t.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 10/57 Related 2164
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 121.44 KB (124352 bytes)
Compile time: 2016-12-28 12:27:32
MD5: 5fc10a5e31ac1e339c92d397ec4f5e88
SHA1: cc74a26a10477a340473b3a7d6d95446bdae4b95
SHA256: 3c141f336d29ac664d0ca023ba37cb77b1b2a412b0271a85cef16645235b91c9
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 4 import resource relocation security
First submission: 2016-12-28 15:12:02
Last submission: 2016-12-28 15:12:02
Filename detected: - t.exe (1)
URL file hosting
hXXp://183.81.171.242/t.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2016-12-28 13:44:29 [10/57] VirusTotal
PE Sections 1 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0x12744 75776 11bc752a7b31eea92ba07c18b0c212ae 3c7f91be33cbb64a6ef8865cf0a049aa5f3b6765
.rsrc 0x16000 0xa2e0 41984 0b367c4751cd4f883ad84091b055e441 03144890f2e9c487bb49c790af0d88f85fa9cecf
.reloc 0x22000 0xc 512 01ba547edb822b503efa33c0a4074158 9972b3fe216527345e2f670c637c946bef6a0d1d
PE Resources
Name Offset Size Language Sublanguage Data
RT_ICON 0x1fba8 1128 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_GROUP_ICON 0x20010 132 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_VERSION 0x20094 588 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright:
Assembly Version: 0.0.0.0
InternalName: oNIAggWz.exe
FileVersion: 0.0.0.0
FileDescription:
Translation: 0x0000 0x04b0
OriginalFilename: oNIAggWz.exe
ProductVersion: 0.0.0.0
XOR
8 63243
1 63243
2 63243
4 63243
Signature
MD5: 03b475da5d81cdd237d5decfad302750
SHA1: 9cb18b561a15854ad09f9c574f7b986d750e0f1f
Block Size: 5568
Virtual Address: 118784
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: Library
mscoree.dll
IP Found
0.0.0.2
URL(s)
http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0:
http://ocsp.digicert.com0C
http://ocsp.digicert.com0A
http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0
http://cacerts.digicert.com/DigiCertAssuredIDCA-1.crt0
http://crl4.digicert.com/DigiCertAssuredIDCA-1.crl0w
http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
https://www.digicert.com/CPS0
http://www.digicert.com/ssl-cps-repository.htm0
http://crl3.digicert.com/DigiCertAssuredIDCA-1.crl08
LegalCopyright
Assembly Version
InternalName
/-P?pR
FileVersion
VS_VERSION_INFO
VarFileInfo
FileDescription
NMzmlylhjg
ProductVersion
RAny use of this Certificate constitutes acceptance of the DigiCert CP/CPS and the Relying Party Agreement which limit liability and are incorporated herein by reference
/ P6pL
000004b0
OriginalFilename
StringFileInfo
Translation
0.0.0.0
oNIAggWz.exe
,/KPip
E(L/
=\rq|
~:\R
Mvqi
Mknnl{mmKps
D6Q3j
j*7c
R:]?f2t
^Q;f
T?Q>T:\~
B3Q!(
\6Do
nlq}N{lmRQ]
K:X(L
_-L=&
krG
jr-
T?v`
>T0r
T<[9`
8_6c
&0.0.0.
'*kG
B j
.cctor
y{z]qz{M{}klwjg_jjlw|kj{
U{gm
:\KQ~
Object
-3C4
kA\~
y{jAS{mm
) w#a
mscorlib
Au M
rMgmj{s0L{mqkl}{m0L{mqkl}{L{
_pjw
DigiCert Assured ID Root CA0
<&;5(\
.F Pf
*Q2k?
E-J
H o
sVOgv%
1 0
i%zd
}---/.
