MalScore
100/100
MalFamily
Malicious

NCAqBGa

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 21/68 Related 2164
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 427.00 KB (437248 bytes)
Compile time: 2017-09-01 05:11:38
MD5: 37b7b0ac8109777d7dc2f51bc9d0fbcc
SHA1: f178ac02cbba406e12f4def8bc1cb14d8130b79c
SHA256: 9a2545163944c121a99a16c00fc3a48860d60790a72ed32661f6737c941d9a9c
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 5 |D .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2018-06-11 21:03:02
Last submission: 2018-06-15 19:39:02
Filename detected: - NCAqBGa (2)
URL file hosting
hXXp://uploadtops.is/1/f/NCAqBGaVirusTotal
hXXp://uploadtops.is/1//f/NCAqBGaVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2018-06-11 09:03:02 [21/68] VirusTotal
PE Sections 4 suspicious
Name VAddress VSize Size MD5 SHA1
|D 0x2000 0xbf4 3072 0a7ac7091fc71da75596fec8f9662308 522a09f30a0ec7de0484636f3d04b32d191623db
.text 0x4000 0x68e78 430080 a9d042afe780dad8b9b632b817e5c10b ca63dd5d49428bac527682bd4c6188c65480db69
.rsrc 0x6e000 0x6a0 2048 a3cd83f91af07882d2b2d79ecd7a64b3 65c39c4204522eccf2ee8fe05742af75be2d7787
.reloc 0x70000 0xc 512 7e003156211b720fe995aa28837caa63 f9470603a74755077ca1d1b51e5ae12a4cf282a3
0x72000 0x10 512 7394708c49fa0da8c880985ab8105fe8 8ef45d98822f782844d795281c21117e846d64cc
PE Resources
Name Offset Size Language Sublanguage Data
RT_VERSION 0x6e0a0 1044 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_MANIFEST 0x6e4b4 490 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: Copyright \xa9 2018 Vishay Intertechnology Inc
Assembly Version: 0.0.0.0
InternalName: done1.exe
FileVersion: 19.9.20.4
CompanyName: Vishay Intertechnology Inc
Comments: iv2fevxl4mu
ProductName: Active Directory security and Group Policy Management
ProductVersion: 19.9.20.4
FileDescription: Active Directory security and Group Policy Management
Translation: 0x0000 0x04b0
OriginalFilename: done1.exe
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
File found
FIle type: Library
mscoree.dll
KERNEL32.dll
IP Found
19.9.20.4
URL(s)
No URL found
VarFileInfo
FileDescription
9741f752-baba-7110
9741f752-baba-7111
pictureBox1
e2c4a01f-40b1-9d
ProductName
FileVersion
Vishay Intertechnology Inc
InternalName
229f0bd9-cb77-58
Segoe Print
2018 Vishay Intertechnology Inc
xox
done1.exe
StringFileInfo
Translation
Assembly Version
iv2fevxl4mu
Copyright
VS_VERSION_INFO
Form3
Form2
Form1
Comments
O'#4zp\]XnVzBL\*he@?@!\[\,b3#
19.9.20.4
0.0.0.0
OriginalFilename
$this.Icon
LegalCopyright
bc4519c8-fdeb-060
CompanyName
000004b0
Active Directory security and Group Policy Management
9741f752-baba-714
9741f752-baba-715
9741f752-baba-716
9741f752-baba-717
9741f752-baba-710
9741f752-baba-711
9741f752-baba-712
9741f752-baba-713
9741f752-baba-718
9741f752-baba-719
ProductVersion
O)s=
0~up
^^{k
k]B*s
c?'?
Z; Y<
PNG
;]7z
QsBeC
(XOx
SKJ jC
+<[/;
atB;C
kC?z
;p?LN
ghRbk
8>2$
;}Ms
\.=%'K
$~;1
dp6@
|P/%
auB9C
3 @o
r q9
a`B8CJ
+~-
_:?3 D
4RF~
T{mI
ywB8C
.IM`
Jm< W
B9CU2
~0w9
m_;
O<qUm{B
?<He'J T
) Y!
X-|$
!jt)
a@]qg
xc?0
)"6ST
)I:K
0p&S
PPjHMc
jZ?6
=7Z6Zn2
EnableVisualStyles
n0y iK
[pk-
)M vm
kVUO
aOe._
L_<:l
y"E]
wB3
KF7H
LwB=o
_`2e
-9b0t
bqP]@
)|/
a62I&
BqC[0Z
0d=G
B$\bCS9
f_O b
[X=n
}1aG
g-H
lM}RhA
`Wx{k
9ue
aw#:C
o!Zd
Ghx,
rK[U^
5-j>
n1Om
gLy-
h U9C
.wm}>
]`Q-
set_Text
mI3p
r<%U
_F Fy
k3gQ
\ke]
NNL>
'r-
#+uC
^&W-,
ndl[
Xt_^a
OU
n~6|
VZ?k
hi! .5;
[b/s
BMg76
9GS_V
K%R;
Nwf
&^VeS
awLG3
DC2a
/PGM
z G@
2 _
vv\16
a&A}C
.I`2
xp*l
h,k
Char
wSdB
H/WQ
h3)X
VRi?c,
7bHu\^<
E|Yh
Padding
H{L
}|7{
+wB39
6^e?
O5)*
T>FZ[
a>,O,
CsB9
~?~L
K]2un
\yfs]b
qP0
9zy/'
%Pxs
e9LS J:
]ro@
:1Ri?c;1
m=W'
zzi1
kayB
G~ZE
O?Sz
zb<_
.text
O}p%
;s>P.3B
awZ9C
a>B9Cl1
;W5=
GetObject
X?5#Ke
e):
1fwB
_~+O
ZX|gX~
m'6P
zw_"
TARO
_Qc{
W$HT(
0~k`oS
p1E
l8)P
_zH4I
j" P
avB1E
J6Iu!
-9P\
lvN!
J5)L
}B9G
d_vn_
vU&2M
.M|0
G T1vj
nFM S
,)(uW5
phr[
a$DW
d"X0
b K*mo'>
30<u
+ukD
?Ceb
y\)K
HIz_[-
awb9C
IhB9I
Qx\ pcWW1
73uZ
T%L*!WJ
tk\c
#Xw
0o}]
J'x2~
!O=0
`,ly
SkG]$
oC"
v`]d
bRr9
S(7p
b=ZQ
/Y"=K
Ed!.
`lFdZ
!a<@U
M?:V^z
=>_
Q T3
HX/=
JS#3
J]9*
LwE(>?
kN!8C
Ju~o
yL<Z
9&L!
1G0
!"m8
l~sh
7g?
il< "
bP E
#8%W
^1Hm
oKe
=`l$
109N
PK=-"
"-O\,
ys?[F
JwnQctU
eYBbC
Zt_^a
k |U
)o2c
avB9,
tun!
V.9o
zAHU
!#1s
get_Assembly
:Yzq
<AiJ
lzv6\
w};N=
7%C\2
`w`(
'yjq
];\
bFn
.Un1
wwB=R
M?RoS
li%.-!
VW6&
z&YO
3#M"
<wh^FN
/Ui|
,jwB<C ;
!y>8
y) 7
mS+o
Vm!hn
cAD>+
N-Y(\
|dmxs
W( '
fN{IW
;})9R
f,SSR
IHDR
drB8B
j|L{
h 5rH
g8,>(
|cU~
System
EventArgs
\iqB$
qe $
?&TmE c
)a^BuC
nM .
i~k[W
OfDV
7*\T
p?'|~D\D
_TBC
rbvw
*}B
J EI5;R
MethodBase
a1-K.
P*i
{t^^
{t^]
{t^\
{t^[
{t^Z
$EO*
< qZ
%}ZSB(#
roo&
dH7LJ
t/_,!-o_~-
^6M<
0 6K
M_3x
swNt^
?t}3
pHh"
BeginInit
niDJ
F-9C
*,z 0s
#Y!C
h/i
^<
OS c
waPBzC
awB`C
XhY!
dwB1C
{|[W
%b\ Q
@yRs
asS?,
4 E x
(K=RC
aN]k
c'1PAL
>]fXl
ON "r
%enm
0a*7
\ tP
v<X3r+f
B F0
L]`
-zg(>
v'+)|
ctQ!
?U9,
J0Yv
AwB3k
a7B9c
5*qP
XD'i:
CI}Q
}0W'
dLUr5?
AwB3C
DAZ4
+=I9
(6\i
p i
ajL1C
S/?S
8row
LGYm4pJ
R[W }
mb\+
4^PRO
;`F/?
2kf2
!tkm_p
<9B<
Q+X87Z
`7S*i
e0;-
'Q]HJ
M#'Z
mpKl
-|LV
aNB5C
VJ_z
Ze>E
@S)I
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo> </assembly>
5Kp'
w)11
OR{!
3r|+(|
&F}$b(4
#XB9C
]65"
P=w'UD
eaS0c
bawB8C
u=9aM
>Ac<Z
awH?k
$`- e
awB*s
x+jK
z6 6|c
].n:
}UN6o
set_Name
I<x=
/ ] Da
6wZ. }
M0HG
wB3
K*&~b
AwB9
&):-8@
N w-
Zk8,zvY
v]S=c8z
awh8C
^xcI
mm_31
>$!X-
x gs(Bkv<,
l_v\
')P'
D R!
ptp*N
ywW>
buR(
reqJ
l5~%T
Z _Q
a}]5k
:85s
pq7f
CWMl[
!6R)
&oPf
BM }
r)ANHe;
i>}vsU
~`89C
O9LJ
_o_=
QdjO
Z&;*
I{ q
dRi?c
aw2=C
aw/8C
%HB?B
Ct}
msS3Q
a~B s
2Ri?c
lV/pU
uwkaS5
A4-9
a~B O
ST\>
:`J@='
`'w
nJJ\
Mg]B*s
qN9C
AH;Z
awB.h
>le><
avjvC
cX{\
^ \
AEI<
o#-2
o@4`
7u/P
awB.B
6ey}
yGtZ
TlXj
2 .J
=T.}ZH
0~*%
@[5>H
J~b
v;-+
>+5|
N9/k
3G:H
p'q'
7k1(
crB;B
sTk.
}0iP
2wDP
[$PG
D e[Z
qzpcB
6CNK
B(CT
a:|Uz#
}&A3O:
7A5o
a$#O&
Invoke
gpA+j
fCy
GR]),
ZKw#m_
=lCI[4
c\_E
G{G@x
KMBl VV
@a`R
YwB9Co(
tV9W
\^0)
4tZE
i}lTc
$r![
~mPO
Array
|s r
$@- CZlkE
PO u
T)4r
a6Z 8
a&B9C
ZQk#
vAn $
/E($
w4av1"
}Et^U
A&CL
AuJ1K
VEq[v
Pz0W
{[Zu
b=LA&
O40@3
K38@
]j&B
v+5h
LxUU
aa|p
~wB=C /
I.B9I
System.Drawing
$mB9C
?[yJm
ll(3
iaWBgC
x|V>6
KM-b7
oT3P
Ow3/j39
uY~W
Dnhs
;W9z
+Y$)
1xB'
/%XXhp
4_8w%d
:%S-
0q%W
RuntimeCompatibilityAttribute
avB=C
c%IZ
wB9Co(
@9C 1
T}9C
9=|J
>8K#9Gs
e ]|
bVC}C
:&;c
M%<Ic
4< $~
pobM
.~X
/T5fw
OyM<
O'#4zp]XnVzBL*he@?@![,b3#
`-.i
rZ :
Size
+9GM
B;TWmM
_t$
cwB8C
5kQa![Oy
Lok1
e%n;7I
fs_<M
sfJ0D
vom r
IContainer
L0nH\=
:7T{9
b8Q5
S+Y[
<N;=x|j=
DbG|
krD3
aw@9C
ec,
apBDCD0l
J)<
HS#|;
0t]
Cg: (=v
8l <
I<D{x
loO8u
N,Fq
`5YWt
euN[
0m/-
,R0w
ResourceManager
v <*a&
}C2wa82P%fu
<ll{2
&[2)
*(v#G
ContainerControl
INC**78
j~bi
QuB(C
pLwB==
1;=I
0p,2
a$_j*=
3ccKm
a3'Z*
avgr
a6&]C
lo\-l
\/)Ga
Zk8x52
aSB9C 0
G|^3.
1""OU
"zm`
P9}E1
19jl
SO=E
a:'J0
7o[+
]&oT
W)=cv
FVxX'
7t(o
{-^Z
:t F
+ rO
CsRc
awz0A
$e q3
{[wn
lmQH
[g{<V
\z],I
Close
)l{-pc
kabF
G! |
8wB3, 0
awLA
\L!'
= 6 .
'-#t
z9hk
6\0R
h_4jQ9*
@Og
.j~i]
;(o !
cR"o
mr l
|R $
hO3%
/),`
ukm0
4$#
7Bd@e
^t_{
cc<-~Z
^t_~
^t_}
^t_|
wB8,
Lz}!
{I7o
awF(O
^t_[
^t_Z
^t_^
^t_]
^t_\
"ItD
$6X7
awF(c
G@qX
=n}[
^hwBaC
wB8k
^WD9V
I B9E
,ag(n)m
#^.9
ffJB
ControlCollection
k4Bn<
wB8S
(-b!
3G^{
<A]4
g4|A
CwB<C
h#Y_
vaWBgC
3 6{
9 I"
3 6K
g_G;Q
OP;
.SH`
&y)n
hf-U
v/<
RuntimeTypeHandle
&|f*,o
F:o
KwB*s
L]d&
[ng_"
%'X'
Q>+EJ
ZrdF
IW%/w
WI$D1
St!m
V i_
bf/
6c *
\_~D
,F"T,j
^PuB
g}Na@
zQnM
0q ;
j0[>}
:%of
BJGO>
(6P`
Qug
YeH MD_40
awB C
h7qIu
/,iq
<nyY
S5|s
Na|B8R
3 U9
dW@8M
k_$9C
dW@8_
Xt^Z
Xt^[
Xt^^
ZZlOg-
`E16
?q!b
FM7J
i s
_,oS
u?s7
0g$#
!This program cannot be run in DOS mode. $
A+$}
fFToS
9'UxCt
A.Al
d%"P
Dispose
8gwB9C
, Ro
T,[]
4U',
aV\.T
rim
A|Od
awBAC
jW, {M
u:=p
u:=q
$: j
+4n3EXg
adB+C
T${;.
set_ClientSize
hwB9C
d$?P
PM5!
MR!Z
x>1q}
k5TY
2y|
W,~Dz
ZonF
PkpN
!'K*
e[fU
1uQm
apB'C
,l}[
_< i
:^*>
h(Zg
O%`~,
D-cY:
.Copyright
70!]
:Nu?
g2(_
Nu+>
p-4P
0p.
&sf}T
*Xbpmi
b__9C
QQ=O5
^de4
0o;&
@q$\%
:RNf
PIPok#@u
0o;G
--n'
46I;
aez
f3D3
k 3P
GJZ:
FwWMF
awHJ
#4Q)
XH8Li
awByC
!<.S-_r}qi
lx|.}
awBym
^jk\
lk1
~OL-#c
awByv
awByw
yyR(
Rohz;
(NB"K
|0~A
CsPj
]Fw^
<gHs
%2^x
?Bjo
rfSx
C4wB9C
~XgyYCsp
&F?+
S"PP
MethodInfo
sY)T
CompilationRelaxationsAttribute
>SEevq'
4"d-
4eN_
!hh+
-ZT8-B
O7vl
e"wBSN
6y<I
hfj![
iVOR
0x+/
I 6
njk>
z6^e
,l-,
g }-
d_a9C
[ d{d
UDQzw
KBS(
<%]n*
wGOg
QVutVw
gT.~
J-IU
zR;G
M|S(:
lAOnd:
(Pu#u
I+ 'Y[5
53\69
wzmX
~-p
ps_3
-R<[
*-O=
ET WQ
<iY-4
wB:C
paOBkC
+Kq
awS/i

