Static | ZeroBOX

Name	Virtual Address	Virtual Size	Size of Raw Data	Entropy
.text	0x00001000	0x0005639c	0x00057000	7.25135099938
.data	0x00058000	0x00002480	0x00001000	0.0
.rsrc	0x0005b000	0x0009c448	0x0009d000	5.38658740322

Name	Offset	Size	Language	Sub-language	File type
ECMQW	0x0005b938	0x00017000	LANG_ENGLISH	SUBLANG_ENGLISH_US	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
ECMQW	0x0005b938	0x00017000	LANG_ENGLISH	SUBLANG_ENGLISH_US	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
RT_ICON	0x0005b3f8	0x00000128	LANG_NEUTRAL	SUBLANG_NEUTRAL	GLS_BINARY_LSB_FIRST
RT_ICON	0x0005b3f8	0x00000128	LANG_NEUTRAL	SUBLANG_NEUTRAL	GLS_BINARY_LSB_FIRST
RT_ICON	0x0005b3f8	0x00000128	LANG_NEUTRAL	SUBLANG_NEUTRAL	GLS_BINARY_LSB_FIRST
RT_GROUP_ICON	0x0005b3c8	0x00000030	LANG_NEUTRAL	SUBLANG_NEUTRAL	data
RT_VERSION	0x0005b1d0	0x000001f8	LANG_GERMAN	SUBLANG_GERMAN	data

!This program cannot be run in DOS mode.

`.data

@h$p<p

Qemarefvcuw

VB5!6&VB6DE.DLL

wecqa2ra7nvcx

Qemarefvcuw

mk>/f"

0q# a{

ForeColor

BackColor

Caption

Codejock.Markup.Unicode.v15.2.1.ocx

XtremeMarkup.MarkupLabel

MarkupLabel

BorderStyle

Enabled

DataSource

DataMember

MSCHRT20.OCX

MSChart20Lib.MSChart

MSChart

Codejock.PropertyGrid.Unicode.v15.2.1.ocx

XtremePropertyGrid.PropertyGrid

PropertyGrid

Codejock.DockingPane.Unicode.v15.2.1.ocx

XtremeDockingPane.DockingPane

DockingPane

Codejock.DockingPane.Unicode.v15.2.1.ocx

XtremeDockingPane.DockingPaneFrame

DockingPaneFrame

Enabled

Codejock.SyntaxEdit.Unicode.v15.2.1.ocx

XtremeSyntaxEdit.SyntaxEdit

SyntaxEdit

Enabled

Codejock.SyntaxEdit.Unicode.v15.2.1.ocx

XtremeSyntaxEdit.SyntaxEditFrame

SyntaxEditFrame

eamwqrvcx

uemacvwqx

modReplace

Racfmcvexqwa

frmTip

Qemarefvcuw

user32.dll

FindWindowW

shlwapi.dll

PathFileExistsW

kernel32.dll

IsDebuggerPresent

VBA6.DLL

__vbaI4Str

KERNEL32.DLL

VirtualProtect

__vbaFreeStrList

__vbaErase

__vbaStrCat

__vbaAryDestruct

__vbaStrVarMove

__vbaStrCopy

__vbaFreeStr

__vbaStrErrVarCopy

__vbaStrMove

__vbaAryUnlock

__vbaAryLock

__vbaRedim

__vbaFreeVar

__vbaFreeObj

__vbaVarMove

__vbaHresultCheckObj

__vbaObjSetAddref

__vbaLenVarB

__vbaI4Var

ADVAPI32.DLL

CryptAcquireContextW

__vbaUbound

__vbaRedimPreserve

CryptDeriveKey

__vbaLenBstr

GetTickCount

__vbaRecDestruct

__vbaVarCmpGt

__vbaVarNot

__vbaVarDup

__vbaVarCat

__vbaVarCopy

__vbaRefVarAry

__vbaFreeVarList

__vbaVarCmpNe

__vbaVarOr

__vbaBoolVarNull

__vbaVarTstEq

__vbaVarVargNofree

__vbaCastObj

__vbaStrVarVal

__vbaVarZero

WriteFile

CreateFileW

__vbaSetSystemError

__vbaObjSet

RtlFillMemory

,8[|p:O

C:\Program Files (x86)\Microsoft Visual Studio\VB98\VB6.OLB

^ :{SyntaxEditFrame1

C:\PROGRA~2\CODEJO~1\ActiveX\XTREME~1.1\Bin\CO3356~1.oca

XtremeSyntaxEdit

}gSyntaxEdit1

DockingPane1

C:\PROGRA~2\CODEJO~1\ActiveX\XTREME~1.1\Bin\CO9698~1.oca

XtremeDockingPane

\PropertyGrid1

}\C:\PROGRA~2\CODEJO~1\ActiveX\XTREME~1.1\Bin\COA316~1.oca

XtremePropertyGrid

C_}MarkupLabel1

'#C:\PROGRA~2\CODEJO~1\ActiveX\XTREME~1.1\Bin\COB3F7~1.oca

XtremeMarkup

<ODockingPaneFrame1

MSChart1

C:\WINDOWS\SysWow64\MSCHRT20.oca

MSChart20Lib

mk>/f"

lblTipText

Picture1

Label1

cmdNextTip

chkLoadTipsAtStartup

LoadTips

DisplayCurrentTip

__vbaLineInputStr

__vbaFreeObjList

__vbaStrI2

__vbaFileClose

__vbaFileOpen

__vbaStrCmp

__vbaNew2

__vbaR8IntI4

mk>/f"

frmTip

chkLoadTipsAtStartup

cmdNextTip

Picture1

Label1

lblTipText

SyntaxEdit1

XtremeSyntaxEdit.SyntaxEdit

MS Sans Serif

SyntaxEditFrame1

XtremeSyntaxEdit.SyntaxEditFrame

MS Sans Serif

DockingPaneFrame1

XtremeDockingPane.DockingPaneFrame

PropertyGrid1

XtremePropertyGrid.PropertyGrid

MSChart1

MSChart20Lib.MSChart

VtChart

VtDataGrid

VtMatrix

VtCollection

VtObject

VtString

VtValue

VtInteger

VtBackdrop

VtFill

VtPicture

VtChartFootnote

VtChartText

VtTextBlock

VtFont

MS Sans Serif

VtChartSection

VtChartLegend

VtChartPlot

VtArray

VtLight3

VtInfLight3

VtAxis

VtAxisScaleBlock

VtValueBlock

VtDouble

VtSurfaceDesc

VtCLineItem

VtSeries

VtSeriesLabel

VtTextFormat

VtChartTitle

VtList

VtWindow

MarkupLabel1

XtremeMarkup.MarkupLabel

DockingPane1

XtremeDockingPane.DockingPane

Z`rl/}

a&#';>

(Kl6k~

r}!(Qi

L{*[3@K8

k|Jjnw%8

eDXAHF<

u.A.`B

Q:::$D

@5>Ie!

