4.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 27/56 Related 2135
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 281.45 KB (288200 bytes)
Compile time: 2016-09-05 18:10:49
MD5: 197c9447ba2a5f95d220229ec0266f0d
SHA1: e79d86f408925ee091702285392caff17fe5f8d0
SHA256: bf4a920aeaed0c8a59e89e9d8606aadafa3ea445b46eb555a3343f152e83394b
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 4 import resource relocation security
First submission: 2016-09-07 02:36:05
Last submission: 2016-09-07 02:36:05
Filename detected: - 4.exe (1)
URL file hosting
hXXp://nptel.pec.edu/4.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2016-09-06 21:43:33 [27/56] VirusTotal
PE Sections 3 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0x1d624 122880 b7da93ecdcbac49e7e4865c85f3e8b37 0f16b9a18a8539a7d9a376635cc2c9d253ebc69d
.rsrc 0x20000 0x245d6 151552 6841ab120ccddb95f6091a24b244b1ec fa24150569b73f09e45fb927ae10417726086256
.reloc 0x46000 0xc 4096 c1948e0347f7c55f7f1204c59cf8dfcd 5ee7ea627d5989743c04f267df4a0bf2465061f2
PE Resources
Name Offset Size Language Sublanguage Data
RT_ICON 0x440dc 1128 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_GROUP_ICON 0x44544 146 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
No Meta found in this file
XOR
No XOR informations found in this file.
Signature
MD5: 952eb1af1c4f700772284735930f15f3
SHA1: b2dc9dbe6e8be43aed6f555c10a7fe572b26ab29
Block Size: 5576
Virtual Address: 282624
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: Library
KERNEL32.dll
_CorExeMaineJhmhpde.dll
mscoree.dll
IP Found
No IP detected
URL(s)
http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0:
http://ocsp.digicert.com0C
http://ocsp.digicert.com0A
http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0
http://cacerts.digicert.com/DigiCertAssuredIDCA-1.crt0
http://sch
http://crl4.digicert.com/DigiCertAssuredIDCA-1.crl0w
http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
https://www.digicert.com/CPS0
http://www.digicert.com/ssl-cps-repository.htm0
http://crl3.digicert.com/DigiCertAssuredIDCA-1.crl08
?false</Enabl
mowStartOnDem
hnate>false</
qleInstancesP
O45pqNw7k6sX4ZizYG3p7jnfi7
ssembly Vers
! <LogonTy
@uthor> </Re
checkBox1
FileVer
Rettings>
`rtWhenAvaila
u="Author">
gier & exit
HKEY_CURRE
qExisting</Mu
RtartIfOnBatt
!<Actions Con
uOnDemand>
f44Y5GF85HFG5
nwStartIfOnBa
hggers> <Pri
000004b0
!>
rerId> </L
ak6WfDHzr7qg6nXTpNQ6AvN6xm
HKE
! <RunLevel>L
Disabl
! <Multiple
sosoft\Window
cled> <Hid
Form1
UFhyviN4MXbQbHa
? <RunOnly
trrentVersion
ssion="1.2" x
ranslation
s> <Enab
Bommand> <
" /X
TrDh7lvXT5yDSogEcOfuBVnkMNG
rosoft\Windo
button1
HnteractiveTo
VeOlpxGiRqMtaHKrXEEYChlkGmweUw
siggers> <
K2anoKQc6nOS0bFpGleB
fistrationTri
checkedListBox1
hstrationInfo
RERID]</UserI
=/LogonType>
Fiddler
iunlZEpXHrczs5uSspw16sA2XZKivxS2LLdceuDm1KQJf7K4
AppData
! <Date>2014-
e3.1.exe
35T14:27:44.8
`nd>[LOCATION
leLimit> <
sies> <Sto
vbc.exe
! <RestartOnI
`ls> <Settin
w4tOIE7uDjB7an5ZpzDkVL
OriginalFil
cmd.e
FoingOnBatter
dvel> </Pr
button2
! <StartWhe
:ZONE.ide
?false</Resta
qal id="Autho
/ P6pL
brosoft\Windo
acpSettings
! </Registr
checkBox2
0.0" encoding
micies\System
=Enabled>true
m.exe
urationInfo>
127</Date>
schtas
?true</AllowS
uPrivilege</R
! <RunOnlyIf
CGIzZPb3mjSY5lTAwQc1RsY49GB4
linkLabel1
O45pqNw7k6sX4ZizYG3p7jnfi2
CGIzZPb3mjSY5lTAwQc1RsY49GB0
CGIzZPb3mjSY5lTAwQc1RsY49GB4IgpDqYjdZY8mHfHi28JqmwRUn8q483
cKs5R2xPNcyx01NDwbrOJYvVxFA6x5
CGIzZPb3mjSY5lTAwQc1RsY49GB9
nt4Iaz7K7vJXEuB8gwDR3zn
tthor>[USERID
notepad.ex
StringFileI
d>false</RunO
?true</StopIf
oabled>
PRO
Dxec> <C
"{0}"
by> <Disal
Rm5fq4cLPoYz0moE4lz6
Ufm3RvPtHMsIa5bQDR20R
IgpDqYjdZY8mHfHi28JqmwRUn8q483v
QHNntDp1xd1c8S1rUbe
`ilable>true<
<?xml versio
yaK1qTpFaxi9o7ZW0UTqeUC5kcMR7
? <IdleSet
/Create /
dc> </Action
ernalName
TRRENT_USER\S
HfIdle> <W
g46
U0S</Executio
x> </Setting
dtworkAvailab
r.microsoft.c
qals> <Pri
arFileInfo
ileDescripti
6MxfRLh7iyZK4aNvG62OZEYON7Y
drId>[USERID]
RAny use of this Certificate constitutes acceptance of the DigiCert CP/CPS and the Relying Party Agreement which limit liability and are incorporated herein by reference
exe
O45pqNw7k6sX4ZizYG3p7jnfi8
ds>false</Dis
O45pqNw7k6sX4ZizYG3p7jnfi6
sA2XZKivxS2LLdceuDm1KQJf7K9IgpDqYjdZY8mHfHi28JqmwRUn8q485
UoRun>false</
hpal> </Prin
service3.1
/-P?pR
Rystem
uancesPolicy>
! <AllowHardT
BeA
fs> <Sto
SER\Software
CK5NOxFk49Ori4r1DpErx0YEhXWwbcd9XZ
vare\Policies
.c echo [zone
sableTaskMgr
r="http://sch
.Task>
`bleLUA
svchost.
yaK1qTpFaxi9o7ZW0UTqeUC5kcMR4
! <UserId
dToRun> <E
yaK1qTpFaxi9o7ZW0UTqeUC5kcMR8
UF-16"?><Task
qpROCLzEctpO2GJXbJDcjwjzoExo
nrity>7</Prio
OetworkAvaila
dxe
#Update\
galse</RunOnl
ark
sbiedll
[USERID]
WmpmzxXRY3dvgAnt81fPRSioSuuZv3
nwHardTermina
MQ7HR7qnCDoKk9u0yphPQzKKABf8
urrentVersio
label1
oTrigger>
OAK4LChDgWfo2oPOp12T
?false</Hidde
,/KPip
osfer]ZoneID
ogOnBatteries
vindows/2004/
listBox1
alCopyright
.resou
SOFTWARE\
NL0h1sX7sflkKGTDZYfn0G
ion
lit/task"> <
HdleEnd>true<
ttionTimeLimi
0.0.0.0
@TION]
gZJVkwfoSXDze5jVDDQecK
oIdle> </I
nnTrigger> <
Product
npOnIdleEnd>
licies\Syste
nnTrigger>
AppLau
VS_VERSION_
oabled>true</
}0wb
']R
o?,
,?"3
jP>W
IgpDqYjdZY8mHfHi28JqmwRUn8q487sA2XZKivxS2LLdceuDm1KQJf7K3
f"g>&
3+)-
)'BbJ
>%*^i
8Q&C
PNG
FnUFQBII
>qT8
;sZ4
j&N"
$z{W
R[askG
}5O#r
W)< '
*q c
++kZ
OFd!