[k:.
xhwB9C
F|=F
awS/I
%\ayC
'sgf
JY)zGM
9va ?
qFm1
nmc0
{i_
<(^J
kmH9C
9k>i
=}sxrA5
]5U|
p( P
P \D#
|g
GZk q
v l!N
o9Y(I
"7}wo
`t,HF
1a3B3C70
n S
^9cmW
0#|pW
p3J1^
zP<?
w& f
z13;
O'#4zp\]XnVzBL\*he@?@!\[\,b3#.resources
I9'rT
>UFm
I5yD
0cwB9C
2a8l\
B9C~0
pa$S
=['Y
oB~E
tQV+
avB9l
>>Y>
~T;P
pj`d
d_n9C
xpz
?e:V
!; [|>
f!+Y
avB9C
lx>
Z-~o
tvB9X
79<hh8+
~*BhE`-
?Cma
{_MLJ
]0ed
e0JP
\5:[
`sv|
@3?.
$mx.
f0nT
Ju>W
^d~}
xxz%
DtRj
usI_&
awH?cz'
psjTC
ykz?
o xZ
-I9[t}:
(|XZ
_CorExeMain
DebuggerNonUserCodeAttribute
e6;{
awBGC
6^8$Y4
avR9C
xt^Z
xt^[
xt^_
xt^\
xt^]
`ek1@
` g~
80Y
4-T-
J[+)
!RTWA
ava/Cr0
yu/]
$'K5
IA>Ub!
#c'
,WAD
rq[g
9jcO
}}J
`vL>C
%P.
aw 8C
aiB<B
WJ p
6M)>
x`](k
iu`;
B[@.
get_FullName
n: P
"4ku+
PTg^}&y
cwB9[
xo>k
LB93
cw ,
9;Tt
leQO!-Y3
' Ro
qZ9P
BD1Y
[n@w:
_ tP
ec3w
)*ay
y&|7'
Unfn
jvVy
nA@_
gjG;]
$t 6
a3B9C
GDx
mesE}
VA\'
~>{K
?]Mm>X:w4*m
h*O@4
{SCW
[Ha+La
EG)zNf
&@b?-
j_iR
PY_c
{a KH
1q"o
dIA]
=3&^
APd5
0SO
]*8>M
O$ F
GN<
0m&-
~a90K
}NSa
awHV
<-PG
?{o'
\%p8
O[@.D
P PS
^>SZ
:"xMiO
1.0.0.0
zkB {}
-" Y"_
:H=b$
'7Jd|!
awH3
=.['NI
sRGB
=jJ|1
?Myh
}QwB8f
n4 h
i .9
%9?;
qRMkhU',Lvnw
y6X
f^5>
V[|T|~o
x8{V
!r5;
,Oy9
=|au-
[6+O/
fD'B
"4khr
?/oB
7.H!
i .u
^x"`
F+FE/
vdJz
X"1^
?le>
X)6y
KOBw
ID#y
Ed j
V\xJJ
xt'_
N&*}
]K'
wO>Pn
v IR
:z.[
p =k
EC$j
4 8/
6awB9C
NJzr
}- ~
$,EKm/
C~XJ
o;&P
paw1
kX37
g[A{
&X:+
^=\r8
eBc"
>awB9C~0
%B9B
0c4H
B9E~
at]9C
B?EF<V
PZ8O
frzKv
D/~!
qa3B3C/2
J "UH#
dvtW
n\Cy
&,E!R4
mY`.
$< g
$-x|
O%'J,
vw)!c
8+no
h~ (
^k&m/
+lV1Yl
{="n
maGBbC
Idyb
Z_t" i8f
>GyK
(rLB
-'.m
N U]
`vfy
kREV8
eN b
Point
%/og";
1y +L
i2I$
|*&>
Awb9C
nxH,0
TyLU
^ 6
l^
*Zgi'
c|&s
pg&{m
4n7%
q{!
fv~^
aw\9C
2I{"
UeqBg
}wB9C
;wNw
set_Margin
E@6y
5X8y
^M>N
II)$
$'MA
$'MD
>wx_
9~0I.
_mu{
1=_c
ao8M
( zJ
kZ}'
r}T*H
{Rf\
Ri?c b
[-$C
KH h
,w#5
;4Pd"_
mAY,
BV-\
i}b=Q
m%rl
%cnkGR
NEGk
0m)
kWd9,
t8=q
t8=p
a4*X1
\r!m
Yt_{
Yt_~
Yt_|
2MGY
_wB9C
DPar
psh8_
snJ+Z
;Knu
|eg1Q
Yt_Z
Yt_[
y8 @r
Yt_^
Yt_\
Yt_]
zD9Zi
9N6M
.[(
HC0p
>+zLTl
a}jNC
Tx K
$'@$fp
qk)v
q/
sPgr
25;M&
;wk:
#E p
0f2Q
_nOv
v/~|
123heDC5 [
U#==
SHzn0
2{Ve
dXH-t
IDisposable
8?nc
mP10
{i6P
{QKCm6
^kbVr
M>yuV{(
*'j%
U>H
l [/
_p]_
bes0
awJA
7 96
a%'^*
0c q
fwB
GeneratedCodeAttribute
Q+=`r
Ef hx
O~;L
Suy\
3 Js
g_6ZMx
h0V
40U_
tsnD
. mc
b6m{o
"o\&
c3B3C
BawB]C
rrJKh
sN88
XL8y
o['
(^nw
+]{g
&O E
#GUID
B1PQ
2R4>
pc~B5C 0
fw1i
GCyo
>/Y*
6!Luv
mA/m
o{J3C
aw*;C
au L
HawB9C
.m+S
JNv^
IoZ!Q
0OU
{*\Yf
t!Wpi
DiQ2y
q%+z
op;
6I2q
z#0
/!O]
aaW B
`t,H
jOE?L
&sfi
e'.8VC
~ak !
R@dln
~~v7
XU'4
Ud2X3
e_#9C
7zfK
/\!`
rACJ "Zl
"CD|
GXB?}
40jD
urB<P
kQ&9
Zx|zs
fj
-rq/
uJ8v
(.PG
a6r #)
}~AD
1 \*
kQS>cY
c,{X
uJ'
\xHw>T
NCsR
awT;C
94_8*
gz%p
B?UO
pA/,
J0W-
~jD!p
m#Vo
=S g
H\Gi
M*Z
A}PlQ
ffxa
gFf
>B9C
(*n5
XL6
(lA8
[_+J
"+9|
F> O
=^7 i
IqdjkAb
{FUu
y9E4
(cu j
eO9w
Z!V.
1U~~
gAMA
|vad"tB
7(8K
GpUaH
`D>I
j 6=
jH$JO
J@A9bM
o{C9D
p_U>
[ RP
xH[k
0Q.Bk
=A:f
LZ/UO
?'m5jJ
ZDB9C
awB;C
vwB9
`dM11
7>q
awEG3
JBwY
~oS~
,\s7
<T)X
avBmA
[zUF{
U6?;Kz
^szf
0@jo
F('5
e}C+
zTOS
n9+P
mZJ[
yPDt)'
Marshal
a_BnC
O DA
BmF;
]c B
*f767>3
uP1P
8W/- ^
wE?MV
$EA':
uq?%
^WVW
V`wt
cq-oC
_G?_
ek0~
0w a
:1EU
CyKv
S9C
-l}V
sqApE
kwB=c 1
-*M3
N|o8
IB_<
tI 2G
HJ AT=
mY{{
p~(|
xiHB
4= |
.wuq7H
6kyc
7*Pq
AppDomain
["t\
e4tP
Li|}
OP~c
qDb]
>ru J
(OwL
ci)I
<b+-C
s:Jk
vs_?}
O:P6
i'O
\|0`v
=nuX
g?y#{J
:ka
1q<ogp@
6T9n
.ZDZ
net,
}&G,S
R{P F
awB:C81<
jFc4l
>Ix;
Control
/>)s
)1@ G
OQU
**9;:
=BaX;`(
V]<
RwB=i
n~M.
Type
=ElO
+06+&
awB\C
WP4`
$_2FI
aEB5CK0
z=C
'J<.
(fhs
V-7GML
83B7]
m~bj
awB9K6
V!a>-b
QR>)
G9@Fe
YTQd
J2wP
SId!5N
a}S>cq)
SHcvRhGb.exe
p(gB|
k8 i"
_ g|=
?a]1t
i<[>
}^1:
pv_+
E ]w9
{&_~
t&wx
3mh#
0v8OOu
PKi
FH}Q
B9C 0
Ui?b
e~9.C
c5h
RDIC
>.?fT
0b x
*~UG<sI@
I|B9h~?
Q^@<
e{zk
SL-P
=u0c
woO;
%awH(T
(o8%
]%&dA
-(O[I
qO\-#[
klk
Of0\:
Q<cW
(g8Q
%Ku%3
|/|C
I9|{Y
?L{K[
a*P.
xf 1n"m
ryJK
64%JT
7 6X
b~_|
|%7L
d<'D
w B
zHh,h$#
rCF4
R)^.
>_t}
MtmM?
RJ\.-
`.rsrc
a{B9C
']6Y
ne:<t
j)qB3
0~ro
03 9
tB9c9
"*IXtX
zEzZ
R@Jq
awB9M
hs uT
_IfI
;@>E
h Is*!
awB9D
awB9B
awB9C
RFZlH
#0A"
awH3c
awB9c
ZqM <
k w f
awB9u
AV h
irB8^
[S f
yTI_
3IdT
FormClosedEventHandler
irB8R
/)O
xvPi4.G
@Ji:
g-tm
,Lv*
~+%w
(d{a
=q/owJP
7 6'
fW@;S
[E i
Vh'}k
ZO<+A
0dO7
pI3b
7 6G
a3B3Cw3a
'W-]i
X8NA
0?uH
m 5 }?
&M_ ,
BC4[
7 6{
7 6g
'oqN
Ihho
LRi_
xZIi&e'
htZ=
set_AutoScaleDimensions
<3sP
awBqC
iec%G
j|RrD
Up
/j"?
UbL*
,I%XUT0U
0P .
V.>*D
g(UuXR
qfCH
;,Cf
prwB=1
3T(,
-s(pG
/[bm
<b;Vy
h% 4#
^9jTN
XowB9C
6tI:
]THa.v
n,'P
awFG
/n.~
W3xz
{*)$
f%'P
g~c:
aGB9C 2
a%'Z7
asB9C
I!0
JeKr
0~]X
x?}Hx
:]D1
>e<';
J5Z_[
C8Uc
-NmZ
t `Q
kn(Yn
\"_9
awF>c
Fw&'l
MNO?NW
OAw2^hLV
Fpf-
T(JT
1.X$
UYu,
)Y9
5PSm
:Yx{[
LY^c
a$BMC
#Strings
Image
,1L
6x,-U"
wxZ7
aoZ)C
6&]1
FM
|QpV
{r2b
]qUKbu
lC;a
htD(g
43K(
_K0.R
rUD#
wo~ F
Dz[g
d/#w
qR
Cw?UP
)bp-q
w 8%
*O*lbG
a~B Cy0
Application
C J6
iDC9
l;W[b
B9Cr
awy8C
rU+
Ym}X
Mfz9*`
jw;R
cyer
rdQ(L
i5{5
VA.[
.hHvv
QsB^B
icA
aYB C
w|8~
2BhA
7}%
w8J?1
[E=T
hji
F Q:
L}/G
rc T@@
Z/P
awB9Cs[b
GaD
(3'\
7pZcB8
?C~0"-_f
hSystem.Drawing.Bitmap, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
hQ*j)
KI17
@VsNk
swNw
!iw<
>{Sq
w1\7
awB8C'
B7bkU\]
N7fL;
Form
CHHq`eEO
n6o:
s&^$Q
k_"9C
Yt_}
|/~u
IXVf4
{\Lg
awC*E
fZddE?
eu0~@
o tPLj
N l9C
sRd7O
=$
=u$e=
HewB;C
awC*s
SV5V
u:|wO~O
DdK#
l~6O
xqu{
awSJ
54qu
5eZ
4x>.?
o31_
&z)d
a$6K*
WqbE<
X 6+
awH-Q
awB?C
jBWfx
>wB>
eVoR
kdz4x
Z%]5
L/=3
l{f>Ey
u8=p
u8=q
_>b
pI?&
_vVy
cS~mk
0g |
_ X{
cp<JC
h/ZT
ResumeLayout
\.jlq
w7d}r
XDwB9C
t i
ValueType
3N7>
System.CodeDom.Compiler
\:pE
avQ*U
fwC+Z
SetCompatibleTextRenderingDefault
5v}o
n:(P
]ZQf
<b;,
f,G[
O\(.
Tt=!5r
agBuk
kljw
;#J1H
Ky M
aww9C
M y~
0!(
X9v<
[j1`]:>
mawB9C
Ewb<
@6l-b
itz:
81Vl
PFq}
R_y
215I
@awHJ
W~d/
yt_[
yt_^
yt_\
/ijy
pl>j
t{x
j*sQ
yt_{
FormClosedEventArgs
]_vlw
vB9A
\ ".
qZ;_`
PU(H
fkpJo3
4g_G<J
0qQ
|k_<I
Y,9C
=wB3cV
DebuggerHiddenAttribute
y }z
vB9c

