07b1af98.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 20/56 Related 2707
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 195.00 KB (199680 bytes)
Compile time: 2016-09-08 14:41:21
MD5: 230f0213e350415357bd2280ec10dabe
SHA1: bd3f42964416a9f8ef4568cf6f9582b34feb37d2
SHA256: fcc0fda3e1f0d5d9fd60cb0741cf45110ba53a3bc4a3836d0db2c70579aaae1b
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2016-09-10 16:21:02
Last submission: 2016-09-10 16:21:02
Filename detected: - 07b1af98.exe (1)
URL file hosting
hXXp://updo.nl/file/07b1af98.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2016-09-09 14:14:28 [20/56] VirusTotal
PE Sections 2 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0x301e4 197120 0f13dcfd3d24e9619d1418d60334f01c eefcd7bd01584b99d79e359182aae4588b2ff6c7
.rsrc 0x34000 0x600 1536 4af535c344f9943d4efb6bd6c91606b6 58aa8fdab20b7eef4fcdba3da9ba5294b2f8f62f
.reloc 0x36000 0xc 512 3df4ffb7256c7f2a2e96ab17a8bea552 208f52c892e9fda432d270646ddae9b610faa2c0
PE Resources
Name Offset Size Language Sublanguage Data
RT_VERSION 0x340a0 612 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_MANIFEST 0x34304 490 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
ProductVersion: 1.17
CompanyName: IDRIX
FileVersion: 1.17
FileDescription: Network Cert Provider
LegalTrademarks: VeraCrypt
Translation: 0x0000 0x04b0
OriginalFilename: VeraCrypt
ProductName: VeraCrypt
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: Library
mscoree.dll
ADVAPI32.dll
qhell32.dll
IP Found
No IP detected
URL(s)
No URL found
&OK
labelProductName
ClassLibrar
1.0
Copyright
LegalTrademarks
VarFileInfo
Company Name
Comments
PmjGGern
FileDescription
right
Ent
ClsFrm.exe
OriginalFile
ryP
FileVersion
1.17
LegalC
0.0.0
okButton
IDRIX
AboutBox1
Network Cert Provider
StringFile
1.0.0.0
VS_VERSION_INFO
VS_VERSION
M2TNApaWRFWWyXxk
Trademarks
StringFileInfo
VeraCrypt
Translation
Ybo{
assLibrary1
labelVersion
ClsFr
Product Name
oint
Asse
egui
ompanyName
000004b0
labelCopyright
Form1
ProductVersion
2016
OriginalFilename
Description
y Version
textBoxDescription
Invoke
roductVersion
CompanyName
tableLayoutPanel
FileVersio
nalName
Copyrig
labelCompanyName
ProductName
dLoWfeTTa8
dLoWfeTTa9
000004B0
Version
dLoWfeTTa6
dLoWfeTTa0
dLoWfeTTa1
dLoWfeTTa2
dLoWfeTTa3
dLoWfeTTa4
dLoWfeTTa5
FileDescript
dLoWfeTTa7
vv;P
5;y`s
<{#uS
~:YN
)5:I-
-GNx
l<_[f
;+IdD2
PNG
RuntimeHelpers
=0]x
R"p
StringCompar/qil
kd8k
-@'y
AO e'};q+
S6%o
%<s&
Xy~B
TextBoxBase
@S&o
<M)fsnc<
#S2polaq
yF66=
7g2iC
DateTime
^%EN
2OqO
%LDm})
Substring
Process
Q6|_<u
2phXhD
K!i, V
aK{2
2DS+
EhLh
p ]<]
#,7g
get_Controls
[`KB
zlk
%&&
`hhZ!_4
xKiS
/3g
c{;Xe
vLu&
:~|
n55Ab
c^V'R
iX(i
%@jmb
xtm[
D0.fw.resources
Com6kjcrkonRelaxationsAttribute
q f>"
z5s
"Z?^
D/arkilary`2
DaU
System
jamW
p' {
t iA
RY1S
o%$F
Rx 8
CDlx
=$R[
|XQ[
2[Q;$h
5p}~
`(5KJ
hMC`
[LS
_?]A
oNz
tP'Re$
1?MM'0Z
RuntimeFieldHandle
Y2aS
?obHRb
$FSJq
U#-;
{aPq
Stri(e
lX|_
\miUP
KUBt\s=
|({>
.U`
^FPv
BindingFla!q
1u&9
S4UX
99);
GetF/ncLgoeWithoutExtension
F=| 6Z
ScrollBars
{JX
e>g'
]d^0
H64yMh
RegistryValueKind
".+6,
$! Q"
w!*j+
C{Q8
(VjRg`5
set_MinimizeBox
vzn4+
LA8r]
AssemblyCompanyAttribute
zvu{,
R:_|
{{7O)/X
D{te
>U&(VV
7K0E
fzq!
% +
rg"1
Format
=i;O
U8lC
u! z
GN1
}W/]
A( 09
+}dN
3=0l
r 54
( NO
W]aI
0\ E
lcAA,=
AppDomain
l6OifsneName
List&3
8sB/
# 2$
t"?T
4Boy
w*3v
%\U
PADPADP
System.Glo$cjk|ction
K Fy
/gu8=
.[h#
:$eM
fAe
^%da:p
d} FT-Q)
? ^
/w+B
6<nRU{
HyEU}I
16HB.
