MalScore
100/100

dovg.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 16/66 Related 2368
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 311.50 KB (318976 bytes)
Compile time: 2017-08-19 11:31:17
MD5: 91c9561e605b9d13935aaa772c9ab575
SHA1: 903cef33b382e8f7263d0e26b70676e7f2acbba2
SHA256: 4838257452919acbad0236f3bb87d563d24ece3b1aec7f5d8d8fdc933524e5ab
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 5 eI47UU$ .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2018-05-29 15:36:04
Last submission: 2018-05-29 15:36:04
Filename detected: - dovg.exe (1)
URL file hosting
hXXps://emifile.com/intranets/dogx/dovg.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2018-05-29 09:15:42 [16/66] VirusTotal
PE Sections 4 suspicious
Name VAddress VSize Size MD5 SHA1
eI47UU$ 0x2000 0x18ffc 102400 f1f6b0a6c4c280b925036b05be579646 076a76aedc921f179cc3d18cf99b8c36458697cd
.text 0x1c000 0x33cc8 212480 57dfd9a85a08d9861a56cd03321b4468 9b0abbe14e3fd0c3e933c0bad223589d20757868
.rsrc 0x50000 0x608 2048 2efce1f53b64e3b3055743f07bda8b91 376391947bc24b72a090039b2212d78e78dd6b77
.reloc 0x52000 0xc 512 8166b251127e943eb6e3ab5b720ba52f fb84c1991a2f63a4e1468a43d2ec36b0266c2014
0x54000 0x10 512 9072809c2910053da93931bc76a728ec 62a86f24cb440f61021f2bf12f87f156fceabd48
PE Resources
Name Offset Size Language Sublanguage Data
RT_VERSION 0x500a0 888 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_MANIFEST 0x50418 490 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: Copyright \xa9 2018 Viad Corp
Assembly Version: 0.0.0.0
InternalName: DWORGY.exe
FileVersion: 18.7.1.1
CompanyName: Viad Corp
Comments: r1tcc0c1cna
ProductName: Dynamic IP Restriction Module
ProductVersion: 18.7.1.1
FileDescription: Dynamic IP Restriction Module
Translation: 0x0000 0x04b0
OriginalFilename: DWORGY.exe
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
No packers found for this file
File found
FIle type: Library
KERNEL32.dll
mscoree.dll
IP Found
18.7.1.1
URL(s)
No URL found
VarFileInfo
Comments
527d3f46-5c34-58
5c6bd938-b9ec-2d2
5c6bd938-b9ec-2d3
5c6bd938-b9ec-2d0
5c6bd938-b9ec-2d1
5c6bd938-b9ec-2d6
5c6bd938-b9ec-2d7
5c6bd938-b9ec-2d4
5c6bd938-b9ec-2d5
r1tcc0c1cna
5c6bd938-b9ec-2d8
5c6bd938-b9ec-2d9
InternalName
5c6bd938-b9ec-2d10
StringFileInfo
Translation
2018 Viad Corp
Assembly Version
FileVersion
Copyright
VS_VERSION_INFO
18.7.1.1
000004b0
Dynamic IP Restriction Module
FileDescription
0.0.0.0
OriginalFilename
LegalCopyright
CompanyName
Viad Corp
ProductName
DWORGY.exe
ProductVersion
!upR
BW&:
|xvp
mB5)
{W34%
cu dw
K>}\
Xi
H ch
q@W"3
xqnk$
5RIV
{0ih
~.5{1
`A%A
MS.K
*Y-+v
y'0#
I`p
J5mUV
PNG
{^{ +
}dP-"
JIJ
GG,`
tGoWE
(R~ d
EJA->
DS6v
!w.
")f)
;^<!
o@[zsD
\;>%
]69U
w`Nc
b: b
Z"6R
ck*;4oHO$^=81
) ra
<bT\}6J
hBrP?
@tS<
jQ*Hl+Mm
Q f{
@7'L
nl7[
0VZf5
}!HO
[u De2&{
8k{dY$
*cd@
+av$
y N_
n-wF"
%|['
ix(u
093v $\c
Oe)sT
9_dk_
OB!>
QdvJ>e
6B?P6
#6<X.
V%66
<*U.p
rTl:-O
a,7rh/~g
>K^u
z?/T
Ab/v
<X_T
]_E]
+e?P
Wo,a
]t.Z|
5`{q
+'I,
Z<of Y
`O'c
+%</
LhX?jYs
qfw!
tXgJ:
'79f^
AHB9mW
\ 5R
%YFp
e^ u
obz
6h3,
h]UU
?cc[
35qE
kMUa
(hon
(v$8O
m0I9
\HPL
fL!i
`}h
efD[
"H.#
^r*
SDK5
M 9AU
Su109kE
lmq6
xtF J;
p5qa
sm:Y
c-Y*
iF8|
- $a
Lw\q
Marshal
b?)<
JB>e
(T5'
M%`T
-TKq
3&w?
>P(
c"s
X D^
TPJ`t
t1~ 3O
8e z
n\JP(
A:"\W6
:Vmb
NtyU
$v:!
Gz *
@P0y
:9Z
JNm,Tk
-RA K
To4!
"n),=
PH_4p
L Ye
RuntimeFieldHandle
}Akg8
<r~`Nw
System.Security
g=Wy
\!!o
YXNs
-3U
c$8y<
wd?W5
4N?$_?
!(d>
Z;^XunV$
&,e$
'vQU_>
8_9J~
p&`!
f4pK%
x@6F
E.cf^02
%W]wz
KM~
r>f
CgYS
`K)L
&#p?
Kj"3b
l5 7
XX@e
"K[j
hGeT*
Xq6/
#>UI
T]QD
f>Y;8m
g?hI j'
U9 [
9x4&*
P j
I-dZ
Js}:QK
Z4z)v
L&Ok
W ^D
A.J0
bcYR
11K !
ksBo
/+"l
:(=-
+w d
QP,NZ
m\V]|J
PW.1ily
&8x.;(
t 1Dz
7]0&
@C)O
Vt4U1{^
y$w%
4ekJ
7' _
K`
XMjAG[
dx+:
V-4R
6xHC
b1e
G:a
0Fr-9
H@l1?
L`kDE
8Keo0
kkjim
+As rP
)Xu?
nUU
i*x`
X $
xPY+TQ
{;%WS
]AKqS
~%l~
6Q^:
mlW*
AK[`
#Q D
Rr*p2+
S.'Q
-SUh?o
FY0
N|6e
h&~&
ErmK
9>&M
E?$P
JHJk
/w;7
B7wWy
r {F
SKFd
H"C;
5'B(
)M9&
Ed9>tp
J[{a
-#4^c
oBbi l49
}N j
= &L
X;;|
"<.S0
9e!,\g
(y!@
^y3i
<?k|
Jl -
["F1
C2pU^;
2tfC"!
