MalScore
100/100
MalFamily
Malicious

RFQ6.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 15/68 Related 2165
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 415.50 KB (425472 bytes)
Compile time: 2017-09-01 05:59:17
MD5: 7a1290ede18dfb2d8167f4f6e2375d63
SHA1: c95d70904207aea884443a5d0e22d1cbe6e44042
SHA256: 485a5a92339e169bf674726c5629f47d75ae325714ad7b3d7203b98fee17a2f0
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 5 pP .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2018-06-11 15:09:19
Last submission: 2018-06-11 15:15:34
Filename detected: - emma12.exe (1)
- RFQ6.exe (1)
URL file hosting
hXXp://22y456.com/Panelo/emma12.exeVirusTotal
hXXp://22y456.com/Panelo/RFQ6.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2018-06-11 06:04:08 [15/68] VirusTotal
PE Sections 4 suspicious
Name VAddress VSize Size MD5 SHA1
pP 0x2000 0x8cc 2560 2c9bccf1312d528f5b9784f6b5ecedf5 5deb4486898927ca965293e03b52b1bed1d6a860
.text 0x4000 0x663a8 418816 92572b617c75bbdbd911338da888bc9e 9403c676ed9cb01567b285b4cec7695b6dc9f69a
.rsrc 0x6c000 0x638 2048 3d6a3bf0de0b91f96498c4f49444bb96 05d8b3d9c6376f5af65cc2c5e18117413dbfcbc1
.reloc 0x6e000 0xc 512 6e43c98840999a716907254f5de4b61c 1afd61f437bdd3aece2c6c185b7d8db5a3a3aa06
0x70000 0x10 512 aad712bb4bac7ee7870f7e5e40a23af3 6aa0fb79a09c075c03970af93a3653745378b3bd
PE Resources
Name Offset Size Language Sublanguage Data
RT_VERSION 0x6c0a0 940 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_MANIFEST 0x6c44c 490 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: Copyright \xa9 2018 Goodrich Corporation
Assembly Version: 0.0.0.0
InternalName: emma12.exe
FileVersion: 1.14.8.2
CompanyName: Goodrich Corporation
Comments: cheizj5zzfn
ProductName: Benchmark Factory for Databases
ProductVersion: 1.14.8.2
FileDescription: Benchmark Factory for Databases
Translation: 0x0000 0x04b0
OriginalFilename: emma12.exe
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
No packers found for this file
File found
FIle type: Library
KERNEL32.dll
mscoree.dll
IP Found
1.14.8.2
URL(s)
No URL found
Possible connections
cuRl9o
 
86debf8e-7975-0a6
86debf8e-7975-0a7
86debf8e-7975-0a4
86debf8e-7975-0a5
86debf8e-7975-0a2
86debf8e-7975-0a3
86debf8e-7975-0a0
86debf8e-7975-0a1
VarFileInfo
86debf8e-7975-0a8
86debf8e-7975-0a9
000004b0
pictureBox1
e2c4a01f-40b1-9d
Goodrich Corporation
InternalName
2018 Goodrich Corporation
Assembly Version
Segoe Print
xox
emma12.exe
StringFileInfo
Translation
cheizj5zzfn
LegalCopyright
1.14.8.2
FileVersion
Copyright
VS_VERSION_INFO
Benchmark Factory for Databases
Form3
Form2
`XK9;j;\,v2R'\&XY-xm2HZO"%
Comments
FileDescription
0.0.0.0
OriginalFilename
$this.Icon
86debf8e-7975-0a10
bc4519c8-fdeb-060
CompanyName
Form1
ProductName
91299847-7a81-a2
ProductVersion
v!aG8
wB3U
wB3R
;^C+
n!SWMV
]
AN
vB9c
^^{k
wB3]
vl!N
k]B*s
o{C9D
S0[\
p_U>
dAXLu
c?'?
-nRif8J
0V05
wB3O
ByrH0
avC+
zsh%
4IU
Gd<+)
*\\/
wF}!
PNG
zh9o
rZJj
{]#T
;]7z
q%+z
=A:f
M#]dk
6>uxC
w;3R
QsBeC
wB3f
fly^
"+pu
5)qK
0~up
/&8U
#2l7AZ
n'&y7
<A
bWB3E
ZDB9C
DLnE
awB;C
BaJX
pU+`
))
%?
vwB9
XC*.
atB;C
GD\D
sXza
JJ~O
i=Jqlp0=
r.04
u..P
kC?z
]7^)
Z/sC
PZKtMhtb
wB8,
k}b8>+
=9G?
Z4bs
wB37
`dM11
Hf5
wB30
wB3>
ghRbk
_teqS
_3Hi
m}G-
W%$f
j 9P
"kK
;+ax
awEG3
(Oz:
_1{Z
s(,O
Gxh+& GF
wB3,
aqB#C
+$9l
Wj2@
w-|(
IIDATx^
t7m1w
w?\6
A,n(
}x7)f
<T)X
F
5?&
avBmA
;}Ms
get_Controls
P2i
awF(O
9u-3
2s :
O <zQ
U6?;Kz
\Oyk
$'sj
@leA'
0IpU`PDEu
sl^
uQA_
%N~S
>NBOZ
,"a\
Au9w
"]q'
0@jo
v(8G
G2,'
qwr(
F('5
auB9C
T)VP
e}C+
~t_}
oDbr
!yKZ
o&ZCF
^I3-
EFv%
c?n{
n	+i
3
@o
G!Iz
n9+P
+g^K
r q9
=|me
G%4ly	V*uI
0Q.Bk
^~j|C
/v_D
XBg$
B}]M
m7.s
F&ZF
}
T|
a`B8CJ
}XY2!
Ljz,
ILA,
t_Ka*
_:?3
D
Marshal
xo+pE
^t_^
j&h4
a_BnC
aawBU
T{mI
Vv,2
q#A6
^K#]
O\Va
&iFf
c<wDTj
Dd!s$
}hwB8P
/O#x
~O~R
|35Y;
@id.
B9CU2
)0P(
CDy2|=`
F=<)
PS!`q
`3B3C
K[K(
`
o2P
~0w9
op_Explicit
RuntimeFieldHandle
j3^5
R`d
m_;
a1	^A
,
L
p'HX@{
Zt_^a
dwC7^
+c"L
.\#;
AwB.D
59fM{
@B9I
iYIj
dwB9C
$6X7
%OB\n.
q/fx
P"P]
nD'r@
t/5:b
q@Gy
^<\F
SYfs
g|~R:R
uaMBeC
"TL>
#
7d
F?Cy}\
uq?%
d0,Y
^WVW
+mggn
<#@R
0p&S
cq-oC
_G?_
0===v
pVO*y
ek0~
)8^
Bf,F1
n*HfL
)u#]
0w
a
O?*"
76Dk\x=
c v\r
}{_
=7Z6Zn2
rp]+
CyKv
S9C
EnableVisualStyles
XjB9
f~?Hg
Ke>9
Ry;j
Lwp2
hfj![
4-W5
p(oo
[pk-
al_`
awV9C
kwB=c
1
%(A4&9;
U@%X
kVUO
lVIi
s+x3
Uvr8.L
N	#D
B'+^
awC"s
e{(t
0q0K
wB3
<)?=
x	H
gzUhO
^x0K
LwB=o
]ktQ
Td&(
],Sb[
a0'M
9pB*
R3*>
seR#
FiAr
QA*g
cu_<K
fVjL
]C=\
mY{{
]Rl	x
~E]{
=uzR
bqP]@
,8a
a'BKC
)|/
xiHB
=i}
a62I&
]7f|
Krni*
h%cu
-+LT|
4= |
^9IfYf|O.
mLl{b
G-9C
bVG_
Fu>\
JA+-S
a}S?c
m	m>,?
{2
6G
6kyc
3
LV
}C!w
,B9B
R-_yt
yO}
]nW{
AppDomain
+}d9
aUB9C
OGIp
.^+}
Li<b<y4k
YG$D
p89J)
6DRs
M~c$
#7^[z
RGjAH
![
y
g-H
get_CurrentDomain
/I|4
|u&;
aTB9C
.u	{
Po>H
-&Pp1I
TmD
`Wx{k
awBqC
>VL#_#^
?bNW!
uG2:
iec%G
aw#:C
Hed
FQ>T
ci)I
P9p}
9x$,
E~oUY
awB8C
awB8B
hChL
cDBvj
iSrMj74*%
PuN1
0~*%
rW6I#ug
vs_?}
t '
c
.n8
J~OgJlZ
8*rV
awB8S
awG;C
bbI_
_Hb;o
z_CvA
F4}V3
9]'Q
s*|0
!,$"s
5
(hM
hU9C
o\4XC
.wm}>
'jXC1Z
u==q
u==p
=nuX
ToByte
oqj?="?i
?GWs
isU(C
vm=O
:ka
V9~]
{`.&
set_Text
6T9n
]Cw+
Z0~v
w&X7
=K^{
.ZDZ
net,
_F
Fy
0pW
Dezf
SHcvRhGb
DEq7
K
[*}
.nXx&
\ke]
awB:C81<
K 	9
3T{ur
>V(N
kH7V
U&OC?
>H\Kb
7or-'
Awb9C
>Ix;
tjQC
#Blob
Control
nA1YGb
\
vP
qoW-l
]
Vj
/>)s
}4
?
)
TZ
i#NRzv
'>-CWL
{')k
r%hx
W9	u
<ZxH
kC-Fe
V@P1
0i3Lq
Xt_^a
UbL*
\Oa9ht]
**9;:
-awH/
"O^}
n~6|
bnpRs
s`EG
VZ?k
.,LC
V>.F
hi!
.5;
++<rW
pKTf
awS;7
as}`
u0wD
RwB=i
awS;0
0e=c
8n;;
E-9C
Type
9GS_V
dW@8M
;6E"R
Sf)z
e~)N+p"Qa\
A520
Iuhd@J
.+g:N
Hx.E
$.2*
JfrR
&^VeS
BeginInit
iNzS
B9I[b
awLG3
awB\C
/ix#-
UpCx
]N2X
86>f
/PGM
UfhV
:Qx{^v!
n;*P
6u\/
a&A}C
xawD
)KnH
=|l%
atC9C
"1OV
K Gxdd
awS;k
7
7/5
pIfK3
>q:PAp
+F%.+
CC
4ov_
1Ye%n
0)`<
aEB5CK0
=^	I
>&u{
h>Uk
d%V=U
a^B,C
h,k
(R/
[%&
+!Fd
]DXB
zFRi?c5Y
`?bN
uO\
Zl?
*
r!!u#iy
B-9C
aT_[
83B7]
$tB9C
m~bj
awB9K6
-wbv
V!a>-b
.^pZ
#)k~
yP	P
C&`i
x
~r
kw-,
H/WQ
~x`
Ug
0r'@
Pc3R
=!'
DwB?=
]rsj5
4a
=,
^y%\#
dgipr
a}S>cq)
*jkR
5JQ
=[>`4
VRi?c,
aIJs
4J~_
XK-J
RCUXw
k-=)d<Lh
C?26
i~E>@
yJvd3
hz`-
8
)Z'
E|Yh
SHcvRhGb.exe
p