1>5H\b

9V 0?FhY

;hL_Uo4

7*~?6|

U{wM:

]HIPf/k

ovy/`q

6=77Qs

7 K V:]-

Vs1]s.a

ffLjjm'

@(f/

;8\O-r

6xLs=o

N:E=JwaH.

(j&jgU

@s1Yh0

a+rX/5_

f9*hnM

~N_3!gTO

}C3Vp(

sO{sNpO{

4/dJ,3

('`1c/

5Eo_.1

V&[COp

A0x{gG

0%fw1JY

b[p,Bg

$iUpGd

&/,sIz!

]c?"K$

_e+a84

Z.aVw^

fs=<sQ

Z4)$v9{h

Rcl(bc/

T-2?!xv

FJ13o9

hi)NV?*

}+AXZ#-d

1PuJ[;

WsA32#

H^m9CW

dPAVgnX

\#tG/z

x8N]\g%y

T|`6M(

5?,D6.:At

Y,&f*U

B<;*n/

^Cxoi`

V>M@dv

)#l#~sC\R

K~q`|=

yS*TZ3

?cx$Gi

[HUec";.Sw

h^)"K

/GwvbRD

s$8Gie

FHT_W$

)ept'n+

7RL_Of5t

cS*>zv7Ya

c_Y%+/

EP-\)+OE /

(`-X0n}I

,>Uv~~

$F?UC"

+3e 2P

B433h-

3Fq"&_

rf-*;c+

k1oEN?

9QXb@j

w?1o)c

XGyTE>

R9 Nh[

_v{' B

hN4}pK

@]:`*qGYuj

lWV}U!P4

v%.AD0*F

Fw|{'}

BX@8p~

o+&l4S48

Pqz<8g

{\f-$1d

Vv q0/

fggV&U'|7

yFS]8xB]?{

"W0I0

9@j!vI

k"wYp"v

/4?1N5

:k3Hgw

XC"y=N6

,Ka2DI

SE:f0d

\N"L57

Ge6q**

|Ap]@<

jZ=fg(/

UJlQV:

RS8L6<

JH5!bIQ!

+ZJW81

A(@c_I`@

Jiw!;4]w

^aM~Kb

k3W-`F

Acfd5z

0}2m\d,

BhCH N

9k>]dk

lxk-ql

rb6lig

^kg*-r

a-Y@D;>B

;?v%fO

l]!TSt

X,0{'H

2'85Ji

Iz?uVh

l[9k@n;+

scFB)\N

%8V0N9

.y^D[L~

3~}pp2Pq?]

Xp>ac4

Oqjfys

PkC#1j

>N[P3|

<2y>`w

x:S1,W

h5K,qBPv

6rtvkhA

Wcfj?yP&

BL&0}3}2%!

&bs^yj+

IV7!<Zm

WJa=YG

QhLf_o

3 |%6I

*YUl5&

)>t[c

Sl0d {

HR{j9s\

MYwidm<A!

5 V$~n:\

GTdQMz:!

~qVWjG2

'Nf`%p^

$k3B]y

`I?L?

d^4&pS

kobUPN

w-_a"s

>'eQCe=.L

+s&>`>

\4;B;w

Bi+25U

,N/@q)

RN>#|H

kr;xy

T3X)VH'

DVbu0(

8)x%`D

;S7G,=

i|`:W&I

55kO|_

7=(pg?Z

M!L%a8

F_xNAK

W\D"*

?l/DPf

@6Nw6OM

D'6MbW

tkf07q

Z7/N!2L{

4#gd%Z

Ai|hVCAUQXvJ2c5fHowC0uT0rveM{l47RrDwCP85yqYvL|gYheGlOrE1iDQ8spA17b6PQkPgqYVZvQw9AZ4qkKS4lpd59rF4P9qIO0GKRffFTYkkFJeHuvSL|{R2TROFxZLVPnncJLTfuN5pLL7Qbx5Gl{Se9Mx79xdvgK1ms4ujO8uKUwK5{psMS6cRlfoNyX|YwVjX3W9YH0njwShMYR9uB|GsO0lodeF1VKCbKAEOcCvusoYrkNSkBH7UOY{OgYTsoP51QBdwdzzbFGXsvXERTjn{fYkCs1zS8Upb|qinsHZjw10Q4n9QZJy8||Ut5zkRDjTxZSDuL3lUHRK|yTPkHTht{vDoZG6IP2FMlseleJ3KLG6r6CTWG8Gm{6M5ycCXYNTAsuQvT{CzrS|Hdyl2OPkkKLEfvhlSTTIvy7GAQHKmXrrv2Sl2vN|qg9{sHtt3BArstP9sJxgmc2o3RkqxYZmSIKPbA81swlnomTJm3imr5rNJhl{k5kOCGe9D5cu9AXRlMVPCZBvGPALnDlyg54nzoLG5WR8xEImpXHBjmTP59dxVB0uhE{MqK|AuNMiVXRbOburbWhGNiqN6eWiXsrUhb49{toX4fPcRBts5Hc7o40DNwn8wQ{6bsBulrY0nV8NNW7xeCet02TbyokOdoeIETqtpcQvkhpYop6mvQs9VrRM36EA|tdbBYFJJA2GLf5IxXnqJ3Kkw6KBxMwrvUrBpkF2JXJinvBEMq8rHbOvTzCOIjdDQfxSkSc7rtbQvv0UKTlITOTu51CLGOFeB72dsX4wsehp7{HUwIkJP7G809tfhGudXwpCC7XXMh9Tcbf2hDMSeBDn9wAG8Oj4WI7mCDK690D1lycr5kWbwpABAEM{AbpDY0L|{nCBCxlVLMFBCgGHdU9dYA6Ov53ExehFMDG8pDkGkM44sdtOjYIe{ukie4ps5ehZT8Mu9Y0We6Vq{DEBbZyU8CMylH|B13HPQfkeKXMA0BzcTTfNFSvWEyeH1qxY7M6J51Vek

\G _#^

F_8bYT

._rHL#

Os@05q6

&A(~iU`lx

W*}mtM

%[%C6\

z$fg%0

l$hKA

8?5SMD

'lW2|a]E(

=K[)A'

n8ow;

?(SLCeT %s

`"~+OU[p

9S6"BC

vOHQji

NkVB+X

(Aqgy

Uhg+p}M

`IB{#F

%uK@PP

.8hWnt

,_DyPd

Ea&4&bXH

RX>A:e

:pRdkJ

cIqVb%

U_|xsp

h1N"+5

\~9q7.

