Static | ZeroBOX

PE Compile Time

2023-04-16 02:02:30

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x001354c1 0x00135600 7.96599647268
.rsrc 0x00138000 0x00000716 0x00000800 3.76949702616

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x001380a0 0x0000048c LANG_NEUTRAL SUBLANG_NEUTRAL PGP symmetric key encrypted data - Plaintext or unencrypted data
RT_MANIFEST 0x0013852c 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

!This program cannot be run in DOS mode.
`.rsrc
0OsX>TV
;;4S=Un
mry#v.
k=:^8~J
_>Ge-6
*|5i7e
zIIEh?5
TF1/fIZ
1_Dt?@ &
tGsk5X
lu&}*x
F,`3hR?
5)hRsy
/@FgX#$
kie}8[
!vf @yS
O47*i1
D%@m}O
f`8|87
gG8w^_8
rn#6c8
7Y.$Fc[
f?$:`"
F>."xT
V>BB%:?
qbBp<=
0V-SyS
ljl7(%
fiDT0v
J<FYMuv
P62u)NH
[K|DBo-
M<YJgy
[n{qiM
+K5qWOl
('ysUY
HenC~p4
L{9ygc
(#T>F!
ly5X.(
4BD/r>
?wu4pPO
J0oM295
v`c]h3
6S+mA$
:N(@=_x
[~r1.c
<F`W)il
5UVWiQ}V
oz0a,V3
NXo:R~s
C!!4.B
cO,38ZbA9
Wqi>@H}1@
i`z)Ki
o3ufa6
h>[ZkW
uwKc7q@Si
2vJ1hf\
2vJ1hf\
>[9l4K
y+8Gv8_
>[9l4K
lvy6*#1
oz0a,V3
oz0a,V3
Ps0P|P'j?
Yg7)\$p
nmYZM9-'nZx
DFS,K[
::X?]I
fgbCQt
xh=61G+&
H$+mb6mLFk
>o=rQI
mc'DX^
; )/j0
evrHPf
w-X#<v
9,Tf@m
0,.y$N
YuElm)
Wqi>@H}1@
%I#:-lo
SkU~v[
G<-K.O$
5D,0U)
|]48[@
.,x,],:2
8.va|n
~vPxqUM
#p{BIU
]6A;dB
]jf<(>+w
IAO11z
7~RU'a
1I#:-lo
YuElm)
oz0a,V3
^\olYSx"
oz0a,V3
G]lFpE
:oKfs>
WR\Dh|
/V\3\X
R`t[wj
|^zTP-
3qlJK)
kVl2k3
dx672c
DWM2a$mA
~Rub@O&$n
)R7AA$
GckLAx
" 8$.
Wqi>@H}1@
SkU~v[
3hkw02
/V\3\X
r5v3g(
k@~rdh
oz0a,V3
39)D#7u
$i7@*<
Wqi>@H}1@
i`z)Ki
l%\R&
U"9>(x
$,'`ark
@Q#12P2
CU]K(C7
]Y??&P7&
{vQ`HF
8jh?3_T_t
+q7Dmh
UJ]lW4
/Fn30u
JQ"/cH"1
Fq,:US
gjOD0S
6.eM3F
Mx5x,Z*
oZ)Xs8
frI\A$
>(|>5M
RLfyc"
)1"(y
k_w4K>
qJ+IHB
l2"]1El
~Nb]jG
#DCy&]
k-gZ?#p%?
K1>down
|{/3wx
}.o}=
eQ3t)bg
^>E%)3i
%N&&l
&1QNZh
%g%Ddo
1[ds>&
XOk1T0]
VnFnc
@mcC]`K
iPi]Jh
B (Q\p
^0v5|X|
@:hk[vdn5
:&93m=
X?5Z&
av22XC
4KhF@df
#^e9~b
17eI#
De8Z]q
I^*xtS
'8(AKq
Ls(BeV
r6hWf8
!VY=XPJ$I
zHBg9&
>U-zU=
%M)Ud~
#;^ *uE
_)x5uf
~X}Hc#
q%M&nowa*
Zt Dn,(
]1Gl,8
qe g`!;
q(A`.E
4uNP8D+&&
5yX#LxRq
)"f^O:
|<+@&V
8.~"3[
iIU[%\
b_rR;"
KA/~+/
n11i+JgH
hoe%*P
d^_5O|
7@{X&|
;4<cK!
+4~QL'7^#
\o!/A9
w+t&uM
>@ik.>
ag =B&
QDT#?+7
h_P@^L;
VEH*dK.
fY;+Ss
x*lt]g
(0E&Qp8
:*v_w[<
* &ma{
fK9TF9]
tYMWY|
"hgVc]
T$5ib+/h
?Jf;|A
.H05@c
LZ>X=S
na^[PC
P`yS\}
m-u=2%ibe%W"
tRQ)t7O
cZhHp=#}
N&Lh)%|
t+$iyxFR
0A,2UE
o+>/\9
v=QA)SU
0>FD4!
D!S#jEB
hN8zW*\
:'y+m7&x
63|;jQ{\
cMM9;(
|).g1u
=S9Yov
b"2e{<
2Pn9>9&`
s%*S@[
N:zERe
h$yi_
a2WJq#d
PGnCSq_
4Q!@|R
<QXCf<
pQ88M)
)|Wvw.