/4\b{
q54vf]3J
9k
?;9u
R4T@
.|#t
G^hk
w+i},
(k\y.
q Z 5
@Q#DB
B2^g
5<6Y
NBtv
{eC~
/<%.
A`'e
rZ>G
fl*@
,O+k
WS _N`
p5=d
_}moo4
bRq_
DdZ|
6j`)
*v8T
}:g
aL!}
$>G 5
/gC}6
gIN[
V~J
_*!<
Y{YA
,Nkm
\t`t.
k ZQ]
L<y.
dkHW
0;,?
cJgS
a^,`
|hA?
)e&u
=-"G
Vcool
yf\|
_@r2
IpNg
#bbWP
<(.>@
$x`A
HW&3`
sCO0e
Ix2l
EI
Ag^]
SZ7sXs
Q[b V7
#Blob
(o+n
k!z+
[ar@
Gp+s
2HR;
V?~7
Ufl
K 3*m
hr$(
5kFf
7+v:1
k'zs
,bRU
KZX
l,eR9
p!&|JL&%
_hj2
L_?!c9
I*9
"j1k$()@'
#W?v
lZ\h
DdHk
<"vmO`}+
mm\8]
|X`,
=Ckl
9/}u},
m8>t
4~`Y
Q," ?+D
AXhJK
&Abd
P.MS
5zeis
o E
4@t3U
Type
b1Un
],l T
zV?=
*JUWC
>|O r
N&aUTl
'.5l
E-9q
uV 5<
9]nK
zB
rmu'LO
s=DS
)[<g
j7ws
Hj ][
;Au,
pJs{u]v
\HJ"
MIh_
wmJJ\ iU
m5nL
'T.a
()P.
^@z1)
Q6+o
DN E+
^5,G"
SAAs
s6X6
N^}(
4\tI
g"^G
@AZ6!
e>Lm
,$xkR`
YA%
%hDl
m@l3I?
N{N,
iVw
ZA.,
dvqVg
H1P
V`?i
DUrH
hIdI
$n^/"qH9-
+,rw
IS"r
Char
/81&
$G)& G
E, Y
2l4aFP
F4)8E
1K*^
sk[`=
f# b
L89J
?7jInI*N
r1xz|
x"[E
$g1xto
v<-r
[lQmjOnV
u^7j|
ZQrD
_T_JJ
:~$f
u6Iy3
Ig{K
50qk<
.?S&
EpL1
S m"6n
^OsM
W68@
Olp-
=pYn`Z/
O^2n{
YBT]
_,r$%
#)s4t
6:-_
q2y1F
>p*w{
F<ad
get_FullyQualifiedName
L Z
.l $
>Y,i
i!E22
=R -
(eUon
xzF
YG'2tZ
oB)\
h)/h'
0)9%
iJ Oi
T9\f
}zT@
],D{
.}1Y
>a_L
$p;j
>Ma
L\KHrR
}]AnT
I$ ~
uIy1b
c1 y
K>[$
Version
Na.]
{)#wbd^
M-_}
NG_5I
QjYL
)@moU
_"y3Z]]%
qW-a
\+vI
X2WC
)+M8
Y:KN
sqQn
EgDOf
)M(I
p(\'`
a|5u{
9qKP
.text
DhRPZz&
;` I
L%o[i
>a@By
p, S5
zQ ~
P@Vgt
#U uu
0Fx[
24#JH*P}
.jt
S/LBcc
za;0
Jx,P
<Qwt
~$w9
fo ,
_A ^
UT a
'FJv
;Y&z
BVk&f
S_`7A
/o8W
"5H]
m[5j
g|1t
GU h
Z$u;
@TOm'f
-t$a
#'"!:
aeY
3\"
1L2^~,v
lD1{&
:qt*N-
G"b
aE1l
t~L 9E8
:F7_5
{b9L&gu
_+ m
Uq~~)
0.y<7
W`4z
hpz1
f_dyK
5' t
kh X
y{`N
=5*
]{1H}
|*pJS2?P
pkD$
'p6Q}
1tU"
W&-O
5 zP
3OnE*
0zDCp
?hVW"'
[ic(
C|Kv
;;|m
PR F
1fzM+9
2!(0
5D'C
iuA4
1a)c
>&6Y
4EcL
Tjd>C
kkjmik
6*sh[
4Y#A4P
3&h s
WF^8Y
zgvFvPD
!_=0
!0m
~69a
(ci_
?ly1|
L"A)
t<yy
@D\L
}xbu4
V^B=
S0"7
X^w,c
qnY
$ G
kernel32.dll
9AExwer\Y\'
'sTi
ZX~<
ekz+
gkG]
NOyV
B|Ys
P+]s
8z0x!
&f 25N6
:k
3Y;(O
"$<0
e/W]
h*W~O
bhW-
jg%/
X;Dm
]zKD
-1<x
nL5Y
\.#
T1A]
`.rsrc
vJHy
_|^7j
~;PM
[L9wJ0#
SuppressIldasmAttribute
\[ /e
#Schema
I- ,
\F =8
q>s$)
& ge
ELqs
aA.wA
osWy4
`LPcT
#t\MC
_Jh
]i :
}Z9.
.?T{Z
YSm
0y9Q
-T;V
y/0&
nQ>^
f_vl|
oO 2Oo[
e Tp5"
^h#:
}z&LK
gH+4
T l
w (TS
)'GW
3%8Mi 2CAY6X!3m
y0!nSt
ztr
lt#)`
``Y{
l bJO
JN2B
e3ow
#` 6
b.ROPk
<;m%
Iq@6
#mpz
L%/
e.tm
uM>M4
VTN/
rq$'
;L++R3
q]a1
K@O='%R
i0VX
ZAJ+
S^H{gR
bZ|B
W<XB
iY`v
Mz3J
+$}I
67le4
}E>Z
bHv )
+ 7wH
WAnH
NLqS
q>WOj
+zm?
Y%SE
P@:
& [(
QNlD
;[P'
XnF!
;gO$
K:N
k<kJ"
|&Z~
<P\)0kUdv
`lNG j
bnkU
8Qc
Owaj
xDitE_
Pl| R
(zOG
XdAbA
WqrZ
zi}j
[}W*
{r30
xzQj
FWu7
}pn
# 7
@T0\3u
!~+S
c n
S_+(
8 !D
!J-[
J<kz
uQ{E
LcQ;
&/!R
U<6
#EhouS=N
Bib}
h0?