WE;qg3`

S g@gr9D7

@P%12T

hz#^*)

'RFAP%

nOaF=?i

9M0W[E;

UP>Vy&q

NaBcWk

VFc,ERs<z

XwFp-WK

^=*b!p~

nM'x51-A

w~,Py<

evb2ul

`Xoh:E

%<V^v1.

K5Sc~-

Nuv>p}b

emRx5u)g'

h@xY9>

@dH2sI

=(k\A

iD;l9d<

Y{XgT~

-yxAv

(4zJ,7%

dV;~!b

:;)^ZP

89fd)f

|5\_Mlv

OyCs 9m

Q P|;C

hZcUKC

[Ug*'h

NEcO::

%hLZKr

3MoRJ%

4/I`oJ

v!DIYiW

|r{X$#

9vR[X:DQ

>l~LzD7

P:)ddOT

AYK]C0

15;6&{

>7%0y)

"]Fm|N

!b"bv

4`S[S1F

E1&-{_

GU2`yY

2vkGLR

M!]V3f

~/zN~q

S`}$z"tP

E#tB&|

kt)"O)

-<}c)j

.lfX}/2l

rM"R@5r

NB|g(4

hQ,<CH

;QONCw

k]6%:#>{

/L=C`.%

g4tr/g

W;jRz(

2e,V#8

>43d$

/_itwW

*5Y I\

|fv8Il

\U~J}0

x6I8F

58W65%8W6

zJizEau

X_PQWR

Xa>N[W%(3

?3YpN

nb'3R&

#=1bk |_|

V~l4Cd

?Hi|:S8

=~g8i

K<A0l*m

u[D6g3

e&Y1VAC

V[5:SF

LWyM9g-

%v Nla

MV\I\h

x/R; "I

vI%?y=9

)/S?m<

"}#tEr

xk*4:/

8ZXql|])

8fo6.q

O$yh!c

PB/()

EVKyKI

N/BqS;

g1dKkzUo8}

uZaB@q

3h#r7|

yyYXFi/

=nE]ML

+yXTM@QL

UA`.mg

Em,z0]

kWvbF

?%}i._^

YYQ}!g

c1$UH`

5!W6T.-

>2{O55

u;AZmb

Ovc5!.

u]Tkq+

!FcD&?

ZYGh%t

" d394

$y'}OUx6

'm*?7E

JT?bj_]4

;F?ZM!=`x

Ec5`Uj(

e5V?n6

H?F#'U

)Aco 5*

3%PM8c

fZniH7

&w-ek!

r3;GDv"Y

Qr`bR>

2S{d/t

<a l!&

\jj$T-

ez MAK

q1@@m/

]0L=T7

>/"t-E

GQvOf;~

I}|vz0

m'AmsFS

H9~V'z

nh 'K]

#[yo%0=

f!8kZG S

hR7R@;|

MSVBVM60.DLL

KERNEL32.DLL

ADVAPI32.DLL

CryptAcquireContextW

CryptDeriveKey

VirtualProtect

CreateFileW

GetTickCount

WriteFile

RtlFillMemory

__vbaStrI2

_CIcos

_adj_fptan

__vbaVarMove

__vbaVarVargNofree

__vbaFreeVar

__vbaLineInputStr

__vbaLenBstr

__vbaStrVarMove

__vbaFreeVarList

_adj_fdiv_m64

__vbaFreeObjList

__vbaStrErrVarCopy

_adj_fprem1

__vbaVarCmpNe

__vbaStrCat

__vbaSetSystemError

__vbaRecDestruct

__vbaHresultCheckObj

_adj_fdiv_m32

__vbaAryDestruct

__vbaObjSet

_adj_fdiv_m16i

__vbaObjSetAddref

_adj_fdivr_m16i

__vbaBoolVarNull

__vbaRefVarAry

_CIsin

__vbaErase

__vbaVarZero

__vbaVarCmpGt

__vbaChkstk

__vbaFileClose

EVENT_SINK_AddRef

__vbaStrCmp

__vbaVarTstEq

DllFunctionCall

__vbaVarOr

__vbaRedimPreserve

_adj_fpatan

__vbaRedim

EVENT_SINK_Release

_CIsqrt

EVENT_SINK_QueryInterface

__vbaExceptHandler

_adj_fprem

_adj_fdivr_m64

__vbaFPException

__vbaStrVarVal

__vbaUbound

__vbaVarCat

_CIlog

__vbaFileOpen

__vbaNew2

_adj_fdiv_m32i

_adj_fdivr_m32i

__vbaStrCopy

__vbaI4Str

__vbaVarNot

__vbaFreeStrList

_adj_fdivr_m32

_adj_fdiv_r

__vbaI4Var

__vbaAryLock

__vbaVarDup

__vbaVarCopy

_CIatan

__vbaCastObj

__vbaStrMove

__vbaR8IntI4

_allmul

__vbaLenVarB

_CItan

__vbaAryUnlock

_CIexp

__vbaFreeObj

__vbaFreeStr

!This program cannot be run in DOS mode.

