{va8I
|tD@Z [(M
4}w:Z
Z k&Q|a8
Z cnX0a8
{logZ
9cEYZ
dZ H`
1MZ W9
j5C"Z CQe
"Gg:Z
c/pZ k
W'#.Z
TS6Z u%
Z .VlHa8
P"5Z :
Q<Z "E>
yv+#Z _
Y8Z Cj
8mx}Z U
\Z QO#
DWra8=
_lwsZ
~1ta8k
SSZ 35
1Z CC}
Z nWkOa8W
*Z epC
)[Ma8;
=Z 1Q#
X:OTZ
W:ta8T
RZ R/=ua8
zIoa8a
8EyZ .^=
&Z G1
k3;1Z
Z eC+ea8
TZ m>~
\*NZ l]
WW7Z 
K1iZ T
nZ [ds-a8*
Z :>Tma8
aFGkZ
l $^Z
xmaZ E
Z gm'=a8
s^nZ S
AdGa8e
=}%Z
o~d9Z g[1
$$Ma8<
"o#Z C^&Ia8)
F+;L(
@Z 0dU
N\Pa8t
PacZ 7p
Z JNCga+
0G]Z 4tZ^a+
ByEa8#
dZ !}+Ta+
zxBa8-
jCma8+
wZ 9Z?
Z Gw1@a8U
+@!YZ
BF#Z =C7
@x2Z s
LWJpZ
K=.Z d
<1Z @V
k~"uZ s
pZ lNs
*qWeZ
rZ Wy[
?6Wa8M
m'U8Z "
Z u9%ea8
67bZ M
#l4a8m
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADPBj
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADPBj
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADPBj
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADPBj
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADPBj
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
hSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPADBj
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
JIDAT8Oc
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
oIDAT8O
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
*IDAT8Oc
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
,IDAT8Oc
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDAT8Oc
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDAT8Oc
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
/IDAT8O
]t[Sc8
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADPBj
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADPBj
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
hSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3afSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPADP
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATx^T
|>:9+N
'JCdPOD{P
\fSn='
$7{g'M5M
zb{Dc@
v"|VmMV
x%UAyX
l[RUX`
c!#W33
3P?Fin
-?u-@o
d,YYZY
tT7?x{
a]`ZRW
RyR`Ma
xeE85 7
..Qx7d({pU
f]uGsrL
$|f73An
(8lrjzr
=oPV.D^
a^vns
?4mBd'
1gz;:7
f=7o{2U
]:gzWv/b
RtIJIR
J{L.Rj
im;T1P=h
"g@l$=q
T{eW/:
(6z=i:
&pP{QQ}
]D6{;n
xUe^L:
K{s:3[
"D5h;p
8:s ^B
\pXzyr
C9!&l|-
fBrEr5
5!caM
U].22
eEqSH9
*s>xX7
Gbs^o}J
+*-!Ny
6#a"r~s>}
D|oZ7&
!eXo@>V
K\|`)A
[wb+y
=gxB~9T
2`'n=pO
@s'*N~
o_LNv"
[Wh[[
LpL~|.
fe{>>_
/hKdB{
%j(Gh#(lQ
vYp/qi
aBLsPY
c"@1&H
=R{5e@
9]}nsG
%AvsuH
X5!6!D
6GZS2x
HKHH\_
m{Q>"b^j
CQ0;O2
(ygw/.
K1fE!Y`YP
>u5~G6oG
D(!S6L
):z@,c
Ma}vB0
x9q;3q
\~:{m
QLN/KQ[+7
<B;x,D
v$lj]4
We#A~
,S`\k>
wxm++x
<gU$h,.
