MalScore
100/100
MalFamily
Malicious

0vfsn7d

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 25/66 Related 2805
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 427.50 KB (437760 bytes)
Compile time: 2017-09-01 12:57:28
MD5: 4025a88ffbd6378b35f83707cbedfeb3
SHA1: 43840e90b57f8068da0bc15286c5f0af5c3b9d39
SHA256: 6c2af67405c44a5ce9bc1041b2ea555871fabec2d516b7db3d9e82d0b30fe05e
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 5 7TM .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2018-06-15 01:57:03
Last submission: 2018-06-15 01:57:03
Filename detected: - 0vfsn7d (1)
URL file hosting
hXXp://uploadtops.is/1//f/0vfsn7dVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2018-06-12 09:04:09 [25/66] VirusTotal
PE Sections 4 suspicious
Name VAddress VSize Size MD5 SHA1
7TM 0x2000 0xc44 3584 60b59dc61910fedf369a7a50026d7a97 531b11c3f0a4d4c8e7e0135eb2c5da8c291afef9
.text 0x4000 0x68e60 430080 50978b36207dd35abd5ab40aa62ed72a 15962bbf4b385b13761deb111fa438100c9cfe9a
.rsrc 0x6e000 0x630 2048 35d43a50e3c07e5d1832ebf0bf33d26a 64eb257e241dbabb08070a71a77fb0d1b85809a9
.reloc 0x70000 0xc 512 7e003156211b720fe995aa28837caa63 f9470603a74755077ca1d1b51e5ae12a4cf282a3
0x72000 0x10 512 7394708c49fa0da8c880985ab8105fe8 8ef45d98822f782844d795281c21117e846d64cc
PE Resources
Name Offset Size Language Sublanguage Data
RT_VERSION 0x6e0a0 928 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_MANIFEST 0x6e440 490 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: Copyright \xa9 2018 Compuware Corp.
Assembly Version: 0.0.0.0
InternalName: book.exe
FileVersion: 19.8.26.4
CompanyName: Compuware Corp.
Comments: wa1vg2s3ptt
ProductName: IIS certmap authentication provider
ProductVersion: 19.8.26.4
FileDescription: IIS certmap authentication provider
Translation: 0x0000 0x04b0
OriginalFilename: book.exe
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
File found
FIle type: Library
mscoree.dll
KERNEL32.dll
IP Found
19.8.26.4
URL(s)
No URL found
Compuware Corp.
Assembly Version
19.8.26.4
VarFileInfo
2018 Compuware Corp.
4051c5da-f5a5-15
Comments
pictureBox1
e2c4a01f-40b1-9d
wa1vg2s3ptt
7TM
InternalName
hn5~WRJ(Fc\[h~\\b04_{l>|A)"
Segoe Print
f4e3f137-bfec-bd10
f4e3f137-bfec-bd11
xox
VS_VERSION_INFO
StringFileInfo
Translation
f4e3f137-bfec-bd8
f4e3f137-bfec-bd9
FileVersion
Copyright
f4e3f137-bfec-bd0
f4e3f137-bfec-bd1
f4e3f137-bfec-bd2
f4e3f137-bfec-bd3
f4e3f137-bfec-bd4
f4e3f137-bfec-bd5
f4e3f137-bfec-bd6
f4e3f137-bfec-bd7
Form3
Form2
Form1
ProductVersion
FileDescription
0.0.0.0
OriginalFilename
$this.Icon
LegalCopyright
IIS certmap authentication provider
bc4519c8-fdeb-060
CompanyName
000004b0
ProductName
book.exe
5Z %:M
0~up
^^{k
i0qht9
k]B*s
c?'?
m =rB
PNG
'hTk
;]7z
D/AW
QsBeC
1GTocN
Tvcm5
*()N
atB;C
kC?z
rfcD
p25
Z3DY P68
H2oU
ghRbk
$$n82
[? s
;}Ms
R fO
$RC
}O2}xv
auB9C
N.b5W
M|w>
<,ET
3 @o
r q9
2EvwB
pk=P,Y
A}9]
a`B8CJ
.6U1
J>{
#eVHF
_:?3 D
4p<r#e
T{mI
ywB8C
"7}wo
5]
B9CU2
Z}t
{hd4
~0w9
m_;
[E01
d gH
=M6E=7J
ehB/
B'<R
0p&S
_"_uj
=7Z6Zn2
^QVC
wiPmu
EnableVisualStyles
9v2[
[pk-
pF(I
+Nrn
kVUO
2c\{/R
wB3
LwB=o
X9s_ O@
\rn
Os\w
bqP]@
)|/
a62I&
W#ZH
f1a85dae-7255-38.Resources.resources
nk/U_
Dy%>
vt\
bE-YrgP
g-H
?|7;
`Wx{k
R_f"
aw#:C
nE)<
1%l.
h U9C
.wm}>
yq Lv
)MDL
%Kqd
~.'a
set_Text
_F Fy
RjM+Xf
pU$jK
\ke]
0u)-Mi9
a8>K>&>+6
dCzx
l7'b
^&W-,
>B"SV
.T.h
$kGJ
Xt_^a
Qphx2
*uJ8
n~6|
VZ?k
hi! .5;
hn5~WRJ(Fc[h~\b04_{l>|A)"
!`2m
EO6|
&Y {
9GS_V
4t)V
B)!+
&^VeS
>UFm
|DZh
awLG3
/PGM
[M,
a&A}C
(5 o7
u[n+
Q'@,U
h,k
ah:7
I[_
Char
voEPSa
R9 tMctF
H/WQ
VRi?c,
@u}^8/
\TPE7b
>qm@
Vo]9
E|Yh
*PpG
Padding
)xbZ
}|7{
xF*
+wB39
C*B~p
` qk3r
>eX_8
a>,O,
(CwB;C
lPa=
E ~q3[
%Pxs
?c(nV
:1Ri?c;1
kayB
`C(4o
G~ZE
O?Sz
zb<_
e0R~
.text
Vn/v
awZ9C
a>B9Cl1
;W5=
GetObject
6'I$
3yK1
1fwB
K AB=
m'6P
MMK}
N4eS
DzqD[ K
0~k`oS
)5q;
0IKy
l8)P
_zH4I
k#CYo
j" P
V-iE
avB1E
f=n?t
%:k#
lvN!
}B9G
d_vn_
qg#0W
Z}c)
@D\1
]Qf$+
DD';m
+ukD
?Ceb
HIz_[-
awb9C
ptK?p<
IhB9I
is1D
[t*K
4R #
g0)'5
CR)v
jJ 6_
!O=0
_W=
oC"
pHT"H
S(7p
/Y"=K
qo3-
d Hyi[`
7d2
`lFdZ
bes0
}b80
M?:V^z
oomK
Q T3
J]9*
6Kd?
x] 6
kN!8C
1G0
's4`E
V'}E
7g?
bP E
i@7o=
$9 s
109N
"-O\,
rqQ@
^D0N
ys?[F
JwnQctU
eYBbC
Zt_^a
avB9,
V.9o
get_Assembly
:Yzq
W"_WHpU
lzv6\
L\VO
Xrn7
w};N=
GDT^EN
Vye3g
'TQK
`w`(
K1nrY
Ae D
PKi
|ch_p
'49_$
wwB=R
%BiM
Y^Z/
=Ny8
uw A
>%, mp6
3#M"
0<QVh
u0gU
c]%r
F5/+
o;4ok+
,jwB<C ;
y) 7
mS+o
uP\,
fN{IW
K]i<U!L
;})9R
{(7 ?
drB8B
2${?
(m,7
System
EventArgs
\iqB$
b'[^
N2oE.ZY5
^t$bb
{ /`
)a^BuC
i~k[W
OfDV
7*\T
p?'|~D\D
PR_)
*}B
>XgS
rQZ1
%bhp
MethodBase
Ed j
a1-K.
j<[^'n
{t^]
{t^\
{t^[
{t^Z
%i N?
F7)/r`u
5y2@
eIyXi
^6M<
0 6K
swNt^
OV-e
Yt^\
~Y:A
\:8U
BeginInit
F-9C
"8f=
#/_y
bm@d3h
#4J2
waPBzC
_dNZ
}~N3]
hnF}C
awB`C
XhY!
dwB1C
6GlR
7 jK
%b\ Q
asS?,
sGD.
Z@+4
4 E x
a619 gO`
Ov7Vc
KAkf
++BTN2
ON "r
\ tP
$;BU
AwB3k
Ix'x
qktN
J 2Y
CI}Q
}0W'
uh--
H >t
AwB3C
DAZ4
+=I9
p i
K#:d
Mpz,
ajL1C
8row
'jv)
j`,Y
2>|n#
*#[!
j d
`7S*i
e0;-
M#'Z
=ZpE
-|LV
W_K|djvFW
aNB5C
,7o
Ze>E
@S)I
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo> </assembly>
w)11
3r|+(|
IG!#
#XB9C
/m8Q
0V&4
eaS0c
bawB8C
awH?k
INx
v!i1
$fvs
s 6p
awB*s
x+jK
W9\[
].n:
P-paL
Dw^[ R
otvl
set_Name
I<x=
06ycD
6wZ. }
&z4_Qe
aO7
(|B2
gi"
HJt&
wB3
AwB9
?WY[
v]S=c8z
awh8C
{eH>
| J
rq]
buR(
,n{2E
a}]5k
Xl5X
,w,m2
4eo(
wM'
|Y!d`
IVCJ0s
r)ANHe;
:\Ggyu
G.\[C
~`89C
C.J]
I{ q
dRi?c
n/uq
aw2=C
aw/8C
dz(3
msS3Q
a~B s
2Ri?c
A3"H
Hx#i
A4-9
a~B O
}OFg
BqC[0Z
7ro' e
nJJ\
Mg]B*s
qN9C
bDT[m
AH;Z
awB.h
>le><
avjvC
cX{\
;k |
awB.B
($j>
X> \RL
+$]X)
TlXj
=Di[
QH5z
0~*%
m*>+
)!-#H8o
^wB30
%K1*
i])sv
J~b
v;-+
ziU+
MMb!
7Vhd
W`q
]MHdY
<R*s
rRxFh
crB;B
V 9e
o7M=
XX2 v
}0iP
D e[Z
B(CT
Q\l|
6N9/
*j<
7A5o
ke4o
a$#O&
{4Z^
Invoke
gpA+j
fCy
GR]),
=lCI[4
/UHV
'<ef
lzn'
1@}j
YwB9Co(
~mPO
Array
-6~
=t7z
"99~
Ac{X
T)4r
a&B9C
%wDFC
8o"D
-GE9
mV *+z
gp,?V
3E&9Z
AuJ1K
VEq[v
7jk
Ac&w
O40@3
oi"#3
]j&B
?[kJC0
Ni6
}!$ws
g~ 9
~r@N
aa|p
_d:'$
~wB=C /
$mB9C
S[5r#
iaWBgC
x|V>6
*f{i
a#*
KM-b7
oT3P
4A8B
!x82
eo?-
>SZ~
F1+h<Uy
;W9z
,ALBD
xFsL
'o $
]f N
a_4/
f8D\
#]Ot
RuntimeCompatibilityAttribute
avB=C
cIDATx^
wB9Co(
@9C 1
T}9C
cLX
u SU
_xh(
S~8f`Ty9
e ]|
bVC}C
2*AoDk
pobM
d<=5
M&Y(
.~X
VP(,K
h$5&e8{
`-.i
Size
+9GM
W@vj
/P&
5r P
cwB8C
N^f
fOp6
5kQa![Oy
|S2}
1.X$
fs_<M
R*3y
sfJ0D
IContainer
|*,t
{bj<}Gb
_+U8
<N;=x|j=
aw@9C
ec,
apBDCD0l
@Mf(
$XiS5@
\BDc+fS
Ia<r
[hC,
au}u
O_2Y
M le
0t]
Cg: (=v
A4*x~
fF|R
cWsY
XJVs
!2^
)N4r
Z^/_N
z/R!|
k\Eg
0m/-
ResourceManager
YS@
Gns>'+
ContainerControl
j~bi
QuB(C
pLwB==
0p,2
CQ`%
a$_j*=
/1y~
0{3)/n
&SUC
ZIrW
83bd \
a3'Z*
)lU
.uk9
a6&]C
lo\-l
\/)Ga
aSB9C 0
ADQ1
vuX
AU?
SO=E
a:'J0
7o[+
lqu[
N rbu,
7t(o
L2*B
aOV;
m f
hB:$
3:he9x
awz0A
g05B
m^N
[(M1a h
\z],I
Close
)l{-pc
t <Q
H`lL
tg.%j
8wB3, 0
EFrh
awLA
3;<T
{B9G
vMmR
h_4jQ9*
h6N]
.j~i]
UupM
;(o !
cR"o
U6",6
T)zy
6BJB
jywY
^t_{
cc<-~Z
^t_~
^t_}
^t_|
wB8,
Lz}!
awF(O
^t_[
^t_Z
^t_^
^t_]
^t_\
$6X7
awF(c
T'Xg
=n}[
($qG<
^hwBaC
id?*
) SZ!
I B9E
2D8 q
ControlCollection
wB8S
(-b!
3G^{
:Tz!g
CwB<C
r*?G5vS
h#Y_
|bSpZ
vaWBgC
+_0+
3 6{
3 6K
OP;
lf{CH
RuntimeTypeHandle
&|f*,o
#6Pf
GBkKD_x
KwB*s
8&Kh4
ytM9
%'X'
3D33$UDT
q" '
Q>+EJ
ZrdF
VrC)u
k?4EOC
a5B0CL0
d;7:
?A}.
eJ C|Q
0q ;
y!4h[5
,=9]}
a#W=
j0[>}
p'Rs
ZlMS `
YeH MD_40
awB C
yr'
Qug8
l?xy
h7qIu
|sw
\@/
=zin2
S5|s
Na|B8R
mY]k S
dW@8M
k_$9C
7$Z_
=@V>e
~RqF
dW@8_
Xt^Z
Xt^[
Xt^^
ZZlOg-
=W4Q
jHmC
ID3nE
FM7J
i s
_,oS
EIs+
& nHr2
u?s7
VQ?Z
=ywiq
3kp4(y
0Y-q
Y$bk
0g$#
h35I0
!This program cannot be run in DOS mode. $
^#9%Q
fFToS
lFBtY
d%"P
C0e e
-i%K
<\f2CL~Hw
w`(C
Dispose
6G`L+
8gwB9C
, Ro
jP6h
t07*Y
-,= V
",5t2
%!|
A|Od
awBAC
jW, {M
jC
u:=p
u:=q
$: j
rQ8VnmH|
Gd6`
adB+C
set_ClientSize
,>h,(
M9HL3
hwB9C
d$?P
6g~
x>1q}
W46AN
~^"|
~W<qV
qIm/9
2y|
`n|`
W{l5
fC|ub.
!'K*
apB'C
]xz&
v6
h(Zg
TW[-
GVv<!
l{ED
)_jU<
.Copyright
$$ E
_Mz
p-4P
0p.
&sf}T
*Xbpmi
bOA
^de4
0o;&
.ME
~c#=
:RNf
PIPok#@u
0o;G
--n'
#E%Jf
k 3P
*ae~
.CjnI
,*'>
~>XW
awByC
!<.S-_r}qi
E/"P
hB6$<
awBym
>`%mi%
^jk\
#Sd V
7Q~P
etWg
~OL-#c
awByv
awByw
yyR(
Rohz;
;E\
|0~A
9kv2
]Fw^
.G)
.7p$>
?Bjo
6=~MJ'
rfSx
C4wB9C
>|jR
& r+
&F?+
S"PP
MethodInfo
@smB
SJaE
`e"Tt1
CompilationRelaxationsAttribute
zz|w
*E y
Fq6,
9ABzS
-ZT8-B
_TDQ
J1.g
Wd1~
hfj![
0x+/
gRB1l
xt_\
njk>
&U l
z6^e
Go*.
0]JgP
xt_Z
UDQzw
RQ?Z
DBBozy
lIs.
/16`u
=-qGN
tKbV
-D{<
53\69
JawW
ps_3
*-O=
-wXhr
wB:C
paOBkC
+Kq
awS/i