NS/_
VtcdemarkAttribute
;KC(-11p
LOWn
sKt5u
D'YXY
K+D:
irYGxplicit
66Hl
stbR0%
z|V^L
Path
set_Text
Yf67
tR~
SZz8
[*RP(
>M
_+]tObM
Lk6}S
q Xc
=doNx
=)oD
Control
2Nm{
z>yvbK
w} g
;4Ul
.aq>
OogeeFormat
FhITW
\I;k=
1M
Exi5vu
ol ";
_z];O|O
n38~
B*~L}7
yt{`
\jY'
N]p J=
2!B
2AR&R8
=p$DQ
JU%jAH
+4h7
Type
PlJ9r
<3CLu{
\)Y*
,Jq3
cF.E
KQ[K
Z1(8M
Rq}L
q@EaI
5) K
+aw8
R{qx
hm`kf
DfSUn0d
S0]Q
7vYE;
lr14
it]^
B4 [
K'JB
Um =
& hL
vpU4
LoadLib4ct{
B \i0
" <trustInfo xmlns="urn:sch#ogq+oicrosoft-com:asm.v2"> f>ugewrity> <requestedPri0kjgags xmlns="urn:schemas-micro5m`v+aom:asm.v3"> <requ#qrgbGxecutionLevel level="asInv)icp$"uiAccess="false"/> z-tgwwestedPrivileges> </se%wtkr{> </trustInfo> </assem$n
;W|F
_\5
G6p19
r*in
Char
o:pwh
g'` h
@kjgShare
_F!
&*Tts
(t
GetValue
`%kz
j#(l
>G<s
_DW
}p7{
CreateInstan%g
>,g4
kernel32
set_Multiline
kernel32hfjn
ToString
'Ueq:fC
}$ B
Y3:1(
?a`>R
11InW
w3*_{
Rn*KG
oFRT
xD"<
Y4 rE4
{P.u#RW
sfp:J
\ ]K
ni_ f
/LnTjjaj/w
V*<
3!Z3_
O^QH
3a@E
set_ColumnCount
O%DX)$#6
" D
?r7a
Q\ 6lA)!
Gi'3
DialogResult
Z:$8
e jU
"&>assemblyIdentity version="w,6,6,0" name="MyApplication.appd-8
.text
U\&
@older
Ailcat
Component
7> ;
w/unggg
9EBf
t7UF
$%&L
o?)9
Convert
q|G)B4
"MT1
IB^0
Ku@gakground
Q t u
ISeri'noxg`le
J])y[f
m; u
sr&i
o9W$n
'|W/~
R6gm
a8ySr}DnS&
e6d)
~`L`
%Cd%eA^
_v=r
za%4
PerformLayout
{,[zL6
LockBits
CHa_
RWPC
DEbl
~ybA
ji+GN
SizeOf
bz)}
HLjq6 B!
L^}*R
u:R%
Q |;E
(J%@
9(YU
b`/o*
IEqu'vg`jg`1
Gx1x
@xPdp]y
]nsAg
em!
N K:
]-\S
[J\g
%T]T}
q45I
y|4F
Z8[{
X?002b/
t.<b
vzQS
tnB.HCL
N=KR
ktpo
XY 1f
"N\T
`.rsrc
G->^C
bus5
]KKd_
y_grv{IiS
IFormatProvider
Z`R9
System.Drawing.Ima!khe
k8T7!
wPJy,
Zh+pj*
c5~;
x*fW:Y
L""R
R6{4
/vO7
n9[H
UWPaA
V!8g
l=@A
Mr'dn
E=A3G
h #u
U# 9H
7d;J
,&bbh
Bd:<T
*ON8
7 DV
,J
ZFSQ
set_Size
P3]B
E9I8y
w7HOZDZ
uIOb
O KK
Settings
4?$S>
GetTypeFromHandle
nvB+
<hUV
RiJ](t{\^@
7#pF
a<{(
*g'a
Cyi
mL^^
uiz$
x&RE~
>|U:
B h-'$
n5 0
~ Ey?#I
K+(r
w Mg)
N[EhE
xDUJ
R/!D
ScE#
*TVH1-
51xE
%&]o=
;n]Q
9[OG
BitmapD'vg
ParameterizedThread
1gnp
]+#i
2rYkvW
oGX&
sW Z
L2LW
6L-&Ih7OC
TableLayoutColumnStyleCollection
h -n
~t{e
b==V
[Udk
xe }2
^l/y
Gui"Crvtkbute
GetBytes
l n&
y(#R
"^qs
B1y}
PZQt
ReadAllBytes
<2%_
set_ReadOnly
S:\-g
,kCdou
L+-z
'Hx(
P/Rm
L~)y
7?+&
}gCS
set_AutoScaleDimensions
9CI@
Main
::9S
j/Fjr
fllM
AnchorStyles
UInt16
mc^_g
:E=
PUYX
zJx`Q
v]uV
{bzF
GzSS
ra G
ClsFrm.ex#
l &;
%Y9h2
vB\"BX
O1NZZ
OniB
Y 8=
System.IO
*ifS8/
IC)lrcoler
WrapNonExceptionThrows
-nnJ
Zq-F
fH5!
