MalScore
100/100
MalFamily
Malicious

vti.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 13/65 Related 2257
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 292.00 KB (299008 bytes)
Compile time: 2017-08-25 16:01:40
MD5: 6e04230dccdab9c981d1ff1b435571ff
SHA1: de0ba09339e66a2f5b38242748401c149ccddfd9
SHA256: e356d51875765de25314afcb337e93fa6fa348d19b4c3b810159996145bb88ab
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 5 Ng .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2018-06-06 20:15:09
Last submission: 2018-06-06 20:15:09
Filename detected: - vti.exe (1)
URL file hosting
hXXp://emifile.com/js/cfu/vti.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2018-06-05 10:43:53 [13/65] VirusTotal
PE Sections 3 suspicious
Name VAddress VSize Size MD5 SHA1
Ng 0x2000 0x40300 263168 36b811e975c13df5c178fa2612664981 c697ca06e87fda374519d810589bdbeb0bf7da51
.text 0x44000 0x6448 26112 8009fc0430ec59941dfe67dbf4809ca9 eadbc5fce3fd1b9987b6e698f4a840686563f68f
.rsrc 0x4c000 0x1c70 7680 e79c030e95366665c6dc7202073633de 3a7ed2a578e1782accc8b419ce11099c7c3c30e8
.reloc 0x4e000 0xc 512 9085e484a4d6c1dd8eb7aa3cdbf1e891 d81e00efb3067bc57ea78bd7320a2d2848c47332
0x50000 0x10 512 9be6058bb936956619d20347c83ffd89 48d84451e3a95b517cc68b97bc67a0e06acb4471
PE Resources
Name Offset Size Language Sublanguage Data
RT_ICON 0x4c5c8 4264 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_GROUP_ICON 0x4d670 34 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_VERSION 0x4d694 1004 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_MANIFEST 0x4da80 490 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: Copyright \xa9 2018 Great Lakes Chemical Corporation
Assembly Version: 0.0.0.0
InternalName: ajoonad.exe
FileVersion: 9.10.26.4
CompanyName: Great Lakes Chemical Corporation
Comments: lcla5cdoumo
ProductName: IIS certmap authentication provider
ProductVersion: 9.10.26.4
FileDescription: IIS certmap authentication provider
Translation: 0x0000 0x04b0
OriginalFilename: ajoonad.exe
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
No packers found for this file
File found
FIle type: Library
KERNEL32.dll
mscoree.dll
IP Found
9.10.26.4
URL(s)
No URL found
ajoonad.exe
VarFileInfo
Comments
Great Lakes Chemical Corporation
lcla5cdoumo
InternalName
2018 Great Lakes Chemical Corporation
9.10.26.4
Segoe Print
Copyright
StringFileInfo
Translation
Assembly Version
FileVersion
njru
VS_VERSION_INFO
VUC{Os(?i\&8\+W9\[vW!ynmB1p$
Form3
Form2
000004b0
ProductVersion
FileDescription
0.0.0.0
OriginalFilename
$this.Icon
LegalCopyright
IIS certmap authentication provider
I7b
CompanyName
F)[
Form1
ProductName
DUXJ
KzB4!
u0"#
0 >7j
!Weo^|O48Z !
B?c
}d\4V
rE _
GetHINSTANCE
b6 i
<Ue
n\YO
~qb_
[ZT{
&wZ,n_5+"2H
(OUGc
Xqn [
jf)!
_d[=
*aBr
P!b Q
bHxO
"/@N&)
ND^V\
kGX!
dx~vi
@u4SN
DaVk
TG_;
#uwf
l \g]
ResolveEventHandler
SF]<
3+4W
`CQ
6U@=
A4OA
H>:@
4~%w
&}<W
7SL
s oj
f60S
<2iQ
|%zz
1OTb
+[3,M
@CV~w5
$YzL
RM E
P5Uy
=`+y
?O"h!
1(=Y
=!+D
]n?85
C9/x
~Xfo
68}qy
z]%)(U17zgv\1YVkWS){p0&%'
HWSq O
nfK
X:"hR
K"%`e
;fu ~l
UMmSm
gF35
Uq|}
^ =q
R(QC6
FormClosedEventHandler
*73d
Kdu.
E@eG
y;mI
'i "Yt
uv y
T~%6
5BhQe
W-`_e
~^Omhkt
-CT'T
!T A
|m k
f[2
u.'k
|0,[{m
LS}`K
u&7'
d%*%>
4>\~N
Lq e
qzz2
{aLq
Py>)
h'X}
M0"w
~_%Q
}m G
{8_[
Q"f.
1M30
Marshal
2sdSNY
aa _L
q[Cu
] 3T
"Wu)!
|}(Ss)
Wt !
]$3K5
!E*<
ZlQsv
O+yq
Bu]BF
ahG"
}{n
8)G Z|
U1XRw
!?#!
TpZ|
. K]
.!1<D
ApnB
RuntimeFieldHandle
lUY-
System.Security
THk5
pe>D
lMz$G
974|
HA{N
g$qnR
*%zX
3HD4g[
[/J0
Ko,s
