Static | ZeroBOX

PE Compile Time

2021-03-16 08:30:12

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000e6e8c 0x000e7000 7.89877446478
.rsrc 0x000ea000 0x000005e0 0x00000600 4.15167049785
.reloc 0x000ec000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x000ea090 0x00000350 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000ea3f0 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
ddsf
ddsf
ddsf
ddsf
ddsf
ddsf
ddsf
ddsf
ddsf
yHsf
L<sf
v4.0.30319
#Strings
get_players0
set_players0
ThreadSafeObjectProvider`1
List`1
get_mnuLine1
set_mnuLine1
get_TableLayoutPanel1
set_TableLayoutPanel1
get_Button1
set_Button1
colTimer1
get_players1
set_players1
get_Part1
set_Part1
get_GroupBox1
set_GroupBox1
user32
UInt32
GetInt32
get_mnuLine2
set_mnuLine2
get_Button2
set_Button2
get_players2
set_players2
get_Part2
set_Part2
get_mnuLine3
set_mnuLine3
get_Part3
set_Part3
get_mnuLine4
set_mnuLine4
get_Part4
set_Part4
get_Part5
set_Part5
get_Part6
set_Part6
get_Part7
set_Part7
get_Part8
set_Part8
get_Part9
set_Part9
<Module>
PlaySoundA
GetWindowLongA
SetWindowLongA
SND_ASYNC
System.Drawing.Drawing2D
SND_ALIAS_ID
get_TYPEKIND
SND_RESOURCE
SND_PURGE
GWL_STYLE
SND_FILENAME
REVIVE
RectangleF
PointF
get_cmdOK
set_cmdOK
NORMAL
PlaySoundM
SND_APPLICATION
System.IO
SND_LOOP
SND_NOSTOP
ES_NUMBER
SND_ALIAS
Mario_KS
SND_NOWAIT
SND_NODEFAULT
PositionX
SND_MEMORY
DistXY
Dispose__Instance__
Create__Instance__
value__
ClearGamma
SetGamma
lpData
GetObjectData
ProjectData
FromArgb
mscorlib
SetNumberic
System.Collections.Generic
Microsoft.VisualBasic
Thread
add_Load
Game_Load
FormName_Load
frmMain_Load
frmSettings_Load
InvaderSpeed
ShooterSpeed
marioGetSpeed
badguysGetSpeed
ShotSpeed
startspeed
RowFinished
get_Checked
set_Checked
StartButton_Clicked
Interlocked
set_Enabled
get_pageTimed
set_pageTimed
get_lstTimed
set_lstTimed
get_mnuTimed
set_mnuTimed
add_Closed
add_FormClosed
frmMain_FormClosed
get_IsDisposed
add_GameCreated
Game_GameCreated
remove_GameCreated
m_FormBeingCreated
add_CellSelected
remove_CellSelected
add_BoardDrawed
remove_BoardDrawed
add_SequenceDestroyed
Game_SequenceDestroyed
remove_SequenceDestroyed
Synchronized
IsValid
Enable_Grid
Disable_Grid
charGrid
Append
GetUpperBound
RequenceFound
SequenceFound
get_chkEnableSound
set_chkEnableSound
LoopSound
PlaySound
DrawBackground
background
TargetMethod
get_frameBoard
set_frameBoard
get_tblBoard
set_tblBoard
TestBoard
RedrawBoard
Surface
get_Piece
AddPiece
FlatButtonAppearance
get_FlatAppearance
Distance
set_IsSingleInstance
CreateInstance
get_GetInstance
defaultInstance
instance
Reference
FindSequence
Source
Recource
LoadResource
GetHashCode
get_KeyCode
set_AutoScaleMode
FileMode
CompressionMode
AuthenticationMode
ShutdownMode
get_BigEndianUnicode
TabPage
FromImage
DrawImage
get_Message
AddRange
RemoveRange
CompareExchange
EndInvoke
BeginInvoke
LoadTable
HighscoreTable
IComparable
IDisposable
Hashtable
ISerializable
get_Visible
set_Visible
GetDouble
NextDouble
get_Handle
RuntimeTypeHandle
GetTypeFromHandle
MRectangle
FillRectangle
get_ClientRectangle
Single
get_mnuFile
set_mnuFile
IsVolatile
hModule
set_Style
FormatterTypeStyle
DockStyle
ColumnStyle
set_ShutdownStyle
ProgressBarStyle
set_FormBorderStyle
set_FlatStyle
FontStyle
RowStyle
MsgBoxStyle
m_Game
get_Game
set_Game
get_mnuLoadGame
set_mnuLoadGame
get_frameGame
set_frameGame
get_mnuSaveGame
set_mnuSaveGame
get_mnuNewGame
set_mnuNewGame
set_Name
get_clmTimedName
set_clmTimedName
get_FileName
set_FileName
set_FullTypeName
get_clmNormalName
set_clmNormalName
m_FormName
get_FormName
set_FormName
GetDirectoryName
lpszName
Combine
ChangeType
CheckForSyncLockOnValueType
SizeType
GetType
ColorAdjustType
get_lblScore
set_lblScore
IsHighscore
get_mnuHighscore
set_mnuHighscore
UndoIgnore
Picture
picture
get_Culture
set_Culture