RichW+

`.data

@.reloc

MSVBVM60.DLL

FRes.cDataFormWizardEnu

Resource

vb6de.dll

dfwizen

DataFWEn

DataFormWizardEnu

Resource

d:\sources\vb98\TOOLS\Bin\MSVBVM60.DLL\3

MSVBVM60.DLL

_CIcos

_adj_fptan

_adj_fdiv_m64

_adj_fprem1

_adj_fdiv_m32

_adj_fdiv_m16i

_adj_fdivr_m16i

_CIsin

__vbaChkstk

EVENT_SINK_AddRef

_adj_fpatan

EVENT_SINK_Release

_CIsqrt

EVENT_SINK_QueryInterface

__vbaExceptHandler

_adj_fprem

_adj_fdivr_m64

__vbaFPException

_CIlog

_adj_fdiv_m32i

_adj_fdivr_m32i

_adj_fdivr_m32

_adj_fdiv_r

_CIatan

_allmul

_CItan

_CIexp

dfwizen.dll

DllCanUnloadNow

DllGetClassObject

DllRegisterServer

DllUnregisterServer

stdole2.tlbWWW

DataFormWizardEnuWWW

S_ResourceWWWd

Resource

80,!>)()^czbfcb|njumfcw|es

zD~m`c}yg}{w

D)1$$72=c);?D{yc}cob{~^`c}yg}{w

:>86?m

#&)$8s

2/?6'"?.smP

wwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwww

oooooooooooooog

ooooooooooooooooooggh

oooooooooooooooooooogghh`

fffffff

fffffffffffffff

fffffffffffffffffff

fffffffffffffffffffff

ffffffffffffffffffffffff`

ffffffffffffffffffffffff

fffffffffffffffffffff

fffffffffffffffffff

fffffffffffffff

fffffff

PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGX

1 1&1,12181>1D1J1P1V1\1b1g1\2x2|2

3$30343@3D3P3`3h3p3t3|3

585@5D5L5P5T5h7p7

8#8(848K8h8

!This program cannot be run in DOS mode.