8~=r
,B$T
{sHQ_g]PorS[wN|[[iyVu|yf0l{mqkl}{m
Y{p{l
-N64
{rrx
K-I;
^r
zQprg]qrr{}jwqp\
N!D^*g&@
Y{jS
;D"q?[
^s6y5D
|r{_jjlw|kj{
UnverifiableCodeAttribute
~?Q~
Lkpjws{[phwlqps{pj
jwqpXr
C3N>+
s!|K
"$h)O%
'W3a
m/]6e
kA\<
LifiSyMYJB1
g#l
ZN$G
U$)]
'p7s\
|H::??SSTTffhsuw
Y{j[f{}kjwpy_mm{s|rg
8\6B
d=r>
T>T~
M(n;.
J /1
O>\,H
z:r?N
0e1 0
_?Q O
Uwrr
u "^ C
" ,8
_>T?Q
z;6R
\3~?
a/^G
sA]qsnkj{lQ|t{}jNlqhwz{l
k H$~
)n!K
MethodInfo
7z6G%U1c4S6E
7E-~
t!g#F
c/>@
Y{jQ|t{}jH
5http://cacerts.digicert.com/DigiCertAssuredIDCA-1.crt0
w0L~
p6-//68CDRR\IV\yxzyqtv
Mgmj{s0L{xr{}j
>r<XMR
y$Ba
zrrw
Swm}
0X?\
Z>TTb
Jgn{
V&D4
w,o H/
`,I0
Iqi(*Y{jJvl{
Assembly
RuntimeTypeHandle
}'s5
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
SgYlqkn]qrr{}jwqp_jjlw|kj{
e^5
T O T
Y%wM
L*y7SR
wr_
ypqmjw}m
$w9]
\9qa
sxxxx8
:=rG
4/1w
MjzWpnkj
^5&B1|
>T O<
6[z
l2g
]!{T
j%isH
OA\F
y{jARq}
Y{jJgn{
j^X<
z~>X
f,c
OA\~
]qsnwr{lY{p{l
T>T
4s3R
/]<M
"q?[
TA\~
Lkpjws{Jgn{V
9L G
\:\~
lzSqzkr{_jjlw|kj{
^0f3
L "7
Mgmj{s0]qsnqp{pjSqz{r0Z{mwyp
_7P V
Z{]lgnj
_KQ~
<+--///.#(]`e
U/z9v
O>\,
sAJvl{
|kxx{l
=Mjlwpym
pwx{mjL{mqkl}{P
O T T?Q
bn`B5
O(N=p1[
Aj2f
?q:H
r_rrq}[f
s?N4
y/I0b
@ }
y~*g
xUG-
WmPkrrQl[snjg
v0t08
YU.f&:
F8zo
zzl{mm
Mjlwpy
N>T(_
d n^7
R n*b
%k5I-W
H/J9t5S
pzr{m
M{jH
gqkjUwpz
n qV
2e*f
3Vm8
Mgmj{s0Zw
~A\ O~
x!u3l
+l#o
M{j_jjlw|kj{m
j,Is
l\-N>Z
`bbb]I]]\\
Smy\qfL{mkrj
Sg0]qsnkj{l
!.V
Mgmj{s0]qrr{}jwqpm
7/66688:=??
k w;{
9y{88x
f+j _
-O?a
3;;w
eD0M
iW!]4/
xpU1+
0}}jql
oNIAggWz.exe
I/|2V,y:u
_>TD<
y{jAMwd{
_A\~
h;t
9$b-a
_7P+
$Bffist3
+p0|
+J16
a8l*n L
Qn{l
S9J
}_)J
15Vu
$c$~FO
LifiSyMYJB4LifiSyMYJB5
D nD
yb5x
r#z&i
Mgmj{s0Iwpzqim0Xqlsm
z0x0:
vGsQmYBxLCFx4vGsQmYBxLCFx5
u6b$
D&VB
pg O<
CN!:v
o{{IYH[
ResourceManager
& 3O
] ?B
>T:\
/36L&GPp
[=nv
L{ywmjlg
};_ "R
R?n
\0+
LifiSyMYJB6LifiSyMYJB7
B'B3
Vb-{
B2A
Mgmj{s0L{mqkl}{m
G;-+"M
ljknWpxq
H.ey
B D2P D
KWwW
-~61
p}{AA Zwmnqm{AAWpmj
Lqkpzm
System.Security
vNlq}{mm
N)L?