D4;0[4
do)!9X4
tiqc]e
@%V_l#
'=wF{WL
PN'j,y
Bb,q?D
bA!oy"c
Ry(+Rd
m^%ygk
Y~K],xn
&MSj6<*
ZItwDk
J))QFZ
k6@cCq5f)
Gv_QA"o??
B0a2p6
z%ZpZkR
luhYb
NTV%gs
JV#}Ipx
Dk]^JJ
s=Da=TX
1-[- 6;@
oVNMcr
:[#vDB
@-;?Hc
4a6OSx
<w_$l0
2DS'#)
1]A6Ax
j;hcb#
L\Ae>6
!SIr[P
. I:":
yI"Fr&
]cql*Q
vrN.lB
8Ghl{b
J.jarT
;JXi0-"V
U{B;9*|)
B`c$1o
4?P'@m
dd:3x5
b[#4@]
E-XqhA
D\Omp
#:ws~0>
NmpJ\4
b 3G>I
%-T;~\
dc8@YKe
00GCQo
?RT+`!
Nb9k%,
_dqac\
m@};TB
m4#yTo
Uno<c?
xNliB\
g&"je}
BQ1GOih
.|]iI=h
Ne6}_J/T
qUmrQJ
f}^0ia
dD|MB
#dleW*k
Q1Zp!QJV
NLELO#
Iar5l\
b|TA9_
H2~7z9
Mz`qES
M{~) 2I
K|R$>?
^uq1gW
P>tB/>
mJ$ ld'
}[Z$ne
a^}w@CPBk
gri^]>q
,jS-Aa
`zaB6n
}5!t<P
059>-h
bpCb7\u
$(HIUk
p_}<Z;
2b"wY*
u<T4%D7
;g;dzuB
7bi? 8
r_%cQ,
TAf$"Z
&PZRw@
Z4{DK]
\#w[3x
YyMN6]|
i0-c'P
Zun1)D
|tF3{.|E1LC
$}P|~a
H&tL_o
;>-<B_
+SC7@,!
;m=UE/;
ZLFI"b
U}xSh4
Wj|l0wT
BM_m.
B8ds1{4
i7QsiA5b3
ZP-;{L
K;1 @s
WIK6k\
0XW8=8
SJ'RIQ
\hjjye}\!r
&ZNif=
qQO31h
cE1@#%N'D
jRvy@]=
;KRM-dn
#S|Y5`
;VLogE
CIm[z+
mDM&KP<
"(>AP,
u&;^OG
y!V`T.
-H49f:3
WMA0B^2?
'qFZ"glW
@8X{l
/HfhQD
1v=iV7
rzf`mp)
v{}K:,+@I
(tN@?
%9Ry4V
HxUn1:
W3Y@sk7
%m^R=h
@KR0jD
G"^ZHb
.(OaTo
oCqJ$H
^)Hl#K
QS\.\U
Xu6"&]
lSU>V{
"#x-9[p!
([hSKi
Z$~EN)
dvsM-^f
Fj\|;%
?!~cw^3
YMI<+o
LtRf~D
2t]hn?
$jfZ&i
jRg',-
yAh3BO
AnU]8F
p>*D;t:
G^DF!(}r>
dD-Q>q
'[)Y B
Ma~:;d
8%axf~z
XyJ%i
ECUX9S
rg8){c
.{%4^?
^`H6jx
=$rZ]m
xf])ZQ3
Omd2lw
99Q>@g8
ItTF>hV
D35*%#z
cZkDth
7!hwtC,
Ro1O>s
shO{+K`I
ix<;+O
#2Aj%w
&V:O{;
.Ctprh
-W!(c%b
~CEs.:]
Y9t?5
0d& h=
Dz}05D4
pGgvtFm)
xY~d}x
'3VBd:
Nxu.2h
:.Tawo
K8>=,3
)q74J
bK:nk>
90Y+8Z
fBYdWmB
,2bFf~
/a)*P?
P$bQbn|n
HU{8hdB_O98
g f5l
}*o_:;
#md?W
XZ>#\50`3
+<Ppcu
`>CL'y
$YOO>JOx
rI~9TkD
i%W~L6
?HWP;]
oy|~J]_
Qp6<48
qF2^`+
sVcr;@
4L<%}_
o!p<:9
60^KPyo
/XRsg_k
-s$KkB
(%NK<x
R@ZmPGn
#2G(]]O0
=X^n47
.H{W.@
u%i4rI
l2S.#l
rs?F[F
x#,4&DY
<hSxV`B`?:+
"Q8ujLb
<3gBwu
q;0v-N
\1*J:U
;q!vvRI
59TZfj
R'a69s]
WsM9z"0
592s@zM
%$TLQ>;n
|xi>:
l~Zx,l^
tB{9<\
Kn|tng
3'(5-o
4KAYvMP
ClN#ad
I]kn2
=?[VV`
@]<L}2
^sdS,5
-edYW;$
m,Y>@Byr
R 9:02
-4$7Q_QV<
HX#*3P_
S/{L0_R
b;[Y-n
(WqFK~&a.
