ss.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 8/56 Related 2056
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 281.41 KB (288168 bytes)
Compile time: 2016-09-08 09:07:28
MD5: 7a706f323e2800be7ad393577ef3002a
SHA1: 3992466ef5fc2b4adc144f509dd5f2b26f9a1b42
SHA256: 42277ea7fce8a8c7e1df4f0c0079e6129e2d6c299a4b4597d8cf8dc0fb210d11
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 4 import resource relocation security
First submission: 2016-09-08 11:54:02
Last submission: 2016-09-08 11:54:02
Filename detected: - ss.exe (1)
URL file hosting
hXXp://radioemprendedor.com/cli/ss.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2016-09-08 08:39:31 [8/56] VirusTotal
PE Sections 3 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0x27e24 163840 9700fd6243cd5bdbf32d9ac797174ef6 401fe61bfdb10f0b495a7a4c85893b8fc51b2ea9
.rsrc 0x2a000 0x1ac46 110592 c585dfd8a20d71a93673fa9662032c46 ec4a83658fd64b3a5ded4ce9f269b722e1f8d0d9
.reloc 0x46000 0xc 4096 1fb3c9bf1fc6c2d906d2c6f54cd83c81 985423f7e8d011217fd9188bd33d514e6e046524
PE Resources
Name Offset Size Language Sublanguage Data
RT_ICON 0x4474c 1128 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_GROUP_ICON 0x44bb4 146 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
No Meta found in this file
XOR
No XOR informations found in this file.
Signature
MD5: 8e9b51d6e2ed09f2fee2650ca89108e2
SHA1: 57855428450ad457517fb86dcac15144dda1f5c5
Block Size: 5544
Virtual Address: 282624
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: Library
KERNEL32.dll
mscoree.dll
D~`vfd.dll
IP Found
No IP detected
URL(s)
http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0:
http://ocsp.digicert.com0C
http://ocsp.digicert.com0A
http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0
http://cacerts.digicert.com/DigiCertAssuredIDCA-1.crt0
http://sch
http://crl4.digicert.com/DigiCertAssuredIDCA-1.crl0w
http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
https://www.digicert.com/CPS0
http://www.digicert.com/ssl-cps-repository.htm0
http://crl3.digicert.com/DigiCertAssuredIDCA-1.crl08
String too long
ogPXRohBKR5IglwogHPbMj6RJO5hHLkpbKc4p8n7WaIkHESS29EWcDiDhjdXbjbn1sOcdznYewYdzJertkrSQuXjM6UTe5
YmvzQuaaAiVVzteKiVFbTUlGLKKugJLzEw1p5f4EWcDiDhjdXbjbn1sOcdznYewYdzJertkrSQuXjM6UTe3
eSs7prWyN4wJgH8pORXMwsHGAeArRZvYjW1GUjTXngpI6ogPXRohBKR5IglwogHPbMj6RJO5hHLkpbKc4p8n7WaIkHESS24
ogPXRohBKR5IglwogHPbMj6RJO5hHLkpbKc4p8n7WaIkHESS23jsabQA3IqJL7SBV7k8vb0wAwNGoGPHdJ7iQLLnZkxn5
ogPXRohBKR5IglwogHPbMj6RJO5hHLkpbKc4p8n7WaIkHESS26p2SfhJaS3o1vvvJOQq3AvAtm19dWNpUuUEFPDr5HHvXZW8
eSs7prWyN4wJgH8pORXMwsHGAeArRZvYjW1GUjTXngpI9uyPOQFWgf9BkcJCtmmlb87PlQD3ToFEUz5F6rviVlZ4
JeduhUXYIfHU7L7xURJAJNW151wlUkOPQdkwZHIUiJr0DC2i4ogPXRohBKR5IglwogHPbMj6RJO5hHLkpbKc4p8n7WaIkHESS25
z8xShO4qTPRIODqbSDTACbIb35S8mnmFnruajzoiv7HuikvO5ogPXRohBKR5IglwogHPbMj6RJO5hHLkpbKc4p8n7WaIkHESS25
jsabQA3IqJL7SBV7k8vb0wAwNGoGPHdJ7iQLLnZkxn5JeduhUXYIfHU7L7xURJAJNW151wlUkOPQdkwZHIUiJr0DC2i1
uyPOQFWgf9BkcJCtmmlb87PlQD3ToFEUz5F6rviVlZ6z8xShO4qTPRIODqbSDTACbIb35S8mnmFnruajzoiv7HuikvO5
jsabQA3IqJL7SBV7k8vb0wAwNGoGPHdJ7iQLLnZkxn8JeduhUXYIfHU7L7xURJAJNW151wlUkOPQdkwZHIUiJr0DC2i6
z8xShO4qTPRIODqbSDTACbIb35S8mnmFnruajzoiv7HuikvO5EWcDiDhjdXbjbn1sOcdznYewYdzJertkrSQuXjM6UTe3
EWcDiDhjdXbjbn1sOcdznYewYdzJertkrSQuXjM6UTe7ogPXRohBKR5IglwogHPbMj6RJO5hHLkpbKc4p8n7WaIkHESS23
ogPXRohBKR5IglwogHPbMj6RJO5hHLkpbKc4p8n7WaIkHESS24p2SfhJaS3o1vvvJOQq3AvAtm19dWNpUuUEFPDr5HHvXZW8
ogPXRohBKR5IglwogHPbMj6RJO5hHLkpbKc4p8n7WaIkHESS23p2SfhJaS3o1vvvJOQq3AvAtm19dWNpUuUEFPDr5HHvXZW8
eSs7prWyN4wJgH8pORXMwsHGAeArRZvYjW1GUjTXngpI6ogPXRohBKR5IglwogHPbMj6RJO5hHLkpbKc4p8n7WaIkHESS23
YmvzQuaaAiVVzteKiVFbTUlGLKKugJLzEw1p5f7z8xShO4qTPRIODqbSDTACbIb35S8mnmFnruajzoiv7HuikvO9
jsabQA3IqJL7SBV7k8vb0wAwNGoGPHdJ7iQLLnZkxn5z8xShO4qTPRIODqbSDTACbIb35S8mnmFnruajzoiv7HuikvO5
uyPOQFWgf9BkcJCtmmlb87PlQD3ToFEUz5F6rviVlZ9p2SfhJaS3o1vvvJOQq3AvAtm19dWNpUuUEFPDr5HHvXZW5
ogPXRohBKR5IglwogHPbMj6RJO5hHLkpbKc4p8n7WaIkHESS23p2SfhJaS3o1vvvJOQq3AvAtm19dWNpUuUEFPDr5HHvXZW5
eSs7prWyN4wJgH8pORXMwsHGAeArRZvYjW1GUjTXngpI9uyPOQFWgf9BkcJCtmmlb87PlQD3ToFEUz5F6rviVlZ4.Properties
cFxty9SJSgpcE1m9RtNMttJ7aHYF5VKhXrcdW5d
strationInfo
<RunOnly
<StartWhe
ERID]</UserI
tartIfOnBatt
istrationTri
YmvzQuaaAiVVzteKiVFbTUlGLKKugJLzEw1p5f4
owStartOnDem
OriginalFile
> <Enab
NUWhhYYysRqotzHgXGLdfAXAPqAwW
1.0.0.0
<AllowHardT
button2
jsabQA3IqJL7SBV7k8vb0wAwNGoGPHdJ7iQLLnZkxn7
EWcDiDhjdXbjbn1sOcdznYewYdzJertkrSQuXjM6UTe3v
true</AllowS
="Author">
<Multiple
checkBox2
abled>true</
erId> </L
c> </Action
HKE
<UserId
ToRun> <E
vel> </Pr
label1
RER\Software\
nTrigger> <
nTrigger>
Form1
indows/2004/
checkBox1
trrentVersion
Disabl
WMJNZvlCS1z4nptHH6ZgE7fKx9Hyc22G2
d3.1.exe
c echo [zone
eMzMga07awbZKvyNmD0CtQJRm7
eLimit> <
/LogonType>
" /X
rsembly Versi
ProductV
button1
rrentVersion
ggers> <Pri
/ P6pL
,/KPip
checkedListBox1
rity>7</Prio
oRun>false</
Fiddler
ser
AppData
thor>[USERID
are\Policies
27</Date>
vbc.exe
cmd.e
rId>[USERID]
<LogonTy
87XNahshJHYGCOcL8M0uRBUPqs
:ZONE.ide
F-16"?><Task
Task>
SOFTWARE\
JeduhUXYIfHU7L7xURJAJNW151wlUkOPQdkwZHIUiJr0DC2i8
acpSettings
`rk
jsabQA3IqJL7SBV7k8vb0wAwNGoGPHdJ7iQLLnZkxn8
jsabQA3IqJL7SBV7k8vb0wAwNGoGPHdJ7iQLLnZkxn6
ilable>true<
ommand> <
s> <Sto
jsabQA3IqJL7SBV7k8vb0wAwNGoGPHdJ7iQLLnZkxn2
fIdle> <W
micies\System
ogPXRohBKR5IglwogHPbMj6RJO5hHLkpbKc4p8n7WaIkHESS29EWcDiDhjdXbjbn1sOcdznYewYdzJertkrSQuXjM6UTe5
0S</Executio
schtas
ies> <Sto
notepad.exe
<RestartOnI
`lCopyright
uthor> </Re
linkLabel1
abled>
wStartIfOnBa
service3.1.