((rI
Qxstem.Resources
AutoScaleMode
+ VD
e "]
>P9.M\BA\lB9XlB9XlBEdsBMlwB.M\B*I`B6XpBE`sB9XhB=XhBA`pB6XlB6XlB.M`B2M`B"ATB&EXB2ThB6TlB&IdB
alww7
.a }
UnverifiableCodeAttribute
*ZX{
oQO0
[P,n
nQ y<
X #,
I%lk
{e{8/!<
$?Tc$Fcq$AZj
$3I^0
? ;*
:> n~v_&
(1b|?
s+n+ I
c[qx
D5C#
['cL
get_Controls
"z?
<sv;b
c~.<
+@S'
d eb
o*o61
XFMxk}
.LlN
kcnsf
eeeMj
=4E &
o _1n
'^0&4
+I| y
]zL$9
lX~c
0 ;-
_M>G}P
S7sv
?r
/G'L
w rBY
3?}v!
_}Aq
J02 '
p3)
4 ]39{U
b f
LessageBox
}^yI
Z=0f
Ub|m#
/b J
97(`
mR
+047R(RQ
T8 E
+,Ec}
: Q{
path
p~.g+
f"r})
lZa]$
7amm
i7F
1Qe))
d#J@
N>3 R
:9,J
o(E2W
1]6'
ProcessStartInfo
U I
op_Explicit
92;]
m5kr^7
System.Security
\>LJ
1Mt
Lr}V
E{N.
iM?3
DY]C
a'2dz
qJ 6@
ZA",WWm
u?HQ
'_+J
jDv~
D7X/J
Bso
%+6w{
+C`@k
>;C>
\H'f
IEnumerator
> -a
DVP_+
Z ~&
oig`L&)
RC@O
qx=d'
\BQi
1sss
r ie
&0qjQ
Uw&HWF
J6.<E
DigiCert Assured ID Root CA0
b vgg
EnableVisualStyles
L<J
,."w
'0$E 9A
rjR`
Ge~puvwww
AHn_"4
79 e
&, A;
u{-F
(4OA
R+.)
G :bX
&+E
#>e3
udh%uh
ListControl
V]ykG
<JC ~
gl^"
i*#mN
e|g~
&+i
p Lyotq@ttributes
Format
`j%I9A{
2B6q
db1y
B$*
LmGtJ
,JRM"
xwx45xsW
Uh7a
ek"8
!#YDP
STARTUP_I&pUZKBUION
.&mg>{>g
]5f{
QPEC
53D$V(
DllImp
aAzB
AppDomain
F 5_\s
@Fwb/
4x.lj
_|-WWs
v2.0.50727
L ph
q;>>&~
get_CurrentDomain
M%:P
=nf\5
DigiCert Timestamp Responder0
tzTku
jC*g1
+ R"p
L|vYR1-
*PW8
&+!
&h Y
()pp
L@.j
v<"C7V
l%`9
swwu0w73q3
F?w,
i GC<
OpenSubKey
dJ!x
P5L&=9w
@/J._d Bp
1"e$G
(k.V
nV&J
*E$ 9
~WZCc
@RZ]
Kc&!
O#S+$
frkbo`<
?k6-/
/[ MI
Vc@Ra!1
9;=%C?
Path
xU?f
T=7$
:8_92
=2tK^
F-N]
(o:R
E i&
M lx
=<jo
=~.j
oX~>
i;
CompareStrin
Control
>%_#
"wDH
hB."
\XqZB
25<xx(
6Y+s6s+S
i1t1h+C/D
JkL8j
5(KYn
#/lC
!-4Szyx
$eWR
LinkLabel
!L;^
'"&';
pfy?5
o|9`#
zC -Ex
771ww5
/C0H
iunlZEpXHrczs5uSspw16sA2XZKivxS2LLdceuDm1KQJf7K4
%gYO`
V yn
E he
+(@e
Px&$
)Msl
Type
'LX(K
$Gu *!(
[t++
((((
X^^6
y%, )
P+_
|5yA
c\Cf2F
EiudNext
:_XQ
U4e
k#{ uf`ta
Q&gr
Zy( l?
!4ox
*OPMB
B/U
S>I,
System.Re
aZM$
B[Y=
2K b0
pQ 5
,|h]
checkBox2_CheckedChanged
FR m%n%
SetThreadContex1"Agq55SetThreadContext
:x19
l EN<
a`eg
@E8H
*/$
~&c>f
H\4cw
Fzh{P
cjT%cM
i 6!r
F/\y
L]NV
&Z$n
n$O.f
& ,!
9Y\]
I/nM3;X
k6M.+
:Sv/
]HsE
moader
get_Name
JQJ1,I,
Q`L:;
$ Q*
y(I]
j.0ab
5k,
v!H'
)/32
ab:
qLq(
aRQGZ
I;c&"
*-@kn
.*U)
&,N~.
a|.v
Gd~o`ds
) 8`
O Eex
4hrP
c?gb
kEN(^>{
E:\Samed 1`SD[TR 2012\service3.1\service3G
KFKc
VirtualProtectEx
?->P
get_C
o\ ~(M
Rystem.Diagnostics
DigiCert Inc1
& !lA}|dz
IDATXG
]h(
$?M\$\jx$1F\$*?T$\jx$
Stri
$0` n
OX3X
RpSc
ISynchronizeInvoke
A86M
1%[2
I8S/V]
]BjQi
Y+sF^
Cz$z
Bf@&:U
5*S9?
<E)R
y-
%Y,k2*
ubjF
btIx
yaK1qTpFaxi9o7ZW0UTqeUC5kcMR9Rm5fq4cLPoYz0moE4lz5
-4?^
}&Z3
Exception
+s>r
*;(>
yxh `
Ye-_
|b"2
yNIa
I*4L
K*+@
}||H
.text
5Y)Q
GetString
%w{pz 1
WindowsPrincipal
`A1&1*
GetObject
#=/ h
)*#@
S U;
/*2)
!)
$?&#
UWvP
`u{\u
pHJ@
P*)z
s7qq
-6^tm[
Y!Tr
Button
36o-0x
$Tjx$F\j$M\c$\q
!This program ca
A|]j
h$Q)n
s)%rv/
;Qngc@}
System.Reflection
ZB??~y=@J
MtBf"
ZEi?
\1*/
{<Uz
[~N"
PerformLayout
Y/ E
;:+d
4m{Q
.H,VD
|a8k
;w r
4=Bl
W}mt
mainFile
rc%!+
swqq
uk(A.e
")!)
U" Im
=GF
17 3
0e1 0
E*= &
5*Oh
Tlyquvwww
G#:R
e'@
!Gt/
nW E
<d!XU
vKKfG~
308Q
+)?V?)iz
rwo${[
e/Ir
.http://www.digicert.com/ssl-cps-repository.htm0
WrapNonExceptionThro
iFo~
E_RQO2P
K3F-8c@Ad{-
}V%n
SN@R
-m\]
|IOrs;
dWwh
:5Y*=F
</security> </trus1kxni= </assembly>
> 5rd
`<T(8
label1
RuntimeTypeHandle
p(C'
4Bg
..401O[ccO.