a.&M|ES"
G!4&|1t
]r"8cdf
lx&n;e
Y,Vu_d
kW a!Q/
3EU[>g
X|/kEI
QPZkx
#y$dV,
VP~m`{%
9TXj+)
_R,+"to
<UFkxp
wr&SwXo[
2-cotw
Q,`<1s)8)K
#L.8"
-BBD/Z9
/1u&F@|
t@@qex
L->U\I
]}9y.\
bn)e}lS,:a
B^$P^x
M7Hugo
~?qX#h
~&!itW
%HQ5s_
J@qlHF
#vI/AaT
G;V&xX
s={kezW
!_;pY
1\`4-b
yd3L,y
z"KF9MJ
+|o)O4
fZb~qq8
*')u~{`M
Kk8X-S
Caa=!^
%OFO6u
p+>YX~)U/
~'t(E-
t-40By$
]%]|`-
6ftqN
>=v>"K
n:g'dA
#(~A`O
i0S*,[
@=6klo
(`FQY5
^P_:IOu
Q>dOh"
V"=!I;
YZ hkr
>w0FnV
jyjR]y
`TQNZn(:
Uz6?E-
QRN=dR;/
s$wdHH,F)
%rt&:s2}
LxD##(J
h @&I
RP.abH
Ml=JBY
,8CFm
})yia7_Y
l >XTEx
qUNY/E
!-HI0>j
llTy<Es
$II05L
>$[Y/|
D|m$R)
]/F_dH
%bJ@{O2Zmzq4
,eoE *
IT8Y]O<e
b(\"Rs
Z~G;c$x
i<nW[0
N+eB?a
I ne>7.
%]w[XW.
QVbm%H
[^t6~*
xa(^KY`P
_Eb <,
W(uvCs_a'f
HpbPH+x
"G]>?WE
cWW#Se`
3O~XM\
Hw9JLJ
PQ*uE2
d@#Nrh
lehuinB
MZjPpA
k[l]7^
]n*L"H.
n/R~_
ho$]M _G@
hXoa$&u
IyPf(4
U`LHQ>M
L_3ytj
j9I|n%V7L
d/4_I-
tl5d'!
af3(_
gx_6:DAE
WGSclw
q !)8a
R@^CvQe
%U<-2U
y@@"nkTpI
N"O*5s
NJHw!M
=PiVb2h
{bZ/y
J6YlKP-*
c?N&aZ
ubFIfg
D%F]vt
iAgU}a
wzW>@
G*B:{p
"ahj*
G-#!*PW3?
huKwc.,T%(
nElKBB
#DtjMi
j:dV%5#
H^#qL"'
!u/]?m
~)1>C)'
o~BnrV
zlH++kL
!ISc5A
^uTY%9
!y c$=Y+
!T!EC6
_}l~'P
+[|^^/
<-[K5l
k.mySn
^7-mmuN@WGP
k<8p4M)g
\eS?Yi
aLb5?`
qT0Nz:
"cV8y'"mE3
lsF3K#
96yHm3
9OmTL
}.julR
P[TeM9
Yni>ce
4zJ*"k"
oD\aa$
Lv]\9g
BHABY~Q
dI$`5Q
_Ig]j9
=[}_;q
g3%'gO
hU4xpoj
kx4E'/?
>GGRNC
/,i0'\
_Sc`XI
E'>_H'|
[Y*NL9i
GPqNAt
4`R {1
`mi/|'
Vij@L?
7{rM{$'
@X_?Zk
+;LD M*i
kJ>V.f
Ox4K}0
A^#)J2S
426>S{s
T%NxC
54q~4Z_E=L
@=:p{R%V
e!4R(t
{A4UOi
'~$UNi
"3#_?Hs5
k`A4q"
5=X7JI
Jh[+YX
J>$du..
T&{B"<6
nb/#w<.o
,k8>\6
6.92Y0_g
! uxT&oR
)&,"Xq
yHB2FR
8ni`Q?&
C+Hn\<
,2p<P$
b+VDus
#a]`<5
_!lr&V
-W1R1l
{u=i;8wL
[_=7eh
MB"&gn
J|<a~>
-4+8\)a
miV&,ejR
>([c+Y
6Pc"[b
0" G;=
*cTg8K?]
