MalScore
100/100
MalFamily
Malicious

guoa.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 15/65 Related 2060
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 290.00 KB (296960 bytes)
Compile time: 2017-08-25 04:14:06
MD5: 35320903bf23ea49734f041a42a1d7aa
SHA1: 6beb611e023700cb7a93c43a852c3f2823ef3cdf
SHA256: 817b22894903b7181750400e1fc51920657a0c8b06aed434f15f7b2342a34c96
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 5 oT D .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2018-06-05 16:57:03
Last submission: 2018-06-05 16:57:03
Filename detected: - guoa.exe (1)
URL file hosting
hXXp://albinormoran.com/acs/guoa.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2018-06-04 09:31:08 [15/65] VirusTotal
PE Sections 3 suspicious
Name VAddress VSize Size MD5 SHA1
oT D 0x2000 0x3fe08 262144 63a7d5689d7233858a81113c93b1ea24 f7d47ee9b216c879cb890069d05c669489b56d39
.text 0x42000 0x63f0 25600 cf6234f9c92c1c1b39a6657d1230768b f786d7c046afed1d785ca282d8bc10a350485149
.rsrc 0x4a000 0x1be0 7168 a26a9f2e076528022f9fbfd9b2b5c510 8b30dc5394df665ed620b74ff3ac2e63d73ab58a
.reloc 0x4c000 0xc 512 f73e3f2c2543c556f8d939651ff252d9 373a1d912ae1bc142a37badd20bf9c4f078f74e1
0x4e000 0x10 512 ea2b9a1ae8655815cc2655067048c5cf c7c428f797bbf8a8f326c02b85f80d650a3dcf60
PE Resources
Name Offset Size Language Sublanguage Data
RT_ICON 0x4a5c8 4264 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_GROUP_ICON 0x4b670 34 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_VERSION 0x4b694 860 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_MANIFEST 0x4b9f0 490 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: Copyright \xa9 2018 Analog Devices, Inc.
Assembly Version: 0.0.0.0
InternalName: fooodew.exe
FileVersion: 17.9.15.1
CompanyName: Analog Devices, Inc.
Comments: oc52hej5zoy
ProductName: Secure Copy
ProductVersion: 17.9.15.1
FileDescription: Secure Copy
Translation: 0x0000 0x04b0
OriginalFilename: fooodew.exe
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
No packers found for this file
File found
FIle type: Library
KERNEL32.dll
mscoree.dll
IP Found
17.9.15.1
URL(s)
No URL found
fooodew.exe
2MQ
VarFileInfo
Comments
oc52hej5zoy
InternalName
Analog Devices, Inc.
Segoe Print
0.0.0.0
SIb
StringFileInfo
Translation
Secure Copy
Assembly Version
17.9.15.1
FileVersion
Copyright
VS_VERSION_INFO
egR
2018 Analog Devices, Inc.
Form3
Form2
000004b0
mon
FileDescription
ioup5\,6>1;A:eR(6SGPW{@sb$
OriginalFilename
$this.Icon
LegalCopyright
I7a
CompanyName
noD
F)[
Form1
ProductName
ProductVersion
wReG
^'S>
V}2h
:tYs=ef
u!Su
7 qq
{pH&a
%L b
#[>(
,RBC(g#aq<
dO(4D2
$F:Q
DWu?v..//F
Sm{N
Y\=2
;QMc
5 R5
c 7@j
gt'
{@g\
lm|;
set_StartPosition
x $2
^z<v"JCo/
E!@Yf
<>q>
U51q
`?mo
XR~iS
z Ho0
NL00'
Xa6a
UE/D
[o7'
0"XD9
2|e#c
FWuK
)o]n
f4$l
!O-R(4
K nr
I~Ge]
Mb~F
\BuB"
kernel32.dll
.oi5
3OW%
PZ }
Q,,6
bs {
q2t%
!I#B]
K7I
mf,
`nGwz
>Qv:h
xGswJ
[0?d
=NO2h
18=0
Z`#|Q
n.}5
ComVisibleAttribute
*7Xo2
C4ZF9`
nG?nQf
pn1S
MarshalByRefObject
5TJK
ZGl.
a"keB
%>$P
{[aL
usb`
]TGl@
|M2W
t' E
$9j=
k]?[
Bvy^
SG'q
B/kB7Ib
nhS|
&c!+{
)\sL1
Um5~
R2dH
8d(
N \;
h:e-
Y7J->
XdJV"q
System
C q
Vjuf
,i_-
}m E
63Y"B
Czk
be%>r
-_(QL
fqw%
!apH' }
=q%>
(4;(v
]R7"?
[j>@
^48x
Wu/Cm
\qet
=`pt
D{\[a
NzTV
gw W
!u4sO
o6Cv_
G i[
sTF2
Z p
z4j+
a4ea
99b>
op_Explicit
RuntimeFieldHandle
yE)Lz
+x2A
:_ E
D bo)
_ #L
5|o@
`H-g
9}\C
OwM=
-4P8
A[fg
;A(|
(v6e}
`e8M
7aa.
m%tk
"J`NY3
EV(_
>ZAT
>AS|
"@ <
(]Z
pFo `l\tg
OJ iG
]:?L
LDdB#Y
bFzN
k aPs
4/i^
E'Z)
`/!,
YX<E
1s@*c
nWQ=%)
->k
_|Fd
ICGu
xfI
Write
=<Tx
4to%
EnableVisualStyles
1VB
R"M=
,#fBY
,^ x
pgG1o