tq~F
u'B
=x*?
6YXVeQ
kl^W+oB
*%f(_i}
=t*`d
5E{_
j]Q#Y
27R)
b[o3
A<J(
.r3X1{
:Y-Y
X VH
`sm0
<a\'
&y<|
(v(L
R]`U(
s#f
$d2edd9e0-310b-4640-bfd1-f9ce1dfabfad
T{H+>
ZDnp _
~Uhq
glzJ
{ N
'cyW
z50\
EnableVisualStyles
:#[o3
h?Ou
Math
'[&1
N5Wn
ZQ1PA
,JT pP
;"?
aR|6
Y* 9
6kD5
(hc*
p6\,:
qQ$O
W"[j6
!)9uv
`++O
+CRo
q.dr}
r7%L
6M^#
TcY0Y
FR9N
>B[1>7
v2.0.50727
Z}B
dG0N
KK>7
U]yl
lkiqD1a)
:4ap
qShx
xICXV
t!Si
WC{=
={P)^
y/Cl@
1.O$
|'k;
AppDomain
> ;
Qy7/
|5yph
(&2_
;lHG;O
ccaNe
em)QQ eo
;c}ko
Y^j'
get_CurrentDomain
Oa{fV
G:ad
t:t1
3G{7Q
6' Pm"
"Zp#
C"8C
)&eOc
r 8{
QE*.
MH~n
IContainer
1&_8
1yB^A
T7;5
.|'kU
add_Load
#s9C, n
59+
c<2i
Tx)
-gHr
6&%Ep
W#zM
S33V
wT!14R
m1'S
GuidAttribute
|h(Wv
YQ{t;
nEE\
hn."
SI;!
ToByte
{~8U
\R}{
7b0]
"(96
c}G
L9La
B4BuX1
3;a$
ah'
qR/A<
"q[X
rDWk
D uo
3`<8~
eck
|1s?
r6gA
!k~4I
VMMp
s[ 8
DeUw
,3R[
#@bj
Control
$ D_
_75E
)&1
rpw,
W D"
!g'8
, Sh
No(~GNG
=`^k
gM]RT
L-64
@_NE
SizeF
KgtrcXC.Properties
w;0:
C1<5`v
6k1x
ba,6@6Z
5":f
b&|v
B$7~j
KBQ oh
/0l.+~"
? H_
j)q`R
y'#M
?h*&
Oo|
D!2{
,/ s L
74 >$e
Kt8t
QZ>,
]$JO
1TqG
LL >
8It
pdpm<f
z+EO
mL:"
Wuzp
K&~x
jbPW4
?LNQ
(&`J 0
DM_OP
h4Yv
Ly >}
) ea
#Aw8S]
h@Pf
}rW{
4l7S
tkO4
[e:^N
yzg<P~h^
OG;KB2IZ
I[ hM
wK
TM{;[
?vo`Rz
2KD$
)0?Fv
s ki
}L}<
t0)^
_JlZ
$i"a
L9(Z
6$[u
i $p
G@kP E
Char
vi K
B @4
jF!k
':w?
X djuy
wd(2
1nMR
%=I@
< ,M
b_5"
6K2jk
!RgWO
15.3.0.0
6}N{
m\r,
p0An
LJ-Cm
:U}7
/A6?
get_Name
fha$
String
e,OE
j+#
kH]pXSj
B$c]w
/t P3/
73py/4
M^*f
W>sd
-sxv,
,F_:z2
m0L2$q
ADzL,
u1O%
zPsB
U8Tw
0@,
cDA$
,dwR3
RwG
U6 A
uo]T
q/Yc
}Cl/R#t
~WvR>
P&m5
j+R~
4 Zf?
<QI7
2DJvz
Rf LAv
8g6Y
Gg&TyQT*t
@5]
Y> ) 4
{gy|`RD
uf%y
f>zG
E"z|
1}*9
hc}^
BX,9
OnV8
&ja\
[oo^
U&A=
@5]*
KV!a
pp2#
_w>M
vi=e
l9 u^
/#4$,S
s7`z]
L:tSt
^tK<
`,+j
%Ex#k
x? W
Y^v\/
7_F?
Zz+)
yU# XD
,C7h
_E"1
HQ,-
dgdgse
N-oM3F
Nu-y
3?S$
>Ktr>
H7*'
uUm
n MP
J6*^$
31)m
4G_2
y(9n"
.text
_&3H@=
!~:"
U{#+U
X*U~
KE?Z
S(xL
GetObject
|+rx
<Sh(J
}Mgj
ReD5^2^
F Ah
h0Gb
yM F
"7.I
GK[
8EkEa
" )N|
Q>6\M
_)xmz$
{!uA
>{~k
xQ>zG
b^Mf
0U\T'6
n ML
x"Xo
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
|PvHAf
&I9EM
wl{}2
>0W~
Vh\N_
;8F0
OC]d
jab
-wPDX
}G?<>
PuLJ
kG|u
3p-+
\`yE
aEG+
;8=C'
R+d`
Er8vg
AS*CT
c ,|
T F]a
2}h+
Vi\ tO
nT|
2'K2
_GnFhF`
iimM"d
iRES.z
E5m**
3qGgE
v*kN
-t8r
>N
6vp;H
GM+4
l^g:
{ A_
![8M
VEA3
M^z+
B^_'
\XH'
YG*)
1=
qbX
k\ ~7l
ZP+d
ApplicationSettingsBase
?lZ
UvJ:`
K"w ,
7;]Vz$
`>/&
-;Z2OL
xp-XEY}
/.,J
iNC
EL,+K7C& 4^
^NkF
p6ZAf
_`CR
r_xJ'
1O'P
U &]l
V2gp
m ]_
9PidO*bv
&HCV
:lSt
t<~w{{JR|y=4>
yRsRk
[uA@@
cX R/RS6<
(f&K
KUE)
XX$R)!y
U?HN{
%*zDN1
`.rsrc
w2
oqk$
9I3&~
6',
v9Yf
ib*-X
JPSQ
(/+1
Qq2Y
kB8U
:s11
PQ/L
b}(%
a&{0M
kernel32.dll
T$?r
^ n 0\
`7#WD
}a [e
z]!t
q5 stt
j)",
z8'is
&|9</
Jp+QpR
) ;#T
2aT(
pN*{
`/WOW
(`DS
dFce
E\c=
d%cn
=a\) {E
] I@;us
Form
^,?2G}
Settings
.>l
sd5&)
1Vv
Sw7+
1dys
3{W1yWw+
|`hux*?Tr
_E
r(cR
tku l}
$|%]
K f$
_ybC
NT~9
}Lj'
3nrz
,T S
EC7@
k 4J
wjz>
}w[l2
O4'.
Rni5A
9 Uy
JHk5
8wnQ
`:!
*(vH
h`Zc
=!TE
0o37
{s>U]
|?n4
k`
BSFj
nJT}d
IA +
bZ;
KV*n
1#]~V
YZ(x
{VFxwT
8G
,#ty]
~q5|}
]![4
;dYM
m B
tw*B
< }
t+hn
`KfpVB
psFY
(
6yM>i
>k E7FZU
r1,}p
g1u7
4CL.
zJXD
zT s
@SKp
W54O
C#U
_3gF/
c4<'
~y-D
9t2$
EJ{
X FQ
K@JW
~ia9
_V $Z
TuP
EventHandler
_gOX
~-kp
V}b&
:A/b
V|Px
)GFP
Write
e6u/
NaG5
set_AutoScaleDimensions
h`L]
[ P Z
=)GJ
WJ/
cm!Z
I8sd!
xi D7
k&l?
Ivr8
h-+5hn
#1 ,
08mW
JOs $
Y6z =B?8
SoK/
Ml>`"H
ZXFz
;g7oK
s4:R\
.6a
N>
/jhDzv
`h1E
HCctX
0E*?
;vn?
A6z_k
-u5.o
0c+Q
6 4j
2-!=
622O
qP3z
='7
FxRK}
obfQ
{ a(
(uU3}
ktH5
]c>>
\%T(o
X0/U\B
gART\
&av
xE,`
nRSW?
~o&&
System.IO
(OrS
Q:{hD}
Ye?9F
#BrC s
