Static | ZeroBOX

PE Compile Time

2021-02-25 18:34:53

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000ac94c 0x000aca00 7.9183560908
.rsrc 0x000b0000 0x0005cd14 0x0005ce00 3.90348998637
.reloc 0x0010e000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0010c240 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0010c240 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0010c240 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0010c240 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0010c240 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0010c240 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0010c240 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0010c240 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0010c240 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x0010c704 0x00000084 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x0010c704 0x00000084 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0010c788 0x0000039e LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x0010cb28 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
S&s<
`Ds<
v4.0.30319
#Strings
<>9__7_0
<.ctor>b__7_0
<>9__7_1
<.ctor>b__7_1
Data_1
dataGridView1_CellContentClick_1
List`1
get_Tel1
set_Tel1
label1
flowLayoutPanel1
button1
Studio1
ContextMenuStrip1
menuStrip1
textBox1
<>9__7_2
<.ctor>b__7_2
get_Tel2
set_Tel2
label2
flowLayoutPanel2
button2
<>9__7_3
<.ctor>b__7_3
<Module>
ImportarDB
ExportarDB
get_Unity3D
get_ID
set_ID
get_BI
set_BI
get_IBAN
set_IBAN
System.IO
tabelaS
get_AnNUY
value__
hora_entrada
editarproduto_entrada
inserirproduto_entrada
AllProdutos_entrada
hora_saida
deleteVenda
cancelarVenda
inserirVenda
get_Senha
set_Senha
trocarSenha
tbFarmacia
AllFarmacia
bllFarmacia
dtoFarmacia
get_Residencia
set_Residencia
get_Categoria
set_Categoria
pegarIdCategoria
deleteCategoria
editarCategoria
inserirCategoria
cbxCategoria
get_Idcategoria
set_Idcategoria
idcategoria
tbEscala
deleteEscala
inserirEscala
System.Data
get_Data
set_Data
LoadData
GetData
SetData
mscorlib
System.Collections.Generic
Microsoft.VisualBasic
get_Id
set_Id
retornarId
lastId
ScoreRowAdd_Load
add_Load
StudentAddForm_Load
ButtonScoreAdd
ScoreRowAdd
add_CellValueNeeded
add_DataSourceChanged
add_DataMemberChanged
textBox1_TextChanged
add_TextChanged
listView1_SelectedIndexChanged
comboBox1_SelectedIndexChanged
checkedListBox1_SelectedIndexChanged
add_SelectedIndexChanged
omboBoxSubject_SelectedIndexChanged
StudentsView_SelectedIndexChanged
get_Checked
set_Checked
menuStrip1_ItemClicked
set_Enabled
set_FormattingEnabled
DataViewGrid
<Tel1>k__BackingField
<Tel2>k__BackingField
<ID>k__BackingField
<BI>k__BackingField
<IBAN>k__BackingField
<Senha>k__BackingField
<Residencia>k__BackingField
<Categoria>k__BackingField
<Idcategoria>k__BackingField
<Data>k__BackingField
<Id>k__BackingField
<Cmd>k__BackingField
<dataValidade>k__BackingField
<Quantidade>k__BackingField
<Name>k__BackingField
<Nome>k__BackingField
<Volume>k__BackingField
<Score>k__BackingField
<Cliente>k__BackingField
<Total>k__BackingField
<Email>k__BackingField
<Imagem>k__BackingField
<dataFabricacao>k__BackingField
<Formacao>k__BackingField
<Preco>k__BackingField
<Banco>k__BackingField
<Num_banco>k__BackingField
<Estado>k__BackingField
<Valor_pago>k__BackingField
<Codigo>k__BackingField
<id_cargo>k__BackingField
<Salario>k__BackingField
<Id_funcionario>k__BackingField
<Acesso>k__BackingField
<Id_contacto>k__BackingField
<Tipo_pagamento>k__BackingField
<Aumento>k__BackingField
<Id_produto>k__BackingField
<Sexo>k__BackingField
<Adp>k__BackingField
<Group>k__BackingField
<Gender>k__BackingField
<Nome_User>k__BackingField
<Custus>k__BackingField
<Subject>k__BackingField
<Conect>k__BackingField
<result>k__BackingField
<Student>k__BackingField
GetField
get_Cmd
set_Cmd
DataGridViewBand
DbCommand
SqlCommand
get_DataSource
set_DataSource
SetDataSource
ViewingSource
get_dataValidade
set_dataValidade
data_validade
get_Quantidade
set_Quantidade
quantidade
set_AutoScaleMode
FileMode
set_EditMode
DataGridViewEditMode
get_Message