6
|q'0R&!:w
Padding
lu-n
lI7&
|mb#
nCw5
$jx
!Fo>
3iD zMkA
.wB3,a0
}|7{
tT`z
6P8u
+wB39
Qd[UD\
oF)
giE
x;?Z
}@u`W
[t_^a
$xB9C
i<[>
Q[RQ0
3:I6
a>,O,
0F1
hGE4
-*mc
AkQc
2:$<ij
}/C?C
mi-K
T}9C
X\$
}^1:
E%U'
TY!]F
KTl
6s7a
0l;C
245V
-i#Z
E]w9
9{cS
TEwB?C
u-m^{
{&_~
%Pxs
sT3*
AvC*C
2kpy:s
eMS7E!
awr9C
~z15
DP)
k 5P
:1Ri?c;1
1^Zt
~rz
je'o
4)Pc
XI
%
>^z
kayB
Ye~V
Uuin
B9C
0
O?Sz
zb<_
awU4Cy0
e~9.C
c5h
+
1c[2
QvS
0`$7
.text
^!Y=
0b	x
+d&6ME4
"1o{n
cOF^
I|B9h~?
awZ9C
B00b%
a>B9Cl1
;W5=
&Qt}
GetObject
=`_;
aGWF
kn*
d>Bo
[m7J
X+r!
a=H
0PHo_
hCN1'y]
g=+#
Convert
:*C_
t.0k
c@K
3Gst
woO;
%awH(T
B`&Y
0H|
LC
+
--DhC
mIy(
m'6P
>e"d
r[n+/]|
ZG.	[
4~Ld
.'WT
6I[[[
R5		X
9|E?
zv7UY
qO\-#[
gY#fn
0~k`oS
DeYl
3D_-
y-rV
0f1N
OaUk[
sH8Q
Q<cW
lCP1
qx{/}
<VmY
OP;
|/|C
~
9&
l8)P
W!{
_zH4I
Cg$BP
EU!:!
{t_|
{t_}
{t_~
Y]xY.
{t_{
5H

>wX(
avB1E
F
iY(
*@]d
Ve!;n
aDM:
ryJK
15[?R
qQEG3
\'.
WUe#E@A
{5
6
awA:C
\g1_
VBs[
{t_\
{t_]
{t_^
z,`*i
)^%Wr
lvN!
8kfao
{t_[
[RP
}B9G
d_vn_
T+0/H
z,3,
>Fn
ay$B*C
{,rW
)"fy
.oy
q7)k
a}N0c
A3{d
I* YS+
D-9C
LY7r$
0qBk
Nw}X
t\{8
Zh"lG
j^k
N
F2
Ik)Q
V${P
,6F[
*JD/},f
VPV
as0bB
g
hv|
R)^.
+ukD
C[0G
>_t}
9(~Ix[
WEx
`.rsrc
9kim
MuT
awb9C
?2T9C
d>`
a{B9C
IhB9I
[IB9C
x*"P
.oyH
$D}0
q?f_
BZ<)
^a4J
Dv]A
Qbsa
<Azw
?^"9
zNYxl7
p[F;C
_LuZ;d
j'}j
Q,\r
`xu
$
~cz3
+g
!
kernel32.dll
k >P
03
9
n`;e
)+G8
%+ou
z[-K
U^t):
eS#m'
!O=0
m7]
Asx]
tB9c9
8.eR
"*IXtX
k00
|^/Q
98d
oC"
PE32
m#^
awB9=
~NhF
?CRx;
S(7p
%R8B<
&rl+2
/Y"=K
z-{l
@$l1
yrIw}
awB9M
\v=A3M
X*3p
N
oo
awB9D
T~x
dxV
awB9B
awB9C
|"`Z
QYSQ
T _4Y
ANlKm
a}jC
`lFdZ
{4o>
g`?3G
#F6D!
W~CQt
M?:V^z
:z=3DhR
KgT
awH3c
{1R*}n
lF$	gV
awB9c
Q T3
s:(6
pn,R
31\7|H
;
y%Yh
FQD(GO
k
wf
awB9u
>kg1
j3BT
d4pP
+x&
J]9*
1P
u;
xawDV
fIkkk
irB8^
2WM
|?n-
(om9
yTI_
q-'z
e+du
A]Fb
^~sQq2
FormClosedEventHandler
irB8R
awFG
"onJ
JMD:0
De[Z
4	-Mc%
t:=q
t:=p
A>]:S
y|z_x
l7:1
g-tm
=qz,<
D+En_
t	/z
f}L7Q
>8xZ
3]Ws
~B}ZB
Uw
t(
1G0
f%'P
C]p}
7
6'
fW@;S
}%</
\iqB$
{o[}V;
1jj3
0t&&
8@=
7g?
FA{C
Bm*Z
CS05
11&,H
nVVE
a'CD%V
0dO7
oT3P
bP
E
a HJ
1
OP_
vZ	D
buR(
-a"&
-FV(
a3B3Cw3a
hEt2
Ux'N
tvB9X
&W>(
0|/pv
tkN'
}qgV
PK=-"
voLQ
"-O\,
yt_^a
BC4[
7
6{
ywB8C
7
6g
[(=3
0o3X
k'5x
NF},
ys?[F
po;,
B6|z@
j+E@
JwnQctU
eYBbC
6w
R
y%&a
htZ=
3#.U~
<\aY
@,6$X!
%ynH
W~P.
uZaY
:r/Y7&
pAy
04C[
?Cma
set_AutoScaleDimensions
v->7\
N.M)
V.9o
b0AP
P7~
+|(Fiu
3|UM
get_Assembly
:Yzq
Pcl<
j|RrD
_>+n
5qDWhi
TIv:h
lzv6\
1mA
0Y,
0W.h=
G*.
XMx
0BNB
E>>x
vWvk'
W_8O[n
w};N=
/j"?
xb
$.X
DBwB9Cx(
[UVH
PQ<R
[r>'3q
Sky
;2w2
0P.
?{5|
i,r;N
=	s
auC2B
Xu{.
g(UuXR
gwB9C
{nCa
`w`(
)n-n
~45d
;,Cf
ok1n
cwB.
1
yc&/
I\g
ZUdxY
T<e
T`vQ-y
PKi
WrapNonExceptionThrows
5O3
prwB=1
i:(m
j#]']
wwB=R
v/oo?~
sr)
C^-E
HUn%
`	Cfk&Kw
l~!L
viR_
b:	o
&OxG~
-s(pG
gpA+j
aw!8C
<gd^
3#M"
i3e]k
CggN{
EVaa
RyQ&
.]*?
0+@N
XhR'
ao/@u3{
I0B9I
VI&*LO
agB"C
6tI:
M! 2
zGyI
8*)j
@fVL
g`:
_t^Z
,jwB<C
;
n,'P
f&:h
y)7
mS+o
AW~X0
Z% =73
97}M
#E<_
mTc<M
P[MRQ
g~c:
Bhvl3'
aGB9C2
Ckl
q>
a%'Z7
fN{IW
ava2Cg0
e_99C
`u-
STAThreadAttribute
yQ%b
asB9C
;})9R
xt_^a47U7
U}/>P
IHDR
e~9/C
drB8B
0~]X
XowB9C
1[c
x?}Hx
c4m
E|xM
w7&U
:]D1
DoA
481P
1hff
rT3g
SYDB
>&S?W
Cd,8C
ur"
@u7L
(W=\P
J5Z_[
C8Uc
/0@V
,
Ro
bv[Cp
l}g
%4
(WLN]
V(Q`
[
wxy
@M@
&?[v
dqB8Q
4-]&
JcoE
\"_9
awB>B
System
EventArgs
Ku]*
OE[}
Application
n8"P
])!B
awF>c
lrt
.e),dz+ @
i
Kb{pj
lyqi
i9|
SLNDI
MNO?NW
dw)*
mXn]?B9C
doJ0F
tsQP(v
`,sk
ae=$
)a^BuC
{;xB
8wB3,
0
_7!6
Th8;Vo
[~`8
"CMj
szq/C
5bs
^aXJ
cH"q
i~k[W
;\g^o
OfDV
PrPQ
f)f
pewB9C
7V7
`|BGH
7*\T
p?'|~D\D
:"l=L
h
?/>w
JeH):{
2-v
S>*s
0gz.
GJ3K;
lywU
*}B
_]nK
aw&?C
" ^x
)/Q/+
:Yx{[
Zt^[
aBB=C
MethodBase
#Strings
@c0
a1-K.
[[m{
awSK0
{t^^
Image
{t^\
{t^[
[Z';
`6KP+%
X=m/
$#^o
w"<a?
j*E)M
cQ7o
yYV|
d{\l
1'%U
//q<
ApAr
HtBIkv0
%DY
>l
s
6&]1
&Mvm
akC9C%0
98}%
zQu
9$.C
,)B{
NbR?v
[rXO
g*3"/
VirtualProtect
uxm-Ob
~NM+
je&u^yv
NB%s
r\)I
^6M<
B1-8
O_i)\
'2eJ-
0
6K
p`>T
9c3B3C
@9~Kk
)Z1]
YctQ
UDQzw
C\eQiK
swNt^
9+~F/
z#_
L5s9+^AP
qdS{#$*
%7_]7
get_EntryPoint
[t_^
"X_l|
C>zY
.~z}
wo~
F
YS9R
V6m\o
Dz[g
0e$<
+%?7
F-9C
(n_2]+
N?`gw/
hexn
lr1w}
qR
~P;_
W6(Y
]$l{M
E &
[t_[
JF/oH
EO596
H:q0
DU"h
a~B
Cy0
~m'Lq
System.Diagnostics
uoV-{}
pnkLS
qm@%
waPBzC
w	f9C
N(?p
O6t4Vm
uOdO-l
EOcZ
!pF;o
zOEZn}=q
MJVL
7|F^
.
+(
oB9G
PScqH
&GG
=_>UR
109N
pz])
bw=
awB`C
I B9I
Y)wwc
B9Cr
e)'Y
XhY!
~ 1d
IKK{
d30z
j2PJ
jP>
`Nmf
]
,v
moZ7
\wl\
^C4fV
$rVG(
k MS
dwB1C
lb']
-]nE
awy8C
wdrQ
EpN;
1 W
asS?,
^)/=w
OqC9C
4
Ex
n?iQ
lTT
XFHY
ug$]
rdQ(L
avB8C
,Q0eNF
ZokY
YPZxi
4YW
g '
%zpG'G
Ccbg
(|XZ
QsB^B
ON"r
Qe;>
EJVd
icA
OGl	m
WXIH.
?OM&yi_
TIo0
~Kq8
aWb9C
P3NM
PKOD
i';v*
\tP
aYB	C
QF=B
w|8~
-Oj6
set_Location
|D24"
4(vF
:=dKCZ=
'tkQ
eA8|
Yt^Z
p-;P
q$P*
auB<C
O8'L:
ComponentResourceManager
p`Yh
.a]B8S
g.=k4
P7U
y"!\GK
][b)
"fHl~p(t
_CorExeMain
`B}
w	gu}
z	(Y
w8J?1
W5kx
i{
6`N>?
m~ pb
hEEG
VjIg%
A[^0<
HX}
[t_{
P=`
j9U
a}n1c
CI}Q
XeU
A
}0W'
@*e6
|/l[
a71F:
RrpS0c
t8=p
*{H}
2^rH
Nnxk
%K:1(a
Q>+EJ
~X~2Rb
iPo*X
FR _
P:rtn
W-W5
AwB3C
awB9Cs[b
-QluoE
s2=zO
B!w
6dKEY
DAZ4
8cwf
+=I9
tr_p
;+dN|
]44 n
Qd*F
p
i
d,e9
w?nD
X-9C
`w=1DBp
Z@A(4
k	+6
UHh
ajL1C
rC}Y
hSystem.Drawing.Bitmap, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
szr{
}[1nZcgh
yt^]
pk-
I8B9I
tt9a
Qts=
6rY7F
LlY;
9=71
h7qIu
WH
z
dOxN#G
7Hi~
S{&L
irb9Q|i
P^
'
"QU
@VsNk
C5c:
DKl`
^CsF
*Fj<
55y?[&#
~t_[
~o!#ao
V`wB8C
F5
39
xt^[
rOZT
T)4r
@*M
g	R
awB9CHRU
^TAU
g2m}
w1\7
`7S*i
-{5R
bJg>H
ucbQ
?B^,
![f\)=
e0;-
m+(G]}
M#'Z
zt_\
gHK+
-|LV
Form
!uTw
aNB5C
sB9c}
AgvJc
xt^]
`EwB:Cf
X9s	S
n6o:
xafB
s&^$Q
k_"9C
%X-e
C]vi
DbjX
a!BjC
{Xsd
Yt_}
Ze>E
@S)I
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>