[k:.
Wq{j
n|h<bql
wV ~
.'vg
6phX
aD(5
v@iA&
awS/I
%\ayC
DB?B
X9kn
<(^J
kmH9C
9cck
xt^_
p( P
v l!N
+~-
~s!IM
,U)4
`t,HF
1a3B3C70
>Tnd
R/r~
p3J1^
FVH_
c4*/
?FT)6
~dWYIw.3"
"3L"
S]AK
*gUP
kQbg
e&\
eY cl{
XF'${u
0cwB9C
sRB
B9C~0
}QwB8f
&R][{
mp\GzB
avB9l
/{ [C
ChD7
~T;P
R'b;
\z{G
d_n9C
DV1*
xpz
'S,?<"
TIh
avB9C
%69qG
tvB9X
PK=-"
oeTG1/
?Cma
,1w:
}lZ"
Q6{Q
e0JP
`sv|
@3?.
gN
*JF4
y.|*
t*a0
i Cm
HK<t
DtRj
SxIL
usI_&
awH?cz'
psjTC
W W8
ykz?
1N4;
?$ K[Q
o xZ
d^1
-I9[t}:
dF[u
:r>Z
(|XZ
I.rV_
_CorExeMain
DebuggerNonUserCodeAttribute
a7B9c
awBGC
^{HiN
\Z I
avR9C
xt^Z
xt^[
7j;D
qj:2
xt^\
xt^]
W"Q$
m,%P
`ek1@
6S6
+8qa
Ixo t
8YXJ
GYm-
m-&d5
80Y
J[+)
!RTWA
ava/Cr0
yu/]
rKR
":2{
WsRZ
$'K5
h*qe
c}9Q
rq[g
}}J
2CvQ, n
qkWA
`vL>C
aw 8C
aiB<B
9iAG
x`](k
iu`;
{NZ|2
o&8B
B[@.
g{mi
oAw;vl
e"'b_
get_FullName
n: P
q%m,J
C<O:
?&~V
rmr3{
LB93
p%d${c3+
cw ,
leQO!-Y3
' Ro
l`vf
hg-d
qZ9P
_ tP
q!q6
h
x ql'
Unfn
jvVy
`iXW
d-EH
rewo
8V_I
NmT"
?@Z-
JUI
Cz#7
-W.
gjG;]
l>Krz%+
a3B9C
y!Q2
/sLN
REb\
~>{K
[5m<
EG)zNf
(AO
{a KH
!c7 j~
Y0hZe$
%--p9
3I7#
mcIoo
0m&-
e22m
D%>o/
awHV
L\^\x95
awHJ
\%p8
O[@.D
P PS
wx1y
1.0.0.0
HKSH
qO6$
mCv}
`y{L
Op)"
X30w%G
awH3
=.['NI
:j5(#
I$qadw
g3Q?
sRGB
4p;2P
h\>iC!
n4 h
i .9
0z?S
Uq5O
e B
pWG;A
>}(/$
XD>'
,Oy9
=|au-
S0y6N
UeP2L$
7.H!
i .u
N&*}
?le>
@T^^
]kW$3;
~ _T
t:*J
<]S%[
"5
wO>Pn
WQ;+:
k$(p
KhX?
4 8/
6awB9C
S wD
}- ~
45YW
XN Z
%4Jn?
Xt_^
o;&P
paw1
g[A{
}Ji+
^=\r8
qC%V
>awB9C~0
%B9B
0c4H
_8W*
B9E~
UJJD
at]9C
B?EF<V
frzKv
qa3B3C/2
u* Wp
n\Cy
#QI>$
O%'J,
KatU
wnp[_n
NJzr
o r)
8+no
@ A7i
} gx
maGBbC
p5}1
>GyK
[|L7/
q]ME
tQSY{`
h8,B
5W $g
4\ t0
exPu
`vfy
kREV8
b6 U
Point
-*M3
h[y}^
Awb9C
TyLU
G>=i
.eqGu
7 {,
4n7%
]/N2
-&K;
aw\9C
W Ux
AE
UeqBg
awBE
v@XX6z#[
;wNw
set_Margin
SH 0
n.qS
$'MA
$'MD
>wx_
:[7{
}28j&
!5z|h
8+3.
J(BE
Vl 3
pwX'
HOQ <
5x:v%
{Rf\
Ri?c b
[-$C
i}b=Q
C 0m
4T6.
OpYO
=Z/z'
r!c0
NEGk
0m)
t8=q
t8=p
a4*X1
.Eg$}
Yt_{
Yt_~
Yt_|
Yt_}
aCy/
_wB9C
<d}D
T} v
psh8_
snJ+Z
>Pnqw
|eg1Q
3M%;
H{w+
k)RM
Yt_Z
Yt_[
Yt_^
Yt_\
Yt_]
9N6M
yW|N
;z!z@
|cdH$0
a}jNC
,[4
q/
}l.(
25;M&
;wk:
#E p
0f2Q
GLD@
_nOv
hn5~WRJ(Fc\[h~\\b04_{l>|A)".resources
15 ^
2{Ve
j4k
IDisposable
8?nc
mP10
{QKCm6
930_
'8f>
;so|
U>H
R,$|%,
_p]_
$kKD
Er82|
awJA
a%'^*
0c q
3 Jn
fwB
GeneratedCodeAttribute
spB!
h% A
@@g(
XDoy@
tsnD
qka*
"o\&
c3B3C
BawB]C
rrJKh
D*x Y9
l=Ruo
+]{g
o&X'7
&O E
L1c,
#GUID
B1PQ
pc~B5C 0
Fn@=
o{J3C
aw*;C
HawB9C
pcz-
IoZ!Q
n8-%
4v7M
/.Q^p
a>D5N
`jy.
q%+z
z#0
aaW B
jSdwd
`t,H
]F )
.Gn[
qRZ
Tj,44
e'.8VC
{R
e_#9C
%[IO`r,1
|9s
urB<P
kQ&9
C,m Dq
Zx|zs
\`mK
-rq/
|O5j
*'vV
+q1fC
W)g&|{'
pL"WE
8?[
V i_
a(P3=
Z_s8
j[n-
kQS>cY
fMNr
gvz&
d5r'
awT;C
17W
dQ{v
_ 2k
X-kh
qv>,
Wt0_
TMo$)
ViB<
J0W-
~jD!p
m#Vo
y1H[
{2`E-
> +0
N6z+
mWim
Uy<u
I_,C
,Sr
>B9C
&xO@
(*n5
e/cS
YOs2
[_+J
=^7 i
VtSM
{FUu
Z!V.
1U~~
gAMA
Ot/Ue9
GpUaH
v3&5>
|>` !
Iu:T
J@A9bM
:;zA
o{C9D
p_U>
{*!XE
[ RP
fg\0R
0Q.Bk
=A:f
Ghwk
ffZ
ZDB9C
awB;C
vwB9
bk}^
`dM11
iwFK
iD*.
&>%0Bg
awEG3
<T)X
l~*&'E
avBmA
U6?;Kz
0@jo
F('5
e}C+
b g0G
q|:
n9+P
=8D-
[ak{
Marshal
a_BnC
$36n
4FXh
-A<a
fZ/kg
rk,)
w*HU
uP1P
>rro
X2*#W
HJy
84 Uh
uq?%
^WVW
cq-oC
_G?_
ek0~
?hE'
0w a
\k,-
9aN)
CyKv
S9C
sqApE
V7PbFAm
N~}h
k,l6
kwB=c 1
(U;N0x
kWdGe
w b$Z
F:A[\2
mY{{
Md8J
S#H@)Gr_.
xiHB
{m a
4= |
6kyc
.-u(v
AppDomain
C"{I=
_Y\.
CcJ:
YVTf
xqI/
ci)I
vs_?}
R&P~U
_Gwd
O:P6
N\Ki
=nuX
:ka
]+i"
oics+
6T9n
2|_ nU
.ZDZ
net,
ffBs
awB:C81<
zdVP~ _L
>Ix;
c&67*
Control
/>)s
jYR@
**9;:
\[Z$
(la5%
=BaX;`(
RwB=i
n~M.
AsH7
Type
UX*G
t \x
dLZ[
awB\C
*jY+
KzC<_
aEB5CK0
?O>"
&g[7
4\h#<
V-7GML
83B7]
m~bj
awB9K6
V!a>-b
c *(
LYb W
7ZvAc|
WAC& I
a}S>cq)
>H) hd
@d?*
:^5u
SHcvRhGb.exe
lR@,
k8 i"
Nb 3
@C96(FU
i<[>
!cwC$
=|=T1_6
}^1:
<sI;*
DMw~
E ]w9
{&_~
W;ge
_..Cw
0v8OOu
[p^y-
;k%
B9C 0
e~9.C
c5h
0b x
I|B9h~?
R]SA
"^ei
pDMW
woO;
%awH(T
*net
uX^Zr^
(o8%
qO\-#[
Q<cW
|/|C
PQ)'h
akPV
nG"6y
@o7n
ryJK
y4A
^iUzn
!w1kJ
o{cj
tvuU
9Ayykh]
@=7B
UK?'
/3F
R)^.
KwI@
>_t}
_) W
a{B9C
!bsb?9
j)qB3
l%WZ
B9Irb
03 9
b0oc
9]g
tB9c9
"*IXtX
sm,{
awB9=
^\ao
awB9M
I#Pc"
awB9D
awB9B
awB9C
"4aO
m/WPD
awH3c
awB9c
)z2%
k%m1
B@_T
k w f
awB9u
@W
irB8^
yTI_
~\0J
hgQ tU
FormClosedEventHandler
irB8R
+]BR
mxSCW6&
g-tm
V&UL
&?-<
(C Z
D>6
IU9
7 6'
fW@;S
QO,$
Jn"jk~X
kv.o["
%D:0
0dO7
7 6G
a3B3Cw3a
A6o61
9GQ1{W
BC4[
7 6{
7 6g
po;,
uFFT0$[
htZ=
Zqj`'
I|:&
C\#sL=
1=_c
set_AutoScaleDimensions
Dlqn
U 6Y
awBqC
iec%G
qOh
j|RrD
x>Gd0
pa^Z
/j"?
UbL*
*~Mc
n6Bc
( zJ
0P .
g(UuXR
T<xGQ
C_&3
;,Cf
QW,g
IHDR
B>II
=lu::
dG[y
-s(pG
7sX8i
Zga]
1(iI(Z
6tI:
j i
k.T'
n,'P
awFG
{*)$
f%'P
g~c:
aGB9C 2
+W-5
a%'Z7
fgX8
asB9C
m-c_
>x-ef
@"t
0~]X
x?}Hx
/}anR
:]D1
,Z[m
J5Z_[
C8Uc
dqB8Q
\"_9
rHC#p
0Cuq
awF>c
Fw&'l
[!)w0
MNO?NW
'2y
'Q7V
Z9Z3
@`86k
:Yx{[
a$BMC
#Strings
=}M
X`GbHB~:L
Mb{>
xfcx
Image
n," 6
JUcAm
aoZ)C
}u]>
6&]1
|-"o4
~{UR
db+(
f3o3
nyJH
htD(g
o@=
wo~ F
Dz[g
E&Tid
qR
a~B Cy0
Application
6s'Q
;k /
}qu@
EuOf>
ZJ7M
>2s9%
gjdC
&Z,g9/H
B9Cr
awy8C
h*m {
rdQ(L
j:IK
a6zB
QsB^B
>z!7
icA
]!q,`
VouFj
aYB C
w|8~
DlNb
j!0C
}9zv
| =#V
nTC#
w8J?1
=u>0
i+"l
xMYM
V`4vu
$&p<
Z/P
awB9Cs[b
vL?+9
(3'\
A9b1
bb~A
) "@
hSystem.Drawing.Bitmap, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
,g]Bx
:9o8{
GjUO
@VsNk
W=_.%
WaQu
vb-MU$as+
J3j?'
[BVE
w1\7
'](!
c 6i,
Form
n6o:
isP.U
s&^$Q
k_"9C
y:#J
_$*x
awC*E
fZddE?
eu0~@
SlUp
)]N*
BqFV
iR&x
HewB;C
awC*s
u:|wO~O
DdK#
l~6O
1:gV
awSJ
4x>.?
6+
o31_
y>WE
7d@{
awH-Q
awB?C
A[^"*
>wB>
(j,
9CpE
eVoR
l{f>Ey
u8=p
u8=q
pI?&
{t^^
_vVy
cS~mk
O<bqJ=^
WiKU
0g |
_ X{
cp<JC
ResumeLayout
\.jlq
h2=:
XDwB9C
t i
ValueType
3N7>
System.CodeDom.Compiler
set_TabStop
)p}
SetCompatibleTextRenderingDefault
n:(P
\)D
M|_ ZD
agBuk
kljw
U/$v#
xOJ8
aww9C
bXUY
>+zLTl
mawB9C
hzQ
Dqh1
|*Er
@6l-b
R_y
zQ u
@awHJ
yt_[
yt_^
yt_\
#\6d2
85LqTp,
#>~gu
yt_{
.Ck
FormClosedEventArgs
]_vlw
6p" s
vB9A
0LIC
PU(H
jMT?
0qQ
y~A"27
|k_<I
Y,9C
=wB3cV
DebuggerHiddenAttribute
vB9c
hO{!3m
}V^y