get_ReturnMessage
AddRange
RadioButtonMale
RadioButtonFemale
DataTable
IDisposable
RuntimeTypeHandle
GetTypeFromHandle
DockStyle
set_DropDownStyle
ComboBoxStyle
get_Name
set_Name
CallByName
DateTime
get_Nome
set_Nome
get_Volume
set_Volume
volume
set_CommandType
CallType
GetType
get_Score
set_Score
ComboBoxScore
get_Culture
set_Culture
resourceCulture
InternalDataCollectionBase
ButtonBase
Dispose
StrReverse
DebuggerBrowsableState
EditorBrowsableState
get_Cliente
set_Cliente
cliente
STAThreadAttribute
CompilerGeneratedAttribute
GuidAttribute
GeneratedCodeAttribute
DebuggerNonUserCodeAttribute
DebuggableAttribute
DebuggerBrowsableAttribute
EditorBrowsableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
AssemblyFileVersionAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
get_SelectedValue
AddWithValue
GetValue
SetValue
Remove
set_Size
set_AutoSize
set_ClientSize
Serialize
Deserialize
ISupportInitialize
set_Tag
set_Padding
LateBinding
System.Runtime.Versioning
ToString
disposing
add_Validating
ComboBoxScore_Validating
System.Drawing
ShowDialog
get_Length
ButtonOk
button1_Click
ButtonScoreAdd_Click
add_Click
ButtonSwitch_Click
ButtonOk_Click
DeleteToolStripMenuItem_Click
ToolStripMenuItem_Click
ToolStripMenuItem_Click
AddButton_Click
StudentSwitchButton_Click
StudentAddFormOkButton_Click
StudentAddFormCancelButton_Click
ButtonAddGroup_Click
ButtonAddSubject_Click
ButtonDeleteStudent_Click
ButtonEditStudent_Click
dataGridView1_CellContentClick
add_CellContentClick
StudentsViewGrid_CellContentClick
set_Dock
Decimal
get_Total
set_Total
op_LessThanOrEqual
StudentNameLabel
set_Cancel
ButtonCancel
System.ComponentModel
ButtonsPanel
HeadLayoutPanel
StudentNameLayoutPanel
ContentLayoutPanel
FlowLayoutPanel
get_Email
set_Email
DataGridViewCell
likeBoll
FullCombol
set_ContainerControl
ListControl
FileStream
Program
get_Imagem
set_Imagem
imagem
get_Item
set_Item
get_SelectedItem
set_SelectedItem
ToolStripDropDownItem
ToolStripItem
AddScoreToolStripMenuItem
DeleteToolStripMenuItem
ToolStripMenuItem
ToolStripMenuItem
ToolStripMenuItem
ToolStripMenuItem
ToolStripMenuItem
System
confirm
StudentAddForm
MainForm
resourceMan
op_LessThan
set_TextAlign
tbLogin
bllUserLogin
dtoUserLogin
blllogin
dtologin
MessageBoxIcon
Application
set_Location
System.Globalization
Interaction
System.Reflection
BaseCollection
DataGridViewSelectedCellCollection
ControlCollection
ToolStripItemCollection
SqlParameterCollection
ObjectCollection
DataRowCollection
DataGridViewSelectedRowCollection
DbConnection
SqlConnection
Exception
System.Data.Common
AddButton
StudentSwitchButton
StudentAddFormOkButton
StudentAddFormCancelButton
RadioButton
SettingsButton
Unknown
get_dataFabricacao
set_dataFabricacao
data_fabricacao
get_Formacao
set_Formacao
localizacao
get_Preco
set_Preco
get_Banco
set_Banco
get_Num_banco
set_Num_banco
num_banco
get_Estado
set_Estado
Comando
comando
FieldInfo
MethodInfo
CultureInfo
DirectoryInfo
get_Valor_pago
set_Valor_pago
valor_pago
get_Codigo
set_Codigo
codigo
pegarIdCargo
deleteCargo
editarCargo
inserirCargo
Id_cargo
get_id_cargo
set_id_cargo
caminho
StudentStudio
get_Salario
set_Salario
desablitar_Funcionario
editarFuncionario
inserirFuncionario
get_Id_funcionario
set_Id_funcionario
id_funcionario
get_Acesso
set_Acesso
tbContacto
AllContacto
EditarContacto
inserirContacto
get_Id_contacto
set_Id_contacto
inserirPagamento
id_pagamento
vf_pagamento
get_Tipo_pagamento
set_Tipo_pagamento
tipo_pagamento
get_Aumento
set_Aumento
deleteProduto
desativarProduto
desactivarProduto
get_Id_produto
set_Id_produto
id_produto
idproduto
editarproduto
inserirproduto
get_Sexo
set_Sexo
Bitmap
get_Adp
set_Adp
ToolStrip
set_ContextMenuStrip
set_TabStop
nome_backup
Exportar_backup
get_Group
set_Group
ButtonAddGroup
LabelGroup
FormGroup
GetGroup
ComboBoxGroup
Buscar
buscar
desablitar
Salvar
set_ValueMember
set_DisplayMember
ErrorProvider
get_Gender
set_Gender
sender
get_ResourceManager
get_OffsetMarshaler
DataGridViewCellValueEventHandler
CancelEventHandler
DataGridViewCellEventHandler
PaintEventHandler
System.CodeDom.Compiler