Lw5%[k
nEQ<j{
.Wh{+O
f!Eb_k
ztwWteQ
f!Eb_k
YgJe&]
euCRH?S0
/R|NHX
]RsF
]QsF
]RsF
WJsF
]WsF
WJsF
WJsF
WJsF
bOsF
KBsF
[asC
PJsF
bSsF
VSsF
v4.0.30319
#Strings
toolTip10
D84F4C120005F1837DC65C04181F3DA9466B123FC369C359A301BABC12061570
toolTip11
IEnumerable`1
EventHandler`1
IEnumerator`1
label1
panel1
radioButton1
button1
toolTip1
Microsoft.Win32
KeyValuePair`2
label2
radioButton2
button2
toolTip2
button3
toolTip3
button4
toolTip4
toolTip5
__StaticArrayInitTypeSize=6
toolTip6
toolTip7
toolTip8
toolTip9
<Module>
<PrivateImplementationDetails>
System.IO
get_IV
mscorlib
System.Collections.Generic
RecognizeAsync
Form1_Load
add_Load
radioButton1_CheckedChanged
radioButton2_CheckedChanged
add_CheckedChanged
add_SpeechRecognitionRejected
Engine_SpeechRecognitionRejected
add_SpeechDetected
Engine_SpeechDetected
add_RecognizeCompleted
Engine_RecognizeCompleted
add_SpeechRecognized
Engine_SpeechRecognized
Synchronized
add_SpeechHypothesized
Engine_SpeechHypothesized
get_Hand
Append
get_Method
DynamicMethod
method
Replace
btn_codyVoice
SetInputToDefaultAudioDevice
defaultInstance
get_Confidence
OpCode
set_Mode
set_AutoScaleMode
set_AutoSizeMode
RecognizeMode
PaddingMode
SubsetMatchingMode
CryptoStreamMode
CipherMode
set_BackgroundImage
get_Message
EndInvoke
BeginInvoke
Enumerable
IDisposable
RuntimeFieldHandle
GetModuleHandle
RuntimeTypeHandle
GetTypeFromHandle
Single
hModule
DockStyle
set_FormBorderStyle
set_FlatStyle
FontStyle
set_Name
procName
set_FileName
lpFileName
lpModuleName
GetProcessesByName
AddLine
SpeechRecognitionEngine
engine
ValueType
System.Core
get_Culture
set_Culture
resourceCulture
ButtonBase
ApplicationSettingsBase
RecognizedPhrase
Dispose
Create
CreateDelegate
EntryPointDelegate
MulticastDelegate
EditorBrowsableState
get_White
STAThreadAttribute
CompilerGeneratedAttribute
GuidAttribute
GeneratedCodeAttribute
DebuggerNonUserCodeAttribute
DebuggableAttribute
EditorBrowsableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
AssemblyFileVersionAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
get_Value
SemanticValue
SemanticResultValue
CodyHelper.exe
set_Size
set_AutoSize
set_ClientSize
dwSize
btn_Ref
btn_Off
set_Padding
System.Runtime.Versioning
FromBase64String
ToString
disposing
System.Drawing
Microsoft.Speech
ApplyPatch
btn_Back
AsyncCallback
callback
button1_Click
button2_Click
button3_Click
button4_Click
add_Click
btn_codyVoice_Click
btn_Ref_Click
btn_Off_Click
btn_Back_Click
button_Book_Click
button_Man_Click
button_Info_Click
btn_Reestr_Click
btn_Direct_Click
button_Start_Click
set_Dock
button_Book
Marshal
System.ComponentModel
get_Dll
kernel32.dll
ContainerControl
CryptoStream
MemoryStream
Program
System
SymmetricAlgorithm
ICryptoTransform
button_Man
resourceMan
TimeSpan
set_TextAlign
set_Icon
set_ShowIcon
MessageBoxIcon
Application
get_Location
set_Location
System.Configuration
System.Globalization
System.Reflection
ControlCollection
Microsoft.Speech.Recognition
get_AudioPosition
set_StartPosition
FormStartPosition
Exception
RadioButton
GetToAutorun
button_Info
MethodInfo
CultureInfo
get_StartInfo
ProcessStartInfo
get_Gainsboro
SetToolTip
set_TabStop
System.Linq
LoadGrammar
CloseGrammar
OpenGrammar
CreativeLoader
GrammarBuilder
sender
get_ResourceManager
ComponentResourceManager
EventHandler
System.CodeDom.Compiler
VoiceController
IContainer
CodyHelper
CurrentUser
GetDelegateForFunctionPointer
set_ForeColor
set_BackColor
set_UseVisualStyleBackColor
set_Cursor
IEnumerator
GetEnumerator
GetILGenerator
.cctor
CreateDecryptor
IntPtr
btn_Reestr
get_Semantics
System.Diagnostics
Choices
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
CodyHelper.Form2.resources
CodyHelper.Form3.resources
CodyHelper.CreativeLoader.resources
CodyHelper.Properties.Resources.resources
OpCodes
DebuggingModes
CodyHelper.Properties
EnableVisualStyles
patchBytes
assemblyBytes
Settings
SpeechRecognitionRejectedEventArgs
SpeechDetectedEventArgs
RecognizeCompletedEventArgs
SpeechRecognizedEventArgs
SpeechHypothesizedEventArgs
RecognitionEventArgs
get_Controls
System.Windows.Forms
set_AutoScaleDimensions
System.Collections
MessageBoxButtons
RuntimeHelpers
SystemColors
Cursors