d3uH
9h3n
__t+
n*7J&
!=+k
_l"<7
w;"Y
?M$Rm
zaVvS
;Rrp#
x1t)~
"!@
C; &
xBD
!>L
A3w~
EI1.
SV8O
Wwd
Eoe]e
jW6:
'96`!Qv
X+}^|U
e; E
C 5N
Xm|X
3zW-j
h`0^
*T2
RF[:X
System.Security
2n@A~M
+=C8g
8;+F#
f @^
]t[!
b 4(
CmE5
9+ e
UzFw/'
^ :;
R>XG
hz %
cU%0
! ?^
q4Wi
`DZ*
#_t
ZOUK
I5@y`
z0J *F
^M.(l
f$_
^-&)R"B
S%Xgv
W]mu
get_CurrentDomain
F}k3#
U&&'
Wt|,
U]Ke
b1Nt
3\}UOb~
Pis72
`oMO
KoQ:I
w@{J
S(yl
IjE'
0# E
<jR#
4 zn
~%Hz
:31u
b s%
d_DV
}H}zfV
M,#S-
]9g{7
Fh.7 V
{f_e
MhkN
C>N^
xpS7
"'R4DV
\<:h
[,ML
v:$'
y-Q%
=b!,
zA51|
3/*[b
&]*y
6c6Iu
%2J%
xA.3V
TxvR
`Z1`
set_Text
s (`HH
Ayy=
?R|j
Bb'k*h$
rk G
]}A:
D3i=
_]\X
SettingsBase
.qWap
dsHuOrJ
R_
Nc$m
,8/[
nD*\
?y7lI
qLhTr
]H(;
Ti[jc.
0 B
&8LX
MGfAR+
Vh W&L2zH
)22V!WD'
Nn k
=K3%
G^xq
tsD)
#eGW
wcab
Zcu{<
j+}}
ioup5,6>1;A:eR(6SGPW{@sb$
mxCz
pZu3pgwU
+MEn
KW,d
),/Im
'oJ)e
:oqB
M[Kh
Dod0
'&I]D
G%`N
F NJ%
y~x
2qrPeg
BL:J
~|*4r
&oSn
DA8
ToByte
_co4Rt
~1+7
p J` 1
|xqoZf
);-z
\qBP
MZQ
.nwj
x]?e
Kac &
,b.
;H@dl
nvS6
DeiO&
H})\
{IR.N
H4<}O4
+~|
^I @
3[+PP
-: {
G[9d
,{,Mq
bL_v^
3 z~
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
s H9
8=l8p
Q?,x
?A>|
KodF
@T& y
F$ju
|W'B
/\+a
=1be
~T1cX?
0u"W
fS[{J
hZjI
;]0a
AppDomain
0vn,P
gCF Y
d:c'
bg0W.
^&Nb
;r i
*-kv
D_(7
l! aW7
Ux*gJ
3xiR
v4__
/K$ <
get_Name
?41j
gtxb
*<ff2{
Gzg?
Yr\@
JEMIp
[j hy:lqASs
j90L
p|Z
r. @
Padding
Ks?-
0I:#
X37c0Y
X\
ngiYiN
r3(,
zRzP
hgO
/XOT
6e%V
`}|/D
sHT5
gd!:
okf@_wUJy\
hpZI
'G9Y
Jt[x
7*"&p
8E5G
Dz9F
\:c&
)P]J
\ pN`iA
set_AutoScaleDimensions
>zJE
F.P Ml
L2lP*
tGTi
rLg[=r
vxa/
JQ_=\y^3
mG#Z U
.Xre
rqb/
auxE
,-V-
dly@0
|1Da{
1C:s
(MgT
ju97
;`2^4NO
; mL
$TXW
zF;
\lET
iMGg
{@,u-4
I[m[
(:V
.4xY
.text
KW 6/x
MDbJ
?2r}
Mi %P
pXo (
;Xa!
> 5X
#d#%
bh3`
GetObject
_+bu
)a|\
Xv~_E8
G0vz
m4.zo
"r<Z 9
4WOQ
D_k[X
~ujo
d7dZ
Convert
8?W7
l.Vt
5EU&+
4OszIe
DuZ^/
System.Configuration
]"f~
mG]Xc>
75 m
CEsW
K'23
~A8G
k91V
h%nU#
2c?9
>X!'Fh
BE1I
}P7"
bLri=X
^;&-F
3/&4
AfzX^
:y6@3
a^Ex<
UVfX]
A'C`
q!F
7 y}
j2%<
iefN
;lgW
Yd;
%q35
C/SbQ
i74Q+
b~
?PAY5
%OX~
DQ0'
pL{^
:aYy0
%^@&
a _g
uS+6
XOf-
.Qa7
'p6\E
&%.#
9g n
J^\8
<}m:
NH%!
^4T.
- j-
Ae)'
(G8>
2_Z?
V3+
o#vD)
QVdX
9+}3
>kAP-9
%*/a
s9j\
' 6$8
5:G,
P8A8
'P1R
E9Ht
{v_
6&wZU
drLT
k i
1<2Oic
": 2D
)%$"
Q4A]
eq5a
+SZ(
+5ysx
`.rsrc
<cys}
do}e
gc%<n
~J3X
%/(
q;]ur
ey&
Oxf?if
DOraJ
q?Rp
D)Ko
jC`I
^9Do
!,4C
^9|5
Y;x<PJ
AW:4%
)'Gn
'4O4
GraphicsUnit
' 5Pn
kH:h;
#X5V
(2JL
/VQ#G?C
on"ZTM
"eG
swgd
[,``crm
R]S?w
kv|/n
)%WS
[8m"?(
%Z4s
sQ.]A
M:mP
LVe!
H*{|
i|==rhrD_""O<UW@i29`E# 4.resources
>(x,
nqNGo
~An^
,pQ+
mL^p
O4KC{[
+]f^
,98d
kyH4
3fpO,
YI8s#|
iZY<
,6S\
%2 ^=Y_=
X5z=
(78$
d,Gu
pbH{
Of]
S'e
-4 [
%8=F
<nZ)Q
:n(R
t!,wr)
8\ ]3
&Xt53
+ %wJ`
%iI/w^
Ah \
hV6x\
b>&N
/Ql+
0>]J
QIkG
5g %
1VM>-P3
s`Jw
Rm}Q
H,$o
U@bw
7Z@ S5
f{ch
'hSn>
=[F 6
Q}]d
=6eb>M
}aw=
"6T
$t4[
p#Z
Marshal
9i7f
s 7n
'/F(
#| LE89
]=<
mkm
)Kr=
gA,)
|MmU
Ajs3}#D
QR=W
_Ez#
pLf}iXk
SmYd
(
(DvB
~Mx@
&W0L
6Jz5J
x w
Synchronized
oAd]
s~~
] "A
(KW
<^|"
tIQo
.SRi@
w}J1#~'
kf0n
y"a/
I=ljr
O_L"
Nx4k
lLC<Tq"}ewI
tdG sf$
OGQ}G
{r3E
(h<P
-bS
:L;hL
?ZT2JCE
i^OR
zLoa\
6+]\8d
7h_V
doS5
U6Qg
6x7s A
TW9l
0#I5
K,4>
riFp
_+u
*YAR
33$F
U/Tr
-1z^
> <
8wx?
f ;-'A
F,ol
+f[=O!
UC41y
L~\/
seP&
sP0a
w[mP|
&] .
<V|
FS5DAa O
/A6h
2pn=
Y5 W
GNy
(} D+%
3W9K
7J$cz
^ 9.
e{wO
u;h_
R M
1/n
AGR5L
CuWD
Ae6*0
mscoree.dll
|0v`
5y =
T}}l
-Mk
*\ k!1
Z!w|
KuT+
pO&M\p
E7}
KIAu
8W? q)Dx
8!$!t
z\mU
\"f)
wEP/
^_i54
Invoke
a]A]
9;l9
Do62Zvt
qPs8
`( B
_%k=
E+xWw
j:/(qd
|uYd
.Wk
RuntimeTypeHandle
b} =$
rts(?
? 1Z
LaGOF
6m{Pt
uRW@?
te;z
2eNI"l#n
Ery|
c2?Y
!UeI
9<3c
32{J
WM3Z5
J[kJ
.g}N
*n0f1
^kjc
1<P}
/^tL
SwgR
W]kQ_
*sp/O
System.Globalization
<mvI
/[.N sF ]
5 YvH