l.exe
svchost.e
> </Setting
44Y5GF85HFG5
rationInfo>
false</Hidde
uyPOQFWgf9BkcJCtmmlb87PlQD3ToFEUz5F6rviVlZ8
uyPOQFWgf9BkcJCtmmlb87PlQD3ToFEUz5F6rviVlZ4
uyPOQFWgf9BkcJCtmmlb87PlQD3ToFEUz5F6rviVlZ7
S2dUNaAcYl08GwqHmRco8Aomzaqb
ancesPolicy>
pal> </Prin
listBox1
wir
Update\
ystem
<RunOnlyIf
.microsoft.c
<?xml versio
osoft\Window
drnalName
/Create /
<Actions Con
OnDemand>
gOnBatteries
tworkAvailab
`rFileInfo
rtWhenAvaila
ier & exit
alse</RunOnl
Existing</Mu
nate>false</
icies\System
als> <Pri
p2SfhJaS3o1vvvJOQq3AvAtm19dWNpUuUEFPDr5HHvXZW6
YmvzQuaaAiVVzteKiVFbTUlGLKKugJLzEw1p5f9
>false</RunO
Privilege</R
</Registr
A2mVwuVGGPocjqlBHlc2kSUfKdOvRKb9LCA
YmvzQuaaAiVVzteKiVFbTUlGLKKugJLzEw1p5f0
Idle> </I
/-P?pR
led> <Hid
OuDepiaKPMzCEjgjDap6xJz4O
it/task"> <
rosoft\Windo
z8xShO4qTPRIODqbSDTACbIb35S8mnmFnruajzoiv7HuikvO5
y> <Disal
.0" encoding
oingOnBatter
C9peev35X6aZpUxfcuoRkfU0WC95Sb
dleEnd>true<
tionTimeLimi
HKEY_CURREN
hleDescriptio
false</Resta
nteractiveTo
ThRcb6SjSdDkZPkZh0A2IhBU7RUKdggtdYXC
AppLaun
nd>[LOCATION
dxe
bleLUA
sbiedll
s>false</Dis
[USERID]
YmvzQuaaAiVVzteKiVFbTUlGLKKugJLzEw1p5f4EWcDiDhjdXbjbn1sOcdznYewYdzJertkrSQuXjM6UTe3
ypTl1aiE4rA4I1ufRfB0OI4CXDSIrdBOeK2
true</StopIf
ettings>
Trigger>
QRO
sfer]ZoneID
sion="1.2" x
rableTaskMgr
iggers> <
FileVers
<Date>2014-
RAny use of this Certificate constitutes acceptance of the DigiCert CP/CPS and the Relying Party Agreement which limit liability and are incorporated herein by reference
etworkAvaila
="http://sch
xec> <C
sosoft\Window
<RunLevel>L
sanslation
.resou
RRENT_USER\S
TION]
000004b0
leInstancesP
sKhmWhKPDBoKBj8dDpBTctez1ZF9
pOnIdleEnd>
0.0.0.0
VS_VERSION_I
StringFileIn
Enabled>true
false</Enabl
al id="Autho
5T14:27:44.8
<IdleSet
gp3mKuD9MVZ8lVp9cJBE
hon
wHardTermina
eSs7prWyN4wJgH8pORXMwsHGAeArRZvYjW1GUjTXngpI6ogPXRohBKR5IglwogHPbMj6RJO5hHLkpbKc4p8n7WaIkHESS24
"{0}"
ls> <Settin
.i&-
zTPRz
P9b&k
DUDDU1 1ZU
d YK
;.t1jH
LC&h
q%Y#
LqRT
v"J"
}<d% x
>#}y
PNG
~%4]
(>_8
!Ft1
dFWwf
EZZZ
(r;w
1 1}7
EF:
EebM
@1^*P
uk,$j
,v"m
*I;$
k][`\[]]
A2xO
1*^$
}~*
z7>X
(f3d d=d
jjjp
F ynv0J
Q_FH
AutoScaleMode
dM2vY
VvTiB
A}G9W$
u5JN
VYNA
G\?4
UnverifiableCodeAttribute
}}wYNZb'
faeu
vIDATXG
0[Nc
,-y)
^5l5
85`O
e,e o-L
n%%R
N)~ u
'
}bW;~s8
1k"q
m2o2e
F?LQTnNhTgshXA
/&*N
get_Controls
&=zN
u/..
voVM=-zO
jkKQq
bytesWritten
ITG#
0}B$^92
vpbd
;dJ
q!LO
-3d
2j+{
Ox
|Co<
Arma Inc1
%rnE
xIDAT
~ f
hdPz
^w*p
d6'H
R<H~
0d(f
(f3d d=
H0q]
chMe
i1v:
ne%Y!
@D!`8y)X
5MTT:%R
%o R
=94P
^K/3r*k
}QN#
,-X#
,v0a
path
R@;T
Z)"]
5@:rN
v8PA
E|7^
1@DUUDUUDC@DUB@D@
"EQF)J
cspX
)9;|:_E
7G3ww3vg53gs
f -R 4<0
pE@da
([l\[dc]\d
i% 5
h\;^
!=%@
C2sy
,v0J
M@8p?
ProcessStartInfo
zL[-_7
a:66
_ y Z5
op_Explicit
(/cz
0;h&
System.Security
sL,P
EZB
hrj mmmx
Cl|7|]
%c;z*
D]y5
_e 6
wW#&p
>3jR
c#|>q
d:*g{
Hr"O%[
! </security> </trust.Bwf8
v-F/&
S"5B
FB9s
}(+
pZ'A
Q5@C
y3S&
'[Ck
BS n
WM:m#w
SD<_
QH@,
IEnumerator
f?V/L
j:G"f+
(f3<T
6Izp
@DDDDDD1C
L',*fw
0,5
A`E
Fi&-
UE43|
i ?6N
'uhdY=
DigiCert Assured ID Root CA0
E-~'h
k$>L
EnableVisualStyles
q\D }
0br}
Y63?oJ
N7Bd{
=(/"
:6K{i40-+2
* vK
set_AutoScaleDimensions
WK d
-`l0
5kt>
{)X7
&+E
D@UWD
M%tCn
|2+8
e<{7S5t,m=L z-c6a
9qFs
(Td8
H y (8
7NT[
Format
)=G'
siek4
3[3j
JZ2#U,_
y v>
) o
-q(Qa
@x H?
E+J,#
']5]
;!%Ml
<37Lz
X9PZ8
xu?:
AppDomain
FC4c-z
0^1b]]-ZZ
"| E
3xyo?~
yHNI&
/G[w
=w#;
bOqY2l
lKq4P6
DigiCert Timestamp Responder0
E ^
@i<4D
`p1a
R A)R e =
G-\1
G6wu
&+!
jO\D
Microsoft.VisualBas(K
gltwdstedPrivileges xmlns="urntYveco`s-microsoft-com:asm.v3"> b
GeneratedCodeAttribute
G'n
ra3O9
B~O;m$
?s,l
|.`
add_Click
3 `(e
y!`~
OpenSubKey
T+.1>
}O=?
m("
jMMuX
KB)N
.=-q
K,mW
#t:o)
}=#d
;D k
g *o
m: \
9DKp%
vS^`a
tP3M T
D`X?
%Y ~
Y#k
`bYy4|
C_ ..
ay;c
b2D,Y#k Th
o7r?\;z"c3
Path
set_Text
(o:R
Z7q
2E?S
MQ*c z
=(LO
G o
G6YI3{
\5G1s|
]$Vy:m
a0A
#Blob
b3Z*
%u:z
[j`dnd
7o=I
GOBVN>
WritePr PuxwOdmory
F7v~e#
^3 UL
TdH9
LinkLabel
\5!u
7^}
hSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
9 a=3
{,_9g
w=o4
D{pv[skcTgcp[FCPtQNSNYb\ck[CHSmelDedAYWVFH6
nG{4d
6+r +
_t7.
,|h
,# ()
5@'QV
X, p7b
$k T
Type
Q_G7`
6r,1
}'Yp@
CCgG
iX ~
info@arma.co.uk0
|\RV
A&v|sy[
wlOqqpPi
Y?~l/
C?xP I
}# >/
Sbz|
_# R)
d%}<
6`A)N
\d}rtvww
i1#9d
J n
z"e)M+j2
ffeeZZfe\
aZM$
AmTAzdcutablePath
a6x-z
B7hm
!|fu`
-9w9
checkBox2_CheckedChanged
PhHX
?8oD
L 6A
DBUUZUN65:R
b^o$ }
F9C m5
Sesize
D4%L
yMAz6n/
:5<E6d
j6]x
lu$U
Z>~;
t9l;
F2*m
F+?A
ProcessModule
@1^)S
WCUUb
c0q!
5 O>
get_Name
ntR$/nJ
G(t^
^BNv_1|R
h(3G 4
jDuy!