`.data

@.reloc

MSVBVM60.DLL

ards\dDataFormWizard6

VB 6 Data Form Wizard

s\vb98\H

HKEY_CURRENT_USER\Software\Microsoft\Visual Basic\6.0

#23000

#23001

EvWizard

Handler.ctlWizard

ID = -

nect As IDFExt

VB5!d"*

dataform

VB 6 Data Form Wizard

datfrm98.chm

DataFormWizard6

d:\sources\vb98\lego.32\MSAddnDr.Dll

MSAddnDr.AddInInstance

AddInInstance

d:\sources\vb98\lego.32\MSAddnDr.Dll

MSAddnDr.AddInInstance

AddInInstance

ComDlg32.OCX

MSComDlg.CommonDialog

CommonDialog

DataFormWizard6

IDFExt

ctlWizard

frmConfirm

frmDBPWD

modWizard

modRegistry

Localize

VB98Ide

CodeGen

StringFcns

VBCode

Collect

DirFile

Wizard

HtmlHelp

d:\sources\vb98\TOOLS\Bin\MSVBVM60.DLL\3

BuildDataFormExt

d:\sources\vb98\lego.32\vb6ext.olb

FCreateDataFormCodeExt

DataFormConnection

d:\sources\vb98\lego.32\msado15.dll

VBA6.DLL

__vbaStrCopy

__vbaFreeStr

__vbaFreeObj

__vbaObjSetAddref

lstSelected

lstLinkField

lstDatabaseType

d:\sources\vb98\lego.32\VB6.OLB

cboDSNList

fraTabQry

txtServer

chkTabQry

txtDatabaseName

lblStep3

cboDrivers

lstAll

cboSortBy

IHostWizNotify

d:\sources\vb98\lego.32\SubWiz.TLB

SubWiz

ISubWiz

IWizIntro

IWizSummary

IWizProfile

cmdLeftOne

txtDatabase

cmdRightOne

txtFormName

cmdLeftAll

fraStep

imgStep

cmdDown

imgStep4b

imgStep4c

imgStep4d

imgStep4e

fraStep8

cboRecordsource

lblAll

lblSelected

Label1

chkDeleteBtn

cmdOpenDatabase

chkAddBtn

chkUpdateBtn

chkDataControl

lblStep9

lblStep

txtPWD

chkRefreshBtn

UserControl

fraStep3

chkCloseBtn

txtUID

cmdAllNone

lblStep2

lblStep7

cmdRightAll

optBindType1

lblStep6

lbFormLayout

lblStep5

FIHostWizNotify_Caption

IHostWizNotify_CreateControl

IHostWizNotify_Icon

Fd:\sources\vb98\lego.32\stdole2.tlb

stdole

IWizIntro_Caption

IHostWizNotify_LocaleId

IHostWizNotify_LogError

IHostWizNotify_ShowControl

IHostWizNotify_ShowStep

IHostWizNotify_UIStatusChanged

ISubWiz_CanBack

ISubWiz_CanFinish

ISubWiz_CanHelp

ISubWiz_CanNext

ISubWiz_HostNotify

ISubWiz_Show

ISubWiz_DoBack

ISubWiz_DoCancel

ISubWiz_DoFinish

ISubWiz_DoHelp

ISubWiz_DoNext

GetDSNsAndDrivers

ClearLists

IncompleteData

IWizIntro_Heading

IWizIntro_Picture

IWizIntro_ShowIntro

IWizIntro_Text

IWizProfile_LoadProfile

IWizProfile_SaveProfile

IWizProfile_WizardSectionName

IWizSummary_Caption

IWizSummary_Heading

IWizSummary_Picture

IWizSummary_ReportCaption

IWizSummary_ReportDefaultFileName

IWizSummary_ReportText

IWizSummary_ReportType

IWizSummary_Text

cmdOpenDatabase_Click

SetVBInstance

SetFinished

AddButton

BuildDataForm

Kernel32

GetLocaleInfoA

GetLocaleInfoW

LoadStringA

GetSystemDefaultLCID

GetUserDefaultLCID

TranslateCharsetInfo

LoadLibraryExA

FreeLibrary

user32

LoadStringW

FindResourceA

SizeofResource

LoadResource

RtlMoveMemory

LoadImageA

oleaut32.dll

OleCreatePictureIndirect

lblConfirm

Image1

chkDontShowAgain

SetFormName

DrawIconEx

CreateCompatibleDC

DeleteDC

SelectObject

BitBlt

CreateCompatibleBitmap

OpenClipboard

SetClipboardData

EmptyClipboard

GetClipboardData

CloseClipboard

GetSystemMetrics

odbc32.dll

SQLDrivers

SQLDataSources

SQLAllocEnv

SQLAllocConnect

SQLConnect

SQLAllocStmt

SQLExecDirect

SQLFetch

SQLGetData

SQLProcedures

SQLFreeStmt

GetTempFileNameA

txtPassword

cmdCancel

lblLabels

GetPrivateProfileIntA

GetProfileStringA

GetPrivateProfileStringA

WriteProfileStringA

WritePrivateProfileStringA

advapi32

RegCloseKey

RegCreateKeyExA

RegDeleteKeyA

RegOpenKeyExA

RegQueryValueExA

RegSetValueExA

RegSetValueA

advapi32.dll

RegEnumKeyA

RegOpenKeyA

__vbaStrErrVarCopy

__vbaVarDup

__vbaFpI2

__vbaStrI4

__vbaLateMemCall

__vbaLateMemStAd

__vbaVarMove

__vbaVarLateMemSt

__vbaCastObjVar

__vbaVarSub

__vbaInStr

__vbaVarLateMemCallSt

__vbaLateMemCallLd

__vbaLateIdSt

__vbaBoolVarNull

__vbaVarLateMemCallLdRf

__vbaVarLateMemCallLd

__vbaVarTstNe

__vbaLateIdCallLd

__vbaLateIdCall

__vbaStrI2

__vbaFpI4

__vbaI4Str

__vbaResume

__vbaVarCat

__vbaVarCopy

__vbaNew

(__vbaVarTstEq

__vbaFixstrConstruct

__vbaStrToUnicode

__vbaLsetFixstr

__vbaStrToAnsi

__vbaSetSystemError

__vbaLsetFixstrFree

__vbaAryDestruct

__vbaI4Var

__vbaStrVarMove

__vbaFreeVar

__vbaErase

__vbaVarZero

__vbaRedim

__vbaCastObj

__vbaLbound

__vbaUbound

__vbaStrCmp

__vbaLenBstr

__vbaObjIs

__vbaExitProc

__vbaFreeVarList

__vbaOnError

__vbaNew2

__vbaAptOffset

__vbaFreeObjList

__vbaObjSet

__vbaFreeStrList

__vbaHresultCheckObj

__vbaStrCat

__vbaStrMove

__vbaInStrVar

__vbaStopExe

__vbaStrVarVal

__vbaVarAdd

__vbaLenVarB

__vbaAryCopy

__vbaVar2Vec

__vbaStrVarCopy

__vbaAryUnlock

__vbaAryLock

__vbaStr2Vec

__vbaAryMove

__vbaI4ErrVar

__vbaUnkVar

__vbaNextEachCollObj

__vbaNextEachCollAd

__vbaObjVar

__vbaForEachCollAd

__vbaI2ErrVar

__vbaLateMemSt

__vbaForEachCollObj

__vbaI2Str

__vbaPowerR8

__vbaVarVargNofree

__vbaVarNot

__vbaVarAnd

__vbaI2Var

__vbaVarCmpNe

__vbaStrR8

__vbaExitEachColl

__vbaStrLike

'DAddinInstance

AddInDesignerObjects

FMenuHandler

FWizForm

AddinInstance_OnConnection

AddinInstance_OnDisconnection

MenuHandler_Click

__vbaVarTstGt

__vbaR4Var

__vbaVarIndexLoad

Wizard

MSAddnDr.AddInInstance

frmDBPWD

Password Required

TahomaD

cmdCancel

&Cancel

txtPassword

lblLabels

Enter database password:

frmConfirm

TahomaF

chkDontShowAgain

Image1

lblConfirm

ctlWizard

fraStep

Open ODBC Database

fraStep3

fraStep3(0)

Tahoma

cboDrivers

Tahoma

txtServer

Tahoma

cboDSNList

Tahoma

txtDatabase

Tahoma

txtPWD

Tahoma

txtUID

Tahoma

lblStep3

lblStep3(6)

Tahoma

lblStep3

lblStep3(5)

Tahoma

lblStep3

lblStep3(4)

Tahoma

lblStep3

lblStep3(3)

Tahoma

lblStep3

lblStep3(2)

Tahoma

lblStep3

lblStep3(1)

Tahoma

imgStep

wwwwwwwwwwwwwwwwwwwwwwwwp

wwwwwww

wwwwww

wwwwwwwp

wwwwwww

wwwwww

wwwwwwwp

DDDDDDDDDDDDDDDDDDDDDDDDDD

lblStep

Tahoma'

fraStep

Form Layout

fraStep3

fraStep3(1)

Tahoma

optBindType1

optBindType1(2)

Tahoma(

optBindType1

ADO-Daten&steuerelement

Tahoma(

optBindType1

optBindType1(1)

Tahoma(

lbFormLayout

txtFormName

Tahoma

imgStep4e

wwwwww

UUUUUU

UUUUUUUP

UUUUUUUUP

UUUUUP

]]]]]]]P

]]]]]]]]

nnnnnnn

nnnnnn`

imgStep

wwwwwx

imgStep4b

wwwwwx

imgStep4d

wwwwww

lblStep

Tahoma'

Label1

lblStep9

lblStep9(0)

Tahoma

imgStep4c

wwwwwx

fraStep

Primary Record Source

cboSortBy

Tahoma

cmdDown

Tahoma"

cboRecordsource

Tahoma

cmdLeftAll

Tahoma"

cmdLeftOne

Tahoma"

cmdRightAll

Tahoma"

cmdRightOne

Tahoma"

lstSelected

Tahoma

lstAll

Tahoma

lblStep5

lblStep5(2)

Tahoma

lblStep5

lblStep5(1)

Tahoma

lblSelected

lblSelected(0)

Tahoma'

lblAll

lblAll(0)

Tahoma'

imgStep

wwwwwwwwwwwwwwwp

wwwwww

wwwwwwwp

wwwwww

wwwwwwwp

DDDDDDDDDDDDDDDDDDDDDDDDDD

lblStep

Tahoma'

fraStep

Controls

fraStep8

Tahoma

chkDataControl

Tahoma+

chkCloseBtn

Tahoma+

chkUpdateBtn

Tahoma+

chkRefreshBtn

Tahoma+

chkDeleteBtn

Tahoma+

chkAddBtn

Tahoma+

cmdAllNone

cmdAllNone(0)

Tahoma'

cmdAllNone

cmdAllNone(1)

Tahoma'

imgStep

wwwwwp

wwwwwx

wwwwwp

wwwwwx

lblStep

Tahoma'

fraStep

Link Fields

lstLinkField

Tahoma

lstLinkField

Tahoma

imgStep

wwwwwwwwwwwwwwwwwwwwwwwwp

wwwwwww

wwwwww

wwwwwwwp

wwwwwww

wwwwww

wwwwwwwp

DDDDDDDDDDDDDDDDDDDDDDDDDD

wwwwwwwwwwwwwwwwwwwwwwwww

wwwwww

wwwwwww

wwwwww

wwwwwww

DDDDDDDDDDDDDDDDDDDDDDDDD@

DDDDDDDDDDDDDDDDDDDDDDDDDH

lblStep7

lblStep7(1)

Tahoma

lblStep7

lblStep7(0)

Tahoma

lblStep

Tahoma'

fraStep

Open Local Database

txtDatabaseName

Tahoma

fraTabQry

fraStep2

Tahoma

chkTabQry

chkStep2(1)

Tahoma+

chkTabQry

chkStep2(0)

Tahoma+

cmdOpenDatabase

Browse...