IContainer
get_Owner
set_Owner
get_Nome_User
set_Nome_User
Nome_user
SqlParameter
DbDataAdapter
SqlDataAdapter
BinaryFormatter
ToLower
Tokenizer
set_Anchor
set_UseVisualStyleBackColor
SetError
IEnumerator
GetEnumerator
.cctor
IntPtr
tbEntradas
tbVendas
AllVendas
bllVendas
dtoVendas
tbCategorias
AllCategorias
bllCategorias
TocombolCategorias
dtoCategorias
categorias
AllEscalas
System.Diagnostics
System.Runtime.InteropServices
Microsoft.VisualBasic.CompilerServices
System.Runtime.CompilerServices
System.Resources
StudentStudio.Studio1.resources
StudentStudio.ScoreRowAdd.resources
StudentStudio.StudentAddForm.resources
StudentStudio.MainForm.resources
StudentStudio.FormGroup.resources
StudentStudio.Properties.Resources.resources
StudentStudio.FormSubject.resources
DebuggingModes
StudentStudio.Properties
EnableVisualStyles
AnchorStyles
salvar_informacoes
ButtonSwitchScores
Strings
ToolStripItemClickedEventArgs
DataGridViewCellValueEventArgs
CancelEventArgs
DataGridViewCellEventArgs
PaintEventArgs
get_SelectedCells
get_Controls
get_Items
get_DropDownItems
System.Windows.Forms
set_AutoScaleDimensions
System.Collections
MessageBoxButtons
tbCargos
AllCargos
TocombolCargos
cbxCargos
tbFuncionarios
AllFuncionarios
bllFuncionarios
dtoFuncionarios
tbProdutos
deleteProdutos
AllProdutos
bllProdutos
dtoProdutos
Groups
get_Parameters
Subjects
Students
components
Exists
get_Custus
set_Custus
custus
get_Rows
set_AllowUserToAddRows
get_SelectedRows
ScoreRows
RemoveAt
Concat
GetObject
get_Subject
set_Subject
FormSubject
omboBoxSubject
TextboxSubject
get_Conect
set_Conect
LateGet
op_Explicit
add_CellEndEdit
EndInit
BeginInit
SetCompatibleTextRenderingDefault
set_DialogResult
get_result
set_result
get_Student
set_Student
ButtonDeleteStudent
GetStudent
ButtonEditStudent
System.Data.SqlClient
Excellent
ContentAlignment
InitializeComponent
get_Current
flowLayoutPanel1_Paint
add_Paint
HeadLayoutPanel_Paint
TopMenuPanel_Paint
get_Count
IterationCount
SyncRoot
SuspendLayout
ResumeLayout
PerformLayout
MoveNext
get_Text
set_Text
SynchronizationContext
DataGridView
get_Now
DataRow
ScoreRow
DataGridViewRow
get_Index
set_TabIndex
get_SelectedIndex
set_SelectedIndex
get_RowIndex
MessageBox
ComboBox
StudentNameTextBox
tbVendas_today
AllVendas_today
oldKey
newKey
get_Assembly
System.Runtime.Serialization.Formatters.Binary
ExecuteNonQuery
Satisfactory
Unsatisfactory
CreateDirectory
op_Equality
op_Inequality
WrapNonExceptionThrows
Student Studio
gtx 1660 super
!Copyright 2016 (C) gtx 1660 super
2.3.0.13
$312BF208-82D0-46DF-85A3-4E494BD63854
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
3System.Resources.Tools.StronglyTypedResourceBuilder
16.0.0.0
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
hSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATx^
%RiIVV$
JDVObT^
/;d,yS
v&Sc.1
dTKS":
~!'O'P~
.\&}!ag
dn;]&g
|R('[N
t"^#&b?
S#gGlA
VEGL;Z
F(*>kY
2L't0Er9
;.8jpe
dS2U7b
NF<k"<
[DwP^R
=?Gka>
aY0]/G
6n}rey
b56x/cDz
GjC6".
xvz'rk
,JwfsO
V# t4b;
r*;X@`
/-9n\B
]8L*'O/
-!o|*j
egj /fJ0
ZH^J#k
7ar^#C<d
Yb1;-b
,0AeCM
}'KO}/b
5wehy^
}:kgEr
<R6/B~
!T]xGAo'{
"lGTc,
M~MOK
Jw@*wKZQ
&rP.RU]
Gso9D~N
B<~i`&
0#T|Cx
xuu&7WO!EF
ir)Ne.
E#_!6"
|_qzi=
`0s//E
H@+e'W0
G4cXX9
5v-),SN`
/+k4(/8G
NeZ,|Xc7
l^<yLe
'xGgQ7m+
(`QJ'U
~p%a#~
`J[5ko
'F"zf4]
Us9ve)^
sc_2~d">B
\CsV>
Z3q|+C[h9)
~aFe.kj
{3rb58
"ka_g6zei
k--Lmqd
a6o&WRF
V'~Z*S
\FIr1{
Z*He\fW
EC}iy_
9OKr_$&
mFCC(o
T+D2OR
aKu4Cf
|3J"?^
s;$2pd
g7P[eIt
"PI.al
ffNYJA
w%O_]&|N!
<a+X,cf
%(ChK*
{FXE ).
3^%7k8c
Y5%lvQbD
F*fcP
F]Rej}
e>_*Wc"
LE!~-#.
xi>]nBxX
l?3/v$?*
E5n'!w
t=nG)a
5Lwi$(q
NhEtC0>
,\Oo!VG
na&J^+
u3oD.A
sUX]6emt<
j^O*fR
5W&aX)O
Ex-gAU
!Bt+s~
=#r)+(
W/\''e
]I`n,A[
IDAT>~
9o;V\,
RH6Q%u
s^a:Y
QfW~Ad
W&D*WR
oFu|'xn
gD]i@r
}N/WSoP
TC.MUa
B/ykhN
j*?!w
kLN#:>
\Hve67Z[
~p=#ek
r=o(/O
Cldy2<
l7z96|
IX(|@l
+DE)<w
60mp-B
v/!s~!
fux6yo
]W@Se<
=2D\2F;y
sxT42%
~fpB?l
BcR*;V
uxePNOG9B
&+'6>Tg
i8&(@Q7
iH3DgK
"8~/Rp
<FKWs=e
BCC`Ovk
Nh{,KZ
^dQ0a(
0'{(NFg)z
=l'7,g
I7 *r3
/+0Q3ed
*t.!t9
%E#Zy|H
}d(:"9
g"wx>g
\3Ym=L8
33VsgO9
:rE#9jb
W1HYt`;
%Li4`h
%> Eo
bg<5Vrrl>
&|+?JGc3
;OsB+)O
U`fu0?