ToStr'Dr U{rtem.Resources
]ze9
AqSl
(e.F
&,N~.
79a O>
.Q :
i/> 9V
U $oP
B y q
VirtualProtectEx
f>z!
lC#"
$"J"
n9w"u
d4E*
n8P8aP
O>Q%_
M#z /
[3j3
NZ#(*`"Y-
G XUzupdntProcess
ResourceMan Ssy
T!z<l
'%/}
(:D>v
I8W#
!oY,
SJ;d,q
~*OB
cc]]clxl
<Modu E(
2 I7f
dQ]N
{@J5
?t6oF
0I:h
iikE
ox#5
H+iR
)6g{
@zz:
DialogResult
.9u_(7B
p1^ra5c
* W3U
~@8
gak\
.text
q&h!E-E
e<8t2b
K:Uj
GetString
WindowsPrincipal
y72s+
^igdp
GetObject
+xQb
[+U"5:o
B3b*}'L!u)M;f
c; \
rB#.
D(^ a
f|w;o9
Sp<OwoiEnlder
'S~!K
h1j,}
/20%
h6M>l
Button
b:}1U3r*k;J |+e0g
D5@b1A
@8pu 8
oV#u<i>V>
QMB)
X"R
R {,
6\((
`)QD
{*#r
_fz0T
}{`m
^#JC
ylq.
set_Name
9W$_
>0<0
g0^ <T
&%k>i
M%MT
nTgHbi
[/v/V%1
+!;D]
]{<W@
fffFf
\H'f
5=d=
mainFile
Br:r
EF*_
&+w!p
Z[RT
<4V
rM\Ef[
b$#u&o
f^2t
bD P
0e1 0
5=H2z
7#//
gt D
Resources
1R}
;Q]S
!7n
)8l
$e+w
NWNG
!u55\
\;c$
6Y-W
h/n>@C
.http://www.digicert.com/ssl-cps-repository.htm0
f q
-t8P
3e*Ho;m
j3u9];z
^- s
Z Mrf
<-\3G=u
Wx$x
NdssageBox
label1
.Yf 1w^
RuntimeTypeHandle
V*zN
ProcessModuleCo
wSojgR
;1 W
H+M.
5W?f
),me
;o m
mjCG
:K!2
1@DD@@UUDDB@B
y<p3 [b
Conversions
\][`c`][
&&Q) o[.
~CHZy
@p7Z?v
6 }?
1zac
`.rsrc
x}hn
mN%N
4.0.0.0
9 hMi``l
g/E]
f g0
DigiCert Assured ID CA-10
ylRo
j !b.J,m
*z*p#Z)+
get_Default
b%JK
l%K;#Tp
t1#b
kernel32.dll
LAsz
D;^
Zd D
RC:s
2P@.
b:TVU`
Mp3E
nCb<f
JIUS
U Z
J"Bjw
(QR8
checkedListBox1
^)~0e
v.oT
LayoutK(Fx
ProcessHandle
ogPXRohBKR5IglwogHPbMj6RJO5hHLkpbKc4p8n7WaIkHESS23jsabQA3IqJL7SBV7k8vb0wAwNGoGPHdJ7iQLLnZkxn5
jn+ d
\3k,
XS,J
M<S']
,>(
GHLKI
E.w1+g
c)m
*EB%?
set_Ar?V~ihvr
q`='y_
u#b2C
:L6l
ogPXRohBKR5IglwogHPbMj6RJO5hHLkpbKc4p8n7WaIkHESS26p2SfhJaS3o1vvvJOQq3AvAtm19dWNpUuUEFPDr5HHvXZW8
IpmUw`rt
Ay@+
0}WJK
3>D5
bp??
M@ftf`dContext
z1 $
OMA!y>
wcC.x"[
F ]J
JYT+
;WmVJ
~S5_
3=h?W?fA9K
&,R)
t,k'C'g@
%(4L2
5kQ_
0L* hQ
.2e+^
E
'?AII)"
|-]4h1
1qI
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
tyR>
CWBoP6{H
u"*N(h0q!P
hjGU
:vh7.
k9H'S)a
`dp+
SecurityPermissionAttribute
v0t08
cc`^
/}9s|
F8 :
5m!E
`/o!t#
Q f1
y5QN
!J#!
uI3y
fFCG%w
r<j(H
(i1p
Q.U_
Jw n;,
_?af'
25R
+9uR
eSs7prWyN4wJgH8pORXMwsHGAeArRZvYjW1GUjTXngpI9uyPOQFWgf9BkcJCtmmlb87PlQD3ToFEUz5F6rviVlZ4
e?)
*^F0
gl:t!v
sM-x
i]A
#Mj6
0~ \
GetBytes
rK?i(
sender
NtUnmap
Process
zV_K
(LzZ
Culture
ReadAllBytes
lGuC
zj b
4Ar]
`O<>
_'U@1U![
z8L31
4m-~
]*\4X
</assembly>
[X-a
0q)h9@>
3mYr>
L$C@
G%E)
/DUD
JeduhUXYIfHU7L7xURJAJNW151wlUkOPQdkwZHIUiJr0DC2i4ogPXRohBKR5IglwogHPbMj6RJO5hHLkpbKc4p8n7WaIkHESS25
pJ 4fg
C:H|p
g?x4N
x%IU
R V
)$g p
*Q8z_
FD N
C3@HR[B
)(^/
get_Assembly
p)p z(U:N4|
]T a
M \-l
D ^ a!T
,iIK
MIrYKR9
b.#D
i)r<
fet_Size
dT8L
x=i?
Dm F
@89v4
b5*}
Q$f7^
m!E#
5* x`
t#6
Iz N
$}[5MY{i
X}4
zM>qU-d%=
32{8
6l-H
SCF Section1
,s|/
RunP
\5 m
c=~
{r%f
8m5M
__ej@xtes
WrapNonExceptionThrows
H3C-
7n7.
#+X
,;Gh!
x9a p
0i9H
Zn87
$iYVG
/CDUDDUDDDDDDUDD
]:9w"
[* }
I!9MT
zcmE+~=
;9R&\Q
8%X8M8q
<;l"w5S
%,l(
NR#L8@}Xuj
2%}(t
&, (
M&9t
Y}@'
65SW
6Y$^
\ }<K
I&+9
*>MH
c !p
|9~`E^^XD
h?q$s
] bi
_.A5
#;s3
vBN7-
w@>F
}%b.J,m5t$U
#0\3&
o6/\
STAThreadAttribute
Sat7
_la:S<e
B*s*
iedwm
\w"u
IHDR
Form1
T z(Y6
Xd;l
]I`|
:#?V
^dbE9
System.Globalization
b=7
dbb|
>B.5
>O `
4c>z7S-l4
B rZ
|c2Klr7
isSandboxie
Y R
?w N
set_Size
.`,H
f*.H
]HLL
4[B#
*X[k
$o]y
u(Zn
System
EventArgs
Application
I7W"W
wwwww
9t/^K
F1f(w H
cNqQ
`.{,
NO(p7
:v$t
d /m
wvuK
#K)p p
z3;n
{-F/
Fb>g>\
vLj
JiON
y9x'
DigiCert Assured ID CA-1
6a a
nq_[
+ Ky6>AH
P/-t
a N
S*F3
Z I"+s
Tri5#^cpgOext
s <*d
System.Security.Permissions
tQ-wo
G CL
<.z]R
@1\([P7_
_^EBp/^z,
"J"{9;J
CG!y
MethodBase
#Strings
i 1' (
[qqtctLayoutAttribute
I9SE~t
[^!lk9
aI2k-
9E'$
n'+33>Z
b).g
D~(R
{!%a#C
nnader
j8I&
u;nv
l;3[
@oZv
h9c#t
I,n?f
_kq
pBjm
I]D ,;
5D)y
4 VnF\
211110000000Z0b1 0
v!o
_xxm
k(VT
Zz1Q
R=IpP
Y6I6:MI46
Environment
P IR#F1f(
" by
t,t ~+Y5@9p
<A(dP
'ay\
_$l
66:3=
www.digicert.com1$0"
Pf(r:o8
e#{:
$:F%O
)\5m
hkmS
Q9`9@3
o<f;x\W
3V|F
/DF
~3Xw6X
x!Y~
Q_+<+
t\B
NA U
BeginInit
.'(NF
w n;l$
c<:G!`
jZyjph0'
Baekndnt
@\r"
X LJ
}=K
bytesRead
MocalMachine
lYZ@aY
System.Diagnostics
type
]_ _
j=s&q
r3j+z I>h&r%L$|%[(y
Y; n7q
hm8B
O7y*\
HXD$G
&ecM
IDAThC
U$-p
$:@@
EZ+K#
N)i2
r]6s
^1`P(]
<?xml version="1.0"wQthjghng="UTF-8" standalone="ye*
9U Z
t5mnAq0G
^~&g7F
0:64T
J-u2~
ui0i
,42~
-D2^?
R8O 3
c_|>
Cr:G
w.W$v
. @
GpO,K
* m*F
(USr}}}zYMI
_FJZV
L+s4xEL
MutxtVwu
BQ_/2
_ U=U
P8;U
tx|]v
,Qbo
start [Sccm
http://ocsp.digicert.com0C
?dr-
et"f?