]6U !t
O>T
jZlER)
z?3>
[ ~~
G/-/66CPRFEHBBTUlzzyuv
4?SSTTfi8
y{zJgn{
!#':13?^^zps
S.5Q
sOA!;IRo
@#Qe
MjzQkjnkj
|"Kh
AppDomain
2http://crl4.digicert.com/DigiCertAssuredIDCA-1.crl0w
[rJ~]>k
":h?
c OJ}
$@:o
\ O>T
)3~e
}qss
\pgKQ?QKQ~
Nlq}{mmIwpzqiMjgr{
~ T~
#<>@SUi~
get_CurrentDomain
oNIAggWz
wpmj
>T>T~
;n-b
Wpj-,
STAThreadAttribute
4g&k
mscoree.dll
!This program cannot be run in DOS mode. $
PADPADP
]qsnwr
JqWpj/(
| =o4
?,bO
System.Reflection
g'@;
wmIwl{Mv
jw|wrwjg_jjlw|kj{
m{jAH{l|
Mgmj{s0]qz{Zqs0]qsnwr{l
;iFT|RS\_Cp
x\4W
b(o M
X8TVou
[=n D>k(gs
0}jql
_>T~
};688:??9!CTffsstw
lw!c
.I+r
|gj{mIlwjj{p
Jlws
Y{j]kll{pjNlq}{mm
pzqs
Y{j]kll{pj
N(z6a *H
>+-/25QQUkly
Wpj{l
?Q T~
_mm{s|rg
d(Y=
I-t
OA\>T<
.<k7
iTMZ!
}))# %57QUk
L{m{lh{z,
p1CJ*>o
`9 K
Lkpjws{V{rn{lm
_ O>T
~>T~
.http://www.digicert.com/ssl-cps-repository.htm0
\ T>T
:o8_:
y{jAI{|M{lhw}{m
=p._x
M*O<q
X##)+%;N^^zq44
!)o+
y i.
_Y7J
w`[8Z&j
?dRWOU
PjKps
mrw
J G,H
w.=W
~9z`g+
N T>T
i 'u3w
h./O
q>T0S
"Sqzkr{
4r=q
\}"e^
$h;2
k?Q<
cO<e1
Zwmnqm{
aJi)
#Blob
m2"R
}qsn
Vwz{Sqzkr{P
}(h .w M
Y{j[phwlqps{pjH
$,u+1
dPP[(M`{
}(;;S4
arQ
Z , "Q
t(v9a
sA_nnQ|t{}jNlqhwz{l
Program
^i | f
7<L(
e#m^1
L{mks{Jvl{
h)X:
a/D E
R2g$k
Nlq}{mm
j{Nlq}{mm
@" G
e1wh
1h<
?w+4c
_pgl
Sg0Km{l
_8].c"D
>T>T
W]6p
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
[*H8,
1i.j
p6//60/
A%
K,I:
3@;
7-----
E$^ (
~ T?Q
L%C^
la7R
z:H8
x+-I
NMzmlylhjg.resources
?Q?Q~
TKQ
Nlq}{mmV
(;F5
mw}0_nnrw}
$@?Y
[phwlqps{pj
g(V5I
:\A\~
RT i/2
L{ywmjlgU{g
j{s0Lkpjws{0]qsnwr{lM{lhw}{m
m<h 8H
=8u4
>f!b
IY-U
cpg~
NA\KQ
~5wK
lNWZ
F'g(@'
cKQ T~
vGsQmYBxLCFx2vGsQmYBxLCFx3
e Tpg:\
l'
Xwr{
~{p;---/<P5>9ERRHBUlzymq
}(k],
,h
=k~v|DmvEUp
Nn;ou}$
6RTVS
8$`&b
j$@:o
4http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0:
IwpzqimWz{pjwjg
2YX784W\-Vy
m{lhw}{
WmWpLqr{
E5T%E
KQ T>T
z:H|
Lkpjws{]qsn
0X?]