<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
  <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
    <security>
      <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
        <requestedExecutionLevel level="asInvoker" uiAccess="false"/>
      </requestedPrivileges>
    </security>
  </trustInfo>
</assembly>
/L#5>
awC*E
fZddE?
-pu
2i:B
eu0~@
w)11
0T6!
]m}
3r|+(|
YZAB
mXOA9X
b
-D~(
YBAi
}V$_
fEVJ
#XB9C
sNT
)vJ_#
N`h8KvU(
X$Y<_
{1w|
$~E|
t.:"
wZnF
I1\@H@D|n
B2CB0
Cd!\
[+RM
$/(|;6Ck+
2IW2
HewB;C
awC*s
5
p]
tr:xH
eaS0c
[Kx^
bawB8C
u:|wO~O
DdK#
awB)C
h2/W
wB?X
c3|Q
7;	EK?
*_Z,U
awH?k
T=j\
>Roy;
eqC
m>S"
SoNM
Qbx=E
mw	Z
ai(0
y_*9C
[ _x
wB?@
awSJ
wB?D
C-FA+
:\(]
awB*s
x+jK
p6~Q
C1o9
v>I'q
atB1C
F0!z
Xn
\a	h
4x>.?
].n:
o31_
,jQ&
"l	5
a$BMC
Zrg
BqC$0
gWB8C
|w8,
-*oci
>k77
IJCE
set_Name
VQT*e
Wx0T
I<x=
:M?A
u<=p
awB?C
cE?4
*aIdf@
10U}
'9"~6}A}81VD
'>7U"~
p2%u
6wZ. }
jtrS
N=Q6
02	_
ziqQ
E42
H{4J
eVoR
h#tg
j<n`
nY!Tw
&Ny}
|@+s'
get_Length
*\$x
wB3
rnM%=
AwB9
T;D
~t_|
u8=p
`XK9;j;\,v2R'\&XY-xm2HZO"%.resources
y,^
4Px
VF i*p
m5aS
Yt_\
_vVy
cS~mk
!!<
{t^]
:
 !
=B9I
0g
|
u</o
v]S=c8z
0n6d
_
X{
\5w@5
awh8C
cp<JC
p%,P
ResumeLayout
0rS
q2iC
_\r8uMg
\.jlq
="u
avB1CV>
v@/qtA
?:qc
ltj)
XDwB9C
7kcL:UL
[/8f
t
i
Vxe$,
c
xP
bYB"C"3
ValueType
3N7>
System.CodeDom.Compiler
set_TabStop
GuidAttribute
hwB8
gX[k{;
[-<h
SetCompatibleTextRenderingDefault
I\$o
V ~F[
e{A&05
n:(P
i,3[
ZG((
b_
g
Xt^Z
,]zcW
"YZ
Mw~i
f,G[
6wP
a}]5k
{s>#
<z#o+s
n\)M3
_t_{
_t_}
_t_~
9Ke+.y
.CAS
!S*U/
'.,`8-
psj@C
a}H.h
,vO-@
IuB9E
p?Mx{[
Pex#A
q16
a"B9C
Tt=!5r
RY4E
xY<e
hCm
wg8(?
_%IV
_t_Z
agBuk
kljw
_t_]
_t_^
Giid
r)ANHe;
g/BYl\
aoZ)C
4PH*
sjZ1S
N,^u
+~Bt
On]{
KOncm
wA#
l
?`
0j$S
duNA
reM6L
Zdo9
B@7$
fZ_tE
?,Y/
^,&g:
~`89C
5#J&
2_o\
mulu8g
/H,v
Pi^&
^x
mawB9C
&~a;
v:e.|I:W
k	Ob
mbi@Mv:)#
=JdF~
^HHe
cO%f
[[@}
|^$S/G
qS>U
zY66
| L}
TF(&
@6l-b
5gE
voZG
([	G
u6I*K
8wB3kg0
J"xI_
UInt32
24db
0j]L
aw2=C
aw/8C
awH1c<q
qD*>
R_y
i[!S?
^,wV
Cf3s
msS3Q
O"F}~
9PyL
i s
@awHJ
a~B	s
2Ri?c
,Uyc
s?eY
yt_[
]{Cv6
$'K5
yt_^
h`n;0*
yt_\
/!ciT'
`S[
loZv
A4-9
LrW
a~B	O
Q352
x9c
r7)fC
BqC[0Z
kwB=A
"%bs
kzS=c
I_\L
yt_{
gboB
#tI%
IoZ!Q
ty%C?C
FormClosedEventArgs
v)Jp
]_vlw
P"jQ
+LWn|
wo)%
Nmi
nJJ\
7"!_
H?p7
Mg]B*s
qN9C
vB9A
eRp^
AH;Z
awB.h
e4@8|2[%:GE
?
9,Kh
;G^{5
>le><
PU(H
e"&\
avjvC
0qQ
*0D
cX{\
MWSkA
Y,9C
=wB3cV
;ki9[uH
@uXv
DebuggerHiddenAttribute
i+5.
I
B9E
98,W
V
=Y