resourceCulture
WindowsFormsApplicationBase
ButtonBase
ApplicationSettingsBase
get_txtIntervalDecrease
set_txtIntervalDecrease
get_lblntervalDecrease
set_lblntervalDecrease
get_tmrDecrease
set_tmrDecrease
get_lblToNextIncrease
set_lblToNextIncrease
get_txtToNextIncrease
set_txtToNextIncrease
Game_Close
Dispose
Inverse
Allocate
MulticastDelegate
alternate
DelegateAsyncState
DebuggerBrowsableState
EditorBrowsableState
Delete
DrawSprite
sprite
ThreadStaticAttribute
STAThreadAttribute
CompilerGeneratedAttribute
DesignerGeneratedAttribute
GuidAttribute
HelpKeywordAttribute
GeneratedCodeAttribute
DebuggerNonUserCodeAttribute
DebuggableAttribute
DebuggerBrowsableAttribute
EditorBrowsableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
StandardModuleAttribute
HideModuleNameAttribute
DebuggerStepThroughAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
DebuggerHiddenAttribute
AssemblyFileVersionAttribute
MyGroupCollectionAttribute
AssemblyDescriptionAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
ParamArrayAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
AccessedThroughPropertyAttribute
get_Value
m_ThreadStaticValue
AddValue
MinValue
WithEventsValue
get_txtBonusValue
set_txtBonusValue
GetObjectValue
GetValue
MaxValue
get_KeyValue
AutoPropertyValue
get_dialogSave
set_dialogSave
Find_Best_Move
Remove
IsVolatile.exe
get_Size
set_Size
set_MinimumSize
set_AutoSize
set_BorderSize
set_ClientSize
Serialize
Deserialize
ISupportInitialize
Randomize
System.Threading
set_Padding
NewLateBinding
Encoding
System.Drawing.Imaging
touching
Running
System.Runtime.Versioning
get_UseCompatibleTextRendering
set_Spring
GetResourceString
CompareString
ToString
GetString
disposing
numMoving
System.Drawing
add_BoardDrawing
remove_BoardDrawing
add_BufferRedrawing
Game_BufferRedrawing
remove_BufferRedrawing
startflying
GetWindowLong
SetWindowLong
SaveFileDialog
OpenFileDialog
CommonDialog
ShowDialog
Refresh
SolidBrush
VBMath
get_ExecutablePath
AppPath
get_Width
set_Width
get_lblWidth
set_lblWidth
destWidth
get_txtWidth
set_txtWidth
cellwidth
get_Length
get_cmdOk
set_cmdOk
AsyncCallback
DelegateCallback
get_Black
add_Tick
tmrDecrease_Tick
remove_Tick
TimerMain_Tick
BotTimer_Tick
Button1_Click
Button2_Click
cmdOK_Click
add_Click
mnuTimed_Click
mnuLoadGame_Click
mnuSaveGame_Click
mnuHighscore_Click
remove_Click
cmdOk_Click
mnuNormal_Click
cmdCancel_Click
mnuHowTo_Click
mnuSettings_Click
mnuExit_Click
mnuHint_Click
mnuAbout_Click
PerformClick
set_Dock
get_clmTimedRank
set_clmTimedRank
get_clmNormalRank
set_clmNormalRank
get_pageNormal
set_pageNormal
get_lstNormal
set_lstNormal
get_mnuNormal
set_mnuNormal
IsEqual
ConditionalCompareObjectEqual
revival
set_Interval
get_playerLabel
set_playerLabel
ToolStripStatusLabel
get_cmdCancel
set_cmdCancel
System.ComponentModel
TableLayoutPanel
get_clmTmedLevel
set_clmTmedLevel
get_clmNormalLevel
set_clmNormalLevel
get_lblLevel
set_lblLevel
get_txtStartLevel
set_txtStartLevel
get_lblToNextLevel
set_lblToNextLevel
get_txtToNextLevel
set_txtToNextLevel
DrawAll
LateCall
winmm.dll
SelectedCell
ClickCell
IsCell
SelectCell
HitCell
DrawCell
TabControl
IButtonControl
ContainerControl
ObjectFlowControl
FileStream
GZipStream
UnmanagedMemoryStream
get_Item
ListViewSubItem
ToolStripDropDownItem
ToolStripItem
ToolStripMenuItem
ListViewItem
System
Random
get_Bottom
bottom
set_MainForm
OnCreateMainForm
set_Transform
CreateTransform
get_Minimum
get_Maximum
resourceMan
ToBoolean
GetBoolean
ImageOffScreen
get_dialogOpen
set_dialogOpen
System.ComponentModel.Design
Check_Win
m_frmMain
get_frmMain
set_frmMain
get_TimerMain
set_TimerMain
get_mnuMain
set_mnuMain
Margin
IsColumn
ShiftColumn
DrawColumn
set_Icon
MessageBoxIcon
GetExtension
System.IO.Compression
get_Application
MyApplication
set_Location