d1[BN`
eo<-3v
O!$*FG
SDU'2C
L=w^tnBAy)
O}5on
#7f<0d
!g4E7a
ne^F7m
`f-Er?+
dDxPqs
eH:bK^
\_CuA:
>[x~t';
LI5Ecb9U?
dA;?JeY
S^LpcVo8
=>xu1y
XL=r(U
tSiO^C
TmR!5P
fnu<%\u
It.3Ai
6,j?cj
)'vMqf
!\tlCj
P27M[hZ
Q^JJ`*
.|VP`ia
ZD|qu|L
paaN9V
Llb_n-
|)?jCX|>'
kx7J`6
@^l|Ld
eUYy~
?'@E`)i
Q8u7CSo
$NUl$w
V0or49
=\V;rn
NzltWd
r5h8r
'oG3;o
oMAz@.
.LDG*X@
s?n%gD
Egj^^g
-DqI /
-*e|8?d
,u5/goa
b2n8S/
7dP}m37=
+g3hV"
l#Do:S
i(J~T+b
?M@_w$
&lL(CV
Gcj8Cv
^?ec7
x|Oesmt
4V%Cf
L&')a~
hP7]bu
Ju?~-9
0o.qiG
%}gDs2d>
xLDU`Y_
f/YONs~
0Tq#.}>
|KseZ@
E:;cv vw5
V?>#tA
oF-3Dh
Yb,k]D
V0t+(+6
fJ$Si
ib]8_)
xN`<V6
:9j=2Iy
p.AyH9
/w!gA:
wk2=x!
'2$v(o5
vs$3;W
2@n)[G
/;EYD*
:VtnexI)_
V<.?Cx
{,>\LoD3
v_/v>L
+Cln3%k|
y<DPR9
Kg%O^?
K?Od@0
,-Xsm
7e#E){
K-Gbc!
[2FVb~m0
CLd<)_^`
Tj~%U3
R=UT^M$`
#L6Qda
<q6)#Xu
%ki-WBB>
pPPp^&[
x%&G?cvt
j:$o0F7
4.?E}L7
GA`_AH
anR4Fkn
{/f8Y?.`
$JMyt<
:7Z;IZ
(El$L[
U%f-9C
l=s.fb&
ZndEp]
7J2+h2
H, `S
zshm&E
"jCI>e
qd^J-
D9o;r>A
lYSnIJ
JkP3j_
Ew^-FF
KgCn*_
]Bx*/F
?'&K0{
{u,OpG
vj)[#Wr
wG)mzH
In5F;b
_qK8zA
&)v1N;:
ToNEa
B(tIac
1}~qma
sYP-LT
[675pk
.&,=Lc
/Bj,[1
yTDcN;
kOp|b/
2MAx;4P
NxU?FMn
0}YN5~B
\gBY,s
r+e<+#
$}-bp/
f/r=^14s,w&
|Q^t/"c
RZHWU'_+
~$$61vb
5ns3)S=IK
H.j> {w
!Fj+o[
? Ue#+{
}Yrz"1
HlZ&u'
`,w6$`
-Aa`6"
|embY@
lQ[L&F
!Xco{~W
"#w1+`0-
eSYX$0
H}|e6r
!)S_qx`3
!V9Dqv
>Cm~%
p}G_UB7\Eq
)mlZ X
jX1cR72"
D+n|ld
%Gr.O8#y
>@hl9j
/0ELb.
3AsX[i
DBh8/+
0Qr11k
+{+gN+c
|n4q\=
N&th13(
L1{-0aA
l3[dm:P(8K?
;)N(ct
Ko.E5w
dH/,ET@m
ZY2p+5
A*uomX
r)b5:n"
*^,ssen
hMWdMt
eCy3h=
C|O)rG7`
EqF7f7
_/s1j,oR
Ewf>ODe
3]O2sZ
*,>7#?
V>~kcB
.571VK
/"g2`b9
v{%Kvv
[/pnH2mk
B9su?yb"4
R4u4fFo
iy`Akz9
a5|<'xl
ZHsocQ
~W,\$)
<p'_V)
UWEU[1
X:e#I+
aID|?D
21,J@*s;
cT%LG_G6+
sU+0*+%
LA0z^c
`qX!m'
xi8&JC
a"KT%i
V9Kn@'
es&f/r
qu>8x
uz,bOo
'vs6~>
B2q(ZK.1i
wyYFgY
?&z?e|
2iDK<X>
DVme]N(
QWaZ#
JetP0M
7T)$q=
r4Z*/x
^xJOd0
h#so1a
dBcsy7
}op:h!
y,t^Dd
qxG j]
gr~w=7
tD,?}dxT6
=<N4Cq
Bf`7aG
T6jsp_
qUy*OD
s7l:O7-E9V
lN~Q6-u
FN%Cf=O
u{2?'|'
,BXtb?a
%rO'B7
j47Ot [
zy)a{G
9F2>&
R>&(1d
4;^$D)
K[Uxa"
&ulotSj
veg_/b
'/qmr3
Ce<M=G
:PrtBS
?2aHf+>
6>@-b
acYwm/C
v^eH q
58^q'z
:rgn8FS-9
m6F)i1M7_3k`"
$0-k43;
I.)of`~6
M&YN'~
s:HYWG
M|]dBg
BRr>ew
H:FhF$S
W(cv[
sn<C,-
(9Hh`5
0np,2G
KerkO5K
U|O^grR7
5o-I>>
GWc8!0t
>z;Uw"9
dq#&N#
Gr5sUc
#.0Pi'
?"[r7z
jwaRq>So
aNa_T^<
+Bm<)/e
'n>#yp
5a_nsB
8EEqdt
<`[r4/[
'{Z)U\
~/8=v
9"_NS9
J'85v!