.>
acNG
=P(n
4q_
h3}h9
FileAcces5
ManagementObjectSearche4
D yk
Y 8|
tK-m
IZ&9
}\ 5
RHP\5
KOGNH@l
get_InvariantCulture
N1J(I
864Mc
] L
QTKDV/
z\V_6
|f2rO
#_zx
7K&w:U:U
CU9"^
E ?o
ij\hw
z [
STAThreadAttribute
^}v{gS
WMkM
IHDR
d6q`G
Co(vgkhq
)IT\
S1K:,
,O(<
"4=@
-o PA
eet_Build
}%ua
*/xT
`+u&X
{Qi!
u($n
oT,
>xxG
p'$=
GetUserName
<@d t=
qAe/nYPb
b;T
GetObje%v
F>M>p<f
EventArgs
Application
?f'3
[}tB
BSJB
>Q'k
VFbbAcY
mOlr36
c?*X
B>2,
G'lM
^vWI9
`}&:
8| 9
7-3[;
N3*de
1d5=
fO7cW
O {o",
T{WB
IO"\
`!-p\TB
xgRl3
!07$
,:Mj
&5(t"{%
zEd
_ 4
w<e?.
RegistryKeyPermiss/mhAngck
TggfUInt16
hCHsl
<@o8
&o@
o_ r
S?sQ|
Yq.
o}\Qe
mtF
dg>f
nFqt%
~o^%
@@O-
:#Ga
R'*2a
Environment
.L$)-0
= N9
SuspendLayout
n<i1k
fLd[
]}M}
)KrV
sgMM
$4?Vr
0y:nnL
&:70
O.O+
#Vyw
|iT-,
hN)pUU
Y%my
XZR"
k^1
FmJ.
:p>q0g
cBZ6g
CipherM)fc
|S1R
;Jbc|ow
EVd} fa
System.Diagnostics
Of#i
set_StartPosition
Ta2W/PXF1
XyqU
ZyY]G
IDAThC
dv[6\
p-Vd
molr
*iiK
ReadBoolea(
n<5P
Activator
X ~v
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
Sys2gk,OM.Compression
set_MaximumSize
Sb@A
0:`d
)Ror
set_Anchor
PI-SL*
CreateSubK#{
k`;H
' %Q7G7
T$Hiq
vC}9|
A8YJ7
#yB`=
Gu `
E'K<
_/>iq"
(0Y$
QtsP
pn^S,(?
:m}s'
Ms*t
5-?
@asO
3-<Q
K}C;
,>
4-%6!Y
krAilverter
\G P
Iqk6
yV>nK
+4 rv
,m7s
DD a
P4meguqModule
T+cG
A+{e
&_tp
J.K;
KxcL
*Y }/m7
eH(%
hU~&
].J[
@JPP
~')+)4)
k t9
8oV
Xz]
ManagementObjectE(wkgtctor
Bew47
?q+<
%e{~W"u
lvey
h^Px
`tbar7r
eJ q
LDC:#
b ><(
GetCommandLineArgs
yrwIZ
OCsyncResult
As5gk`j{
2o\;$X
>`{d@
r U}
Wg S
^9KBT
(DE1`
c(u`
Label
XGYM
]~F
0VW\~H
(CF
}{&EK"
Form
L3C1
29MgX
OGRm
0f%$
nVz8
^%7m
SlR/G
v:'u
FV<+
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo> </assembly>
&cJ -_
#di
=6F;T
Delegate
R%|\
Ub-N
o0<~
nH)x:
t-34
@Omxw
n.05
%}SL
k kY_ /;3a
]iHg:
Y_HEe!
rVkk
<C<r
-t(f
V YY
/lv8
DebuggingModes
:JMo
Zn[_F
System.Compon#lrOifel
kI3
uaiNs
STLGPJU
c+}b
\ }=
n |HF
GetProcessesByName
wTll+
Mars.cj
Wo .
Hx &
}M*o
set_ScrollBars
Xrpn
kdi$
CBBZ
mEjgpArray
#Strings
*!bF
set_Name
InitializeArray
bAN?
x~
N?>
_e{s
FBh_yj
zF CJ
U,L}>
zu~f+nh
get_Length
get_Chars
Q q
~VH}g
^dYLd
")xP
System.Collections
EqnD
dulFb
3MLpd
8]mY
t*Jp
ResumeLayout
Rz98A2
WUI:
3M-a
1$)v
Sleep
X(i \}l
IfzCMF
,4EWn
ValueType
U/5`
System.CodeDom.Compiler
set_TabStop
; t=
N!>(
e9Q#
VovleAttribute
R?"V
SR G#
P>8N
^0gAe
U,@J
Va`9b
RuntimeFieldHan"nc
ToLower
TableLayoutPanel
IDisposableFFoqvmse
,b <
#m&.o
.eFx
0*Y
jrn~
QW_x
*<gE_
-8s%C
1e;b
FCx9c
; t|
yj0(d
*VrI
t)Wu4
2I0AwP
0D `
(ovuk
y}WE
tC"
WH8
Uv% T
E$pRH
Z.;G
>5~k
rf]:
IEn3ocpg`le
+6u7 Y
xg;&
EwtpentUser
T!nJ
RfUL
3d zu1
=(+J
%&(0
nJ~+>
%&()
/A#h
6myE
%&(#
%&(\
XT7n
rrU#
Qs j
"( >
]HlF
kay;*<
%&(K
tL}t
GV$'
%&(F
%&(A
W^IS
_b0C
L x
::0N
V`pU0
Yoz4
StreamFUtkrg
i|gG@
A.3#
,;_ye
ZX(z
b6Q'
FikI