k&^ maR
|J(U[/
:q S
D1_mx
;DR'
W P<
Tp+!
2\h*
aOXZ
Ej-,)O
t./b
G~~[|=
v)W2$
l~oU
#&_q
B#Qj
1VR1"
{EEY
;|=&
A)/o
\**n
KaO7
[C0v
[Gl5
mg}6
AsNy%J
9'81@
<rB
9p2?cJ
Gl=6
oBO(]
{RWI
0Ok_
DQ!\
Jx*3
|FVbK
detRr
DAI
8#)NQ
*"k>
Iyv|
\D7A,<j
[O*^
gEPi3
BBNk
Application
{u]Z,
Mz2~
]4Dc~
dD9D
c`vZ
|t{XIT
|?rZ
ZE ^
3HIk/H`
DpiZSe
M83*
iha
q+,7R
9#=z
!:5D|fN
0N]:
^B*ww
*yUv
>lg[
?2b
G |
q Z3
aY&'
k'-d
#l-B
=6G#K
-3p cP~WS
W&Iak;
)+kN_P FJU
RjA
7\bj{m4
L&||
2WXS20\
#KDr
aR,A
@ T)
?SX!
MOXp
B6_?
x&O|
dl2$)9 y
\^$0
:Xr{
MethodBase
cS7P
S \RR
Font
!2RFj,
N&6 |i
1s.*|6_hM
v2"u"
3 V
<ntF1m
wmsm
)04~p
R!xZ
8U%J
AutoScaleMode
.q@N
5b6Qc e
<Q=
ekm:1
m{lL
= vY
\%YSms
3aqc
W<M<
O^@7J0
O.Da
]8&
[9~F(
O!zG
z&b2
r$ +
SuspendLayout
`>`Q[ m
TuL{c
n q)t>
,X
'>G.
m< K
|% 3
&w`/)2q
BUd?Q
-Q q
'so\
=$W~
f,Fa
4FW{
UhF~|:
T"i*
qcYe
I!yz
4G `W
fX K.9p
80B$
F/Z9
M* _&L
aWsJ
:&+k
lsFn;_Y
i )Vu
N;?k
Ins
|)[o
hMdK:
.9&m
-; 9
;O}F
uii \
nH'C
/aW\
?^ S
5zB`
ZGPo
3y/C
4``qt3SH
?C7_awf]CV&
`60<
'n]O
@VT?3{
]=kI
DofZ
f-(-
add_AssemblyResolve
Q~6&!
fS 7
zw ?
8!Va
BUO"
uJ4`
U;3x\
? <
6]?v
(UI / \
y-;6
e8Ds
G5QO
6Vje
XRP
-E)R
a7: N
6 &Ve5&
6;<O\lR
dJB2,>
O?+TQqNW
^gg
LQ%A
LPXx
%@=&
[ Y \omU
yES
L($i=#
~%H j
"JHZ
(;sjR
ph=F
"tH>
glz\
=j
L"RC
w!gS
qRLe
hdSA
a6zX
vK|CI
6 &;Y
D} G
* cQ!w
Array
O =$Q
EX`J
9aqj
&i/[
nSB:bkuH
do/F
tr;p
)gi_
]D~?
MT
tMm E
{W+{
xnW~
h1l&
Oz);
U~la<
YHx)
}B[
vCi"t
F~-9
)5@_C ZL
+W2X
HMn
wLt2
V AZ
QA24Y
)/Y~
(7N=
B/HE
Iw|`z{
zo2w7
q{lw{
(X %
aw1#h
A,<L
2%3K>
@,0+zs
jw|X
B!2:
x7RE
50yi
4i^)
.VM|
6QD/X
UQq8$
b"Db
;/hvnx*#
l4iJB$
:'>/
{)>
#_Ey
cK^c/Ein
Y :=S
;h<-
<^&3z
F];V
U&5o
l-*e
woM)
J..
`kV$fr
=3_l&
`jPiQ
l 5\
?"e-
_"8yD
^q &lJ
5gU'S
va!V
{E!C
Sp
/PvZ
{{K4R
ws%H
"r~7m
J|q}
zNQO.
gmyV
VX^v
XkU[
b(SR+a4
R~Cp@c
bu
EvB;W
AeH<`
,t-fdW
ovT~
rIH#
E7N(
@U'-
d6 a
sic?*
z[k[
@ci$+(A
'_ zM
C"U%D_
|Oot
b}e3
)'|H9
^[z}*
I%SI
#\MU
Math
u(Hu
+;[c
7QH@Ko|/
?O*g
_<Fa
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo> </assembly>
{E1d
`~29
>Mm7N
Yk>A
:/( W
b> @
;udp
B=(B
u2CY
+T6M
g\T^
-uQgw
8\: )'<>
MLON7
zE^S
3$$-
Q_3B
YJ3ek~
GX0O'
5VQw
BKg3
qi3'
(sJ0
e)~)
3*uY $
Yh15
+ z i
f_;M
m=x0
vL64
+g/U
vuS@"-
a9{L
]~7,
E,Qge
,~G%Q
C"!+
7>^5[sH
)j>HDN
MG6Q
?2 kD
9F@K
fyw'6
InitializeArray
/(h}c
W2=n
o1EvVN
n !F
mz M
s+yf
fl|1
IM^ a
{ m?
-o}e
%hw
2'SG
`zr 0
}>'B
zS+#
<2qKW
&O&C$sr
)Tb2
|6Oc
fLjC!
lYL3A+
+xYS
set_Name
zHL}
~h6A
T&OA
{FC~
Ia5Y
([U=dp
2jDv
pdP.
D#m)
V0Tr
LR$B
#b"1X@
AX&v
jwUDk
=:gH`
EoRZ0f
h=~2
get_Length
7kQ*v
get_Chars
L U
}6!QF
:Z$
.v)9
\&;$
*v9P!
;XH[2
_kEV'"
zju\
7VT :
*rcg
s 3NT
UCOP_
UInt32
H}v
*f3=!
z"E&
y(%C
: #P
#sQ^
K!m
i)b1
s;<ju@
A^"ee
ResumeLayout
;>*A
Z,Dy
:Z[<k
=L[l
Ua^P
-#Vs
#x_[
1Z-z
7}4P
3!_
zjkHQ
[nX&{
:69>
ValueType
}g`/4
System.CodeDom.Compiler
;L$1<h$
GuidAttribute
oP 6+z
Ym#CV&
SetCompatibleTextRenderingDefault
*/Hi7M
;?;
ZQ/l
PO}/
YUqp
d[g b
+Q%Z
JkTw,uAt
sfl~
/;T}
s:ilh
.7H6W
System.Runtime.CompilerServices
o*Jh
rG o5
2`B1
LhLj
m~e@
H:4p4/H
*A_
EXqC
HB?K
_Kxw
\L 8x
k4zI
AZ$l
O{5
System.Reflection
xhfZ
a"{KB
,'q~
I51d"%
ioup5\,6>1;A:eR(6SGPW{@sb$.resources
7T3{-
6sYF
xA-z2XesG
V/u2h
Xl~{
K#M/
J!x;
;ac-
`9)a
E:/@
)y~)h
|@fr
>wKSld
kC7F
I.OvK
SuppressIldasmAttribute
=CGu
>Bie
K2O &
,AH6
=P*1
s*t
[?5P.J8
d~sxM
O\.w+
< 1
):i
xi69E
()k?
{}Dh^`
Y<F3
iD1i
ecY
<Svy
bMP"o*A
KuVG
VYko8
hs7:s3T
##et
Zt 5yS&
f:uG
&nEVo
AIe~"
uJPB
e?=m
x`vl8
R>-I
w0/'
9+^ A%e
Q6,89
;d;42
U}(r
IM[.
L<B;
vuR$
qu(,
C\O%
PO e
/j,z
C|3:F
gT v
}0Dw
FormClosedEventArgs
DRBh
\6,q
xGVi
\ i%
&7RP
7h>|d
k,1c
4{Sp
Rdg>
@HM1
#>u&p
(} sr
cqA"wqf
_o_Q
m0>D
7:hO
v GQ
o4Q3
_,;g
&xZ)Kt
hYEo
s N
>WPJI
AIf7
|;60
'})1
@ nj
Nl}#
CFYu
%mIG
Whf:

rZ_la
<Glr
Fi_Bk
\o"E
F5))
`# 5
}}a2B0
^qQ'~
*T^q"@
Q1V?
CC!}Og\
|K\a
</zL
e8V!B
f} &
CxF{1
|"us
dy9X
N 5'
I #=
3W3E3
m9zSv5
q ?
p!0N
d5{3
K<Vo
4z)h
HG)d.6 T6oP
j_6K/
onT
1P^{
=\1+
TYh -
.#/m
add_Load
ed[+
zQ*E
8*%+
<#^]
i}6a
CG'/
_$|L
bUIa
4W_!B
K 2OZlt_
VKmz
yNrib
rwab
sz K
%Iiv
}jW
[7Csfr
=wxD
4s'S
!SGL5
=/>
J
qL0y&
E]V=>SYf0
]U=B
v9xJ-
nSa0
<0zzs
rb @
dgdgse
va -
e=M>
h6G<r
get_FullName
MyH2tI$KY
ZE<EQ
W?Q{G
GJaa
CC(;
^QT+L
&1\l
{%IB
-W%%
p!+%=
DE77B
get_EntryPoint
r4SH%
\7)b
mz$\;
)%D7
d: G
.ctor
f ^qE
C,ZS}x
:}ae
&5\d
-.;W
N0)[
aCIlv
06:]
ZFV-
Z<@Jpz
1ANi
^s[G6
K*ts
!This program cannot be run in DOS mode. $
0 }-
^067_`
i+Y-
Q)ncZ
z~ =
,i\v)
llF
4*Pw=
$ .wh
ukO]
System.IO
W^vU
c ~1
d}$[9
V\dV
WNyf
m:jT
!YFP
W?UX
NmhF`
-MZN;
ix/
.8H43
C,UXhE!%
)ORl*P
LL6.
cyMr
c-c6'Q=
v}S*
s^KY
mN<
3 f
Lnc}
a=LI
GetTypeFromHandle
KaP8H
=@t
~'4Sd
zMMt
YI3Wg
F s!
ckrpKh=
os_H
G.XY
ziko
Module
YS;r
mTe`
Q6'H
M\py
WG[$
&1>oa
yWih
1KeY B
$,*9
l<*E
) S#
rkDo.
NME_
X;yh
@.reloc
^ymtb
F-p2
L]8q^
/ x-
{RG~O
d} =
46<Z
&6-}
66uBn
Os}P
7Z'wk
aQ|n?a
+ =|;
:'u&
q/pd
V 7T!
-yF^
f *p
bHpdi
Byte
H*?D
aRP5p5.:
Cf2=
gBeB
g )K~
XcDJ
ZMq~D_
i/-
<,Z|
U81
scY8
swp%
e0%E
KAmC
ut=
3g\P
xrJH.
ez8|
h^@<
#?^ _U
< 9<
W@0N
(~abY
yo._
3S<c
}$
ET~?Z
hn=s
IjsDqs
#&{"+
9c?\
c^@;
mqLgY
Cs
<3/GP
'SS~
^|/
t*ox
IYOB
5Hx-
@W>6
#7Lf
MFq,j
$>|8
<S$,
H ~D)
;DsF
Assembly
Z,0*
D #\
umR@
w^0t
fPyl
s>V1
N2:Je
ats9
`nW87
4<2N
5Xu$
( L
zlP@
BSWH
N_ q
oBbg
z9 d
/3]fj K
wa/ I&M
g,-2W
X v<
%(\
zMd8O
t $(
#vV8
~?40e
sJn$
ezT#
VJv)Df
7;k}
oEv,
,E7KY;X
q1Re
y`lS
Q=Y5
}xxI
MK ~8
FzYv@
wVwL
mb'I
<F@G
W! (
;z$MI
XM0t
Q3F,7/
RuntimeCompatibilityAttribute
v'ok2
Y*PgWwN
Ju:/
{8v<(
k( 7s
Bl`~
?Kp)
N }
,SUW6
w{-S
r. 0v
0+8B
u~ O
VJ4q
oL^ n
fBI<
J U
WJD
h)Ys
8ANb
WV -.
d?A-jk
zyU6
/7&H>
N"r?
G!>$
]tK\
\AUz~
6T{C
6]RF
6B7CB1F76B99023BEFA8EB2B530216F00916E4DF
8 J>
`_4f
1mB{Ej
&h.~
MH%s
=qu-
vY c
FWU/
wM)klz$
:'_m
(AJ[
E|d[
{oR%Y
{}sTD
E>n A
BC #
WP:A
+ ioa
H2.H
|ZI
'R)n
vJLg
pH^u`
(j!a
Ke?=C
U^A#31L
7\B6
IqlW-
))4xr
69c\
y>MMD
aFmfCR>t
X}Lyww
U?ar
<-N5x1hz W~NT}jq/
,Ij4
>]SuL
se(
@h/,;
"y~-
Q},w
-i'a
<7'm
T*Sq
mE w_
}~&[
pe2dE
j-nw}
`y(lz
Dh'.Z
@d.1
^X(nU-b
um~D
?n`6
R1~?
_is2
N(X.9j
Jjel%bo
2Y:A
* 06_
> G
:A]3
IContainer
`]Nc
9hm"
sdBW
Oy/)z
$GO~
cVw!
Z~XI
'q.u
8za[
Dd_j
J;iK
,'YsN
W9D.\
UXz
/"7C@t
r3qDj
|6-c>"
a)W
set_ClientSize
|:;
Y [
a<e[
q*+H\2
muV}
!US5EX
Xk>A
d7wy'
%)gi1;
idga
J<T[
2ntZ
69F]}R
A6VS
pqg
FontStyle
3OzKx
l!ZrW
c#2W
zW%O
k? n
;|7Q
3> W
9 Pl>
wMI w
(r}lf
1<;
8/wM
O <#
CGX&
~\4c
mr]v
l]3?Y)
:AO~
~ ;V~
Control
UR r
W*xM
a *n
]b||
i0ti
q&q<
Iq/#
x,.,
"us#
xb^<%k
0>"q
/rg)
o]rAt
.Awc
c+6
pVg|
,!Z5tHl
;[Yb
K+ cbH
r_UG
G^7>
cUe^{
iF"A
+>@O
w{so
2]om
bl}%
t}Adi*-
[D)
F9:M
3/}w
AwuP
OHF#
GGX,j
D !.
rBP ^`XF
$&c%IY
.Fi@
P-o7~K
5 4C
$M[=fe
_L`V
z|DvI
XmZi
V=<2
LE,_
-?~q
? ;O9
bXKk
:.Y^
jleP|
;A8
PqK#2
r&{
Dpr/{
fC'b
oWEn
QSE'
<x ZTg
@\O[
x54DH$
-P:D?
05c2
vxzN
ODfD
5_Y
}hhu
yk!:
R23tV~
9t-D
_G9E
N*Zz|
vuhSs]p
;+Pd_A
+rE9
B3*
MQ*.
X$zcz
- !\
dwP:
rc&Q
pScy
@^R>
lFhVT
y %E
iAHeeE
7* m
`l77
2nh
{cd#
f19kf
DQyBUl3
J0}-K
3B^msW:
z|di
XkY
}KP7v#u
\+?s
c }KIu
X0]2
6%v*
QJD%
)fz=Y
9[)@
- Gg%
Ho\Z
<W|M
`c4HJT
WSsn
q#e;:
n)O!r
KXvS+A@9l6
^E1~
C!o>
PAOk=
BEo!?R
B;Nh
1T7k
V;\0
m~s3D
PYBL
0P~77
H]j|
}l(w
na#J
] n2
3YOH
Type
,.N&6
#De<!
jShe
IwH
'xV*
;:}`
+`CV
~((m
s$iQ
wZM
d_fA
Close
+p$[
JoT,
uHv]
c%`JP
e.?_\zi!A
/%3bF
^I+%
y &_
vX^[
@VKPw
5wQe
/W`(z
M@HS
<|[l
~k" y)
\a+^
6Lx5
Read
*cHE
N|.m
p5&6l
_:?G
% \K
Cwn
O$g '
_h WB&
"4Ed
V ZX{
MNLZ
i#Qs
0,ty
1.0.0.0
~r|G+Br
R$;7~
ComponentResourceManager
$1$i
Uho}
Xl^|
d:'Bm(
.]v
P"fb
8n T
`<[0
Cv in
U19n@T
kGMy
)X1&m
]MrS
zv#>,9W
Xb&+
U`crJ
,I s
y\j]$
z+-d
4\@Z)G
ti?Q
\x8Pv?
mWtq
9Ur#
{B~q
jySW
}%Sv
enp,
8Xq#
hH4-
( 6"
rvLF
, /|W
V@H#
S+T,
gT|B
8g6b
u|68~
%_2vc
ghd
OY{,
D$[h
8#0
H:=7