get_tmrDecrease_TrayLocation
get_dialogSave_TrayLocation
get_dialogOpen_TrayLocation
get_mnuMain_TrayLocation
get_statusBar_TrayLocation
get_frameAnimation
set_frameAnimation
get_tblAnimation
set_tblAnimation
Destination
System.Configuration
get_chkRandomizeRotation
set_chkRandomizeRotation
System.Globalization
System.Runtime.Serialization
Interaction
System.Reflection
TableLayoutColumnStyleCollection
TableLayoutRowStyleCollection
TableLayoutControlCollection
ListViewSubItemCollection
ToolStripItemCollection
ListViewItemCollection
ColumnHeaderCollection
get_lblSpeedDestruction
set_lblSpeedDestruction
get_txtSpeedDestruction
set_txtSpeedDestruction
AnimateDestruction
Position
startposition
TargetInvocationException
InvalidOperationException
get_InnerException
ArgumentException
get_Button
set_CancelButton
RadioButton
set_AcceptButton
get_startButton
set_startButton
reborn
playerTurn
add_MouseDown
GameBoard_MouseDown
ShotDown
add_KeyDown
FormName_KeyDown
add_Shutdown
CompareTo
get_mnuHowTo
set_mnuHowTo
CultureInfo
SerializationInfo
animateMario
loadmario
movemario
killmario
loaddino
animatedino
movedino
add_KeyUp
FormName_KeyUp
Bitmap
get_lblSpeedSwap
set_lblSpeedSwap
get_txtSpeedSwap
set_txtSpeedSwap
AnimateSwap
SetToolTip
get_toolTip
set_toolTip
set_SizingGrip
ToolStrip
StatusStrip
set_MainMenuStrip
get_mnuHelp
set_mnuHelp
get_Top
set_Top
InvaderDrop
backdrop
set_TabStop
NoStop
celltop
FourAr
ProgressBar
get_statusBar
set_statusBar
UpdateStatusbar
ToChar
InvokeMember
ColumnHeader
MoveInvader
m_AppObjectProvider
m_UserObjectProvider
m_ComputerObjectProvider
m_MyWebServicesObjectProvider
m_MyFormsObjectProvider
sender
Binder
ResizeBuffer
FallbackBuffer
get_ResourceManager
ComponentResourceManager
ToInteger
dwNewInteger
m_Launcher
get_Launcher
set_Launcher
WSTRBufferMarshaler
addedHandler
FormClosedEventHandler
GameCreatedEventHandler
CellSelectedEventHandler
BoardDrawedEventHandler
SequenceDestroyedEventHandler
MouseEventHandler
BoardDrawingEventHandler
BufferRedrawingEventHandler
ShutdownEventHandler
PaintEventHandler
KeyEventHandler
System.CodeDom.Compiler
ExclusiveScheduler
get_botTimer
set_botTimer
IContainer
EqualityComparer
get_User
set_Filter
get_Shooter
set_Shooter
MoveShooter
BinaryFormatter
get_Computer
MyComputer
CheckGameOver
ToLower
get_Player
set_Player
player
StartDir
set_Anchor
set_UseCompatibleStateImageBehavior
set_ForeColor
set_BackColor
set_UseVisualStyleBackColor
uppercolor
lowercolor
onfloor
ClearProjectError
SetProjectError
get_lblIntervalMultiplicator
set_lblIntervalMultiplicator
get_txtIntervalMultiplicator
set_txtIntervalMultiplicator
get_lblBonusMultiplicator
set_lblBonusMultiplicator
get_txtBonusMultiplicator
set_txtBonusMultiplicator
ToolStripSeparator
IEnumerator
GetEnumerator
Activator
.cctor
Monitor
IntPtr
imageAttr
get_Graphics
CreateGraphics
System.Diagnostics
get_lblIntervalMilliseconds
set_lblIntervalMilliseconds
get_txtIntervalMilliseconds
set_txtIntervalMilliseconds
GetBounds
Sounds
Pieces
Microsoft.VisualBasic.Devices
get_WebServices
MyWebServices
Microsoft.VisualBasic.ApplicationServices
System.Runtime.InteropServices
Microsoft.VisualBasic.CompilerServices
System.Runtime.CompilerServices
System.Resources
Mario_KS.My.Resources
Mario_KS.Game.resources
Mario_KS.FormName.resources
Mario_KS.frmMain.resources
Mario_KS.Launcher.resources
Mario_KS.Resources.resources
Mario_KS.frmHighscores.resources
Mario_KS.frmSettings.resources
Mario_KS.StartMenu.resources
set_BorderSides
ToolStripStatusLabelBorderSides
GameModes
DebuggingModes
MaxEntries
set_EnableVisualStyles
get_ColumnStyles
AnchorStyles
get_RowStyles
get_tblFrames
set_tblFrames
GetTypes
get_tabHighscores
set_tabHighscores
LoadHighscores
SaveHighscores
m_frmHighscores
get_frmHighscores
set_frmHighscores
get_Coordinates
sprites
ImageAttributes