Tahoma'

imgStep

lblStep2

lblStep2(2)

Tahoma

lblStep

Tahoma'

fraStep

Select Database Type

lstDatabaseType

lstDatabaseType!

Tahoma

lblStep

Tahoma'

imgStep

ooooooooooo`

oooooooooooooo`

oooooooooooooooo`

ooooooooooooooooh

oooooooooooooooo`

ooooooooooooooooh

ooooooooooooooooooh

oooooooooooooooooooogghhh

oooooooooooooooooooogghh`

fffffff

fffffffffffffff

fffffffffffffffffff

fffffffffffffffffffff

ffffffffffffffffffffffff`

ffffffffffffffffffffffff

fffffffffffffffffffff

fffffffffffffffffff

fffffffffffffff

fffffff

fraStep

Secondary Record Source

cboSortBy

Tahoma

cmdDown

Tahoma"

cboRecordsource

Tahoma

lstAll

Tahoma

lstSelected

Tahoma

cmdRightOne

Tahoma"

cmdRightAll

Tahoma"

cmdLeftOne

Tahoma"

cmdLeftAll

Tahoma"

lblStep6

lblStep6(1)

Tahoma

lblStep6

lblStep6(0)

Tahoma

lblAll

lblAll(1)

Tahoma'

lblSelected

lblSelected(1)

Tahoma'

imgStep

wwwwwwwwwwwwwwwwwp

wwwwwww

wwwwww

wwwwwww

wwwwww

DDDDDDDDDDDDDDDDDD@

DDDDDDDDDDDDDDDDDD@www

wwwwwwwwwwwwwwww

wwwwwww

DDDDDDDDDDDDDDDDDDDDDDDDD@

DDDDDDDDDDDDDDDDDDDDDDDDDD

lblStep

Tahoma'