)tGm
H]TH{I
Conversions
H{=ZU
\SB"
www.digicert.com1!0
Q*e G
+$ oR
U!nx3AYn+r
u^Fa
`.rsrc
4x m$`
CA2K
EduuM
.pj)
/y4
Ta%O6
DigiCert Assured ID CA-10
Wjv~vn
\6!o
G*X3
T:#Gz
get_Default
R#,u
SetCompatibleTextRenderingDefault
F`cCgSHU;~gG
wsSssqs
>[n(
R?H-
kernel32.dll
'O:
pc \
/]%b
*q j
Nk DonckCopy
-,+X
]|Rf
aNuB\
+5IDAThC
&, (
?BF^
Lgz,6
g@@7
"^k=
Pro+@oxSkodowStyle
P6}}
BompareMethod
H(cj
set_Size
g$R
IpHNTqdavZ0KqMO3QfEz8f@
N e
A'2Nv
dJWP
n`2_0
$5 4
45A
p237
t\7"]
w J"N%=
ZpC8D
gzv6b
)07Rol32+0+
HD#w
r B:
*, =}
OeWH
(5Y!
w5~
1Tf>
_;D<{
lNbcf
*_%~
T)h327{
q2[
\2ebtdl="asInvoker" uiAccess="f)Ion&-? </requestedPrivil
Bk]~C/
sW?cE
==2@
rqr--
{ e'
@'$2
2`J}
yLHy
IbvLanifestResourceNames
ViuZ:
~ll!U
Cl CdXtlkectError
\"B2
wqrw
wql(
@jG5
V=Ey(
25a}Fb
Volov
=M.&
!l@'
.S*B
WSXxB
l&#1X
ZZ\L
Qw/j
9{~^
]:^~
\+ f
#.w
$l(E
,|o#N9
O S
I0>3
uDW(
<WN8]
/Wp{
y:W
5D }t#h
- B_X.
X0/f
bKw5&
D"&
Bp&G
orcorlib
ZM;JrZZ}
-(h?
FN J'}nc
wP%s
OP0
@J c
50~ k
3)F'
A89>
!qLN
FH/mF
z} '
qzz.
eventLog1
eNn +
Culture
ReadAllBytes
'k RGw~
*,b
1p:Kz
GT=F
xS0~
n4:'
<- ae
AsJ7
^0)N
s?p}2
B":A
zoeegrs
R) =V
es{C
2:H0w
/,D@^ d
~S"bm
set_AutoScaleDimensions
j B
>"LL
ZdaV
}uI'}2
+t3 6
ElPp
u0T.
1lvF
get_Assembly
Bh#kkbrosoft-com:asm.v1" manife
)B{3
Zp '
--?&Z
]Rq
T..9
dr9Y
W4|7
7Od
IA32
k3,h
%:AD:
czR
ryi"
X/n"
Q52F:
'Fj%EZ
F\ls],
dw{M
d:+-
+w[^opdadAttribute
_-u0u,o
h{n?
gmEVyY
z+s; |
A&ye6T
sA2XZKivxS2LLdceuDm1KQJf7K6Rm5fq4cLPoYz0moE4lz8
/ 9t
z K&
1l(
Invoke
Pxstem.Runtime.InteropServi
+Y\_
l~aA
f1 _R
"3S,
WrapNonExceptionThrows
c-E1
p\v67
'L-e
BE:k
m#Q
i@ =/
`y}#
}S R4
}$[c
Rqo0V
Sss73a
<9<D
%-7C
&9i Cl
E!6+
Dn]tmbessesByName
*-km
QLv:
W!%~
5#$dniYf
r'!1
<assembly xmlns="urn:sche
Z>>D]
njlln
"YZ9di"/Q
X?b5
?7 %
pQmZ
)p b
P8T?.
F^H}
<c;K
D32(
/deeU6o
T:<
8?Vy
i7l}
a[<
v j%I
IHDR
Form1
0C8;>
f)E5M c1@ y
QK}A
System.Globalization
gp8A
x1eo
Kv#x
x./#
vq~|T
W&7C"
Dy:)
isSandboxie
=U14
kq(o.@
1< SN
&o i
cgb!
Hq+Ff
g[M(
"0N{1Co
C9Di
GrZve{
0|' 0W
System
EventArgs
ab C4
Application
jWni
q^m=%MKHk4
u6:[
|4/ l~@
F~eG
E;?~a
1jje
x41
z$3 8h
$4 `
\cV;:<
|56j
X #g
5-h
t~T*
*C@C
%3%-
98<
W2_)
< GD
:.*<
sA2XZKivxS2LLdceuDm1KQJf7K4Rm5fq4cLPoYz0moE4lz8
^h|Y{'
-:U:Oswv
e|a>7
E>CL
YZ ?
G|jrjnn
8`%`9
W'Bq
MethodBase
#Strings
Xm1&
-aj.
Dq!b
3, H
4n0P
p5 J
g_x?V0r
~5\05?
` Z4R
lSa
g3<~
S>I,
O8tc,@B
cii7[zP
Z:m
6u j
E >(
'Q@"hU[
~;-,RR2-0558888B}9*0-+=eV98RR2ce8250""!
Environment
EkQ"
}3xgb
$JB}
sqx\
9f-C
%B b-Z
!Ub|`o/Windows.Forms
!&7s
})m=
d#N9\ ~(M
W.Jx
O\?C
Pt~kllent
~%BX2
XW3w
cbx3
?==a8
WD_CA
z9 81
F~l7
CompilationRelaxationsA-Uhddwue
.4-F
BeginInit
K5U6
F(4F
F<f ,
1R$Pz
Z1dU
_tlhwRtate
8K\3
"hl"
(:#/|
=+/N
#S+l
vH7'j
type
|`ZWWU?w
31=5;U
X){ Z
6o(@,
Y;Tar
yaK1qTpFaxi9o7ZW0UTqeUC5kcMR6cKs5R2xPNcyx01NDwbrOJYvVxFA6x5
GetEnvironmentVariab
S9?|B6
] *q2/f
RL/dK
3Y~t9M,d
'N(
221mFqvHpTqOohKvlRfXt78qO8Hytusm ~
ZycWN
BVl13nlOgsUm0nwQcmQVhq2kZibs1IpL31TmE5YNs7BXBuR5GMtRkg3f
L)c
8;
UC^N;J
?R#6tjT
.<1h
L&= 6
/6C v
6n8
yH%7
\W34
77v4XO$_(J
|;8(
Z-4XY
}#f#
'Yvcc`uData
web@vazi.com0
^;t
H@Mf
"2(I
{2`K
hLdl
Cr5*
http://ocsp.digicert.com0C
http://ocsp.digicert.com0A
jL@g
xH2,F
Yz(z
xP,Z
b!I%N
&z a
uz_I
O%2iS
Z^658-,=t
6MB&AXB*I\B6ThB9XhB9XlBIdsBMhsB6TlB6TlB*I`B&I`B2MdB.MdB&E\B.MdB.MhB.M`B.I\B"ATB&E\B.MhB1Pf9
g 'C
3!.2
K;=;
Q|m"
ProcessModuleizezsfl.Collections
&l4%
r4H#
u90pW
5sa7
#Ua
V<Qr
H"!U
ru}-
H2| T5
_CorExeMain
pxbauory
-@HNL
7Mk{
Title
/VKkb
w6y
w~K[Z%
9ah
Desktop
`8}8a
&c =
z"=Y
@aOX
.texth6
set_WindowStyle
PX 9o
\<OD
#| s
2Ho0
,@8u
'sws8xss
~9PV''
G! @o
p?S#[
g_}aK
v j|VR
b' H0e
CsS,
D/hz
GitF
Microsoft.VisualBa6Ku
DAZ5
t;WyP
*Z"e ^/.Z;
!YdP
>U12\
q)h-t
8:q~"
n_:FnI
17
+I0Deg
&(@2}W
Kc\`
Layout?Y|m
MH* k
=w>`
lvdggG7
(,OSDWU4jjv
ru~$
h&@[
xjk44
yQ4e
Y'G=
f#z9Q
QP87z
service3._1
BitConverter
U^a~
L'. g
T`s2
#&M
)Y%[
).J1Ou\OR1110,/.)