GetBytes
get_tblDefaultValues
set_tblDefaultValues
FindValidMoves
get_lblMoves
set_lblMoves
SoundFlags
BindingFlags
GetFlags
dwFlags
get_Siblings
get_Settings
LoadSettings
AutoSaveSettings
m_frmSettings
get_frmSettings
set_frmSettings
get_mnuSettings
set_mnuSettings
MySettings
FormClosedEventArgs
MouseEventArgs
PaintEventArgs
KeyEventArgs
SecondAxis
StopAtEndOfAxis
InvertAxis
FirstAxis
ReferenceEquals
get_Cells
set_Cells
aCells
RandomizeCells
get_Controls
ResizeControls
get_tblControls
set_tblControls
get_Items
get_SubItems
get_DropDownItems
System.Windows.Forms
get_Forms
MyForms
get_Columns
set_AutoScaleDimensions
Conversions
oldAnimations
get_chkEnableAnimations
set_chkEnableAnimations
IgnoreAnimations
System.Collections
MouseButtons
MessageBoxButtons
EndPos
StartPos
LoadInvaders
NumOfInvaders
RuntimeHelpers
players
get_frameMultiplyers
set_frameMultiplyers
SystemColors
floors
Operators
get_gameProgress
set_gameProgress
UpdateProgress
components
DoEvents
CheckPoints
TransformPoints
Exists
get_lblBonus
set_lblBonus
set_ShortcutKeys
numMovingBadGuys
loadbadguys
animatebadguys
movebadguys
killbadguys
numbadguys
RotateAt
Concat
AndObject
addedHandlerLockObject
OrObject
GraphicsObject
GetObject
TargetObject
MyProject
LateGet
OffScreenSet
backgroundset
get_cmdReset
set_cmdReset
Offset
floorset
get_Left
set_Left
get_lblSpeedShift
set_lblSpeedShift
get_txtSpeedShift
set_txtSpeedShift
AnimateShift
IRight
SRight
get_Right
facingRight
get_Height
set_Height
get_lblHeight
set_lblHeight
destHeight
get_txtHeight
set_txtHeight
cellheight
get_ButtonHighlight
Lenght
CheckHit
NoWait
op_Implicit
op_Explicit
EndInit
BeginInit
GraphicsUnit
get_SaveMySettingsOnExit
set_SaveMySettingsOnExit
get_mnuExit
set_mnuExit
get_Default
SetCompatibleTextRenderingDefault
NoDefault
IAsyncResult
DelegateAsyncResult
set_DialogResult
MsgBoxResult
Increment
InitializeComponent
oParent
get_Transparent
get_Current
GameCreatedEvent
CellSelectedEvent
BoardDrawedEvent
SequenceDestroyedEvent
BoardDrawingEvent
BufferRedrawingEvent
AppEvent
get_mnuHint
set_mnuHint
add_Paint
GameBoard_Paint
InvertPoint
set_Font
get_Count
set_ColumnCount
MovesCount
set_RowCount
cellcount
Amount
get_Shot
set_Shot
FireShot
get_script
iStart
Smallest
ReferenceList
refList
newList
get_mnuAbout
set_mnuAbout
SuspendLayout
set_BackgroundImageLayout
ResumeLayout
PerformLayout
DisableInput
MoveNext
System.Text
get_Text
set_Text
NumberText
StreamingContext
m_StartMenu
get_StartMenu
set_StartMenu
BackgroundDraw
oldRedraw
IgnoreRedraw
mariodraw
dinodraw
badguydraw
set_View
ListView
IWin32Window
set_TabIndex
set_SelectedIndex
PieceIndex
MoveIndex
ColumnIndex
GetIndex
AlphaBlendingMatrix
ClearColorMatrix
SetColorMatrix
MessageBox
PictureBox
set_MinimizeBox
set_MaximizeBox
MsgBox
CheckBox
GroupBox
colTextBox
NumbericTextbox
Mario_KS.My
SetColorKey
ContainsKey
get_Assembly
System.Runtime.Serialization.Formatters.Binary
Category
set_InitialDirectory
AddEntry
newEntry
IdentityAuthority
gravity
MySettingsProperty
WrapNonExceptionThrows
Mario Cart
Disney Inc.
Copyright
2011 - 2021
$32b7a984-595e-44ab-be0b-5642d2d40bee
1.0.0.0
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
playerLabel
botTimer
startButton
players0
players2
players1
Shooter
TimerMain
GroupBox1
Button1
Button2
tabHighscores
pageNormal
pageTimed
tblControls
cmdReset
lstNormal
clmNormalRank
clmNormalName
clmNormalLevel
lstTimed
clmTimedRank
clmTimedName
clmTmedLevel
gameProgress
statusBar
lblScore
lblLevel
mnuMain
mnuFile
mnuNewGame
mnuNormal
mnuTimed
mnuLine1
mnuExit
tmrDecrease
lblMoves
mnuHint
mnuLine2
mnuSettings
mnuHelp
mnuHowTo
mnuLine3
mnuAbout
mnuLoadGame
mnuLine4
mnuSaveGame
dialogSave
dialogOpen
mnuHighscore
frameBoard
txtWidth
lblWidth
txtHeight
lblHeight
frameGame
lblToNextLevel
lblntervalDecrease
lblBonus