6WM8
u,S r
)C<.
&+i
ULS+\ ^
oK1 ysz^+
-"#>
&, (K<
Z.e+
uJj&
^1h2lN=Y(G3
Z#Mf
]6m
Js]8
/CWUUUDUUDUDDBBDB
z8xShO4qTPRIODqbSDTACbIb35S8mnmFnruajzoiv7HuikvO5ogPXRohBKR5IglwogHPbMj6RJO5hHLkpbKc4p8n7WaIkHESS25
*<g!r
MP,`33
B3\(R
s*
j8I%Q+c
IHOM
[*v [
Title
j3s
2B'[
Desktop
t T ~ }
]V~a
</K-l4u
C0/]
V?_j
IA0&
\Zsj
set_WindowStyle
"*g'Q
'/GG

n%8:L
2H}V
K=S(CMh1
dt&R
2!8y
&~'^-
\M3B
J D Fz
@^^<
]B-F
''3}
67`.
d4M {
v&'D
+8
3t(L
J;| \
-c6ap
7nBc
JJKp
RS y
aKDS
Ga?$`G
[cmm
h R~:{ [
SPC|
p@B<_8
(%q7
tgpE
uv&4
k:6
}eGhigT\Bf;
#E#b:
f3?P$s+
TWW)
8l;S
RV=d=DL
service3._1
BitConverter
1$c/
TymH(YE
#Z){"<r B
{k7F)
p"S<G<s
~):J
uk1}
cHEP]bdIZbL8
ci(e`(
^&I=
Label
?jT&h
wwwww9]bzquvww
M:^
1DN=
@ hk2
s?&K
L=R&\
fg:h
Dm3_*Fw
Form
JEEP
K\(0
JcsshalAsAttribute
A4Nj
!)!I
ZaCie3
jqi#"y
v,.e
#(K+
%,Ls
U%K@R
ApartmentState
, uD:
E:\Samed I+}XWQP!2012\service3.1\service3.h`shm_Eebug\service3.1.pdb
cU]?
n[mqCA
_\l\W
P1 e
r1~.
09M*
E"[;nR;
4/1w
=]NKgSyy
ya'~
flNewPr8Spir
<!W/
l^68
address
;-)W
Windows3UtfpKoRole
>=I3
t5m,
y0m
k f?
E"z=+
Pc(-.
isWPE
p}A)r6
84/n u"_
l$CK @
STARTUP_IN
@[A!
uDrx
suggo
g5LOOVAHI
1SG"&'
wA6M
"1jA
(W$v
F<r'
U'Y7D
:^(i!` Q
set_Verb
W@%Dz
@h 6)
#J"{" y
Hf)k
>?&g
MsgBoxStyle
| %P
= !7
-himF{[=
u>l<T
9HINAL
?Fs.
1j, &s
z5Kw<K
7+Z'
4 -)
/|XSSkA4
<*A)
_w,,
GetTypes
w(Z3
E<d1
({CmYr^M5
(@xXU
H 7<W"}
95~F}
'`,H.o7v&W
l?O!U/g
EI@y
]ll^
s3Gb
b*b,.
h2444
^@s{7
MIPBl'NH
CQI1v|
k*] D
PU-'z
.NN(8N
<[`\
D,*z
nX*l
hL Q
a9x
creationFlags
_8gD
*V&u{
yL&S*wR
~A_g
ListControl
by} >s
u,M>l2X
]rnhn
r By
W1j-a
Contains
x I8W;:
1!@BDD@BD
W&I=G
+V Lu
T.:^
UC@ZU@Wiinpd\r
W)6O
]$"j
Xkl!
=|!.|
ValueType
0?~
System.CodeDom.Compiler
set_TabStop
X )
3|6a9a
wwwww"\mzruvww
] |:t
tv/V%f
Yb$X$
uQ $`
?E1K
ToLower
zEg7a
_vkk3
- :[
XleUuV
S 9t"PL
F=8
j [ {
\K}2
g2[4
data
z"w
}pTY
IP1ejpBUoWmjxCUhpkoZVuK2Shm
]IasP<?VL$<
O<e#
V`.df!run in DOS mode. $
|$%'
]<2z
1sS
Dxn"
ButtonBase
|~Qz
C<l#
,y.F.t=A:i
a] Y
+DsC#
%h-(
f$e4
Y{(Y
z-c6a 9`
(&Ar"
9/t
A\nH
fh0g
:8Ht
[,k%p
]fL>
r?Ft
k<N
Y1Y}`
get_Cu
$2|)%
G@ykadssesByName
D!!N!J
)ZJ10;
ToInt32
|{l
zcZ6C
N5b,FQ
qExf
x v>Y
`K;{
8<?.
d<{7S5t,m=L z-c6a a8a
vy1^
3:{n4
,pi(x
s$ ,
oh<`
V#H/
E;5N
Fqln
@hDW
)|+C
_c (
KKKq
7\w
U@@B
+t6
Ru6T}caWxpeHandle
],C-M
lU:Q%
_8QA
b->Z
jdd(L*
+$A
F> >a7
s|:&O}@x
%a*N
x,t%u
s{]
.rsrc
o$t;
Q!O;
QlK}
^Q~O
hxm~t
,Sy/
dl[[[\d]
Mpz
L B'B
#W-e
2Xs)
n N
}5R N
}5R M
'
\ ]0G
z-E,u,U'v
F#{
!!
^/@4N
U6x!_
IK ,
pEF(
i40Y
%,]s
"U u
#q $,
b:}1U3r*k
9XK`
U,`\
?;=\
v|7[
]h#:
exK5
'%<}
8l*k;J *G
lws+
}KR3o
i x=
X|Zy
5 9x
{5`7
^?{c
add_Load
<"5$G
SkipVerification
"($
Z?2c
1v8f
rF/d(
~)#K
g*s3d
[x JpfBoxResult
PI2C
Start
8i)H
Combine
fD k3
KNGL
%vy6S5tA
6w'V
P P)
frw~
>O@y
K.H
u2 F
set_FileName
0v0b1 0
N)q6z
uVrN
^bk~
s{V`
NON
get_CurrentDomain
Data
&,Cr
RegistryKey
T5a7
s<N"
@nmpareMethod
GetFolderPath
x*n)d
fet_ModuleName
[4:o
a:$i
#v a
Dwtg'7gsx
\u+l Y:
^ c R r
<AQ
e.&N
%xaR
H [+
!mnGp
vcNq
pHYs
.ctor
o ;'
3D8=
oA0_+5(
L G#E
VE2I
AI=2y
~m T
z0 %
=]2T1X
bZ&s
&<;5
mscoree.dll
f3m
pc!A;
0aDG
R%r<i>V>g>G4f
H g|
?G6wu
Uf|amu
X*j1
<M e
U"w:p(
&3+&+(?=$?
Q-(E
J \f
Main
#oy[
; f*Wc
r3k*
Invoke
-jBl
%g?!P
MC~^
69`9
km(P
wcV:
160908070729Z0#
Z[p`
DigiCert1%0#
Un_`^,
G/x6cq
_fs `
e2|)~
*Y z
p8>^
:(s.
sk/d
8`9~2V0s,n?N
X,^.~
,C{Q@
^z opGiddler
V"#n&
`(/ &j
$!-C
j 2]$}
8rso
s6Cfe37
x =R
M;y Y
g5$K
?HX;
|{ #l
7uco
Sttec
n8b3>l
#4zw
)Q Nyh>
;E[JADSS_INFORMATION
061110000000Z
O H y
0-t1
?sM[
.*m!E#
;E"/2**z
iyq!
T#t:o8P8a8A2`)
<t/toI
.4hw
J3 /
+ES1F
M H-L
@]$W
Ot#1
@.reloc
\,'6Gyy
)6k[,
%<1E
!P@R
q/w6f
m^5 F
g0n;
g'r%
BF?x hF
I&R(`
L=I=G
EV?{ [
b a8
Byte
k,`
E.y BM
Zd \
pwx|h
po2N*
^f"UVF]
G4[/_
5]3{ L<
Z2Z
)+ y
-H.Z
dl-Z
6]+R
s5:b
nll.c
iBidVsdO
1@,R(Z;S
.p&>
*B3
1i.b
@)z>_
kW@)
+?/U
hGSs
e<Vx
^ \4\
] =e
T%J>D
[*E1
S a.
s=r$
;1 bj
u-l4u
jsabQA3IqJL7SBV7k8vb0wAwNGoGPHdJ7iQLLnZkxn5JeduhUXYIfHU7L7xURJAJNW151wlUkOPQdkwZHIUiJr0DC2i1
+3@@
W1zINs
7Y7D
4d f
V466
V7,CUE!
4x)Y
Mgm#:
<B?5
Sb9*
\;c$h j+s2b
c"K?E
lpAddress
c4z/x
hLMR2T
7bdu
%j,%:
v.i%A'f>
t4u w
get_Location
i4[
.\Roj
}s]
k +%]
r&i=7
6}ps*OyC
y^g[c^e
<$Zqx
c5!n
Ao_#
+r)l
checkBox1
checkBox2
z5D?x
e"B
4M {
,m'V
v*^ X
@::4
V[KT
:5,i
K 98
j+\~
M<} ](t
set_TabIndex
1bSZq
.'.!