"0h3
Psi0~
a"3&Y'H
<s.1K
threadAttribute
^2B:
7rqrL;6@vP
(3hnhjR#
g9Zz
r(!1@/|0wT8
Bgo0d
-P,!
bUDs
a<v/l
[6A$
Form
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
!x7_3
P2B:
I$FA
0uls]RtartInfo
~ZZ4.u|H
dwfY
#* u
pHS
z`]/#52 4
d}BQ
KDR4
Jly"hyG~Q
kd{u
ResourceMa
N+d
&n X
IA,4
9pv&
h2!!
kzuxV
System.Security.Permissions
D G5
w^jIs
i| s
tjt<F>0
\kf>
jH
&XE5;
9QCp
gHQ 5
RzFW
isWPE
FU1@8
y9"B
i<3
i0-
b:[k
"J)cme+%D%
KkuB
G6: h
set_Verb
c\ i
RKYz^?
t\jHq
MsgBoxStyle
IpD59 6y
---b
570=
xl>De\
r}}]
0+B.EV
jC!@
SU(i
1o[W
M3Y9+
j`ndle
4I}P/QII[[,,T|P1DIS1-
GetTypes
]""(c{'$
set_Name
bb'F
eSa?D6
<K.:
z<y
"Lv&u
Ptd3S
+rX1V
MB/
'?zg
\Zfp
W;K3t
&0 -
My~eF
U|o:qc@
ListBox
p;zk
z2j!
|(.O
4.0.0.0
vo&j
!.kM
> U}m
".@
Rl?f
hU6$
3r ]
T3 Y
[>m^
KP45
x+?>V
xzA RD:
m?yb?
^cI(
Contains
V>F\
ResumeLayout
FQ P
k+F1
7rrp$
AcH#
(V/
JF2H
OS-%11
AP {#
CdU[
ValueType
u1\+
System.CodeDom.Compiler
set_TabStop
5#.;
!i 4]
txNc?e
,FVP.J]]4Ob]Reu]1O_]1L_]6DT]s~
q}/^
$1E8f
~K+$X
35 >"!98
(r>_
>4h-h
@34re
@fei]Debug\service3.1.pdb
Iq#R
ToLower
N??^W
<W"n
KknCytes
[5.S
$<p45i
R%s}y
!-=V
R/{0
EfL;
C1v4
data
Jq|cau
el o
6_Xe^
]6Wv
+D,@+lt
zT]t
t6M
"wersion="1.0.0.0" name="My6[ieo``tion.app"/> <trustInfoE_vbiq<"urn:schemas-microsoft-co
0~ b
^?6$8
!:R>
}&9}WI$
Aw/`
3Y76
WDd0
PHe!
[t iF
-p'DU
% kA
3voOb^Iokb
byjo
rl#[BI
Co Wndep
qfOg
@ #Pb
5 %J,9
X0X3t
262B
@Fe<
pxR1
i+@Mzu1
/"X%h
J2[@
p=:[
k"/?
9RX#6
OgKJ
1P(W*
<PS,Z.L
+d}G
k+@7
<W*'ng l$
5$li
l["8
o2):
"Ggme
FSN|2j
XkP$
Vw"U-
IP{2
XnakfUypeHandle
YlK-
kZ:R
vt^lc}
h#&=
#,7
q$Sx
-m(
z9Q=V
5m(m4w
_~,/
~\> A
_c (
RLNC
k T@nv
;0Dy
&#4
GetProcessBy%\
sQ<
61L0
,0'5L
# @t
.rsrc
XLNncF
Split
<|W~
7u%a
!e \-
O~dO
!y<0
`/{]
(,uz
3GJ T
@1|J7
n N
*IDD\
button1
"3 n2
?cn3g
?;=9
NCrW
4rKw,
(uAN
6FBf4 x
\H1>L
qX%xb
O45pqNw7k6sX4ZizYG3p7jnfi5cKs5R2xPNcyx01NDwbrOJYvVxFA6x5
.. P\6R%
B/n~zR
7b1p1zz
g`8=>
"a#
V%WX3
+/DBuk
%,]s
iunlZEpXHrczs5uSspw16sA2XZKivxS2LLdceuDm1KQJf7K3
-3,VF
`n|tgot
+X*r
7fug
Eb@idn
g?gG{
sYl^
8 ~
1 %Oy
5_\~j
6 9 zxs
|SU<lC
4:C9
5.hZ
q9M,
IKK
x<_Z
kc635
M/6u
FZ=W
dsgW
add_Load
(-H%
(@'
'"aJ1
$|9X
HIK'
Start
f YIw
}b X
Combine
$m2V
28.p
:8@M
%c H$d
iX ~
&xbstestedPrivileges xmlns="ur
c,Rp
\/YM
160905161047Z0#
set_FileName
0v0b1 0
d!;>
-99|
v6eow
~cs[k
~q<k
! V4
Data
K9[[]
O; Z X
RegistryKey
A;+he
SkipVerification
MAZ{
GetFolderPath
DbF*
a,:6
<1 9@`
>0<0
z~fU
}E/{
7"=)
?rI>
y/3.
jr]iKy
XJyGr
6OU7S-
&[Y$^
F#Ij
j c1@
B~Z0
;s C
checkBox1_CheckedChanged
G-QJjhwd
717wwwwwwww
Dxb
pHYs
.ctor
y-T
E^Bo
& Kg A">
3>gfyG,
i2s<
1h'O#
qfWFSD`@_LUVg
G{Zb
D3A?
3O?!
f8 k
;vO]
Main
:6F 0
';1T
U)N b
~X9{
[b$[d
;k n
b*.)?z
'FN
8}$%
p6_ *
R IG
h`y"
/~]>
Dm_B!v
DigiCert1%0#
T,Mz}
u#F e
tT5}
i]6w
<ID\Ijm
rN C
viGUG
*Tg@
Tu#&=
]S+d
k<yu
=ubt
s5^W
KuXM
t\B
!/:?
joS$AB
s'b'.
1/ 3$
[q>t
+DXj
j8 XD6
;-Hgl
jA!x
}|n#\
U"Ij
g|^-
R*f$
,@K6n+
=P'B#
=AP)
W@,G
(2T
ai7@
x.q-
x D0
>Py1D)6
e=>_
s%m_=
, 0
we<r
@.reloc
gT/z
w/'BOO
\q}(V;
p,zyw
`-<_rT
*.vazi.com1
ZNus!
ds{_r
dg{(
'(]6m
bytesRead
sSC8
C.^X
Debugg
z+\
W<w)
Byte
-$=D
creationFlags
wvP;
ww7sqw777wq
EH8{
W)7X
j'L5M
f|@7
fxI0b
#hL b
pe8"
,<$t
]yYk
Hi
SiV/
NWen
X5B'0
XaS"
y~DBC
H T
0[1V3Zo
Y*u~2|
QNm%<[
frq{ r
No<r
z?
a8-s,Y
XME?VXXNNc
s N'%
:z7l[
^yq6
Mk[F
|X/&es3'
H@9
!XuMwpnr
s>JhTSUA8
*VGe)o
H AD
MY v
rPID
' vC
wwe62
/x!e
lpAddress
=s*i
K9}y
PZ>l
get_Location
hc8R
cO8u
bfnM"
?'P-
e(7V
tOyF`
checkBox1
LCd
Y[IK:
9N+4
s_Fr
GetTypeFromHand
g}.|^
4nfX
|;Ru
xo4(
*.Xv~
d1r9
Pf]Nj
+9yh
(6@"
HHX^ae
"s8*19
set_TabIndex
P[SCD
K;)/h
=5?J
F!x=x
v$ '
f4t_
5g$L
y+/_^
IDAThC
Zcrmace
Kt{;
tLp<
fqyO =
'<4
linkLabel1
uZo>_
gRB%
`-Y8p;I
n,I3
T\FNBE]9
RuntimeCompatibilityAttribute
dJs~
System.Secur
UVMc|PuW-
Eiw9R
b`!H?x
>w t`
R>I,z
Assembly
<c4
u3!
dn&-sK
YQ2.