toolTip
lblIntervalMilliseconds
frameMultiplyers
lblToNextIncrease
txtToNextIncrease
lblBonusMultiplicator
txtBonusMultiplicator
lblIntervalMultiplicator
txtIntervalMultiplicator
frameAnimation
lblSpeedDestruction
txtSpeedDestruction
lblSpeedSwap
txtSpeedSwap
lblSpeedShift
txtSpeedShift
chkEnableAnimations
chkEnableSound
cmdCancel
tblDefaultValues
tblFrames
txtBonusValue
txtIntervalMilliseconds
txtStartLevel
txtToNextLevel
txtIntervalDecrease
tblBoard
TableLayoutPanel1
tblAnimation
chkRandomizeRotation
MyTemplate
11.0.0.0
3System.Resources.Tools.StronglyTypedResourceBuilder
16.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
16.7.0.0
System.Windows.Forms.Form
Create__Instance__
Dispose__Instance__
My.MyProject.Forms
4System.Web.Services.Protocols.SoapHttpClientProtocol
Create__Instance__
Dispose__Instance__
My.Computer
My.Application
My.User
My.Forms
My.WebServices
My.Settings
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aBj
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aBj
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
gSystem.Drawing.Point, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPADP
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Point
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Point
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Point
gqI2p6MKQvIPCHeg+8ZUgoQfvT3keJN+Mb381m/M6gdmhjYhZ1//RZbBlSgIDiKVwyz4ZJ5K/gYydCrsdFatQ637rIkqv7d+OJtQGfCXym8NyPgwO1H+SBcXVqtAwQUsX5dRt660RJJ+FawoWJPp7OPVY3UvkgsOdCvfoZdTYDuvIe1ltiJZbmN7NTHhtzdkRfADv6diItQSMH6gUyOQlSrqnbVu7VamvR+yBQhbCSUG4NDIu6Ntwcgmxhkb+z5HUoqBcvr8/fU8uA4R9nWqqkXQ5dMKVI3yTPO3aV6CHEtWX0RtT7Drm8XBmLIJyaO2Hxk19RKA4Mn5C6YfEO3RY9gsOsGUxsliXvirvYwe6a9Q9uFoNWz5W6TqgQ4I7wVvSMvIOGNq7+TwQjn9x1a3cpmP9pMNw0LQHgbDX2Td42pl6RqgI40Pp9lgJe1D7sZXWyiZlQGR+0uvp3WXavdBiK/9URTMAP2x8EeDkVfqo95JAFYYT+kxT1jOqLWPoYrUSkw1mW3GmN1/tTPFGvbWDoIymnxHJ8wtyWxmznBwPGot5v0NQgRj68ggsdyGkIF3HyHB2a4y+f22VGX5rPtQFS9tbAhvXS0f5M58SFPiegdKaaw1zOAitZ93/0yXtSnpggqrKl0ejjdUHTHPMaPn/ShsbusxlCRR7VmNDqabQ94qSH0sAmF0gzmElkd1QV9HHnuPHX2KjUY4uWrf2pn/W85hLGyBorNL+5W11YEG15sqCzOJPlDQLWz5kKKpoJ3x6rmz9dB1HdtD9RoBnUmTLqL4yjiiMVSWg0iFM5FOyvFFLfSOM3OchDL3kLoGmprAsr/EqpK1/hTDbX/FpY9N1z+L2y4o+tu6YX/i4QrDbCpShUW/wxE/ZP38XU/N3PRWt/OAQKkI8vIBD+EV22IRMTVzm0ahjSC3f0cHDHMZcqUhZeNRmmBnFy82GAm+3PkPapkKj2+IIrqYvB2UrPqt/UX/sqdjzDzSCkOV0gflG7UJsgNt/De3UwsyWsfbPPyp
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Point
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Point
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
hSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD5
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATx^\
l_*=_7
>wZ^<Bxq
XB0-4,1
_.xNx,^>
j=n!C2
`e?Ull
[_WtI}.Z[
QaQD/]
40P@0l
=ui4oW[bA
XA+P$x
~Kgr|'
+DU[LJ
oA;fEY
1*cN\r
S2$8`Bq
l4(^2J
eqOFj.
CujNO
%\a]ruu
<.CNy4]
%~ez?f#f$
%>o#`3
'{+q?u
YLQ/Ze
R^|O~;
(.\8B]
@%L/y|g
pB+r]
d&[[:.
c3K6sK
?3YH^@
`eW=nw
)DKn~V
5JUg{?H
Xuu$` s
S.^^TdS
i2I=4C
8hL<ZjN<
"!vcl1
>V;"SK2
F-wvqsE
/W[2mEh
Cs0J$"
IoqE8M
rfw~FP
JW#v$f
}ed%a
n)]V)C
nRXh{~
;l>bOkQ
EQzx+Z
xAVAzb`
dxJ6Q?Y
.|Tlhwk
w2csPs
%2=^ `
$=z*?~
rS@e]c
^K4:,YG
Ma297<
N4od@_
Ep]=bi
+x-5n#
QjXWOa
Pa#,#Q#O}i
h N_aB
OaCT7
;r"6Jp1
p^;EoC
L:ZBa
mTyD@~
1a:P3N
olO;~z
@z<4`?
(ELE`|
yzZ5_b
:L.9L)
q\_yE5{
H-KJ HA
f/vX4m
{VC0Ut
X`SfKv(
2z#?@
U@?[dN
\|OOJi
V>iER\|
yyWFN3
CDJNlq
xA=7Ny
G2Vbz$
(3cExB
r|Rn }
cGF^rH
GO"f7 \Qa
e{";q_
h3>eRd%<
>gB=Kg
LE0^ZW
p?LIOKw=
76)@jH
p{V#+m
1Ec%p%
oW=+/6
?{nn$-
vWmnUNfL
e|7\c
RU/0X)I!>&9
(iI<60
S8-XOi
AuX~JU
S3?sGG
{3`].
HB_olS?
_VoL61y]5
<Oy0p&X
?Z:=G?i
BYv2~;C
r}gQ`_
&iu$i)
UVLCS)S
3Y`8B
b*8ajF
Z\Wcj
K).QR%eo
5-9X/B
T[JE#?
~R/DHk
)He`G
f*'<1,
lSDo|
"``S1S
mk=Ek]
XkkxT[
Q)l4R'
zpN2O:;9
I)a3>B
"A$J<N
X,H{}T
jRmH,P
;\_(-V
e'PcR#
!R&RJr
,PyE's2E
3U0z,x
oYZ5nD
]skB[\
u|8)7J
TAN0}|@
g9jY3u
~@@.~Z5M
c{#+5h{{
ws._&$
6][v,B
KTyrE>!