kya A
jfSGt
!9_:$
$qx7
Pt x{
<mt8
*Bi%IX
@E
@?]o
BatBDC
20\Z
vB9,
%YI
= g/e
jXTX
vcOT
|O\>
IdS V
0` D)`
P%,k
lz7x
a}I:k_0
IF*^Y
b^jKx{[
i%_$
IDATx^
_5DD
`?cX*
E6B
.UV*
kIOX
L=+#/
Gx!F
.ctor
y@@s
?2U9C
B9I
~kN
)Ecp
}# m;
9B/6
^alJ
\\=uMP
u0gU
_t^[
_t^Z
~"E|/N
_t^_
_t^^
eB9A
wz,P
Zt^\
Zt^]
Zt^^
*t1
Zt^Z
Zt^[
VZAN
<X{+
gGO!o
pfo1c
K~i*g>eu
iyb>Q
CW1#
Module
j/wy
eBnC
nY%'^
e.Sr
a#-~&
SA$XHx
@.reloc
eH*{$
f=BP
_Q ,
8U1awa
sF` k;
:)Uu[
$409f33d5-4241-47fb-9359-06d3fb7f53a1
apB4C
9[D2
Ty V
arB9
czUcTJ
H:FW
&<zx+
&$WG
cH3q&
Uqq
}c 9I
`vny
m|F'C
UCd:sC
UBA%
pt;fj
HIX
set_TabIndex
~Vsfm
_='7
q\MJ
a}N0cc
&&{'
|2?nh
-a}B
kzb6
Wz~p
GI/jCb
Q? %
z( x
Q?Z]
yZ1H
0&}n
8%OGt1lA
KGuP
,bnpm
ZnB9Q
t<=q
6B7CB1F76B99023BEFA8EB2B530216F00916E4DF
0~k`P
'>aZ
8P~'
9ZJd
)(90
iemd`X
<]1LQnju=
}-\O
}[:z
aRBJCF0
t,y,XD
hEDkw<
&M
i)f43X
vq.d
v'S6
#Q&Z
EwB=1
uttX
8q8Y
aJ S
vZ]P
awB=C
c1-w
"+z3
o|6:Qr
\[&p
=-qGN
$ 5H
/VJu
*5~S)Wn
kwC,Q
n:*P
^VqLg
a}Q)c
'W_}uf
sa$(
Ogm
!p;[
#`*66
XFHY
~_pmr
.-dF
8Q.9
k|I?
-ayB5E
st,x}
6{s7
Cyq:
j~p
iB;3
XL;W$|
j-SU
/jEg
aOR9C
C:\,
}mu J
MS"z`3A
taGB C
qmw*
I((m
t/wB9Ch0
t,1[oA+
k,v=
~dBpU
aIDATx^
awBx
<Mf"Q
1wB9Co0
qzE+
Ukl/
izvD
awB^
awB]
P)1Q
awB9
~)-q
awB1
0e?RA
(A+t$}
B9Cq0
awB!
<gFFT
X{^
yD v
|rJ0D
EEW_
Eia,}
0F #
~Uf$e
BSJB
,jL=U
a1BPC
xs%[
`( x
6wB9Ch0
pqbH
pqbU
v<oO
*kgMO\
cT:@
}?` ]y
a$;J7
e]B*s
q,6P
E9.V
i2F9C
q*$2
awB7;p
xawB1B
y5Dn
B?CM|\
jk }g>
q<6
#Yid
aNVa4Q
(Q
}"2w
II:>
kyML
q'9C
zt^]
zt^_
|wch
zt^Z
n_O|
*p!>
Uc+u
TBZ7
@:BV[
`wBVf
6$v$1
^iUzn
9 i
Av_<M
ysR
]2J
.S-t
6g*N%
91GY
0N 6
auI9@
o2mz
imcr
hks;
aA42c"
Ia`B8j
[k[l
=lu::
%m8nP"[w
9Qlqh
-u[*
\YW>7?
k "P
3 Ky
^x ^
u`2
@IbI
%\xO
!jwB=C";
4PWo
LM u
IntPtr
:l.Y.
@B~'
iYPk
kf[V
SXf$X
awB9CHRU
~IKH
CsA@
@?Ca8-
oawH
;L9[,&
O]zbq
"@Sf.
a}H.h
N=^:
__8/B
bSt"S
`L/_Z
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
wB?,a0
sjL+b
Z4+aR
a6Mwy
mscoree.dll
BMI
nKiyY[
4(:
\i~_R"fm3|\
mAGx
JMD:,20
Dcov
Y+RG
_\ke
Yu]l
D|Y>
L}<7P
Zccj
K@\^
E\kB
kk$;^
Y+OGjQ
o{K1@
awB3C
FYq3,
>Myr
A$Xy
_|dm
|?wB8,
%~-M
4EJkV'
QrBMB
0v_0
jawB
/ )t
!I*~
pgj#
$6GP
mNf[
l _g+
lj.o
/g[d-
DqT?
HpR8A
!RGY
n5r
*0FT?
c[wO
bY
j+h
p5}1
#Dxs
kV>l
a\W/k
{Fe9
B/CF0
a {Z
g;Sx
}w)r
s:{]T
j]>X
tej]
hwoB(
&" }C
tuuYt
O(mM
o8)P
\zuNa
f5AnJ
My48.b
$t:dH<8
$/Ju Q
`!j\
_8Oo
%3d~
:"YB
uzvx
agB*C
gtb9D
&nlD_
B9z
t(T9
0 }H]
IDAT6
,r~d
zMKCk=
ormJ
Qly/
aw]9C
yRi?c
C\g^
+Df]
Vi1q
T5
L 9p
'Du
Ph1C
ewB=C
u"eK
}D*"
zF*w;j
`g%wU
By@9e
?qi/
Dz]4
awB9CH
%'Hc
awB9CA
$F3?
65?/\
Wt^|
d/9t
awB9Cq
awB9Cs
M^+Gq9U
y&
awB9Co
M}Zi;
s+\O?
,KwBxw
9 (0
?\Rq
pg2L3
t9=p
t9=q
qoK.~n2
U_Js$
+*n5;
BwB,C
15.0.0.0
,{u}
b" u
u;_{
c$6P
;nZ<
P<ny^
ER\]
3iYe=/
=}8<
;WzW
)|xO
O$6K,
*Ee6
e4SIr
}-j2z
w|]Z#
vfL7
0q0K
rs\g
(AM
263<
!A7p
1szC
U'cJ
SMOj
~0zr
k P
l`gG
g*u[
I~!F
`st h
&j`{0
7Ij b
SHcvRhGb
1UY X(N
f!r(
Ox|_U
|0|.xrz
Sb=?
VBs[
/16`u
H@jg
&E1[
;fU{lKI
E \[
z i
\&-O
7]-p
;wB30
<V6T
scq^
;wB3E
%9HOy
433/
?WE&
ev]@mN f
iIp"hU
UG= ?
CMeY
H/u
nX[<
)!aK
T? 9
[t_\
[t_]
[t_^
;zlt
[t_Z
[t_[
)6/K
NJ#/
[t_|
[t_}
[t_~
57[A
[t_{
~t_[
~t_Z
g R
~t_^
~t_]
awB1c
;WA =
"F5dv"[Y
e ?+5
E|jO
~t_{
~t_}
~t_|
vs~5= n
ehpv
3h U+
ePN*i
N:?-
X-9C
bx99
}u|=
^[e*
~I;[
}>D<
&s[n^
<zGi
6U&N{
[M5H
stj`C
k'8o
;V m<
^>\U
awB8C_}
Lf1.
qn{0
MaR,Z
A #{
tgVW
fe7B2C
0i1M
3c&
'"]f0K
],<[
Tqp&UI
Q V>
V:;; ?
gC[e
=0#j
W 9i
>G@w
&Ey
7tk/
;WU6)
]'zk]
hp: o
9wB3
j1;~
9bhW
ufF(F
sPIx=
Tys$
unKXGU
SZPr
7 6
h-h
#QN4J
v 48S
h<h
5cx[
o8'P
ComVisibleAttribute
%whl
P{^3
D/aM
X$R\
vX\d
) T7
B.<`
YobA
&@Q`
rr]!
0~U`
pUyZ
0_ L
I-B
q#A6
e TG
JO<1
q0C&
a3B3Cg1
nN L=
tUr_As
}]r>=
no5t
ssWV}
%@/g
n:#P
j#;P
3V._
}zPK#IG
z)0J0
Pvnw d
r}]&
a}I(J
;&0f
V8Vo
g]KH
K_Rn[
xFgP^
{0 6g
UR=
Fui"
nxM8H
aVB=C
{0 6{
Y~mri
QrBnC
ava4Cy0
2~Cm
3__'_
;V^-]
.+$I1
N H-
]d%c
uawB9C
i T#-W([
hic:}5A*9
y ^k
0tD+
Cd^S
dH+L
gbj/C
kvPaZ
0_io
Ck/h
a #P7
}Xk^}
i_s5=
n9b Ml
{Pw|
Yt^[
?rB("D!
+xd>
MijsB
7n0xW
nsDRC(h
DIW~(\C
si\Fu
zwgP
'"x!
<N(O
rq]
re/_
ay@9C
cO,_
%mtV
arC9CB?
,*((
lY[4
l~vY
F?9Ox
Shvn
sS4\
GPbbdtww
;>xU
cTFl
wBIkv0
3nno
)B9I
OB7U
X#+Z'
xK]Gs8
6m:e9
>]di
G;O{
|}.9
aw#9C
<DO
{ ?[
2$S3
j 9P
U1!.
:h&ngP
^t_^a
2008 - 2018. All rights reserved.
Bs@M
/j1_
ugPD
awC"s
Y-s\/
fEqD<B
B6+5
B,CL0
*"nl
BS*(
@c**n5;
0Z<?
Hqz =
vnLNM
W'yr
)Q9|
d -k
0f#3
mb-6m
\c=w
$S|USKy
#&}lH
-fyT
ay$B*C
j&ZP
WEx
Dp9
HRu
?/nT
ob![Q
CS05
9pB*
0Y ,
Z5s~#ow
FGy
add_FormClosed
~x,H
*H>79O
\'wD
z7"D8
&RJL00
* i
cTAa
L;|o
aw =C
G1~]
jwh+g
=wB3c
;[$u
lBK0
wwB3O
4.K*;
#B=%vG\Iy~Hjwz
(Xqn
Cz#7
a}nAc
DQS=cF
d50y{]
Jqb
ewB(E
F]2
3?57y
a--M
Gtf&
Jqb:
v)zLk
ejgV0
GQbN
YY+v`
{=iNn
vA]I
=5`HQ#
R8%gB
awB:C81
\sNE
P)`z
b3B3C
0~k`
THiS