160906192455Z
BQ%B
@KK+
-{@2
!An{
)4caI
;ox!P#q
fFQ0
[oXn
q475)
]C(@
m'"`v
L,${
\ \5
`2C,X"j
RuntimeCompatibilityAttribute
0ie|
'S*Y
JbXRQ
]++}|
y!`0A
A$l7Y/"
L^xh~ y#
j*rk
"1"S^ /g
bi(j
|~c%jJ?
Assembly
gT,r
rervice3.1
t&W8a
M&I=G'7l+g
q<bb
Ud:3
SuppressUnmana/VrKkgdSecurityAttribute
q(p{
[/c2
de-f
n ;
: U2
gY%d
WZ1k
& W~
W l4@
^-j8
L(i1
+)q.
Z){
`Wb
SuspendLayout
"<nx
fgwvvfve'Sw
get_Mes
,Q>C
Y:n!$
>V?Q
+}4b
0k?1x:c
V|ep
oT 9F
}8E7D
WindowsIdentity
\LD|x?;
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
SetThreadContextq`rx27RetThreadContext
,M E
System.Securi
:cHs
Size
k()2
1 0
s`ram
^g @i2
?>,e)*
m0k0$
fYiS
iW!]4/
n^K9
I&2H
set_AutoScaleMode
*6m}J~
Oziu
a9~2V0q)h8I
)j,H3s
aC1 ) u
'1N} O
U5+y
UA P p
I%f7
O$2<:
A,$q\
% MvL
&=m6
d= 2
8CPRR
button1_Click
T$A(
_zOP
FJwa
k?i~R
om G
$c&B$e
M{0-
nk*]
IContainer
qe#F(
IQ!w
%;B1
D4:&
OFk
(o(du
P*/y
y;Aw
PZ'H]X
Wri3CX`hVdxt
D3d*
;_94
~g$2Dm
v5Ow
I9W$
ExtraRounds
4"J
o6q {*[4@:
{)X7C9
Pe*E
;_9"
IASS
"Z@R
z ZQ
]7*=.
SwUk4u
i"q,l
7$ #z
N7s~
}r4m
{kh_d
X*_g?
CultureInfo
]$$V
mK,{
6N4|
f3~,|,9`9@
mc0{
MGM.
[u[O
n6<s
W9 h3k
<F(2Z
4b b
-J-m
set_AutoSize
BjJ:K
q#2]
H ~)|(9
Control
|$%z
R+X {
PerformLayout
uz5]t<_
w#-2
'*N
c"~'^.gR
+$b j
!/9n}
7t%fu
;B1c
(q7"
8y J
V+
<BvQ
f+A6
`+.g6
L9D
* CML
Jj!#G
i 'N
W0h/c
Y*V"
o8v#
ZB<p
bs!#
r}v!o:
@xI8T
q0` K-
lvu;v
{!Q)]
ContainerControl
yn6w
0X`!
*Z y
wmGzT
&gbF
b6y,{
7G3U'
xQ_[
ToInt16
0,g+5n
'&5D
http://ocsp.digicert.com0A
, VE
Ge5~}drg
p(i9H ~)g2e e<e
Y`TQ%
!H/oN*w
"V%w
A8v#
d24
{#ry
n3tj
W x fV
95:[
*<:3
f*0(
Q !Z {:M
./BD@
=~4Q8z:p Q
Pxstem.Diagnostics
P b:}1U
i> ^
ck]$JVL)\`^I
8}-F/
7-+{C
>Y1jKk+
*2kZ
G0C*
g?Cx
8L.SDzJ
*\4A;s
s+H6
'g?~.w
dz<m
16a[
Wk+P
B"62
e"n
D;pD
<6~*C
&}E Z
*KhX$
l>O
Z {:M_G
=8~2
r5?^
|"{=
c"z;6G
-3#
oI ,QN
`H5~
s`EK
#3m
:FL{
System.Runtime.CompilerS F`bdfr
J;zS
*[]&
Operators
],C7M
JPTR
%h4JP
^C2XY"M9
Hto.z
Xz'"
;'K(
mj79a
|U"q
+|24
+V,~
,` k+!x
3PQY
)WW#,X\
P!N:@{
:n4%D
o8.{,D,u,U&t
ff>y5
kdJd
y d*
sN+cl
>H<o
3W1p(i9H ~)g2e e<e
pr.OuytCutributes
PmU>W
rNBD
gH R
set_Location
[a1@
Y/#U
/Tv4&
6wn6&
|wX
n*g
#765
4wz\
?+i|
f{\
)0w
rKO"S<H
3)ga
e,$
[dmegIandle
S-V<
w 'V|
[ }<K
#[Ms
>+;S
7W#P|
BSJB
P*>
gcgJ?|_EDGc?
ov4W
#Z*C
$z N
Cle/XE
z&"j*
|.[K}
C t<U
.CyY1
J;!
D [+k
gW K:{
i3R+
$p g
FT!H
] |s
eB~V
J[7D?
Y>f!m o.v7g
B~F=} C
zc@\8
zm8^
FFf&
9QLn
YNr`)O
a4c c
~- }
N?~
hed,3 PPCPP@D
-B6
bpV#
W +g
l":C
Eq_J
}=e)M+
# !x
0 ?y
f1 Y
eynR
AddRange
o=,C
pW4Sj,m=
1cGbz^
gAMA
{oE.
BGk9R
J [*k
3DQD1`
-W9_
okoS
Y0#0
Bf9B
checkBox1_CheckedChanged
q%VR
(L K
a'0~
ILzQ,
>%Y2l
z [*E1K
get_Items
a)YH
nn(R
<2g2[4n7N=oJ&S*b
/&AY
o=L#W-e
.cctor
Re.|,5
O Fln/w6~
kl K
,iX/z
n L
g* [
G4U 4
mscorlib
2VfF!kd
h57@
, *,E
c$ ~
Zu+
tb %
yJn*
M ^0
3System.Resources.Tools.StronglyTypedResourceBuilder
\rluimeEnvironment
%\/}
43?J
b"z;
9|&h9I
w=e!
E4""p
Cv2L@
n>!T
ControlCollection
<U~<#
Microsoft.VisualBasic.Co,K|e`pRervices
:M"W
Kill
r4t E"
f* m6
ElJ>z
#(;p
Ya3(:>
$@41'
a!Wu
v'~|
$P!r
eG@GVHON
h ghc{
Y, #
a p:{
Y>f!
Ly1b
set_UseShel;bmoevue
hpborlib
{3T K n I
wt0vF
T<v
ProcessId
5http://cacerts.digicert.com/DigiCertAssuredIDCA-1.crt0
L#Eo<
System.Reflection
S$@3A
SizeF
dkklmd
ihdctError
zr_7n8B
Pz<W
WaitForExit
|5jh;x
4http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0:
9<<+
)n*O*
ID'(
DAFnFl
aJ x(y
lS`5b
[?g0i.
R~_^
mC-7
I.7ka
M:m
(Y- ~
J:P g
AkV7
9k<j
D qq
S{ [N
GG~t.X
RX3?
[. q
Ne${
heRm
Vz5:
TI}.
nT m
GetMethods
"D"%
:=T J
_9x a
P ?X
Z+D0J
9 G*02
X)B6L
./1
V~%O
G DLf:b
m$L9|
P([<
d3|e
!b<f
)|+C+
> s:N
G0pP
x$(j
3dJ$
td=pd
FdbuggableAttribute
E,+/
3g9J
T#!&%+#
z\8V
# S}
Vi<k
oPH;m
u0T2s
a&B&
d89(
;tI5
4:00I:::6Y
Q $t
^lmiU
\-B6N
Z?Cr}^
7ft#R=
Mgsh
w,k"
l{{uknn="1.0"> <assemblyIden<Zbq$udrsion="1.0.0.0" name="MyA7Vuegcuion.app"/> <trustInfo
($o8v#t
*2 _fB
nA2J
N y+h8I I
5 qq
;yv
X47{
0?;
BzON
oDhi
2_Nu
$].|
c2D,m
# hn
q4\+
8aI
ogPXRohBKR5IglwogHPbMj6RJO5hHLkpbKc4p8n7WaIkHESS29EWcDiDhjdXbjbn1sOcdznYewYdzJertkrSQuXjM6UTe5
z7/|
Dk(M
(/h#
Z1`n`sosoft-com:asm.v1" manifes
-Z>X
,F/Kr
16 #HA
6VxT
)n"#w
7)z-E.b'
NB~~
TKF9KP A
=rF'
4A&n
ok]r
:@ FM
_ z;
6[z
-M:
$2slN5oTsiRMnv7QJUW0ngm4MuOU7atc8OJLu
vprWx
"J"{
>s'
&t ^ u}J\
EndApp
a1@/
x!xt
ToInteg0Y
&1oBK
!u1}
?Wk$O
.I>E
%[dlkkk]
U$1B
Z/;Vx
Jb~s
}bAR
k9H'S(`
x/z>s
CDD111@B@
F7U![
PlHj
Iwa+Vireading
XN0,
&?[=R K
t(}G b
n0K"#
mu h*
_DAq
+v=D
C,#W
]5S]1o
2http://crl4.digicert.com/DigiCertAssuredIDCA-1.crl0w
(W]Y
Fz.R
EZWj
d4{
H'@c%
W:/i
i[No
4=|?