G,e$B
1g?B
\kxx{l
}0qE
S^<L(zV8
W=[6
9{{yy
V1T'j+M
U*O<q0
0T.Z
v2.0.50727
Z>T:\<
={5v
SkipVerification
IwpzqimNlwp}wn
8;tg
x7{ h
?Jvwm>nlqyl
{ DK
nVjjn]rw{pjNlqjq}qr ]l{
m{_zzl{mm
String
b8m+|
e O O>T
Oa|jiGW
],N>Z
141022000000Z
>M,r&`$A3M
Y{jWpmj
l=k 8
|{p6---/<PD99FRHSSTTlzno5L]
<N({
{*vo
~IHBSSTTfoq
W3Wz
Progyma1
y{jAZ{x
6k=x=
]qsn
l/ b
93xx
g-$=o8
Skj{f
d*N48
o s
z_rr\gj{m
_ O:\
Skjf
jwqpm_jjlw|kj{
, ]:
L l<
w 'V|
{={e
A\:\~
Y{j[pj
}p*M
]qs|wp{
A_ E^
M\ymgt
O M(o
u{lp{r-,0zrr
\wj]qph{lj{l
T>T~
DigiCert Timestamp Responder0
]qph{lmwqpm
c%k
E4V&)
nPqp[f}{njwqpJvlqim
m{AAWpmj
|kxx{lMwd{
d7w8F
www.digicert.com1!0
!>}e
Z:QB
get_EntryPoint
)]8j=
=g<G
J;Y)M
jqlm
Z^7b2
h,0.0+.),)
Iwpzqim\kwrjWpLqr{
0b1 0
e>T O
E![
s9s{
_Y6F"pN!D7z
?Q>T
{@88:??SSTTffhstv
(t98I
_ T>T
`r5
Mgmj{s0Jvl{
(J"&`4P
7kxY
}qpj
`-B"
Gy'f
M)S3A
,#3T
o'SM
J_LJKNAWPXQLS_JWQP
Mwd{
LkpN[
DigiCert Inc1
rNlqj{}j[f
|0A#U1c4
$>HIVVlkoA
.text
List`1
7--/66088=>C
e;H-
S6s=R
^:VZN
!V,y
Invoke
z{l2>sm}qlrw|2>H{lmwqp#*0.0.0.2>]krjkl{#p{kjl
G C
wmIN[
!X F
UZ5#n
GetObject
|r{N
S!CV
Smy\qfMjgr{
s*~8|
TKQ>T
^/M=Y \;~ B
R>T TF
DigiCert1%0#
pg?Q>T
Sg0_nnrw}
@'B1D
nnrw}
d/Yu
Q47a
6<{
u5P
rk{Jgn{
M?E+
{G--//75PE9@F\R\\yylon
{@888:???STTfiistv
0t8u
z5{4
F>N,\
*~8|
Iqi(*M{jJvl{
7http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
y{jASqzkr{P
261215032713Z0
b.wS
}j"@
s C
`-l Y
>TA\ O>T
Ilwj{Nlq}{mmS{sqlg
U=Z8a
G6v;
k0i0$
0!0
M{jJvl{
d3TC5
y{jASqzkr{m
T O T^G
y N+l
d(Y3
L{nr
AKP(e
&`2g^*
TKQ>T T
Z>T<
Km{l
ziMwd{
DigiCert Assured ID CA-1
s!l s
V%h)
]qp}
\H'f
b5Ru
J1GZ
R T~
z_jjlw|kj{m
K3j>x
S\X1U
B>}9\
1!!)9NN?@Zz|wy
@.reloc
_nnrw}
L{mqkl}{S
<k #
qnA[fnrw}wj
SgNlqt{}j
?Q Opg~
_CorExeMain
Q.K
\rq}u]qng
Sw}lqmqxj0Iwp-,
k ^t
s@}+gO)
Sg0I{|M{lhw}{m
Mgmj{s0WQ
E6r?OV4
?Se}
Z{r{j{
6B!@
CompilationRelaxationsAttribute
ihh``g`K
y{jAMgmj{sZwl{}jqlg
I{|M{lhw}{m
Y{jNlq}{mm\gWz
A&u;_NU
G#Y
U}(|
Q4s<?