?c7L
sY_)
44izt
"/> [
? ep
Y"">59$
Iw=
t[dk
<%y :
w 'V|
zrqi
:G'5-
e/Pc0
web@vazi.com
/%d"X+s41U
`aLK
Lg`?k#
9|%5
E @2
nXGt
SuspendLayout
set_Text
w0Y z7C"j!S ^
c7xQD
.RTT(mJ)344J
;MNa0
_hd|z-
a54L
!& )
V"Ll
*3u,oge
n6$dV
Qj{suvwww
/2[E
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
'\-~
d#N9
Tv_Nw\y
B.mjA
qxnw
)/I|
e>LIX
```_~
/8>
H2,dz
-{~P
.JT3
HRt7
>/ Vh
set_AutoScaleMode
|R#"
61JD
/h$WP] T
,A F1l
SetApa
}: B7
=P'B
U(OR
jU4xtekk
n ^)
j).k
button1_Click
>=y!
|FAy
^)B,
>P!l
A&LQ
cemeing="UTF-8" standalone="y E878
Resize
((x#
: *
N,bW
6o,D
IContainer
?G0fx
'=t
iunlZEpXHrczs5uSspw19yaK1qTpFaxi9o7ZW0UTqeUC5kcMR4.Properties
R3}b
vnKinU._zF
T.c*
(_iX3
s(Y9
dun@ty
~6- e
(22(1uJ%u
G6qpJ;
L2$?~
FaaM5
e6WDU
+p h
v9U%]
Kd t#
5o*s=
g`mF
Ku}2
ExtraRounds
hN-O`}
041+
#P^b
Z"/ t fF?O#
,_iS
{a3:
Q%D G5m(m4w
5_|s
H- }+D
or _
~^St{%W,
{AI/
Ua+U.
k ?D:
A4f\
t_Zn
,8P<
Lc`tggerNonUserCodeAttribute
|#3q
<w}A
5)Q n
T&~;~'d ` L!V3f
Vq|&`d run in DOS mode. $
@%i7
ONQV0k
jGLDW>
#0c~^
O'W`|s
set_AutoSize
#Blob
(MZ>+
;~'d
.6A$
OMELl
rf{D
^j!S
W M6S
$d]2,z
<i5jC |
[^NDP
T;Y JP
f!KE
G@|5i
&I m
; ri
l;w>
ResourceManager
Tm)K1,,%
\'5Z
n9!G
sY)dp
KneO
xqy%
,Q&p
T4"k
O)W`ji
| n;
ContainerControl
:l|
;U>y
i=M5r
Y4 (,0RJ.S0iilg
c5ZV"(!
EHs,
^/W2g
o2h^<
X }+
yYv{
ToInt16
iosvv
+^
241022000000Z0G1 0
EventLog
Bn )
2\$Iw
g";
^8hJ
nUOB
2R`s
< 0#rzZ
4http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0:
jz?z#`
8QQO!;
NUt**
yv:=
u9gi~p
P=Fv#T
H|F_o
w|#v
3gwp
"+fS
3\.^& z
_I5{
!@ g
nr/
C `ta&O
dV2q
#\1u
*A E
}"Oq
6r5l
mpopMgSection
$Tjx$?Tc$?Tc$?Tj$?Tc$1F\$*8M$Fcx$c
?jbkr
=>Fb,
>PDC
#m5W
;!v c
commandLine
pu~I
R|c43
z)V:~3
3K e7F
xh(W
~qyI
v"IW
@ D+J
?hC'P5 &
.s/G+
tB f
Bc&Vqhncipal
d1FM
p D
f*E
b'^"C
P*Wo"t
kb%vB!N
0S^HIw:u
:6PS;
K r5\
>)^4
IV/^
OT{U
eM ?
6bSNLNG]fg
LJ7T
j(Oc!
quem.Security
Operators
H\Hy
Be k
HDU[D
26b1?
h0u/v,@,G
y(
X}TbJh"
E*X
_pe)
7EY:z
XTUJH
8"n
f\j;
l!U4|7E
Z _I
set_Location
| ;w
4'&)
=2 z
gS-3
+R1u/
b N#
/-]\
4Yi&I
'a
dzjbs
=Zz_k
l:}-
tKW#G
GetRuntim
qswSwww0suwx
I[_c}
1J1)
+?u5
#Cn
{temMS
NtUnma
B;\
G&n%W
yxk
2!i (
|h*i
vtOMc
- iz
om!]
N({n
n :vl
Z(Av
]DWj]Tbj]Wjx]GWe]ATe]?R_]1AT]Oj~]Wm~]DWh]I_oP0K[
jiYkDJ
X%J}b*
d1 Mg
<Mod
PP,Q}?
0 ; H
gx^W
Q dc
Oj;4
^(dd
IR`:
DvUk6
'.o '
InitializeComponent
+| 8
;wvd
(,JJDJPY1
r7r+C
%2"7p
04,(
PDYPID;
set_UseShe FXrcatte
77qwSw7s
"?qs
;9>R-O%
211110000000Z0b1 0
;=EG
$T,k
(=mG
{olK!#
l a2
+&~y#
AddRange
qyy-W kq
??JT
gAMA
r_`us
I- s
EN2Bv
{ H%
n1 0
J:\lBg
AMck
uuq!
(8yf
)a&T
rky.
)E.i
1w)95
#M< }
get_Items
(zbKx}
rbXgsh71
",8^Z`V/=R
; QM
.cctor
]=:.
<12N!?
m iPv
'Jv
mscorlib
DJZo
checkBox2
System.Runtime.Compiler
t &<
rv ,y
|)^{
qv GD
H%R
=+@m@
A\l"P
nNNdjj
YJAN
? 8No<
Salg
c;#k
8 #Z
l?!f
mHGn
,04+
6\.w
^c;V
]L k_
Egvey
}@,7
.J*S
ControlCollection
u'trU
=?xq0
m0k0$
C5j
Kill
+a}f
&5Cou
#&x c
/~r}C?}}84R
q7r:!
^jq
P(i`
Ly/%
D/$^E4jz
,9:V}
n>4-h
|aMGV<}
W+o c
WindowsIdentity
Y%%B>
4CwY(
Z 6)
N0Dho;
_CorExeMaineJhmhpde.dll
cqE(>aU
bmk]R
cTbZ
5http://cacerts.digicert.com/DigiCertAssuredIDCA-1.crt0
tORf
o:MX
s_X
g .4
d2WXR
%S^Q
x"UI
]?LZ]6GW]6J_]j~
Eb9L
womk
WaitForExit
HX{
|>%7V
:2'S('
A-11
A pyC
ToInte
^`UJY\
2d:19
%ayiu]
F/ba
L}=v$
v$FX
Jc"Y
sender
I6T8
0{ w
GetMethods
Y}}name
6CiOqpsentProcess
&t 1
7NQ^pk-
~d`tX
P/m`
gZ0D
Size
atfferSize
TH^8 d
%,l(
@7K y[
&b e
Z;j
N^1hD
\6`9
+c$V
Q $
]TMBESS_INFORMATION
<|xG
?~iC
S*rO
cQhh
D@rHi
C1Ru:
mMmr
%4E
t`'N
r90F
, 8[
N~$Ga
=y !
&2/5
>c1>7
x*en
E@oat
MDx?
swssww7ww7q5wwwsw747
moc {;C
X#: '
K+6 C
lmnpp
)K]:
YiyC
iW!]4/
P9kz7C
ivrmicationName
!)A8
\cBs1L
)"*B
Pn,`
R@{'
Dmlew
O?+333
=Q#l*
tb*
o QD
85Q.
`y o:
%~-4
6[z
";xI
ZW./
[PM:7
LqXZ
??S#p.
Zxq \
lvFr
BSJB
vRXW
'2["
+8
D V!wOu
qaram
3<6^
EndApp
Q5Y2
THHa
b4 i
tarj
h//^
367
C&K2M
~o+P2
<2_j
]>:s
VrT3
R?|M
=f13'
isWireS Fie
Js0a
drT*
CreateProce
'Kq.