)jF*
!9_:$
=n<z&
Pt x{
ks\_
.N4"
BatBDC
C(BtV
vB9,
[cx7
IdS V
\j9
}y sO5
;'r
P%,k
/l@M u
a}I:k_0
?aM#
b^jKx{[
i%_$
IDATx^
WeI
=aXw
omtG
+ 4:
`?cX*
E6B
Ka k7
`0}q
gFq
guxP
v6Ig@
.ctor
b=ZQ
?2U9C
)QOk
B9I
`&HfZ)
mSSC
GJ9
^alJ
G`+
_t^[
_t^Z
_t^_
_t^^
|8%;
5r|K
eB9A
Zt^\
Zt^]
Zt^^
*t1
Zt^Z
Zt^[
P*i
<X{+
pfo1c
iyb>Q
-?GG~
CW1#
YgEK7
Module
j/wy
eBnC
*;jti
nY%'^
q GBpa MY
a#-~&
@.reloc
R[W }
qz"Z
f=BP
i<GP
H`0i
5d0885
, rw
a|T
\s%7
S $/Muz 5
apB4C
2Alu
$pDk
arB9
R_6-@
3{x=h7
`vny
m|F'C
UCd:sC
I.B9I
(Q#d4Q
w}+f
2R&\7~?(hD
set_TabIndex
L~N
a}N0cc
ZcvhA
&&{'
I]`e>M
-a}B
#t1>
kzb6
;|O7?
&7COg
yZ1H
*,W
`*p~
0&}n
v bD
sdo4X!b
-8:1
F{1_
ZnB9Q
6B7CB1F76B99023BEFA8EB2B530216F00916E4DF
v}dy
6_P)
p=?tH
0~k`P
>*/D
'>aZ
G->/
0]=?
iemd`X
? "
<{}v
6c *
5 uZ
aRBJCF0
33\-
=z .sD
_,cw
rauP "
62 vd
6|u2
EwB=1
uttX
aJ S
.F!F
awB=C
El[Z9
c1-w
BF1*
n8Ga
p/fdB
QVutVw
sl*P^M |-
WDtC
kwC,Q
n:*P
^VqLg
a}Q)c
1xoN
'W_}uf
nRZy
9`2o
- G vD
07PJ#A?
"Z%-
1F;\HAg
sM|[
~_pmr
;=`g
G-8ZM
6Knz
st,x}
6{s7
AH g
j~p
a% n
XL;W$|
( _
aOR9C
taGB C
.v{^ 8
%[#i0
$&=
\,{EIMz
t/wB9Ch0
w<0e7
XMzN
)&LV
awBx
JYwj
j=L@
Wd=N
1wB9Co0
Ukl/
awB^
awB]
(Iag#
}wB9C
awB9
:PT
XP_W_1
awB1
A5$G
0e?RA
B9Cq0
awB!
<gFFT
X{^
|rJ0D
k-Tn#
":Y"
jl}D)
uu\_
0F #
~Uf$e
`-["
a1BPC
siL=P
qTW]
? xt
gEB
`( x
6wB9Ch0
pqbU
uiI'
%<ft
a$;J7
:\Z#
e]B*s
q,6P
E9.V
]+WR
i2F9C
^0s}
awB7;p
Qo-D
xawB1B
y5Dn
w6:xN
B?CM|\
%^q\`v
!!J<
Ql*|
II:>
Gy(
o-GP G
q'9C
zt^]
zt^_
|wch
zt^Z
vbfG
hgVhy@
>Q~G
'UD
hz@f|
oa
@:BV[
`wBVf
uc!sP
G[S[
wCZ{ q
9 i
Av_<M
]2I
0~ro
0N 6
]U"
auI9@
o2mz
imcr
6) R
Q_6(
hks;
aA42c"
Ia`B8j
{O z
prwB=1
XFrD
.m5iF<
k "P
^x ^
@IbI
W h4bp
!jwB=C";
kWd9,
U*i
kf[V
WpzP_
dOX<
Xd}q'
awB9CHRU
S~x{
a$6K*
OqG6
@?Ca8-
oawH
) \p
O]zbq
a}H.h
V| A
I[C`
N=^:
SW_L
__8/B
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
e> 1
;l6m
ni1Qfcz
wB?,a0
. BU
|=95
sjL+b
8L\
a6Mwy
I[C'
mscoree.dll
B'L n
4(:
\MRr
BIu@;Q
7<w1
JMD:,20
[]Y< (V
Y+RG
_\ke
Yu]l
Zccj
-)$c
1Uo?%:vsov
VrmF
Z]V2
M8gV
kk$;^
QrB%B
Y+OGjQ
QshJ@
9!IW
o{K1@
awB3C
>Myr
-W-/
!P:W
*Af|~
- 5PH
-Dj(
[(7E
S4/A
$D<W
fVTM
4EJkV'
QrBMB
0v_0
`K[=
jawB
!jXG
?x^~]
Y]I&
pgj#
u~9R\
]Moi
grd)2
;58yv
!dnij
@E[93
d !}
q)u(
l _g+
lj.o
bm/)KY
,*NO
DqT?
HpR8A
8mO^
/d2B
0~kp
c[wO
K|xs
jd[p
*IL$}h
,/<k
a\W/k
w QV
#hL1o
Mn.
qkNG$
B/CF0
G_0!<e3
WMa(
a {Z
OJ|S
s:{]T
j]>X
q5#-
&" }C
tuuYt
v](
"U];
o8)P
hc=z
stm%
POy4
\zuNa
$ R
3; .
_8Oo
%3d~
Frz<
uzvx
2;5S
$a"9#
agB*C
_Lq.
`wB9C
gtb9D
hx0NO
]8uI:
=M;J
jJJt
IDAT6
Qly/
aw]9C
l(k]|
yRi?c
C\g^
Ph1C
ewB=C
|B~g
)f[Rf
o9(
zF*w;j
_AyE
Dz]4
; }
awB9CH
jz?`9
awB9CA
Wt^|
awB9Cq
awB9Cs
y&
uD\W
awB9Co
QBLa
RM=Y
~MAS
M}Zi;
ST UQ
s+\O?
we=f
,KwBxw
2PKd
*@ZV
t9=p
t9=q
3&n,
+*n5;
BwB,C
15.0.0.0
u;_{
c$6P
s)k%~m
Bbeq
Gnp9
u`d
.l!+ m
T.xKS+|c
=}8<
;WzW
)|xO
O$6K,
j5mo
H#Fs~*
0q0K
8RPI
rs\g
!A7p
k P
jY9B
!{5U
tuuI
=`g
`st h
#/lQ
AWO7|
hj _
SHcvRhGb
]_Rb
v<Itk
u A}
Q_l!
|0|.xrz
'[XQ
nC \
c=[@
>(*{=+L
yo&
+zz0
OD&-
VBs[
?4NX}
H@jg
7*8Z
-i5Z
Yicn
#koP"
H `a
E \[
:<h+
z i
:q+\
7]-p
-f q
+q8B
scq^
;wB3E
x}m3D)
U9}[
MG )
_/'A
9>V
Z|B[
Cls
ug^H
2SY2d
H/u
hDA[
AB:DJ@z
T? 9
[t_\
[t_]
[t_^
[t_Z
[t_[
utx5
NJ#/
\"1Z
[t_|
[t_}
[t_~
Y?@~
[t_{
zO9u
~t_[
tMM{rT
g R
?XIu
\n "*1
~t_]
awB1c
;WA =
%A~<
~t_{
LS||YT
~t_}
~t_|
vs~5= n
vnSl G
//xi
[-s*
N:?-
X-9C
_5('
}u|=
~I;[
stj`C
k'8o
>x6n
awB8C_}
Lf1.
MaR,Z
V rl
]pP+
),C1
fe7B2C
0i1M
,@j|
<[6f
v Z_P
3<zd
o9B:
$SEXr
` fw
V:;; ?
TK9X
@e=x
iLxAQ
rXb
&Ey
Z,=
7tk/
L8"B
hp: o
9wB3
0+$L
D#rC
a4F C
~t^Z
ufF(F
~t^[
I8( o@|
7 6
h-h
`3j3r
.*R8
"xmJ
h<h
mt&(e
-7/,J
}k%1a
V >CE
P{^3
F)s
ksFU
awt8C
0#4m
rr]!
SO:L0
pUyZ
0_ L
I-B
z,ZFL
q#A6
c wA
a3B3Cg1
nN L=
}]r>=
{b*A
>$!X-
ZZ/}
Ia9
-s2)a
j#;P
psgK}
Pvnw d
aoa}
a}I(J
;7{?
VMuc2X
C7@"l
[Wv+
vY)H@
=@<Y
K_Rn[
2v>Dr`
w6]H
ofw&Za
UR=
nxM8H
aVB=C
{0 6{
Zbfn!
~MCK
Y~mri
QrBnC
|Dy
&I ~J
.,9s
;V^-]
.+$I1
.JYh
N H-
/,mBV
[O0W
g'5BV
wSPf
QM f
4$D*O
7Kah|
uawB9C
4_ie@'
@d1E
0tD+
gbj/C
kvPaZ
0_io
WM["
[t/4
Ck/h
a #P7
}Xk^}
{Pw|
Yt^[
gWQ'
c"]?
65Rq |
3g|-
'G/I
u0}y
7n0xW
=OC,
DIW~(\C
Pat9H
<N(O
PlCGl
k\1I+
Q~'4
d8_g5/:
5n=x
8g O4<`
ay@9C
cO,_
arC9CB?
0)jy
yg"qDP
!%oa
lY[4
l~vY
Z/Xo
-\ zy
sS4\
@5hEe{
ZLLo
wBIkv0
Y? }
>7u=
v|Y]
ZeT-
>]di
|}.9
aw#9C
<DO
a+`9C
w@ MnU&
0Ebo
j 9P
"lU=n
Yq]7="
A;){7^
^t_^a
kz5G
2008 - 2018. All rights reserved.
3awH.
UTjR
RHD"
[?Bt
i AB
awC"s
#}"~Z
krAIz
Cd9,Su
B,CL0
*"nl
3Q 5