Urrr
\yf*
0~kp
2 6{
avj`C
XdpD
asL9C
SBU_
@+_c
~wA`C
avO]C:0
NnqD
z;?~
Alq
d=.
k yu
d%+P
qucMn0
v'^=4
AssemblyProductAttribute
awb:C
%:J)F`B[.
/'ea?
XX .
}|z; o
Z%u
Z-0;
<Module>
e=j7a!
+?r2[h
Ro{n.8KZ
D,V>
-:U~
s1<9
SizeF
ewB9C
*aqD
(=Cn
5`Q7M
NU_p
|0@?
_ZXE
NZ4C
;Zh1
avB4C
nxNY
]Ln2gx
JO}>X
ES^<
5riac
_Z9bgR(
!AkI
O=g
osW-
e!NA
j)qB; dx
s'"kW
YaWB
QFD'c
YcG9C
wB3kB0
set_Image
fz U
2RK0G
System.Globalization
4W>&
EventHandler
fQP :
XiwB9C
yb-9C
j$>rCs
A(!'
NK^;|
B$;J7
I_Q+R
{;cUs\
]*/*
Fpg
IWB9I
H.rD
1[Qj
Qbw2
PcwB9C
l 6I
x9lO
%\~j
zD}P
_8Wk<p
c\lw
pdJ(N
98? b
x,ol
j6?s
Y^p;B
H~=xvW
o zGu
?o\w
N?
rcP?
$nB9C
V&g.#\
set_Icon
System.ComponentModel
4]7f
RX15?
U%>QF
j_MBD
S.*W
~Re9
##xn}2|P
aFB:B
XX/e
\@ Z
%Wk/s
mqh\
B4!@
7r v
YB9I
scMB
IO-
0~khP
System.Windows.Forms
NKM7
mOZ=
"wD`
pyU`s
g+5^
e2RR
Y4MN
_Wc0L
uaFBkC
Z.q
Y.{Y_
h| <
Ao V
I Y_
j%6q
n:z>)9
h:wB9Ch0
()M8
8C j
U 76Qx
ZgL"hb
jN,%
6:=M
zpQ9
pB.`"
/~Br
@uXv
h .E
nwB?\
wB3U
wB3R
*\\/
] AN
wB3]
[M|M%{
wB3O
|eT-
wB3I
M#]dk
a1 ^A
wB3f
I.ZS`
JK[Z~S
x1%4;
$?vqT
a}S?c
GD\D
>xR<f
]7^)
;3~v
k}b8>+
wB37
wB30
wB3>
;+ax
wB3,
_[?>
CRTL
get_Controls
2s :
x@ kG
l=o"W
C+YZ
0pW
!yKZ
#p ' R
DXak
EF v%
y^ {Zd
aD\D
=|me
a 3&
O;]G
`hvn
aawBU
}hwB8P
~O~R
P_k%>
CompilerGeneratedAttribute
op_Explicit
s+T!b
P4|zWd
=`Js
_] nK
Mo1[
3p.U
uaMBeC
er !
F?Cy}\
_4U3
0===v
j8(Yl
m5-'
_k92<
Jg1i
Ry;j
p(o o
,)(x
L-L2
a!BjC
Dk|7v
Uvr8.L
kAyk
EW}
5s/S
cu_<K
)>l3h
a'BKC
>d/ g`.l
]7f|
},G
JA+-S
{2 6G
UME;
,B9B
Hl5TA
jY9B
"%O$
h!h
OGIp
# ZC
get_CurrentDomain
aTB9C
rn/8
tuuI
bb:
O im~^
q& V
4 ok
f~)dt
j=+[
cDBvj
6Knz
c .n8
gwxs
8*rV
MWh#
vaTB8C
,`J'
)?#]
z_CvA
lzVW
ToByte
Ag@f]<sr
isU(C
AWO7|
F5Iq
y.0p
tjQC
#Blob
\ vP
1II)
-awH/
}=1F
awS;7
awS;0
PZ}T
E-9C
3,;7O
W8&5I
l]sE
B9I[b
\8,E
)F"#-
n;*P
tA(:
K Gxdd
awS;k
6$[O
r .L#
>&u{
JVv*
`S4&
zFRi?c5Y
B-9C
$tB9C
&y?i
.SRu
yP P
x ~r
7X/
DwB?=
]rsj5
'yA*Blw
o*>v
XYhA65
i~E>@
MMb!
@Y0A
$xB9C
0F1
}/C?C
X)+s#=
0~T;
xnXWU-
MX0`?
m"^g
TEwB?C
%.p$
AvC*C
Bk|v
k 5P
zt{]
1^Zt
]P+t
XI %
uS9\
MC,>-
t==p
w1+&
zf<@
0yro
g=+#
#`h_
0H|
[!"[=
6I[[[
OaUk[
lCP1
{t_|
{t_}
{t_~
5,!xw
{t_{
:=P*
}?x9
?XC`
{t_\
{t_]
{t_^
<vXs
{t_[
It$CX
=lIs
. oy
a}N0c
D-9C
$ mh
0qBk
Dy$d
VM!~
9(~Ix[
MuT
?2T9C
. oyH
q?f_
+$iJ|yw
_LuZ;d
=;YUo
)K-ee
%+ou
z[-K
kh9Gg
a'nN
m# ^
jwR.
?CRx;
\v=A3M
N oo
2K#O4
-i5Z
a}j C
CKM;
Yicn
tT[7]
=-z>
k&BF
s:(6
-5{!l(|B
fIkkk
(om9
e+du
^5OJ G
!$6a
t:=q
t:=p
C]p}
l3Is
*a'_R
7u!
K[;mO1
yt_^a
}%|\s
~c5O
IZLP
4nm
W~P.
pvRn
7"Ey
XjB9
b0AP
P7 ~
'0dl
^V3jq
W_8O[n
u@W;t,
DBwB9Cx(
auC2B
gwB9C
Xq4F
9)(ZR
PrEd
WrapNonExceptionThrows
j#]']
\CA"x
@$``
[N_J
_&4~z
>5|G
Vh: _
XhR'
I0B9I
agB"C
8hQW
[\ >Z
0cV C
F^thuA
6u[l
yIv"@
B:((
_teqS
Y*d
la]
mTc<M
ms+hB
T=iUl
(W=\P
0 q
@ M@
bw=
Kb{pj
!}:R
doJ0F
[~`8
szq/C
^aXJ
`|BGH
(@<q
;a;Y$P
aBB=C
-G^FY|
b Y
[[m{
a:D:#ylD
`]Osbp
CE5G
HtBIkv0
akC9C%0
98}%
zQ u
9$.C
=1W*y
VirtualProtect
wMfs]
OH-h
fQA IH
)wuV@N
lr1w}
~P;_
#[L
System.Diagnostics
1P`vT
. +(
oB9G
Cb
nw;
17W
jP> `Nm f
moZ7
rw5\
/CIv
k.K
-]nE
^)/=w
Kyshiqylyly.Resources.resources
'EuMc
ZokY
F(Px
4 YW
w W*
OGl m
OGl a
*O4
set_Location
auB<C
v+8W
Nfjf
iHq1w{M]#
6`N> ?
V jIg%
XokD
"eb0iw
a}n1c
!X$^
|/l[
s,.5]
wpN9
mLw>
Y1fEk
=ogu
k t>
8cw f
m,v2
i_MLQ
l6d]z
I8B9I
irb9Q|i
K]`A
U7m
oBS<
ucbQ
stm%
S~*[
$' c
/Rj
`EwB:Cf
xafB
XG<J
#8l\
-pu
Z0oj
+9!J
iu!=
{1w|
UYOoi
I1\@H@D|n
-)iX
/v-g
xt!c
(M,d
AQY4
awB)C
wB?X
c3|Q
*_Z,U
4PaB
t;=q
y_*9C
wB?@
N2ad
wB?D
bMfn
:\(]
%yJtir
wB?k
'{vBt
BqC$0
gWB8C
-*oci
P9mnc
:M?A
ihoM7
awB1C
2|By
p%,P
_\r8uMg
k`:V
bYB"C"3
N8!3
GuidAttribute
o*J
DOz:Q
awA]C
xr^M
'.,`8-
wg8(?
eGo+}
^wnm4
, |N
c(=2
Zdo9
"]:?
Pi^&
s( P
0:o]
qS>U
RqH=
VG 1
b0Gp
[4sl
UInt32
Ac&w
O8.~
=x=S|l
] f
]{Cv6
d,3R
loZv
(R>,
a1tfO
r7)fC
-Pm/
^{d1^
Pj {
3,s>
d{ /
n0Lj
.<Ty;p#
eRp^
zocz
9A }
Q;Zd
h Cm
98,W
(_d
TOJc
ifGK
k=@_
HjPr&
\sP2-b
AssemblyTitleAttribute
M3O g
\@v2[
hy~n
'm&
oCMW
`i:U
;\r(
add_Load
zL?L
'];J
><.8
T^;H
,1'q
{x\0
^%+
Q [T
7@# h !
sB8J
i.{~
( 2*1
7j<d
hQ t
!bl_
d**I
&i*:M
ya5
,7?_@
~xjcC
d_(9C
4z0F?
a'+A&
{{R
,+Q]\
QwB=
$O>
[FO
4]R)
o|28
L'G J
< q?
$eBa1F
<'jM
+O Gp
vCuE
#kq(
zNYxl7
N-/e
W&
R}^z$@
w_>9C
m7 ~
I B9I
c sP
qnb
3|qj
gX}R
~NY
~-.~=
B0Hr
11LV6
g Pt
"p6H
;o%/
L$T
Wxcp}
'ZN*
t;=p
SoNM
1K-K\
DA<b
get_Chars
ax,O
\l1^z
Cp]!
`M/?\
JSD-k
3.PU
-b2G
reM6L
o7iK
O:ASvE*
. j~!
b_H{c_
_YHSl~
3KMM
Zhh9 5
yuK!M
>H?x
ufG-,/0
kWEa@
U#Y}
<^@Z
k{b(DR
=v5Z
>HBx
@p_l
asKBT
a8BKC
"Alp%
k[se
i{a0
xm(.
X*#h
6Kd?
b`|e
8m <
ii X
q[ >=
N$rM
G>>
R_Y$
o0:1
vy3B
Assembly
q<s
;RtN$QnE#
y]8'
GraphicsUnit
:Mjp
@wy9C
6BI=
Kvg!
\EF>i
[Wrl5
SuspendLayout
5^qq
nwB9C
's8O
j(ly
yadC9Cjw
M@?$
'w%/