LEG{'
System]`S Ajme
U u?m
o-Z
!This program cannot be run in DOS mode. $
uyPOQFWgf9BkcJCtmmlb87PlQD3ToFEUz5F6rviVlZ6z8xShO4qTPRIODqbSDTACbIb35S8mnmFnruajzoiv7HuikvO5
kI1V2
V5/`L
IsInRole
W /V
L F"
Lgi13
> D}(
Dispose
z1U
b h\A3b
I8W#Y
H `N
v({
w n;l
V$r&
}zy|x|zyz|zz|||xy_a``c[a\QA;FE__]dgBJDCO?
no8%
08 Qx
U+9Oimc
TJGr5
jsabQA3IqJL7SBV7k8vb0wAwNGoGPHdJ7iQLLnZkxn8JeduhUXYIfHU7L7xURJAJNW151wlUkOPQdkwZHIUiJr0DC2i6
ZJ&S(`
[cr4a
) MK
InPath
6t6/
\ x9N.KW
+**p
_*Y z
s;\y
v.z$^-
2x,{
Ohs"
set_ClientSize
?P
P*B% N
O >.
Aberdeen1
g8J
G x?s
~"S<
procPersLOC
@P&(
vl'kH-
LU vz
$b8F
vt3)
Gq<8|\
p }Q
`". a
" F~
[ .W
`7y,HE
Sjs\
h:K$
| ^v
mpflOldProtect
v D#
g>?3
SetProjectError
u!L"
S'Oa
G1.-
resourceCulture
DO=[u
7!!)
0_+Q
BWW'::
: Pz=
D5to
/7_o
Ax<Z
M1V[K
T T-
www.arma.co.uk1
p!y(x
@}e)X
b5 Y
* -f
:6R6x!a1@
[3G)
o: D
4R
x)A%=
O+w>
X2I[
m+{`
C`3Ci
'jIQ^
Delete
2Ibe
9*( G
U17v
thread
GetThr MrLhluext
$0Wa
z0x0:
S'O
H^O#z;k
C+o$A
Y<4
\.z5a
} S s
g#'(
Y9R
eRu)I
j.7-A
7qBt
ax,T'
|Dhj
#5t ~,]
141022000000Z
)]g0s
u5l/
m?N!U/g
0L=,#
(QXI
q E"z=q
WroNV(
~ _.A5O
Z=e"n l-u4d
^ a P
q(QI
s k~7q {%
QC.D
D6\.
.s,n
=};k
s%N
@$''
rcQ/6n
Y5]w
)B+s u
vo(d
DA9K
D9pP
]w[@'
h-j&
L?JJ
6+'#! <requestedExecutionLeve5
O8[4n
|46yr
Zs+l
i=T<e
i5|+
'6pI
N(](
Dfffw
gy!f*
BlFrulKz9pgV6dC4MrBl4FZG3lH0irzeipNGUrF8Qe15FymBk.exe
07cz
t+z3
c&r&
:c:C0b
.h|J
7v.B
x6)X
\)>c
NH)I
u"l9n
Mutex
*$\ $
SizeOf
##o
sI2~cbua
1d2Z2k
+g@
~K=k
E<5g
L \-l
gk /-l1R
z8xShO4qTPRIODqbSDTACbIb35S8mnmFnruajzoiv7HuikvO5EWcDiDhjdXbjbn1sOcdznYewYdzJertkrSQuXjM6UTe3
e3/G
aAVg
=g%}<lu
~f6
ThreadId
+Wvw<
c$p{
W7FMm3
U` E
5/6w
components
P%~@
listBox1
TkZRW_
~$D
`%d<}
97C9
B7Y
\FGD`<
0[BvN
/(k<-
,_eB
7Ck*
$B]o }
X2M
l 2;
%~1e
R|_gA
G%7M
'F ^
DDcY
~?S}
u(Z6B8p
^/@3I~
>D k3t:_:|$e5D=K
ISupportInitialize
*(J{[
ACq/
pB-l
eSs7prWyN4wJgH8pORXMwsHGAeArRZvYjW1GUjTXngpI6ogPXRohBKR5IglwogHPbMj6RJO5hHLkpbKc4p8n7WaIkHESS24
@%.{
h<~/
C+w
Tn'"
c\8p
Od U]C
mkg.
W IG
.8v8TT
VfRu
(%m;v
$|=m
yvPV
I:6T5
q C$|;w
oh,
O'{#{
.!E-,p
Form1_Load
}nVf4
C?pQ
+J oI
>eZy
9V:e
U:vF
o 7
ObjectCollection
CompilationRelaxationsAttribute
?h8L
2whww
EWcDiDhjdXbjbn1sOcdznYewYdzJertkrSQuXjM6UTe7ogPXRohBKR5IglwogHPbMj6RJO5hHLkpbKc4p8n7WaIkHESS23
'F<t
PAs$
r =`
D 6:m@
IQ Id
qb,A
.2cw
E4[/U
H9V
3F2p
baseAddress
&_=P
nE4i
DllImpo5RXxpphbute
_e7i)]'
Q:5&
I(@V8g
wwwwww
{ X
;P+d
y+Z
rIu uCsF
IDATx
\ $>
5#:{
kp#>>
C' T
4http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0
f* E
/-u3
<WLE
(.d4<u4
w >Y
'n$
Wow64G
QLPm
p Dm
>C/ ]
g.N'5"D
Fk6H
l&mm
qC;I3z
System.Ref Ir}olo
|ut}h #q|s}
`Q(V
H9 -W
=9 X
u O?
p DV
vj`1`
" P|
Uqmrjnn
(^Ie
ReadProce WTnimsy
lk}#
o,s0_,l
v'3 U
|J q
IEND
N4\;C
K,t3
%LWl
uey62S
A2u!
1 Z
p({#
LilbkCopy
hv(q
-$EZmvbkD
-8
~-]0
!x!
QaQ!R
Xv"N;
CaEa
( o:
n>#V
i{:Z
ws4})
BTAR
context
{)X7E@ o7p<Xj,u5e
p:O6S
O6o
9!G
8!!A
<Dy;
! Zx
z {
-(aI
X~C,
n16]
!q'j>
ehnmA
I~#eW
~}su
My X)
NiR C
+v*P
2http://crl3.digicert.com/DigiCertAssuredIDCA-1.crl08
O F#F
0Z$o`
K }g
e%e(
%[l[]]dd
Svzs
/*S(
5u`f
Mj3_,W6
fe/
Concat
@ R m
rV*;
f.)q
Js[[
c+b,
}a
"e)M+E
c$}=nDm
=?N
P p
& CdV/
`%uy
n<M"V,d
Uqw
s`X$
S<U U
)D1z
%`,H
[$6c
L[gR3
iEY
+D-D
CknmU
e a
mByQ
fT"Z
kQi9V6
:3bo
e&%Oo
'`,B
https://www.digicert.com/CPS0
{#6z
CompilerGeneratedAttribute
xSo\
al!
y{kCYL
set_SynchronizingObject
a a8a
] ^9
0(Q"
h&SQ
:Mpuvdm.Security
g*B* P
X8+f
7+ CAw
_*ySa5
`O(
)e~
+F:D8i
currentDirectory
C+_%m Ry
e)M+
P#qs
|$c/K/o8z*[
KIDeFo
g2e e
www.digicert.com1!0
k*] p&r
AU]/si
BlFrulKz9pgV6dC4MrBl4FZG3lH0irzeipNGUrF8Qe15FymBk
.{FC
g~vF
System.Text
G$C
}/^1
F99b
.[T j
8y K=
s&L Y
bh 3
){
3VX"
TG0^
O,( mD
CompareStringhKs{XQuartInfo
System.Resources
`,D"c
set_FormattingEnabled
y/b(
]^7<
Xt ~,]/k
6 % )
Y,*4
l^mP
a9~2n
;o/o
[3[
kUr\Ehgg
B5:\1
k2B
9={ f
0}(O
g(y
q$j?h
cr*1i
R~{mloBase
PP5t,m
`f \
x+t4'[e
*e8J
A!a:5L?
a&%#
R%r<
,C7M
PO7Qt
pa P
H4'O
>p>"
@&C&c;z*
l\H'J
1cG!.
6>'3
hGVr,
-E T
#1d3
0,x;l
]EsU
`fgna
</ So
T|VF
8H ~
t'T/
e"H?