vHU/~
HDVq
~I;[
rj`@
!9_:$
awB.B
;j5V
ifGK
Pt
x{
k=@_
3|
m
\/?G
3t3;<
\sP2-b
AssemblyTitleAttribute
BatBDC
`XFz
}3q`
|BG1
(A"%v2P
TlXj
(U;N0x
=`Js
MO#I
t^(b
@nVZij
$@F"
x/a:
vB9,
oCMW
gEQ.xms
\lfD
-f`*
h@k
X*}uF
#t
'
g-}09
`i:U
;\r(
.6}k
k~b7
\Cqq4
J-7:
}m	{
awB9CsZa
add_Load
IdSV
zL?L
ZPW
*'^,
}
a8
k,/1
MA\8]
X:&\n
YCcm
Ye(H=
awB<C
,W:G:
P%,k
mieM
J~b
a}I:k_0
v;-+
R
$[
J}9iow
#c%i
Vd#T
8F2ph
v%2H
t+,u
`:yf
ETxv
b^jKx{[
i%_$
IDATx^
MMb!
2m
-#
}}J
=#v.
sB8J
awH.k
CsB9
|r<S:G
iwF;M
Data
Pejq
[`2dt
S-S;g
crB;B
py@
&mcrY
&lVTL5#
0\28
anFPV
`Pj_>v
E6B
7AR4a
&YmP
E6Ne9
"[lG
7j<d
ad%m
9}RGD
iwC+
M%TXe?J
htD(g
"+'y
Gc?6
}0iP
Y*+{
scc1x+
l{f>Ey
I*ltcUU
plQ.Ql/
F7w,N
:`+o
eFj^
;f<<b.I7
D
"H
pHYs
.ctor
~xjcC
b=ZQ
?2U9C
d_(9C
e4AM
hH8g
a'+A&
B9I
*jo"k
mgC8]
6wDoraH
.97$*HFd
bC-D
VMz/+8
v,=f
bDA{
B(CT
x+}B
`b4?
}?d)E
-bc#
QwB=
HrXb
n;X0
O1w{N8
$O>
^alJ
KZnC
A?)NU
CZ>[5
mv("
7A5o
#L
0
A3_
a$#O&
Invoke
Ebuu
ee_!K
y'b?'
1:f9
b
|4
_&4~z
u0gU
_t^[
fCy
,Oez
G
"<
+w
_t^_
_t^^
XF*s
bwB9C
GR]),
i++J
6
FY
sI'4
eB9A
=lCI[4
K.b>
0cHu
vCuE
awS;k
0
4`ZK
q=2?F
Zt^\
[o}>
Zt^^
*t1
`>&P$
Zt^Z
N-/e
P*i
<X{+
$/?s
D,r$
=!gT,$g
L?w.
t8@n_
y97i4
w_>9C
awG9C
0f2Q
iyb>Q
GJ{^zMm,L?E
YwB9Co(
CW1#
(
Ro
f>)
LNR'
nw;
c	sP
Module
#Zj1pkc
j/wy
T-rt
~mPO
iqA,
m^wF
g<	{
/S	(
Array
d%"P
eBnC
NDE(
D}^g
~NY
nY%'^
^ARI4i
~-.~=
Mr1)
a#-~&
=Mm!
@Hec
@.reloc
8row
yt^\
yt^_
R[W	}
1tp^#
yt^[
yt^Z
xPsM
f=BP
{f7IN$
a&B9C
jTI<
d7[_
Rs&+
_nOv
[%@cB
x`](k
f
i
lXJj<
yUq56
t;=p
t;=q
lgkm
dYUtK
_SFav~
!zcK
(o8%
Byte
get_Chars
ax,O
{KC+]2
`GhS
s`\A
zt_|
u111
k 8P
K=c'
apB4C
^4u}gy
v<7t
b>-*#L
O:P6
sL|h|I
D%L#wz
-b2G
AuJ1K
VEq[v
`vny
E9.V
t$	4z
!odat
gRKl"
`t,x}
Ac&w
JJS]t1
tF~p
O40@3
0a	rW
0l'T
[?T4
~g#N
8gwB9C
arB9
3q
=
2?eo
/ N
]j&B
^")-+_E
-It3A
~!=;
=WGM
:2q
yuK!M
^wB30
-{jc
Hk9,
ufG-,/0
hHh
a}h*s
V9O0
Dxv/y
eazB
m61:
sbj
-Pt:gg8
FGUn
GK98
I|G)
>Och
kWEa@
aa|p
fe7B2C
+2F	bh\Y@
y
B[
~wB=C
/
>i%r
j0Hd
WWS,
v8SLe
$mB9C
0~k`
f"W*
iaWBgC
x|V>6
XZ)m
j
.
`ABn
zHui
KM-b7
de s9
w4\q
=v5Z
KH}:B
sS_y
m|F'C
UCd:sC
J:n7R
@p_l
I.B9I
a}S'kM0
asKBT
aO`
1	V@
b"UA9
,PDb
L]~0e
a8BKC
EZ^
3,-U^
r4Dl
62"
i{a0
b3B3C
aV\.T
"[]
BlC
0
set_TabIndex
;W9z
GF9Jz
6Kd?
R.^&
b`|e
eAmqM
2{Ve
U>"o
a}N0cc
zO{!
.@L@
N"??nOL
&&{'
j$?tT
qS:IV]d
rV=Rr,
A6	S
n3iB
U/_s6
.8~>
-a}B
G>>
<<t;/6
jB M'[
ave;C~0
kzb6
RuntimeCompatibilityAttribute
o0:1
oQO
mY|!
avB=C
C0
(jun
VDi]
fq7-tex
Crk
vy3B
w?E_d=
@9C
1
9'4"E
Assembly
ewB>C
~DDN
q<s
yZ1H
mzD@
p,{)x
$gEh
hVz"
0&}n
GraphicsUnit
"`S=
M*5-
lJ}|
sJp!
Q$@_V
@wy9C
6BI=
p.
P
=BaX;`(
e
]|
bVC}C
d}V
y~Wq
6B7CB1F76B99023BEFA8EB2B530216F00916E4DF
ghBX
pobM
]n!^g~3
B[%e\n
awB9=y0
&F?+
SuspendLayout
0~k`P
a#\kB
'>aZ
X\7z
k5)Q[*S
kAPc
r>N]
.~X
#" a
&&Q
GaPJ
Ldqz
bUtm
mP10
^0
nwB9C
's8O
`-.i
iemd`X
e05F
`r!(
yadC9Cjw
0*_1
;[]S
Size
&8W_
[."Y
(Hw>&
F1/0k	qR
+9GM
bP9C
\8?s
m5T;5
Zt_^
Zt_]
~}RCL'
Zt_[
Zt_Z
CV$C
taWBaC
:?V9
set_AutoScaleMode
cwB8C
kk$;^
aj/C
S-Xm
b4#Rs.
.uza
mh]qd
wB9C
awS-
awD1k
wB9F
PNq
&
wB3I
5kQa![Oy
Zt_|
Zt_{
1.X$
R>VI]
fs_<M
V,m9
wB9R
0'W&
=2[O
LH0
WH`Mw
X1@~
k{S>cR
EwB=1
sfJ0D
avO]C:0
^	qQ
dcFG
uttX
EN<=
aJS
IContainer
}3(\G
U|WR
du2O
a%B8Z
53
#
M{n
@#nh
`
_\lX:C
awB=C
D`Wh
2*Ai0
87	`
cVW#
c1-w
<N;=x|j=
\C.>
aw@9C
ec,
apBDCD0l
1F<+
aTEk
kk.e
g;u
NVh}
^x` S'
ve[V"&
#3/4v
]V~z/5g
b
$D
V3qW
Bg[e[p
t2q3
1YT$
.Cjn/
j6`
?,Ij
B}Ui
d'Nb
yPT6vp
u=y%+
5{BA
4_"~
!2s3V
[wB?C
mh?A
If]u
u^Nh.t
rC7n
r0W~
^m_3
=-qGN
QVutVw
)*#
0t]
hwB9C
u*1P
,`mKB
0c4H
4QR9
o{K1@
a39;
/pw,6
'oQQ
#}G\
S]$yL
SThl
1l{qzM
a0wA
.'vg
!{"=P|
Cg:(=v
0JIO?
[>9
kwC,Q
n:*P
^VqLg
`tJ<c
[PG5
a}Q)c
%'2se?
In~'
;tnf
'W_}uf
loO8u
d$?P
m3#N
. :/$p
GCWH
;bKFI
9N'VCh
nt,x}
qy%,
8;kT}u
^k7rg
_W9I
b4`9
^&W-,
0m/-
_a^B9C
Dom+
^t^\
^t^]
ResourceManager
~_pmr
H[D*
#^a@H
z{(,
d^1
5Gi9#
cD^|
4Tbk~
m,%P
:kR)
6Knz
veFB
z=FG
duhR
=&YNT
2o3
v?ll
f[Hr
-a4Q
ContainerControl
a8BwC
QtCG
j~bi
AHAZf
QuB(C
pLwB==
DeQt
0p,2
st,x}
udS6
Vxv"
<B9C
2ZSv
a$_j*=
6{s7
n+U:
N^Kd;
j~p
~t,Tm!3
fQ[Ea,
FCRKjH
w)fd
vSGI
kBNQ
t7*o?r
XL;W$|
gspvX
GDx
][^w
a3'Z*
o+(?
[?_.w^w=
aOR9C
kd|zu)
J)qB6	Dx
2e)k
wB9Co(
KVQ\
2\Fz
a6&]C
d=x
g{
w
lo\-l
*cc;8
\/)Ga
IP-|B4r
lz}]
CE.b
Yh`R
F^Z,
LOq7
B3GX
'&HOCV
)`3BzE/1m
}[&z
O$'M7
!hNS
X3%
,wp"
fAfk,
t/wB9Ch0
'Mc4dom
L	
J
|'0ag~
mT@
Yta6
Eke!z
OlQ
;h]m
0.v
GSW:
Gj+(
R	~b
.0rK(
n`F
cjA;^
AssemblyCopyrightAttribute
)`U|
~^2HY
aSB9C
0
0q!:
VloQ
d{5(
vX4`
Unfn
[	jI
[})B
o4nH
OvX]2
awBx
Ak"@
4fJ[
=omO`7o[
~L[
x'FR
#USg
1wB9Co0
6:4e
|"v`be
OGl	a
oh(
/c
Ukl/
SO=E
"`F"
BTzV2u
7o[+
om=2
qNZA
&Ey
QWzbe"F
awB9CsV]
<*h#
*p>Hq
+M
3C
c+-08=
CamB8Z
hD("
}A~
,
`#h"s
a80P
]qu|
S*s#
7t(o
}wB9C
Ogy~.
K}*~
m3VcI
}|z;o
awB9
6Nd_;,
jUf8
^^&n>
y/5j.Tq
/5qB
+^J
awB1
o7a)
0e?RA
UYX
B9Cq0
qwB;C
CF}
I)@]
B-KK
c*mq&H
awB!
<gFFT
awz0A
X{^
{/E~ke
|rJ0D
pBIkv0
aJvH
P6o
ox,.
BZ'i
\z],I
Close
)l{-pc
P-LB-A
4QTu8
sWT6!
cive
=aJ
i\N3
}qke
0F#
*ME^
~Uf$e
u<$u
ik51<
0cq
awLA
heo35|
aP&6>(
5U!j
8M=yn
F+&y
n}pH~
V?xv
K|Tm
I%|du
a1BPC
{B9G
>7d=|
y/qB
2@xeL
BDFH
{9.ik
u_Zp
dPX-
!p|Rkb+
"k?#
awSGk
AtGQ!q
'7
 3
ZnB9Q
h_4jQ9*
#	85
awHMM
x~>L
?.'5
z|rw
.j~i]
!:s/
by~Q\l
@6v
`(
x
;(o	!
4E+i
6wB9Ch0
nc+y
~},~
pqbU
rLFnD
[>n:
3%vw
1Wsv
2~7O2
AOY#,
Jd\r
?|J?
YHB
Z?"r
t9=p
gx'*"]
a
AB9G
9cX+
1/#1
qI,i@
a$;J7
QE	dNV
e]B*s
q,6P
gAMA
l]sE
[Wrl5
d$>
^t_{
cc<-~Z
45.
ZvD6
wY6jhF
^t_~
^t_}
^t_|
`f+1B
e+mYE
i2F9C
AutoScaleMode
a}Q?R
YOI[-:
Lz}!
W],9
j9qz
vXn
O
A$i"XVO
uzS
oL;
^t_[
^t_Z
awB7;p
W+lD
.cctor
^t_]
^t_\
fZ/kg
K9K`
]gMx
wdN(D
xawB1B
|q/
l,\u
y5Dn
mscorlib
uZ]h"?
0v_0
awF(c
(@R4
IaB9E
`iG*
IaB9I
=n}[
^hwBaC
DzKq
C>j_
wB8k
e9_EiW
kN!8C
cwB9[
lBwz
UtveA]E
D9g?
XA`a
cwB9C
yj*)
8wB3X
K#ODQz
(8#W
q#!
II:>
x=+g
T
'X(
'(a-
U-6JsZ
2HbF
q'9C
zt^]
ControlCollection
zt^_
|wch
zt^Z
b&(8d,
wB8S
(-b!
3G^{
M`x$
s,xY7
igE<Q
CwB<C
G,'`r
cwB9k
cwB9h
AwB3k
n2=;
h#Y_
b#tq
cR
H9C
vaWBgC
WO>OA
72:7
:V~"o<
+x){~
`W.h
fCx1
##If
{t^Z
3
6{
\"IU2nf(^
a61@-
RWq6
ps^ak}0
u)i-
?Y/
#jMh
dPn7
3
6K
System.Reflection
pcwB9C
Y2t~
@:BV[
Mly|
`wBVf
4W^
0Lh]
tWY1
I
IDATx^
^iUzn
W=z?
Kn<Cp
9Ayykh]
RuntimeTypeHandle
ehKg
9
i
&|f*,o
Av_<M
G]0v
(	=FY
~(ns
{Z~y
slUz
0~ro
o\XI@
nIQ:
x,+P
KwB*s
cgms{
0N	6
v/*/
auI9@
o2mz
bF-5<
W{o)|m
][|^
EakBQC
imcr
W)#'
L}mxfW
'#"p09
I_j4
XdL9
9DRc
cEjk
jHj@
hks;
%'X'
(VwW
0o8,
89G->
aA42c"
T;Z
Ia`B8j
0o8%
O,Ar
3>IDATx^
ZrdF
BABt
0-<G
Rbe Fi
*Bhwu
=lu::
|M
2
qEYT
>I{8]
gdN([
b2ef7fb2-8a3e-f5.Resources.resources
Pl&:D
ji
S*UtR
{*)$
)vi
XqR%
f0:g
+2UW
jHB9C
7w`]
a(ME[c
6X-:94
((Lj$y\2
egju9
k "P
SbVI
6c
*
^x
^
26:
I>4
CG}%
awB:C
=o	!
awz1K
!jwB=C";
|rJ1A
9$#WE`
uP1P
?u5p
fBy
w25!
0q ;
]Er$4
'*!e(wO\h'+
/m_3B8}
=fx~
@IbI
e]an
j0[>}
ZQ[h[
,=wwm
z6k/
;:JA
kWd9,
wDyJhc
agz,
$z;d
@c49C
tLH	j
aRBJCF0
Ht:o
4rLu
IauA
6$h<
"V8+
kf[V
<\Q-
0~ko
YeHMD_40
Lr:2
awB	C
vL?+9
d,DUm
?78S
luL%K
,g]Bx
_7~,
XU	Z,
_|-D
6,HN
.!]=
awB8C'
Z/P
<sXS
asC!^
.cN*m
{aLBvC
m}Pr&
@OJO
S5|s
fNd^
Na|B8R
""yC
y]biz
"~`j
,b^^C
a$6K*
0a2,
,psE
IB9E
k_$9C
@?Ca8-
oawH
=|_$
dW@8_
l1R>
We;K
2y'e
O]zbq
Xt^[
C M
Xt^^
ZZlOg-
i@UN
a\M3
0~)A
(Loo
j-
P
N=^:
FM7J
`?cX*
X1//^
oJB9B
Wd2B
`	7.
MMan
__8/B
_,oS
iQA3
'mBonw;
(3'\
BO]!
Zr<pR
(PF6C0
RAe;Y
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
]x,.
u?s7
&
C2
On-i
bja
Q_?{
mr<$-
W/og
.Copyright
wB?,a0
)41D
N1K4<
k.>E
U6d8P
sjL+b
av_<M
B^~d0~
a6Mwy
Rr^C(C
H&tSrZ
0g$#
u
=
WO &7
Cw&l
mscoree.dll
!This program cannot be run in DOS mode.