wR=9
;$tS%
+WCK1
ax[+F
`7k7
U3f;
6f\I
QyHgT
F?%
}i,(}
{eM}IY
m^J=Ix(
+g+s
t}NW
ZBxB
c"Q&s
$Big 6
q]](:
+*Ac5
Z^.4
PjVP
f3 A
oOob;I
sXW}`
"^@]
q#B)p
op_Explicit
Font
M$\-\
3nCF
XnJ
+)HIP
vmd'
C&\}
yyq>oD)-E
=~0!'
PWUO1q
STAThreadAttribute
TF;M
jTF-M
^= z>
2M$@
(9 f
DVN^
RuntimeHelpers
}t{
u\xY
= QcI
`\*xw
Y8I"
v3@(
System.Globalization
[ SU
GJ d
|}Le
C)K
>QBWy
km9T
<7;X'
7Yni8v]
# ;_
h5a&QQ
QE{Y.<j
w>:^
163B
wb/QA
Lx{*
t(@clPY
Mc<>
ijE|
: <?a
id-O^
System
EventArgs
@|[d
Application
2R+zz
GF(+
B@\w
7%g B
X!*j
I6>|Ju
s:hw{
,1)E
-'%:
y5rT
R1U"Q
~h_,vt
H(1Hk
Yh?Xz
^JP]
WKf
/[%J
\ZZA
,U{2{
8@%3
LLhF]\m
-i >
AZ#-b6b
-`J&("
'SXi
I8S{
|)7qO
!~vvc
Fz;W
/@8@I
$!%0{
@}g l
MethodBase
'Q7J
b<~u
nYg<
4]@T)
m 67
VUC{Os(?i\&8\+W9\[vW!ynmB1p$.resources
D 3 #
Q#<L
KE*{
0\7M
ww7v
-J; `
FS2a
_{{(
@elu
FYkdTS
O 9
v7qtP_{
}6&
(_TL
p0_
<#:/
KAVz
I BY
k:qLl
FJ;
.leR
fV2J
7L1C
VirtualProtect
bbB\
add_FormClosed
,Nw!
=i a
Pfg)7
Wt F
rLe`
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo> </assembly>
`*VRG
T{XM.\
fY{A
0vC
PV+9
0Z@m
dTze`JFGKm
~7S;F
RdLR
p0yBd
get_EntryPoint
i/ya2
2 t[
lR%1
TiQnI
8GK
_>}{K}4
`W&|
GV0$
t-`1:@ rH
2db S
wEpn
Rwv;
KG ;
jM/(
bD .^
z,`O
!gKj
do f
{{3Y
xI!_
}%/j
VB;tl
2's1t{
eQm-
<4I
=eO^
.t,t
dR1J:PQ-
shYy
*GT
add_AssemblyResolve
*7//&
(t/e
"EpL
B #s
4[p*
FH!e
ntJ_wF
EHv|
gR "
h}&,
Wo+.
'BUC
X0vR/>
I=bkJ
;qt
I07
X=
o _t
R4 6!
F>WT
3/8&
cBi~ter
WG9K
y FK
#(q'
BS]T
!Ga 'gc
K(P]
wRYI
WB<E
cr6
J+e
FRrVG
iZ{yP
jW5)
~ew #3
Uf6"
C+\vC
X:+
W6so
/d\(
% ?.
+ ,&
0]ijZ
5 R"
PstTH
v0E5
x'* &
SdUqL
- |:
]&S5
{W+{
ComponentResourceManager
Xkx?#
u=}I[
n>7|
3zW-j
f]Yx
YMw2P
# ;P
hlw`
o<{{
{:[
eIZq32
^Cm{
Lr6V
5'Sz
>Z*h
y5 +
=YA xa
`9nMx
EYlN{!7I
fJ<]
'LeI
YJ][O
l4oc7/
KVy7al
2c/%
# ;s
f 'CJ
W{*]Gs
W0Wd
{n*/T
|tkE
y/d~
r<o$C
<X2"
f'zsw
6"A@
4K\'I
4 Y2?*
K V1
`-gH
N L
0f7t
OW }0
@uKi
lTgE
V;'T@
-[51
d9.n
ScNK
1FT
w@JK
7BbQ
vA'w+JX
H"]:
V.SF$
3jncN p
l"5c@
NZCQ
l9C*_Pys|
wD94
-DKw
LoSd
{}oZ@"
5(T\Q
bnZQ:
i7;
VMAvn
(1tw
Al{A9
q,`JP
/?^o
NN#!xxE
)&kCg
%Fj]8
s8Zt+n
}Nd>
zNiR
l`L$G
e kps
]")>
_!ED
X&'V
!%x:'"x
y%g+e
iNm!{F
V7?K
ch_u:
JRfyb
_kEo
k7'T
uFa[
|5rvG\
a7ubM
s^_~'U
mF Y
%F8$
D/|oSE
_f/4$
\%b3
houf
f= I}
c%Ov
.<M4[
d KA
4w {KO
j=Y9~
eP
SecuritySafeCriticalAttribute
x!vJ
Ds$+o
^&Ix
d-i7
,EJVs
Ui ?
<k0|a
U$nn
&_Q
jxIzX
k{bJSgt Q
@} '2s
&nZU
X >b9
1%#P
uY#{
|$oXd
!vF@
{oGk@
R!ZHH
$&* &
CKP~
*'S6
|%~&
t"dX
hjYe
`2)(P
`i$[]J^
"cfzf{zT
^h?n
!"6
Uz]ef
_G +}
MemoryStream
K1^rrVU
qg01$ U
)*[\
l!."
ds 50
%RjTd
ip-<
tO=c
n+3X
] -B
Q{seX
tLB<SjC_B
^M6)
SC=,vL>N
a$"X
]Ef+
set_Name
$+<{
2:ZLWd{
Wqb6
nIa jd
N+3"
dqtb
DW0q
xnpz
.r|c
KxhS^,
' .>`O
get_Length
%sz3L
get_Chars
G83>
LEfa
SvC%
1St4
a$Py
|;Hx
s%/a
XU-4}
4aq!
~^ N
j,**
k6wr
$[D.
M!B~
M\]bh_
r;H'Y
UUf!a?[
[sn B&Z
zsb
5+0
FO s
*/'.
IEvidenceFactory
NH{
xvm}
h6Ls
VfFnV
V lE
COg`]
cpI\
-pMO
ValueType
.+
/_}DD
17k>
JZ$(18F
X=#zg
c dz
y0\w@
&pE7
!a<V
]FvK4
M<eg
x2k)
JD\
U^r0
!1d:
L?SU]q
;^Rn
u7HY
jp9
e< _
sP '
-0jz
LH":0p
mtI#
.:SJXj
l"fen
M7]10_
.6$P
Q9MtD
NJsKl9
<o_B
Xg {
0.Z@W
d=VX
N,d
4S@{
aRT.
0kp1n
;=W@<
*!Hz
O+d~W
3UlHT
s jW
X.kE8
ubwR }
7\ )
+`bCp,dy\
>GT}
#3a\
Z?{j
_|(}
SuppressIldasmAttribute
$s '
&z)AUN
I#`t#
jQ,|
"D'
p]]-
g/ }
zY!e
Ij>
2O"P
F<(
%n[=
F>3b
n]W#
C'1@
e2q@
1.}#;
UInt32
_n&{
_n&z
LP+*
|edc
5 6&
yv_I
%684U
9uPC
_nE
%8`4
V Rd
Wn.m
7==
Y O
UJY;
h a8_
jkI[P
GF.ht
\wVn
OWmY
'CAE=
FormClosedEventArgs
p<=-
ZQ!EOQ
InitializeArray
@!Xr
*AHQ'
p ax=S
[$*
+T5T
3 L%
O:bc
t ne
kw6`g
s!K 3
/(-U
$MOg4
ARS`
vF!8
GOf\5
l}t\
rd=e
Cmo/
U]W4
90e4
7_&:
-E-TR
# tND
-jhc
#.+k0#a9
`L&
M\t$