Tvyu'gXd
@Y@Dk*
Yp#Z"4
,=n}$e
-*,^L]
0m:^*8
kMw$4/
!A(8"D8
Tv$yuTCe
8fIbJ}
o:d<`>P2
,Fb*Sr
fq.3[o
aU4^S3V
<AxkGF|f
mU/cnD];
6)dR~u
3dIgT]
jX@EQ3@
i.GsA8
Y;NCLYp.
yMmxd
K/%SB7
k<!D%$
:0oO)u
9n35$K
*[i&3o0
sg7@?x
YoX~P9
o*sL\q
5]F9~W
3Fou1^
70]n?[1
m0*pj$~
6f]T9>jk\
}1CAS_
,D^5'u
lEvHeP
0T2zE+
owL ^B
zf|,Cyi
adVzveO
&}&A@]
\R<uur
?ow^dX
#/2&-*
.D^"&D(4&RtDr!1
E{,<VR
E+.f+k
A>V: ,#[
}ued4'
1[]zQn
=W|}$a
Vo[z_L
"1|lqL
]8JO>
lO~9hh
V|c\_i
.~gcTg
O`!F0&
#{fKkl
]]acg?
[/RxDA
Y`]V}DV
i')O\O
'U6l\1a
:<yNW>u
x6ypLS
P@VhTYT
}$tnBM8
l8[pxn
LbMU<D
/Qhiz%]
U1T"cZ
v\z{-e
2<?&;
4PqK!c
SX|Y6A
e5CL3%L
Dn}yhPyfr]TvS
x~li_?;4
:*0X{.
B6uY!k
rB8w0e#w
?+rUoX.
L3 xS
Cfg7~H
Se4pG_
Ykbw&M
rIKv.0|Q
PP1[h
)2Bd|b_
q=VG-j
3F-#AlV
9prSjt
yXUYgY
W)U^+9
0SBSXmu
)7@Ta`#
~scEhe
?!eip,LC
<$+h1f
*:(BZy
4w~;q&K
(AHM<Y
<1FN1=
,R-&#!
;vhRZw
3Tb~}|
h/ i:Y
${,gqV
NT;4WS$
*73Ou!G
PpN?ej
}cn8nK
5B3Ohv
Qs( at
3G2\Ca
bZ(;%*
t]v?F:
UrYzkY
7{BCB
>Q"$Ix
(WE;47ON
vu|m@^
K>lx*{
1T+M'GO
-n1cXf>
l]]9e<
cS_S9`
gqR\{z
>`qAj'is
yOW[F'
~OGyf9
$<lDm[i<
6^ul[R
6qdQ7h
h'O=RiR
iVUcbwS
IDAT?X
Vik<-a<#/-b
!}K`FmxC
:s%4{s
~xIW.7
&tGAcI
-n\`3aTe
7A3E`q
d%USM_
BP3H"/
TOP$xK
TE%FXs
(ZvC`c
wnF9yW
O7^lZT
^x-;o
#t|:WT
/bChf]
Zhudih
nZn: ((
)b~NdZ
B;[sRO[
_`#_QDu
8b{F@
E,qgw[
_;Ge@J*
j4@WEX
"TC8VHH
K-J=',
|Rul,x
5g.;m8
VL]_>9O2
2i\{xml.
?'Te^Y
CcBWa}
iAe$r
ow$P1?
9#O4V[t4
O4?@H5
YEVcPs
mrLJO4
aI}:`!
0**7M^I
iA~@0Q
\d~gRy
KE@bNpD
wu)uQ1
\{Pykp
fJqx|Z
uY})>f6
tYL:vx
`+;5wAL
OPukJ66
'Vw[O.4
[@}z}Z
X+~EAY
So]mi}
1BnR'H
Y$2o_%X
; v6s0
rUe,o$
*&1<b%
w8_4[\
TV,o-+
?k_z<X
<*AO]_J
C{u@(y
NX[oUN/
Uu<-QUG
2~-?lPO
Yo&B`4G
Wn}:9q)
SEk+6(
F^GB^@
N-OM/'
PpD} >Y_
^[Tj7w
eq.V20
XxD^l
,jE8{j
BV~Au@
'WHy[a
NsF^0=.Y
z}B6\g
-YZQ,
#{Evv'm)
y,t)z_J
!"@R+M
zvOHSc%
i]WMc'
.[ZvUT
V{.L]
JqcRW`
V3,T,|
$1bl=!v
yc\qrJ
g-2[7
;6N7{w
,y^ulES
'AwExM-%
$R#]8k
:^D<V|
Rw:pf,
I88(@G$!