GetCurrentProcess
MyGetProcAddress
lpAddress
targetAddress
set_Arguments
components
Concat
GetObject
object
lpflOldProtect
MyVirtualProtect
virtualProtect
flNewProtect
get_ControlLightLight
op_Implicit
System.Reflection.Emit
GraphicsUnit
get_Default
SetCompatibleTextRenderingDefault
get_Result
IAsyncResult
DialogResult
RecognitionResult
result
ContentAlignment
InitializeComponent
get_Transparent
get_Current
get_EntryPoint
InvokeEntryPoint
set_Font
AESDecrypt
button_Start
Convert
SuspendLayout
set_BackgroundImageLayout
ResumeLayout
PerformLayout
MoveNext
get_Text
set_Text
get_Arrow
set_TabIndex
MessageBox
set_MaximizeBox
InitializeArray
ToArray
get_Key
set_Key
CreateSubKey
SemanticResultKey
RegistryKey
System.Security.Cryptography
get_Assembly
GetExecutingAssembly
MyLoadLibrary
Registry
op_Equality
'$$method0x6000003-1'
'__StaticArrayInitTypeSize=459280
Incr52dibl52
Routd2
Gree83
Worl93
Wandee4
Incrf4diblf4
Ratin95
Committ5656
Armef6
Trib09
Otheaa
Employeca
Aliv6b
Aftecb
Coun0c
Domest52c
Pub62ic
C22inic
Ge7ne7tic
Affo7ad
Pdaoceed
Photogedapheed
Nak6fd
Boyf74iend
Met6aod
Credi1e
Int1ens1e
Elsewhed3e
Performac0ce
Da86ce
Di8fea8fe
Stru9696le
Sabpreme
S58me58ne
Gu9edel9ene
So40eone
Re28tore
Eb7posure
Pd8rase
I5fte5fse
93efense
Pcdopose
Sepd5rd5te
88ducate
4dlate
Dafstrafbute
Sea6ve
A5e5erac5eive
d5mpressive
Int01.exe
Workshobf
1droof
33unning
Exibcting
Photograe0h
Depech
B28nch
A1athough
Quar20erback
Net6eork
Clinic80l
Locd1l
Actu68l
Origi79al
Id4eal
Add2ft2fonal
Pra3nca3pal
Lf2beral
70atural
Bedr8d8dm
Pris13n
Sb4vb4n
Sc8c8n
Vete61an
a7hreaten
Ch26in
Main9cain
10aptain
O7aigin
Explanat79on
Exhdbbdbtdbon
Assoc7dat7don
Ref1ation
32onsideration
Ref2son
Pho12o
Quart70r
Advi02er
Lo45er
Sect6er
Weae3her
Lcbter
Sb4pporter
Scbricbs
Int01.Aliv6b.resources
Int01.Nak6fd.resources
Int01.Properties.Resources.resources
Int01.Appcdoximately.resources
Int01.Properties
V38rsus
Assig19me19t
Thb0oat
Tar9bet
29ocket
Lb0ght
Res17dent
Reaaort
Cobasist
I17dex
Le21acy
Eme68gency
Id87ntify
a7nergy
Cons98an98ly
Immedia82ely
Ul53ima53ely
Appcdoximately
Necess59rily
b5ecretary
Possf7bf7lf7ty
D4aputy
WrapNonExceptionThrows
CodyHelper
An intelligent virtual assistant designed to help users solve various problems and answer questions in a quick and efficient manner.
CodyAI
.Copyright
2023 CodyAI. All rights reserved.
CodyHelper
$61c252ac-95ef-485b-9f93-c15590f87ca8
1.0.0.0
.NETFramework,Version=v4.7.2
FrameworkDisplayName
.NET Framework 4.7.2
3System.Resources.Tools.StronglyTypedResourceBuilder
17.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
17.5.0.0
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3ahSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPADPBj
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
+iCCPPhotoshop ICC profile
c``2ptqre
> v^~^*
0,IDATx^
Y[7^_q;
kRyoD}
eZ=*PfR
#v]$og
._E]U=
\.@kY,
U\{y!:
Osw6Z+
LK^?S(
MeIh.g
u]Cmu#R
}Vq5Rs
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
+iCCPPhotoshop ICC profile
c``2ptqre
> v^~^*
IDATx^
]#w?
_^=F~q
+OEWWd7
_Ef_.'
YG_6ps
&:`(8t(
9dlD0]
#U.k9AR
9]!/LxWB
/.:$;wl
0^g!v3
rH7/Gx
6h-Z?-
|QIc>p^D
+!a/HT
H@>Ed&
):"D0\
uAF&HOG)
yqLxv~
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATx^
q4Ho3@
|.:Pec
n|[5CT
*=\eS)
}AU2`qB
qL<6z?
DYouIE
}&=&oS
Wy4"|[
Dj5*&H|
!l,W=]?
j7h8RL
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
"AQ2aq
35Ubrtu
$%4CSTs
s4yKl!n)(
+jmOIuo
,&-%5W
}N5N*Z
q*)<1ca
ORt"bV
">[0j0$M
}N5N*Z
";)JR,/
1#;&2$
*hP6C'
%IJTwi
itF_BP
s-5xn8
]j{\GT
|%!JBPG
o {0?5=
dGe)JE
T#6\r"[q
*hP6C'
`I XX[
RH>ldZ<6XL
:.E}ge
%IJTwi
871&Zf:
txk,qT
rR/s{_
TIB4w8
)$62-
N.ufJQFl
l#3TP.
o!ED!ZI
pF[yleZ
OiaRxJ:
j<)|!%
;P+LkL
c=Nfq=P
`PmjD9
GqYz,W
g^tl]v
mo2^KJm
]]qtsLd
Xa#CM$\$%
ROwkJA
)&))v9<
XZ^`OQ
uj/ptC
{qRuj)
-GrSnF
]JCAg{,)[_b
Pe89{c~I
dXonxK%W
NLjE+/A
thPm-%
Kq=MAp(
regN!G^
)&52dH
@Tj5^%u
$>Q&>f
Tir]PBJ
vPq0_J
lOgn;Q
7}+Fjck
*X"eRV
fAegZ,
Z`3I:
qykC)S
&k$ E|
yVSqb&CZ
SAiqaD
~\vj-e
r5ubZ)
F5s-Jy
6xCytGLX
BRKKAkY
U)JS46
c?,V\ui
k[juGR
jh-.,(
0U}OL2=Q
ruubY)
1UYn0%1
R!H[.&3
O`s[kx
m8^Dt6
[]n"f9RSN?7
>tC.=v
OK5v$M]6b
\r5>Cz
";Kqm%
bgZ|w_
tK+)[AHeM
>tC.=v
\r5>Cz
";kqm%
bgZ|w_
tK+)[AHeM
d-MEj;
|&<i,Il6
(rDv^C
93"WaH
[eo)id(
"A2[K.