?ePpd=
epMI
*6G'
LBg56|
nz{j
IO=@
i1fe
og)K
9UtU3
E]"Q
a&XmE
JYg`1
1dKW+%
uL ,O
%{P_
! 7zg>
XPAC
^PqB5
j2 Y
%hQ*
=.X>t
:GDG
I~aD
(g_)
V5kB
nw>r
:OHaX
xP#au
AN)fD
?0;Z#/
R)aD
Z;?5h{
QIk7
}8S?
DE( x
#o&3
[Vr5
`HBo
{XA-
h9Q:
=^WK
}o Q]u
SyL.
sb6i\S
*KCO
4uRN
R% z
WVQj
%pz-
<?{T
[(0e
:4d<
07wd
#>>;mx
X9FQ
3\(6
4m_M
t5Jy
p*Vd
X|("M
6R
)}%a}
/0x7
:7gv
9AUr
p"3S
Wg y
1ac
r@xl!H
T6E)
!do74q
|>Du
j;Te
qz o'
&y~
gn,2B
`U~.
7q)0
R_n#-
~j,/f
,<?hV
--fY
fhn]d
m}+W"[Q
?p>2
*Y6
]@!
1SN1
:h~e
IHDR
b!w
\jrw
; Q*,
WrapNonExceptionThrows
B%M?
nCDv
F\WqtV'$t`
D@0J
pk&?
N\;{#
J)6
V_2n
|Ov
3]A_
fy.C
:}*se
Y|M,
Pjh
O<a
j$:R
3w2_+
*7f1
*mlk
Go qsC
WV|:#
3le<
\45b
mFZns
:G*.
I)RR
w3o>J~
lS %
L N;
WXx9
#K+G
FdF.
;:y$
+^*l]\1
op_Explicit
=QO^
$fjF
/jk.
0yk
dB$|
Ba:G ,
-Cc<
68A_
$}*w
-0:>s
-#bP
du{!
>RL#
k>_
ith@
r#YN
_C;7Nn(
pZ h3
3Sx]
nN0~
l_L{
Rlgo
$Z
\{l^
3Q4a?
r}c:
iyR!
I27O
qQW0d]
g|0[
\nhI
yU'
KZ`Zo
dN%D
&?7 "
c/DM?*c
!y>f
S Nr
j |W
vQG#
" *0
^@*%a
X #W
;(O
a_cE
Md,,
JziRdSP
(^MNx(
UP'Ge-~*#C/
System
{JhA
}o5
i_hJD
, a\
qpW&
KE*
]N\_
y[Q'p{
i`
kzs`
`b
^Y#b g
M /b
O`xt
0Z)F"
AD,M
&8J
2z#B
E y"
9!\Dt)
/&Ka
FeQH
xzVc7y
X Ka
!`e/G
7A<mV
yYVC
|u v"L\+
4}'uHb
+N!.
% ph|
"<M-Ri
W*J*/
"<t 7
<0^g/
MethodBase
#Strings
rvGQ
.2d6 a
z[sc
U+KD
1f/3
System.Collections
Sua
@!H)
MY?sZs~
UK@~
gcqdF:
:mLr
lmc}
I*Ap%
| q N
^;d@B
$bN|
wxX%D)
>YZ
qd;#
Rlw$/Q=
_aHzOh
d]:P
0pg}8
GsJyyLXH
@#`T
Environment
%Qsyq
{'[P@
z9Hu
P+Kg)
VirtualProtect
bzc
3!<c
Y4jc
V@.g
H{X>
MKnP
~Y:P
A'+>
NMI@
tP5F
tx#3q8
DV|\b
nq/q3
x4xx
lR7!
get_EntryPoint
HIiv
McI.[
e #?X
u?Dpn
B|y
QWT*X!s
iXa?k8-.
QFRi
kCYFqw
@@*5/b
uW 6
o_bi&_
0n-4E
,@D-}4
'peo
{"Gf
J.i
2cnho
^DqY
GZ*1
-\L !KB# q<
5cIQ
5 Q#
Q.b
t9~kvbj
uOM}Z
GetType
]2'1
=^F~
0ym{
aU*O0
-m-O
&/g`
5xkSb[
6SGv_
_4/b'
"Y c
8;L2~
'67Hy
DQxw
P%W8+
WUW
sXUl$
:E<w
F^L[z
]*4`Q>
Fx{L
+i;5]
sp2!'
.}3I
3t][
/DZU
}?fm
m>fu
#3D{}
lyD^cbg%
,b/7~
XE3]#
u<s+
g$ ^
fg@No
U6@d
01@D
yQk`
PP=Nz8
D^5b
}]zG
`2;W
DZV!|2
0`pR
%-%2
mO
;d{Jj
]W65i-
xJVw1
hQbn(
6V2n
?A-FT
`jCY
8T-'U #
R]w k2
c9&,Xp[
.Q B
<%t
~Z^Mt
01@:
7y5>
N6B-
P6(F+a
String
ciVf
+1fE
sA3J
!M"qx
0<h2t4EV
tH|(
7fKo
!}:hr
-/Ur
cgYo
K O@~
^8u
"j&53O
R=W2
]VGs
.~:K
WZ
`u-(9OEm
^3k|
zFT&H
Yy|?
Y7 ;
'Lj_F
+ w2
^oUZQ
Y1o7Z
hWX,
J*80
7,h
-!:$+
,?oE
ZS H
pQ=Gm
;|Vr
6{+W
pc2(
N=?Z
{xiZ
7I;K
cO:k
AjuyuZ
ai[W7
T C}
5 -R
:u"I-n
~JQG
\g?=H
ttXR]
2d skW
9oX`6h
6C61A2AAB9DEDA384120B3D6595C214F06494695
8ZomZ
<g.Q
System.Runtime.InteropServices
H(ZL
f<`?
TrQm
6tG
f__W
hSystem.Drawing.Bitmap, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
xKVl
A51C[
8,4N
~nrU
V3;Z
nde5
R*R:
;tMl
@ t
/p{H
=2l-;
bZ@k
IX'y
Ndb'
g xC
)/k@
Jer"qS
Wt{i A
$3k,
90cCT
2z2k
{/FoSp
Cf9Q0
yh\.
nBS
ep# G
i\ e
?9Om
Rk8h
G<z%
E;/u4=g
u xV
PGr+
B|8m
3&(V
7k*=.'ik S=
&$+
JQ1#
6^h?l7
?]<H)
=-!p
e? aE
+S=^
lX[U
f3xK
=2}Wx7
JyEt
/ke&/W
B_}_
+9)83
?ByA
^ F!
t'/':
pM,8
_GS]
Nkr`bQ3
P|$0l
|20g,
>Gq
9hwb
l '8
v;8C
/303b
ALCS}"h
x >M
SL uj
A9T&'j
'9e t
jj{I<
z1 Zy)yE
!J)Zp
6A2h
WvG*
o=I1
c|P`
p<*C&
rwlS
AmHuc
qg #P
UXt<:
bVl3
^)7K
OI$:@r
fUE:q
r %g
O =R
s)].