k:\~
O6R#D
[#o/
(/'-*{.&'=Mgmj{s0L{mqkl}{m0Lkpjws{L{mqkl}{M{j
Mwd{Qx
DigiCert Assured ID CA-10
Nlq}{mmSqzkr{]qrr{}jwqp
_r!
r{pyjv
zwpy
System.Runtime.CompilerServices
L Y
YE9m/0
4!g0U
241022000000Z0G1 0
@#e+6oo
7-//6688:=?'
C {
Mr{{n
R5s=
:Q"b
>\f"
h=x=
p"e^8L
M7Q(z
JqRqi{l
?Q:\
N_ZN_ZN
Nlq}{mmMj
%*f`
vj_^ft
%,=ESTgy
O./25"4Vkxy
Opg
Q|t{}j
`.rsrc
f<i,8
I.K8
Mgmj{s0J{fj
g54P
>TKQF
J w g
xrs
-_#|
k O?Q T
k>T>Tl
Y(i'L
NA\>T
161228112737Z0#
U/--/1CPD>=@I\\\\komz
_ T~
[fjl
V6G%U1c4S6E
]8>W
d=i/k
^0l{rq}
yhb.j"
m{jAXwr{P
xrP{iNlqj{}j
*Uw3
(o:R
Y{jJvl{
A]ql[f{S
.ctor
'3uQ
wpXwr{
,;FW
0v0b1 0
hm)g :Y
K*v;_%p
C?SSSTffA
%kkxv
ur1
J.|
Nl7u;
vrO
!$'93N?@Z|su
Eh%@
}3R+
a5f1V3
r#!#9:;36>Wms|
Z8a]
Mu#B9m
>T?Q T
JqWpj{y{l
G Gr
Zwmnq
Salo Section1
[9`4r
BSJB
x{Q|t{}jNlqhwz{l~/
>025QQUkxy
koUR
Mnrwj
S5S m,
|r{Mj
Qn{pMk|U{g
7>s2
~pg~
rn_zzl{mm
y{jAKm{l
% /U
EJZ
w>XD
?s3R
R>T~
:\ O
WpjNjl
#GUID
nU:Z8a5s R
t.K.{8w
-X`Y
wpv{lwjV
:}1q
<-/55QQkkxy
1M E
ZrrWsnqlj_jjlw|kj{
) 3Dq
j+rx`O
+~8|
mv]qz{
Jwjr{
=p1W
Y!E$z
k |.
wjXql[fwj
[f}{njwqp
>d$h
pzRwp{
?0|R
@QK%
>T O
w=i+
rXqrz{l
`7P+
XjwjGRZz[r{|SvxrMMI]Fy]V0{f{
)d#m
L{m{lh{z/
l{jlg
[fwmjm
m{jAIwpzqiMjgr{
vcz(o(
y{\qf
sAKm{lQ|t{}jNlqhwz{l
2http://crl3.digicert.com/DigiCertAssuredIDCA-1.crl08
|gj{mL{
>T>Tpg~
9-ki
ED!s:
kAr#
j$@`
*SUn
E!g)
NNO0
DX;c
A$~
` eY
W4E4
jwqp\
0@#~$
' !+
161217032713Z
<Module>
sm}qlrw|
ConfuserEx v1.0.0
jwqpP
/+N1
P5F J,
2a7Q5
p _i
NLQ][MMAWPXQLS_JWQP
>T?Q
XI7{;
=YKWZ
4>j%~
!&i"&
KQ?Q
s{_jjlw|kj{
Nlq}{mmSqzkr{
TKQF
c/^ P4f= @
211110000000Z0b1 0
e!D+
4m)L
TA\ T
Y{jLkpjws{Zwl{}jqlg
<D cGD
http://ocsp.digicert.com0C
5#h$
J#E'
O7!`
[<H=_
N Or
JqWpj-,
e >]
=X"w
r2>Nk|rw}U{gJqu{p#|))
6S
x+eF
R T T
G8688:=?SSTTffistv
[zwjql\lqim
r`SaY
m0k0$
'ffist
@x9_
Z+I9
New Brunswick1
fzlA
{phwlqps{pj
lm&j'
"7b!