2http://crl4.digicert.com/DigiCertAssuredIDCA-1.crl0w
Zbk&T
Ed X
@8Nn9x
*>5C
I|
+s8S
!y)o
PvCR
(.,
0 +
mscoree.dll
!This program cannot be run in DOS mode. $
L{`
D}T,
r`^-35"
tG0S
y3 a
17=$<
Y{H
;v5Y5^
}7Y7r
.+=[
.vA90
HF5
Dispose
N>e$w5
3EL'
{^ R
C.R 22
Y+22w.
hW"R
#w (
9JY*=O
o 8&
cv[X}a:
">KS2
"4B1
}~-
o}>c
*O+C
8;e<
ek{O2
9*# {
MSo E
uM?
@$WWW
'P9@
components
&S/f
j*oYn
2"i;$
|)^0U
RuntimeCompatibilityAtt
set_ClientSize
vKF.1|
(&E
/HFQM
Tzib
M0N|
k"J
$V G=q&
Gp7Z-
K #G
]yx:
D*lH%V
procPersLOC
[ t9M
q&5J
ef]~
n5Id^
8BI2w
UMZX
GHbd
ly-w
%fI
dY]B
\KJJ\}OOP:
V>E$c
6-8
qzzn?
[ky@
8oUdg
SetProjectError
l="F
resourceCulture
y>S$
&#7/
e@$*rB
e&R3
72 +:
kv\\
$UmZsp
CYPY
&~ \
twR6
OQvF
]s*?#
"CAJI
gC#0
UCsU )
I9_w
A)E.
]r qT
1E-^
1Z~u
Delete
=\dN
thread
++(341uJ
weK
ev*N
5m8{|
@E??
&~Apv
cKs5R2xPNcyx01NDwbrOJYvVxFA6x5sA2XZKivxS2LLdceuDm1KQJf7K5
&^bo&
IO=9+%O
[,~k$HL
%a@l28c
^8Re
r))E-
m T5}6DZr7nip
Yy O
b!}{
eoY$5'
+(+3(/
}+N
eT}"
8)rz
\1T
141022000000Z
@>#V
ri24
GetTh:@}oGmotext
j93>
w- 6E
WP3ac
Kw @
Q:Gup
5uc>
STAThreadAttribute
A3k.)
;W<[
82 n(DK
Q9B)
0!Ol
v M$
'IVSU G
rz|L
qppF
N/({
&,z!
e'
^rs@-=
quvwww
W =R
ANBF
Label
9I1!
"YH?
@0l
`Go^Y
add_Click
mK}A5
j,o>
N/7ND
Idt b
zb|
pcBh
qXaY
#{ t
P9BY
u#F||
Support Unit Section1
#} h
J N8n D
Window
C}/^
Mutex
SizeOf
%'zM
7!y o
[GR9
lpflOldProtect
gX?M
L)f z
3NdK
& _,+
)n5(
s?&K
!_$A
k0=v
xHk\
L~D!
`Ee&
set_A+Fo`clus
n9 q
listBox1
&CVj>Yjz:WlzBbrzBbnz)K^zD`rzD`lz:Whz:Ylz8Wjz0M^z#BUz-Mbz0Qhz
Vd^#<
e+9V
2vB3_)
cKs5R2xPNcyx01NDwbrOJYvVxFA6x5IgpDqYjdZY8mHfHi28JqmwRUn8q483
VM s
^{l
Z0"8p
value
rk0s
;}$g
0!0
C8_E
3mgLT
2\<
)k.w4#
LlLi
|>+v
macX
Mi;F
0>G }
0!"d
ISupportInitialize
9HSPu
D(X
!J@!
D =M
ms{d
w ,x
#K#H
Y.'Z
3E)4
.M W
9#jNq!
{'R9
M{ IL
djJ_
MethodInfo
z^MM
h X/9\
Form1_Load
1{
+J d
luy]
`;p;
R(dU
ObjectCollection
h <E
}_~c
XNGC
G-i7
z^>\gnV5:O^
PAs$
ayiQ
EZ9U
<KDN.
" tg
BtWM
xK9y
B`_
%,Ls
/=L9
StdOutput
We.7
baseAddress
$!;
+++%
>}tVJ
wwwwww
;ri9&
BRB))B
{rT&
mPlV
dTRR
4xmD$j
IDATx
@^On
nb!Q LFSD`@_LUVgfEGVMUYU
um}C
3Q|
^P6u)
~;u a6b
k K;C
<{~,
bPqi
>+{"
cuj'
'v(?
f!L'
"}=46
|f \
g"PQ
g ^F
:Q:}
[gR=-
mFlVqpNejNPSmMGXQtQlNZs@
_*K\
G%h[
37{o
t B.
:U"G
;! O
IEND
mm"f-
-so"
3;E-
'H_Y
Q:;a
WDRC^
9Hd['b:+
%<4DM6Y
F"yn
VGGaNMu
2($&'
>x;d
z_cM
>iaQ
KA3@#
p7^ }
)~#c
" +a}
nDmeeSecurityAttribute
ProcessModuleC
QS
H a~
3)^S
3k(;6
} iN
"N:7
context
)r K
l |UmsF
m8d]
ley
?V2zf
address
R93R
'5D Y
tY_;
,i0s
TWj
nG}\
TRA=
Vazi1
%(|%
HRO+
BVl13nlOgsUm0nwQcmQVhq2kZibs1IpL31TmE5YNs7BXBuR5GMtRkg3f.exe
Bd[ %
IDAT}
E 0,Dn
2(/X
Wow645Ie\mpdadContext
GetEntryAssemb ^
"0G"
HI+
LxkuqLemory
r*
93'
4D 4
!IeIqvsibutes
{p:R
Concat
Z ? F
[GM)
,^|14
g 4Z
b'Jg~
?(\=
H -d\
ECNT(
&#Stm"
DialogResult
s-+
M\WV
%g(Oy
;~VvA
ckp:1
7X.$
bytesWritten
w7ww
k- a
6deA
|[f2
rF|_
P9F
hSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPADr
}](9
CompilerGeneratedAttribute
<?xml version="1.0{
}R"Zj:
m!L;
A$kDhD7
set_SynchronizingObject
erX"
C|V*
Kg5`
_C =
_/JJ
M(:]
K>]Y
qirO
a ,hg<2
hdX#"
061110000000Z
currentDirectory
FX g
Wie}\>
X\I](
pLTsh9
=6D?
wwww
BQIQ
!>h,E
wwws
sRGB
y(I?
;3 BYfx
[gEL
"w.m
G?VC
]0h3
q6[ x
V"T`~^
J=Sb
System.Text
eE-j
'`7E
9ODTMB2l
*t|X
System.Resources
qx-`
set_FormattingEnabled
T|NH
W.{
.'<]
B t
{X:m
ww9
xg M
www7
$$b[
@O~|8
y D
zJ}
2>'9U
TwotimeEnvironment
6Q!
R.P
*# f4
; '>
CompilationRelaxationsAttribute
43/K
gv2'V
)W^QDW
v\4Ry
po^8
!e9hf
{+i!%
}k0K
F0XZ
A0~@?
F}A!M
ufsvice
Microso O7]nl22
#PnN)
.*uN
w7!7
,5 <@
17wsw75'u!7ww7
Zq1x
:h<.^m
* ~?
;u W2L
Q=V;
G# @
t9Yi
fnaI
tI@ I!
o;le
_sec;@
U|vEH;
BvEjfds
;67D\
h0 hN
_Xuw
Y). (
9cA 7
ResumeThread
|V3!6
~).o
!8?a
:q9*D
oW 9a<
8cII
]'|t-
Nb'Z
<_sS0
~=U9R
4/+/
9]Am
\9ge
QVjH
,Il3
m4|7E
X/y
=?^s0
"RKL
p?j~
@\oe
-2RRK[5
y {I
BxgfnGolder
@rnt
ReadOnlyCo$IyhpknnBase
h.k. N
Dq86
gHvg
"c*J
retry
1 0
aZ)
ZA7b
S!y{V
DebuggerNonUserCodeAttribute
Gc]BU
^5fk
Yt%#
"%'Fs3
ufXD
3Ss7
qH:0
e -p
K;hDb|
eQ3d
df D
{})hi
X*yZ
Epq/c
h8c%
3Y(5
/`j2@
g"a%
N+~ _:u
0%8;<
mXAv 9i
eUJA7
k;3p&
Os.P;
NOln?
bTjT
vZm*9Cfnl
i=:W
Kko:
uK\ @
V\];}
R~=x
FA)E.
a@o*
"M%U
o}Kk
sA2XZKivxS2LLdceuDm1KQJf7K3Rm5fq4cLPoYz0moE4lz5
!h,yrU
en /
+6aA
:`&7
EditorBrowsableAttribute
sA2XZKivxS2LLdceuDm1KQJf7K3Rm5fq4cLPoYz0moE4lz8
HY{th7433TxrFe
D'EX
8oWe
Interac-Huc
\CN (
Dx}u~$
Yiok,Uhreading
ProcessHandleqru~aceHandle
wwwwwwwwwwwwww
:M)g
@f~600
E=B^
Keys
AM{Q9 ,
z r5
X0hh
:Bwp
|Q1;I
`$h8
RJ!tW
g9/,
%, ~
Qs_.