C`1e3
ogPXRohBKR5IglwogHPbMj6RJO5hHLkpbKc4p8n7WaIkHESS24p2SfhJaS3o1vvvJOQq3AvAtm19dWNpUuUEFPDr5HHvXZW8
1cTJ/
u_tL
+z d
>K:i
2E$D
X m o.v9j
G4$QR
4'i
ResumeThread
+q&N&
, )
H@3I 7
F8='
Encoding
*7j`p
GetProcessByI48TkgwfgerNonUserCodeAttribute
dng%f
Q!%C
)~Ff
suFx
Z,XC
InitializeComponent
sfXj
TcDB*~
}2Tg&
y#[)l
v!o:
{bpwice
=C? I
#!Vv
WS=} <
+C+r+R!s
/~6{6
E2 u
retry
r %5
* hw
_CorExeMain
DebuggerNonUserCodeAttribute
i*P O;1y
B"dl
M<} ]
S 7
bh ^| =
<Module>
h>n:S
,WRt'
__>Y
m4FmQobZcLbrtCMbpzBLAepx5ksAvkg@
L#W./`Jz7T
(+(0
_9I+s4
9NnR
*>J0iPF~:
wB+D
.*yFT/y
T!f'lH
A];3T
E"IL
fG!a2
csm|
(+&r
tH2B
Na~v
]:bej
Point
p$ '
u<TG
,[?Y
q#R=
j]G
LXN.A
?[_
EditorBrowsableAttribute
CheckBox
G}C-
u"J
Zd[w
j&@&gT
;W.g
^[V^
FdfFllfa
Keys
RuntimeCompatibilityAttr;Znzb
GFno
]Mg*
Tg!
%, ~
9l6P
0Vy%
n/w6&V
dwSize
d'<NG
resourceMan
k H50-
z*V(
N]cO;>'
M<T 5=
ogPXRohBKR5IglwogHPbMj6RJO5hHLkpbKc4p8n7WaIkHESS23p2SfhJaS3o1vvvJOQq3AvAtm19dWNpUuUEFPDr5HHvXZW8
4/X99
t-t$
jj )
"4zlo;
0!0
63/K
c;.P
n) AT~)ES
Load
g,.
<c-f
>yJ1
N*L U
be}5
S0g)|
>!Xo
System.Drawing
[Fd!1
P%[pnfwEata
as>T
F9y"d
j#sT
[=f!m
G8#i&C
[ D,u,j
>(f4
BX%=
x q x x
E&h1
,LBG
5k0u
I Mv
>l
C=,P6w/n
9k1@
J~*f5
$296
m?N!R(`
'k=t
OBJ1
G4_Q
xlHl
p(n3
2mKL
[tDYO,K
vb`|9
e2s&q
>'0BR
Pkvqial
~' b
.j \
t n<9V
MZd o
JC.["
~' i
7http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
s*s y+Z5A;s
Hj9w
- <?
r5~,|
K@#d5}f
.a{Q<
hS a
S$sm9o
k2_&U
!8yq
N1V>g?1
@!N*P
,49l
S$OT}qphbutes
r Q>J0x
~7a
mf4d
8(Y.
*JJ,k
EventLog
mBo l.
)xe+
KFW]#"
eSs7prWyN4wJgH8pORXMwsHGAeArRZvYjW1GUjTXngpI6ogPXRohBKR5IglwogHPbMj6RJO5hHLkpbKc4p8n7WaIkHESS23
x/nZ2/
@IaT
=klZ
erI(k
^)~ u"J
r ?X
(s=l
N?@4>v
Q6n)e
d)|_
7 cO=I
W&y
%ZJ
processInformation
~W<C X
n>osk
D$|;w
8t RR
o;0h
AjZzP
[ero
5+ F
k*KA
-%|
wwwww6D
ListBox
Object
8#0}
+$I[
IHp%U;
ut2l
, J4t
5l5L?m
oL*
t/\1
GetEntryAssembl52^mqO`nifestResourceNames
i2],C
8B2a
\5^z
ssR
ta-RZ
set_UseVisualStyleBackColor
EO~3
GetTypeFromHandl
Q5ND
L#W w
NCv>Y
p7z0
N*Nt
FY:
AX
U Yv
a(}q
DigiCert Inc1
[? _
@4 :=
xrE8UL9^
% d~&
%$D$f?
~I6p F9
I2?f
5-:}
1l`4
I$P*
4W!}
<T< 2K8
+_ J
\x|/
e-J*
lE$}
EditorBrowsableState
J dC
mrbEB
OV)p?
+[W{F
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
MethodInfo
K(A*!y
\,|2g0X
finiV
}}}}}}}}}}}}}}}}}
5x!X+q
B:#A*
Z& }
w H
k 5?oQ
7nNW |>
o[}J
c 'y
StdOutput
qxg
sY+p
%@Y9
_i[v8U8]
[]]`dmwa B
R+"S
]Hq
<{#b
9<j}zV>8
Y |=J
x g+
K @$B
l Wt
}=n\5"
/i[:
VirtualAllo4qb mbodle
8#X1
$&2e
~,>`
t&W6B8p
+</]
G6Y-W
get_Modules
! p(g
oMs)
$<h*^
nR{-
Q:5&S+
sRGB
w%`)+
kL;)
IsNullOrEmpty
e13C
h,-\
O;AhOg
B/k2
+% w "y
v8aO'k
wwwww'Ogyruvww
Ff)J
EYy%*
Exit
b
#F*5
S4l@
;P$
$c&;
6Y0X
n!E#b:{+Z
t!)
{-mA
wwwwwwwwwwwwww
o9CQ
c!(]
[%|]
get_Culture
BU5]
~ mc
N3{t
add_CheckedChanged
7pV{
Y ~@
Z'oE
FAt X
["D3d
}}}}
conff
SecurityAction
ResumeLayout
|9Gy
,n N^
ypFd
X>|VZ
^8Q
c:$y
|=e$t
VP5]
YmvzQuaaAiVVzteKiVFbTUlGLKKugJLzEw1p5f7z8xShO4qTPRIODqbSDTACbIb35S8mnmFnruajzoiv7HuikvO9
UVKA
pTy*+
|=e$j
6:I0
p<Y*
WD '
v5k(v
p+Cjkfw
N lj
W<yv
s*s {*\4@:r
process
D6Z/U
6[~O_
rRK T
Ws,"
P.I0
DRJ/
$'q
@s/:
GetEnvironmentVariabl-3Xm|w
M]!=
nAzr
p) r
s^c@hFBY5
Buff<^
k* z
X0i!
|/^n!O
F[%W
Fh)z
X?b#
rb
O12+
J 2R
yd-2
hx H?-
[3j
^61d
^e=EN
y&^)
0u&X
cQz;
isWireSh
[4q)
Z%IP
Q#F!]
dvfOR i{^
9t%x
m?80S
SetApar8_|fqQuate
-%}_
j%u5
} y.X
;oh
}dd
G2LM
[!N:
hXH'mV3
IC`T
4u:_:f
&q?jv
"3X/g
q7MJ
<PGw
f4a~
,\/
T E
l=n 1
e9@3a
{Q0+
U!p&p
260904192455Z0
KNv4
b5]5L
CKk
t5m,| L
"u F
9xoM
V>g>_
x0 T
i7nI
}AXTv
h$ F
~ co
+x@nZq]
B"X~
!u2 Pp
I"|^'L
M[KQVY
GIqPss
p B%}:v
m-J-
?(LBl
<sD
tU+<m (*
$ 0
SetCompatibleTextRenderingDefault
BV0D
DDBBUD@
(K/[{
F8H#
zz{p
hOa6#
+0Te
ok9er3
Z+@X
@7`.{\
nB{J{
+x@nZq]N6
r5u4
;S;
#.4:
m,t5e
.)LF0f(}*
J ?Z;y `/]
p"S<J1z
jsabQA3IqJL7SBV7k8vb0wAwNGoGPHdJ7iQLLnZkxn5z8xShO4qTPRIODqbSDTACbIb35S8mnmFnruajzoiv7HuikvO5
L=2F
ndfRtN
+R v
e2z/
p E
a3Bf
[G$C
h!Rriaqr
wwu3
WMF|^y
R"\b
E2e+~
Sm%B
k[{
PQ^&
$ >d
* lW
Zfz]
cV'+
]9AG
He!K R
JY)X
pr^+
B!4-
c~:n8B
g)<:4<
53I~
5V~:d>
2'g u
32/;
^#d_
[`wE!
WATHy
1}{(
G:K<k%
n?}f
<r'm
set_Culture
9443
get_ResourceManager
I9BMi
Wo?W
&0]
%h))G
D~`vfd.dll
k;t v
NUWhhYYysRqotzHgXGLdfAXAPqAwW@
#ITIII:::3:Y
F,R#q
O+,^
IDAT8O
@6a/
WTXN
m8a! ij
rd$y
{;MS
V`!=
length
R|n'
S5LYzums
Zu]6
CheckedListBox
v2.0.50727
=assembly xmlns="urn:schem
+1'^
(&Gqi N
B:#:
Diji-Vindows.Forms
} q:
Nh*7W
<?-
:]SH
Program
`,D1
2y-r
h0LkJAT
=i l
;*
Proc
7`9{
3qPy
rJ
l )h
5k/
Y.F !
m@Wo
X5D+_%m R
a%b+M
Bt,VV
,:'-
t"wR45f'
Exception
cu47t7
t7p2c
1?s'
Riy`o/Collections
;C933
JP_U
;Ii,D
K83{
@/+-
uyPOQFWgf9BkcJCtmmlb87PlQD3ToFEUz5F6rviVlZ9p2SfhJaS3o1vvvJOQq3AvAtm19dWNpUuUEFPDr5HHvXZW5
Dx>r
V(H={
xr2R{.rd
Bsc#
.F)]'o
Anti
A"V E
GetTypeFromHandle
:?6
}) A
Z,To
FileAttributes
7NE
H 8a(Q
GetEnumerator
6,i::f
Sd Tzrtem.Runtime.InteropServic7K
S_dD
;":C
o@2t
eventLog1
k~I9y
5A;s
buf>Fa dwgferSize
5Ey4,
vuew7w
Oq9^
5gT 'ZpIM
j jS
\ G.