taWBaC
set_AutoScaleMode
5=:E
aj/C
wB9C
awS-
awD1k
wB9F
PNq &
^_-S'^
wB9R
0'W&
=2[O
+= T
WH`Mw
0\28
z7S
XFLE-
j/nZVF
s1'@TZc
te.d
d4cfe8a2-76b5-2c.Resources.resources
gaDf
"|'j
J;P`
u*1P
c8VF
C^bjv
a0wA
2^l.&
`tJ<c
.RFS
&?VL
b4`9
g/t
^t^Z
^t^[
^t^\
^t^]
^t^^
^t^_
z{(,
m!%3
cD^|
2o 3
AHAZf
<B9C
8^w>Vom
s]9gs
c=^&Z
lWwr}>
gspvX
p_Z![
[?_.w^w=
^FL7
@e=x
[F7`"
g{ w
a%B8Z
c'Lg7
^QlpJ7^
O$'M7
=F!sI
Hn=|
*S#l,
r#'G
cjA;^
AssemblyCopyrightAttribute
0q!:
VloQ
[})B
!~VB
-0@)P
H6"3
x 2M
%&_)
?Cjy
LVm&[
awB9CsV]
~ <'
LlB#
RAe;Y
WDNW
9\HI
^me{
K}*~
eMRt]
;/xKF
x1y[
/5qB
.hbrn
<L/D
v// s
ox,.
ayB0C
P-LB-A
}qke
5g\5
+PTx7
W>>s
0K TS
OwV.
C!&8
Gy>D
k S!c;
'7 3
@ywS&$
9[G)
zzd
d7OP
~},~
We:_
X :
9cX+
W;PQ4\
L&|X
0kw)A
06q4
45.
| MQ
_!2W
`f+1B
YOI[-:
vXn O
W+lD
.cctor
,MWG
kgE
?< @
wdN(D
-3dTl/C
4-W5
aUB9C
<%Zm
fmH(
cwB9C
>kO@_Y
8wB3X
K#ODQz
T 'X(
u0wD
A"VK
igE<Q
cwB9k
cwB9h
sSj\E
^"$B6
H9C
Z>=#:
'Wx
DxnKPl
System.Reflection
*/_k
`2'E
VjE@
XQ=S
ehKg
nIQ:
W{o)|m
EakBQC
]D,-i
A}x(P
y\8%u
0o8,
89G->
b=2D
0o8%
?vW4-{
=QAX0
`3j3r
gdN([
`t&`Yj
wruN
I+ }y
%n<f
awz1K
~u0(6
o]_~h
.$%p
@c49C
{txVSTT
anV6
@$X[4
_7~,
VS_=_
asC!^
oF|*
!AT,
B*g*M
kYN:
0a2,
n_eDv0
oW><
0~)A
tjLuI
}@ fu
W/og
ZRr+<K\
av_<M
B^~d0~
Rr^C(C
>e2D|
8*cy"
mgC8]
`b4?
]oJP
qP*[
jqfZ
N=,Q{
T+y-
o/|o-
${m3
0x*"
JY?&
z.3>
^c:[
O >W
zOX
0x_0
g8 N
oJXe
\ g4
OVcU`
adb9C
xisiw
{?deHr
qgB8C
ynER@
G-xq%
awt8C
n(i.+
4MwB9Ch0
BPv{2g
m@[ qu
)`3BzE/1m
22LK/
QWzbe"F
P%7
H~;T<
j)qB
0Q1
{#bP
Mly7d&
QuWt[
e>&K
nxS:
(l:+
TK u
G]0v
Yt_^a
q!:P
auN9C
I=y0
x\?s
w W7
w W5
PM\/'
dI'7
RZ;
Yh|C
O;>
^;pC
olm/
i*YJYO
H6O;^
>&5o
>0N~
LawB9C
bPHxTu
Me1BxC
!nL
a4m[
79nE
( ~3
C,!le
KK&j^
VyR-
B<CCM
Z-fuX
::OJ
E:bp
@- ~
r 5pq
awBey
4> p
<| &
aV>Ae
] Zy
.KOq
/,^K)
#wIh/
e=YS
f-w4<
m;#(
<Gmt
NM70
19/
QvB2C
,M}K
D!`8
6a.b
p 4s(c
m9mY
+ll0
qwB9C
PA}Il
ccvX
{5pZb
?u6~
ZYZGy
ISupportInitialize
n^j n?~xz
W*..+
V`wB-C
YWO9|%8
_inW
Ri1
Xt_]
W8YW
Xt_^
Xt_[
Xt_Z
jqVsO~}S}U
5925p
CvE1`
-'bG@cH
p;J M
Xt_}
cwBVf
Xt_~
Xt_{
# N\8
iW#u
M#p|@8
+iJl,
v7%n(
I@:T
)< E
#]x(&
iQf$
`jL$@
Wr 6
9gHk?
kXv
Vm<x8
WwT=
Odxd
J=[9C
zuw1C
FK3lX
p c@
u!5~
nKH47
gbP4A
atC7M
cE?4
-V<l
xD\D
/jAc4
,~lT
)=1t
@*('
HE6EL
VB9I
(I+>
wB3kX0
awBFC
Vbu#%
fej@
tT`z
8Wv2
L{)>
Fy"j
F,[H6
n9?m#
g#6P
0p/&
u..P
0o:#
f8l .
ZTC]
`3B3C
y~cwh
?x87
awV9C
4}2-
) #}
(KMW
)gsD
/pw,6
d(a9
2$QQ
xLbl
JnU@
O;#)
OCd2I.^w
x0\-
bT(;Z
System.Resources
hrb8B
(CwB;C
awU4Cy0
Vg C
E% z
3yK1
EhyoU-
Bn<1
{VB-'
aw"V
pR_ pn
T49h
[f_;
KdY g
_5lwF(
hJLT
"Ro2
PO1Q
B&-W
@b#2
Icon
W*_4
;n+<7][
aw^9C
w I
awBE
qiW@2o
SO m`.
Pa_x
Font
L<dE
"a8
.~z}
VAzO
m<[i
f5#r
hnF}C
OS}a8
AY46
W#@,^
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
>;b*g
rKVo87Df
(9 b
]e~r
Pe{[
l>fJ
$:Iw_
^O#
tSl#
bj/C
$<|q
yQ
Mv +'
[v_F
pFy
C to
)Weq
7SfN
^rAkG
-aqB
ia5(
7Rw>Za
z5Y2
fIr1
x A0
Y;J
46~G
WtN){
XYkI
]59T
%o!Fe
U9WT
!$C$
g @\
`Da ~
H0kA
liJb
DYWj
B_]I"
F|2'
w_39C
k}T2c
9r0a
O|N}N
bP9C
M5 ^
hhXf
N<"
.]*?
G%V
u`q(
mv/'.
'n Y
TB~ <
B\f
EYUEa
rv>CuCJ
"y4xd
$%yS
`~"5Q.
b2
Q;P_
okJ1J
AI46
1dB0X
xawDV
T1Z%
q,u<
x,+P
5p>;
{b,/D7
JI+!
CHh7
QrB%B
~u}
s)[b1By
a&a
~KHP
_rce
71WZ@
~<8^
+ a
\s2p
H^&!k6
[ I9C
~]rd
=V G
Y5 )
Ri?c
ewwi;
Gk@,
9f E
EditorBrowsableState
xt_}
xt_|
xt_{
UKU~
/$g{k
CultureInfo
w%\7
HcdS
Z$g%
i %(
*WwR
iOBS*
e?ybf(
XnC9C
xt_\
J. o
xt_^
Iq9>9
xt_[
xt_Z
RQ?Z
9v+
a}H;0
)&Tv
avB8C
wm-w
i_{x
O##$
-].[
7'0e
L-ez
#W;
Awy8
5zHd
f 7P
q"*3
DmH%
|,7K
N9ffYI
B`:GW
7b:P
$ 4S5H
M$)E
3/7%Hw
f_ T
mcIoo
.D4
=ZmYB
<HRc
bIo[
uv&Xa
R=o{z
O_j*P
(W/;
'UtXv`
4N>
0 AF
V%NPAU^o
cD 3ou
yDYRK
PictureBox
ITB9I
\s5y%:
R-;uoU-
,cTO
ohj"
!e@@
C 0m
sn_%^
ACKni
y]ik
H'u}
EawB
QJ41
ClMtSat9
Bi B8
8} -Fu
ao]w^
aqd1c4
{bBV
%tmk
-0R~o
T8zC
;Hs&
Dxwv
j?&k
}UO~
E l+
6fHmw
''bk
awB!C
Aw@=c
"nY!
r!(K
@(q1
,C93
*X"
Bz,v
%g\3
H7uS
$+C&
o{{K
|O,q2
w~l4
[ak{
\&]j
j&h4
DTl1
c"]?
;W &<
qKCD
M=vJ
hJJ9
LA`D
b(^p
W% t
v2.0.50727
oYrU
fUk"
C}CR50
CC q
CV+m
Qgs1
F DRl
>n@*
?bgt
IwB9Cm0}
= <K
:,,Gr9<
"^ei
WzF:
~1Y<
c3t8
hU@F
B9IrW
p[F;C
B9Irb
PUzH
set_Size
B9Irs
uu\_
kuZV
o7}5hf
{ !`)h
uZaY
o;'P
&BscvR%
F6 kus
|TEk>q
0xS
66M1
NawB<C
y}i-
0ML<
|pzL
_R95
J_1c
`Q[u{
AU;/
dqB8Q
a}Q=R
Mx'\T
ZA\^
dK*" RU
qnwmdw
+:;U
#o`v
QuB C
qO[-l
Pa0B5C!0
w4X4
a}Q=c
18I+
PKOD
qwB;C
jyX
2 JP:
-IZ'e?4
#Yymn&0
t/L-
sm,{
k6 n
PYw Y^
KiFWq[)
awB9=
fAfk,
IrB9E
0hkw
st,H
cy^;M
awBYJ
awBYC
7Z5(
`:yf
CB-b
q7B?I
t8@n_
qQ['
2&fUfr
X~ ;
set_Font
GetHINSTANCE
EtK 8
"V=
qgw2
O?-[
cu`>JQ
rP J_L
G$w
t<=p
<0 n
U<|OX
R)h=M
D4p!*F
-RZ*?
{t_^a8 S&
0h0q
fY<{
^1 K
0g#6
y$2s
s]@
|5QP,*
}V^y
8JiK=;Hh
&_g!
v6zdI;TiT
8 [&
QvB>C
;zSD
>9x0
$O`w
kS o
J=HK
Bitmap
N2xSM
5giMk
awB:C