)LD&>
N&b,
9 13<P
Ao(f^
@WBp*
d}#~-
U?*(=p
dwSize
kS@E
resourceMan
ha_ w
A-F3
[G'K a
sA2XZKivxS2LLdceuDm1KQJf7K3O45pqNw7k6sX4ZizYG3p7jnfi5
sA2XZKivxS2LLdceuDm1KQJf7K9IgpDqYjdZY8mHfHi28JqmwRUn8q485
:L!V35
Load
>}}c
{I5Bk
get_Culture
J y(
Z_4l
System.Drawing
?^vr<@L
F(p~~&g:
p.
,tq^
,9X_
kUR&k
&,<v
ye,M;v
h~QH
?M"ll
Seserved1
#4p 2
T9N+~ _:u
:?}c-
$D*
:%u p
?n$ H!a
B'hw
Cgprhal
d+o |*
gW5y
T XxkbQuart
ProcessId
~:i'r
$~IZ_^
TN.]=
1_ ,z`
+f
3?/IX
l G5
47!
l\3'u
s8u5
fWPM
|*O}M)f
O&dc.Z+
$3YI
_~"'
>&7.
+ i[Y
s)@tL
g*g
ToInt32ecs~50
z(1O9
6o>@
@W@G;;
r)=}
xYWP
W^Sq)8
B'zP
!n4F9Fx
~1;zH
s]*t=
.I.04
XrE2j
W +g
0qs55
;V!D
Tih]EciY
Unmanage,qe{a
Processkqz`bml
C2F`
;L%p
l)' Ks
_dHiB
processInformation
GKg
m}0
Z2^5r
RF~V
YfF^
g~^J W
5X/J
\bP"
{-Z
+98W
glf+
d&I B
Object
B%3&
^C8kIJ
Fk)O<C
;)1]
p]}.
]6DO]
*$Ha
5!n o
M(CQ
7f |
:b'b;
bH/+
y3! [[
ww3W007q
>f}:
oGg)
6/z [>
3System.Resources.Tools.StronglyTypedResourceBuilder
set_UseVisualStyleBackColor
]w\~
0Q J
System.Diagnostics
Run d
K "*Z
h-t7_
`si.
&b hM
V H
InPath
=8}$)4N%
(l0\O,,+1JQ,)P~W0%
TZj~E
l3o9
%Gr:A
#FGdf7
ToSt+Htj
r,DM=
u^K
z0x0:
J4k5>h`
<@|qv
e2Un
ZX4D<
KX_)K6W
EditorBrowsableState
QA}|b
KbkO3O
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
iunlZEpXHrczs5uSspw19yaK1qTpFaxi9o7ZW0UTqeUC5kcMR4
kH3k
,_O6X75! -
{ /h
_o3
'3"7
p&'/
CultureInfo
54#E
Kv9Y
S"MN?EHAHM*UUb`
ThreadIdtc{sb
Resources
3xjLnI(
ww?&
v [^
1QT,0#
*.(,.RtT141K.(,4+
k ol
]$h#Q
V;p21D
P5\+}
p$a$
x+*w
S I!M&a
Gp-`+
Cg!~f
Gp_K
|YO~
x(\iT
get_Modules
,A,G
Vn%W_j/vum
T&Jc&
1'B1
q'Swx
+K?KI
[6ur
yY/w
(4@|M
i|LYDi
IsNullOrEmpty
(_J&Vk`=
?PxR
J[o^
espI-
II0
9Zz
A9 c
Exit
+<K.{
;~S:
> *+
b/[-[
,t1Ld'O
r~|B
]}>t
?g"g
y!: :
%]w
O9
3;U3
m!a e
D$ x=
FOmR
& fl
2_k(P
I#[]
+D@(
add_CheckedChanged
PX5
mIjM
x-Z i&J:B
a*}6r-NPuM:
conff
n;r G
N+d{w
+w|G
SecurityAction
w4Y!
hOsI4GzUGFxDwMf63GDKskys
Du7N
XO7=
wu1g
DfM=8S
[hHswsibute
+~d`
eCDW
: 7F0V
.J.;
k-{C
@%vp
)[Y*
process
3!&a
$QJt^
&*)d
p77ww7q
Jo&Og+
qgbht+
System.ComponentModel
R!.+
6LA1Z
q]b^
N Ai
y7)
05pb
&An]
?#u n
ryvJ
Hj7Zn
77wwwww6
gZ 8
wwww?Rk|suvwww
myyZ5
. 10au
-dPX
&2lO
EYXZ
3A)4
GetBytesefi|f{
3>J7
EebuggableAttribute
m5t~
C&sd@
@knM>\
\~ldvhon
@.{Z;
BZe0
++I i
:82?
_x}rf
^u?`
xg0'
r M$!
xL@x
fQ "Q
fLa>N
Hyus
(04rIw/(4RS+,
>weN
w4\zM
:(Y4
0w c
!;8->s
t%] h
+ +A
[a=p~
@'c{k
$17 Bax
./,,1
E6c8
ns)j
r^F
-H,-
W"%B
$Prvza'
C'Hz
>E2]
I,GX
%W)
:5Ks
service3.1.exek#
r}}e|
3%@S
cYKYQ
hUvZ
>EYx
[,mX
`P;P
](N$
M&SvfB
n))C(oz
7}e1.?
-8)[
R?`A3
U-h}0a
S)r(
0f n
e@`+,
z,~B
/ @b
(H)y&D
u6^2b,
s#%#9
;X_v4
)L-?L
;$ %
D aM
BusS
icCgSHU;~
/f~}
w5!p
pPb+
[*j! 0"
JvnY.^{N>
!83s
h X/y
260901154122Z0
d&-K
a#iaDA
O45pqNw7k6sX4ZizYG3p7jnfi8MQ7HR7qnCDoKk9u0yphPQzKKABf6
160903154122Z
GSv(U
8c1.
eb# "`
h# d
c/nl,
z /8N
=O%jF
[#d 2
paf,m
Kr{j
%'g'
olc)k?
>t[lA
m$+<
proc=^kyWKE
4|7E
q N'u
C%547
set_Culture
.= b>
get_ResourceManager
ci&;
@*
@)0
Dhle
Ps/S
} h &
Point
M X(E
length
cw_8
I!P(oy
CheckedListBox
X9 d
u/9",H
LZc3
|mdt
ajiE
2wnNc_Hn
ntdll.