y!z.Y,!<b
9#>m~mK
Tt5T6Mt
LEWtUW
=&@d%P
(3xL.2
Oo<xhn
59g-|tvl
.\}e0}5
J:Y~6v
Lx 4GgK I*
y#fx}AxN
1PnM8N2
+w*CTCJ
<~+|8"e
p^464m
zS""$8
r|xKj1
PYyFRm
WY8[ph1
;HN[]S
Pl"Q@&
.26O67}X
Kw]X~cH
1G%2f;I
Ot>I/Z
0m99>["
i|*u=3w
Yc$X&%
wUW4uh
VFVo_{
#7!VeF3Pb
~<}gzVo
%Z9mEE
!)&N!hY
(.:yW
C&_J}s
4Pyk8~[
;Q/ 2
o$\(ew
{p,pMd$
C2V2fE
_KD]n3y
XY\Y=
W<:zId
;]/\}X
nuxOyd
$Ca}6!Vm
GTWmw
56f]>*`m2X'
[ T2"A3
wr;ReZ
*><Td`
!SsU{$S
K^h]Js
,;}rL+
=Z:1Wea
])N$m
bFi#'J
zJW{X]('
vAT{N,
:MeEpE
G46tOB5
#GJ0E@
xRl?v}y
qL,Nh!
q'Lz3K
~Z'*&`M8x
2#<YWk
(81DN
IGKgf8q
k!VUCT
:k.%m8}
,72@9p
];KUUg
S5c5@
/"ozS-
#Kff7R
.=c[2Ot
|:\n[
bZ, {l
ad5^nTM
~%Q4BOA%
9""N_p
3iWE\gZI
L[t\R}
\l_v[yp
Ij]-i
K8_:K
pQr:gV
UPgFvW
J:m*^_
2nqmc/V
b:7,NqY
T[m{.D
Tvb+/s
5qy0+[
u3K?d#
01O%/5
TA3{ds
Xr`ifSMxV
O}=?ah
zgfp6N"
"kD4i,
=T[d"
_.6rU&k
iG!P0$
T^*mg1f
WU[+G_p
M4H%_UbiK3
$a`b)D:
UGTfrE
f-,v1e
&Z|>fK
JzGqsA
@Py>f_
w0=Ztm
>Qnn_]
RPMIR
F|V'-d
Q|?Fml?
-_]5}^
)CLC8v
iyFxn]0
Zi'B6t-R
,O4`#Q
tfLIvHyzJ
d{B%=g
o*u=*vR
#)cx+ocW
w)@Ls"
euYE(n(
;k{/lN
t^jfu9-
,s1[sV
w\K^yE
)'jGIK
G<Sh`o4]7
r?aym4n6
w7Vn;=
LU'ALs&@
Y&9pY!
9UNc[,
<rKfU 9
u.37k,
AoSf/6
_*!+~:
k_D[Eq
i)&IB5-
&8Xw|nUfP
NGFGwIh
!"p:KEJ
KsW`~8
w%J9NH
y8D$d=
KIcplp
26f7jc
s{4&6b
%-3Pot
_P<q Z
9-:ATc
X7&Nj"
.'x}41_
eN?S4*.
Z`*()2
}J^|,{a/
ylYLpU
~8hbL[
HWwJM:[/
9a{!*;
}{5yuO
\wd$-W
iPL7v8(
Nb}8WP
l{R{m)o'
;4WZ,F
d}RD4q
eHRgeP
!vA{f
'BA~]$
c\DcEx
qZ_!NLv
5<wcXo
;=0& F
(=SY@=VS
R'nCI]
qn7~W/
3}q+Sw
n#BeF>n
\jcPXBvRhmh
55[./w{
,_|<O^
'!bF"6#
F_n;N.