8 rB
'K{Q
@c**n5;
0Z<?
X{j$;I
0f#3
dV@qB
{~ /
=[T'
orS P
3v L
6UI,b
O2wi!
j&ZP
G E\X/
WEx
Dp9
krv3
6_Zy
08/<
ob![Q
CS05
9pB*
0Y ,
kw@{
Z5s~#ow
iTVS)
FGy
5?h|M
hu=`
~x,H
z7"D8
* i
_Etw
L;|o
I<OGj
@Z"at
aw =C
x_2#
7fPg
G1~]
jwh+g
=wB3c
lBK0
wwB3O
)F0T
"6d(
;XJ'
MzK]C
*ibQ
a}nAc
9t6m
|!*?"
DQS=cF
d50y{]
azX@j6
@Ncwx
!Laz
\11e
LG[o
L<3I
Jqb
ewB(E
JirO
r9 (c*
3?57y
=~5c3C
rWML
-OcQ
Jqb:
v)zLk
M0 S
1gYIE
E-&d
awB:C81
=%PQ
wF]3
1MOA
b3B3C
0~k`
0~ko
;1R~
sI;r
2 6{
avj`C
g^L9C
asL9C
W2nM
UhlU
O,7Iyx
~wA`C
avO]C:0
{3 6g
z;?~
@B #
d%+P
agB.C
=*dfj
AssemblyProductAttribute
awb:C
%Ww1
PAwB
XX .
Dwrx
}|z; o
yqYX+
<Module>
1U /T
R\B~
-:U~
*nt(
!H]q
_;q`
voNP
wfw`:
SizeF
ewB9C
<4R8=L%
R"FvBZ
*aqD
5`Q7M
|0@?
,0QsWj
}Gdj
|IcI=4A
.rg_
F$z`C
l 1Z)
qv[
4.n!
avB4C
K eeW%f
3c f
$!282l
MZ*w
P(eC/
Ei,4
O=g
%~\|d
j)qB; dx
YaWB
a(wD(
MXVMh[>
c"q
wB3kB0
set_Image
<xL[
Z V"
xyw9
e;r0~
+HU\(\8
4W>&
EventHandler
XiwB9C
Q:U>w
J2{,
yb-9C
n*bD
%Mug
?9 P
NK^;|
=FYD
B$;J7
Dx,Ws
IWB9I
1[Qj
!Rfb
g1V
.VkB
sS56.Y
msBZ
PcwB9C
PB~6
4@'L
p^1R
^,pf
;i`X
N*QP
c\lw
%A"
pdJ(N
Q^`e
(8S9y
98? b
F*g
j6?s
Y^p;B
j1JvG
3FA\
ph\
rcP?
$nB9C
/f*[
rRs#Bi
set_Icon
System.ComponentModel
Mj v
M]I$
2kT@{\
X@zy
q{\
aFB:B
IEpr_
6Xin
%Wk/s
?9/L~Wc
jJ-G"M
]Ac(<
^; W
om-l
&Tq`]
lUuZ8
YB9I
3P=E
0~khP
~A X+
NKM7
mOZ=
Dx9;8
pyU`s
e2RR
?9.>
uaFBkC
Vzy{1
8B?e\#
Y.{Y_
b5_@
h| <
"p7s|
HB%8hll
h:wB9Ch0
k+ R
jJ}(7
jN,%
6:=M
4@B
T4IZ\
B/\>
@uXv
LJ`Y,
nwB?\
wB3U
wB3R
*\\/
] AN
wB3]
Gx.0
wB3O
HuI;`Z3
n:}]
wB3I
Pue_
_ 7.
M#]dk
a1 ^A
wB3f
WNrO
|Bg3
a}S?c
GD\D
UfH
]7^)
k}b8>+
wB37
wB30
wB3>
[$#"
;+ax
~uSH
wB3,
Qpt3
get_Controls
tqSLgY? c
2s :
G Bo
jv->
0pW
'fVtj+
S.IP
!yKZ
EF v%
Y<BzR
aD\D
Q/'#
4Tas
=|me
aawBU
N26Or
$Cx6
}hwB8P
~O~R
1/B[S
@` >
-x7Z
Q\p2'T@
$vV">
op_Explicit
oTUJ
@h(5+
_] nK
uaMBeC
o HS
-_]B
F?Cy}\
v&I
'u _:%
3`Qo
0===v
HhOo:X
Ry;j
p(o o
a!BjC
8NEI9
T/Vu
3Z{l
Uvr8.L
[1c
l:C/
LOez
cu_<K
);W]
a'BKC
]7f|
T<q "
JC3
JA+-S
{2 6G
YTrG
,B9B
h!h
OGIp
N \)5
o+ A/ $
O<N/
get_CurrentDomain
aTB9C
Zx!o*
I~!F
cDBvj
sZ*,
c .n8
8*rV
vaTB8C
z_CvA
ToByte
isU(C
m *(
A?H0
C@ 9
wgRJ
c K4
tjQC
#Blob
L}gP
DJTuR
\ vP
'O~G
`/?
r}?/C
4 nU8
-awH/
ui yY
clZb<H
awS;7
awS;0
E-9C
~0e`V
l]sE
B9I[b
,7
n;*P
? G,n X
Qq5_
K Gxdd
awS;k
>&u{
jF!}
zFRi?c5Y
5h\QG
Cig4EZ
B-9C
$tB9C
yP P
x ~r
-\L'UL
DwB?=
]rsj5
'yA*Blw
N7H
0wB3P
i~E>@
[v$1
.9swW a.8l
%!0z
C9/q
wAf |-
g^r9f
$xB9C
lUEl~k
0F1
n36z[
#[i#
}/C?C
xnXWU-
TEwB?C
AvC*C
k 5P
1^Zt
XI %
t==p
p/ZB}
.2zY
0yro
]tBql
g=+#
0H|
ti6'
VHS?
6I[[[
n"G\
OaUk[
lCP1
rO'~
{t_|
{t_}
{t_~
{t_{
_|l?
"?\1
BPg-
{t_\
{t_]
{t_^
<vXs
{t_[
1eo<V{}
V@<X
e9Da
. oy
a}N0c
{*2'g
D-9C
0qBk
P ,K
5*O)
U.}p
9(~Ix[
MuT
?2T9C
%7Z
. oyH
q?f_
+K!_f
,kKP
_LuZ;d
, Zy
Qv* G_
%+ou
z[-K
A{&Y~
J&vx
r?1s
9z/8+
=40/AO
m# ^
?CRx;
,?q?
\v=A3M
N oo
/u9m
a}j C
=-z>
za =?br
s:(6
)pID
MC[4
fIkkk
wu01V
(om9
e+du
t:=q
t:=p
fv-x
_ X#
n-:'6
C]p}
K&J !$y5~
&MzPq
E0-1
; vK
$50Rz,
.cXq
\&-O
;wB30
yt_^a
lbh3
qS R\
W~P.
:Ub7
(pBFZ~b
| <@iU
XjB9
uY <
c?b3
b0AP
P7 ~
9kw;z
@+n/
(]FX
er_o
o|RA
W_8O[n
DBwB9Cx(
I\tOJ
auC2B
?5 ZT
gwB9C
S Z=
*r?}
WrapNonExceptionThrows
j#]']
]= %r
_&4~z
I4|F
MHx
XhR'
I0B9I
agB"C
"!&B
b#QN@P
4`aNh
|>Ro
_teqS
XowB9C
mTc<M
GaU=
GX1
~KPT|
(W=\P
ld -e[-
I+Ht
fw_
@ M@
fh%]
XB?Ec
bw=
Kb{pj
2})0i 1D
;aLT
doJ0F
D]h
[~`8
szq/C
^aXJ
)~;.
9[?@^
`|BGH
"D ~
i~XM
aBB=C
[[m{
a:D:#ylD
bTt)Z^Do
S+Z=
HtBIkv0
akC9C%0
98}%
maDk
9$.C
sZ D
__:#
sL)R
FdBXx
VirtualProtect
ih]Gi
WXz0
{>8g7
'9$
*1Q;
lr1w}
~P;_
System.Diagnostics
p{f),
. +(
oB9G
nw;
TT R
kTC{
jP> `Nm f
moZ7
3xow
q_=U
^z)E
-]nE
^)/=w
;`20
XFHY
$ /]
ZokY
yo,b
4 YW
`c(>\
OGl m
OGl a
-K}
set_Location
auB<C
RUnj
ZSm)U
/+x:29S${v
6`N> ?
{dn
V jIg%
([${
y#u.!
a}n1c
|/l[
8cw f
?:1:
,^\1
c|g/
I8B9I
'Vvk
irb9Q|i
/Y#&
~t_Z
RgZ6
Qx\ pcWW1
ucbQ
m R)
G'0S
$' c
M~d4t|
\X& }
~t_\
`EwB:Cf
xafB
1P"1
) O_
JYT,J
3L#
-pu
{1w|
B}&UW
I1\@H@D|n
?Naft3
/v-g
awB)C
wB?X
c3|Q
*_Z,U
t;=q
y_*9C
wB?@
wB?D
G9.e
:\(]
Tm_$
r Qs
wB?k
[M=L
^gM*}
BqC$0
gWB8C
-*oci
(AjL
:M?A
#GF cwgvMQ
d&c1#
awB1C
,DA+
mDPEB
~E3k
9H8>9V
p%,P
_\r8uMg
V._@
=$.Uv
EO9
=*9e`
bYB"C"3
N8!3
^bSZ
GuidAttribute
*r"w,7
\?4[
Z #`$e/
t^8o
'.,`8-
l3K(
wg8(?
/_5=
@[W/
{iZ
Zdo9
VpT{#
Pi^&
s( P
Q(kM
qS>U
DKi"i
NOH^
cOGlh
b0Gp
UInt32
KuV?
~!YV
7gqj
4jw+
]{Cv6
loZv
uI'C
wzmY#E
t_J!
r7)fC
kwB=A
^{d1^
4]7f
1yZ)
hWK<K
LW<l
W TfW
eRp^
L.~v
h Cm
98,W
^wm