%A,w
&j$27[hO
J^=|
N%R,
<_vN
h#{&
{\ #r
c0K?GC0
fGy
~;'
@o%~
R3)3C
`oo
~q6
{B9G
?_.
/|&G
)X J
EndInit
'V!
awH0,
bqPm@
;.h-
>=\(
Ruk7
+qIO
`wB9C
6@fA
h#bq 0FZ 1
7WE.
:N%R
g%b(
o7a6
aFI9C
bwB7@
k 6P
8wprv
XMp
dB p
' W5
oQN3
U:wB8P
H.xw+
Y$1x
;-X4
$u6-
awHMM
5~wB;C+/
V\9J
KO8:
N&$#
pzXy>6
F-qy|
}}22
q-wrjC
TgQTF
=;1:
SG4m
Kwgo
r5Tv
e,Z4i
vsCbLs`
{=*W#
*rZc
|0{[
:f ,
dPn2
xdO
~} wp
R7O4
~7^
e=^E!n
TS=c7
cDCe
Yt^\
Yt^_
Yt^^
3>
*s;f
Yt^Z
k;_~y
9K#2 `
>h$y
kD){F
H=6 _
k,Ml|
!aNB5CQ0
adN9C
&rv= 4
hfl
aSr\&
4~#!
6C?C
AssemblyFileVersionAttribute
Zr;T
0Jb>
wc"P
a~B8C
B\*?
`(o !
MCG`|:
Q_hzIk
3uj{
`{29C
_w#j
:BN;
^g7W
}}uyL
NlNs
[ccCt
GfW0{
p. P
XejP
W,Kn
b6oDu
X/8c
;^C+
@Yo.
fm.J
OMeo(
lp(
o}M4:
0V05
avC+
w;3R
7y.X
a+`9C
bWB3E
XC*.
a}Q?R
%8w{ jF
I{Fvq
0Cp@
Hf5
zTST
$0e*
'#lw
aqB#C
> Wo
%si +
A4#9a%
0n,
p\@?
"]q'
/{{w
c?n{
Svu
3X!aX
9Xl=pM
XBg$
vn;W
KwpAO@
alm
po;,
IA ]
"z 1
! g!Aq6
xb $.X
lTlR~
3awH.
@{- d
RuntimeFieldHandle
+JB 6}
opOb
RS v
dwC7^
AwB.D
iYIj
mscorlib
%OB\n.
X_01
O-aI
'Z='
^t?lz/
Tb13
kx&)
0C(<
vphg}
r?e?
rp]+
dU^|
a5B0CL0
B'+^
/^..o
qHP||
N=Q6
a0'M
S{"Vq
AkQc
~E]{
JH6)2f
Sqsn
r6 qG
G-9C
HIk~f
3 LV
Q>r<ymYG
R-_yt
rX2]7
^1
#I?C
iwF;M
Po>H
|Q%A
Y.] H
];-
P9p}
EEAb
awB8C
awB8B
#ja8
awB8S
S{i^
%%No
o\4XC
u==q
u==p
a#\kB
Z0~v
w&X7
=K^{
S-Xm
O \4JE
H2^{
.jl[
xF@>
qoW-l
] Vj
a+ _
V@P1
0i3Lq
Ogy~.
{sZ/9
*8vx
WhVG
.>(77
Z.qM
:Qx{^v !
xawD
atC9C
%LA4
7 7/5
a@i6)
OGsu
1Ye%n
K{nql
=^ I
a^B,C
Q(n<'
uO \
Zl? *
^6_=4
$>Fh
kw-,
NF},
0r'@
=Z's
^y%\#
>So-3DS
tB=j
>K7r~
:3z*
bD@1|
1&zr!
ob k
STa
.wB3,a0
AEtK
zjV5
rGj`r[
Ce$;Q
y!J?
_MyT
x;?Z
[t_^a
`sHG
-*mc
2:$<ij
B(Td
['`c
CB _6
0l;C
- i#Z
u-m^{
?Eu%
' I`
awr9C
7,jX
k#WP
/$HP
Uuin
`g1x
`XER
;C7=I
<( _5
d>Bo
L#K$
Convert
CtoJ
JbTu
--DhC
mIy(
emUNy
r[n+/]|
J 87
2N 5?Y
0f1N
t pO!
sH8Q
orS P
'9&f/
j~~ *
XG_E
*):Ah
{5 6
awA:C
xjclh
kv#$
\" 1
[i" vCs
QrO,
R+p k
as0bB
JuUT
&*?EAU
"edEr
d>`
&ww[
x*"P
^a4J
>~<S
TnHZo
`xu $
kernel32.dll
-aqB* #0
m 7]
o6B|
%v=WF
;m6q< J
bTb)
@ ?g
efG(J
I{ W
efo
{4o>
2X%w
I brj
W~CQt
j*(_
G|r"
twW6
O* c
d4pP
C9Ct1
DaS=
?ouyu/
nnA
JMD:0
4 -Mc%
y|z_x
I_j4
:]=w
97}M
$ LIy
fv#8
}%</
0t&&
Jsj6#(
nVVE
?OkGm
-FV(
JK >V
4{@1O(
tkN'
}q gV
G>;sd
hUo<
;N/q
:r/Y7&
pAy
w0#
'RX=>S
_>+n
mN@x
*B^*
pv\5
0lcyN
C C
65U;
i,r;N
)n-n
aTt(
cwB.
Us$*
0`$7
:>&4
v/oo?~
0~B\0
H .)
aw!8C
<gd^
7Cj[
8*)j
AW~X0
8h_,
e_99C
STAThreadAttribute
7jeV
xt_^a47U7
tp^Y
e~9/C
!WGL
c4m
A1u
7O?"(
kN1&
4-]&
awB>B
OE[}
~}lty2
i
M!k
`,sk
hv F
7Sc[xg
+{dh
mXn]?B9C
pewB9C
j.w
`M:U&
\> g
Iii _!
i L
lywU
\OQQ
gds
awSK0
~ qV
[Z';
zc&v
&n5uD
uLkCQ
0T`
~NM+
B1-8
9c3B3C
fBy
%7_]7
get_EntryPoint
v. L
V6m\o
0e$<
L (mJ
"EN!
uoV-{}
HNeC
]OlD WN?
pz])
p J5zs
^1(e
NipJV
Sj|.
OqC9C
-y@]
ug$]
4G/r
aJBH?R
TIo0
K2m'n
rc~G
axXv
p-;P
WDwj
,V.y
ComponentResourceManager
p`Yh
?*;#6
.a]B8S
6G%Z
<Sor0
z (Y
q5]
/R"1r
hEEG
n^h[
RrpS0c
^|)>
An5?
[ h@
Nnxk
tMO'Jj
rC}Y
_1ry
7lr^
6rY7F
aPG7
%;x9b
C5c:
(Vax
V`wB8C
/ Aw
z|9 <
![f\)=
tLAh*
sB9c}
X9s S
asjmC
J^^(
WwB=A
0T6!
g;<-sd
]=]=
|@wb
B2CB0
#)+Vt
[Kx^
58'
aw&?C
aNB#C
@kF9B
dk9
>Roy;
[ _x
`@W8
bi5
C1o9
atB1C
mvm d
<ee<
`\(,
s$5QC
u<=p
u<=q
eKijx
get_Length
YGkC
VF i*p
=B9I
tZsZ{#t
0rS
OR>_
c]NPg
avB1CV>
,B_X=0Wu
s'tA
hwB8
FfC/g
fck;
e{A&05
i,3[
b_ g
j0jLv$!
_t_{
_t_}
_t_~
lk wOq
NuTqb
xm^t,xc
Xt^_
K>J
IuB9E
p?Mx{[
5`6@
a"B9C
j5f;
_t_Z
_t_[
_t_]
_t_^
sjZ1S
On]{
l ?`
0j$S
zO:0
su26H
fF|R
5#J&
oJaC
E]}z
k Ob
bV7\
voZG
u6I*K
8wB3kg0
:avqm]
*\ry
1eBg
?mYQ?
awH1c<q
|w%F{ {.Y'G
W! {
kzS=c
ty%C?C
l06
P"jQ
INp._
MWSkA
o9$9U
I B9E
j}sU
8XM17
.K8]G
\/?G
kmhfs
}3q`
f0wO
(U;N0x
lL]p
h@k
P^[wg0z
awB9CsZa
hJQQ
\%\o
C@?|&
awB<C
"O^}
:Xk).v
d);y
Vd#T
T^
awH.k
, MC
Data
S-S;g
'>9p.
%Eqm
r^26
9{wc(
20`f
iwC+
PC r
?&E[
?~H"
pHYs
^|2w
SY!6
.H]m
'zj{5
Gnh2
tFp?
h6o`
HrXb
O--\
ee_!K
s Z2L
PxO_g
3>A6
bwB9C
awS;k 0
[o}>
q+?J
\5w@5
_?weJ
$/?s
`/ eD
awG9C
( Ro
T%F
^mL
qZ o
uo{{0%
kMo {
'@{Tl
Ou
yt^]
yt^\
yt^_
yt^[
yt^Z
YgYFh
zhB~
f i
zpO
].7g
Byte
_6r_
r-K.
k 8P
AJ&4
{f_A?
`t,x}
0a rW
0l'T
[?T4
b:E86
sWi=
=H *
~hp?
_O_-~
C["&q
^wB30
wb]Y
hHh
aw{9C
s bj
SHQe
0~ko
%/Hh
de s9
a}S'kM0
d!rx&R
UQ$_.
oqj?="?i
TGu t
BlC 0
'd@s
8St|
qZ0SH
.8~>
ave;C~0
0wB3P
1 2=
C 0
x/rQ
ewB>C
g^L9C
zy["
awB9=y0
X\7z
IKK {
6-HO
rn6j|
8.i^
"7ft\
RV!}
o]Z#S
XSg!
Zt_^
Zt_]
Zt_[
Zt_Z
fF E
y^Y
aG-pkf4
u =
f}L7Q
Zt_}
Zt_|
Zt_{
k{S>cR
U=T>
q "h
'rr%
D`Wh
E&}#q
eyX:
|R $m
e Jf
[wB?C
5"Pc
FontStyle
U:2&
^m_3
=wB9c
'oQQ
uz\s
.'vg
d+7`a
$Pg4
KtNL71S
agB.C
;tnf
eF_
nt,x}
\ipI
R?0%a|
@b.Ao
_a^B9C
Dom+
AQq?
d^1
Pwye<)
_P}
m,%P
z'Mz
z=FG
{rj
1FspOR
y ,K
,}eSs
arA2
A<YI
[<mPj
t7*o?r
G K5p
]\Q
J)qB6 Dx
z "\H
K2N)
0I#u
8B(
Tgsy
LnW
~}\&