!&T ]At
%.vaq4
]*\8hcd
L5x<X3
[<Av,
_ee+HR
0z1ISjB
,uw-j q
=rzvrC
mWTcby
Wh)ED!
JdyUn$
i:hCd^
FR*2)S
a=K0Uj0
R@#p@8
?N* :+
G_%AX
yJ6CI=
z=&50>
US]zMeJ
0SVR_N
HjsdTg
u[q|LT
p,\AHV
,;WKk@
8TZII$
Fn-R,*
8kwcSCXX
IXX!av
2H`25<
xP%HuH
G!bG>X%/
,H*>nX
5xZtL4
J=>=J$
WsH+!:
k:e*.]
B.l9nI
MVm"JV
V\qN/)
kCkPyl
6e995eJ
L?ZTxj
kZ"Cer
=+Rzno
%LBJjN
P=9M!2R
"uFjn9
a2fs`M
p@RnTN
g6e995eJ
L?ZTxj
^RT/ct
x0+bfZf
06Zm|@
H>Y6%(
Cp#bfI
U)yf$D
*nM~MN#
3V}m&l
Z(SO-)
)AJHRT@
oF9}P=
m8ZQyv
=2V_.VR
in=FjWB2
Hh)(BR,
.Hi=N}
h> -6?
m7*>l;
4i"H2ulG6
|@Zl~1
hq CulN
j)ZPwe
IqV$r6
K%R`45-I*
-3:ld\b
c|#M.Ur"h
\zc41*E)
Bu;8U
SoS*r#
pMC0C9
Pd69!D
RR{.!]
TRg7pl
I2&Vnc
fSjn\gn
/Bs*S$
uo%,BC@
OekEr=J
sF\S0*
XLzJ:{
t!AhsHIRV
uH}iJT
JV\H+&
/3ulyE
U<?'z?
CEni#R
"-BCs)Q
YX~4#A
hr=K&j
)%ZS`v
eHvE#]A
)+n;-4,T
1A#-Tk
%rn@'O"
Zm=!Ak
u/qHql]h
\salUL
JIu~@H
U";-?e
{)/%@z
l?n3Hp
!;'rfW
jMJmIA
mzou):u+P
OybM=/
+'pOv7
=Ar3/-
WR[5z{d
Kijnb|V
RW%eNH_{
;OHs`5(%
qQ!IzH
\jTujm
8N}}OiX
AO lv6
;yF9Kd
,mNbm:s
ChnI'`
m~H {`n
TR/%1d!
F gJ)$
Gk)G)A'HW
$Kq>RZB
Sn,f[b;
RAI)q(
TR/%1d!
XB*bGT
Xu*iA.>
6Wje+39@
t*so6$
5N,vjF
]gRkCr
rtl{V%
:+O-h3
Q/uodECe:x
e[).jM
"dz) ,
e:GSKq
SsbG#o
mN5!Qi
B^)y.8
63HEJD
SZs0Dh
/)AHZR6R
pFNbG5I
Ds*PR@O2
.="87K
, I)PRI
H'rnI$
mN5!Qi
]0tI1c
NIuKPQYN
PRXz"B
*CqaUk/<
!JiV#ne*
mAsxnL
'JSrnJ
@0f"|D
X:E>}#$
y*ZtYB
Qu70juR
vAIqeJ
ZYe+RJ
vEaP'J
R{)!CN
&Z8nj]
[:<qYFS
Z H3lr
lk{05=
nIKb`O
(!JOe$(i
iRcIu$
\DgJT.
,uo.IZ
X>dz{t
Riu6Y+B
`SdH}s
"]OF-u
LXJZvbx
mQhQ^r
Ov#aF;
iBXa!
$-(maiq4
2Uis T
R%JpZ)
uTxJk[
5Nuu(kTy
/s_p$d
d}Tz+\
cAb>d
W%I$zR
-.-eIPIR
2UZmN_
fBvvioI
c{\non
Qe5-oV
}in+_Z
}fey.+
q*RHlX
Rf;)Jc/3
x(TP,*
?#.-b$
KiH-SY
mKq1z<VS
*.*Dv\_
uN-N*Z
.3+qkQR
G2ut7m
vmj,gd
nOm{XcF
f{o-i*
4R{L:<7
Z&FvSkP
U6IyDj&
Sd*]-Nj
*A[jP>Y
Df*opP,
e>U6<4;
**$,tg
mjQ!6'
j*Qvb6wK
TJTbK,
b9bW7-
iBnw:4
/HX*[`X
hUj[M7
\hHm\D!O
MqJhqOe<
f)OLrt
eJluv6
!ED!ZI
@RI( o
s{n1WXEB
!BAEF$
FSjMEn
%"u>E^
*he(j@
KoLRt*b
L#3TP.