ifGK
k=@_
;bkp
\sP2-b
AssemblyTitleAttribute
5~Nz
=`Js
.LON
oCMW
Np",
`i:U
;\r(
m X:C
add_Load
zL?L
nst
po<o/ni
Bv%k
Q90=
sB8J
4?/dn
2RK0G
<ubp<
wa|v
oP-"Ms
7j<d
<^2t
;m.fw
~xjcC
d_(9C
.&}V
?UDL
Du`-b Sc
[x-O_#
QwB=
$O>
'|~A+
(~uMo
vCuE
=!,G
_QC=
zNYxl7
N-/e
w_>9C
5K=r>
I B9I
c sP
|9r
~NY
~-.~=
8NS!N
iy^ s
N7t<
0@P
xiy6
AG#b)
*0h!
t;=p
SoNM
(_Ai
^F7Q6&
get_Chars
ax,O
yCa
-b2G
reM6L
{ h*G6H
~fZt
Re6v
'xciHc
cGn
y@c|{
Eo]A
yuK!M
Rjrp
ufG-,/0
kWEa@
+??B{r/
o@fv\"
p[a`
T;5d.X
=v5Z
@p_l
@;Js
asKBT
a8BKC
i{a0
r_mG
kd'v)
b`|e
HdgS
&El+
";l
( (3@
wfk_
G>>
MuPq
MhXL
o0:1
s*@w:Jt
S%M$
vy3B
Assembly
=t+
q<s
y85L
GraphicsUnit
@wy9C
6BI=
o#,Ju [
_Jzv
[Wrl5
SuspendLayout
a#\kB
ya%V
O7{7
u%g k!
nwB9C
's8O
yadC9Cjw
JVQNG
PU.F
&^E!
taWBaC
set_AutoScaleMode
11DQD4X
aj/C
wB9C
awS-
awD1k
,fEK
PNq &
Lr4\hY
wB9R
0'W&
'<$5*
WH`Mw
0\28
&"*_
B M"
T0Q'
8|6G
u*1P
a0wA
R>zW
`tJ<c
NmLD
iBT6
W)6/s
b4`9
^t^Z
^t^[
^t^\
^t^]
S];G%
^t^_
z{(,
cD^|
9_K9
p*dc
65XlLl)
2o 3
AHAZf
<B9C
r"Mj
DdR>
gspvX
w^B)
[?_.w^w=
J*fT\
g{ w
a%B8Z
QJ.S<
&;z7
^QlpJ7^
N@@f
O$'M7
<+D
v Yz
ZM,nc
0D';
cjA;^
AssemblyCopyrightAttribute
0q!:
VloQ
n:z>)9
[})B
`E2V
(9$7
xkBi
5U1
H)+u
a:,Q
?Cjy
LVm&[
awB9CsV]
RAe;Y
J:nq
;M'{<
K}*~
&l>.sQ
"M<y
/5qB
@{+^
qwB;C
NAGr
Y$Pg t
C(k8
@$7y"/
76-W
U[Aq
ox,.
uO&s
a=nMk8
ayB0C
P-LB-A
D0cyd
w"L
7%q_
}qke
K]$f
ca \_$
5w4v
vszG
*G[3L)
6KJ
k S!c;
'7 3
awHMM
d7OP
V9Rb
~},~
8GQB
K .]
#4jR
6]LW4
9cX+
OK*8
<S%
45.
}2|[w
s(p%
`f+1B
s\;/W
YOI[-:
vXn O
"wQu
q+#D
W+lD
.cctor
XRFw
wdN(D
!yc.
4-W5
aUB9C
c/`\
cwB9C
yoC>
K#ODQz
zlYl7
u0wD
kFjN
igE<Q
cwB9k
cwB9h
^ R,
$zfm
H9C
Yz"
)pp(
System.Reflection
k1
.z) a(f
$_i'
QYvk
ehKg
nIQ:
W{o)|m
F`Iy;
EakBQC
I_j4
0o8,
89G->
0o8%
[m[y
H6zl
gdN([
qEt{Y
/lY=-
| %0
awz1K
u{i'
fBy
.:V4=>
wSf3
<CQ`O
)b;>kc
@c49C
cSu{#
_7~,
o8'P
%GL2
@K6)
asC!^
VYw{7
^}0i#
N*&rS
0a2,
ComVisibleAttribute
|G]1R
VjtQx
^J2a2{
Tzo\
0~)A
dd,h
j 70
l{)1
-O5t}!
W/og
,fj-M
t$6J
av_<M
B^~d0~
Rr^C(C
^] k
wB9F
H:!
9zy}
mgC8]
`b4?
jqfZ
T+y-
o/|o-
0x*"
28~{h
JY?&
-Lx)
?$IMy6
rBnEhb
%qL c
0x_0
l$$P
=2[O
adb9C
g2,Tbx*S
-U8%Dj
^m_3
=wB9c
3;?5
qgB8C
ynER@
3r X
4MwB9Ch0
BPv{2g
s3\$}
E]O/R+
)`3BzE/1m
en#
QWzbe"F
/.OD.
,gCw
H~;T<
g#.9k
j)qB
]q6V
0Q1
&j\HxJ
nxS:
VX$M
3P>8G8
TK u
G]0v
Yt_^a
q!:P
auN9C
I=y0
0~U`
x\?s
w W7
w W5
k):+
Yh|C
w W*
^;pC
K "+
olm/
H6O;^
U`-]
>0N~
+<#(
.w`o
-FN{
I=&^~
"'w[ _\Y
Me1BxC
4kel
b|zr
I;o]
XrB1_"Y
VyR-
br2<
Z-fuX
::OJ
E:bp
q) pV
#Pf~
r 5pq
awBey
PcLod
912C
~_+r
HK=M
/,^K)
k%^9
WI{o
QvB2C
s: "
q={Z
moHz4
$z ii&N
rpjj;
m9mY
\s0W
qwB9C
ccvX
?u6~
ZYZGy
ISupportInitialize
/I/U
n^j n?~xz
V`wB-C
_inW
W1Vs
Xt_]
W8YW
Gm#d|S+
Xt_[
Xt_Z
XI&
OUCa
CvE1`
x |ik
p;J M
Xt_}
cwBVf
Xt_~
jNjz)0T^
Xt_{
0 Z;R8:M
Ax-!;
iW#u
wGOg
$c 3<
QfaS
I@:T
k/:A
C *`!ZR>
)< E
{0ZoL+[}]
`jL$@
Vm<x8
2wlo
J=[9C
zuw1C
u!5~
WYbV
gbP4A
atC7M
?[(R;
O+ *
h-?p
6_k/
RbF+
-V<l
xD\D
/jAc4
+y~K
W%FwD
,~lT
#.9^
\Io3O
~D2E
VB9I
wB3kX0
awBFC
Pr`C
a6f3
#2JT
fej@
tT`z
awD(c
BC;s
QcT[
qiDL
rqX8
mLT.
g#6P
dWI
0p/&
u..P
0o:#
SoiU
+ 1
ZTC]
`3B3C
W-*0
y~cwh
Xz"S
awV9C
yINSC,
0d=G
%GNG
(KMW
loO8u
V!x
.e9,
)gsD
/pw,6
d(a9
*R~V
Z+%%
AssemblyFileVersionAttribute
GUh"@
_r_D
O;#)
A=E5N
wSdB
x0\-
p!BxOai_f
System.Resources
P 3R
hrb8B
(,Ni\
mh^Q
awU4Cy0
~OQZ
EhyoU-
lRwY
=I"H
aw"V
T49h
[f_;
#c l\
_5lwF(
hJLT
'Kw|
>(+0
o |]
A(U
Icon
W*_4
0c L
+t?h
;n+<7][
6[5%
aw^9C
^t^^
qn3b(
/8w[
qiW@2o
sTN;7
ZQb
a I=
Font
#{r/x
/2kQ:
.~z}
@Bv^2AQ
M`i3+.
/gh\
OS}a8
B%6[9
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
grlv,
A4p?
b'\\
]e~r
^6g2h>
0T>
=fw4b
Rz~W
{0 6g
d#_ i
IkO}
bj/C
Ym2#
{:w.
Mv +'
[v_F
pFy
C to
MQ![
|3vk
-aqB
@(7r
MwdW%
[2L\>
]H-'
]{hw
Y;J
XYkI
0165
g @\
fAB2
System.Drawing
Qs_a
0q%W
w_39C
k}T2c
dyoOi
bP9C
_ b-
g~D6
Ju U>&j(
.]*?
[t^^
Ch7.rN{
3Y%BbV
Iw u
UrF8
g;XB
rv>CuCJ
ava4Cy0
AtU9
'-#t
V;/WM`
?GNQ
\Gs"
okJ1J
p+cw
^WD9V
xawDV
T1Z%
x,+P
q] D
JI+!
rjp{
(1WWx|64a
5Nm|N
'9&f/
s)[b1By
1';
f5kj
y^a(
\*Ab
_g5K
JM[Ao
UXq?X"
[ I9C
DIH?
Ri?c
=v%
a>K4yE
Q{!&
\wU'
EditorBrowsableState
Uyl,
xt_}
xt_|
xt_{
CultureInfo
w%\7
Z$g%
XnC9C
d&>qZ!lA
J. o
xt_^
Iq9>9
xt_[
;j,po
2~ X
IZ jM
wzmX
a}H;0
avB8C
q]z"E
5+kH
i_{x
-].[
T`F9
2*n'
5zHd
f 7P
*D%}
q"*3
W{cm
$<0t
N9ffYI
w0ad
KcKYz
d\Y4&
[:f2N
M$)E
W{>`
aUs#)g
=ZmYB
bIo[
p!U\
R=o{z
O_j*P
&L:6
vwB3P
8Z%Id
{P(
I~-9J
.Dp9k
PictureBox
ITB9I
p1/2
R-;uoU-
K)z9A
4.? -q=
ScO}
Z6T M