[p}qzwpy
l{Mjlwpy
(L b
w!G"Q
}jwqp
12}O=_
T*1
O?QxR
.ig)n
Main
t\B
get_Assembly
A\pg T
7];V
~0lml}
mw}0Z{hw}{m
sw{x
y{jA_nnrw}
LifiSyMYJB8
[pz_nn
W[pks{l
#m s&e*D
z>W2h
sASgI{|M{lhw}{mQ|t{}jNlqhwz{l
Nlq}{mmWz
P{fj
P#!)+/20
prigymajosa@hotmail.com0
z_jjlw|kj{
vGsQmYBxLCFx6vGsQmYBxLCFx7
f/m#
O+yr
r_m_jjlw|kj{
Z{|kyy{lVwzz{p_jjlw|kj{
39y7
System.Collections.Generic
WZwm
Sqh{P{fj
\pg~
sv0CE
kKQA\
System.Resources
ppqj>|{>lkp>wp>ZQM>sqz{0
ljWpxq
jvl{
5z4r
]qpj
SgI{|M{lhw}{m
T2I6t
WrapNonExceptionThrows
3B$vM
bro
J;Y)m?h
r(}:~
pjzrr0zrr
061110000000Z
Mgmj{s0M{}klwjg0Nlwp}wn
NNO0
F B0S#
.[]abZN0h
Tpg?Ql
b-F=:v <
&g(@
8q5z
2 +<
s<T3
Opg O
^P'%
Dieppe1
nlqj{}j
{<s?N
OA\
y{jA]qsnkj{l
2e+O\
Xwr{_jjlw|kj{m
y{jAY{jWpmj
Y{j\gj{m
cpgnm
kKQ~
h$U7G#q&A$W
M{jNlqt{}j[llql
Bd o
a8eZcH
Y{jNlq}{mm{m\gP
r2 i/ }
G m
) *<
&r=V
https://www.digicert.com/CPS0
}qpxx
Mgmj{s0M{}klwjg
{9--/67PPD>@@BUHkfly
"p>Z
y{jA]kll{pj
6O*m
\y;u6
h$Uv
_ TA\
nlq}{mm_jjlw|kj{m
+ xas'
-Fm8
7 Gk
p f<h.j
?e.i
Y{jXqrz{lN
lrY
MethodBase
z]qpj{fj
.12PD9;FR@SHUTky\3
HW5H
-U4E
y{jA[f{}kj
~Z4!bU{
k>}2G$s,-
. X6p
m!P2
=; G
j{AAWpmj
_ O T
F s%
Y{jQ|t{}j
j{z_jjlw|kj{
1|=[kA
Smy\qf
+'3UGk
y m?=
m{jAKm{Mv{rr[f{}kj{
~r!
_ O~
$;h&
\gj{
RuntimeCompatibilityAttribute
]av4B!
Turf8
_ Ov
nlq}{mm
,c`
_ O L
Hwljk
/F @
SgJ{snr
jw}H
rnxrQrzNlqj{}j
pg>T
4n [
F<U,vD2
xUHBTTfkqu
*Mgmj{s0I{|0M{lhw}{m0Nlqjq}qrm0Mq
PrSL07
y{jAMj
System
yyyy
RA\~
rU+O=
>TKQ
"-kC
}3W-x
]qsHwmw|r{_jjlw|kj{
}r
gk,h J,\.L<
f*k
Z;_-3
Y{jH
j-b0A#S
C6S =
x6^9
JqMjlwpy
>T:\>T
} i;
_:`5p
q.1z
$'=}
wmXwzzr{l
nHw{iQxM{}jwqp
S0@$
Y{jJgn{XlqsV
A\>T
'E5Q
jfZI
Y{jV
GetTypeFromHandle
Xqls
(:Jdz
wk'`
M{j_n
>T T T
F"Y N
{)zB
_ T Opg
jwqpL
"lg>j,
lg_mm{s|rg
`34{
`$A8<|
NQQQPC>FR@@I\Uk*
ToArray
,JM
mrqiSmV
#Strings
>TKQKQ
zNlq}{mmS{sqlg
G7,+#._
0j{fj
x2W*
Z0i={?c
gqkj_jjlw|kj{
Mjlwpym
}kll{pjZwl{}jqlg
wT/]
S{yyys3C
e?Q>T~
Ilwj{_rrJ{fj
;=yg
X)+[?