'1 F w
6f t,
CallByName
bI.<
(#4~
vJ~A'
hrtd
NIv{
,gc3
a*G;
r|uJ
#6FF/J
N10Q
4 -7
Ldpj
`XJ]
B=i,
>)7,
AssemblyTitleAttribute
$91c
{]GR/f
l x
g,~
|/?m
\a^R
D=[|1
k9W N
GVzA
aZ |
`%!,
Wd?5
01k5
& RC
\ 9`
l)
UVIf
{ID~
k&U@S
-mZm]]lSo
set_RowCount
l}w,
>8Y[h
add_Load
x85
UtkH8W^{
v]q]=]?b
urPl
Start
TypeLibTypeAttribute
Combine
[@[i
;nb}R
=DV.`_s
8Fy|
m{ - J
G'jZ
*2V>
h_AGsN
]^Q)
@@ "
get_CurrentDomain
Data
B,_4}
-e@I
GetFolderPath
_4?iA@zh
u4
SUkr(
W9KbW
Int64
VEi(
Hj>(*
|6#og
IX (
FQ$e
5Q u
^eb1
V$Jl#
[L`
,$]N
pHYs
.ctor
4cSmL
A0 L
AssemblyFileVersionAtt4kdwrg
Container
%H{b[
"e68
w$ 67
,xKt
K*B"
11.0.0.0
VUlig
qd (`
3.ZXq
V_G)
2BXv
{F|P
Ki|5n
Yrx
(vRN
Invoke
w>u(e~e
> @rK
rOGP
@i&
phMoh
System.S#aspovy.AccessControl
1Vs
GetEnvironmentV'pocdne
o} m
'f~;M
d2#g%
Dt:w
]1<h
60^(
}van
IComp'pg`jg`1
6yWf1Y
E0ghvTgsetMode
ZJ1o
I4vi-
V2t|T
+<r"&
Uh!wcy
@.r#nia
ThF
]t]-
Array
hBka
d>6Ax
o 4c
af2^x'
U{stem.Runtime.InteropServic#q
OpenSubKey
,3-U
AssemblyConfigura2kilGvtribute
@.reloc
Qs!v
B G
0 z[hA
~.}mkj c
GZ
muhYL
>0Y
j+ TlM
gxjL
q6 E
4?7k
aF[`
Byte
PccdInt32
Y90 (og
'&}O
EXbz
)_(G
wt |
UR/O1
VransformFinalBlock
N06?Y
~$Ivr
(q190
UmG3
~"+h22
wYS:aO
RkL$
/Db]U
Ad$M
oy2Agc
aeg$
set_Dock
ma5/
<A F
M-`|
JQcvJcstError
#mo;6
<C@l
Oh@"
S3P~
e1ZU
F_9
5, b
UUd+
8cSp
RegistryRights
System.Drawing
Y 8l
|,zc
X+gR
$%gn
L,GN
'<2H
'iFJ
DAXG
HAe
*>+
RIo~
z`S`
Y}Bv
set_TabIndex
6hK
kJ *`ven
2j"e
}#|
~h 6?4:j
7]mv
,[x[
oy@?v
F{+
uGo
get_Item
y V:
# (86Q
Yh[rj
FileStream
>-~<
)U,<
S0'|
<?x+n&tcpsion="1.0" encoding="UTF-8d"uvgldalone="yes"?> <assembl?"~ojls="urn:schemas-microsoft-c)o<cuo.v1" manifestVersion="1.0"x
RuntimeCompatibilityAttribute
A};
U@>Y
a|w%
$qCP
fld#v?v
f3K?,As
.resources
i:Kp
|Z&jb
;vbQ
O^xT
-HfS
get_ColumnStyles
+SFn
@8B)R+R
`}pb0Z
ReadUInt6r
o^Mk'
I"cT
m:6/K
h/3j
'pM
b{i]
FoqpIdAttribute
sD%
HIJ0
p*Z{
?9$R
QcvValue
WHH2
Open
Size
V^*>
f(wl
Save
BjFG
2arL
.zl
tA:I<
=1gO
&##,
cj ^
Oyie
{OS
}DT)_
i'1\
,Nvx
oT}h}
{nm
set_ShowIcon
m1}v
O|{n
sx)o
Y 87
tL_zj
Fcx{
'v;?~
7ZDen
lxCe
Wr T
IContainer
ICryptoTrans mto
7N)5.Qz
OK;
&yox
JCJNXPX
P}n
GetF/ncLgoe
g!gq
]_ gw"
E(fOlpmke
~hd
(Uh>r
set_ClientSize
2=SG
IaF|
*{is
m-Cu
&5;
[u[i
Ii}
2viH
&}&<4|4
(>\=hrgRa*
g+t^
;ko7Z%
get_BaseAddress
`iV9
$l:4
Sho1
sSmvNg
k1f^+ir
[Stx
`r h
B@b
>Jp:|f
[:wej
#Blob
QM(0
BY_ej
TableLayoutControlCollection
GetDelegateForFunctionP)khvcp
yvJ|RU|nx:
nDD`(
set_MaximizeBox
bebHG
J;Mti
u]}{1h'
ah3fj
M9 V
jj5}
%ax5(
5E;~
aS0ZM
ySt7
]F_m
#Ne[
voad
sO0f
+^06
.?Fu
'LL~a}
;"Wg>
OAolA
D4VM&
poway
ContainerControl
hBcm
50 DX
M}4o.00
N|N!\
\vuWX
T:Eg4+
S9>K4
zSsy
w<'}\
JdjI{
ReadByte
&)L)
<k`H
set_Location
Interaction
> x
h@%,.
eJ4!X
U%f;_ }
z3`0
351s#d#
oqdl
,U$X
~iXUCg!R
,zVa
N^De
jQ
D}wHN
:W@j
\_g{"R ?