Gs 1
d>k`U
/Z%+
7(J2Vj
U<K8
lc,2
{I} #
e*MQ@
v,>X
5h\-
Dg=
v$aFP
?2y=
HYqd#^
O:^1L
. #-b
.#*:
,G c'"
'HtY
q|ou
5R(xZ
/ QA>
k;&A
MB
~Gk
35/g
:9
DX%|'d
)v e
'g3m
`G[
c;l'
23bL
\v4m$
oc0PI
-K?L-
"wvaVo
BgS+
h|^n
I"%o
FontStyle
GV@|s
Cx#\$B
y s+JW
)Gum
D`d/
oHJug
y]b7
\ 6P
` ;hNd
gWO,l|,7
BF%r
3NJ1
P-sKVv
O`+:
rx#$
Qj X
nmVr
\rrN0h
3Z(E
NMzr
V\_!
t6b LW>
U<N#K
r379`
o)qcn
/goL
Y Ep
OSb,
3gL$
i<"k$
N'i!a{@
}(<F
"J |}
iZ(`)q
Rr7j_
rK#@s
pG \"
DC3#
jDnQ
9vut
a(Qg8
r6+{
nOo
qhF|
#Strings
5Sm
HMp4kY!F
8,~0
%+dWl
TLZ[-
^A9U
tS22
y<7u~
g;PE
.ctor
Ta$.
Y fi
/X!k
2wDH
9@ X
Nu@-
@IZ8
Z/%}
Nw!.%
No1<Q
36:F+
NW 8tC
Xw3BQ
!=Me<X
`U4N
QI:L
pA s
.o/m
l|9f
Tp|QZ
"PnW3.
ik}:
rx(v* H
Bh'\
]SW6P
2l{Y
#&2|
Invoke
Xz^m
iE"d
Wul D
d .0
hT]$
?oBSw
Z P7
~.ej
&F`*/
;d0]
Vni
mTe'
+0Le
htxEh)
=: |
&?*
Su8T
u`
~-W$
O2g-
u|V/:
}*|N
A'dov
tMCU2
FZC[do
h(W$
=d78
,=iW=
XnTz&
te]B
o?uc4|m
AY'u
%uqP
_QQq
hvhi
F/V
8k7Ow
Module
#E;V
,4o C
0wdVY
PuB
p ,[
/](4
iVz
Array
WrapNonExceptionThrows
+4=H
}Y=^
]n6S
VvsS\
Ow6z
L:1B
J.{I
@.reloc
x3P]P
-@O
(v@)
:KRR>
wm yF
lu@DpD
h.aWg
p6U N1
vlOq
/&#y
FSC^
wT}L
Q[0Hj
% $~
?h:Og
/*_f+XQU
J9H
]5de-/
8#v'
l3D@
QF^/
3yUp
)4L
'i "
0%/{
k 9f;
ko 5
Ibme
c<g9
N, _>
2 3
6ebd)'
I%b"F
(%pq
=1]8Q
DGCCh
3(!Q
oM<5
UXuC
(5B#
;30/
3fNWb
gxU7MC'2
S9 "'G
n>VO
ZJ@z
kh'>t
6N+k
)Ev}lSV
.2go'
CVQ]ww
! q>s
}Cw-(
|<Dm
izl$_
]`k]
_0 n
=Md/
`; a"
&+{m
al(w
f1DsS
KNchv
set_Font
L"i~
mF9L-
2'!5c
q!9?C
)@jG
q, Z
v&=-+
X" @
">|E
)U>F
rp,5i
|9xY*
&(#f
Ey_Rgkx
System.Drawing
TU~[R
(cLbu
hJrY
SmO&
6A;A
b*OJ
`3NY
$) ,
!2_;
/9n/
%e60
;P0B
AU{o
<BAB$
$?,>
h- P
O4D'V
ncA;
/+Xn
LL\?
a QH
[0Je
A]If
N;?Z
pEE
Pv7{
t8WDy
c #
}H'/
q<Cv3%Q
zOxw/
monk
3M8f
Vy .3P3
y4s>
EGb
v<.K
jnNY4EZexix0@2AQLNS:+}x`#
ZT0][z
l3vE
}Tf6-
sU:c
)N@Y
lNt&O
Nnud.
_ODU
2 R_
&Q|b,u
RuntimeCompatibilityAttribute
NjrbI+
?l^W
yz"b
(2h?
"?_3
0$ )
1M9s
MX;w
^~+s
Dtb|`7
Assembly
gtV^
~?Rg3
'1 2,%
Ez=<
Z|%*
GraphicsUnit
AY-oh
IDisposable
2DvC
N.P77xv
$q4u
i;FAs
6B7CB1F76B99023BEFA8EB2B530216F00916E4DF
g7#| r:
7C|m/%R2
Haltr
]^BX
?=Q.
i U;
LYf W1Cp
set_Text
k?ZA
oq0g%
yL*b
1]pn
E lX4
<&>{
?Q>]u
a 8M2
b.({
q(p5
gEkbY~3@
4I8702
*dQn
lVZT
1Fdi
7&(2c
:6 58H
]McB
A6i[*
KB'n
64R3
eran
ZZ 3?
s^US
{w5P&
bY,y
{mS(a
set_AutoScaleMode
8,wa|2P
joJ }
f!9_
3:&7
z_~\
rF5j
F s~n
A;i
g</i
-tEXt_
AgNu}
RYy3
jG*AW
(lI6
b`V&
tO|/73
Q n~]F
|KsA}
Q}cQhZ
~g+,Ab
1+ a
O,L-
56A,;KE
J!7;
n C}~.
KsJ/^
v4Dk%
3lL0
5D#3e
~/+@
+;Gk
8gSk!
CNS,0
QG\`z
5kP0
)ri6
/LYI5
Q3SsE)F
u +fE6L
y w%
T~oWp
% +|
yg=8
_RHJ>
4hMt
/U,U
97VB
^aau
\/ZG
5U,9`
7Up!
t5*1
o?aC?
53p4
/"w`
hZ v
X_cx
B~*
|3JH
*AhV,
nN B
HVhW
vS32
-9X;
gC7>\
=N+Z
ZX+kU
Wa8z)U
~ 8
~]?0
AT{9
<yoq
"f~P
CeE*O
m`9U
Lmjv(?8,
t?L~?
k4#H
)+ L
#Blob
xT5Tx
Q#f;
` \
]U(O
P6wi
Ra@
<0mQ
p)U9
9r4M_
>3DL}
6xcM
@zf
LQw-
jM`}
* u\Mz
.{A[OIm
W*?H
I@oe
1lLrPF`
cWsA
MU':_
bu13QR
8}32!
P.T
od,)
1 l#]
n`) O
PG!&
P,@
:Q9}
@yLHpk
&[,z
*X H
|RG%
Yp)M
<X'{
J\q&
ContainerControl
7.BW6
(}HZ
J*;}
Zzx*
l3v
A56(
xa5
4ihN
G[R3
SStx
B=wq{
5j x,
M%V_
' V_
5Iu2Q;o
qPIt6
[ P
ReadByte
:77Sb6
-i z
System.Resources
"r$u
9+Ib
7T)T
t&RE
_s[iK
KsF_&#
"bF4
4;GXg
/E`%
;dIXVd
;^r4
DtrD
ude7
s S0](
F>3%^M
!Si:
Np2&
l"N9z
^roe
.vdd'
_)Q=k
O<i_ej
J#:
g={F
)zu'
tO=dC
vbIk
"HCh
&["-NN
fTro7
CiH:l:
Q}1~
d,mlwa
EQUpfR
H!E
+b!)]
>gQhe
I:;X
Kc;
D4rR
943aa4d1-0960-33.Resources.resources
@=W\l
IoB@
+lnr
`0ms
1N#(
@#^E
9zQ>
3:vB
3N%f;
j #^
-c&hz!
!"vIw
eq.i
QUBLc
!P Z
( n\
n(Bn{
M?qT
Kdh#iq2
V]kf
O}*I
;n'4
&NjzD
UPWC
mWy*]
>z!h(
//O-
X"M,CA
&p$1P-
Pi0
wk`M
SPg. y
Jc(u'
9> E
7:_sG
?&os
Fz ~
1R\x
2 Y$wR~
d S4
<9mq
0"%G3
I*e*s
D@`,W
H)J>25/P
W7|
Close
MH n
:3(L[
gb ^
?dy +
2je^d/
j=BW#
>?j.
]{7 9
x(N
"(B
e-/Y
SD_g#l
muq)@
|$o+5
4e?{
FWR,`
BSJB
G{[o
J4*"
ENMp
[N7[
)|&60(=K+