IWjEAgkU
2UXyG-
OkD]c/
Ty{GEG
I<y)n
y}uzG:
x^%h=6
4.J;[3z
=dndYx
DKj^)|
R{ f<@
yrnw*x
//^O'#
sZhA[Y
,XT8P(4
TXaHZv5
B{).\S
pqfc$R
$&~rBW
=iyA,x
$*C:.3G
le*>kt2
&[:)26
/?7OZ+8
ry^%87
\VL<u,
U=O'+Q
\PM94^
bZ[9s^
GT[IMv
3ZtBZX
=h5#C'3
m8o!y^=%]
dI@H{q
,1+I{E't2
$mfz:~qkHA'
j|%*]#['
U P,P*J
,"L%+0,&S
-y:TV?
0rj?nV
r"DPdS
G`Pttek
!#vv;VZ
g,@koN
7=eYQO
IETJBRZJbH
^_jpEt
+n>~-nf{yd
C>w6=b
:N)u?5
y2WKNPd;
y>d~!3N
aDp?[9
$7N>|;
]n{oy+eX
i@Q4@(
Bv|{m5
_MI{[0-
vqqUL}
rgO#|\Y
J\|jBH:
:|c2(b
)8RUi9
ZLT0h*
01]rSCYyxn
p`~S@T
o.z`Y/
l6aL#[
Em +=s"
RSRr"z
piK>+:
z1FJ/,
`C^~wP
jnC8mP
&._&~
1AQ~PBs
pN$05S
IH?=mZ
bV||T5-
@2~Cp2
P~}Z~]
hSZeLM
U_mQO]
1~l4W8
_AC9WZ
gA$F g
]hg+b%
d3HXEa
oKqOCS
?HTX9C!
aFi<Muq
sMgNr[
n(ijK<4
w.|Ph.a
&dq_>TF
Nf Na
?k2tn\
g,?rJg
q~ka71
2^Y46c_
:n3rs0
,N^+6u
FBK:8k
\;s?s93q_
l [M;m
}5g9;v
-X,<;0
0~{;6q
q^R$xOFC
W2u;B?
@u9yyF
?J.6,R
7%.c?z9
EkAf.O
H4P5 ?#
~ EBEZ
hPd{Pn
K8ACSa
u:w*T
LRoI/p
CFLXtg
<uU;VB)
@S'9}Z
&4\NMA
sO6;!J]
hqrNR<
)4]QD/
imJU^Z
;q+#Vh
6Z/}!g//o
GUDuR0
U$11|F
Y)+`(Y
hLd7R
2e.YS(Y@AU
_o=p{2
ag(p%Q
>4gWpi
UJ|Tao
vk<nVy8;
^*J,+b
$fV=0.
f}"$'s>
Ouk^zv,
XVN8z6
y5&N;U
!hT9]s
{Jtll
v%o?o
HXCj<K
(0CFe4
=L!haX
8Aexu1
bz Of1
`FU^5q(
AB+sF-
'y)~qk
)9u{5>
ew<g\wg
tedl=]
\~b|^G
r0,~?m
.{Oq_
7tGQdo@
~Ry3M'
"gr"re
(PEL/O
0&9ahV
9`. -(m
~,r>i2
0"D#wtz
5w?%oC
g]$)nsG
vR0`J'I
Nm7PMw
O6=tY0
v0F}b"
nxx0Z}
0JyQ7O2
XXaf\v
;VKT|-a^
DQwW,b
g+%fbs`
RIbxAdU
V4cO7Q
G:NZ-`
G=6x\9{
Apl3 H
=^?76TQ
v"b["R
X"9JW#
"MvEBG
d_^K3z
@KPqmNS
vdhKKn1
4Zkk/\
O~#A<1~
4qEO,9[
3q/61s
p5u88a
Wi`?v"E
n"OXMI
T$E!@)
#Z2HhY
8k"::C
=k@^R
3q|%+I
ucg[Vk
+5R:&-
A?w%Q
S|P(}]
%VAPv1R
C_][I%A
3yiIwy
vuGB%/Ws@_Z
.4,7a]
( !!)H
M\yYE3
s1`(|*
^GCy]
$OXq$^
6MfmpU~
2:&D{C
hf(hyqh
"P9m!lCM
af`3%C
{ojb15
OIo^\r
\>aZsT
?OC7iw^
FI.X5.iY
4h\m&7
d)>I9H
+Xt`*_
fher,t
}f]1CZZu
'e8'.:
K+^3f}
EA^d&(0
e[w_yT
4ic^%0u
:ltqSX|ev
n*.s@*1R1O
Xaog_
+d5#zm@
3>ko_S
,1`C5q
AK8$3
o*T~59
IeHEDf
m36w^
\#L!Gy
X}]xZ^
LUrpu?
=*%"Dc
1o% %T
XPOKsO
S-|ZY{
QF}Ona
0R^~):
zL+2*#4
V]NsT!
be+:HB/
"dS(PJ
J*pQe}{)
@y\R]\
/h7K 3
tUP ,QY
6xoqiy1
aKp?}0
Z76~P$
.[.?Lc
obsi&io6yT
=QIKi>3
mWKOu7G'
&]bY4c
,N.&SP
n_^U2N
D+Jo?\
[^m53<o
} -I~Gj
Gy~?(&D
fBCsBD
?"vwYy8
s1B\i604
-E|^rL7(@
OQ{D+:<
8y</`u]
1Szk0
0A=1U B
5?'!@1LP
H1#,;9
2{A82/
yR*>i(0
PM'.~v
@`,wV/
UV[xQ;
w2kyz
gc*h^?
Sc7|cZ[
dT.[mH
3=u=tu
VG=^s=;.