Pz%z
4eK5
~65#
w}Dv
JBs&
!j!2
b tv
C*Qw
iT U
T})%
$E\Q
?,uB
,sQ
s\~2
7Gq(
pfE\;
I{wm
oA._h0|.*q
H6*K*
M|Xp
rSYw
\OD*
tE3MY
t,:d
cM5Qm-z\
vGf(
1b.
_D3I_
Ine5
"`'Q
}yz
rHz[
.o8M[N
DO%v*9
<6.8
HBl
#(wq
;g)M
e .U
U ;h
Y]adi
X T[
:#($
F IT
C*B<
:;!*N
.$ ^<
a"gM
g^ C
get_Length
;vrS
x m<
6y=Q
s?3n
m(L+
sWFn
Or.cV
WmZ
o)ek`
bd7m
TpI`
2^VS
sK/N
FO3}t
FA}
N7jy2a8
@qEP
wf;],
2Udb ?
<U2;
(R0`
)P^I
6*Bd
nS")
A1t}Gt
IEvidenceFactory
&Qh4
,h8l
W|:NLCYij
]j$En
kKeU
\[$~
X,#<
4;$T
-(\GR
ValueType
V3,~
OL011
GuidAttribute
-XCK
c_hG}
)2dLOf
W @y
A[ N{
>@=
{/Dd
:CAm
Xz~A
K&D(
H@\y
M 3\
qR=\t
D ,+
v$M^
G8@h:
! /
%|(r
ww(1AuU
Z_fu
X%7PJ
B 2'
:-02
0M?i
oPC]@
+_/C
F]-ZSmjgS
|D/%
UePC
D;D8
3+DS
6"RxM
tf;zT]
' Kcc
H8.%>pM
.eK{B
3>H.
%VCR
K9o},
J\(}
ey/v
hMI7=$
wyu59
+uC^ Lr
+$5#K_
2^ D
Z}]H
f.&NO
og2v
ec>L
b*~
XZ,&
p=L)
BDm
3.sE
R4yz
/Yp9
DNiozu}
Kca+
:!9c
)nVc
g?.I
8!U1
mo+#vL
L2@f
LK%x'
DPiw#
pvK.
ciB8 H
pSO<oD
YXB[
(tK=
B^`I
zq8nu
^_ .Z
,m n
bkpYm
UInt32
Blc <BIZ
6I~x
iwwQ4`
'[QV
WISe
O)U
]`10
+E)9
get_Version
RUquD(
ImF$
1>hc
k`^=
b.Dn
h[PK6
ToString
qLN(
3G0Y
k LP
ilkmj
-O;g
3@x@
L g{
< W@^
|>38
0,\X
|'${
)qy[
]C]
iGPG
soHahh
@!43
M5En
S8lt
dV/
P+'PzziI
^(
w:wF
"Lek
fH!)
mT(7
K{3]t
6eyD
zh?F
5gH#
z %}
QSp'
2?aH@
(^L,
'FJr3
~h+[
&\5b
}v}b
M b
Dpnc
bh64
JzHx
1UN$h
j8|}9 3
;]3L^C
snp#t

~ O
VJNs
t<>"Z
eZ35/
x(0Hw
fzux
)Zb$
<S%G]
b{xw
mB(y!
-gC
W uH
_.
U7|n
0fK S
AppDomain
WLFH$g
wgi1O;
e0(V
Jh4
ii F
#Hjt%o
|0
vtd.F
YN*2
6!Mz9
R+.`
q-L9
#iRS
a`9/
*='Nbh
3CvD
TvF*
%xv6
(Tdv
$_Z"
z|!
G,s5
K~Jt
n& /|
?a 7
_9cQ
s0Jn
H?~&:4
{ $E
`3u(y.
r`D6
&56.
48TMh
(I!Q
!Vb;
IB<v
4Fy/
cz1q
\cXHX;
:s&\9
z< \
{_R~2
Z'yDZ
X`$I
I 9F
rw:
{f!6
e;b`
wuKU
onFh
uo Q
E`6s
K@)|
V \0
{hy~a
d\ ;
{x"@
IDATx^
1O/YK,
iw:H
9;'t
#7u1/}5
L)>j^
gH?H~U
I3fd
U&sW
Data
q 9j
CqL)
KEe)Q
>gH/
o;_u
_ -V
'WMhdQ
%54]T*
^Z3 x
}#H|`
HRJe^
vz}
>Fh(
S1]_
pqm`
>rJd
V[t!'
D'tM(
#|?(jl
t-:`
1FsC
+Po*
9n?h
MNcx
h 'FGr
pHYs
.ctor
#Q3!
LS! J-
<%F,
Nx1YX
OISC
l/iG
7bAD
MA76
d!C-
Ex9E
}QCik
$cZ`
:,}0
]2%R
-: 5
$zKj
h>w_W
#/Lt-|
lgyd
$ 6ZU
Gr(A
Xnkw"R
yqDC
zl s
(V,m
XPD}
q??k
"ty
;=wC[
F57_a*y#
Invoke
J>Y!dO
;l@i
<w%,
UHL=%
&K4D
`H|x
&$s"
hgAo'M
,UF d [O
mZu[
tN_P
0Ofz_
=$^A
:RZh
{>`9
$Ca
f3mL
&_MY
tRN)t4L
s5H)
rP"^
S{;2<R
P Nd
JU^)
z[gT
1.Wv
.EdL
{e?Y
oz2ai\
Jd~
=t~:
A-:<\
Q0'/
W36}
#*uV
\A9q
VI _
a#q<
K$?@VX
Module
<Dc2
1#qe&
3z(5
|&d ){
po#zS
KfD@
1:fk
676K
Array
Bw8x
oz3HL
&e_
0ii/ew
0^8C^
9Jx~N
@2L5L9
|$+t
9 KI*
*_Be
@.reloc
qt] h,.3c
(5B{
vT,v
7?5c
5QEYm
<F"M
\9BO*
j;!ud
Re-"
wnO_;BH1
xqhL
?$(
5.&q
gC'/
a9xUS
Kt*
|B <
@4MD
< PY
_"0U
CKF3
gpq!-
Byte
get_Chars
pEtc>
["%Ev
^\8
L~mk
b+Ke.f
vYTb
rJMD
J#ZkU9
p;W[jG
fL22 -
$ N5
Iw)R
qW>C%^%
X@-;g
V,\P
NN`Sx
aAI"T
UlaR
V-*gKn
6e!x
rS(K]
'Bal<{
l(03
0)$r5
X5ul
X'wZ
DpyU
F+Fz
&Ka%
Nab'
VHs=
0;> j
Xc[
,WzKd
y~u'*
m\e)\
YXYV594
>n.z
jqSJv
A9`b
p5:)J
h4sO
Z!v ;
_-NN
yhly
("z
(U#K_m
4i*M
nRm2
?! |
_uH
$zJ
Hl g
d^NV
pHN3
6$yZ
T/xb
dS;o-`
t$5 5*
Nn=V
S Y(qw
ec)L
~;&ZR
#3~'
z Oa
y@;}
as7%
job
tou<
ZpZX
gq#kI
W-WS
_Qoe
Oo/_
ZVI@
1Bvfr
}%r;
AO O
Wb,A
k %[
u3g4cK
`P+vbn
Pv`}|
_G&j
m3/
Ez==
e~6j
fE-A,
>/("
8 =
K lad
S;~XKj8u
v"V!