y [QT
j[\u
Type
E4`:l
4 A23
ppF&1
[;?s
6gTo
u# @G
`,".
S!72Q
1*d;}
W\(({
Jj(en
/?* 8
2FQ
h5rfH
oD6fa
vx#J
\(Y/
e|o
(yT 3
q?&lJ
}]`&b
O.nZ]
"p }
1ep]
#1UD
dyU<1
2_1'
;<S}
JUi~
!>{$
ya=J
+R=.
Fu6*
L@ 25
s:=Q
W&wK
|"k#
E2Ga
lDoJi
a,H=[:
_p D
TT5]
="6^
Mv .
4vJ\
|"}'M
z06
g~P^
7C'1
W}(>LB
NC9or
7arv,
1)!'
zB]@
^}a[
RQT>
<&t[
x~;iX
Ck5a
_m~P
a?6g
V}Or
2pb?
SuspendLayout
hi_e
set_FormBorderStyle
NBdC/
mscorlib
qKk-X-F
$2H,>
?tqL
\k0G\
GY?h
hOxm
k4wC
B1D'
e3 Q
1C7Mk_
Hz:V
M9:c
jl}
mtvC
@t}+
T>$l
}=]B
$sw )3
EditorBrowsableState
G}@9
3System.Resources.Tools.StronglyTypedResourceBuilder
Y226
Y2Pm
/DH$
^yA&
* h1
f f;=5d
? %u
{&k/
!O [{P7
?[p?
L %{
3/_^$|
d5 ^|
H[=
u!v:h
@X4vz
XI=D
%TBf
eMX:z
b+D-
$:DW
%uD%6
u (f9
~: Ua
S'"-
g;Y1
L|p!ArFT
7$brz
@4sF
U;6:
S_"&
a`_U
w_a*s
?ME(bZ_
>Z3e
jc`%
cG/1
Rf#`
pJ^*
IJrF+
1~%rZ
EvtavgieUvIWUJDmuHRsRIpLYcin
pwkJ+r
v!N6
^ u|
)i2!MD
6#w2
! %xi
f;?jz
`zw'
H3ZC{
4+Nw
?JRP
@X`H
'4 l
RuntimeTypeHandle
S!|!
V8(!PG
hz\v
V -v [
/;^r
8 nn
J#^9
lls,
f9w$ wU
[wV%
7_h%o
`}j#
gM%1
:Qq5
X?y@
W4[%
`o,g1
K>s6(
!Lx@
HYx
$ ]R
D.f&
gM%
u+x5r
=ApU
"{7iK
)!^Z
80UO
OS82
85}i
~D$bpM~
in"$
l2!R-
1.q,
>h5u
+f^y
D7+
VqXy
iR]6
rA/y
3v^
S;p`
kI[*
u@wp
S|jg
op_Equality
% >}#M
' R2
NZw}
6F/k{
;U?'
sD/gt
.aR>M
SL5e
xo$7
!`@D
Zk|;
V.mck
x\p
, 0j
(Nj
% ;7
1QvClJ
xdW@z
pY'H
PF*
Xdks
={AP
30 i
~7dM
qm6;(X
(Xz
1eN&Qu[
IntPtr
X0lh!
<=!#
W1hqN
TRZ}
dVSK
sUED
mIMf
BNt@Q
Xr4Q
.;>_
EB`N
x8dIx
%:IB
?/~z
-:NG
iK&O
.w.AO@4
(x32
j84*e
E?Y]%
MJ,2
y*caO\
b#NR
9QMo
3:Gmu
.&xv
y6A]U
r*5
hUV$
}lXJ
6 1 7
C_Pk
5dSz
nW]rVY \ K
frPz|
&.($p
X:.m*
Zr50}
Y~L^0R
EvF%
%bs_
(Wk^
,1Pu
SgoA3
}6.4
8 =f
k,}[#
8ntG`
B O~
6#i; 3d
ezO^
g]^no
G %L
Opq2
=V $y
R3#F
vgaDfk
#J?V
%tk]|<
3~By
}OjgJr
'/gn
EG9ta
+-*:e9
UFV@A
P<`w
F&a
FFoj}T
@<6*
JWPkQW
4nP1
!This program cannot be run in DOS mode. $
)?H'
V{.
@,o1
e\U^
1;utJ
5Okk\
%I%y
j!;qX
XH_uB
/5d_
.Owl
AcZk
D{m7
'.$]
4-VL
:3:K
zjJ+$
Dispose
Y2 <
U[hG
%RY^
Rpx(
8hH
_- Y
!"hf'
\A6F
#kYd2
Q#x;41(
;Ie_h
n^&u)Q!*xf
j :`?}
58#"
a7`V
_3@<
; >,
H9`b
x~ Cfv
+B7PO
(RuS
o 0RDF\
Y[w)
{vg;9
TG"EM
MS$Y
zoaY
b=7f}
xZR;TR
9_iQ
ATwY
9F(];
\7Y33X
~6pB"=
set_ClientSize
/GVtU
n?d;
&o0M5
)E N
B &6
*|'[W
NvxWb
p^9,e
e?h-
{8Cw
*;kgA
-gO.
W-'
6>
Dy,l
0uOIM
/7*v
#ex'
V]Fl
H<*<t
!7NsV
:~
0?``
m5\<Wc?@9S
y8*j8
\Aoq
a ($
T)4P_
<2u}
SU))X
M<28
zv+
5:/S
x@^nH
TrTObk
;mJD
/D,?
t3t0
!ZN J
aMx
^3"(>!
G:&
JhPv@
~[c6Ou7
}*EZ
+QN2Qt
iT?'<
N8OB
Do (Yg/
-!J\
Q+oAh
NA4.
-obJ?
\$
(&sqgY1
]-NmzK(
B6V+
XT3t2k
|+=d
!s:^D
LiJ
,<AU>$YQ
8IEX[?@
Y|7?
uk%`
Y][_
6w]s
~}=
5TP4$
vf3,
]n`3
,*2<MM
eTJ,
d`Ze
GUSS'
?/JJ
gZd_
'a;?ty
3Jt
YU `
s7Cw
LC8
@(5
=2DUPI
w`,A
[0+1
9J '
K]7b
NHT>
AZh~
_HZ]
% Xd
@86?r/
:t?-?v
O/el
R' z
jb["
>xtK_
:m
Y~$%)
PvLF
5/HELU
KpRt
`l7s+2n
-bZ
Y%W
~rWw4
3O&3
9E2xi
Up*
n6H/
Padding
LZ'0
$5g:Y
GdM9
4Rh c
-Z1#FaO
O=ZdIJV<D
"iv:
S3_>
,\})
;;>=&
8~rc
1@6:8
X 4*vl
F{EB
j8$`
5'4W
Tb`M3B
>']/F
[}Ot
u']I
LtC~
z,fQ
lmA1
VbE
2G _
Rz!=wO'
U?9
&O` 4
c|tDA
3K7F&
},Ia
!EGu
e^^] :N4
inPZ
$I)`
H |}
#A!i8hk
DKNn
S_Ie
%G_p
ll+?
/9x!!
kZ9}
eJ5B
nluX
".%8
q+P;d
=x^M
smb/
B0TRF
OTyd
c 'K
j1U6
'iA
"3[4
t"r.
w65A
S!c"H
h(iLu
xU`&
ScrY
l N;o
]&mR
+jw
7K^ os\A=
M%x4@
` a+W
LAu=
rz4`
)Td3g
nAbq
< &]A
DN,D
op*,
&,iLk>
y/aF
3I5
}~qr
5+=+
3T2u
z!#a
k):@!_D
Rt8m
k1:/
1Oqs
1T'q
acJ+
Vn=F_
hipS
8:q4
&ttR
r!^P
rX65R<
V ^l
C @
i3B$
Md]PZn
kIxq%
5lH
rQ#+i
bq\ >
(:L`
{dC
q$0S:V
^5 (
dnR,5
3'{F
BRML[
S<gx
JR pAdP
XVh.
%UiZ
S,R
Lk5}
v5Hp
)m(#
U[N{K
_\/@LR
!F(^8
~ZP
V9>oF
icqL
N(:v
D1,3
LXzI
gG=
CompilationRelaxationsAttribute
JYl2
C D68q?&
0lX1
bm'Mj
=2Ck[
7(-{]
^ b,
+E@[$
0U!l
LN'dooE /w
O=Th
Teq
Z[Uy
N`=. :H
$vnP]
`cA)_,
G.R
R;{C
^ 1 B
nTCv<
+:N;A
F .O
PcOX
Rt\n
- }
5m
L89&
OCHb
n3w`I
[WWk
M4\<9
]tN`
rIGc
euZL H