Y>[(
L& D O
>0<0
nlq}N{lmNWZ
s?&K
j{z]qz{_jjlw|kj{
Z{mujqn
V{rnU{giqlz_jjlw|kj{
$'93N87Tn|Y
v42{4\
pz|qfw{
^8a5s7
5`#l
?Qpg~
Sg]qsnkj{l
N T~
E#r2z
Mjlk}jR
Nlqt{}jZ
nlq}{mmWpxqls
>TA\KQ~
-~]
mw}0]qsnwr{lM{lhw}{m
v;zav<
ll(m
kg;C
www.digicert.com1$0"
DO/A{?
|+[6
IG2W
R7p?
pzr{
H ?U2
7|1A
>T?QF
1V.M
V0c-I\
prigymajosa@hotmail.com
T%G7S
Y{2u)~
H 4g
]qsnkj{l
}6---.+
!Q]ds
v;w1q
!&W0c
}U;-
)L+N
Jvl{
M*O<q0V
\MT\
v/{=y
=]?f2a;K
D66688:??= 4Tffistm)
jwqp
Z OF
$h>^
Y{j[pks{l
1;Y)
U660001=?SSTTffiitv
jgn{
r$6aW
B'`/c
\;i$@@
rqyL{mkrj
1_e_
S{mm
Load
@//6608>DRR\\\\yngfgv
Type
Mjz[llql
y,o H/M
Attribute
G 1$
: :
+ k8R
jw}_jjlw|kj{
Z O~
x!r
pZT\j|
w X ;
Q {a
%+Ouw7
Mgmj{s0Lkpjws{0Wpj{lqnM{lhw}{m
T T
A%w6
~ n
l{S{jvqz
Z3T6o;
_}jwh
aZM$
MJ_Jvl{
ConfusedByAttribute
XjwjGRZz[r{|SvxrMMI]Fy]V
N>TKQ
/ca
O*Y0
l`I7Y
k1b%
\ Ol
a !!))1;L
O>TF
#Q5O
]}2~
Z {4B
|'" s
j{Wpmj
Mn{}w
{"v0t
Q5s<p
C7'h$
4http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0
jw|r{
Ilwj{_rr\gj{m
T?Q>TA\
D{lq
F"X N
G6-+,-(Y
m{jA_lyks{pjm
.9^"
[93yy
Mgmj{s0]qsnqp{pjSqz{r
-q4q
y{jAP
:@ FM
V?j)
=8$= '3U
O>T`
lNlqt{}j[llql
Sw}lqmqxj0Hwmk
Mgmj{s
?QA\~
GMM:9N6>ZW
%"m^
{9666.
http://ocsp.digicert.com0A
$d e
h;>V
>Tpg
L{mwd{
+N3Q
l#|
Ly<Z G
:\A\KQ
T O:\~
p}{AA
W +g
>T:\~
P.^:h?E+
G/600
*)-/55
sm}ql{{0zrr
:\>T
jwqpM{lhw}{m
Sg_nnrw}
/w5{
{>;`V
Progyma Josa1&0$
O?Q
5n N-]
x4Q( v0 k
}>::=???BTffhst
k?}2Z=_3t
B*Mt
}vwp{
ljs{pjMj
~A\>TF
].c"
+@#{

#infosec #automation

TheSystem Itself @ 2016-12-28 15:12:02