O;pT[MFN
#?w=cE
5t2R&g
(h/"&j))6
fdO}JdG
/u3/3*
ep0m0
pg*5zo
7n'om;
@8l?)o
3N`uP`
OAY}3*
i,l%?.
t$<Mil
( :r,5c
Z >7D(
*Ahi~[A
,r1ESu8
uDqOe
x.KUpyb
vn7!bD)
L+vFXr
Ktv1J
i)N'R1
tO?F${a
HRS2IiH
#&iD ?
wc2Is-p
6O$}q}
s9C~E w'
k!b_H
>PAiV?r
Zl[fLIo
ygK\]$2
_fz2;8
a#kD*x{
v0UYAl
"WgR*8
fnjbBA
Cprh`eF
/DIt-[
FD,_IB
U){8N0'
C;yS N
$fJ|bd
Y:j#cz
vObW80/
Yvp$zf7
\o@cy*s]
{4]s6"
AbT;iP|
G~_8!.
NmC^|
"atwf!9t/O
JnUc:3
M{V1cp
l?1r_p
+'N:-eSW
588N%W
GHc$&uE
ojlnM%
syU+Gk
bs2XvJ
a-Y{O2|
)rTx&p
rp!7f<Vq
yJ31Yp
o\dFr1?|
oQpZGw
'2J{X$
zi(_'0]u
A]0WVEJ
rJ`q}h
E"1r*_
s.GI]|
gxR#+N
9^85P!
p,/z3{t
tngnc{
4hjJEFC
<^Wp$o
Jlw5b=
]dWF<;
wU3C|"
`t^'yv
5%ZXXz
ZjEV@>
$?56o)a
Ehg%w6
KQp*3.W
Qs9?d?_
o@f|6UA
X$rOx$kF+
|J0"$a<7
0pcKy0A
jFfZ$&
b~U0(G
K>3#c9+
q&NVdP
L8yu.w
dXG81g
g@a)qW
iT5#q.>@
cnZO c
"(Sav>0bB
z*RC?1r
s,rv_0
!QcZ}"
YMvT-r
Mc|7Obuv
7-bl(p&
E_8|}9
tcHxs%
b{`5[^_f
Ogq St_
doN@\f;
i[2Y.v
k*?=+Y
H $y*%
=*/ZrL
GU4HN`D
fJgy*v
f=>\X
'CN*^zs
x.UI}G
OtY8t8I
PW^UmB
pyM(zso0{
{s~g-7
0(q("A;
Td/x|;
c-f-k#
S73P{Y
V%=a.A
@:z. w
o/X[+M
ui.Aj[
x'~G]b7
D%v:q,
=_Ws>^
2gI6Jk
*m>8\ehO_\mG
}q32%
+$1}x?
xe0K/h38$
o9c6Er
w:0Fb!
BEY"/,t9
EUn6uk
7+2'=B
^DE`CI
iuv"[y
EVK^bfl
I<;G^ o
#ws3q;
E/XlTH
5|6*MU|Q
]|s)!,r"Nq
z|<gr-+
tDg/#1
(L4w1?(
-VfJm(
pa{/Q}
d-DLC!;
),jVq*
oRGyr9
{DGA;}
epV&9
_AmJ'5R
`~:b_^
1JbTi<Ag
ux+Eq"Z
M-Qlk
r"R'aWj
0V_Q!i
zc$PYw
-}Lga_u
U?N+n$
>YFkNe
s|'-.-\
nt6o%b
lBnw-'[
XI:2H0
j?^nt'%2
*rwZ "
/l&gS`
-Q)JR$E
ef(y2r
%a_CZ
{p+]Jf
.nXkh!,=
Zz_pAp
@eUtv:
fR,?sGr
NgR(oF
lH<}%Z
*#f=AF_
e ]3RP
Ffh)_F
a]w$!r]<
Bnd>F6
'o(Cfv
WfHRG9v#
='dy'y
Hmcli)
a\7QuG
4KF%pb
mg#ulgG
'C)6*G
cDj12y
yaGrV$
{zWi'_Cn
V,n;KA
H|+&KV
w7pNvg
$yD#wO
a>oX:U
;|}dD@
bnKN%p
I&y:rMy
ap\"}S
;)<-F
8y}*A>
+}Yud;
A))N<|F
`,Kth/3
taKF5sFHq{\
ot6}el
s}n|uXD
Y&~L]Y
/qo({=
H{4~V!$
Vpnm8z*
oy5?$~
{F>c}
P[0t>1
%X-NB[9
[93V$k
04cbQL1
chK=[w
tU_LvO
]m9,Pd
x/M&OYpe=K"
`\w?%fo*
FNgmA&X0tw~"
+}6qiw
KiY-Ov]D
4Xzy%!