uS2j
N;b6'
Aoc
*snkg
je0@HN
<g~G
on+Nf
^#g^
Qtb4
$|R!
,a/jq
2R]z
jk/:
D{7}
%vSEtl
~iTW
M k %
h>gc#Z
}]J{*
TZpG
7 K_
[ 8^
`"UZf2~
cm: F
n(?'
bB"!=hZ
4+^^
?NHY
=I*W@
@ IN-Sy
a $x
K k
]MlT
:[GE
6T"vfp
O%n )eu
oXT:
8``m
S p~
"dj6
JFpj
PK[o
\;TE
99O"
,j~V
%ll;
mMTH
.+<M
IkNC[
r3gK
9kZW
]ztl)
_QYb:+
zv3V
@0Asc
z ]0
Mv A
!*$
M(Qerk
W_+
I A<
^xq2
Eg,L
Py~r
Nl[h
rmRU
Ba V
}g(;
{E(AW
#|7 u
PZ@
BlockCopy
+|vN
:ooK
j.;i
9}ZN
` /M@
;yfo
})|d
{|^d
5"(
nPqc
%kt7
15.0.0.0
z $
5!1;
c"J|-
>oHWhg
nk+9
8\];
G1XD
I/HY
OF
y&PN
S`8-6"#
8*3S
=X?eDG#
zat
.{/THNl
uAo"
9Yh!
I 7o
H PSaw
+d?u
XI %
aoVd
# &C
Gd~D
c{[J
N*iu
\fg;
&t2(
BH #B
a\_(+J
D@ l
2pQ:
W x^
8(>
v4C
# .D
hOko*
\0 _{5
QMz`
@) G
Z\
IV]y19A
1&q$
t?o9/
np<^
jEy2
?:b|?
te`0D
-'up;
8!A:,
f*|`
j7"'^
VKYC
^|Dd
_P`:
ComVisibleAttribute
_aC$
Zb+7-
eW{:
qbD+G
MethodInfo
Ug7u
@)Ss
]p4|h
7mS~@
MbSj<
x3bsB&
yo-kR
TB|J
rtSA
i>@vJ
% wj
tE<C
m `S
lm#h
\R+yT
get_Assembly
8o9k$
f 4y
pU}c4
Wi`[
-HQ)'
$mA;
v&=,
OO$OT
`3BK
-^<!
AssemblyFileVersionAttribute
%^db
.|[1|
t{Wo
Y9[^!
` *-
D:3y
]\D}
Th0w
d 2qe
Y{f<
U[^=
>7K^
7V\n
/L78
g@UA9
set_StartPosition
Azp1
m]WlU
Z'dADP
AT-./
BoPl
-87=
#:x pd#
9hym@
HnFWG
f Lu3
!cWPB
'.k>
`o?#"
MWX`
]B#m
|{#g2G
Y#&{]y
Fn +
l,AC
~a{7
l/{G
rC@rx
bzG.
.S*)N
DOt>1n
oGTC
Icon
bJCK
MH[a
CB#X
JGd>`s
Oxc1
eB[
yLXM#U
_r\Q
X@uuQoN
dztO
*K#Z
!qa-
9Q<<m-
!o:@
?[| A
@vXS
pl|f
3M"q{
p 3:|
^-De
v2e8
:6<-e\xQS"sdi=)0:Jckmrj/%
U%u{d
>
)" $m
-U>Z%$
0B2Y7
fqbU
nc G
[9X*
M%P-pW?
Byte
.\sJ
8EtC
_N4R4'
PN,'
w~&`o
g{u.
'&8n
sH)f U'I
08 {
T<>G
:<VP
O7DC$
T S:u
+/83.C>
+^F.
#h3j
L D-
g@x7
Buffer
dv@g
ln9V
Convert
D#7q
U\"
BDO 3
{Y$kuZ
1`CP
U[h'
w!?@
Y{7 1U
_8Vg>
/4Eo
W DA
^(n.
y6K:
_CorExeMain
SHaeryfecy.Resources.resources
i V7AC
R+{H
g7%_
W}PU
89h
<Module>
tHM*
$ Jvr
ad+?
:gx/
MOz?
75;c
xqC/s@|a
5Yn9
0Q
=,YW
c>Fo
uvrC5a
UHu
]~NH
)Y
u+DY
~Vz(
H0W^
Gp|'
System.Configuration
a6z BYG
gEr
^h+U
Irc$
A$T
$d,s
U',E
_PUD=UMY
/3" s
RM|er
M|8;7
)>V|
D0D&Y
Ih+d
egOh
5uSC
r1?^
\&M{'J
UV/q
Wi?k.
EditorBrowsableAttribute
+L,+
F?h,
M_@$
)f!V0!Yi
.t[ ]
CS&9dh
\E~7(
kW7^
TW'?7/A|
, `F
Pl 0V
+EOh
J=>h
k .6
~dFb
x+W
Ki ,
:3$
4kuL
igN~
ZIR d
nx/P
$ RCU
dF|W|/
U/Gb-
:ST+
mO>~
?S79
L<VR
L(L*"
vdq]1"
%_G*q
Ni`f
5Y U
~M@p
4osf
\SVP
Xhpc
Load
9b &sX
cS*j
80K)
~%%Zv
j1"v
v{xz
l;Z/z3`
~c_~
l n0
LP)9`mg
R &/
5J0'a
P%#
get_FullName
I[Zqm
sN4-2_Db
>+ZZe
86p QNA
U|IL$
*QLgb
GC+:NV+9W
h6C5|
'\9P~&
e1cCS
bbp)
g6[j
}3l^
s,[u
x4o}nZT
U$4u@M
DMlk
9;B7
tG:L
*+?-
xQXp
Default
B8sm
l7:
Zw">;d
IA]
%n])
`pr,A
wDQnr
Ef#
PdTmx
N/q:
$ =_
H9d97R}S
OkwS
*WLnv
ri;u
\d}v=
"Y)Z
S Z7
8`Jsk
~PixP
",z
Ms3N
~uZql2)
r+NE
Hsy>2
5uat
%A9r
/<VUy
G"Is
A c[
l 8X}
]N-
Ed \
iEg7
sb1z
8Fhfj8
]RWeB
q4>p^C
0< Gn
kq)#
iXUk
OCX<
3]9PE
|1\A8T
~"b9
tK;*
*O=M.!!
n+m*
7z/ttk
86]V
;<kA
CM"Kd
Q_y.j
\cd!
/&%ni&a
b.-s
m9?a
Object
7ZWW
|>`v
DG>R\
M( jf
Mcd,c
' nF
><k,e
.VIdFZ
Zq7X
S 7V
Ul2=
twz0
mu5
k$K[jj\Y
?x{U|
n=Q2X FJ
2v/O
K<P@
GhBO
*757
O)^6>&
+c#U
i]c(
Jz^s
Qk$d
7igh
=rCF
N[_"0y
_Qf)
O lD
62aY
|!>5
wE"q
_Assembly
m@Yo
Size
Uc2
fWu_
KtK9mF (
)(@
=+-L
nyni
y W R
K^t_B
#B}2
On-
j);/
U! .
: m>K
%qQ>FA
6JD.)$
.X&0
+K4`
c!6-zTp
c +]
qCPK!
8Z{a
R#Qag
CultureInfo
$CqH]L
xE/{
\-
1.0.0.0
|Mj'a
Y _. XG(
f$r]
SetCompatibleTextRenderingDefault
*)Ru
XB-.^M
Z83K
*p|;
=%L4u
B!GR
X:Djq
2vW6?
m7mE
iBy71/`l
\b$;Mc
8&T/cao
cqD*
Hf v
V76
G #>
s{XY@+
4: )
Sh) {X*
W^KE
G^dW
<pmz
G>UUt4
(]/E
O# W_H
O z~
))7#
n9G8
Stream
cab;
{$WS7'vdRwk;
lc3$,z]h
/;T%<
*p8`
6&yt
&Fv_@]
= +9
c 1!
(L*S
qgO
e~]w
H2TD
NG5R
7?xr4
=Q^V{
% (}
jnNY4EZexix0@2AQLNS:\+}x`#.resources
AutoScaleMode
jSmBbI
7Ww
#6XS
}{aYS
|;A58
Wa ^
T?v
SqU >u
6R'?
Ld$&
?Rj?9
c2]GH
3Lxw
ZE'
9A.]
(ct@
y90l
nFG_
){SS
";>s%SY
VI8dV
v2x+
(u;;r
q@O]
tTtk
.Ct6
,sHD 0 f
4^Zv&
1j;3