K\8Kr(
O!Ajr}k'
M.LcDm
C%3*}=;P=
Ye%!,#
I3?_e|N
LX|!xz
sh)9v)
@UAtHS
;[U`Csx
b5fOMB
z"xLX
Tkq%`
p-fN%9sg
B+kb`vzk
G'8,#PpV
lx]A"Z
*wh7J#
53~H>L
[BDNlA
3<S\s^s
2T>xSC
_5|[7gKF
3twww3
DIE@R$U
0<]n'6
TxhWnD
|e)[k!_
}XT~G<
x9(;Al)
|=]RF)
ztawIM
B83q$x
E]6hL
\EI<6<9
k,4T55G
E%"0Xd
Xm&c->
^Z'r&7{
v(:AR,
tM=Ln;G}q
s|)*_O
&l7x&6p
/nwc'x(n
X2&fr$
c:q'-A
"Kn7$(
V:(\.2h
*mnN%{M0
dqdn&P
]Xf^,<
RBHb(t1
t,XP-x
&4G?S~
$nfW:?
V.mY[]
+zbRm^c
efRN&q
Aka|2I
Hxtzk7au
MBBBNE
{zbgc0^Z}
"PJ5FC2yv]
'+Pw,2
(`bk~+
g}w[w[
:HcG@=
|*N&Rn|
(wX;v+
6Tv".L
msmt`W>RK
yBA4GS
1a'.5a
G$bhqC{S
y/.+u-F
-7zl.f//
)<Eh-ri
nJP[oyuz;LO<E
OHPv[[
"@jbjb
\(B>aP#
5N0n$cZ
T^&@=x
Hq}L7iUh
/y:77:z
_n`)[V
-}-!<=*
{5Z6:zW
z<WSY9
idu\G\kie
3sGlH4
;iDe_5
z\s9I~
,2jvLD
fI=5,U7DJ_
x ^KQL
GIdKN2
9^z|zD
~qEmf"
-)Jz`Px9
`}Y$[}U
E434Q5
c,P@Y^G
SXI<rud
PZS!/D
}Ld:Y|oi
w|GV.p
I/2!l`%&
xkE;S
R]L~hhG
B@B a+fKi'
fh)+OD
`t%etB
+<[qVU)
q"SNtW|
KZ{%4\\?
$MzhiZ
P+o0DDC
6hdiO0
E:)U9S9C
{s+%B
&6Tkqci
DV[2x4N
Ul^N[r(g^
?<2dx!
Wd<ApZz
CI3?;|
reU}"4
iosp+'
"Po/xd
:P;ccCit=%
wBlCft
h_cV:N
o+R8#r3
KZ;-X?
K]C\M<(
w:z8'O
lfh027f0E
@tthdEC
?JKR~e3
z}Yo;
;T~c`}Zx=
O!}xqd
[^<in(`
5^K#]=:
@z7'bN
K7" ( H
Y?^{i^
vbn0O=
-KXA];S
9k'{G~)
T?]7HF
V46"NL:
8f{H!L
%"Xd1n
t4j[($
Cp!n4
`>!r>r
LFNN$A
?,vT8+
\@eRb-
=(J2guUc?
}';S5lJ
WA8|[u
}c)+Dp
8<a{#tQ+
GTPS@-4
/^xk(
SB'>t2C
j4+0^'
1|g_pML
.e/}q~
3\`5F5
M+k6#1ezW~
?]8f$/
sIg*tJ
LiyQc1
E0%;[
{h!B{:
jXmjy{Q8
\}@hoO
Sx`L.)
FB0@0bX
g<5JsA;a}}
5ely"-
SYu4Yo
v-NIL
u,F2*z
JK)jRV\
^%H(t9%
G?8L6_(
p@T$pP
WO\I}t2
&nR%gw
+ B'M~
~aZG:=mS
m+~lGbX
K?;$++
=K?kZ<
}#{6@
;9Ee,%
m_z^_}
6lPbWp
a:TFE
"vY^8@
fbe0<Z
oeH4^7
$h3d}f
VxZ,zm0'
Bk<g:8%^
K;~_d_
(b-^Ag;;
JrPfUN\A
MI3C;W]
I,7VV#
3NyA I6
CQQrk#<Q.
-Jx ZoT
fx=MPT
a:s~i9
|6t/ML
Z=y]p6
Oa@9NQ
o_I=XF
o@z<e9gL
[lCXlR
`|" Bt
o9-[gJ
{ug<(@l2
cK`'"HZ
G=H<P0
]@u3^\Yi
$VJWU;
8gTc|PS7
%5m%MYw
d^Fx5+
v?S>0y{kT*
ZI9zc@
jrSkS-
Kvi|x*[
c'}=EISV
geJy,
=EOs,X
&kII97
\:Tc:^s
YM"jL1
rz=JGX
()/IG>m7
M0@Lim
0beA52
/$I[Ty
\o&4X0
^g|Q)m
60'Q<Y+.S
wKY.i~
}p|k;0_T
33qfa"
Qv3'x~&
~HgK(\
"/ZRmv
x>5kLZ
B)3}_h/#
{eUgU3
TZ! 5eEsdU
~g_lj
/*n-QL
_Xuz,x
D@`b\(O
fs3nAjM
n$l)w~
rCm-o/
'Ha8 q
0iee14
(pN5d-
':(<aM=
=ws#_K
8@NS`TJ^
;\d_-O
/RN\5}@=Z
~Zx@;
{BDa)Y
Z#d:'N2
,mJ3qI
0[cSFe%7
o +J%?