{>'wnA
p-{_(#
p~W]A$T
!/^MEd
6v|(y@
/s!vW'
6)y`:t'i
xA T@1G
I-G~l&F
3W~S)w
:TF-'p
LS/B+a(~
-Vd}G]
9) ew,,:y
qz+eI[x
T7X3gI
be'~~<
.CkO%"}
Z;poxH
3}R'=:
qBx&#k
m699V\8
G2ga;/+
cZq!;t]
]>~1_&
GjKGQ7L@
yf76ps|'
~=Jyoqj
H*JIIK
uS?$|_
=$bq?B
N&o}N r
0=vNVb
\>j8R4
b"-[f2"r-.
A7yj"D
^^:\Br
.[RW(P#
;W>DW
@cU+}^
Yw2"I
/A+'rK
KOdUX)
flysAPxo
.FWb
H)tML8
*qb/e
1E`t~
}CM9~f>&
7J"FbX/
qC:-n
nq%6j8
MG2d$>w
OgBo=o
YrnhiF
p-R#;=
L&U40P2
3o-:H6
~62.AL
TLBy|#U
Am*~Az
D.KrrC5
H5e<^'qK^
"K&FMb
JIMu S
OEKF6
Z"+mY-
`rg:I*
'bP&))
ROM6KY
N#]UDj
7B{&sMV
wp0+n7
,aINf}
.~FUr`
|7OE%~
)5kVJ5!y<
Z$d]$Y
8>&oR%
9,*QeL
7x?`""
<_rbq:
sb$$0?v
%$q3U}
gZ0fC_
|(/vVq
`([g`<
Nh#eS7
+y<f#'
e aoZY
$){_MM
2Nq3[C>
.Qm>4\.
Q`H3>Y
3Qwx?g
?pnG3!
^<&."M3
3G`>z
DbWbzP
T<_Drr
shul`Z
3My5SFW
:^cG|g?
Gon$J`
|~^L`gh
1TS@iR"
$oW#|N
".|k#ur;
M|\ZEQ
x5m,][
. GaZ|
E>TW.b
(3>BPB2'?
,dlq97g
>/v2b
rrw]bn
$cLG@
C-.6}e
qq!iuu4
:XOh%{
;CI{uU`]
`A{i,3JC
9Qm,H
3r~ldH
s>pB~#n
Y$IX`U
5v$b&k
) /s->
@IA((N
([Z|#yum1
e &8gv
,m*%Y+
pWdWes\
=-R6&Q*q
AEe>s~
x7eQK8h1
Y7~,w3t
-a{y(YUS
8#GL/.
:"J^(F
yx(m"Q
Xdbjy=
6W`A-[
8_fi<feI1
%*c~2T
G/raV7
KkTrU9
t"3KhY
@hmw*e
:-6,YOr
.vcza+
C[n%c=
3GjB9%7
Ad'^dc
$3m38"
J]hU]G;
7P-(@-
'oaYo4
HWEP|1
mcwP$S
GQ<s&e
ft'~ y
/fVyr5
NMS2w79
TgYm'cF
QCmc
m'$9wz
JXi\D/w
!9x*'6
&u5BVRD
lNit2WH
;h\SAk
wk>'|>c
(IiQVZ
pXqFp6
A(Lk"e
*{^G6r
7+Q1SgT
t&/EXa8
vVRS*(
-&&r(f
fb5B2I
KK.r$n$m
m;3vUc
"eI3:s>b
B eAYL
uQHeySm
IDAT8s1
f2Ul<cV
cc&R+w
/V;Dhw
yCf?'6
kG6Y:W
|"Q5YP
hnO!sk1
3%nS$^
AGGpX(
xuo&[e<sn
lL6s@^
H-:TmY=x
oqT(g
pml:{s-(6]N
'xb3'
L<+og
mNg@mh
C|jqUM
$.6Guz
zRlzVBUY&
\a<CBE
DrrL$C
1>j3*[|I7
K.rbQ;
\ZLy6R
`H^D,"3&0NH
tU:#'1&!
%<#R07
=g(yac
D3j2}a
yQ1BH
R"]}43R
12C0J^
&ar*,XlI
W1]~7g
^8S1~$
\gWl<K
*?1*k0&
NJ^[G
DvCBVB
}LYmLP
'V-lE<{7
a5NDP
4.:vS1
V'i>]K
&"8iJ2
H:!$(a9
$cV(w'
X_\_+3
|niEtZ/
pr/'M`
S/yLT4
K<@%q(%
opr=Dhq:M
wGts~P
mEsU!u
.I&W8!
a &Ewb
e+1w("0
M0TtDDJ
l6IXPr
I'gr;m}t
q*QbW074
4o5DVo
aod9=Q{Y$/x
[/(i9{
cq7:v
""m9w,
&yz2O7
=|3G',@ao
_Ycn @
iT&5h<r3
nKJd^3
hqQv/&+
3=in5!d
+#?n@bs2
:PD0o
er^Zpq
;PM*ay
EEV+>@
^.Djz+c
.>N_H2
`V!d,*|I
qI3b\K
sCO0S*;
ka#T~~C
%DP,WJo
ck[f>r
)od&s<f3Y
Wy(C.}
^Zf7s&k
HGr/b>
C]7b~^g
(bk.s4S
x>s J-
5eY;PP
r('~e]o"
[eN[D3~
Xzz;^S
!9u+X:9
+Oz0sG
L`4/T(
?Qwn=[L
a'299n
/c(H-C
#!3y;-
=7J/#{
=JzXr
W;2O"1
$&K]c`
g\82e(
p"`$g&
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
|I|Dp*
-j-bVc:
@yLx@t,
FrEU2eP
@<t3|Hw
KmP:`Tc*
-j-OKx!