u^(f3M&LGV
S>eXF0
)&))v9<
V'?&;kR
"DrK&4
G+mHJciQPF
9*f+KW
qHy(!ZHQB
;@+LkL
c=Nfq;P
GqY~,W
g^tl]v
mO2^KJC
"DJ&Er
[+Ai+R
uj/ptC
:@#|Ey*
SPbK/%
|=E\E!i<K
Uc ;&|Q
Ie&"gT
nk.Lar#
mo2^KJC
I7)'b6
-m6$nk
oS9wO.
.T9"LI/G|
:rcR)Yz
thPm-%
6Jc-Q$
|X{CT
VRyc]N
sDyOG]a
"Z^wYO
xEBt%)**
V[HDIn*
Acd8l9A:
%JJI)=
PLEeFdIa
mZ-APQ-,8
y\nN'3<
&=5!A`f
Rh1&ILT
(MYHCM
TyHm!6
FDtNQUn
c?(V\ui
*(y/&X
V B0^.
0Ify\c
[]j"f9RSNH
wP%nK.
G3q~X.
PBuvWr
m+BH%%
UeM7T@@B
WeGMRt
SfdZgD
xjHujv
h)ak=
mH>+hv
!&T ]At
,uw-j q
=rzvrC
Jpj1s
-:&Kkv
%.~aq4
WdGr9u+}e)X
Hb;M>V
AuKBU?
JdyUn$
$7r.pr4
r#l1Uk+
,5S[/RT
U>=N3Ii
Y(Y%.$y
TXI{15K.
1O?5B]9
T#O\9P
Wz/blv<
K_WA@q
{[[kl0
US]zMeJ
TJny{^XU:UBGOj-I
${Dc'7
e)7QPM
!Q$6J[J
?[ZI@Q
YI>k[
MR^4}S
]aUSJNE
N31SQM
q@/rUqlLW
*uTau)
&>dqQ[
p]n32~
vLhf+hyB1d
CiC|@9
TwDe+J^(:
R/b/qm
$}}R4(Z
;8T3~d
RNaUx8
KkXA*=
npKdYjA
+~i8Yds
L5aT=
J=>=F$
qsz:`Bw
Bnl9nI
b z\xBKU
;9~N:H
JXTY [P
kr-3,9
Bnl9nI
Sd)E\K$
V/3Uz!
fNtkJR
J]P 3b
g6e995eJ
,AbmEk
wYv)p<p
6e995eJ
&i+b[I[}
'RHDya
Y#pJR@;
i=YmKiI
LLjcb,
TbSD<
I~~ajU^tg
Wc!L9Q{
)CmJikQ
.p-5k:
,/rl?I
XXmKuK
j)ZPwe
[nMyhP@
|xK)|3F
.Hi=N}
-!OH[d
*/ut Oi
\H\GYR
rx*XJV
az2uqr
`ybz{Q
Ge<I2\
`VQ<MJa
3MNCTI
*+-.]&Z
y,) zI
8o"neUn
j@vsMq*
AeJIH[
J]E2)i
pMC0CVh
"<I=*;n
GU)U:s!U
X6*i-k
R.7%@\
uH}iJT
.6&tym
>WRj<z
BZuo%,BC@
[p!AhsHIRV
eHvE#]A
fZu6lyJ|
e MI.9
Gqe#H]
hsk0js
KS}.;|7
xR$.kO
,{E$yW
-l5zeY4
M*]VAb
;NmK!)
"'W$eb|Q
}3>u8T
Tz|Zm=!Ak
`Je,Rs
i,R3$Zj
:dFH.2
zsN!i$
KiJnb|V
,5!kjx\'
k2'7Tv4Z,&
)hz|x3
l)56[q
tQ En)
qQ!IzH
G~yOFf
%l,r.R
P*3:z%3
Cj#rTJ
h hm6U
TJUui!>|"v
N*$)/C
Tw;[k`
20)4S!
9F]duqI}
Sn,f[b;
]gRkCr
rtl{V%
wOSt*so5
T_R]_K
]gRkCr
}k@R7C
Me7]CHs0
-P*s#Q
LpBL}+
%;%I;8;*
*:\mE*
@$oqb1?
6Sd,zF
LpBL}+
LhvI;7
Q)+CJ<D
Tjwjtb
\qEk=h
ViUjm:
ud8),=
y*ZtIb
3NPau5
Vchb,$
Swo:t
S}r%Qg
l)\*|Mg
l%+RT7
)OR:3t
%>3LS_j<
]#4Qc"
CmIuJ>`
G#cy1>N>@
)OR:3t
%>3LS_j<
K0"}Fd
AIZA>'A
km[wbS4
17=iV`
?SHxoX
VKkJny
~+O()+AX
KBV*T
mQ(Q^r
$%:l5s>6
k/Jv'K
^HZ\RC$
{ROkqa
p+hq/qcZ
!T'kE=
]_ea[qu
e)AjPJP
%i:Wc`B
LC,FhS
jqj7*>'
X$:Uc}
iy!iqI
iT"nsc'
'evyn6>8
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3ahSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPADPB
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
+iCCPPhotoshop ICC profile
c``2ptqre
> v^~^*
2IDATx^
/^..\](f
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
+iCCPPhotoshop ICC profile
c``2ptqre
> v^~^*
B4IDATx^
\u$Cu?