u)HP
_@mo
9 9]
uf/f
ii+|
]Z|e
T b\:V
-SGdD
ae|8
glcK
Y[_q
GuR+
s<Lpq
uXL,ys&dD
d$V
s' "
(,!r*
.^x_=
% 1N
(Xk8
aT5bzF`
=doL
p<(N
aFeU
RuntimeCompatibilityAttribute
6$x(
% 4L
N<:8
>,kbY
oVP^
pmpV
\kOU
*}-5
P^Zk
k &:M
Assembly
Y-%'
@DX_
$}t'
s=n)
pIT\}
~ 4
I@9
u U
F +c
~*p1
h$F 0p! /
wmh^
#JVet
t%yyR<
^A8C
;&H\
bfd*
\l;m
\(P7K@
Y#L:
{0:
; ;o
M]ks
jC^,
,kkc
P_7S
?xZVf
g)q^v
b%10
:x%24:
{7s?q
/d)i>
2!4P
5;D4ym
UInJ
fg8:
u W}'
B)2
$' 0
PG.> N
DwP =
g20]
|-$VbSp{
4lj_0
q$B
V0cd
RHa0A
k:%v
|1.h
xFxq=
$ggv
X j"
%6#m
fzL{
p+ jV
-R?S
n#+6{$
8-0'
)pyKP27
G1$L%
BSjP.`bx5?uI
mVwS
hMoq
Qbjh
buD.
1i!Y
5 U
7!Zs
f/M<
`}Tt
"LGU
RDQ-
K~ w
{@6h
cQ<|
n2-}
WRso-^@
Ja1@"
G.[4
v@L5
tw@#~P
l a!
G>R*
0Mtw
dv/)
f)qy
!TOe
O)7$
dKH
)8 =}
~o[
\3?eYq{
{mpA
"*.S
T8p}U
JkD=
RW4s
\ wO{
`,Dr
oxfX
d&UwuZ
eM-^
ICwE
ISerializable
{~Lg
x@6EH
3L(E
h8o_
5<-N
eA|[
j:1bt
aw2<j
h6!u
: sD
r;#R<
zg}b
$p1@_
QG"f
xvu gA_
2p7~Ph>
:s. .}3
LA>k
_H>]
9~3z
9\Aw
\5igN
}0Udh.=
Gvk=P
#{$R
ft$BB
C3RX
b 9L
AZa&#
?l/#
A+ZV
%2t[
)TSY
6T8[As
Q/X4NBE0
d#ct3]
QjJ
v#YN
1&3Ie
uc#e;[
+8"i]
Mxe
Y+t)
eA?
8B4;y
9RGW
.@!;
y~^h
pgh?
y?2V
%)Ac
?w\"
*SVn
xmQb
1(:Nk
-EF6
j!Z\h
-}*a
7A6r
La>m
V B /_
7D-.
m~f&
#7I@iN.Gl
f/a;E
m^ni
6{at
dZ .
C\q,=7}"
ijsr'v|
?u"<
N`}uH
PO\I#
Q DH_V.C:&:
#2&exr
GSaG
r4Vq8
|RU.
%"<u
Jd]C*
h]5)
OV2i
(Ih^
eVKj7
|Ojg
az,,
"_=;'S
-RSmL
/Vc!
-`?.
wxORMz
KuZ>W
N>iL
Z}o4
vj9wmc/(
&z=PQ
O;K`
3p$
T Ds
JtCCu8
_ &>\
P;4 -
;X|pZnP6
4B.U
]e!,
w#ps
'3Z
Vko (NFg
C~{
Blm>)<VT[q`
hjJ4-
/(a@Z
iE6?v
|ei'
'zpu
q@v)-C
u`u4
64n'
z) x
v 0Q
<`"k
Tu\J09
Y9^ Gh
odiM
+d0VX
yoLz
*4_8
kXzC5
!cCL
-[0+
"r\7M xK3
&tv-
w* /
g- N
5%Dq
(&j4
S1 Udr
u&An
B<m[
|?_`
~+CJT
c zG
[w)e
4Um,M
$0j%
%t/X
MTt*
C&(A
ti4'\
R"'Ekitt
(4Uy
j|%B
0 iB
MRF|
z~l9z
!~W0
O++U
;kdaG
_+%_n
_=KE
loA"
yr A
!d[^\
/%:J
]N4+
s hYCo
7@\"9
jCU,T
v}g;
[Z }-
|J%>x
j#0G
Sy{YwiZ
,YO>0
F 5UM;
p&0
&%5
>~y~C
+w7NDb
BH{'2Z3
.*Nk
x.,7)K
c4;)
=(b;PKRuZ
uFbh
N9R1tX
)7tg
)-TJ:
w:Ck
5M8X
vj%h
'O\h
_I$0
eUrRx{5
: 8e
v*`(
.:ZAf `r
S?2S[
juoao
Z9|"2
@;G3Ly
&:' X
.H4]
3?4C&
|
u1ZEF5%
BUx]
sr> qR[
P`k^I
|oG$
5qd&^JanTc
d wa
eR)5
3jo
P@-]
Aqw:
%#z/
:J5<S
KbX&
a'}x
M7H[}B=;Y
yEkY aOK:^
8?L^
o?>?
=7/vp
Z ) u
Mf\PNz
lOV(
t)58ecb
Q7 uk
p4E[ @F
O}gy
%oWS
dc(cBC
MI,z
0N'&
A^|as
f J6/ Gy
Arqz
p RI
>eoH
|x*@Xh
z Pw
q(s\
N'^
#jg/
t[q
/ z,K
S^:
`B>zt
7SIm
ml /
6uQS
$mfKG
}f(0I
<)\U
iFu*
<?py)A
gz*B
Dit
gAMA
))mR
q/O
# hP `
,hpR
h3 >
u_GW
NP %o
^smN
5~T
C17 uOK
9l]bf
ArUY
X*Og
W!jD
[n^.