c2Ya
.cctor
i4u%
xE9R
set_FormBorderStyle
TA"
v0%
*6j$
0|ap N
zd$ aw
Q%Sr}
iOUB
tv X'v
l*c~
3;"e
LF/5K
yEHD
b'Mg
)Kg-
:KJ=wJ
sfi(
=V}O
F'tX
7VkBtH
\EPT
{zx_c
Gb^
0WYR,
"/+q
".+~e1I
zby4
<>E ben
, -
<X D
+xL^
kM"&
.?"D
#=R7
3Ptv
u C!
Y o e
C/v
^usun
Q8%
nt "@ U
u.(>
wU~<6
?2og4
BUI
k mt
) N(t
^Bms
" 2 @
q~#r
PP .!
mD"X
9Pzz
PGXP/i
~dA]C
I e
@N$N_:
x-Kn
Rv:[
r$b1
N69K
=6i*
R62
OQ<r
=%KC
'D4}o
L0oH
t8R7
3h&#
WrapNonExceptionThrows
~peT9
`Ib2
)nET
2*HO
^m-]
saW;
9uAQ
%l9b
c?q[
=Q>A
NGr(x
~)L;#
8 <[%
7Sp
J9#
}_^>p
]!i7
Hb:k
~OO%
Br @
bP/0,k
g*m0
sj [>
a}>
oTbi
mPsG
Cu'^
{M`\
Op x
"@JD
=dBz7o
v8hDS_
:~u%
a z,%N'w-
a,t{f
Cr,g
p@ E
C5]
6z :
TYg$
sH*Hw
m]Ga
ZN/
OTS-gqP(
CpH9QeW
$h M
<0\|
'q!0M
9W"J
CZ;-ze6
op_Equality
^i(
^zlIf2e
:t4)
1W?I
Le`t
A]_Q
CzTE>J
[ `{
q\yX
3vt(
@ELD@
=fI
dJ;jr
|zTX
}'l7
H%}r
2 ?>
);lk
F_u1}
X"_
c}u0
PnE,
X $\_
-Phdve3P
*ARk?
1S?B
K6%k-
oFba
n3y3
HP!+
MyBI
IntPtr
?nN/
|Yfs
^ G Z
^RPG
@Q)c]U
0cZ`
tBPE
7:[,/
?E}Y
_Qi@
D%{/
&'b 2
iK&O
JaE{V
$lt3
MRwQ
ReadByte
o&9eza
E2H
%mQ
mRg#3
set_AutoScaleMode
I pcZ
6"gA
:IZn/
[E_B
{}K]R%
Pix"&E
t,eliW
\h8j
V@z y
qch!
T"oLSrU:Ukg
O 7d
6 ~~
3>/y+ a
.v &
]Y0]
@R(F
PA wj
OCKg
93nA=
^Pd>9N[
^ Y<
I##_-%
i!F670'/
5yhr
o7Zq
vS@8-
TLeh
~GZm
>Wz4}
N_:X
'd7=
%>U@
3System.Resources.Tools.StronglyTypedResourceBuilder
^n_*<Kc
19 f
: Cm: G
(D/U
=cCU
LBXMwN
:`.
get_Assembly
7;9,B813k
Y+
{.x!
g4:"
mPIn
]G 7
S^ l
. 4
YLi
*_^i
h$6~
LX@I ~
JksGn
)z{
Pewaefagi.Resources.resources
><16?
:5rYF
b xG
-\0U
9(m\
03\Rv
(;'T@
.0 $f
w\iG
i w/
2Tbb
/ GNx
Dispose
5Dj7
m~{z
;&DV
%1E7UA
oRc*
!D2U|'
Z]Xna*6
<&g,
@5zt
mYV@
Q Frm
"f=%s==\\XYihH"ZP77Q\]!\+{m".resources
N|/'
~VU/v
xzUN
$OY^wc
vGyq
K )K
< B
v wcu
@9x;6
f~=W'(
}CQC ]
7j+o
2e|Q
'#kkN
]71H*i
w@;G
~swM^
'$K^
GA8
/d^)_'
O>~E9
}[o
c5FV*
zd[o*
/7Q*
eon^m
W?4_
ur x
@>4A
-b(En
J~q(
`-H)
$+uR2
REE2
nW8-
s XnG
:_H*^
>:Q[
e*FFE]
#GUID
m+.
l'"T
W!n33}
_/@,
47H^
f.s3
\ pE
qrZ.
'=Jz
wmkJ
neq_
#bd:U
>XY)
vaog
'pnp
BSJB
m /W
THO)(
)~&z
_.G:
ni r6SP(
a+)1
JZ (
I"R&
STAThreadAttribute
zES
63988n&zo
i$ H
KxI0
o*'w
'[ X
5-q
v \R
{=_~zx
wYu{
lWuqp
cb%>
u0H\5
eol
G9*C
x=%RH+
-;81
2I*v
_iIc
o47d
k83v
3*/V
Y5O9
"G,
l&h
a+)q
h T,
WvW P
}xY4
UiWqE
Fwa6a
85ff
e?/*
U(J
,3<:
bas@
l&Di_
KZS[
4 X\L
O]D<n0
4N
# OA
9d@B
XqQh
)wBGc,D
,!{/
UYE,
VirtualProtect
]._H
4$Tf
n?Sc
DwX*
$W#k
359.
rc$+
^x&i>)
M>k
7#JO
Y# Zh
3POtw
3rm2
t(R/
N~'z5
a <$
NFve
mda,F
#*\F
fYbX
m%q
.qUk
>WW0
YsC@
<4#T *V_
5A[gD4lI}
h2_V6
\`ff
i%"~IlB
l8F*
OXe?
G(p-:
w]<!
EditorBrowsableState
RL`T
uYD1cjU
'p\]
@)xd
6NE/
lAjlg
5LGKY5
OY1+\DM]
Lg#L<
Lw) wT
RUTb
<H5aW
$u:i
7X/{
DE1B
kR k
Ciw'_
Settings
|D70
K}TB
=#Dm
hE%P?
gi,TT/
;"&0Z
fW@B
?G=rh
P6PYU
+2=f
A!|E
+76h
3UPK
rhZ0
o \"@
_Xvp
$C;F
3(? {w)$#
vqNg
sA}]
:" ;W
SpA!
W`7"`)
tDU<
^SrG
~!
KQf?d
ZsT%
8|L_
,c"
p}XW
qdk#
&`r5g2
V')X
psH$\N
pdg`
q]9f^6
W-}"k
fk&
QjZ.
P?fY3
CultureInfo
S`w=
#1c'
oM <"l
HkY`
Form
Lzb&
'@aYC
jv U
muIs
l 22
" V}l
C fY
a^9D)#k
mmr3
,qH8
Ia Z
0g#;B
\i~Pa;
A^nM
J}1I6b;-
w;bKo
\6&@
A|~>e
=o3>
d0G/zZ
"5u)
e9=m
f=i}
zn5B
lC2G
u q
]pOw
Oh&F7
)eb_P
::u<
Y20Cu
w`R
CompilationRelaxationsAttribute
eu:w
-~=4
AAUb
?dIw
du t
"~qV
cZ7;I
Z4H
g*V[
vz.{
M `z
)W;*P|
Cq^`
|MBw
%(ZrS
b@Iy
asxez /
9G=?
ResolveEventArgs
e&}b
d><@
Nqjn
x<2<9
3\"\
$$Es
YTc
tH \x
+p[{
cwYK
^8Es
fB4$=G
bSyJTZ
z_4OdD
(GCJ
3Kra7
rQvU
qn%H
e{i9Pj. k
i9X#
b (
!Cal6j,~
=xDo}
wkXjv
Jbp^;
Wlmey
vubf
$#p^
|TXI
6Sph(j
t^nYv
~a.h
?bMI}
6`6
UQ$X
g1J*:
^3Bi 0c
SP+n
tZ%z
]oTQ
,tpD
:u"<
I,=/
yz| @
W._4
>s0y_xx
SecuritySafeCriticalAttribute
>R3I
i|==rhrD_""O<UW@i29`E# 4
V.j`
{{;D
!& L6
ibO}
Xs1.Z>[
q {/
be%:
)dJ:
"O`i
m#n6
KTtS0
v-W/
F..L
dOaT
k -P
HMTF
15.3.0.0
|fNDG@
Ny4s
J2yW4
ResolveEventHandler
-tes-x
Ep*
B6W
zs2p
hqeaIS
~MWL
4:ki
d/YTN
aZlI9
bcQb
,znVV*
""Fk
`]xfVQ
/MhK
4/H
<u5X
-0j!P
)uJ`
BlockCopy
Uw,cT
=y=N/
o!}oD