$
A+$}
U3lA
awCV
QFMq
zt_{
E;|
fFToS
I{4N
3L~
4(:
Zt_}
jqfZ
\c19
`g1x
T+y-
bBq
>Ao
y4[Q
7O4S
EIVm
o/|o-
Dispose
vp#v
JMD:,20
tgZ*
0x*"
p_Z![
yx[1
Y+RG
Om
P3-c
[27
T,[]
_\ke
DkT~
JY?&
Yu]l
XAgP
TJ$U
:-$!
TGut
Zccj
$F-w$K
=o$h
zt_^
lj.o
zt_Z
h4=K
Vg_@
MA:.
K3OWE
8L9s]@X
A|Od
awBAC
jW,{M
YuN(
+C9C
M`pP
DfkF
{KI\
0x_0
u:=p
u:=q
$:j
gZz$
+evk
lw_Ah
:<3>)a
r	z{
Y+OGjQ
adB+C
]q ?
~aKE
5*jMc(
adb9C
set_ClientSize
j!zGG
F/afP?
xisiw
}d*'
=wB9c
awB3C
N~Y5
_Y7*
qgB8C
ynER@
>Myr
PD8
k"gp`<C
'yA*Blw
RB
'kB1
*"nl
4MwB9Ch0
&#
U
z4
#GUID
_.8M<
BPv{2g
awO1C
pT:P
x>KU
~}\&
569<
=|Qk
x>1q}
&="R
HpR8A
kREV8
)!|S
Ks7`Q
bP7f-I
Y%f
_HU8
[64I
yf2pz
q$-O
H~;T<
I/|=
~q%P
BSJB
j)qB
2y|
0Q1
p=m0/^W
Pk~,
{`N^
3]q
!R|a
4EJkV'
9w3&j*
QrBMB
PCfT#
nxS:
B?CM|\
A'7[/
LM<g
.hy|t;J
jawB
!'K*
B1PQ
_y7k
{l]o
a'V
Ezy
y=(yS
apB'C
:V
g
f}.IC
co[V
pgj#
Yt_^a
cGoZ
?`#y$
q!:P
auN9C
\a~5
:dy
I=y0
sTI7
-Y}i
/P,Q
Hf-[
J3{
`*w)pvm
h(Zg
x\?s
i6q]fd'
ojNq
IntPtr
N/;N~^6
wW7
ly%[_5
wW5
|nIu
*F&E
'~dtw
KwB9A
2nR)
*Xbpmi
2kNF@G,N
y'\+_
pVeW
~0r(
Yh|C
wW*
/Zs@
rs].
^;pC
,yl*
olm/
rRV9b
e_{
_etF
l
_g+
H6O;^
M&zg
.xxO.W,u\&kG
>0N~
k6bZ
JSEKQG
Ou/<
I>3^
LawB9C
=@|q
DqT?
>=h`
r/p
,l_D
?`w2
MhUt
"	?)|
h7*j"
p-4P
0~kp
"cvO
[&R
\
Me1BxC
0p.
qQM#D$
~_c+
&sf}T
c[wO
b__9C
v!Zyo
&cB
^de4
>KWg
0o;&
5?K1
0n,
}x!V
huFSC
xt^Z
:5}}
awB^
VyR-
O\9J_M
KY3
?
UVr>
,Z^%
QsA
:RNf
PIPok#@u
0o;G
--n'
Hqx
Z-fuX
::OJ
Bpso
uL`12
E:bp
C9nk*
a\W/k
r
5pq
awBey
H@p|[^d#
br t
~eXR-
?GUt
k8i"
a-B7C
Gdk0
N_7.
T%&
}I2x
#[d=7
9l
/QII
k`gm
B/CF0
d,3R
+GDl
9	*y
/6AB
P[9
a {Z
<R@{
%;j
q)*pwvq
3}:`/
B`fT
@?U~Y
awH0,
s:{]T
!<.S-_r}qi
48G"C>
CI6O;>L
QOKNJ
O[@.D
/,^K)
j]>X
[:O=[
7M+^m
\fAa|4
Qa}
awBym
&"}C
lSc
UM
B<;u
tuuYt
^jk\
+-Z
K<$i`
jW6r
s~_
oe5o(
o8)P
AGX
~OL-#c
QvB2C
awByv
hQO#
\zuNa
0~k`_S
3@y[]
TwHP%q&
'<*
yyR(
n)q
%mgb
`2p%
2d?8
djfR
\eB{
P
PS
:L-
A
G"/*
Z(5/z
|0~A
9kv2
]Fw^
EZbWQb
26\Cb@Sij
m9mY
g=O]
qwB9C
7\=f
yg0svv
xp4J
wX7w]
_8Oo
$'
c
U9i
:z=n
%3d~
p\^se;
#>f#v03
?Bjo
YaWB
?u6~
Yad/c.
ZYZGy
kPLJ
=j$)
rfSx
ISupportInitialize
uzvx
arB9C
^4;G
n^j
n?~xz
in'C&,
Y"67I
,Ro~
1syq
V`wB-C
E*WQ
k 6P
~t^Z
~t^[
~t^]
agB*C
~t^_
!:
=@
Pt{
;R$}"H
S"PP
3?Wg
h!h
gtb9D
z]sk
VG>E
awB0C
W8YW
asjmC
aBgG
Xt_[
Xt_Z
awH*G
awH*F
OPv6
iK.b
yb-9C
awH*J
CvE1`
D1G{
EclE%
IDAT6
0-Dg
n?XSh
p;JM
Xt_}
XEC9C
)]K?S1
Xt_~
&oK
-ZT8-B
0Z;R8:M
xnXWU-
p]JK\ (;J
iW#u
wGOg
Qly/
aw]9C
{Ucc
f}2b
yRi?c
wB3kB0
X$<|
I@:T
C\g^
]%:D
]l[E	8
[Aq
k 3P
njk>
6:W{_
Z
(Nyn 
)< E
2,	T
Dh((
z6^e
_$Sx
0&84
dFL5
`p]+
gfPU
Ph1C
ewB=C
G;O{
.`OS"Q
`jL$@
FDzX
d_a9C
h=
|
E5xD.
Vm<x8
y\Uy
tJs3
zu
SJ|
zX2Y>
^-<L
zF*w;j
-ezU
/16`u
J=[9C
Dz]4
6jkG
zuw1C
awB9CH
aRB9C
djG$F
.G~zE
`56q
jz?`9
mtzt
awB9CA
ZG&e.T
Wt^|
@<D
Ik5O
YQ-H
QzK+uL
atC7M
awB9Cq
WwB=A
@D2
V
GT
y&
2R8j
rz~Y
t(^
awB9Co
LD+Yj
yi=w#
.s3
IEND
ywB9
!P`o
M}Zi;
)5x0
BK
2!
em!'w
-V<l
53\69
(S->
xD\D
s+\O?
m3<
/jAc4
!Fy
;*9"
CAi/
5y1.
{3
6g
ps_3
,~lT
C9CO0
*-O=
_N_.
45n
a1+U&
j#;P
J;1z
9C+0
VB9I
f2QP
wB:C
n012
s-
Ve
.bMI
f>P6
wB3kX0
awBFC
k #P
ICzTv
O4.T
! Wt
paOBkC
Ri?c5
+Kq
t9=q
uB9c:
Zt^]
~5`%
fej@
awS/i
eX3
ugPD
(a9Zo
|#_g