${9C
7;}8V
2K]c
Run2kkgR{peHandle
[ Ni'
Z]z%
Equals
Vk~glFormat
bv:cgl
IConv#prkdne
2016
P|a l
System. chcagment
t2!#F
S%&1V
;x1,u#
2a4Z
ColumnStyle
:ggD
DeleteFile
5^ht~J>
Version
d*+Y
]gV=O
m/
@ @zBnL
}:]d
TN8&N
Qd!y
y+i+
~I?`
@@@@R
<Module>
EG* |
,VG7
rQz-
}-tL
KGG|
Uv@>
Run2kkgEmmpatibilityAttribute
Nk'[
Y 8N
Y=M?
Close
64o>
W,n&0
`:[k
1L`"
`l79F
BSJB
C0@X
= .*
+=F3
@"J"s"
Read
=L u
+z^|
&IFX
)>$bR
D8E;5
_<SX
9}JJ
X/^FJ
1&D(s
] k
%&(f
A\]!O
MEP
1R%Z
B%%{^VeM
FG =
'6P|
gAMA
ReadString
-q~`Y
_C i
[oM%
{\#m
&8DY
AutoScaleMode
X _@
Z`.9
u? rL
N_-
Myphone.exe
Dy;5
_S$
|Grf
WIe#
.cctor
AsyncCallback
JD~=
>9T9
set_FormBorderStyle
6+G~
#p2r
mscorlib
fO;h+
FileMode
|hY[
qxGo
S-q8"
ReadToEnd
?|6l"
4c~M
GetMethod
Hj^
MarshalByRefObjec2
[zheK
C-:wO
gLX*pjM
FormStartPosition
d B Y
ContentAlignment
set_DialogResult
ControlCollection
CharSet
r>t.6
:r3_
C!
QoSc
\'9Q
E
Vif
nQj7
Delete
0?bA
R2
in"^
o[l
cYd@
p5S+
"Ad+
xYRZ
=63T!
5J$w
w'j
System.Reflection
PccdInt64
x;3<D
SizeF
e.D
EpeateDecryptor
$D;<
kcAB
bCGK
H sq
5N|7`p
T=p\
k/txG
s +U
zJ._';4[
gb,u
t46e
dtKC
3j6]
2KLb
H lP
"L}L@"|e
BmH)3
~6+FvHTI=
5l"C;
wrQ j4u
System.Runtime.CompilerServices
r^s^ ^
" 2
&08M
Pq4
F-~K]K
pK8B
}3'G
%&i(;
l *e
BkgnogResult
set_ShowInTaskbar
p2u0
pR`&
BZ^A\?a
z)9o7'
LfN>\ \
%&i("
F-|'
'V[=
EX^7
.tkr
(LF=y
DM]y
set_Padding
l6A8A
mz&UC
'mfy
v(+Z0
~Y=.7~
StreamReader
ReadInt16FPccbQingle
AssemblyDescriptionAttribute
{yv{y{
op_Equalit?
,=C6
~B9<
~sU<%
+UF>
h5Xp7
I] ;e
-b vwo
g~vTgader
~pX
FIC,
}QG}
MessageBox
Emp2{
EH+m1 :^!"
dI*xV
c+:ceQ
set_AutoScaleMode
YC,b
EetProcessById
SR-,|
qctoa|
4" o;
b %:TO
GetTypeF4mkRtmgID
"vl4+f.Jh
%#a?
Jnlk
$q'r=
- YBi9
Ge2AsptgntProcess
"Ay2%
Yv<X P
L0&/
'%1`
dD {)&
xfdE
m2^q
3lno
/(mK
Zy:#
UnlockBits
rx0j
5 WL
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
4D#
>I8j
.O5_G
Cky
7J]a
?dD~
^0T'
mscoree.dll
!This program cannot be run in DOS mode. $
vV1Q;C
&+Cl
File
U -
cT KT
LP?vr
q+k |
+% p
ndg
t)( g1
Dispose
-7UE
set_TextAlign
@3ymoO
^+p8
1fM)
NTpD
'-x
.VVI
eet_Bmp
NFC=
TY7S5
3 g%
ICloneable
x+z(
1!`$R
^fm|T
taZ
N0{H
qo9t
<%uj1
m*wEg
PM=h"X
f5!1
0YVU=
g K6b}
S2f"
H_`
%o"
X!k R
e*Z<
.l|f
_5[g
u,/r
S2O9I
NknZ
XQi}
get_MainModule
\u}}
o7v*
IntPt4
2.21.57.2541
jZi!
B#CG
CompressionMo"g
L@d1
PYEP
H}{W
4B^y
n \U.
OsGD3+
;y%j T
-r?0
[ 8:
}R 7
E3z&%
$F935DC23-1CF0-11D0-
EnuDrm
Dxj+
Button
yNJbs
#i8$5b
Block
[-![02j
q)(t
~Gt%
_2K8R
^(8d
D` B
r_bF
})i$
pbqFMTD
*\^6~h
MR ;
#Gb)3
eL T3
|:BKP
e&6N
>lBhs
@l O
#cl`1H
FromBinaryF
%&X
`oE
z~)W
98H19
0l<C
Padding
+`86
=8Dtr [X
SMr'
9"c.x
_2T^K
j_[i5
~VJ(u
Myphone.Properties
EzX
M.H<
DO56
m4}/
"Klr
;oK:
Q(Wt&
p0> `X6
Assem$n
get_FileName
$bei-
$50ca62bf-ffbc-428d-880f-8c26a3aaaa95
%&&
c"7/
<8 /W
%&*
H%n!