$9|4Nbo{
J#m{CGBM*]
b(}`f|"
qAMpxI
A<.*oM
nT~N=t
MXZ=Ko
lvYH*o"j
[_<f?v(
y5iOc#
CQt-}!
:n^d[M
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
444!444
444.444K444h444p444\444?444.444*4444444A444G444:444%444
444444*444;444L444O4449444"444
444&444Fiik
444x444rbbb
444j4445444
444-444G444U444U444`444_lllw_``
444_4443444
444 444?mnouSZh
444@444444
444 444@iik
444R4440444
444"yz{Zcei
444X444?444/444
444!4448ttu_QVb
444B444
444\444+444
4444449444abdf
444E444
444^444 444
444!xyzSbik
444D444
4445444
444G444#444
444$yyzRYet
444P444
444_4441444
444&x}
4440444
444C444444
444$wy~qLi
444`444&444
444H444444
444Q444 444
444F444
444G444
4449444
4445444
444m444#444
444Y444
4449444
444{444+444
444R444
444:444
444}444.444
444K444
444K444
444j444#444
444q444'444
4449444
444@444
444`444!444
444s444.444
4448444
444]444!444
444Y444
4447444
444w444&444
444[444&444
444$4446444Fuuv^h
444-444
444`444Nqsth^^^
444.444
444,444
444u444(444
444k444#444
444d444
444P444
4449444
444m444&444
444J444
444+444
444>444
_444!444
wy|f4442444444
444\444Q444V444Q444:444$444
444,444Jmnq
444j4447444
444@hii
444A444
4447444
444j444$444
444@444
444u444+444
444K444
444n444$444
4441444
444=444
444ILRY
444G444
ssta444%
444U444
444.444
444l444%444
444:444
4445444
~~~F444
444G444
xxzY444444
444X444
pqrw444'444
444e444
4444444
444f444444
444D444
444a444
xyy]444 444
444U444
uuwq444%444
444Z444
444+444
444p444$444
4440444
444/444
4445444
4445444
4446444
~~~F444
4442444
||}U444444
444.444
{|~[444 444
444~444/444
zz{Z444!444
444:444
{{}^444!444
444[444$444
{|}\444 444
444K444
|}~Z444444
444?444
4449444
444444Aajt
444C444#444
444$z{|SRbl
444e4441444
444&wyze9Tm
444+444
444}4449444
q444$444
444}4442444
444M444
xyy^444&444
i444 444
444'444+444(444$444!444
444444,4446444>444A4443444
444-444S444~444
444o444h444s444]4444444
444!444<444i444
444X444/444
444;jkn
444N444.444
4442rrr`]`h
444:444
444:444
444A444444
444p444)444
444S444&444
444M444
444Y444$444
444;444
444G444
444s444&444
444w444)444
444<444
444C444
444T444
444l444'444
444}444-444
444J444
444D444
444J444@wyzaf
444]444
444b444
444[444
444N444
4449444
444j444#444
444:444
pqqf444:444
444y444E444"444
4447hij
444O444444
444:444
444bhz
444k444#444
4445444
444E444
xz{pSV_
444W444
uvvb444%444
444s444%444
444*444
444.444
4445444
4442444
444@444
4445444
|||O444
4449444
xxyb444"444
444<444
uuvt444&444
444?444
444)444
444H444
444*444
444n444,444
444)444
444]444*444
444=[hx
z444&444
444k444A444
\444!444
opq}444
g444(444
444!444"444
444#4443444=444?4441444
4445444]444s444d444d444W4444444
444#444@444r444
444V444+444
444444Ffhn
444P444)444
444(sss_X]f
444o4443444
444 |~
444c444%444
444;444
|}~Q@Vv
444G444
4448444
4444444
444p444&444
444\444
444A444
4440444
444m444+444
444G444
444X444=~
444g444
444t444%444
444n444"444
444Z444
4448444
444d444,444
444s444@444444
4447kpz