i-Kzt
8m[
Z~45
[k:.
6R:ak>
BwB,C
15.0.0.0
!;p-
!-g&
*u
`
xhwB9C
*F)d
m"9b
bOe{
u;_{
c$6P
awS/I
0v8OOu
gv "
*R7l
M\uW&
%\ayC
K`G]er
v:W`
7<",R8
e-s	!T/
6mJN
W[bh
5Snl
vd(l
p-%u
g#6P
z,:|
=}8<
;WzW
)|xO
O$6K,
0p/&
<(^J
kmH9C
x%	\
7<q68`E
9'/s
k	rb
F^hMg
j3&*jR
awByC
,pXH
%b\Q
fbG~
G~ZE
'XJA
p(
P
I2$}
WgkRgI
"E+,I
z1'P
0o:#
R5Wm
z]
vfu
%G93/
BawB]C
~#j_
+~-
rs\g
4W>&
"7}wo
ZTC]
[dvMcP
CompilerGeneratedAttribute
^Ow
7u5]9i
awH3
y~cwh
%vA
1a3B3C70
!A7p
Y7Tm
/e_rrx
4u:
:GxC
<B <{
x;l*
p3J1^
zVF
2M4y
pZ"V;
\{d^
jSuH
E@
k  P
K|g
0d=G
jY9B
(KMW
q"*3
tuuI
I~!F
C6]?
m:eu
`sth
+tTJ
kB
I5
Kzq
AWO7|
)gsD
={Q-
,j'4
Z?=:
d(a9
6)YS|KP9
ZM8nN
{Gx
AssemblyFileVersionAttribute
uX\[
/l$'
nK&\x
>UFm
s&z29
/v-g
XejP
=`8.V
O;#)
SQ]&
`tBn
Nq$
)BZ}
wSdB
x0\-
WYv4
;]WD
7$h+2:
TW>d
System.Resources
/)IN
|0|.xrz
Aj:E6
hrb8B
(CwB;C
0~T;
0cwB9C
Xt^_
).oY0~
!Sd?
OivG
t==p
t==q
Dt2>$
)t4:$
aMW
3yK1
_)hYt
Rucobygoqo.Resources.resources
EhyoU-
`oyw
F6I?
u8=q
n4h
H:n
:3N1
(H{z
$'MA
/@[T
avB9l
[~-"
~T;P
aw"V
7S=5
CompilationRelaxationsAttribute
Nu^M
aNB#C
T49h
T^}}Q
[f_;
d_n9C
l~6O
$B9I
j#<P
-Ssf
l#*{i
xpz
alj`C
_5lwF(
g
"$
3OVb
hJLT
H@jg
$k+^
0yro
-i5Z
tl0c
Yicn
#%tS
pYVK
ewB:C
avB9C
7tL"
E\[
P_
zi
\&-O
7]-p
;wB30
y!u
5NdX
Icon
O)".d^
j&dA
avB9,
:,;}-
W*_4
scq^
0\t
;wB3E
IF1|
S,*
Gb&Xy^
(/,Y.
xFeF
e0JP
;n+<7][
^t^[
hsl.y4
`sv|
@3?.
$'MD
aw^9C
Y>ON
#"V?
,&U8
b@M'
+nPr
Zc+
awByw
,T@u^1
^t^^
LRt_
N0%5q+
^t^_
f=V[F
qiW@2o
DbSs
U=}A
1fwB
m#,G
H/u
Font
;c7J
s>h`
iCm
DtRj
n$,v
oB9G~;
pawH*W
//)S:
T? 9
[t_\
[t_]
CMAi
usI_&
awH?cz'
jcJ
[t_Z
IWB9I
1,m_
psjTC
ykz?
bOx=hax
iM52x
o
xZ
ICyx
-I9[t}:
xI W
pawH*J
j"
P
]
BY
OS}a8
NJ#/
String
/Evd
ys=Zm
[t_|
[t_}
[t_~
\nx[%
DebuggerNonUserCodeAttribute
=##P
a7B9c
!_}fw
awBGC
l7^#
"umK
b&ex
r*nT
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
+zC*
Y}sE
avR9C
<.k#ms
i4vk
)qBc[4
~t_Z
Qx\ pcWW1
a*-Bf
xt^_
~t_]
awB1c
;WA	=
W8XB
(u=c
]e~r
7z_
h%yz
`ek1@
B#Fl
'k	gd3kN
I=[h
krvQ
)Osm
InitializeArray
Dn-~
WWeQG
BEY/F
~t_{
QSh2Z
UR=
bj/C
awB1C
h\h
2|By
Mv+'
vs~5=
n
e;r){W
JA7VDO
&Td6
Z@k6
N8!3
fmp:L)
awA]C
k:Kb
80Y
[v_F
W>Zc
pFy
~Q~0	s
J[+)
!RTWA
C
to
N:?-
ava/Cr0
yu/]
x@T+
H !
%JK#
EditorBrowsableAttribute
o2@
-aqB
1bA"
$
o2
-Pm/
6r'U
7pe_
}u|=
}}PK
?s9fa
I5
HA
9>,'
;'u?
f	,V
cR"o
"z@q~<
ewB9
sEL3D}
PcwB9C
wB?k
={a
rq[g
Y\Q_!9A
.I{|
=q{
o@4O
stj`C
\<"
k'8o
]-}C
b>YS8-#-f
`vL>C
_inW
yH/\
aw8C
aiB<B
p"QF
Y;J
>U5W3
XYkI
/b'|
@z![`
m]Sn
awB8C_}
N9ffYI
\35IR
Lf1.
M{?&bR
7tGM
>~taI
ccvX
MaR,Z
J-Hk
cz6t
='.C
Load
iu`;
mB9E
_
LP
g @\
ej43
Sm`>)n
"vt&
kwB==
System.Drawing
aqj3C
k{b(DR
`[|$4D
P$fDmg
w0#
$rGo
get_FullName
Z(o	!
0q%W
c*7<
n: P
FZ@)
swS
0i1M
x:{x
(*n5;
yI+h
w_39C
M'Z
e;6wd
k}T2c
M@V#P
S^{
/&}e
LB93
5w]2
co"&Au
cw
 ,
E@{c
{`&i
Fw&'l
D=C
?h@Wi
leQO!-Y3
'
Ro
e&4`
awH-Q
X-bQ
IJa]
j<:~k
:B
W
qZ9P
,?-
fF|R
u<=q
SRt!
S7*?
yy]R
)q2y
rh&B	{5
u*W4!/6-
_tP
V:;;?
aG`
! Q3q
.93|
6Ox~
P`&l1
NVpv
@e=x
'h@&`
(%+Qg
NSHc
Y)Nq
C4wB9C
k}tQ
CUie
jvVy
xt^\
LVm&[
;#g
]dFG
`c\d
eMRt]
RuntimeHelpers
7tk/
$O^7V
rv>CuCJ
hzD(h
tTyD6%
pob].
$l0y
hp:
o
fCH|'
'-#t
}4~B
fY]vi
9wB3
=ug
M+5__/
@@:S
avBAC20k
Y(LU
>wB>
rg(5
okJ1J
gjG;]
Ur@,D
a3B9C
^WD9V
ufF(F
x"+
V]wD
C9Ct1
|tn`
T1Z%
wr!?
,]n/
k(p
~n4 1
yt_|
(G3p
7
6
h-h
Y4	;
^o=E[u
C
sK
`3j3r
~>{K
Object
wB}]&
M,g=
JI+!
h<h
XqwB9C
QrB%B
j"P
7[@4%
J`:=
:eJQO
o8'P
'9&f/
EG)zNf
s)[b1By
ComVisibleAttribute
vx[Y
%Mi3R]1`]
)i3
3System.Resources.Tools.StronglyTypedResourceBuilder
P{^3
irb;B
i .u
./^K
o5I'
Zi]/
3-a'
v[WT
w4'.
\"<5g
28~{h
~Z^Xz
Gx>`
*a2M%W3
GqH=Q
z
K.1#
fD]gZ*<
0mjx
#KoV@
$h
~b),M
awt8C
[	I9C
L'?oK
22LK/
RvF:
1d$z^
IIDATx^
12
3 a*
PyTZ,S,
jH}f@
"YUWyd
rr]!
vaQ7O
c8\({g}4
0~U`
5e.?DNS
pUyZ
0_
L
I-B
Ri?c
]*wG
o>)P
Cuj[
?Zv+<
j@DH{5R9A
20w;cw
"[dp
awHV
EditorBrowsableState
sQ-
Xt_]
awHJ
\%p8
MethodInfo
xt_}
xt_|
g=1h)
MT1!
Sg}&!
xt_{
a3B3Cg1
fmc
nN
L=
awB6B
!_0l
CultureInfo
w%\7
Z$g%
taGB C
'gl8
U.jBs
1.0.0.0
>R
_
}]r>=
XnC9C
xt_\
J.o
xt_^
Iq9>9
xt_[
xt_Z
RQ?Z
%28
e`kfr
(=-.
{%T(
wzmX
n:#P
B[@.
s
/Z
a}H;0
sn8=/
*q+[
0Z?0
PLCS
O:)$8
cuRl9o
@C	%
aD\D
9HWN?
\i2-
o55-9)
VHZi
n9@%
`t,HF
RH &
Pvnwd
=.['NI
sRGB
r}]&
>t
i_{x
S!k#
,TJ
a}I(J
}QwB8f
-].[
i .9
^j&c
/,[*
P\;~
v%|
>^6VG
^QlpJ7^
SD1QK
<vXs
J)cF
K_\
*
mD?%
5zHd
^gjE
f 7P
<N(sxT
T&*
=VMa
K_Rn[
^!Q>
t-h\p=
#!TU=
''s(
y&g
{0
6g
System.Globalization
bN#z3m
33s
#F(
UXow\
0pGN[
6d}x
zz|w
p,y&2
,Oy9
nxM8H
=|au-
aVB=C
{0
6{
v3Sv=A
{.$>P7
8!j
@U)3
Y~mri
QrBnC
aqS?c<
X-
o
u;=q
u;=p
[t^_
[t^^
[t^]
[t^\
[t^[
[t^Z
DI+^,JjT
ava4Cy0
!q
`jFiE
6"sH
I6?:
cwBVf
O_j*P
;V^-]
Qzj0q
7.H!
.+$I1
M$)E
{a
KH
u/?iEzg
~<8^
aqh*s
NH-
mcIoo
.SIe
2n]r/
2mN\
=ZmYB
Rohz;
05`b-r
Xt_{
q:/?.8E
?le>
bIo[
)&Tv
#rZc}
m[=[$
$>]
3K)2P
uawB9C
Edj
hG%/
R=o{z
pYA
-WR,
cDCe
$j
h*)
N&*}
Xt_\
0tD+
vwB3P
wO>Pn
P#3Y/d
gbj/C
.hBZZ
/gU*w
>OcX
kvPaZ
?w'I
0_io
,-
~
BcJ
Yt^_
EawB
48/
Zm;x
6awB9C
Ck/h
a #P7
j
i
}Xk^}
T#:~
bQyV}
,t*]>|}L
uTP
N
h
h
,6O6
{Pw|
aTBtC
a:D:#ylD
oU+r0
z;-}}Y
9B7n
c"]?
ITB9I
:mx&-
6lOa<
g^WUT
R-;uoU-
Qgs1
paw1
Q\Q3j
-4hF!
tt+a
9EJ{)
g[A{
yi_P
vv;qUw3
3o#
nx,H
*eyY
^=\r8
|t}I
l&w^
0x+/
1|Z^
NawB<C
r}T*H
7n0xW
CyM
^t^Z
S:
C	0m
>awB9C~0
%B9B
~|S@
3AO?E
!dGCy
a3f<q
ACKni
DIW~(\C
;Gl*
)$VL~f:$
;aj
}r4?g
0~jo
a<XG
ffDVr
c$o/
yNc/
B9E~
ym-*	`
at]9C
a"+Rm
B?EF<V
<N(O
frzKv
s^/7
g%+=SWo
hTWd
GetHINSTANCE
h[k
HtK+L
~
OC:
@@I.
2%Ex
Jd#J
TK
u
qa3B3C/2
CkMv
4Dv;(
Cd}7
U3Dwp
|'/u
P)aN
/5<&
rxjS
mbr
8\<(
8q?-
AQnSkJW
n\Cy
ay@9C
r_gp
cO,_
k1Y]
%=Twr
qL v
arC9CB?
\L,
lH
B?CAe
O%'J,
5<E:
ao]w^
aqd1c4
NJzr
t<_k
&f.Q
lY[4
l~vY
GnM,
!yd
8+no
O(o	!
[6P#1
3cp|
sS4\
N&$#
}-~
3<J5
zNNS
}#9pn
~B]
?Ceb
yQQ
a}8([
wBIkv0
LYB=T
PNc _
wy	i
U+o5Z
&!u0
U~D
2
j?&k
6(^\]B,`7
R2\C}
Xx>K
JuUT
%I?m
El+
6fHmw
>viq
HIz_[-
i6UZ
awB!C
*nqECEa
maGBbC
Aw@=c
>]di
,2nb7
p5}1
|}.9
kn%_
>GyK
7RP
aw#9C
j1e
. >0
{9lK-
lW,t
<DO
,C93
ewB8C
a+`9C
hs?UY
v2uM:
Bz,v
a:'J0
g	nv
VKQ-!
$+C&
o{{K
9TbQ
^t_^a
 R|
SPZ/k
{P7Uu
"]
?Cjy
[ak{
6Ny<
2008 - 2018. All rights reserved.
`vfy
awB]
3awH.
,R1$C0/
!mrWo
dX^X
PictureBox
x_n"
;W&<
yoSy9_Z
gYN
~$xQ
LHYAJxA
Point
a5B0CL0
-*M3
/^..o
aP"Y
rq]
'Byd
(fRi
L@'d
v2.0.50727
>Z%
e4tP
?T<,
C}CR50
o8&P
NNO:
eom
Z%'Q
CCq
B,CL0
?`
c
Xt_^
R+RC
QTTGv
`CJJg
h($9E
^2T3
o;&P
lea
a?"_!
J@A9bM
7u7`E6x
TyLU
n~M.
@c**n5;
0Z<?
]cx6
q.@d
'm^&
*!M5E!!
Uqh-x
IwB9Cm0}
V-7GML
V3ddPs?
v]B"s
:,,Gr9<
#cj6
xm^t,xc
<a_MiF
X@-)
0f#3
d;[->
7Emj
Q\P?
}p*J?
0VG
U~ggb S
4n7%
<9	dL
/-Fr
=`?l
w6P3
"^ei
Zw4.
aw\9C
w#yjK
~1Y<
N=tKu
lmhh
orSP
P91Z>
B9IrW
uK3r>!;
@Oj'
6@w8
Qqoc
d>knT
UeqBg
j&ZP
awBE
thI@
|Lxtl
;wNw
sOw>N
Dp9
TzmS
set_Margin
j)qB3
B9Irb
c#}|T
YOB>D
>fH`
Ddb&O
?V	/
set_Size
adN9C
GetTypeFromHandle
;Qm&
-aqB*#0
Ra.iB
B9Irs
uu\_
][qD
qSFi
kuZV
6X{
o7}5hf
}Q/u&
>wx_
ob![Q
u!5~
at`@8
/K=Dm
bXb
=xa7
1=_c
Z5s~#ow
o;'P
v8p{Z
FGy
+iYb
rrS?c
(
zJ
\k~z>
~	N"
add_FormClosed
0xS
66M1
a0I9
u\*1
,7}w?
K>p/
fwC+Z
#]cNA
"	_B
WS-8
~x,H
_t_[
S9V2
{Rf\
Ri?c	b
[-$C
qeb<
`Q[u{
>,W
CL]lNs
z7"D8
'6KC
atB9C
a}Q=R
:*XRy
*i
L;|o
XlZ/
`XK9;j;,v2R'&XY-xm2HZO"%
r1/F
t" aClX
Ku ^
tyF9
i}b=Q
z[\4
OKnW
G*Jzg1
FN6~
sn_%^
anI=>
gbP4A
aw	=C
F0'&
e+o/u
.Bk&
]gwp'
QuB
C
qO[-l
{v |
Pa0B5C!0
O_TP
G1~]
NipJV
NEGk
a}Q=c
avQ*U
jwh+g
n	w-
D%d0
=wB3c
K2m'n
3#*d
E~~~
0m)
lBK0
fD~P
awB9Cs
#m^
t8=q
a[FpCU0]
i'Fl
a4*X1
KKC?
System.Runtime.InteropServices
Yy&g2
oA
$r3
bdCq0
%ytBp
t/L-
+)oV
Yt_{
qBR}
sm,{
Yt_~
Cz#7
Yt_|
1B9E
Ch
_wB9C
<hZ)/
N	l9C
KiFWq[)
a}nAc
z|T/
\ULNE
psh8_
]I
snJ+Z
+G	:
S&?R)
DQS=cF
d50y{]
|eg1Q
n0=_
<T#;vF@
IrB9E
vpdE
Yt_Z
Yt_[
SZ>{
Yt_^
pI?&
Yt_]
:"<,
9N6M
Jqb
*fC^
Dxi>`
^{d1^
A"iae
System.Runtime.CompilerServices
st,H
tq"S
g-9n
C$>L
xW^y
aww9C
>+zLTl
3?57y
cy^;M
a}jNC
Fxps
;3;m
S]7J
OO%>B
efG(J
awBYJ
b$uz
Veh
Zd:c
SX>?
POzC
5D)XrG>
awBYC
:w5.
Jqb:
%';}J
y1b~
%iuF
v)zLk
Mv
xy+w
psFN
G%+
q/	
[Hm7_
\W.3
}p#'I
Awy9C
>XyO
1 BS
++T{
c(D
b3B3C
\gCo
}QCpq@
ajC9Cy
clY7u(
25;M&
;wk:
@t%r
hlh
~QHP5w
#E
p
TX#;X
S#Y!
}_;o
`f+
pfo1c
awB:C81
\06-
WUk@
qZ
o
"22[z
./n*
~61
awY=C
g[TV
;*#W7i
J.m:
0~khP
s(
P
O;Cz
tz(^
set_Font
aw{9C
a'0V
H'u}
EtK	8
qgw2
ur%hb
O?-[
!)re
~t_^
m$p
3B
atFxC
0wB3P
2
6{
avj`C
g^L9C
ayB0C
rPJ_L
V|ZI
IDisposable
asL9C
t<=q
t<=p
kI;v
8?nc
mwBC
]q(;
GL99
stm%
Nfn'
~wA`C
{QKCm6
-RZ*?
[(r9
dCOk
_0H>
{t_^a8 S&
z;?~
j:^UP
0h0q
}>	+
2%DOr
mAz|
#U#C
FontStyle
d%+P
F6x{U
{pdv
;JTI
YaIh
agB.C
U>H
~t_\
IS5j
0ZP>
G]xg
`>U}
_p]_
N!UN`	@5
-ayB5E
6z;G
bes0
DLYY
ze0(
0g#6
g6Z
AssemblyProductAttribute
S\&6
awb:C
awJA
PAwB
o`?'%I
a%'^*
I{
q
XX
 .
sqApE
GLeg
'
^[Z
~\f
w\y
dRi?c
<Module>
Z'B
}V^y
:7h
`w}m
c )
[
v
mKG>Jo
fwB
GeneratedCodeAttribute
8	[&
WohqwC6
QvB>C
d1IP
g3s^]5
1C
98
jV>
Xt_|
;zSD
3Cj1
Qt":
-:U~
p=y#
n/iH
DU5\
b0Gp
=-z>
Jf.p
0f *
tsnD
a{IhV
X$8^
Bitmap
'9$
SizeF
ewB9C
"o\&
R<|g
:[zzn
=NbII
hubt
?aQK
N2xSM
%F:k
c3B3C
*aqD
%aA1
rrJKh
%A,w
}>yk
L>Y/
2l4%X
J^=|
)
m9
5`Q7M
1eBg
:>{0
|#s0
vLD
L,XH
/ncA
'jRU[
YLhm
|0@?
w={|
db(lls-M
$rr4'
MOd6
@kF9B
uB9c
+]{g
b{($
xH(n
"Gl[
ufKx
H&b%y;r
[z0/N=
&O	E
Mu0~Dn1
fGy
sy;+
CwB=C
D-r\XY
|?wB8,
<&cnj	-B
DaS=
R3)3C
-^lRIHt
`oo
W&R=-
<o[
y0^&4,2
OXQL
avB4C
pc~B5C 0
3s<c
x9Wf
?_.
k
XcX
]{#4O
MO<:}
o	r1
vO#Ld	U
Qhtg
mh!_
}VV;
5]0G
35:y\_
EndInit
o{J3C
Rv;6y
Ei,4
O=g
aw*;C
DjRh
r{S!c
bqPm@
HawB9C
6Bt
!gk0<
Nj_.
X/dc
j)qB;
dx
lmy=
pS]E
FfJ'
Ruk7
U+kA
`wB9C
jD,@N;9V
YcG9C
yNxyz
02EcV
a u(
|>A6Wdg
N>z5
7.)
:T$,K
"M
<
g%b(
u/R4O
@=/P
set_Image
k
S!c;
:\Z#
#\sc
,KwBxw
g}D6
aFI9C
bwB7@
wwB3O
2RK0G
h&$P
#tOO-A
$.Q3
z#0
'W5
A,`	f
PBnR{f*CDw
8MC9
aaWB
`t,H
fs&
VoRr
Y.{Y_
EventHandler
3A+/
'e	e[^
U:wB8P
O.N7
f
aY
EJIq
XiwB9C
e'.8VC
E@-J
#Py=
m~vk
h>VE
2$XS
_w#j
l$$P
$wTR
0m&-
NKM7
NK^;|
B$;J7
Z,
!
H#t,(
I_Q+R
U;L
5~wB;C+/
e_#9C
cIfg|&
A-|^Cu
L:$.@}k
4tZE
pzXy>6
%qwm
f2N(8U6
}}22
^-m7M<@
1[Qj
L2.a
7<6_T
?]x}