4 :
' q8
-p/,D(
?tQbk
^SP>
&'] T
,7D
3=Y;
,GK`
.cctor
a &k
$Tc
uIFb
1=U+
KXMN[e
IReflect
mscorlib
s35jh$
^:'-
u)Sn
S-`/
x)1r
5aAw
6k,Qv}
D W^
#|\%
rq#
/5H#
eV7_
_rv|K
0fLZ
PQm8
gP{"
|3 T
o9u!
G"<*
0&-y
Zoy(
&H4cr:
+*Fw
"ZH
38+4
.:]Rs
7`AB
Rd4[a7
sTg<
CUVoZZ
j?kce qG
:K+!R{O
9Z{W
[-,n1
vNMC
YJkV@P
a(3;
EMCA
+5[F
>CQR=
^Uk;
v6&M)~
R]d9
Rw:9]
6+U6
/ 8Z
P#3r^
CTQ4
X!SM
System.Reflection
c^P}
}|~3h
@CY
KTzG
R96Q>Q
h_u+
I IDATx^
LgKS
u%7=
MU'$
RuntimeTypeHandle
Rz$y/
W,T=
=0 Pv
- toJ
RX*bI
4)ni
2W%6
8{$X
eFE;
g=,yBjjI
<D9J
?^w@C
A(i5
WG~:$;
e_2.
^H;n
-N#d
7D>C
yuWQ
M)Q|Z&:A
8IQA
]F>t
cL 0
rH0a
_2e &
}H%i
6271
HY:VT
zv#m
^D:enL
IdNb
tQ,N
b _J
Z v[5
5"_L
u Q
y]nm
~_,>
C]8i\
s8&9{$
-im
i{d44
Append
Dxid
D2s]
#N?Y
w / h
)S [
\G z
W+X73\
G ]w
YuTOD
0f;@
q@qL
;` o
0+ 8*K3$
,F8m
G ag
-.7:
C-Hw
'D0
i91.F
!;P-I
5CC/
!/}i
;xfB
0f;f
nq[Q
~EHw
MK16
,&i;
# ;
l8
Sb;
W.y[
(hzb
Nrf7
yY?x
YD50
WT@`
q-I1[d`
.Ra
Xr"$
jk0P
#aH>GF
}|P_
TSiIzu
z- =
t8*!.
"@ n
\72m>
9)~Sz>qI7
96_G
dGPj
s+cE
:ZNW
7-nF
a)zEZ
Z*``,
(g6-
+w]hFD
~&mD
Q a8
} y)
y+#_
\Zr d
b&f@
&_)?m
s3+B
s6z4
{2-S
+XxPc
LG#d
/ u 0.
p o=
o8!Q@
JPo?t_
%1*]
$%u
jrNq
`f;=
RhN6
M:j7h
vKP+k
oawL
[:()
.h325
%ZR:
?QU
R*-j
3!,^.
hn#
BUw
`PjM
S #tN`9
JzH.
uUX0
cVc/
P[
+,D!
"1 >4
={1
lZA'
x6>[
3]$K
,xc9
aX{
I IDATx^
<km(
'hF2;
LbB-m
uSB=BO
R uP
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
jovL
6zEo
,=1}
]0{b
0j% ,Y
3p5}
b>"j.
#(R6S
>dH(
^f|G
Zz nWu
, .m
\whr*
= C;
e2&fj
fqU |
}w(T
e 1}
mscoree.dll
!This program cannot be run in DOS mode. $
)Yc{
AFqM
/]uy
TEBL
5/:
Up O8
@r93
`A G
K'iK
rb}e
&I]s(
F$oO
6 ~Z
Z2 `
eI47UU$
V:\[
')k
7f/-
|xL$
p\Ar
pm`.
&#!.
`Uwn
Kv ,
%FPe
#s#~|"
fM _
6p+w
J @?
de~g
v=Zy
3_{W
]R=l
Ou 4
liL
aT9
&DAT
+6o }
fqDb
8WMIL
,{LT
#RR)
f:fS
5y!q
"~b4
bm68!K
)ty(
%o
Tc?4
M#z<
}~5R"p `
r:'3
EcccX
=x`X
[t6k
/hoa@
]LY:
2 [<
-<dP
v9JQx
{Q) w
m-;eo_6
e(H$
JX'$N
6>3i
?zfQo^
N) |
^q 4E
C&tn
fH3$
HnHQ
:q"F3
Oc*?=
*t+S
I\<I?
ao_>
UHw~
|DA:
f&sF
x$k1
I2%O
U "k
Y'`|
5-*g
BSJB
;= pC
[hbv#[
! z
"b$
$Efq
$J{R}
r418U
M-dg
0\ ?1
cA =
rc!e4
V=$]NP
v3VE
l0h>aa
*r>R"
> +^/
Q1SsX
5)oY
2H[8
!K"
d9an9
9N5WL
hR:T
/,;Ej
7p%s{
Z&-q
Q7nU
5e e
j/=!
N4%(
4oY a=
JQ0U`g
g]Z6
r^l
)ZQ0!
~ _C.
y:Muq
IntPtr
0~ s
- LhJ
n(Kj
W}@V
9(+
_%ME
<"kO
A|k.
-TpZT
S.Kt,
ORcqX8
MUKe
`A/4
)(a6
{pE-
\(LvvW:?
Fc^
<L?A
[M~P(b
kX>0
[",`
Qn5$
Mwcu
DXeG
: r[
,yz/
ASqJ
,ip
$!6rU
{f{3J
`p'W
"q ;|
3Y*YS+
$'mz
Wi| F
e*H1
{@R)("
RUl:
HM8z
2j-d
Gv|&
&K[lv2
rk_4[lo
1&?m
[Jo$bZ
0ZxL
3iCb
[F"
itv(
.hE/i
x9 ED
N^P"
qdJ9
0+*"X
b! 3u
InitializeArray
g=""
I=Xv
DlE`
cAcv}
|q [
Zz",
q!!o
$`&"-&p
q ,U
Z},S{
|]7UM
QT]
*b~'
j=jr
6x
MoD3
iN187
bk;Mi
~YDj
bzD&L
9E#X
(4%
~9,Bo
9F t
"ASs;
\|= 3
2? :Hl
Nt'0
"|%s
8=wu
k~>5
`mDw&
Am1O
7!]~]
;)[B
DOs GM
Di9D
Z*TQ)
G']w
Fy+3
{{d!
yqHDg
k21-
cB a')7
X0<+
zF![
^y}Jr
\/rZ
L1KA
X?DN
Tnh90
)} H
m} p
^Sl>
-9EY
Uc[Ryh
88bQ
( Bz
h Y.
arC6P
$ngN
Kv"l%
;Mc#&
::>,
t G$
.se_
(JC
/0-y
uV:9
>l&^
^s9u
asu2
?,5Dx]:]
g/=B^a
&S$n
idS.