X"^9
2Yo)
Gj+(
qXl+P
H!Zd
~^2HY
xc`>
PAwB
=omO`7o[
,' {
BTzV2u
+M 3C
CamB8Z
`#h"s
a80P
d>knT
k #P
Jn$F
pBIkv0
P6 o
.`G\
BZ'i
Q\k*%h
9_1;
10ol
0A%)x
:$R_
POFu
z*{\O
5{!QC
"k?#
awSGk
[HS5
!WcWE7
}ZVt
W$OIn
+Xat
<tTVo
YHB
bk+E
AB9G
1/#1
D}^g
_>g+
AutoScaleMode
<0Dh
uzS
lgI:
fZ/kg
@B9I
IaB9E
IaB9I
`i C_
?Gk6$
DU5\
bj^e
r(jd
awG;C
G`MI
uRCW=H
ktPpV^}
#G1G
$VPu
a61@-
7,p&
pcwB9C
9Ayykh]
{Z~y
k >P
c80
mvR$L (
|ULX
31\7|H ;
7^yF
r+$
BABt
o,[h
j i
|a2)
jHB9C
U(J`1
=o !
W2cq
|rJ1A
|a\F:
Lzcnjk
b2_$
aWb9C
Ht:o
0GIr
TJspDt
vL?+9
|I:MZ
luL%K
,g]Bx
#WIFv
uh26-
ed8:
{aLBvC
0PHo_
s1Gg
7nx-
BIqs
oJB9B
'mBonw;
y/R#
O}=k
wN@N
5YSM
yx[1
io(lwl?#
k.>E
7fx
zs$mF
&3ViEw
nOBltqJ
.3;?f1 U
awCV
A+vRg
zt_|
zt_{
tgZ*
3[sb!
=~m>
:-$!
zt_^
zt_\
zt_Z
y4[b
+C9C
M`pP
r`H
:<3>)a
]q ?
l {u
vErJ
i Cm
pT:P
5C+@
569<
%k,05
`Zm=`a:
S]Vg
~q%P
qF`@
3v1j
c ;K
A'7[/
ETOe
rt9g
co[V
<t#&
uQOe
G t[
5AAZ
6rDaS
N/;N~^6
KwB9A
rs].
66]\94
Xu+ &
+Y56
L c$
I>3^
(]G/0H
oCS|
?`w2
%%sVo4x
$6#{
PeRx
:5}}
EXG;7
,Z^%
.G07E+f
jz?`9
br t
5bAqw
a-B7C
smFE"`
Ei,4
k `gm
C<qP
q)*pwvq
@?U~Y
"T5"
oB9G~;
cpB
CI6O;>L
[:O=[
7M+^m
}pee
hJ>&m%s
hQO#
f=V[F
0~k`_S
3@y[]
nI`w
bLz @
.xm85-pW
$\*}
g=O]
KpkDG
p\^se;
'?`#"
B5],K
pS]E
X-bQ
arB9C
^4 ;G
+9(D
~t^Z
~t^[
~t^]
~t^_
!: =@
z]sk
awB0C
a BgG
awH*G
awH*F
)'DD
awH*J
)nV%i
b]>B{
XEC9C
)]K?S1
^0 ,
!"fye
XR =
o057
>gmV
p4:F
-ezU
]?:{8
"FeG
V [y
:T$,K
djG$F
.G~zE
HNoX
CT.
rz~Y
v"-/
IEND
ywB9
!P`o
!Fy
{3 6g
C9CO0
e{{C[
4D{@
f2QP
rY)$
tQ<&
DrQD}
[:pj
Ri?c5
uB9c:
XCf_y:
S6s
mFB)
*R7l
M\uW&
K`G]er
7<",R8
6mJN
p-%u
v ZlH
_ LP
0V*/q
o.:(G9
rMEu:
R )t
AM|7
tksF
dwB9C
s}Ph
4c&;
f|T
,j'4
1OrO
}n5MWP
{Gx
uX\[
=`8 .V
`tBn
WYv4
n> ^
N.M)
t==q
5j?U
)t4:$
9|E?
k!-]
J(*^
[~-"
C[0G
$B9I
j#<P
JYp=
alj`C
q$tj
!}hL
ewB:C
y!u
0\ t
(/,Y.
m@OW
$pL)
z&3d
}ZNAilw
pawH*W
mS.ZWY.
CMAi
'9$
'Oei
!7{tPJ
pawH*J
j" P
String
xU$sos
:D>,
\nx[%
<j3X."
08QV'Y
)qBc [4
u4CQ
InitializeArray
|gE:K
h\h
jJ0)
Z@k6
#B]b
VwEr
9kv2
;,<FwB<n
EditorBrowsableAttribute
%Pkl0`"
P/DyA
kwB=A
!rE|K
m:Ag3%
;'u?
{U T
ewB9
Jqbl
^2.2[
|yz
x I3-
eS5x
VMz/+8
WQ_ <
S_E
7tGM
)A`y
R<~;
Load
]ylT
mB9E
--eb;
Sm`>)n
kwB==
aqj3C
{-lX
Z(o !
c*7<
l_+t
(*n5;
pBym
`n5y
IJa]
j<:~k
#OHX
.0<.x
! Q3q
\yU,
*hlX}(
k}tQ
w f9C
[e;o
b]Y\
RuntimeHelpers
JAdK
pob].
-HR!}
y/qB
~K-
% ArQ}D}
M+5__/
xa54
,h"7
Ur@,D
u45I
:e[q
K@ =T
My%f
^o=E[u
Object
wB}]&
XqwB9C
4Yz'
3System.Resources.Tools.StronglyTypedResourceBuilder
y/ka#,
wS,#
? C6K
28~{h
~Z^Xz
_-l 9t*U
z K.1#
L'?oK
A";+
$AIr~
vaQ7O
.YT~
o>)P
IXgK
Ej~f
/kCB
Xt_\
awB6B
[)X1
ZGR.
+j>y
[BOu
0Z?0
iesb
@C %
jFdB
j+=S+Q&
VHZi
lv Vp
J>d6
/,[*
E,Z
7H'8
M/pxa
1Ll@
f5<M
zz|w
v3Sv=A
>u]&Y
aqS?c<
u;=q
u;=p
[t^_
[t^^
[t^]
[t^\
[t^[
[t^Z
Xt_|
Iqc?b
%pjq
W7H*6
TmVO
aqh*s
+5 Mo
p1f<
0 Z;R8:M
1p]iX
-WR,
G3 g
vwB3P
TF^w
U$M4
+ a_
KGs+
h8V7
+.Pa
j i
h h
R~%0
aTBtC
z;-}}Y
j- P
(p/
,Hk1
nx,H
Ykc
w1k'=?
x9c
4@Y^
!dGCy
4nJP
:}rl%
ss^:cI
B<#J
0~jo
ffDVr
set_TabStop
h[k
o Xx
P)aN
k1Y]
B?CAe
V%9+vD
(7/W
3p 9I
@eGf
GnM,
O(o !
r,jo
a}8([
wy i
U+o5Z
@Xd~
BX|V
3$=KC8
tb9B
"$j.o
kn%_
{9lK-
#To5z*.a
ewB8C
Y"p-T
VKQ-!
{P7Uu
=!' :
6Ny<
c V
+C#5b44PV
'~\]
-Q9Z
3 `~
o8&P
`<@2
l ea
HY>$
*?":
-`adY.
v]B"s
psj@C
C")
N kff
TEzH
4)QjHyQR
SY0XT!%
t0g}
0<_A5
1Lr
d"3j
&QQ[M
v(\l(.
a8BwC
|FO5Vs
Ddb&O
?V /
GetTypeFromHandle
@B \
-{jc
5Z<b
fbIa
rrS?c
@(Ly
e&$[
ca!H
,7}w?
4`kk
ava2Cg0
'6KC
atB9C
(of
lDyg
P~Zlz
tyF9
a#7q!
FN6~
Wt65
l~!L
e+o/u
O3\`#
42 %)P;
E~~~
a[FpCU0]
System.Runtime.InteropServices
TgKXU1O
G2<J
4Qx@
1B9E
SZ>{
System.Runtime.CompilerServices
xW^y
N,^u
GoO
P=eXJ$
+LV$
i7Jp
}}z'G(J
Awy9C
H+b0
b3B3C
ajC9Cy
ug"uN+@
hlh
}_;o
`f+
5?(4'
AiBw
"STdc
"sK
#VEC
awY=C
O;Cz
a}h*s
a'0V
atFxC
v SY
}Q^!
mwB C
n;#7=l
>I1<1
y|4]k
w$^
Q*gH
P3r<
~t_\
m>m!g(
[mXh w
][^w
LNi"
W&GL
w\y
[ v
YQn
s~ |N
G .f
d1IP
utkY
C$6L
oYk
U]{1
0Ww%"
ps^ak}0
|Ht0
TlRW
46T
}>yk
D9ak
.Mb;
/ncA
k%F
YLhm
uB9c
xH(n
zbjU
i[!S?
awO1C
CwB=C
_KT
xW=
wYwPG
< o[
)CNT
_etF
84hc
E_EZ'
r{S!c
!gk0<
GM
B(IG
eh{u3
7.)
aRB9C
&X}?y
kVnZ
:\Z#
a1+U&
g}D6
h&$P
#tOO-A
N?,DH
vbPI
i b-@( |
& ybC
l$$P
H6Mv[8
wzUq
^-m7M<@
=;jR
q!5P
gF8yK
WjoM~C6
G9Cw3
get_Module
S.N1
vy3B3C
TwB3R
x Nhr
'RzO
0;rz
msn c
avBAC20k
nmt,
irb;B
U0Q
}q8x
8<Hbs
KwB"s
K~}?
0i6q
awD(c
Um]+
[IB9C
yt_|
:ls-
&>njM
:B9I
Q^0x
7e?~R
#Qu3
xLcfE
mNQr
Gfk t
(DBP
7GI~
4g]WC
RhLYT
b/BM
5|]L}
U/|
Tn]Q
=sBLy
Ls# 2
\h- {
awB5C
t0a$
:[zzn
/wL!H
aw$<C
System.Drawing.Bitmap
z07^
2QqTM
<9-x
848c
i`i:U
aOU8C
U9Eu
@LB
& *[
h)yI
Yt39
-k?/
>Ag]
}!9j
!Bwi
iv6_
Qc&l
s4lg_
4,(Y
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven05b_64 Seven05b_64 VirtualBox 2018-06-11 20:58:57 2018-06-11 21:01:48 171