8
Qbw2
=;jR
q!5P
Mz9^F
=;1:
sG0G
oN6>
+*n5;
Jqbl
>ykTT
(XP}
GuZ`
WjoM~C6
urB<P
CF|
get_Module
kQ&9
/9nDJ
Zx|zs
NfQp
vy3B3C
TwB3R
qyyv
v2Q4>l
y"{P
wlQG
ISX
P"aD
;v'B(wkO`S
-rq/
=}Sl
msnc
QV..
c\lw
nmt,
jDyw}
*rZc
S0fC
@'g
ReBF
l%S0Q
pdJ(N
y/ka#,
I(mF]
|0{[
6oDV
U0Q
98?b
3MqP{
j6?s
RT(Ov
Q-/$uN
Y^p;B
hnF}C
LFXtUZ
I-%(~
o
zGu
] c^:
Vi_
n|K1
c"ZPl
KwB"s
~!N}M
C'8?l
A(!'
d7OP
rcP?
#|nap
$nB9C
~7^
RDoO
0i6q
)B9I
awD(c
1dn4
!2,c&:
vUUh
TS=c7
kbW
kQS>cY
Um]+
^p5
set_Icon
Yt^\
System.ComponentModel
Yt^^
4]7f
Yt^[
&>njM
xP`j@|
,2:@
:B9I
k;_~y
H 3Y/
cwil[
$ce303376-4481-447c-9dde-cad63bebff6f
RcX5
h!#}
Iry.
o@%S
awT;C
gOhF
[I&a@C_
2+@b
Eo{A
17W
9`!t
H=6_
cY*W
r+xC
GHvwd
7e?~R
W,.n
x5H:
'hzg
>j&gn
&dSP
?MuB
]F#_
!aNB5CQ0
uea
}Z/h
aFB:B
&ak
Mwi>i
0{2JK
fzpD
S6#2gV
We+y
J0W-
@B\
%(`}
dt+jl
~jD!p
%Wk/s
m#Vo
hfl
o-)~
k+iH
Y^s,
U/|
aSr\&
v(NV
H$jAk"
|0U)
C7,U
>L
zOlO5F
8+RC
]rU"6
tb9B
s1Q<5
5j	f
x+@u
ewB(E
j]450E
GqT&L	6l
0uJe>
_qR`
0M>XHuQ`
+BoA
\7/_[+
YB9I
L[A]
yjg
>B9C
System.Windows.Forms
WUhz
X&O|
oX8Qq
(*n5
mOZ=
iw
C
@+_c
<$-J,
L9Ta
S%"g
/a,>
= a~
n*Ins$
pyU`s
@up&
6gb
#Be0
[_+J
}O
O
Cq:u\
!x9$
a~B8C
=^7i
;XkXh
o
pB
B\*?
27v6
e2RR
aw$<C
System.Drawing.Bitmap
z07^
uaFBkC
`(o	!
{FUu
</LH
M{&
F~Ek
i`i:U
aOU8C
`pTA
k	~y
SMja
(5!R
*c2Y
3))7
i+tqu
oZL6 @
3uj{
`{29C
h|	<
B9C~0
Z!V.
WBnI
1U~~
Xdcz]
GHj3
n:z>)9
h:wB9Ch0
5Na
Q	P *
'f5NXjl!+&
\s(# ;
& *[
fme`
|k_<I
q|*|
g>Il
>$!X-
hi-
jN,%
6:=M
x\YS
F]E%
3Z/f
jpv
h. z-?
A7P>
}!9j
GpUaH
}}uyL
[ccCt
!Bwi
Ee
awB5C
ITT
^AhDH{^
Lb<+
cs&L
s4lg_
A#2
7
6G
vaTB8C
?`P8
:F2b
nwB?\
A
>j}
t"	c
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven04b_64 Seven04b_64 VirtualBox 2018-06-11 15:05:14 2018-06-11 15:08:06 172