r}T*H
x}B
sn_%^
X=qq
ACKni
rc/C
grn _1~
H'u}
/8FI5 ]
4tlJ
'E3[
Xcao
ao]w^
aqd1c4
31|
1Zn2`
UMlN
uN"
j?&k
x||A
`.rsrc
E l+
6fHmw
awB!C
Aw@=c
,eGgwW\
h^n
P6
,C93
7 W$
5jA@r
Bz,v
$+C&
o{{K
vzAl(
@Et;
j&h4
;W &<
MzpQ
4Wi9
*!,{
wL{>R
7_/4
v2.0.50727
e4tP
C}CR50
]7>Kv
CC q
5\0
IwB9Cm0}
)ny~
:,,Gr9<
sd4BJ
|tI!
/gf
:sZ)
0VY*
~1Y<
VFWB
B9IrW
e dV&
p[F;C
x3 ,&0c
R}T)
set_Size
$`8)
B9Irs
YE0@R
kuZV
o7}5hf
uZaY
o;'P
+F }
0xS
66M1
Ei=N
~pk)
ZoT/l
`Q[u{
n*I>
a}Q=R
-Tc+I>
=[;*qO
g[F6
k=(dv
QuB C
qO[-l
Pa0B5C!0
a}Q=c
$9~Y =
PKOD
; _>
H/jx2
t/L-
``<#5fKh
*w<R
N l9C
KiFWq[)
An@!3
fAfk,
P9](D
IrB9E
~a%/
0~jo
Uw<o
YT<z,
st,H
cy^;M
awBYJ
awBYC
n )
`:yf
s1*}
7~j#
Ru\l
t8@n_
J ;
*Na<
|{L%/
set_Font
qnWX,
"dZf
GetHINSTANCE
EtK 8
KOJM
qgw2
O?-[
TGu t
~"/b
.Y5u
WSs-
rP J_L
A}.xi
t<=q
t<=p
AmDG
-RZ*?
{t_^a8 S&
0h0q
-ayB5E
[8=Y>
0g#6
M&5V
+ YI
j #R
y""%
8 [&
REM1)
QvB>C
D,Job
;zSD
LLeD
|TCr
cJAU
Bitmap
^XE>
h;',
}{,c
=tS
N2xSM
a FB
UK<
awB:C
%A,w
J^=|
eiMy
fGy
pdI{
|?wB8,
'eQm{1
R3)3C
Y83w"j
`oo
B^NZ
IWk&
>un Iw9
?_.
{4cf@
IQ}H
EndInit
][H(
awH0,
^o=
bqPm@
:QBDZ
Ruk7
5cM-
/>~c
g%b(
k'Me
TCDL
[1Le
aFI9C
bwB7@
k 6P
!B4\>
' W5
U:wB8P
^evv
,u7f
h(_Q
xzm{rN_0
4zw wR
5~wB;C+/
4tZE
pzXy>6
}}22
MpU@
3ebV
BU]h
=;1:
=tC<h
}5C5
'd+d
X?H
s4)~
u #^
|0{[
-[Y^*
q!I.
n:#P
6l(8
~7^
)B9I
b+*r
TS=c7
cDCe
t7qzP}
Yt^_
Yt^^
"T P
Yt^Z
0^xeD
pMH
!\Mn:
1y JE
H=6 _
X*yvQ%#
YM*t>X
{zy+
/ %B
pjooj
!aNB5CQ0
R(Aa
mtX[6
x2z"C
adN9C
hfl
r&Q&
aSr\&
.q|s
z8m]
6gtL_N8
.'IJ
Y(5.B
@+_c
@'*}
awB5C
a~B8C
"^g<
B\*?
U> D
`(o !
v9 `
`{29C
_w#j
nu n
&zQX
}}uyL
[ccCt
p. P
Z[P{
XejP
2x&6
-Pm/
}w ^
;^C+
w<4w
0V05
8{SQp+
avC+
&aN}
+ $`K%f`
x5$(Tp
Hge}
9O G
w;3R
=d.o
;n5(Z
?y d
bWB3E
XC*.
a}Q?R
tg<uvI
!]DWQ
(qJ!
*i';
G4MmQ
Hf5
x>^,
,5-F@
aqB#C
[TeIE7w
0n,
n *e
$H$K
t{r>FTE_
"]q'
$r7yE
c?n{
}~_qmt
^ .9
1?K.
$:Oj
XBg$
+g Y$
xb $.X
vZ{J
HG |
q^H
RuntimeFieldHandle
A5
kD$;{
kc .o
dwC7^
$BLJ
AwB.D
iYIj
mscorlib
%OB\n.
9~zb
P)q7
34H&EY
J*30
6 +
23XMMlR
uOc
z$4g
GaI%
rp]+
[Td(
ugPD
a tM
Xr?iw
OT(0
B'+^
mc_~s
N=Q6
a0'M
KwHC
AkQc
SFi
~E]{
J098
VnMt
wB8k
G-9C
vY(z
Lr!U
rX!3N
3 LV
R-_yt
cwB9[
iwF;M
Po>H
b<>B
P9p}
awB8C
awB8B
8wB3X
awB8S
o\4XC
u==q
u==p
Y>%
m06 #
3uj{
MX$5
Z0~v
w&X7
=K^{
-OXj9
S-Xm
T 'X(
]%G gH
7Z ^NVx
0R9
fX&(
qoW-l
] Vj
gz`Y9LY
sw2=
B;5t
V@P1
0i3Lq
!R]Q
h~+*
n25T
Ogy~.
Texzy
r}]&
iXZ4
jY~N
*h/7
:Qx{^v !
xawD
:T$,K
atC9C
7 7/5
1Ye%n
=^ I
a^B,C
<iW
uO \
Zl? *
zw"K
V V7M
EWB$
kw-,
NF},
0r'@
` Er
^y%\#
]#2U
<1vM
q)x N
veP~
DBT)
.wB3,a0
90(e
x;?Z
[t_^a
rup)u
-*mc
2:$<ij
_cS!
uN&$
A^(vD
0l;C
- i#Z
u-m^{
)H1
awr9C
Uuin
`g1x
X,3 :
J0x
E^Ok
qHt XG*8
d>Bo
Convert
uB}<
Lu O|
#XC;
--DhC
mIy(
Tg t5
r[n+/]|
c?SW
yZPF:f
%}G0
0f1N
sH8Q
u9"~
$rkG
{5 6
awA:C
z(i!]c:)
jPpU7EN
73kV
3HUZ
MEY
ay$B*C
)|@JS
0)C'
as0bB
{;[l
JuUT
d>`
*Q|!
x@9p
x*"P
^a4J
zTQ7
`xu $
kernel32.dll
-aqB* #0
m 7]
JPwu
:LCL
4l k
efG(J
GetTypeFromHandle
E69y'
Qs::
xVn.
{4o>
W~CQt
3=T4g
d4pP
C9Ct1
DaS=
JMD:0
4 -Mc%
y|z_x
*rZc
97}M
}%</
0t&&
cv"D
nVVE
$^[Cg+
-FV(
-!=?
&q (
9(=F
tkN'
}q gV
0#ue
:7F$!
YUlzx
b Xn
$n \v
4x<1
_rmkq0
ZJ_j
:r/Y7&
pAy
Feqyba.Resources.resources
w0#
?jWgT
ia-Q#
_>+n
kT(dW
+dEG
wWOL
C C
i,r;N
add_FormClosed
)n-n
cwB.
PJkg
0`$7
v/oo?~
WH9
aw!8C
<gd^
r'!
Hw\R:
8*)j
AW~X0
System.Globalization
C9j\
V.+u
ku>in2
e_99C
STAThreadAttribute
xt_^a47U7
|(Ah
e~9/C
c4m
`3?7J*[
& \X
W'c4t
4-]&
awB>B
OE[}
i
{rh
`,sk
mXn]?B9C
hu~)ls'd~
pewB9C
w@)qc
lywU
s%yMsr
aw&?C
-E8UX`
/49h
Bf'u
awSK0
U|R=
[Z';
H2\[
%/)@
IhkP
DnP,
]d mG
~NM+
B1-8
z"DN
9c3B3C
58 2U&
get_EntryPoint
V6m\o
0e$<
(6,qdl
<mjp
uoV-{}
{Rt{
iO82;e&
]Qf
SE)M~l
pz])
@D+>
IKK {
"= H
v7yI
g't#
`N;T
4Myv
y("5
OqC9C
P0f@
Z Nj
E |W
BpxK
kG.A
+|'#
TIo0
G]X^
E~~~
bRY;
isMI
ComponentResourceManager
p`Yh
.a]B8S
z (Y
q7 *
gBRr
hEEG
ro%v
;^/
CA>
RrpS0c
Nnxk
2P=:Nq:O
[|K6u
?n8@
Y^|R_
rC}Y
{#Y&"
6rY7F
y'f/
gwPr
C5c:
V`wB8C
w} E
![f\)=
sB9c}
T[O
X9s S
asjmC
upk|
EA[w 3
WwB=A
0T6!
:K?&
#a!{
K=l%>
B2CB0
/x1$
a7~m
4-XN9
[Kx^
Ok'e
j,I8
aNB#C
6v/>
6<r
>Roy;
[ _x
C1o9
atB1C
[E=q$
A(!'
0"~c
:(R4d
S3<'
u<=p
u<=q
A9e]A*R
DI<5M
gHrnh
%ii$
get_Length
<KK
VF i*p
=T)~
=B9I
S">6mR
2!{:rx
nlK\i
9}[7=
4qqi
0rS
avB1CV>
;#lXY
hwB8
e{A&05
i,3[
b_ g
&s<u
_t_{
_t_}
_t_~
W|.\
xm^t,xc
Xt^_
bc *
IuB9E
p?Mx{[
a"B9C
_t_Z
_t_[
_t_]
_t_^
sjZ1S
On]{
N+,N
l ?`
0j$S
lGkv
5#J&
0{v/a'
k Ob
K6j"
voZG
6u<H\l
T|m5
u6I*K
8wB3kg0
1eBg
awH1c<q
W! {
QG0bU|
/ANj
Z*Q
kzS=c
ty%C?C
P"jQ
y Rk
/Pin
/iSd
MWSkA
I B9E
G|j
Y|AU
\/?G
F_(x
}3q`
jaWM
R'iS
QK2Xa
h@k
.z.@_
@pP9
awB9CsZa
N,'$uDO
awB<C
"O^}
Awy9C
oO{S
Vd#T
#?SG
awH.k
CsB9
Data
S-S;g
,_Ez
Rey8~
- AL
iwC+
%7_]7
#Y3V
pHYs
v(ng
rC2H
A+$}
HrXb
5.m
qhjv
ee_!K
K{wf
bwB9C
NF,G
Sh5*
Rzc,
awS;k 0
[o}>
\5w@5
$/?s
a.\b
awG9C
R[l&
( Ro
xN=fM
hR!a
yt^]
yt^\
yt^_
yt^[
yt^Z
OTR7
f i
M.w*
J:mT/?
PPnY+
Byte
dbMs
bY.v
k 8P
\^>b
L,8Dq
`t,x}
0a rW
0l'T
[?T4
b:ZI
p_Z![
1z^ej
OJIY
<\sY
!&s2h
)eGS
$jr%
67)}2
hHh
aw{9C
T,[]
s bj
5I&4
/OE;FAJ
K?OP
C;&9
2 ?U!^
de s9
2i/Mt
{J$:
ea@~
a}S'kM0
oqj?="?i
aV\.T
BlC 0
h[8R
xg$k
x*U
une58
;TFVF>
flcS
{Gt8
qN\:T
.8~>
ave;C~0
'~_)
1Yx:
\5AeBr
C 0
ewB>C
i$*& &hu~O
x!nFUn
p"tw6 >
Frw9
E_r#m
dUnev
G.Cao
X? e<(?
awB9=y0
!1! L.+
X\7z
EIb}
~Nl"
M0R>
cZe9b
j I2
Zt_^
Zt_]
Zt_[
Zt_Z
c^5j