dciY
PnlVK
-TTP
JZ KlO
=%;;
0a^?
A'D]7
lExj
$0a097664-cdee-4a83-a152-2acfe9273870
LzWE
"RTm
yMGp"
G_o 6*
GNa:
|zBU2
zl9*d +E5o
Nf)P
'K??
if f
NB@%
Uh] >
9;An
j[d[
'B6E
w @0
XI %
< -N6
Volatil.Properties
_SZr$
aj]_
YEH q~I,P
Za|G
Size
R#S<e5
T;_)
Fc&C
e@F>
m[li
>7kn`
n;Ra
wu5,K
~f)(
>'#u
-#SV
1kw)
F +U
4Y}9
!Sa"e
#)VG~
w]fX
)C#1
yCe)
K }1
FI2|D
ehG0
<05Ax
{@]_^
D6K
U|p3@
|AiR<M
K^f!E
p":Q
K`H0
#o*1X
yR7H
D7Q
9 JG^
QjK$
"(i8kr
ejWQ
*=Vz.
x4B&
/)Xy
pP G
7B$~A
?jv:
y 4(
JVTJ
: ":Y
T9B
sF#N
7A-2
d:OU
B1b&
Kn7 =
!gD&
sLT }
@z
_xvr
C-X'
AssemblyFileVersionAttribute
kj[JG,
?:-h
Z-L#
}5&pXw
m-${m
GxlK
z?|6
X9,k
jf Mo\m
fo3~
=Q *
%/)_p
9E.'
r[G8
System.Resources
&zwi
dTj`
U,&"
'LIG
5eCd
S~za
yCX=y
A~GP%
UW\E
N #:k#p
&[7{,
XXv7_
DG67
kmkY
Ca"&th
Bh\y
L0{-
@M>
nG0h*0R8
hSsEy
{ $2
l;, e
xL92
b^P&
J zZ
%3w#
[##n;
i|.%
xmzibU
I'+
Wi ffy
oMA_
Icon
8#'L
Vp z
Xl`#1
a;<?
z;e
^]p;e'
7;C{
&ZT5
t~!)
Uuom
fj$<
!?rb
BMyig
V8q
Ii*3
bgLm
O7w*
Otgc6
t A8t
4n7*U
a l'
GL?FW1g
qvP)
YcYf[
GT?l@
{kr#
-!?@
5Rdt
zPW#1
(_iJ
!fgg
ResourceManager
2@2}
KRi
FTbgj+2
)M&&
[zH0
I(N%
`_fz
nN||y
9Ah?
4h)`
tCMu
(a(/
*D6I
FN74A
9' 6
}ZYg~9v
<4*0PjPP
x48
fHN
p*H,
Xf/{+
s[)-v
4}~Y e
}b"
~iX5(
K%km
~Dy3
String
p. yC Ira
scL?*L
| zX.
_CorExeMain
Fv:*
ea )N
wE!x
/t1:
rbuoWp%
T8F/
Ocn[
<Module>
"f=R
%9i=0
G-|eE
hhf
\Qinf
vL)BH
{NdZ4xJ
,%,%
s}M(
="YJ=
62eKz
u`.+
&`(RJ
Dp-U
ti g
,.~y/W
^'?<
5[!!
TCYr D
" ;6
TNJv
^9Vh
^x%%
j| 3
jzB.t?dA
)RsFs
:+I{
1"Z:s
7? s
*tM
x|_8vq
8v J%
zHm8]Q
"GWu6
<WTmO
!r?%
9~Z5M
l4mB]
55 e!
3+->
EditorBrowsableAttribute
YAS-
Mmxy
:d]kr
9JiL'
M<Y<
-gC0
~V }
5H_YE&
1f.'
SL'MN
sEwZ>1b%
w1 X$p
zG(?V<=
To X{
"G|dB
qX T
a 3S
ContainerControl
8d{+
2 E]:
+/`=oy=`
b:aw@
fT]Ov
65rnD
/Qs:
0]Hqs
fe{y
H-i1v
fC|B
-4G~K
Z &S
4{x82
t'xK
%k D
~aa`B
p MT
#P#G
Load
?v${;
&&8$
9 XI
hyI=
mG
Q?k A
#4sE
": w
{Pp
System.Drawing
0ZU6
.Q_Z
l+Cr5
.*<l
lDN33
]|7 8x
^/(_W
9sja
{nVa
GW]*5
zj=!?
^k 't
wr7]
I9 dNz]
Rmw$
9=r
8mMU
XV7 K
>Qg)
<Q@h
+Th"
-k G
0%*>
L ag
mH`?
isD>
Default
;!Eo
IBDfO4
h""j4
`KwR_
`1_w\
|\]h
\jn'6
j&.J#h
B F
"TWV
};<l~c
{O\9wjk
P\5
tEwN}
~r
Z,`N
}YJ
F])1i
|nF@
/De|
RuntimeHelpers
7F%E
-x451|Wp
}5D+
`B$\kKL
h IW
{@Rq`Y
dv}>@
ggc
'@b@
D[i5
zyzN
)`:}
vrTR
(Z =
~@2/
}.OH
%:TG
2~`>$
m/rt>
(9(B
6gwd
v2.0.50727
6r [N[
MVzq
c~Ko~
v>>j
_IC(
~K `3C
!AAb
_#:P
;! e
7uo9>
sP>3
`e#<1
,K^
7n}O
bV=&
1zD+o
Tm(LC!
Object
BFhN
Jj~'v
%%`RO
Vz,{
C2FV
%;d4
T}Qm
5.g;L
)ORJ3A
@Z]H
IMSv
Ku^
p0n-
4RZP
E}B~
rhn0
-tZ)
`jRY
_c;
G))^
4RK
ZDs&)
(JxL5
g:WM{
:Z1#JmXpl
vC#`
r@5{
A]BP
1vRn
EwGr;w
hD&-
cm+Q
ry`h+
xzeX
k[LM
Ds~%
lrwV
u x$Yle
_Assembly
AbFQ
Kj4D
Kf "
sC[E
G&E/
B*9_=
P Uj7
i3;n
2Qpj#F
X"#V
2r70Q
8 Ua
Ky|m]
"L2l
4>SV
:R)/,D
e@,>]
7&AM
Y `r
.Mld;
MethodInfo
67=
UFK d
+k6f)gB
.EF%
$wE9
FQNJ
JTOq
=m'Y
D56-Zq
s8Du(
)AEk
^ vF
D'n9
0b:Zhg
~X
PK(z
s y<
1\IR
WzbTk
E_ 4
n#
pAN0
38Rv
}Q-t8
;$Dr
A-E = =
~uoK
@3>{
AAc@tb
>j%j
;93
DG $
t5.
2jkhL
|y ?F
#7L
j+7AS
f@;a
Stream
r\N%
o&r5
@>K>
^;>y
hV- 087~
~a/$;Gx<!
JnoO
@Eu]
get_Module
/FL8
4>l
?&p?,
#JT
6B~(
B155
q`'1