dlgDatabase

MSComDlg.CommonDialog

datfrm98.chm

VB 6 Data Form Wizard

(BindingType

BindingName

(VBProj

(DataForm

(dfwConn

sConnect

(VBInst

(AppWizForm

AppWizClass

FromAppWizard

m_DataFormType

IHostWizNotify

ISubWiz

IWizIntro

IWizSummary

IWizProfile

ProgId

(Source

Module

Method

ErrNumber

ErrDescription

UserInfo

Wizard

StepType

CurrentScreen

nIndex

ProfileName

VBInstance

ctlContainer

nButtonLeft

nSpace

(sData

(MenuHandler

(Application

ConnectMode

AddInInst

custom

RemoveMode

CommandBarControl

handled

CancelDefault

} j@hD

} j|h`

}#j|hp

}#jPhp

} j@hD

} j|h`

}#j|hp

}#jPhp

} j|h`

} j@hD

} j|h`

} j@hD

} jthh

} j@hD

} j|hh

} j@hD

} jthh

} j@hD

} jThP

} j@hD

} jThP

} j|h`

}#jThp

} j|h`

(j@SWP

} j@hD

} jPh(

} j0hP

} jPh(

} j@hD

} j0h(

} j@h(

} j@hD

} j0h(

} j,h(

} j0h(

} j@h(

} j,h(

} j0h(

} j@h(

} j,h(

} j0h(

} j@h(

} j,h(

} j0h(

} j@h(

} j,h(

} j0h(

j PjXV

VVSWWVV

} j8h(

} jHh(

MSVBVM60.DLL

EVENT_SINK_GetIDsOfNames

__vbaVarTstGt

__vbaVarSub

__vbaStrI2

_CIcos

_adj_fptan

__vbaVarMove

__vbaStrI4

__vbaVarVargNofree

__vbaAryMove

__vbaFreeVar

__vbaAptOffset

__vbaLenBstr

__vbaStrVarMove

__vbaLateIdCall

__vbaFreeVarList

_adj_fdiv_m64

EVENT_SINK_Invoke

__vbaFreeObjList

__vbaStrErrVarCopy

_adj_fprem1

__vbaResume

__vbaVarCmpNe

__vbaForEachCollAd

__vbaStrCat

__vbaLsetFixstr

__vbaSetSystemError

__vbaHresultCheckObj

_adj_fdiv_m32

Zombie_GetTypeInfo

__vbaAryDestruct

__vbaLateMemSt

EVENT_SINK2_Release

__vbaForEachCollObj

__vbaExitProc

__vbaStrLike

__vbaObjSet

__vbaOnError

_adj_fdiv_m16i

__vbaObjSetAddref

_adj_fdivr_m16i

__vbaVarIndexLoad

__vbaBoolVarNull

_CIsin

__vbaErase

__vbaNextEachCollObj

__vbaVarZero

__vbaLateMemStAd

__vbaChkstk

EVENT_SINK_AddRef

__vbaExitEachColl

__vbaStrCmp

__vbaVarTstEq

__vbaObjVar

DllFunctionCall

__vbaVarLateMemSt

__vbaCastObjVar

__vbaLbound

_adj_fpatan

__vbaR4Var

__vbaFixstrConstruct

__vbaLateIdCallLd

Zombie_GetTypeInfoCount

__vbaStrR8

__vbaRedim

EVENT_SINK_Release

__vbaNew

_CIsqrt

__vbaVarAnd

__vbaObjIs

EVENT_SINK_QueryInterface

__vbaStr2Vec

__vbaExceptHandler

__vbaStrToUnicode

_adj_fprem

_adj_fdivr_m64

__vbaI2Str

__vbaFPException

__vbaInStrVar

__vbaStrVarVal

__vbaUbound

__vbaVarCat

__vbaI2Var

__vbaLsetFixstrFree

__vbaStopExe

_CIlog

__vbaVar2Vec

__vbaNew2

__vbaVarLateMemCallLdRf

__vbaInStr

_adj_fdiv_m32i

_adj_fdivr_m32i

__vbaStrCopy

EVENT_SINK2_AddRef

__vbaI4Str

__vbaVarNot

__vbaFreeStrList

_adj_fdivr_m32

__vbaPowerR8

_adj_fdiv_r

__vbaVarTstNe

__vbaI4Var

__vbaAryLock

__vbaVarAdd

__vbaLateMemCall

__vbaStrToAnsi

__vbaVarDup

__vbaFpI2

__vbaUnkVar

__vbaVarCopy

__vbaFpI4

__vbaVarLateMemCallLd

__vbaLateMemCallLd

_CIatan

__vbaI2ErrVar

__vbaAryCopy

__vbaStrMove

__vbaCastObj

__vbaStrVarCopy

_allmul

__vbaLenVarB

__vbaLateIdSt

__vbaVarLateMemCallSt

_CItan

__vbaNextEachCollAd

__vbaAryUnlock

_CIexp

__vbaI4ErrVar

__vbaFreeObj

__vbaFreeStr

dataform.ocx

DllCanUnloadNow

DllGetClassObject

DllRegisterServer

DllUnregisterServer

wwwwwwp

wwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwww

oooooooooooooog

ooooooooooooooooooggh

oooooooooooooooooooogghh`

fffffff

fffffffffffffff

fffffffffffffffffff

fffffffffffffffffffff

ffffffffffffffffffffffff`

ffffffffffffffffffffffff

fffffffffffffffffffff

fffffffffffffffffff

fffffffffffffff

fffffff

stdole2.tlbWWW8

vb6ext.olb

msado15.dllWWW

SubWiz.TLBp

BDataFormWizard6W

=_IDFExtWd

IDFExtWW

_ctlWizardWW,

*ctlWizardWWW

_WizardW

WizardWWX

__ctlWizardW

DataFormTypeConstantsWWW

iBindType

6BindingTypeW

)BindingNameW

fBuildDataFormExt

VBProjWW

PDataForm

CreateDataFormCodeExtWWW

PDataFormConnectionWW

dfwConnW

sConnect

O:VBInstWW

{wAppWizFormWW

AppWizClassW

AFromAppWizardWWW

^m_DataFormTypeWW

GetDSNsAndDriversWWW

ClearListsWW

IncompleteDataWW

'nIndexWW

cmdOpenDatabase_ClickWWW

SetVBInstanceWWW

cVBInstanceWW

SetFinishedW

`AddButtonWWW

hctlContainer

nButtonLeftW

1UnSpaceWW

BuildDataFormWWW

SINGLERECWWW

DATASHEETWWW

|MAINSUBW

0j?FLEXWIZW

CHARTWIZ

btADODataControl

0LTbtADOWWW

btCustomDataClassWWW

NMenuHandlerW

WizFormW

VB 6 Data Form WizardW

datfrm98.chmWW

SINGLERECW

DATASHEETW

MAINSUBWWW

FLEXWIZWWW

CHARTWIZWW

btADODataControlWW

btADOW

btCustomDataClassW

3 3$3,343<3@3D3L3P3T3\3d3l3t3x3

4$4,404@4L4T4\4d4h4x4

5 505<5D5L5T5\5d5h5l5t5|5

6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6

7 7$7(7,7074787<7@7D7H7L7P7T7X7\7`7d7h7l7p7t7x7|7

8 8$8(8,8084888<8@8D8H8L8P8T8X8\8`8d8h8l8p8t8x8|8

9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9

: :<:D:H:L:P:T:X:\:l:t:|:

;,;0;4;<;D;H;L;P;T;X;\;`;l;t;|;

< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<

= =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\=l=t=|=

>$>(>8>D>H>L>T>\>d>l>p>t>x>|>

?$?,?0?4?8?<?@?D?H?L?P?T?X?\?`?d?t?x?|?

0 0$0(0,00040D0L0T0\0`0d0h0l0p0t0x0|0

1 1$1(1,1014181L1T1\1d1l1t1x1|1

2(2,282<2D2H2L2P2T2X2d2h2l2p2t2x2|2

3 3$3(3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|3

4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4t4x4|4

5 5$5(5,5054585<5@5D5H5L5P5T5X5\5`5d5h5l5p5t5x5|5

6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6

7 7$7(7,7074787<7@7D7H7L7P7T7X7\7`7d7h7l7p7t7x7|7

; ;$;(;,;0;4;8;<;@;D;H;L;P;T;X;\;`;d;h;l;p;|;

<(<,<8<<<H<L<X<\<h<l<x<|<

=$=,=8=<=@=P=`=d=p=t=|=

> >$>8><>D>L>P>T>X>\>`>d>h>l>p>t>x>|>

? ?0?4?@?D?H?X?h?l?x?|?

0(080<0@0P0d0p0t0

1 101H1L1X1\1d1l1p1t1x1|1

2(2,282<2D2L2T2X2\2`2d2l2p2t2x2|2

3 3$3034383H3`3x3

4"4(4.444:4@4F4L4R4X4^4d4j4p4v4|4

5$5*50565<5B5H5N5T5Z5`5f5l5r5x5~5

6 6&6,62686>6D6J6P6V6\6b6h6n6t6z6

7"7(7.747:7@7F7L7R7X7^7d7j7p7v7|7

88P:d:h:

;(;0;D;H;`;h;|;

<L<`<d<l<|<

=0=4=<=L=

0$0,0004080<0@0D0L0P0T0X0\0q0

1 1(10181@1H1P1X1`1h1p1x1

2 2(20282@2H2P2X2`2h2p2x2

3 303<3@3H3P3T3X3\3`3d3h3l3

4"4(4<4B4V4\4

7$7,747<7H7L7X7\7h7x7

8 8(8,80848<8@8D8H8L8

8D9H9L9P9T9X9

>$>,>4><>D>L>X>\>h>l>x>

?(?0?8?<?@?D?H?L?T?X?\?`?d?h?

(0,0004080<0

2$20242@2D2H2T2d2l2|2

3,343D3T3\3l3|3

4$444@4D4L4\4h4l4t4

5$545<5L5\5d5t5

6$6,6<6L6T6d6t6|6

7,7<7D7T7d7l7|7

8,848D8T8\8l8|8

9$949D9L9\9l9t9

:$:4:<:L:\:d:t:

; ;$;(;,;0;4;8;<;|;

< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<

= =$=(=,=0=4=8=<=D=H=L=P=T=X=\=

> >$>(>,>0>4>

>8?<?@?D?H?