3 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven05b_64 Seven05b_64 VirtualBox 2018-06-11 20:58:57 2018-06-11 21:01:48 171

6 Summary items with data

Files

C:\Users\Seven01\AppData\Local\Temp
C:\Users
C:\Users\Seven01
C:\Users\Seven01\AppData
C:\Users\Seven01\AppData\Local
C:\Users\Seven01\AppData\Local\Temp\NCAqBGa.exe
C:\Users\Seven01\AppData\Roaming\office.exe

Read Files

C:\Users\Seven01\AppData\Local\Temp\NCAqBGa.exe

Write Files

C:\Users\Seven01\AppData\Roaming\office.exe

Delete Files

Nothing to display

Keys

HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DisableUNCCheck
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\EnableExtensions
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DelayedExpansion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DefaultColor
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\CompletionChar
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\PathCompletionChar
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\AutoRun
HKEY_CURRENT_USER\Software\Microsoft\Command Processor
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DisableUNCCheck
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\EnableExtensions
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DelayedExpansion
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DefaultColor
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\CompletionChar
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\PathCompletionChar
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\AutoRun
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale\Alternate Sorts
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Language Groups
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

Read Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DisableUNCCheck
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\EnableExtensions
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DelayedExpansion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DefaultColor
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\CompletionChar
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\PathCompletionChar
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\AutoRun
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DisableUNCCheck
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\EnableExtensions
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DelayedExpansion
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DefaultColor
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\CompletionChar
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\PathCompletionChar
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\AutoRun
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

Write Keys

Nothing to display

Delete Keys

Nothing to display

Mutexes

Resolved APIs

kernel32.dll.SetThreadUILanguage
kernel32.dll.CopyFileExW
kernel32.dll.IsDebuggerPresent
kernel32.dll.SetConsoleInputExeNameW

Execute Commands

Nothing to display

Started Services

Nothing to display

Created Services

Nothing to display

#infosec #automation

TheSystem Itself @ 2018-06-11 21:03:18

Detected family: #Malicious

TheSystem Itself @ 2018-06-11 21:12:01