444C444
4442444
444V444
444u444'444
4445444
444C444
444>444
yyyT444444
444E444
sstt444'444
444J444
444-444
444Q444
4442444
444U444
4445444
444d444&444
444'r|
4445444
444I444#444
444&vy|q+Dj
4442444
444]444
444-444
p444$444
444'4449444<444/444
444!444;444]444Y444Q4442444
444444@444xVVV
444O444&444
444%lmmYVX^
444J444444
444]444*444
444"wz
444>444
444]444"444
444|444+444
444@444
444F444
444w444F}
444l444!444
444+444
444~444)444
444b444!444
444U444%444
444=444
444u444(444
444?444
444U444
4444444
444f444
4449444
444l444$444
444y444,444
}}~K444
444J444
4446Ro
gr}n^dpthnvctux9444
lpuS_bjp]blrttv3444
444(4444444+444
444%444=444B444,444
4443CCCt444
444A444'444/ABCk<=>
444y4442444
444Soy
444f444!
4440444
444:444
444O444
444"Ycy
444}444
vvxw444'444
y{~t444%444
CEH$;>B7IJJ
<=@4@AD-
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADPBj
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADPBj
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADPBj
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADPBj
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
v4.0.30319
#Strings
#Strings
#Schema
&M&R&X&`&e&t&{&
'0'E'Z'f'o'u'|'
)!*0*M*
+8,Q,^,q,
- -G-d-~-
.$.4.@.J.V.f.r.|.
/"0*020:0Q0
0]1k1y1
3%3R3Z3k3q3
454D4r4
6)616L6
8%8,83898C8N8
9V9d9j9r9|9
:#:1:9:U:]:e:l:r:y:
;4;M;f;};
'''<'Q'
+,',[-
1X2`2u2}2
TimeZo.exe
mscorlib
SuppressIldasmAttribute
System.Runtime.CompilerServices
<Module>
.cctor
VirtualProtect
kernel32.dll
System
RuntimeTypeHandle
Module
System.Reflection
ValueType
Object
Stream
System.IO
<>f__AnonymousType0`1
<MapId>j__TPar
<MapId>i__Field
get_MapId
Equals
GetHashCode
ToString
IFormatProvider
<>f__AnonymousType1`2
<PhylumId>j__TPar
<PhylumName>j__TPar
<PhylumId>i__Field
<PhylumName>i__Field
get_PhylumId
get_PhylumName
PhylumId
PhylumName
<>f__AnonymousType2`2
<ClassId>j__TPar
<ClassName>j__TPar
<ClassId>i__Field
<ClassName>i__Field
get_ClassId
get_ClassName
ClassId
ClassName
<>f__AnonymousType3`2
<OrderId>j__TPar
<OrderName>j__TPar
<OrderId>i__Field
<OrderName>i__Field
get_OrderId
get_OrderName
OrderId
OrderName
<>f__AnonymousType4`2
<FamilyId>j__TPar
<FamilyName>j__TPar
<FamilyId>i__Field
<FamilyName>i__Field
get_FamilyId
get_FamilyName
FamilyId
FamilyName
<>f__AnonymousType5`2
<GenusId>j__TPar
<GenusName>j__TPar
<GenusId>i__Field
<GenusName>i__Field
get_GenusId
get_GenusName
GenusId
GenusName
Resources
DarwinApp.Properties
resourceMan
ResourceManager
System.Resources
resourceCulture
CultureInfo
System.Globalization
get_ResourceManager
get_Culture
set_Culture
get_Morpho_Diana
System.Drawing
get_CMSASSEMBLYREFERENCEDEPENDENTASSEMBLYFL
Bitmap
Assembly
Culture
Morpho_Diana
CMSASSEMBLYREFERENCEDEPENDENTASSEMBLYFL
Settings
ApplicationSettingsBase
System.Configuration
defaultInstance
get_Default
SettingsBase
Default
WikipediaInterface