1F+g
H0es
u =
f}L7Q
Zt_}
Zt_|
Zt_{
dcvqRqT}Gm
!][DA
k{S>cR
lu/7
D`Wh
-~~BGL
pN)izaph
l0J6
r1OjT<
[wB?C
FontStyle
xisiw
'oQQ
TERm8
O6#"
W{RHm
;tnf
WynC
KB el
nt,x}
+o{@
_a^B9C
Dom+
ug$]
bCWrYD<
fxPD
z=FG
HoC!|
G7?H
z`|y!
Es!-
TCYs
t7*o?r
|!H{
GDx
YHB
J)qB6 Dx
mZPk
tuz87
U&nF[c
~}\&
2lw 3
Gj+(
"gLs+
~^2HY
sWWw
=omO`7o[
J$Q"
BTzV2u
+M 3C
8A\6|
CamB8Z
iCVj6'
`#h"s
a80P
d>knT
:{ua
Bc fHW
W.h5
Rf4G
k #P
pBIkv0
P6 o
BZ'i
!wU>0
*8=FX
{G+8R
/o3D
o m.
Xgwf
ro^T
[ v
+\fF!
p-;P
* J6z)
"k?#
awSGk
/GVd
u| j
ImhV
-.bW
;qKNBw
<c|
Ttl=
hHMu
AB9G
1/#1
=K/f
D}^g
hC(X:
AutoScaleMode
uzS
fm%J
!|*%0>
@B9I
IaB9E
IaB9I
~n"
d32UDB
G:E[
zz C
awG;C
~h|<
5_(
)}2Q
>0gR
-0aO
a61@-
%:;S
pcwB9C
}Ds
uUn
_5-lI
1usJ
Mky-
{Z~y
^PNv
k >P
b)b%
31\7|H ;
&~E3
SKXW
[?j<
HbYA
^_$6p
Cr,b
BABt
ab<N
lO|rSK
d6,!
K5=Nd
4"|5J|
jHB9C
D%b<s
-:bp<
=o !
p_jz
|rJ1A
{d (
mi~+
*UKX
2n
aWb9C
Ht:o
wb_
Kg!}
luL%K
9({5
awB8C'
}Cs1
{aLBvC
q 'Q
0PHo_
[M9/z
)):5
g[Ln-
oJB9B
zwr.s
@Gdm
'mBonw;
!oc_Y
k.>E
2WHR@
h9pV6
awCV
yASSJ_
h4 A
zt_|
zt_{
j@, i
tgZ*
yx[1
e~n
;F=#
m] S
:-$!
L +C
zt_^
zt_\
zt_Z
N./d
+C9C
M`pP
fflC]
UH@]
:<3>)a
]q ?
`"Ofw:=
0eCO
lKs?
Z4,h
dhQb
pT:P
569<
#>qR
rW8'
~q%P
BSJB
A'7[/
%H [
}'Io
fiaW
A: j
co[V
t-`F
xY A
IntPtr
N/;N~^6
KwB9A
MZZt
rs].
_etF
I>3^
?`w2
735|
_ *!)
@B"E
TC[X
M )A
:/ &
"8edr
:5}}
.=9.
'5jx
,Z^%
~gj e
7FDT
Fdz:p
br t
a-B7C
zb /
b__9C
Sc@
p;)FD
WBLs
k `gm
qv#f
q)*pwvq
@?U~Y
oB9G~;
CI6O;>L
[:O=[
7M+^m
xn} '
V.O3C0
>t [
zjI?
hQO#
f=V[F
0~k`_S
3@y[]
`.gF!
8h:
%`FH
j51^_
r2}e
g=O]
]XgG
e H `
3Q}!
em:S
\<)E
p\^se;
pS]E
X-bQ
^ED|
Hq|b/|U
WIIv
arB9C
^4 ;G
KDcGi,
!y$
bqrb
~t^]
~t^_
!: =@
z]sk
awB0C
w.`\
a BgG
awH*G
awH*F
awH*J
!Bwi
XEC9C
)]K?S1
YcG9C
]Cb~
c27Y
G;O{
l'SWX
-ezU
eT;R
7.)
Ee0
MgJ
djG$F
.G~zE
A -+(
_\j#
lZT/>
w1\b
rz~Y
IEND
ywB9
!P`o
Tj{$
sNh&*
!Fy
04#[7
kS^(
C9CO0
8# ?=_
yag&F
f2QP
Ri?c5
uB9c:
oU\~
gcx-C
Ap-
]XJ(
Us .
a8zd
j)bW
o4Y8
CnG'}
*R7l
M\uW&
K`G]er
7<",R8
6mJN
)qdk
F% ~5d"
p-%u
"l {]
_ LP
-WPE
.mEy
I'}p
CompilerGeneratedAttribute
dwB9C
/Z=E8n
/SU~
4qXD
KKRr
3g"#0
,j'4
{Gx
uX\[
V;;3SN
=`8 .V
`tBn
0Soc
WYv4
0~T;
qRDw
N.M)
t==q
) c#
)t4:$
|rL6QJ
!:I:
9|E?
G L8T
[~-"
~.rl%
C[0G
@kF9B
$B9I
j#<P
(emr
alj`C
?xA4
Oku e
_}N %
i*PN
ewB:C
_N.v
y!u
kHX3
3'7W)W9
0\ t
(/,Y.
t~!^
I_Q+R
@vX>
_&Up
," CVX
2SZ_
7v!x
%uE_
LawB9C
pawH*W
Z2{`&
v)e0w
CMAi
rshnM
F7$+
?$@}
pawH*J
j" P
String
\nx[%
PpI
o3tQ
)qBc [4
fVmI
InitializeArray
Qbw2
h\h
2|By
a-
/|F4sY$
Z@k6
w9f`
awA]C
,KVpK"
0)[j
-K<G
EditorBrowsableAttribute
d,3R
*M?'
A|[%
;'u?
ewB9
Jqbl
Sq5$
zlsn!
\I
qzrf
a'+A&
VMz/+8
VAv}
UY'X~
7tGM
g\pDP
TfY^
Load
mB9E
d=aeT
Sm`>)n
kwB==
BJAzj
aqj3C
k{b(DR
Z(o !
c*7<
(*n5;
T0kf
(?tCy
iiF3E
D"`mYErt
IJa]
j<:~k
6Y9T
S_Z
0*1#
affE@
! Q3q
SZ<v
njc|Zr$e
k}tQ
SIli
w f9C
6[GX
eMRt]
RuntimeHelpers
_\|1x;
pob].
y/qB
M+5__/
:;7%
Ur@,D
1y:D
FZ3K
aS)uK
(,sv
^o=E[u
:%!rW"
Object
wB}]&
:m4B
w\JU
XqwB9C
3System.Resources.Tools.StronglyTypedResourceBuilder
y/ka#,
]1&(a
~Z^Xz
+H(\
z K.1#
L'?oK
22LK/
k4YTjX
vaQ7O
o>)P
{SqJ
-B&C;
Xt_\
{V3\1
awB6B
}|kt
.!q\
$e41b46f2-ccc9-4edc-8882-6be8407fe862
?wnuSM
o zGu
,'CVi
0Z?0
@C %
I g_
VHZi
B;V
-%ze
[Re[.
/,[*
ajML
5nfO
6w/#
1 %cD
97UAa
GvVv}z
Z-Uw
v3Sv=A
%h
wYfr
aqS?c<
u;=q
u;=p
[t^_
(+^8
[t^]
[t^\
[t^[
[t^Z
SgR
Xt_|
*KOq[
~<8^
hcM6
aqh*s
!b4')
lxe
)&Tv
+nB<I
L&R=
"b{)
466U
-WR,
e;|Pa
zg`Z]
b~ X
VvDi
V&.h
EawB
j i
h h
)VzP3
aTBtC
}tE>#&^8
z;-}}Y
j- P
9SBj)
Qgs1
n e8
nx,H
Yo^ p
NawB<C
/b$
x9c
!dGCy
a6~;)
;@m5
ffDVr
2FR~_
avQ*U
h[k
TLwS_
|EXK
P)aN
Gs1z
.zYf
k1Y]
cPNb
B?CAe
rmn^B
:7l#
GnM,
O(o !
'f)U
e+oK
N&$#
V:e5
a}8([
wy i
U+o5Z
$U *dA
tb9B
;&3v
q8eM3
kG} }_?
kn%_
#ZM`.O
]\x&
{9lK-
f,G[
ewB8C
VKQ-!
d_a9C
NY`e6c;W
{P7Uu
6Ny<
j%PU
Ok/j
qS7{
,YtO
Ms<vB
-cV[r
B9WS
/^..o
n_BOq
o8&P
v9"CZC_@t
l ea
24C>
Fs/6%
s@=G
v]B"s
psj@C
|.X4
)Dt*
KEop#]
%R*U
7e A>
X2v@
)Tzw
f SV 2P
u'h&
a8BwC
Ddb&O
?V /
Tt=!5r
-{jc
/:M=
MSQo
V dm
US-j
<c<Xq"
f]e
rrS?c
,7}w?
fwC+Z
ava2Cg0
X)hb< IjxI
'6KC
atB9C
U/|
tyF9
TJ ,
o0 ,
4eKgF
7 2H
FN6~
l~!L
e+o/u
#;OJ
}d.g
6p/ |
NipJV
0,AVl
K2m'n
rU_;
MG'\pE
* >rX
a[FpCU0]
*:K'[
System.Runtime.InteropServices
1B9E
5Kt2cr
dk`
SZ>{
>-LY
,i=f
System.Runtime.CompilerServices
xW^y
N,^u
h=*<
Yz;]
k;_~y
~`p[
{Rh2
1Rf/
cE?4
b3B3C
ajC9Cy
hlh
}_;o
`f+
qZ o
awY=C
0}=D
D+fQO
O;Cz
System.Windows.Forms
a}h*s
a'0V
s W0
d4M/9C
~t_^
atFxC
mwB C
OzAy
6`TE
~97e!
;A A
C|@_
D@Q)0
][^w
X{lCm
u8$G
,~z
w\y
p]c0
\'g-@
mv'[
93ws
d1IP
DU5\
ps^ak}0
q~eR
Mc8 E
}>yk
/ncA
YLhm
uB9c
xH(n
i[!S?
awO1C
CwB=C
U\K"
^SJv
< o[
?C*y
N4zw
GH~
2Toi
UI8a
TRW=
r{S!c
5[x6E
!gk0<
^!2
}Q<^S
7zcu
D`:2
J MG.
aRB9C
@m~0v
4[>f
a1+U&
g}D6
cRM :
h&$P
#tOO-A
j3 4
~k /
in>H|
?\'n
^-m7M<@
K@vY6 x
=;jR
q!5P
^g/z{b:pZ
w|*c
WjoM~C6
(Mi6
get_Module
vy3B3C
TwB3R
Gs7P
RTr\:
R#hc
msn c
avBAC20k
nmt,
irb;B
U0Q
xhwB9C
K),P
&!iG.
KwB"s
d ~jTLk
0i6q
Rv&Y1Qqx
Um]+
[IB9C
yt_|
&>njM
:B9I
]o \
oH~,hy
D9YN
7e?~R
C"TY
g}<L
FKU6
o"gO
/zj_
Xslh
@B \
feQmr
@sO
P] q
)T)<
nr(\
7H8d
,N4 w
eS250
3Z#Q
:[zzn
aw$<C
System.Drawing.Bitmap
z07^
i`i:U
aOU8C
[T>;
:s%m
U;gE
& *[
}!9j
O3yJ
5Vgul
YJJ3
s4lg_
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven04b_64 Seven04b_64 VirtualBox 2018-06-15 01:52:53 2018-06-15 01:55:45 172