R~2u?}8
6n)fAI
~4uLhYJ
T3vC{O
9m0m*eK
2u4mOz%
"e)@pEpB<aVb+
0q,]Aq(
Ta'1qI}
SBMx@j
eWbWo3`Tc%
0Ag j%
+k hHw&
Wo[HPc9
;|6qxH}Eo
7p+iPePh\
cd-lU^
4My<v7
3t3\h[
<KbDeG`-
I]UNmH
(q?f P`DgNo
oNjIl,
"YZGUmY
:iD`LcM
~)WbFj3
@i?m9e1`!FTa8
DlPFr'i>
z<p)\TX\ZQ
~(XXNq*
p-Ci=UB
tDZPSH
Fl3[n9
oDz/U^
^*Fq,
mS?I}J
2jP4|2+I
:{BwDp8b
8Lx-t@
sJ_[cW
ch/`Tc,
g 7f3j^
OzBV{Ny1
]hGF8BvA
=Jo(o
+`YlYA
CvC{/O{L
E{N{Ec
6ePe]I
%b*_Zo
B{N{#h2
;|=fFs
cZo r zNAiB
HWbWYZ
8p%At3t
*&4s9x
qDQLx"
FsHb#y
'hC^k3
f,MtAtLz
7p7@G[
6s-Hq$
6s(Cw"uA
^j`V6L
Ya)p$T
_fUTT`
sLkRj>eQf.
&|HGE^
Id?x?r:
9~6kFs
RBe]i5
r5zN[*
4Wc6h\
Ri<{<sG:
g-LTaTl8MyN
sQh]h0
lTaYo)
4s9xCjVnC
z-j"WBw
u g/b5
lYlTb*
XVcV]g
7s'j^i!
"]^kSi'
'`*KdQd\
Mk+r/.:qH}Jf.t
r=z0s>
lT@uAv>
s.oVc6
5r8YSfSk
.i.)p>gS
_j_g3"
/@u@xN
zDkSg?
I_iKZW
)p.D}(
H]Pe"e
4u&Eq$_k,f
SfSk?/
Lx.4VfBi7r
"+-iPeR^?e1
5<mVc[q
r4{OZ~J
zOZYm7
"b[n]W0jG6
.w#!k*
hYlT`<
2E+k,cV
*pDS}H*M
}:uAv#
j"U`U@
-t &l-
u?~GaMd:!ou>
uAu39}J
ewCwWq,
1V^fR),
RYn&dVd$
pZo[xn*aI
9vXmYB
'`}H}I
RkClT`
X}FsauC
vJ~7m5
$sj!f)
s3t;ep*
U bE]VN
<hQdQI!{Ox
Oz=!p6
b*H$e
E|IDg\
;~+Xl9(
3v#O{.!
%c&]Ep
c/aVe0
&m+eSZ
E|IDE}(
WO<eQf0
a+JgRg_m+
z)a4[n)n
bWY4/)Xo,
a+jSF#
n[nVd0
>qE8iU
%b%j`I
;s&*X
E\aSk_
Rf1*}H
o!nZ6Vz>u
nK~KsI
e]iKCX
"{/3y8
"e/NePe]
oWcXT<f2
lj`Vp87
KE}{=x
rNn)c"
JFN;{C
<;86pE
QeQA'}Ix
x~O{OO.t@q
/h/VbW
9#d+Fr$C
HqgLt@
b*H}8
5u*H|
Jr<[Yb#
L`W*v=r$g
(Gr%o.
sFsJY3
h@u@x4
V\i\ZX
Bd9pAK
-OrCLf.
(*}H
P:k8i0vBw0
EsFsMp)
T`-O{<p
pI|Y^j0
H}X^j_
\h~Fl6
o[h18u
ZI|D|8b|I
]i.'b[n
oZ|;;_Zm'
%XPbF
KBSf^b8vAP_
Gk1rEAf
.h|7?~
,g^k\dz
N{Iv1v8
5i#bYl
(d+%|
">x^j[
(aJReY
YjcJ6n
QgPoJW
:\gNSW8
aT~9H|.w
<{1pI|IqD
Ym*b'p
y@Bw+Au
Xl*b&q
j[BwAqD
Ph@pAU
Nx2u#oL
x)l*UDS
Z^fSkM
XZoYDk
F|+lQF
=r-YmT
F^JcRj]
"p%`&MaP
5r4mKz
B[nMpD
6p>Iy0Z
F6i$cOm
~Fy-w1
Q]aNh?`7
Q`MpAn1
tDY\[_
APOz#ID
Tn[nVB
Gq5q=
6iZj'mU
SgOwLu,
0t0|En6
LrDnSd;
1s1{Lv,
@v@sJ~#
/u=w-_hZ
1s6tK}HoY
~DnX]f9
VmW_dM
=w-_hZ
1s6tJ|F{L
/eMvA
#c'eYiY^g:
6n&fOw+
KoW_dN
\dPd[n3
Dn'k(
;aUb*H}:|3
i#bPcV,
.j,cWb;
-b'^aN{Cw,
/d.oV>
0^d#d+
U^k^fQ
w<fRe,
>Xd#i(
-d q)n)fQ2e5r8y?
9vOzOr
QeR,`7
2u2}I|%
]dQd\h2
.i.aU`9
AxMx@t.
2u2}I|%
]dQd\h2
.i.aU`9
AxMx@t.
2u2}I|%
]dQd\h2
.i.aU`9
AxMx@t.