0L1P1T1X1\1d1

1l2p2t2x2|2

3 3$3(3,3034383<3@3D3H3L3

4 4$4D4H4L4P4T4X4\4`4h4l4p4t4x4|4

4<5@5D5H5L5P5

6 6$6l6p6t6x6|6

7 7$7`7d7h7l7p7t7

8T8X8\8`8d8

889<9@9D9H9P9t9

:\:`:d:h:l:

; ;$;(;,;0;x;|;

;8<<<@<D<H<

=X=\=`=d=h=

=0>4>8><>@>

?D?H?L?P?T?

0 0$0(0,000x0|0

081<1@1D1H1L1

2X2\2`2d2h2l2

2)383G3V3e3t3

9 949<9L9T9d9l9p9|9

:$:,:4:<:T:\:`:d:h:l:

;$;,;D;L;T;\;t;|;

<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<

=,=0=X=\=h=

d2t2x2|2

446D6H6L6

? ?%?L?P?X?e?p?u?

0<0@0H0U0`0e0

1(1-1L1P1X1e1p1u1

2$2(202=2H2M2

5$5(505=5H5M5h5l5t5

6D6H6P6]6h6m6

7 7$7,797D7I7l7p7x7

8)84898d8h8p8}8

989<9D9Q9\9a9|9

:%:0:5:P:T:\:i:t:y:

;D;H;P;];h;m;

;<?@?D?

0!0l0p0x0

1%10151`1d1l1y1

:!:,:1:P:T:\:i:t:y:

;!;@;D;L;Y;d;i;

4,40486<6

2(242D2L2P2d2p2x2|2

3 3(3,3034383<3@3\3x3

4 4$4@4D4`4d4

747X7|7

808T8x8

9,9P9t9

:(:L:p:

;(;<;P;d;x;

<,<T<h<

=@=L=`=h=l=p=

> >(>,>0>L>`>h>l>p>

<0@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|0

1 1<1@1h1l1x1

1(2,202L2P2T2`2d2h2x2|2

3 3$3(3,30343<3@3H3L3T3X3`3d3h3l3p3t3x3|3

3<4@4D4

5 5$54585<5

051Y1m1

!0:1w1

2c2v2|2

303S3{3

747=8j8

=h>6?|?

"0<0l0

8H8S8q8

='=b>t>

(0M0-1

7'8<8c8

8,9A9^9h9

;9;L;N<

4"5{5B6P6V6f6y6

7V7y78U8

< =%=^=

>#?L?i?

:';X;];

;"<K<h<

798W8t8

:X:s:{:

:7;P;U;];~;

<:<]<{<

061D1J1Z1m1

3?4M4S4c4v4

;T<b<h<x<

40B0H0X0k0

4H4V4\4l4

7$777i7

4Z5h5n5~5

7!717D7v7

;;<I<O<_<r<

<A=z=,>s>

2"30363F3Y3

506>6D6T6g6

<<=J=P=`=s=

?#?6?h?

2$2B2e2

7"8i8}8

2@3|314

5.6L6}6

020C0y0

1I1j1{1

272H2~2

5*5O5^5v5

9&:Y:h:

121a1h1

6%6T6[6

303_3f3

4$52585H5[5

2H3V3\3l3

0!1l1z1

0B142g2

3o4*5o5

=|>(?J?

3F4 5B5

>,>A>V>

090R0x0

7 8F8l8

1#2O2{2

2"4H4n4

8*9P9v9

90:V:|:>;d;

<=E=|=

0,1R1x1

1#2I2o2

5)5O5u5

8+9I9o9

Antivirus	Signature
Bkav	W32.AIDetectMalware
Lionic	Clean
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Trojan.Heur.VB.9m1@eWgPnPk
ClamAV	Clean
FireEye	Generic.mg.bc8dfcb4093f0bb3
CAT-QuickHeal	Clean
ALYac	Gen:Trojan.Heur.VB.9m1@eWgPnPk
Malwarebytes	Trojan.Dropper
VIPRE	Gen:Trojan.Heur.VB.9m1@eWgPnPk
Sangfor	Trojan.Win32.Injector.Vy7z
K7AntiVirus	Clean
BitDefender	Gen:Trojan.Heur.VB.9m1@eWgPnPk
K7GW	Clean
CrowdStrike	win/malicious_confidence_90% (D)
Baidu	Clean
VirIT	Clean
Cyren	Clean
Symantec	ML.Attribute.HighConfidence
tehtris	Clean
ESET-NOD32	a variant of Win32/Injector.ESYI
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	Backdoor.Win32.Mokes.aqct
Alibaba	Trojan:Win32/Injector.c5ce56ac
NANO-Antivirus	Clean
ViRobot	Clean
Rising	Trojan.Injector!1.C6AF (CLASSIC)
TACHYON	Clean
Emsisoft	Gen:Trojan.Heur.VB.9m1@eWgPnPk (B)
F-Secure	Trojan.TR/AD.SmokeLoader.cqjou
DrWeb	Clean
Zillya	Clean
TrendMicro	Clean
McAfee-GW-Edition	Artemis!Trojan
Trapmine	malicious.high.ml.score
CMC	Clean
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Injector
GData	Gen:Trojan.Heur.VB.9m1@eWgPnPk
Jiangmin	Clean
Webroot	W32.Trojan.Gen
Avira	TR/AD.SmokeLoader.cqjou
Antiy-AVL	Trojan/Win32.Injector
Gridinsoft	Ransom.Win32.Sabsik.sa
Xcitium	Clean
Arcabit	Trojan.Heur.VB.EF456C
SUPERAntiSpyware	Clean
ZoneAlarm	Backdoor.Win32.Mokes.aqct
Microsoft	Trojan:Win32/Casdet!rfn
Google	Detected
AhnLab-V3	Clean
Acronis	Clean
McAfee	Artemis!BC8DFCB4093F
MAX	malware (ai score=88)
DeepInstinct	MALICIOUS
VBA32	BScope.TrojanPSW.Stelega
Cylance	unsafe
Panda	Trj/Chgt.AD
Zoner	Clean
TrendMicro-HouseCall	TROJ_GEN.R002H09EG23
Tencent	Clean
Yandex	Clean
SentinelOne	Clean
MaxSecure	Clean
Fortinet	PossibleThreat.FORTIEDR.H
BitDefenderTheta	AI:Packer.AC1530001E
AVG	Win32:InjectorX-gen [Trj]
Cybereason	malicious.4093f0
Avast	Win32:InjectorX-gen [Trj]

Static Analysis

PE Compile Time

PE Imphash

Sections

Resources

Imports