Darwin.WebReference
GetSearchResults
List`1
System.Collections.Generic
searchterm
WebRequest
System.Net
HttpWebRequest
WebResponse
StringBuilder
System.Text
Encoding
DarwinWeblink
GetURL
SearchResultCollection
Darwin.Objects
<SpeciesId>k__BackingField
<Name>k__BackingField
<Order>k__BackingField
<Family>k__BackingField
<Flag>k__BackingField
<Colour>k__BackingField
Nullable`1
get_SpeciesId
set_SpeciesId
get_Name
set_Name
get_Order
set_Order
get_Family
set_Family
get_Flag
set_Flag
get_Colour
set_Colour
SpeciesId
Family
Colour
SeasonCheckbox
System.Windows.Forms
CheckBox
<SeasonFlag>k__BackingField
get_SeasonFlag
set_SeasonFlag
SeasonFlag
MonthEumFlags
Darwin.Enum
value__
January
Feburary
August
September
October
November
December
Spring
Summer
Autumn
Winter
SpeciesEnumFlags
Poisonous
Ediable
Medicinal
Biting
Stinging
Irritant
Nocturnal
Diurnal
DistributionFlags
Scotland
Ireland
SpeciesColour
Yellow
LinkType
SearchType
Normal
BlankLocation
BlankSeason
BlankColour
BlankStatus
UnusedGenus
UnusedOrder
UnusedFamily
TreeOfLiveType
Species
Kingdom
Phylum
XMLExporter
Darwin.Export
ExportToMindMap
filename
System.Xml
XmlDocument
XmlElement
XmlNode
IEnumerator
System.Collections
IDisposable
ClassDataAccess
Darwin.DataAccess
DataAccessLayer
GetAllClasss
IEnumerable`1
GetClasssByPhylum
GetClassById
SaveClass
SelectedClass
AddNewClass
DeleteClass
System.Core
ParameterExpression
System.Linq.Expressions
MethodBase
RuntimeMethodHandle
MemberExpression
Expression
MethodInfo
NewExpression
MemberAssignment
MemberInitExpression
MemberBinding
ConstantExpression
FieldInfo
RuntimeFieldHandle
UnaryExpression
BinaryExpression
System.Data.Entity
ObjectContext
System.Data.Objects
SaveOptions
RefreshMode
<>c__DisplayClass2_0
<>c__DisplayClass3_0
ClassDataGrid
<ClassId>k__BackingField
<ClassName>k__BackingField
set_ClassId
set_ClassName
ExtensionMethod
NextId
ObjectSet`1
Expression`1
Func`2
TSource
TResult
selector
FamilyDataAccess
GetAllFamilies
GetFamiliesByOrder
GetFamilyById
SaveFamily
SelectedFamily
AddNewFamily
DeleteFamily
GetUnusedFamily
MethodCallExpression
FamilyDataGrid
<FamilyId>k__BackingField
<FamilyName>k__BackingField
set_FamilyId
set_FamilyName
GenusDataAccess
GetAllGenu
GetGenusByFamily
GetGenusById
SaveGenus
SelectedGenus
AddNewGenus
DeleteGenus
GetUnsedGenus
GenusDataGrid
<GenusId>k__BackingField
<GenusName>k__BackingField
set_GenusId
set_GenusName
KingdomDataAccess
GetAllKingdoms
GetKingdomById
SaveKingdom
SelectedKingdom
AddNewKingdom
DeleteKingdom
KingdomDataGrid
<KingdomId>k__BackingField
<KingdomName>k__BackingField
get_KingdomId
set_KingdomId
get_KingdomName
set_KingdomName
KingdomId
KingdomName
DataStoreEntities
_Classes
_Genuss
_Orders
_Phyla
_Species
_Families
_Kingdoms
_MapRefs
_SimilarSpecies
_SpeciesStatus
connectionString
EntityConnection
System.Data.EntityClient