3 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven04b_64 Seven04b_64 VirtualBox 2018-06-11 15:05:14 2018-06-11 15:08:06 172

6 Summary items with data

Files

C:\Users\Seven01\AppData\Local\Temp
C:\Users
C:\Users\Seven01
C:\Users\Seven01\AppData
C:\Users\Seven01\AppData\Local
C:\Users\Seven01\AppData\Local\Temp\emma12.exe
C:\Users\Seven01\AppData\Roaming\winsappdata.exe

Read Files

C:\Users\Seven01\AppData\Local\Temp\emma12.exe

Write Files

C:\Users\Seven01\AppData\Roaming\winsappdata.exe

Delete Files

Nothing to display

Keys

HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DisableUNCCheck
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\EnableExtensions
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DelayedExpansion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DefaultColor
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\CompletionChar
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\PathCompletionChar
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\AutoRun
HKEY_CURRENT_USER\Software\Microsoft\Command Processor
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DisableUNCCheck
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\EnableExtensions
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DelayedExpansion
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DefaultColor
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\CompletionChar
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\PathCompletionChar
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\AutoRun
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale\Alternate Sorts
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Language Groups
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

Read Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DisableUNCCheck
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\EnableExtensions
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DelayedExpansion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DefaultColor
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\CompletionChar
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\PathCompletionChar
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\AutoRun
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DisableUNCCheck
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\EnableExtensions
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DelayedExpansion
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DefaultColor
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\CompletionChar
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\PathCompletionChar
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\AutoRun
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

Write Keys

Nothing to display

Delete Keys

Nothing to display

Mutexes

Resolved APIs

kernel32.dll.SetThreadUILanguage
kernel32.dll.CopyFileExW
kernel32.dll.IsDebuggerPresent
kernel32.dll.SetConsoleInputExeNameW

Execute Commands

Nothing to display

Started Services

Nothing to display

Created Services

Nothing to display

#infosec #automation

TheSystem Itself @ 2018-06-11 15:09:35

Detected family: #Malicious

TheSystem Itself @ 2018-06-11 15:16:01