T pW!
exW1
2o&%
3HH<
GR2mA
rx%k
7hsw
;r$<fS
*Fro
-^xv]
*b/&W
V-o
/=o
qy:U
Wz)'
qAHn
x4Ss
JUy(
?Gl$
s~^[z
T(ao
AWT 9
<H["
`SfLx
JL =
e=zii
,gg_
Boolean
U _ZF}
!}&E`
v%2e
;!UP
27uwdK
Dj(w
K8ZI
FM6E
vy4*
vebc
jK0J
)dx/
[;Za0
(\V
L>+Wjg@
$P{$
NlES
>yK,
em&|
x4?\
Ew[WEqh
n@ '
s&3eX [
GC25
I'G?
3J>wx
w?53
vM}2
@][gk
{HNC
'F(P
CompilationRelaxationsAttribute
N+BZ
K+*@!
kbv(
z%&b
^'S%+
IXey
+0Uj)
Zf l
\6&x
+ATE
6^%u
i0;|
|d8Z
Rl8!
QvHY
I/&#(
nP|8D
o!\t<
B2=Yz
u;Z ;
ZOnU
4pmh
;sc
z+K
?cl?6L4
$@@
nv 9
gWls
E}<i+
B^8T
^yXVw
K6lMy
4+gp
mlEv
PqE`
,plc
^%eNn
/p:Y
'X
r}<M
&Ic;l
{U7q&
fO 4
\eaD
do#. i
I0SuTyL
jkij
6fD.(
"iGj
*:+V=
#Q/h
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo> </assembly>
'd *
JRN/
/q[THY
Q<[?
ez&U
F`/t
qU&j=
L;C@
"0adLg
E6 H
s`uHP
YQ-H
Rxo-
\';
\y`.
S Vx
X`M7
98|s;[H
Kr|E
{a;5
1c{(
,5gOz9
QEDN^*r
$PM[
6t~J
KdTn
&ybq
lWl1
"8v5
=]K{I
wPyS%
0}q
cYX
U0p[
il]C
~EK ,
pz;Y
'q|nB}
Tiv
? TD
:~g%<
Gkf
Z$"8%
6%_qfXD8j
p Qe7
:57(
Q @h[
Jk4Y"Q+k
,bhc
{:8h
\[k+k6
Eb2AsL
L2 Z
Y9eB
-ez'
ST J
@O1Z
_0xF
A""F
Y%ta
%4 >
,k>K4
+sE_b~
k_:o
SKi p
J<lX

ISQN
h8O&p
mk0UK
R0yR
g_!{
<\qy@4
+N.]e
u;_@
7A5
uC36?][
xZ r
3lHWB
>g2B
(_ Q
8FGH
fZU.
'>;W
LL!Y
qe"B]
lI v
8K3
x:u=*\
8fIdKum
jF+1
a.V'a
g<sng
XI %
:5jp
-\\e
StringBuilder
EbovDF
JR wO>
JILR
^|)^ :
nAA+
H5Ve
me\9
}PA+
2W&W^
,23e*g
(*4)W
w Nl5]8
"Qb0
L$;Q
6j?5-f
Jes }!
XZj:
y(F2?
2Lu
8Npt{/l
c{<n
Fm,E
{+}r~
LVMj
'3K3
rYfp
%ze
"8 'b
vRv2
L-YxZT\
6DE(
j<s{#
fZi:
<&|![:
S\rs9
@t[
~ '8
:"Zf
$`YTFy3\
g44TL
:pF
& i9
@rW.GSN
i.ZI
`njO
^eC2y
Thread
H$[GH
C('/
t>OW
FW8P3
5d1o
([_J
q8G\B
KnSI
d`qK
2"k}?
uel%
x5v9
Ig 7
|onZF+
~HW<
-8H&
W~kt
0edPS)
AssemblyFileVersionAttribute
c+oJ
tKkIVYD
>"QJ
Vz[} r9
System.Text
f4^O
?dWs
8 3
k{"2
4/``t,
AI67%3P
_4Rh
82#8<]
,^Z!
zC +
rlUi
~m .
d0 A
Rg{L
X4\8
r&~m
RR0umH
0Br;
EGdW
ZC{"O
!4Sl
3Az #O
m1O3K
d ~K
jC[K
{WWFO
}H. I
nL%1
%Sj+
\%mH
-A b
VJQt]= N
tor[4
}\'
1 ro[[
-8He
y:^U^ '
*T#IU G
}3^s
1<i
]v BIc
2;tDB2
M)/G
0@5)-Y
kTKzx
NE@23=
lvv6
: 3T
J1)~
msP=
g{Ir
/hD%
yNOF
R@3,
;1#~ he
<bkZ
Dq,^N
=ZzT
vd\6:
'V~-
y>exdw
hKpd6
3i.c
9 XT(1 $`K*
U:_QC
RqS#
YO*N
CMN]
ec'p
4rnW
ttQ$n q
4#1ZZg
y[0
F{5k
OM?C|?&
JzNi
7xs`
*;y/
!p68~O
jcx
Hxi J
Wl9uR
cfZME|
5<f9
bhk*Z
w&a*
}^Nb
ek%g
Ig}
T (Q
'H/C
]F)V
^D1B
XHx,,9
ObC,
4EG{A/R
wTQy
&O{q
7`b$
Fvm,
X2/*
un}/kq)<
JHDy
I[E;
0mm<
i:Yx
QG(p
73J ov
7=MQf
gq6U
5}HN
r&T
*SPNM P
'oYz0$
$&0A
XHW>BR
aS=M
BXw.