=2\TJ
1E_Z
34U#
k{My
D(5`=
DOp o
ResumeLayout
(hT jF
Yloj
6x,Y
2TZ4A
1J;{
2;!G
mQRWv
n*3
4yy1
Aid*h
T9{.C0(
PEg,
e@]s8B
/DS5
h#]r
EL]Ao!
cjvlb
uFLD
$tb/!
T~hU
n3"Q s"<k
2 p"
Rb7E
set_Icon
yN5.
c 6f
/_<<
^4vZ~
G\f:H
"isu
System.ComponentModel
)R_YG`
Ld$*x
8.lse o
?l{.
Pm(
KSOw{^
__-+`~p*
FormStartPosition
or)+;
.QP{
](N
'eh\"c
h |~
#E-9
cgQ|
AQBH3
<{e
aj0I
PmG;
'nS&5
+$C1y
Xf 63
VV{
pLZp
gPwS
Lb>`
@OT
,LT]J
!I79
D'Dl
"Qri
\<wG4
1ujk
wW60oBd
. 1~iX
WJ?Z
ResolveEventArgs
`NU:D
<y? 4
System.Reflection
)0 {
; Xx
yZ35D
T ;J+Dp`
sPCK
r@a,
@&\$M
JTV_
-C/*
qO.:1
~BPg
TP3l
G KJ
U\bH
&l_[
QzWq
>HUV
OV,=
kyTmT
wQR2
Y8pz1N
x$$UnL
w2Ai`
idih
4.L)
+OU{r
2g-3o
!RDi
kv )
B.!^53
vcOmnc_
t,cp
5UY>
/F@Qc
BRm
r.b,
mSe6
=N.7n
YwQGB
N<`$|o
IYI+
6WT oG
e_JB&
^#v
V:_h
^\2]x
S0`>
I[U7
{)ao
B]K{K
%S]AuD
wJSx;mRh
K6A
d_Y>
s`wJ
Q]xs
cNBC
T:bp
>%jG
Q}4y
:3L9
u}MhC
>i d
](j0
Lq$
pPQ^
_Sx<
aQ`kJ
8/%.
7"]Yw
-A`.
k3#&
njXR
,KvT
Zhz^
fCxAF
%k\0
50(.
wa^R/
O*w}l6
, j
| B4
?&VTO)
'3#Z
*{+&
CX!=
R= eo
7`OY\
f$%b
F67{
L]nmt
^-pc
C"Rd
&1c!
3~/P
QKkFw
G56$
=6.g
I+67L
ms?J
: oT[[
;WE1P
sF@9
`f`7bv&ua
{1%6
#zz<
N!Ce?
orR>
["N(]1
Cv}~
@2KP
; :*
#>$
NNU%
[(0
WOvr
,8Vo
'~Y<k
9X@Z
[zH5
S=y[JC
fb*ct
#g\{
2n2j
J7uG
nKT]Mb
4KS*
bfxA
)tY*
, X
gs$S
e64[U
,NX
);bX
U*w
)Ik#`,
[hC2
If'l M
-ER~
g(C1
7`]xb
QA8I
~+0B
I_}T
`Xew
>p&B
`d.;
H M1
jD s
k'wU
hXMWD e*:
/w[9
O= k
^~x]
V)[{
U bWL
zoHN
c2Gt
fY2*
DtT@
;g1,
fw %
3trR
H~r9
<|3:
)0<nw
^\o4
;zt2
mc\+
EHM)s8
dQXz
}E0L[B5
L2v
nZzk
,* A
.O(i
R1uBz
U ;r
[slE
l"TJ
p<E$
}>O]M1
hf|P
O<oL$
set_Margin
,nJ =m_:
@ie
+GW{
|_9!hm
'>TH
)@Q.(v
)P/y
S6,H\
Z5U|
[]9qM
kv7
dgdgse.exe
!:vM
r +9+
?qf@
KDF;
icf
`[1?>
ivTZ
W82hI8
5`.4
a ])
q_=&
g+;H,V
a6qs
% ~)
65~
Q].
j"k]
?0"xE
A [Y
0C~8
r:k
*KtkW
3A,/Ws
n87Z
xZ*q
{sZ$
|J@]g
7q%D
WN^OV
g 'p
j^ J
m`-t
c7| <
pFLM&
Zv}I~
8p +f
8SW8G
)7qFs
+]t:
hm=]
7ywM
)/Lfu!
iQ/Y_
V &t
~e+@
.O+h|
*xZQ6
$gW(*v
+N*|
K+=,$
@[;y
pljr
oR:^
"wb
]cT&
q;n=
j!}Y
;aHRU
;gyw
?4._
D'U$MG {@
U ~
M5'T8
t]":G
oa4;0_
System.Runtime.InteropServices
v_Q
'8hy
0r]5
I]@'
M6'o
#AN~
Lz?q
h%c0 7
~ v%
+pe8
'f`*
STdM
",xS
U[i:
Ex?
oz y
72.X
"D;B
z5k5
5le?\
W+d&;
g}T JY
*1lI\
XXv$e
ma\OA
teJb
b Q2
=mHa}
@K'r-
0 4d
eJR*X
System.Runtime.CompilerServices
F>|+m%
^62w
'",m
*:q 8
[[t!M
*,I*
Qe8bjv
T&+1
@?Kg/
S(Ap
(y2w
\"F
c6x@
ResourceManager
vK {
YR}y
T-wSn
cc;R
?p`*
<c9
6Vl
]f7?t
zUO"G
|7\0
~0R"|@
ms.\
psf9
Bfj
{ ~=
@$xCh
Er%[
p*Ul
\TG>
*bty
_Z({A
wHGe
(6KM'%
-vx`
vG$O
d/Q_+
m~R]
x\|
*"Vp
x #61N4
+Kis..M
: D|
p <
7<C%
[lQ|
ihe{W
z\I+Z
FQiZ
System.Windows.Forms
rCY n
bFxJ
2r>vW"
8-2i2
S=k?
URz`w
ud}2
^NBOI
,YZ]s
Q[}R
g^|<
!"2w
12$A
DPsS
^rK~
:6<-e\\xQS"sdi=)0:Jckmrj/%.resources
}:fR
)-*Q
T}yZ
5C^KK
[1eju:
_rlTT
m0kX
0Qlq
w`ZB
l"MB
j.eE
_)?&)
UU b
<k!t
/G7IS?
3t]O9o
0aFrKJ
G>w/
p`;K4um
(y#)
6</CI|
+^w Y
mo\O A
HqL7
a={zW
2rnZ
\fB<
d,Ri
Y y4[&rQ
8&v1
lsyt
'^-+
FxG@
^Gsq"
hCl
t%2<
R2oO,
\2 %
]9(.5
U`$rD
z3DB
Q/m/
jC:
/u,MB
&Q+
+t_C
ekt
8&d'
zs9
}S-
,Y3rP
0e~4
m&}J
H w7
LUCn
B|1B
;xb
HKB$X
J3*'
Kb6
bj$v, T
(qaM
v8[T
1_ e
M+*\
]UfA!5
04wx
)CIRa
wKO3
"^`H
.YjG
a:Af
<xNJd
qK|x
pU,m
*3b
TH]
PWwF
tBNq1{i
rM_h
7tDn
Jy:x
D].
|*1+
[BV(}
T hUm
`bW-okU<
/Nps
$ `
U Rr
/h;/T
]0/'
N} $j
yT~!E
+dz"f
"{+
^D b
[xbs
#GUID
lxDj
MGTg
Vt@"
vpco4
(Zht\
a*!l
InG@
fSv7
Qx.$
L -4
|(!
_$Q60}
q 4 t
z/-X
TH!$
DL{m
O ^5
@BU`
=L&d
Synchronized
NR&in
}Uzs
1$; s+
@&v^=A
oB38
)0mDB
rvx0
m0"{
+UiP
l2try
<'PR
Read
b3 +
H y0
#jD>(E=
eli0
y&0;
Bo Z
(M?[
$7'g
S1;/
b rEc
"j=`CF
hY{E
)30AGU
wBd~`
SVaN
Gpy~%!
As*~
=:[e
9nFE
?W-WS
yOW(
l]}x
&,)X
+';{
j-V3
FtdyS
tL x \
.u`b
= XP
aOq3s%1
rgdV
vcI]-x^n
9vpB!
W*5cBEA
|K{cc]
<| . IdR
S2!
aWaA,
B Rm
B Y=^
Tm;I9
BL2,z8
m{`l
z\]%)(U17zgv\\1YVkWS){p0\&%'.resources
i0;LT
9&vS
d_&$
; |