c1y~
H}Jl
[=z&z
1Lxa
K mq
dk0%
NGHf
z482
[GtbS
.V"1
Sft&
Q'FkT
UxI
7\E-
c|5|
O^Sr
M}!`
U {ngI
`CTG
=[t7=
!Rvb
R%G(F
OP7/
!0/D
=E_)
~|9
eDY[fT
3%su]
.n<`
05T`
S@g9
gfv3
m0R=
ZJWi3
X%?KI
MkK+
1Ln~
#Y kt
GI%0
]\0F
=3SF&
jYV^
FormStartPosition
s60e` S
M[#6
Q ?fy"
*hVD
_,t
<7YJ
[^lzhN
P8NC
{vK!r
uQpB
R&i6{
)I*z
# tG
y))D
o1 a
R2g
<_e:
LGV-
}#TFAb
f ~A
MemoryStream
';=0{
xx$x& x{)
u>/<
y<It
narv
ri/^
@I_%
utQZ
^f 8;h
doqX
%+R(
Z>cs
fgG+6!=
( ci
%lPp
98<F
W!-
BK9Y
kF`Q
U*TJ
W?]
YuXG^#
*(rfHn
\A<
bp@]
5 rnh
+H"b(
G>,e
]ox%S
j>Y!
g"Rn
a:R $T
BA%&
Z`tk
/g j
vh9aku
LaJ<
MI9B
jE(e4
S6(v
">ri
>m<*
C 3fy
n2J\!
-D\7V
;O@d
M^K+
"0)U
i^)IE
g Xp
;.Y
Bc9R
Wo#}
Kd<E
2bzY
#@3@
9'UI
:`kX
GetHINSTANCE
y,hV
<}&U
WqGr
Nxr`
.;0G
2+c q
juGC:
. bb
;.oTm
^*`{
wug1
* ,c#
r+>m
OezU
3ilH
NC.C
H?J7
(83=Yg
_dh
) 78
N"0
G*!V
E(y'
sJRL
^\5:
lp0l
~$mq
$$D!l
qA=~l5f
+0e1h
fkD?
d FO
Z&Di
.B :
V,7;F;
6txs,M
wF(Y
J-1#
M>x|
_~GHgbd^
*l2m
q+`4
=+YH
V%r}
s.%5
f9t(
);B[
{fwd
NI]/
Sy*B
h\u/
T? ~
<S7{qi
p_iqL
v5@rLYQL
B;"L}j
8cK8
Pjo"
f4Br
(8|.4l
lrt
B9a'
[q~S
tqq(
!zR#5.
KdhFNwWuAiNFoPRMjgQTqYpyWKRw
5Q^I
d Xv
\i^h
w,c
L)B]BEOz
fL-)^
?ZEt
HzuP
)V|PI3
hY%'9
d%An
7j$-x.
( Yc
nNK
cV'!
*C[;
i#s [
*$7_
xk:/
>1:gTR
5t\+
vzJ
^S|n
yX3X`z
+H{&
i h*
YW(8
ZW.!!
>z w
;Z)NOx/
}yL
&<H%Q
3#B^
##xV
:/w)
jY-:
:$G]?p!p
?,Xk
'o;^.
C3%7
v:Ma
*dkG
vpV9
a "3!
Xd@-U
3 c~
k'S^
fY >$
#g\Y
YaH%
-Ag84
ttH8
=9I*
OyU5
dt J
jAJio
yB&\
#Strings
N@uw
+7}WN
4MIrG
B>1^b
!'=/+
BgxK
G:o>c
HoU6
|`zr
A*8y0
*sW<
s$;,t
'eK1:C
BlR[Z
7`9U
a@ai
.W=3
E ^4
|7V
9DZ;
Z=\@T
hdx}
af<ML
{6%OX
uWZA
.V#&
Fgk }
$V l2
FP6X
lXCN
Oe"A
$FI
!4+Y
o3dB
dH _ou0#f
*1JZp.
g0,O
DXys
&Vr;
m(;
pI;tN
OXLU
MuZj
set_Margin
0 CI`8y
TlcP
Bs\<
xQ4+
`imen
xt.r8
g,ev
C"u=\
dgdgse.exe
1 (
V= i
KV(j%?
BIi
G/a*
cpb{
(qge3
\&``
g/%B
42]?c
N'4t
aVbb
(s R
0l)`w<a:CM$TD\]t>UBv0b_Cl%.resources
d "w
4 T+
D: u0
]8f'
;Wk,
add_FormClosed
0 {|
\P~;
BP h>
.i2p
P [1ct
Csgq
CBJ5
! '~
,e!p
6ytZ)
0l)`w<a:CM$TD]t>UBv0b_Cl%
|O.o
CfY@
v`Sh4
@;dlo
5z//s
%8 bV
&_ko:
NXhG$"1*eD
VdN')v
i!7O
^ ~nB
K fm
o]^c
//!++Qk
LH(K
3 ^,
&aL
OpFGM
,cEB
s(?:(
Am`
:3*52 ZF}
T>:
)_^w
v+ KJ
L&1Z
iD72%
K3`W
Yx)<
rFz&
oWci
7GRYa
-stP
> Uy
K{BN/Z
<5/2
"1lL
~.F81b
W4!l
P:86
zV86
>AN=
f' *b
T$rc
System.Runtime.InteropServices
?2s|
3 9F
EventArgs
]#%6
n5h;ra
&1-v
/ S8
-r8*
,u=*
;Dl{
rL{\
t,[N
G6*1
+YVp
e{;XP
2 V+
eqid
0zw!
$x)qCH
1x Qxr
zk5eGeA
e%g>~
?O>c"
.8 o
;/_@
%vu=*/|
D)}}
t2 p&Tl
r4Qp
u- v
K?by
TQ;(
[h8g
$_~j
hn1Y?
jZb'K
$%`/P
Zpy:3 3
WuIEV`S
V@5!
cC-W
AX={
9*5U
Xx `-
k~:$
F}Vc
Gg+Z
BgUk&
_;eU
_[`)
n+MP\
xcf,
p'ByOs.
$phy"
2u$=]}
bTgA
b[ g|
q\tE
-]Ch
kk9B
C7vn
|G !O
{$Arn<
3mJDC
&<ZT^
`':}t
H- (
ZJ 9
*5pd{
S@Sr
n3aE
?j
~ xA
S%E|MQk
QCM
8(?R
YS;1M
' 1
^wue
q9@
System.Windows.Forms
set_Font
?3#
AWZUt
}g_
P:3 "
]+izJ
'M '
"f=%s==\XYihH"ZP77Q]!+{m"
5$f
%-+W(Rq8
oOs
yH,D
jZ='
$Po-
;[T(
f .
;<=Kn
\aVI
X)85}"
W7pS~
r>qE
V5BP1
qt-Q
Rach
IDisposable
_Dkt
&GI"
N21
J7fu
tyr9
S]NI
|I1:Q
[Rf$
Buffer
EKkfN
UnxZ
g4Y~
LQJ6O
8kVC
<G:Q
0vul
;ll4
CHR4
ln>:G;
>u
C :*ce