2u2}I|%
]dQd\h2
.i.aU`9
AxMx@t.
2u2}I|%
]dQd\h2
.i.aU`9
AxMx@t.
2u2}I|%
]dQd\h2
.i.aU`9
AxMx@t.
2u2}I|%
]dQd\h2
.i.aU`9
wBwOc9
B{N{Cw-
Wn[nVb8
$c$k_j3
JA95584Z47H5W5GGO45Y4G
_CorExeMain
mscoree.dll
UC1*SA4JSD4bUD2uTC2
UD2uSD4bSA4JUC1*MM3
QF4,UD3ZTC3
UD3ZQF4,@@@
TC2=UD2uTC4
UD2uTC2=`@@
SC3PTD3
TD4OUI1
RC3ASC4
RC3Af33
SB3hTD2
SB3hUB/
UB4lTC3
UB4lU@5
SB3hTC3
SB3hUG9
TD4@SB3
TC4vTC3
UD2uQF.
QA1/SD2
SD2GUC2
UB4]TC3
UB4]UUU
SB4YSC3
TD2RUB3
SD5DTC3
U@2$TD2
SD4bTC3
U@2$UC3
TB3wTC3
TC4v@@@
SD41TC3
UD3xTC3
TB3UTD3
UF6!TC3
UC2HTC3
TC3}TC3
UC1*TC3
UB2BTC3
TC4XTC3
UC4cTC3
UC3oTC3
UB4{TC3
UB4{TC3
UC3oTC3
UC4cTC3
TC4XTC3
UB2BTC3
UC1*TC3
UC3~TC3
TB4ITC3
SD5"TD3
TC4XTC3
TC2zTC3
SD41TC3
TB3wTC3
U@2$TC3
SD4bTC3
SE0%TC3
UC4ETC3
SD4STC3
UD3ZTC3
TD4^TC3
UC2HTC3
QA1/TC3
TC4vTC3
RC3ATC3
UD3iTC3
TD3mTC3
UD3iTC3
UB2BTC3
UB2QTC3
RB1>TC3
UD2uTC3
UD3-TC3
TC2[TC3
SA5+TC3
UC1*SA4JTC3
SA4JUC4cTC3
SD4bTC4vTC3
UD2uSC4
TC4vTC3
UD2uUC4cTC3
SD4bSA4JTC3
SA4JSA5+TC3
UC1*]F.
TC2[TC3
UD3-TC3
UD2uTC3
RB1>TC3
Antivirus Signature
Bkav Clean
Elastic malicious (high confidence)
DrWeb Trojan.Packed2.42850
MicroWorld-eScan Trojan.GenericKD.36400304
FireEye Generic.mg.a16225aa2cb7f0c1
CAT-QuickHeal Trojan.Wacatac
Qihoo-360 Win32/Trojan.Crypt.HgIASPsA
ALYac Trojan.GenericKD.36400304
Cylance Unsafe
VIPRE Trojan.Win32.Generic!BT
AegisLab Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Riskware ( 0040eff71 )
BitDefender Trojan.GenericKD.36400304
K7GW Riskware ( 0040eff71 )
Cybereason malicious.a2cb7f
BitDefenderTheta Clean
Cyren W32/MSIL_Kryptik.DFR.gen!Eldorado
Symantec Trojan.Gen.2
TotalDefense Clean
APEX Malicious
Avast Win32:PWSX-gen [Trj]
ClamAV Clean
Kaspersky HEUR:Trojan.MSIL.Crypt.gen
Alibaba Trojan:MSIL/AgentTesla.75ed4c88
NANO-Antivirus Trojan.Win32.Crypt.inhgxr
ViRobot Trojan.Win32.Z.Agent.1088512.AH
Rising Trojan.GenKryptik!8.AA55 (CLOUD)
Ad-Aware Trojan.GenericKD.36400304
TACHYON Clean
Sophos Mal/Generic-S
Comodo Clean
F-Secure Clean
Baidu Clean
Zillya Trojan.GenKryptik.Win32.74871
TrendMicro TROJ_GEN.R002C0DC121
McAfee-GW-Edition PWS-FCUF!A16225AA2CB7
CMC Clean
Emsisoft Trojan.GenericKD.36400304 (B)
SentinelOne Static AI - Malicious PE
GData Trojan.GenericKD.36400304
Webroot Clean
Avira TR/Kryptik.zupnk
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Trojan.Generic.D22B6CB0
SUPERAntiSpyware Clean
AhnLab-V3 Malware/Gen.RL_Reputation.C4347480
ZoneAlarm Clean
Microsoft Trojan:MSIL/AgentTesla.AM!MTB
Cynet Malicious (score: 100)
ESET-NOD32 a variant of MSIL/GenKryptik.FCEQ
Acronis Clean
McAfee PWS-FCUF!A16225AA2CB7
MAX malware (ai score=81)
VBA32 TScope.Trojan.MSIL
Malwarebytes Trojan.Crypt.MSIL.Generic
Panda Trj/CI.A
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002C0DC121
Tencent Msil.Trojan.Crypt.Lkde
Yandex Trojan.Crypt!KhlVnFiWvyg
Ikarus Trojan.MSIL.Inject
eGambit Clean
Fortinet MSIL/GenKryptik.FCEQ!tr
AVG Win32:PWSX-gen [Trj]
Paloalto generic.ml
CrowdStrike win/malicious_confidence_60% (W)
MaxSecure Trojan.Malware.300983.susgen
No IRMA results available.