6[+S
SuppressUnman
CGIzZPb3mjSY5lTAwQc1RsY49GB7cKs5R2xPNcyx01NDwbrOJYvVxFA6x9
F.|
vDVz
Program
p(m(q2Z6]
KAPC
rJ
CGIzZPb3mjSY5lTAwQc1RsY49GB4IgpDqYjdZY8mHfHi28JqmwRUn8q483
4http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0
K.sv
ns
j"'
W"Q5Y2 `
V $3
z.)Q
rAbA
%:99!R
toK.&4t
F'#XhYF$
&(9
u:Vo
|3_/W
;6n
0 9=%
<v\
008^`>::558 !;
0?C.C
7334)Y
B.v3 "b
()--),.014)+1Y1/-/4(
eHkO
j}zH
+z c
ojoflas-microsoft-com:asm.v3">|,=,$"! <requestedExecutionLev
Mh6pcY}K
kRYD
e0G
B a'
r]mI
|w_,
%[+%i
pt6
Anti
5&u
f0A x
GetTypeFromHandle
B23s
J@4R6
A#g-
FileAttributes
fO,
t mS
nv[$<
GetEnumerator
jCd5
Qn#Q
Q$)<'
CGR'
-;=>_R:})
9e+*
RxMhnUext
o.Xn d
6]~c
^,Y/
w7rW
n.G%
UNG 2
)Y9?
ButtonBase
6hL^Qa
ylckvHnRole
Trq
<P;/
zgT
q<P
a -|
0"\.
>2 G
~1&j
}u\Y/(YW&
l/d
vwD5
z= U
{}0;
vt7`
5 |Be
'rquM):
.k0s
uk[N_?
7http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
HI3*
Os=g
At)KS
}wl
&5?_
doWN
!@Pe
oSIY
I:k:
]TN6
r*o|
Gb{u
xnkhhr
NdQZ
:@ FM
!;v `
k0(695
V5}6
gRfF
/PQ,,((+2.
}>V:Q
- Yw
wx3x.
4X M
"H<X
$y
}/sa
-Gz#>Uz0Obz8Whz@^pzOhwz:Ynz2Sjz-Mdz0Ofz)K`z-Mfz+I^z%@Wz)Kbz2Tij
A,W2g
~e"Gg a
UcPT
ApartmentState
4vnIO
[C6O
k&R3{0B
RMUn
pi?R#
;bO
wUUDM}v
l`pg
>`4^lu=
E!H[(
;' '
bvg=
lB/YK
@yt\
\ e
I M$v
o rq~
System.Runtime.CompilerServices
^ AE&O
8=8A
huF6
:}$A
v_|&E
d&N"
[\'rz6
VirtualAll D^v
vsJ4
gDwR
xsuw
r,k/
&Rhiz)E4
{[1%L]
aMd&
'Z1Z
J1b7on
T igL
(UI"m
button2
}Y(P
'g$[6
VeOlpxGiRqMtaHKrXEEYChlkGmweUw
checkedListBox1
)JTo
E!5wd
OOouqhon="1.0"> <assemblyIde ^t~
LN/w2w7{
*q&
u53ww77
H{2T
M;gU
krFiddler
M@TK0
qz&5-
+#K9/
\{Q~
r(:\
"UdNt
h)ou}}i
)ugofsitHandles
#Z*fg
^ eS
DigiCert Assured ID CA-1
K3.k
cQvT
r?g`
B*'2DT
U0W5
> r5
d^acc^ad
System.Windows.Forms
U;t,
www.digicert.com1$0"
=3ru
$TSq
/{j}
^xv8
:l F*
L4 `
h/B
P9r*
h=MZ
JpK u
(*]k
IDisposable
7+qw
cW@
755477ww57
Exists
h|a54
1Mc$*F\$1M\$Mcq$\qx$1Tc$1Mj$1F\$*8F$Tcq$jx
.]Ei
#7"D
Z?cg
Tm9=G3)
7lim
~g>;
w5"BZ
\93
z -
VO l
BDfs
#['p`
puF|]
@jD
b Y(@
N:[+N@
9)l53
NxI
wal~
~U%C1
?B)Z
rgsU
= ?C
-zqP[r[`jC@`Dpk6
O`rshalAsAttribute
kN5c
%L7.
*_2E
g;vtR
https://www.digicert.com/CPS0
<Module>
Hqk+
TbFn
#491
3Y9.
k!*N>
(22
SrX #
get_SystemDirectory
-%x :
em"%
&s g
1?%_
iI( +
]Ilr
/%o :
WYA2
&i K
n5IT
>},1
G*]8m
iVKC
z%Ry
#Z
(ea
Cw`!
4-K"
?y<e
SizeF
\oSQ) DK
k$[sw
h2V#
7iTQ
T*M8.2
t^S2
`'T I ?P
|ybYg
jGE^
ApplicationEEs|YFyecutablePath
s~DD
*6rm
rR3|
;"$EMNc
ID.d)
.Gpc
38?5
IsInRole
`X A
#f D
UwFk
B !#
RV,Y
#>7(
#GUID
f Iq
4*5A
!#/0q
$*8F$?Mc$
~:>4
l><9
-J M
+)MEo*
ID<L
p6[,
$b#
"$1t
3VDh
;p d
koHb
Q0x3A
~&R3
EndInit
5 ' 01
OB^^-/8, 8U
`/B2J
D(pe
7eT#.
szVa
|:_"
OrgBoxResult
k0i0$
{ Z?
kQH$_
+m c
pzZut9
Z ;p;I
]MVH
S;B R
+J oI
,9q:
ymSW
wqqp
O#J
y &T$
/`E
!sWs[
mV4
,;WZ
ju RP`a
flNewP
-I0}N&
`+M&
Syste
-4-h!b
g`Fm.
<;R|z
^Vt
I8j3
=%r e
EventHandler
R4}7
G28h
Thread
Oj]=
Ya}u{
S4
+Donb
0b1 0
)" W
Rve<
w7sS
)} Q
.@hy
+C0F
KysW
SetValue
][z{
Encoding
Djj$
{ j"
y l$5G
y @G@
l=xU
disposing
H K
CheckBox
u+
7wssww7
hkj*
ulquY#A
^*b]
` g em
U$
.2Q8j
^cmkv
(=o
Hv4$
ZL'W
<O +k
zdDK(
q-:
,,I8]
E^ysSnm
=8(`
~~`m
!]lN<
)l)p
Ey{<
q5ss
v0t08
-%
2http://crl3.digicert.com/DigiCertAssuredIDCA-1.crl08
-9(0
4/1w
0G"5
dl#b`6
xjKk
}P$
]I$3
get_Size
Jq WvsuctLayoutAttribute
{k,w2"> <security> X
bXP
=)n f
Yaqdrved2
;P a
sa>#
m=z(
bc\A
#A,I
Zero
LocalMachine
acw7sw7qswpp7%x
D$T,
;} 9a<
get_Me
`%&}
D.o4
9[Xz5
}(av
"*aL
)/0+
X'4-
vHH)
zrvr*
*wShZ
.sx(
,*y j
ej
) +A
C+:!E
\8[z
bmPQYlXGieT
ReadProc<Ri@conry
gw 3H
V4"(
}<&?
||Y4
G_q|
, ]`O')
Microsoft.VisualBasic.C*OfajfsServices
+hAr2
L6us
* 8
\eEB
8?u}
sy 6
V?S%
][;#2
%0'z
e<F}oyt)(
3Tkt
b X)
~K66
23T
service3.1
5 ph
04& B]
gHVK
%k\&
eH>
AHS &J~
M(}
Mm.|w
y!& C
{Q2I1Z
TE>?z
tkWR
K Y <
gq.f
fId>
t~IA
Jjj*Q
R!|W<
o^*s
u8'%
_2E u
F 60U
System.Drawing.Bitmap
k=c[
get_ModuleName
47MbL
H?V#j
th S
WriteP
.6sNx
}nj:
ho$V
L>f#f?|
OAK4LChDgWfo2oPOp12T.resources
W#2<
(u,
u&4;
GeneratedCodeAttribute
&,N
li]w-
star
3t1nKN
3+nk
nK8}
_}Fb
(f |
:m;^
7,O&F
U44e[
9rx.1
aglv
X*? S
y!K5
Tr,O
#)#W
Ifs:_/
*#<f
KJ^<
yw8T$
*# :
22X?
StdInput
qW(edccM
tszvs
x*(f
=& ^
k^|],
*# &
CV
63ju
SecurityPermissionAttribute
'jDq

#infosec #automation

TheSystem Itself @ 2016-09-07 02:36:05