FormBorderStyle
W!KN#
RU^71^
"Q39d
]G;t
.!=> `Z
4n&A
"^65
{o ,
|Tub
)Occ
t@=P
d$M
.:tWn
m,Xd!(
i EU1
7(9q
}NWm?
bLM/
#Blob
!pT-qW
+vsF7
2E+r
0qDvEi
GeneratedCodeAttribute
,VMA\
8e8635e2-e267-86.Resources.resources
{kqr
)T.a
l9Q(HZ
Z.DZ
sp<@
RbyY
p:G{
t+-
k Z)
fa-`
&==@
*b*W
d"Wm
Tp0Iz
."PbK
"`!"Q
%GSm
)}cq
;8-__
Gzp)
B(g,
l P[
SizeF
47@|k
YtfAK
;<P/
qci=p
X#bU
`fZf
{>%
Qw9q
0fl)2
l$.N<
0`Ya)
6ruH
o;Kz
JFK^\zd
]Yqi94
K1=Zz
Ou9?z0
FWt\ ,
T" w
:H3W
zrD&
FDaC
x%b_S9
.9L*
S -
c=JKA3
cB*{
O3"w
2/CY
wmRR
gUBFB
32hi
;\TN
zmO"
qtwK
EI{c
'KfjX
,MIO
G-)y
sLo~o
h]A [
Z~z1
44KwI
aN)9
4`\-
XF<U
,NP`
%d,
CT ;`p
(+Nx
jfGY|)
]l n
Wb$t0
P}xx
']JlF[
# iv
/&$x%
cQX<
B)Mc
TZd
~RKb
VE4I
%)1Ttr
3 Q)@ a~5i
2S3D
Q|.8
DHFT
xA4=
d1U>
sJA7!
= C9(8*-;
Kqj>T
,oN+
#PBnjz
uzIPf
[i{|
K- t
{/?`D
ogWr
5G`8h^{
V*x)
ApplicationSettingsBase
7ImZ7o)
DM>CB
~U/+B
A\YJv
cz]IK
]w;q
0 ;\
o/;Laq
pV|d
C"~R
5A</
8<I6
9m";
t*dHc2
C#J,
m4jK3 }
(Kcu
!54U_
EventHandler
B bU
7$7\
mscorlib
rcR;gW
FormClosedEventHandler
4e5H[6
#j(C
qx_ 1
Z"{y_r
kAT+Q
CT[s
,L W|
Om8Iq
.~Q:
S2d{C
Ddz
oJ#D
Qda
QI~R
"o[7Y#
"]b'xH
y0(R:\
<&/b
+ xRe
`?|
(1)}
$?~a
f*/N
/^;0
i]AN
QQ9m
?aA;<
UlYR
hg^EV
E;MO
3b>R
4<A[
\y.B
Wv9Z
w=PXO
ns5GT
m!0E
a}H:
% #e
}#j
zL-m\=ymi
jv>9
l*O[
'<}%LL
"nI$
2("[i
n7{z
p44R6+
w(Pu[
B}l1
Pu,h
xC/k
j- <o
Usq&*#`
}@s.
15.0.0.0
^jI?
g|z
YJm+;
(V-k+
?5W_
\KF"
4#s-j
+;;e5
>lG4
& Lg"
8-iW
D~eU
_E</
@(<F
3(?O
6k_SH
v i{Hw"m=
3y[,
y/_qr(E}
U[3}
H*~9
YcO0
3 '_
k"(-
Gj7mq
:?6&P
$>`\"
set_Icon
System.ComponentModel
1@?y
Y%$PBq^H[1
fr(e
D6GC
Z9v?
T4?|
L@0X;wQE
yr/!
n5-I#
^Q$D
EFP5
npgw7Uz
hB5G
JQ #
"Fn
+hV i
X-^1Dx
i*Tk
m\8 ,`
kq[y
xi9%9
ipq*
mw(5M
PJ\y]~L
IEvidenceFactory
=4_7
Z.Q!:
!ly- K
TFx7
? mn
<;.
"+2r
o^wZ
e=PL
0J5 Q
}d f
e-U!2
=m"
~*FXC
yb$0
&m+$\
Y8lar
JO!#
hN39H
zL:"g
`*@rQ+
,#G
g{M+
-)2CK
^i=c4
MN<1KS
"BU%
vawP]
aHb**
fW[q
J-fS
SfpEw~
Vcl,k
%ZLL
>W@d
y#@{
{mq/>
`aO+
$~,5
98s"p
]p9L
bb+c
2Yb~)
XEQp
#$@&
F:]E
Te3<&
,WW.n`
bpYq
;G|X
;%5j1
lP{_%
J2sA.
_S?W
X&tS
zN+ m
Of,R
s:2'
jk*N
& G#
B F
je<w
48HU
- }
t_$F*;e&
t2~ K
2,_6
8u8E
*Jy#0
3-x:
~+"T
x"bd
I &N2
FSZW
:"Bo
8#]k
4*:,
A9L0&
\B4D
Yo1u
-_5H`7
faSV
&(`!
'!01
`iDl
%q=C
?`:0
]R<Ax
IGoL
$W:c>
S"CS&#
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven06_64 Seven06_64 VirtualBox 2018-06-05 16:54:59 2018-06-05 16:57:53 174

2 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven06_64 Seven06_64 VirtualBox 2018-06-05 16:54:59 2018-06-05 16:57:53 174

0 Summary items with data

Files

Nothing to display

Read Files

Nothing to display

Write Files

Nothing to display

Delete Files

Nothing to display

Keys

Nothing to display

Read Keys

Nothing to display

Write Keys

Nothing to display

Delete Keys

Nothing to display

Mutexes

Resolved APIs

Nothing to display

Execute Commands

Nothing to display

Started Services

Nothing to display

Created Services

Nothing to display

#infosec #automation

TheSystem Itself @ 2018-06-05 16:57:06

Detected family: #Malicious

TheSystem Itself @ 2018-06-05 17:06:02