- cBa
ur@o
T7*p
-Y8ja
BlockCopy
*- ^A
DockStyle
P>RN=
O|II;
^H&]NR
p]i<
Mutex
ce_R(bq
w7O9
+Cl"
XkFS
3.TR
1Qz|<H
/ Y'
K !/B
+;yRl
I<h|
D)c >
2 %'s>ui
5+Pi
UXzD9;
PX(>
3q|6
x5f
q(b8E
2*[O
9Do*
xW[O
e+ K@
KMFR
x~['W
!]{mS
YQZg
)nWckH
?00b
@(l*
B!m1
g}4+jA
Emv{right
sEcAt{
XvXVb
$4"YH
=g[T^]r-
}!Ef\
^`LQLhS+Q~Q
,5Htk
-\xt
8/o'N
M2e[
ReadDoub*g
Rtmcess
O t
{''w
YU+>]
Tcpukon
A]' b
get_M/lip
.~10AfX\
IdiQ
vs!l
~sO
=SWA
System.Runtime.Serializ'vomh
]FHK_#
pWTe~
o]yg
2VyV
CallType
smlW
~umB
ZgiJ<
PAs*
QVpid#
81/ u
=S~6GA
E j@(
)+Xj
y#]k
/T '
y Q4
System.Configuration
r5i%=?4
v2.0.5v545
t{9I
D d(
E8!4
SymmetricAlgorithmFqcvYIey
ZFQ0Y
ouSw
~)v-
Dow^N
DESCryptoSe4toacRrovider
+b R ?
BrhT
(f(
y /]
uI,Xb
c@ 2
\x^\
*h Jg(
?!lr
vp6LB
w$\<
##'D
bql
f><P
*B+
(D4=
xN@.
Fcs'
{XsX
Microsoft.VisualBasic
+2-,[
NHF6
>a.T-
ThreadStart
s*X9sV[m
2I~B
1 Aj
OBY
o ]pC
r@"Ug
jDAK
[H)e
H,N9
_JOW
:1o &
wuel
Rectangle
vrSM
/l@6
w /f{
ziza
"4E}f1
,{ul
T=H`0
koZG|w
Concat
bFhL|
agt_Scan0
StringBuilder
tw /S
uO'.qb^
n@Ss
ev|p
4$SHM
ReadDecimal
[?"3
}>CJ
\:^{LrL
$? 9
o F"
tS* $
pitofer
Hk+9
ua:(
bJI?O}
^gzS
]u@;vs
6`r
TypeLibFuncAt2po`sve
](L`
YkU#
#Q]
U:e+~{
b,Fs
CompilerGeneratedAttribute
@a,l
4D3x
T6)/
O| o
a&t!
aN6 #
jBMBD"
#Rjis program cannot be run i("BMU"mode. $
<CR<
53Cbl}
33HA
, >F
%b(G
Ao\oxtZU
n i^M
LD!s
`0;_
Copy
2010-2016
AssemblyFileVersionAttribute
3:S-^F
CQ4f5
_}].OcM
System.Text
)faAh
eh V
sEZ<
5w{wHyhq
cs.G#^
Resource chcagr
System.Resources
()Ova
>6+
LVT+
@$ L
x=pF
>pr t:
,iy
Bitmap
ccw
Q$3Q
((F]
dU_` ;
noSr
Yn}
R%:_/
?9EM
E 1o
1!{d8
Class1
[Yd/ZG
^sQbu
#Td
m E,(
k;i:{'{
4s0E
c2$
W+.
^7;LU
A)&J
$b4yf
vrpo`ute
*<%=
EIt"
nY3"&
dx8(
8)^v
mu/KC
r@G,
N0>|
K j'
0>f(
ToUpper
>I:^
~#T
BinaryReader
5(I~]
mMoz
gh%M.
WaitHandle
xFZLM
m=GL,o$
IComp'pg`jg
Management
1%6#]
{>fpSj
-I8O#
vInX
wv CL
FQWkH
EventWaitHandle
&-ls
String
_CorExeMain
TableLayoutRowStyleCollection
System.Security.Cryptog4cvj
P'0*
&k~.
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
~UMht
F'Z3
`~{KD
/hd
# !-
]0"|
,x&L
)-kJ
z(RE
$^yo+'
=s/+D
Db=u~
E -Y#W>
S. <
Z ~$;
-WMk
:70/
EKFqQI
Syste+,Twhvime.CompilerServices
ImageLockMod#
%|^wS
K~aK
qc|m
T/Q&0
"|(\8S9
Ya`^{
qrgmDirectory
@:h9;
Dg^
GN`Q
@_Anc
0TML
`_dC
IButtonControl
( F
}FG"#y
xy \q
UInt32FWOlr44
A g+
BZ_?
Xm:%
7 h^/
Z!k 5r
AQo+
X0Tv
C])B/h
($2B=
="p.
^2nj
%&i?
%`LlF
d\gQ
"owa[
Fsr#d
l<h2
*d{R
T\:0
Reg/qrp
'/^
cS*H
F=D^
!lce
ToArra?