3 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven04b_64 Seven04b_64 VirtualBox 2018-06-15 01:52:53 2018-06-15 01:55:45 172

6 Summary items with data

Files

C:\Users\Seven01\AppData\Local\Temp
C:\Users
C:\Users\Seven01
C:\Users\Seven01\AppData
C:\Users\Seven01\AppData\Local
C:\Users\Seven01\AppData\Local\Temp\0vfsn7d.exe
C:\Users\Seven01\AppData\Roaming\google.exe

Read Files

C:\Users\Seven01\AppData\Local\Temp\0vfsn7d.exe

Write Files

C:\Users\Seven01\AppData\Roaming\google.exe

Delete Files

Nothing to display

Keys

HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DisableUNCCheck
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\EnableExtensions
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DelayedExpansion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DefaultColor
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\CompletionChar
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\PathCompletionChar
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\AutoRun
HKEY_CURRENT_USER\Software\Microsoft\Command Processor
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DisableUNCCheck
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\EnableExtensions
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DelayedExpansion
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DefaultColor
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\CompletionChar
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\PathCompletionChar
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\AutoRun
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale\Alternate Sorts
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Language Groups
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

Read Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DisableUNCCheck
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\EnableExtensions
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DelayedExpansion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DefaultColor
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\CompletionChar
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\PathCompletionChar
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\AutoRun
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DisableUNCCheck
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\EnableExtensions
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DelayedExpansion
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DefaultColor
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\CompletionChar
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\PathCompletionChar
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\AutoRun
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

Write Keys

Nothing to display

Delete Keys

Nothing to display

Mutexes

Resolved APIs

kernel32.dll.SetThreadUILanguage
kernel32.dll.CopyFileExW
kernel32.dll.IsDebuggerPresent
kernel32.dll.SetConsoleInputExeNameW

Execute Commands

Nothing to display

Started Services

Nothing to display

Created Services

Nothing to display

#infosec #automation

TheSystem Itself @ 2018-06-15 01:57:19

Detected family: #Malicious

TheSystem Itself @ 2018-06-15 02:02:02