6r} X
=@Q("[
Y9$
]cC7Q
*-04
IZYf
h`U>
7# p
g\:z
7jKw
dtAn
(iHf
DRdK
rh.Q ~
yYc"
H*)B
@LJ3
"oe<|
]ATB
#K%
sZAT
BD<&
auz#
get_Module
5WuvI
}__e
n50vc
R&.g
9J0"C@|
kimVd
JHf7;
H6qoC
%e=p
3eH YK
|Jj:
8 0_
b V.]
zBB;k
{% M
6f]K0
[z?N
@LvC
MN)$A
p/ju
x pH
?nDD
h??%
Vk?9&
GetTypeFromHandle
qp T
Q)@rPL
"5#
ghsm
HEfP
AtVU
HZ#E
(y>x
3c"/
T .#
1Mjl
c@^9
+RlX
Jb!x#0
*( x
U.PZK
2-*
?^+;+
~f

|`L.
=_^r[
SR139zEx
H*~9
mb|,
+2\c
F\WO
r&b,@
Z"nV
O:w:/
c_:ZN
"VID.
>\nb
OR G
XzuX
%2Kj
oCT@
Cas
X)sp
n*$^
:px]3
n6Q"
/K{t
@ea~
<<DHg
w6^+
)DfC&
;W<|
4 PO
#SD6D
l w5y
O<~L
}JUm
mET0
mscoree.dll
NRV_
`;4 A
g7h*
40(R!
=6Kig
Cu=?C
E1!uH
UB:N
~l#I
DU!'
*ooyr
DUBuF*
]9Q'
XG3
6TqH
Q S
-5o[
mg#G
^ I_
_!=^
5iML
\3T|}
"t7?6
1 03
#}kC`
02Un-
saF{X
FormBorderStyle
O94L
dR*7
%NR
=:2B
T z#
;)4m
"JieNs
|.D?
JW]g:|\
^vR}
CK&n
$*T.T
Zs_[
(Qw
KQJ@E1>}
Laxs
$L%d
d5r]
4Z%\G1
S\zE^
SM06
qDk5
4@xdl
#DSyI
.cctor
Fi:bm
YUa5x
w" ;
,S;p
^z3#'
w>"3V`W
tu)
&+#%
&Xp6
w`50
96`P
#.M
>1O"]
eCt11
>?ea
SU'
sG*3
/Pib
GN%K+
=~u{&
System.CodeDom.Compiler
M=Pf
Vse(
;9l"
GeneratedCodeAttribute
q0v,
`ez&3<
$g }
@ %v
SettingsBase
ZVv#e]5
*$[)
Y1 <
3-x:
Gx*YErP
WDye
mO{r
? EyT
jC9M
qxm#)w
8V;~T
NVd
.agB?
K(p7@
JzJ]$
zy@kD
Vcn
o"Q"
VUC{Os(?i&8+W9[vW!ynmB1p$
4Ls8
/W(@
3 3DR
doK:
+;_.
B =-
&*|%
n_!K
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven04b_64 Seven04b_64 VirtualBox 2018-06-06 20:11:12 2018-06-06 20:14:02 170

2 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven04b_64 Seven04b_64 VirtualBox 2018-06-06 20:11:12 2018-06-06 20:14:02 170

0 Summary items with data

Files

Nothing to display

Read Files

Nothing to display

Write Files

Nothing to display

Delete Files

Nothing to display

Keys

Nothing to display

Read Keys

Nothing to display

Write Keys

Nothing to display

Delete Keys

Nothing to display

Mutexes

Resolved APIs

Nothing to display

Execute Commands

Nothing to display

Started Services

Nothing to display

Created Services

Nothing to display

#infosec #automation

TheSystem Itself @ 2018-06-06 20:15:25

Detected family: #Malicious

TheSystem Itself @ 2018-06-06 20:20:02