Pharaoh2k

Than you, Rich :)

These are virustotal scans: https://www.virustotal.com/gui/file/76a57fb0298d35e65ad9add523063d352d07d7f987018c344a70c21bd21728df https://www.virustotal.com/gui/file/fecab5bfcd83c41088295376ef270e802932fc668ebd5dcdd1ebb81e1b258ebc https://www.virustotal.com/gui/file/e2ab3088c4b409245398ab68ec7e458a6bd44937757b627c135a98478cd47296

By the way, If you need to, you may download the full programs from the developer's ko-fi page:

The zip file contains 3 exe files of a 3 .Net programs which were developed in DevExpress. They are flagged as malicious, but I am quite sure they are not, since I trust the developer. The files are indeed heavily encrypted and obfuscated due to source code protection paranoia more than anything. :) Please kindly check them and whitelist if they are safe. Thank you suspicious samples.zip