{5L|?$
`?FUr2
Dm]Nkudp;
#Ld?3/
P[p4B{,F
]sf@9J
|!b]9yt
UiA+K9
DJsl(
qUawNI
<f2Z]zp
P3'q)DH
.mcrKO>w
y2zvt}
?N^\y^
]Y+U]b%Qlv
eT.<OOJ-
uHt[^!{p|0!
h^vbH*
P]{3)]
\W86Z
9,s]=a
FH]4>z
t:\r/c
[ub1IF
Q<6cV-
a=$Szl
z}yj%O
lLbBd&
}@gVO}9
~{?a`I-u
<azUIr
e8"YgB
mzjud)
z|_0L}
hSr=gp}
PLztp'
]YgYLu{
\lWGH f
?zQb)MSGn
%#j*^WX
<=MkWT
wR{M-r
,-f2.F%mI
Xx.a:h
9fL,To
;8Z=4
p!"T v
e4=zqa
rE&v|-
7-ocA_F
a*&|'b
B"lDnE%
8qaTu\
Puqy)XL1z
zbk-_>
hb5Y2V{
]#}+ 5
F=*H+M
8N>Sv]!P
9YmL]k
`Vx8$)
p'AF HP
fpM"]>9
~9ziZ+{/
V~>!vOw
bYsgZ8
EG5i,h
L`Hg%R
V]Ns+3
=N<Qm1
i!P?>M
c=g,f7
Z%ja:%
}N-$A'QmHr
HqtQ]Rm,
0$js(Ez
IgWy8cA}
paN[IT
E/g2mO
d|m:]s
\7W^U0=PuS
0ctaCB
PY9Z%B;m9
-ya|Iid
cFn~nX`*V
__5VTSl
Ry4-7h+a
H4U:o.
mjWd?L
K8#Yh^dN
=4jg0
7d&\Nk
}\+}X
PM(`ehh
z}GSc[
,2pB]k
;'*8$4
,:0y"(
|1f4%t
Pa;@|[y
[X=Pp
>z|~6b
0t1?Cp
_~5(fzUE
8;EW^r|
_]rl&~!N
/uL?Gm',
AT.0IA-
0!weD%y
.^"NBqV:zK
PO$(z?
!SQ?6[
jhq?ah
q7##(eY
w8C<u1X
K9y?<]
kQP+FH
$nQyG+.
S;=;:
=zw2O<{
,/2Ix$
:CRF_ug
+f+bex1
Xbg=}H
b@66yx
a3@"xZ
Bl46[6
KrnF=n
iMYF,e9
I~He*xv
b*TXL&
W0u*X2
f&e59]7
icGu?>
0l@`:k
@ 1_(<
ITN}}\
`\m9k\K
V&x$Xm
^rT(=q
]q:G+V'4/A
O*2e?*
2G<MQ:
5b?t}[
-ld8!7
7O|FfaI3
j5OmKl
rhiB,L
g9lAML
cv8q84
Jrdd,4;Z
T9|)D"
UWTHS
L*Nx8
>?<HGK
ZLzPS\aE13
]5)^-|-`
&{)x9"
Ra'ETT
m1c@L"!,d
c3`h,a0b
7[`vHE6
l'/caqFqZ
)g!q\9
p]fKR:
kCq+|~t
_cK*6D
Z F@WM1p
J9k-8E
'4{#dvW
YhQ m%
DQ~>FhV
EBARZ@
46S8Q:
<"<B!83{
)xjLZ"
G aybi
>R4:-0
^,~D?eU
x!] O+]
^B1~yB+
o72fQ:
9&eWW#
XNpAIk
Antivirus Signature
Bkav Clean
Elastic malicious (high confidence)
ClamAV Clean
FireEye Generic.mg.7501030063afc2c2
CAT-QuickHeal Clean
McAfee Artemis!7501030063AF
Cylance Unsafe
VIPRE Clean
AegisLab Trojan.Multi.Generic.4!c
Sangfor Trojan.Win32.Save.a
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
CrowdStrike win/malicious_confidence_80% (W)
Baidu Clean
Cyren Clean
Symantec Trojan.Gen.2
TotalDefense Clean
APEX Malicious
Paloalto generic.ml
Cynet Malicious (score: 100)
Kaspersky UDS:DangerousObject.Multi.Generic
Alibaba Trojan:Win32/Kryptik.ali2000016
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Clean
Rising Trojan.Kryptik!8.8 (CLOUD)
Ad-Aware Clean
Sophos Mal/Generic-S
Comodo Clean
F-Secure Clean
DrWeb Trojan.DownLoader23.39669
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Generic.dc
CMC Clean
Emsisoft Clean
Ikarus Clean
GData Clean
Webroot Clean
Avira Clean
MAX Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
AhnLab-V3 Clean
ZoneAlarm UDS:DangerousObject.Multi.Generic
Microsoft Trojan:MSIL/Kryptik.YK!MTB
ESET-NOD32 a variant of MSIL/Kryptik.AAAS
Acronis Clean
BitDefenderTheta Clean
ALYac Clean
TACHYON Clean
VBA32 Clean
Malwarebytes MachineLearning/Anomalous.95%
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
SentinelOne Clean
MaxSecure Trojan.Malware.300983.susgen
Fortinet MSIL/Kryptik.ZYY!tr
AVG Win32:RATX-gen [Trj]
Cybereason malicious.473307
Avast Win32:RATX-gen [Trj]
Qihoo-360 Win32/Heur.Generic.HwMA74MA
No IRMA results available.