\~ lDQ
h)^ G
E$*Xg
?Kq]n
\87m
0y uX3q)h
NAlS
_*s3
s0,H
R0n
k9H'k
h$h
^]]a
|P+d
8l S
F,]2F<
}9v&W
@le^5
Z0{M
78,{
aCGa
$bR1G4f
?#}%
_yPdN`p
asCG
&n 0:v
85' u
{$L9
!This program can
rm:t
3OV!z
GetRuntime0T`ifvnry
'PTR
$NfQ
y_!ka
YmvzQuaaAiVVzteKiVFbTUlGLKKugJLzEw1p5f4EWcDiDhjdXbjbn1sOcdznYewYdzJertkrSQuXjM6UTe3
r9Srn
dx`$
K8kj*
1nM_@D
o J/
spg,
I]|s
6zs~d
=n6&
3|0Uk
89xa fQ
x+[*^$l
\-B6
xG-&
]2?[=|
V$:q
R$LKz
|#+_
O`Ro7a
;S S
[@v_
cFxty9SJSgpcE1m9RtNMttJ7aHYF5VKhXrcdW5d.resources
9v&J
ReadOnlyCol
rlZ1_,
CvV&
\ c
f4E*^&o R
c R
S#jGbwf`dAttribute
xZQ "
!)1I@ F
YMY
lllf
W>a I
1y*\Z
K Z+j
X^P=]0
`c<:
"'zg
N7\"e
WF`s
System.Runtime.CompilerServices
g4c)
241022000000Z0G1 0
ntdll.d L
z5mk
A;-%$t|
C,$"/,
::`t
g*d1
Eata
~\l0
+q}P#
],C7
8}d=
db/Hv
g|_;
ResourceManager
8QZ@"
button2
button1
Ir"Gn]'
],C(
\<, j
EaC!.,
rB4E6d
19 l]
@>2D8$&%*-
apnr7
$^.#
,,t
IqyKeRection
ZDe3g1&
k(3-A
}Sg`
wV7(
9]8`'
|=a x*
VoC~9
" %Q
d|2pGG
/CzF
/1CUDB
+v8i
c<|1
o8CV>
p"S<H2z
]97v
X*X
ISynchronizeInvoke
3o!t#
d2e+
E;E{A
linkLabel1
n&Yd%j
qVm,X
L2z
~ruvww
C T
IDisposable
#q9Qij
+]! W
Exists
v .
a>8e
R8D;pA
/| Lz
\%`-
4"J!
kwd`
_.!U
:_ 6
KmX0
Pdserved1
>=/h
u?Z2Z
.c#|U
5gdp
Wj0k
w@}&
H>i'r
#K/I
Qq}^#d"
&m'9V"
lTzD
cga9R
%M<n
$?ZK
`91;z
L<S']*j
`/?'E[/m
commandLine
sp&h=j
# ,k
UK2y
T<T Tj
|._0D>v
MG x
}H8v
Mzfv>#urn:schemas-microsoft-com{Ioe)t3"> <security> a
* :$
F&%O
x6c4\4 R
*cIV%
oG!`8{"
]4vQ
&SCm
get_SystemDirectory
82S=0
79]}
b5e0g
fwC/
k2o
W{S,
'x3:C
qQ"p
s6p*
u4l-} M:m#v!I!x!X+y
b~20_q
'mr
;+CI
qg1f
Ukt}
^U=U
4/h0w;
service3.1.exe
value
:YC7s%
!y"r
h"I:{
-j&BS
&!DDDCBDD
K;3K
Y=[B
X ]M
]U$K?
info@arma.co.uk
/[!i
Kc f
X~QZ
ogPXRohBKR5IglwogHPbMj6RJO5hHLkpbKc4p8n7WaIkHESS23p2SfhJaS3o1vvvJOQq3AvAtm19dWNpUuUEFPDr5HHvXZW5
vv,X
Rd k
a+H;i
z!f*
pt7G
JgYomeowStyle
~?'d
&`k+
procP<NoZNG
-q,2
1bp
|%= D
xr Bb
o`A
t'N.X
I({
z E#*
D2<
O44K
threadAttributesPQ~f`phtHandles
G#%d
sPID
g/!=
Rd\Y
1E6d
#GUID
=j#}
J,m5
Z*}3
6_Wa
z3R
R&@ii
d?zGg
6]q,
C4c-X
9?9D
L;f"o
A# S
P9 U1U
m>vLd1j4
+mZ
%7^ |
EndInit
0((x t
)u4y
3 (*U
vi+s}F
\bVI@Ld
\hA)
3{(}S
C 8o
%u<j
lBQY
k0i0$
BZ2k2
)8j>q%
P#<I
V! C
C3l6P
W%x
<[L3
__,q
A1T n
r*m#H/o9y*\
yI<-
RRHt
PH$D8
j-!ZS
`! x
]DhP
/; Y O;
-bGsy
~/f?
`w)
#g-w)/r
Scotland1
!S %
>g>G
r^c^c^c c_[cng
{3T M
wD4|
(@(q(Q"p
EventHandler
\^6x
>MM3R
Thread
;bJQ
vp:j
"~[6
\4NB
0b1 0
i;J%Q+a
Dmvfsved2
78j[4@
232D
d y Y*
-H-U#
..)Q
[7e%~
15qP
Ly@X
2qJD&
SetValue
j'D,
39yF
)B5O
IEu
v2E m
{ U0(
xN($OV&
/t<X
E'3W
"_n8
j9I'h
}IU@MhOQ
=^ b
S8_'
:u /
A)]V
CH&ti1p
;z {
.H O
p+?.
8n P%`
u+
u"F;
Interact
s)<
~&1T5%2
Microsof&
>t>b
'5]0+
CreateProces?2xxunhcationName
;8l8
0#::#
cD'a$
:73-
'A9
t&G(L6n A
\~(@(
H Y(i
>fn^
PY\F
\+|2
gPF4
R<c<:o8
r= [
xa^6b
r9V Z
='ga
s6Y?q$s
:)7g
@DUUDDUUUB/D
FS| K
71Br<
##4III36::6:Y
H-t1|
q/ R
9(N$&
G x@
System.ComponentModel
X$S?
-$@F K
iN$oe
J>[vkocipal
iA>I
2L o+
+P'y~<ss
d3X
#q(9a&
~i xy~
Debuggi MXbbgr
D}m3
([ Q
4eSc
L z
R7n7c
FLC6
Ak+g
R LB'
QUY
A6M
v>9a
poqfm="asInvoker" uiAccess="fa>K~,(< </requestedPrivile
."V?
;##`s
-t-T1
}>b.Ty
eSs7prWyN4wJgH8pORXMwsHGAeArRZvYjW1GUjTXngpI9uyPOQFWgf9BkcJCtmmlb87PlQD3ToFEUz5F6rviVlZ4.Properties
bHcSB4@:A
4hio
^F!a
[ z;L
^ 7Tr
kn5l
G>MS#M:@
|+e#t
p(&N*
b S m
+r x*[
m1 I
9s 9q
%N4|%
#0d U
d6G(\&n
r!R+|
W6AY
!Ji9Q
(kdK
90WH
ow H
l*\}
| s,
E \
V4Sq
. @yy
#iM
'9@
3' P
System.Windows.Forms
<JTx
HP !w
u&i=
F@4~
f+} M;
/a_K5
Split
)z>s
a9~2J,m5l<M o8v#k
i6W+0
"$=7LoW2/,..13
.N)b
-r/.4
oUG"d
L08E
F][4
dldflC
ZfZ[]Z[^^^[Zgg
hxVw
#ad&
Z [
Fq%$
System.Drawing.Bitmap
V1Xka
6x=G
VE%
A=&My
Yt!3
6az;
^x!v
S/J5
4: 5
E m :b#s
<e=qy
HP`B
`!y8h
'P TD
{.v7
"j)U
"wDZ
Rj!%
disposing
s+i9H
Oamt
Strin&,Bown`ce
t r-NjB
b%@i`#
>Lr }
<Qgk
BRJ*
WrapNonExceptionThrow
HDt5
B:?w
I.6p<
x O>Q%
1g+:
b6bR
Sc}x
#&Fl
? /&}
h's%b
L A%C
StdInput
CompilationRelaxationsAt-Nuhrwd
K}=O
l;S;
oo$t
p$coD
Unmanaged
*# (
T%J>D k4t9^8y!`
\m N
J;T

#infosec #automation

TheSystem Itself @ 2016-09-08 11:54:02