connection
get_Classes
get_Genuss
get_Orders
get_Phyla
get_Species
get_Families
get_Kingdoms
get_MapRefs
get_SimilarSpecies
get_SpeciesStatus
AddToClasses
AddToGenuss
AddToOrders
AddToPhyla
phylum
AddToSpecies
species
AddToFamilies
family
AddToKingdoms
kingdom
AddToMapRefs
mapRef
AddToSimilarSpecies
similarSpecy
AddToSpeciesStatus
speciesStatu
ObjectContextOptions
Classes
Genuss
Orders
Families
Kingdoms
MapRefs
SimilarSpecies
SpeciesStatus
EntityObject
System.Data.Objects.DataClasses
_ClassId
_ClassName
_PhylumId
CreateClass
classId
set_PhylumId
EntityCollection`1
set_Species
get_Phylum
set_Phylum
get_PhylumReference
EntityReference`1
set_PhylumReference
set_Orders
RelationshipManager
IEntityWithRelationships
PhylumReference
_FamilyId
_FamilyName
_OrderId
_Notes
CreateFamily
familyId
set_OrderId
get_Notes
set_Notes
get_Genus
set_Genus
get_OrderReference
set_OrderReference
OrderReference
_GenusId
_GenusName
CreateGenus
genusId
get_FamilyReference
set_FamilyReference
FamilyReference
_KingdomId
_KingdomName
CreateKingdom
kingdomId
set_Phyla
MapRef
_MapId
_SpeciesId
_DateSeen
DateTime
CreateMapRef
set_MapId
get_MapX
set_MapX
get_MapY
set_MapY
get_DateSeen
set_DateSeen
get_SpeciesReference
set_SpeciesReference
DateSeen
SpeciesReference
_OrderName
_NumberInOrder
CreateOrder
orderId
set_OrderName
get_NumberInOrder
set_NumberInOrder
set_Families
get_Class
set_Class
get_ClassReference
set_ClassReference
NumberInOrder
ClassReference
_PhylumName
CreatePhylum
phylumId
set_PhylumName
get_Kingdom
set_Kingdom
get_KingdomReference
Antivirus Signature
Bkav Clean
Lionic Trojan.MSIL.NanoBot.m!c
Elastic malicious (high confidence)
MicroWorld-eScan Clean
FireEye Clean
CAT-QuickHeal Clean
ALYac Clean
Cylance Unsafe
Zillya Clean
Sangfor Clean
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
Cybereason Clean
Baidu Clean
Cyren W32/MSIL_Kryptik.FRC.gen!Eldorado
Symantec Scr.Malcode!gdn30
ESET-NOD32 a variant of MSIL/Kryptik.ACXT
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Clean
Ad-Aware Clean
TACHYON Clean
Emsisoft Clean
Comodo Clean
F-Secure Clean
DrWeb Clean
VIPRE Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Generic.th
CMC Clean
Sophos Mal/Generic-S
Ikarus Clean
GData Clean
Jiangmin Clean
Webroot Clean
Avira Clean
Antiy-AVL Clean
Kingsoft Win32.Troj.Generic_a.a.(kcloud)
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/AgentTesla!ml
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis Clean
McAfee AgentTesla-FCSO!E3F5F3DA3E77
MAX Clean
VBA32 CIL.HeapOverride.Heur
Malwarebytes MachineLearning/Anomalous.95%
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Clean
Fortinet Clean
BitDefenderTheta Gen:NN.ZemsilF.34170.jn0@amlZn2h
AVG FileRepMalware
Avast FileRepMalware
CrowdStrike win/malicious_confidence_100% (W)
No IRMA results available.