K|_Cn]}
#^:rSG/
L^&fJr1
C1kK";
}jmYd
N}o3<$
GMbURa
jdU@n]}
'"#q6,
`,QBWZ
tL`ds0
nxr{a/na
~ _\:^
=sYS,]\
uk7{f)
JrU;_0}
$E0lwm
|zOrW?
>f^n]}
.U;wB
W~;[A;
[ga5Vv
`Q|,wc
0'|BV:
.*Hh:,Qep
FFCK]+
,~;w~+C
1U,>{|
5$I-<q5D5
5W2T~tD_{
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
+iCCPPhotoshop ICC profile
c``2ptqre
> v^~^*
IDATx^
_+Eia-
(-Dme)Zj*
''G)<<
"$&%":2
HOMGQ~)*
???kWW
8Wd>\]\acc
U@wG1tv
;}()+DiY
9`gg_$
?tv$A{[
>-}KR^
w'X\=
33S363m
]1G`H$
ddfBL=
0v%Cgg
PTT4&>1
x@u3U`C8
hooGkk+
z1;W8~q
,))Cbb2r
&$$!#5
c)pvuL
Dm1IR_
ENl623
lkA[c;
>@lMnrk
u<Ao;3
zbZ2,-
OPOO
Ykm1g-A\
^h`O_Y
A%hoE+k}K+
fP:.PY
C]m%_;
Bk/%}O
~*@sO&:
h$'g#!>
qptpEpP
WUKGF#
Gyu7,m
N4p'UV
~)Mj!?s
RK[1Mw?^
PBORBu*(
IHG\V)Vm5#
:I%@sP
(-)Baq5
}$oI,
LLKBX`
Y<?tp,g,
'ZRq94Gs{
m,%jKv
oDUV'Js*QRP%
#>9}KfR
A~1?~:X"@b
]]H/H@a~"
*l|L0Mq
\X[9".&EZow
x_l}}}
3j1Ei+F
++GZ+H
d$%%I[
:#]..FRN
DXYY!2
:zKfR
O5KHAI6
~YTum8
qLT*J(
,dgg"WDN
Antivirus Signature
Bkav Clean
Lionic Trojan.Win32.Noon.4!c
Elastic malicious (high confidence)
MicroWorld-eScan Trojan.GenericKD.66443422
ClamAV Clean
CMC Clean
CAT-QuickHeal TrojanSpy.MSIL
McAfee Artemis!F742053CBDCE
Cylance unsafe
VIPRE Trojan.GenericKD.66443422
Sangfor Spyware.Msil.Kryptik.Vqeg
CrowdStrike win/malicious_confidence_100% (W)
BitDefender Trojan.GenericKD.66443422
K7GW Trojan ( 005a3abc1 )
K7AntiVirus Trojan ( 005a3abc1 )
BitDefenderTheta Clean
VirIT Trojan.Win64.MSIL_Heur.A
Cyren W64/ABRisk.JEAP-1762
Symantec Trojan Horse
tehtris Clean
ESET-NOD32 a variant of MSIL/Kryptik.AIPR
APEX Malicious
Paloalto generic.ml
Cynet Malicious (score: 100)
Kaspersky HEUR:Trojan-Spy.MSIL.Noon.gen
Alibaba TrojanSpy:MSIL/Kryptik.f4bac4f4
NANO-Antivirus Clean
ViRobot Clean
Rising Malware.Obfus/MSIL@AI.100 (RDM.MSIL2:dVw04GvwEHcNI1LjFvlHfA)
Sophos Mal/Generic-S
Baidu Clean
F-Secure Trojan.TR/AD.BadNetLdr.mquxr
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win64.Generic.tc
Trapmine Clean
FireEye Trojan.GenericKD.66443422
Emsisoft Trojan.GenericKD.66443422 (B)
Ikarus Clean
GData Trojan.GenericKD.66443422
Jiangmin Clean
Webroot Clean
Avira TR/AD.BadNetLdr.mquxr
MAX malware (ai score=84)
Antiy-AVL Clean
Gridinsoft Ransom.Win64.Sabsik.sa
Xcitium Clean
Arcabit Trojan.Generic.D3F5D89E
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan-Spy.MSIL.Noon.gen
Microsoft Trojan:Win32/Formbook.RG!MTB
Google Detected
AhnLab-V3 Trojan/Win.Generic.C5413660
Acronis Clean
VBA32 Clean
ALYac Trojan.GenericKD.66443422
TACHYON Clean
DeepInstinct MALICIOUS
Malwarebytes Spyware.FormBook
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002H0CDH23
Tencent Msil.Trojan-Spy.Noon.Wylw
Yandex Clean
SentinelOne Static AI - Suspicious PE
MaxSecure Trojan.Malware.121218.susgen
Fortinet PossibleThreat
AVG Win64:RATX-gen [Trj]
Avast Win64:RATX-gen [Trj]
No IRMA results available.