\*M;#fh
%&iX
W9Na
LXuI
{<4Ns
{i*fP
V f%
lW"
a,$=
tuBJ
b]0V
Attribute
GMlE
n]/s
@w
qugk`lyCopyrightAttribute
^ )}
uQa`
p%b
v}*l
M\lVW*
Myphone
8HfM
VE \
EU?w
fP)J
0?iL
!w/B&E
/Gh@
System.Thre'fola
o1&$vo
DebuggableAttribute
Single
Default
Boolean
CallingConvention
<`a;
I>1i
2QQuU
^1Z(
0sE >
RowStyle
}Xtn
k(| E
it }N
WV9Q8a
]3z|ql
>gjY]
{RH&X7yY0:
:GMh
. O61
`$@=
!WDR*
[{ew
DPg9
HyAH
x ` Y
_.]!O0O
C4H
LdE!j0@
4%VgM
' z@
fT+D(L
^DmxT
l2S\
6-Gt
bIH,-%e
< _f
uf% 0
I{w5H
o)Qffg
FD;+20C04FD58A0B
P} 4
*qZF
Object
y:~\Z
,ZS0
}^>;
Registry
LP3q
Db7,
dJ\|
~ g>
R8U8
ComVisibleAttribute
set_AcceptButton
^ER
>BD"=
[!I5
Wa/v@mtGxit
&C(C4C
LJ5!
ReadSByte
[B=&
Hj`
E h[
)HQlm
idW09
a?=D
v` h
I6P=/
s/r2Ih
vgpr
40W0R
QM2g
AssemblyConfigurationAttribute
eU y
K'Lo
Initi'noxcCrray
6u][
A^B`
w\x!
{]|wG
>>Z'
CultureInfo
jC|d
lqq"
6 6df
{< p`+
ReadUInt32
+/S9
[P9Q
QA1Fb
Kn g
%&&(
PMXaM
Kkcge
GetEntryAssembly
p{w3S
"qm\
(X(>
U =S?
*r+
#.^it
#qIm
lUV_+[
{Mfhp
0k|R
sRGB
;6Kf
IsNullOrEmpty
SizeType
SpecialFold#p
U{uvem.Collections.Generic
Ml-Mx
A3Mp<
bIYw
Exit
CompilationRelaxationsAttribute
$J)C
ToUpperInvariant
k$WL
)"e}A
7).~
EDe`)
[15R
S'2a
r[=>
%>~V
_,
Y ~:
E
N4J0
cixZ
SvJ7
C4ggvcFelegate
dY#l[~Y
W%Q9=
l$ T*
<l@
j2gZ
*N+
S0(}
.(dc
NUSc
Y2^
q>we
N0@}
$XG,
F}{[
X|9w2
3h*&
1Q^;R
[#N]
>RZ1
9.qj
r<nk
6 W"
.2=R
mL(t
System.ComponentModel
7,0.0.0
dH+`
Vhec!
n,?5l{
x;J(
LocalMachine
n;_Xf
NhO$
O <T)
pmwG
qqoX
B9opY
Njoe
}v##W
IWz;C
"JfE
_8lwU
\Wch
SystemhUolbmws.Forms
ManagementObjectCollectionFEcvClumerator
:<"F
_,]%O
h\;cO
}~=
'1%L7}7M
)q:}
M170
Vhread
FD@
,|)o:v
*xKWZ
**+
wJ [L
BjEZ5wz
\q3
g g{Z
GuidAttribute
WA)
d]&}
Buffer
get_Current
O-z~
DI|=i;
PMzM
l iEM
qJhy3. E
]qYv
3%2P
Ng"0
SetCompatibleTextRenderingDefault
:F:j}}3[
r(7k
xCM
bw#S8
hSystem.Drawing.Bitmap, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD Z
:|<;
DyD;Dsn&J
VdM_
ruj"QP
Tr]0
/f3*}7
set_IV
`dE
0L e
SF Y9s0
IQ\kGR
InvokeMember
HJ)e
1JF#
j1h23
{$"U
qWP
p+nuw
3&1y#_#
BFk|"
GetPro%Cbftgss
t9Eb
%e^b:
MethodI(di
b<ws
sTQ/-1
&7s-e
i(37
%k7
N}F"
dO+*y
3>w>
O0Rx
[>8O
>u $
t7Q5
Copyright
-] &Vt
MD5CryptoService
*0+U
get_Major
%HWGs
S3&E: g
S ,A
FN}d
Fp9!%O
LnUz
< 9!j\
sf7WfU
Point
7m Q
OA]z
AssemblyCopyrightAttribute
YM"l
v2.0.50727
ecv_ASCII
g@!~
< za
6 G&
kPb]G
qSgCn
x~G5f
[]![
x%ozr
FCvrcld
u j%
|Ii1~-
Hx"NjH
D![
C&n
/!Ay;)
NjT~
l{%$
j+s
icQ
$MF B_3
0TS+
<v\~
&|2:
lR9 bo
Exception
C} I+
Of|_
*hW4
!C@t
GetModuleHandle
kepiqoft.Win32
|')WT+
|vEW
zWf>
iMB6'
-?Q' \
EnableVisualStyles
hcuiqWf
NpG "k
set_Margin
X 57"
wnZA
Flush
d4=uB
TGhq
'f& <Rx+
i) ?
go"L
MvgnWrite
KgkmryStream
Xn)
W)a1
|9t&
Int16
idap.
5 ZX
b+bs3
GC X:E
-P|N~Z
fNIz2B.
"z=I
e<*@
b[8V
aYr+:
a^I4h
ChangeExtension
ComVisible
*o{P
ToUInt64
x,`
o",>
jT@%
>QAM
JyV0
7'`\{u
:.%L
">`L_U5 J
~t,f
=]r4G
S)hKx
ig7
SU&System.Runtime.Inter)rUgttices.CharSet
ucv|
Kt)m
"lT_
jY(Y
Y 8m
System.Runtime.InteropServices
S1 7
>|i<2
Y WS
VZk
] &
S8Ny
O \J^
Y]*QZ
t\:Dvy
UKiv
i5p`?
=_%b
UAm5
i(EF
advapi32.dll
uU"J
Cy,K
1SR2
Uhr$
\2Q
NGW 8
~TT4B
vJ|qb
^?{zE
f<*W
/a$0
6JL
[Lb_xw
iTo8
s ?hJ
M3nrkecstDelegate
98[G
SByte
IEND
Move
0{cR
+IrO
get_RowStyles
.t[6
ms`jg
ZqR
4X(>
3<B
O/i)`
"[YC'<
sSV
[":5
_z&li
N69^
WaitOne
Je5m
VFf]
pYw*
UqQ`G
1zz5z=
SettingsBase
pB'H
. fDd
W[b|?
1")g
UnmanagedFunctionPoi(vcpGvtribute
*b+
PS<-
MessageBoxButtonsFOcqucgeBoxIcon
`07-7d7
IDisposable
Synchronized
5H$@
,=Y\'
3_[8
aA<e
l,$x
<Zwk"
P^J]d
ReadChar
#W%&
v(9~
set_Mode
(,2Wz
FormBorderStyle
X7R?Yf
Z(-Nr
*R*#
%&
L:y :
[8*-
2tn@
IPkD
q,,(
< it
AssemblyProductAttribute
grw{ y
Rk_pQ
q/BK
(c?
GetPro%guqcqByName
Du|0
QpiteAllText
k}"2
qkB#{8
.c1f
cIfHeflW.Resources.resources
/@N{
:D=
,J)]
l|kX
\<^fLvL
%]7Z7
ComputeHash
d2h
_*5j
EQz{
0Tbk
-x3S
K"Ck
qtN"\ \
ToInt32
f:kZV
AssemblyDescri6vomhCttribute
:K5
AkaM
H%Mi
b =
7eiG7J
IN]m%I
5=7CT
*~+
,7M9@
pQoR
SvAg o+T9
i7S>D
BinaryWriter
4yXXH8
4 qM
DeflateStream
izRT
AssemblyCompanyAtt4kdwrg
[M5 Qaf
g#vYWhkcode
3q93
CR{q_
m9ll-H
8HS!
#GUID
Q_$Q
2JX&
n"j5
(" o
JAv5R
Q]BlW2
985 +
1'qC
%@.b
~V35Fx
F`+.
{_$*
R 'X
%J5=v&Q
0Bb7f?
6M8(
Wjn~P
S=O)[
a9v
[lb^r
.*jg
~=L!E
+U~S^%
u#ZO
8MM?H
y!~hZ
Q?CFT
{ ymRW
ApplicationSettingsBase
BeginInv)ic
<V6,
uqgZ
grPgldomFileName
^AvN*
%}~|P
_\RQ
B$6Y
_q JZ
yJv>
!pi[
?j~ojf
zWx j
d7}`]
b&zR
ClassLibrary1
EventHandler
z,)
X+6]
>]H5
f!OW+]
$z[
WrapNonExceptionTh4mqq
A>H7
: <SR
W\vzr
o@^z
m<`
%Ccl
EX=%
H3yvd`
Encoding
n(8_=9
v 9F
hu5TD
X-A!
N+E'
6x42&#&
X]lE"
nrWD
UkO#
"t[1!
Ktsi
90w9/
S)tD
!Z<C
"3H.
n:ZRz
@K32U
D#_ &o
$07]
ETVu
ZfBK
!\X0t
*s;"
^<qx
.8?
~xoB#Z9
t&~q=
pe05
5J,}
IEnumerable`w
MQ-o
:|:*
get_Size
f%98b?X
CPAA
> b
qhell32.dll
o=O9
+v0@Y
2*@<
hUtt
Q9~
[v sB
Replace
lE 7
Zero
u %d
ClB;
I"jfk
set_Opacity
@NBo=
YNI;O)[;
S=d<
ik?h
#($s
|Y)K
U{stem.Reflection
2e-ON)
$71a4a9$c+a336-415c-99e5-99346e8e66b4
Mz)o
%V`n+
L@pw#
ik?|
0P{b
b_"!*W
TggfBytes
HashAlgorithm
F2`CLb
h YY
P\ e
BJvW#
t9=D
'K."
TextBox
>M(7
ojY=1
>fx&
jz(A
SHGetFolderPath
"[o7
System.Windows.Forms
mMu9
gLp
1 <M5
]WJ^
N_G\nu
Iy}X
na!*
B6&
J=:TO%
System.Drawing.Bitmap
'Ht#6
L(Ni!
,Xw)g
cugI`ject
sS HhM
uZhVCDN
C)za
o0N@
) T~b
N45Z4
Sc37|
t_PG\
GeneratedCodeAttribute
$I&)4"4
m,jXN
?I!1
EB2=
6 o*
h0Wf
DEl2
[< :
]=sl
"R#\ve
D~-*
d$JRqq
U;Q2
;ASn
tSh,
WH?z?
CzadJgdFFD
JuSF
Decimal
cM:/
P~mh
p v
*q@K\

#infosec #automation

TheSystem Itself @ 2016-09-10 16:21:02