I7K;
EgJX$Hw-
;x2J
yX (
P3ZAv
[& DC
5>dL
KZ,3
SA{LA
!1)=
E.*<U
hW@x4Z
0sny
_CorExeMain
zM.]
iBuo
G3"En
5 PC
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
kmjjl
sb-i
>#+E5
+k)}
|D}UB
r/g
w7|z
.c(U
D.KE
t /45
4u:B
j/dO
}W$ oVd
Lf5%
-3u7s
P9-/%p$9
]W !
yh=a
R<PBg
)7C,
QMu7
?b^M)
(@X5
+O7p
%EVm
dPu;
RaB{
om` v
0z0@
<mQgf>
xynb
&MZ`:Pn
z9ub
L"qU
.7:s[
S7UB
|24J
r!w
b5+Ky,
7 ~V
c 8Di
ws'{`W
,nYcA
V!"m
] %f8
N4dsU
2^ZRN-&A
~Yr
RV9?V
5?s6x
=LO/
@n+5
2e@\
&:oy
g"<7
2Ma
VN9ln
yrc`
b>/(
j*_M
Ha"-s L
4 7r
ydy\
ZDK+_
{*Nh
Vm]Y
$172407cb-a5cb-449f-9733-cd0495f74134
:gN
1VH+N
$m\+
uw*
F^T0
@e|Py
ib<_
DZ-K
x(v-
1Xr8
p053
7f^H
(P
@&'+
N#ZF[
$|fF
r610`)
,0]45
ZL/Nc
Bv<X
6]2
aG(ov
gp
\{-:
A1K
Load
JwG
r=e(Cg:
Tv L
@}G(E
/0 j}
hy[f
^9fB
4<~0
%_4$l5
S{q x
'*Ny-
Nk|ph# 8
XB9tAs
~qHd,
vai m7
}yj.x
4>2Re
X?BO
EY?s
dcOb
9w}{GQ
?o$1
F[AN
x%_
8%:Z
/BPy
nE3~"
sV]]
X4O8
f&42Ew5W
"~i8
<O8E
7#mb
?*u}
%FxP
'M/B^
:QYD{/
&<P
P`5h
+m[}
o$XK
`0n5$=}
:EEb
Lo&=
$19EL
G 4I
F`T
q@=:
:,0{}
e~=~'
~uA:
!!xk
c(=2
su[&
z7cWz#
L=^9
CyEN
2t+'
r~9B
U'4|Z
B^D[
[b(Z
d uI%
|Ba'
+^0 %y
18C72B62DF4D9D39E9FDE7EC6423BB46A8AD3EB9
p?7
OS_`
vb!z>@
!yH
0*2.
Mt P
Qtd F5
RuntimeHelpers
rxS-
wgVM
WXK +
=! 6
owt
%kb)
6U3|
jRA;
c%y@
_\2b
UKo%
#IOa8
}AAR
-VU
T\M K
yIV*
L] .b
4Qh)
>:pU
Qosr
p\D
iS._\
8RH[
VlGs
DOhzd&h|O
jfs4,z
PGY$"
zu'Y(
AdVIZ h
"K=[A
LY:?
Gci{
p K$
`bh-
f ,)&5
XQ ,
Object
wO6A
FHk#
[pgz
2 %$
i:;3"
#Dh|
q=T]:s
pVH;T\
6\|V
c=e)\
ComVisibleAttribute
fg Q!l
AsVP
! w*
eM
[ so
r<]
j<..
?K*,
j]Br!:
GmY<gm
t~=)5
=)0'
"_"@
|E>c
nxd1
yY-y9
(HN{
P>C u
9 %<
- ;>
gwIE
j[ 2%
-:.~
RZ!Y
%rpB
6tQH
0]-s
ViA=
M@+
e5Uj
a#/u
T{.H
}6Xk
a||g
GetDomain
bNQ|
V4B#
;7x!
I\w)
|7q$UY
eV`h
_ b
rr#E
<bh.
cx|K
R@bR
MethodInfo
ETli
g>RQR.xS
`msf
5ki*0+
`#^
['J^
Ib]C
gRXEj
tbmk
n9h2`mn,3c@
I#tz
w6F\
1.0.0.0
V=f'
ycMH
\ zE
/b54Rb
^]vZ
j?B}
Zm1
_12[
_/Wy
$mwdN@ x
%(CX
q17v
Vs+g
fWLi
X*HK
7cUW
fJW1
,%9
kYTGK
#"eB
km3o
3h5{
NbKm
99tQ
A)5p
G@43
*p|Q
w*y/$
TIb
:"UK
n-A =
M}E{
?hic
=VS4
3\u\
\||+
*.\e
m-Vcr
c *H
:+\P
gJv-
S((9
Jq+X
&Fo`
. 95
sRGB
Q)=h`
j:{V
5bn>
F.s/
C}Z1Ft
$|T(
/h;_fj
Q<+aX
vf:p
Z&{D
4w=;
XLCe
{d0@k
+W}h
] !u
b3fOM
(@Y
t uzo-Sqmy
LcN
?. Y
Y[Mb
G?*[
( S
P d}yJw,
wti!
Ef!&
|}F*@
RF6
c9/h
FYPe
lGW
CL3}OCN
4il$
oB30L
oa*&}
u3gS
K|m"$f \
!*DY
z uzy
p k6
c}iX$
H-$0
z8@
kJH5
o u/
eky^K
^O"\
mBEb
_`0*]4
RFO
*Z]l/
\|7m(
O}+9 j9
tXA}
WL|W!V+
7qjg
`Tn)
XEE.
t2DK
!%$7
:MG |
?jvw"
.ptw
8A
dgE~x0:<
4ruD
Nqo1W
uX`m
$A}C
%HA`
zU<7
ine0
j{Qc
F<F2q!
=# c*
p@pF
t0-
sC3
9h9C
o[es)5
fi+{
)pt)
,[=
eK'Fd
~px!
gI@l|,gL
7|L
8p pe
{ `C
a\ H
%\5"
;1m`
uPf[u
,gDj
Ky09\
d 0i
phHi3
$cBg
Yuf
.'oM
!I7l
")6
Oahn?f}
i 1:%
.P.\
q/~c
8%nd
[.cv
8 hr
N!9
_j{~
+GY_j q
@ T^
)-b-
M<lT&
System.Threading
zq.o_
]dw-
} yw
sCI:
$Kos
aU"^
FfdH>
;a [I
RE@
=WGiBq
cB8L
O&|6
0mE4
V h\U{
98LI
039D
j6+/
#hu5
} o[L
DaH@
(GJ5
vPBx
R:0y
"wmI-o3
&{Et,;7
ZF)o0
oHjN#
[# R
{@F+
8V/c
$ 0a]
4~Gd
?q;
6$lk
;" r8
LY9y
e IU1
|PHq
g8Oy'
'!;u
q/~k
[_TW
PeuPQ
<NcrW
=WqY
. |t
TZwC
Q-r 6
+pgf^
L8%K{
_" >i
6N_`"
K`0)n
1zh/
tRzBS
&`sJ
O }]
DT2]
Yr*N
r^w!K
0Q
.14F
F/Wn
RWy@b
#KI7>9
Fn|
^3Lr
A,v{O
(3P@
m*~6
CVz)m2oU
|`L
r |Nw
VL !n
M\`x@
<9zv
+5%H
O0Z=
Z>L`
3+lB
kj_m
UO%lj
0j?@
8BN.
Ea|=.
IGT8
A0r$1b
1MSMeL
S K2
5 B?
[(x+
HUX8
$@d5w
v+Ag
!"!2
Atp*
>n\*
m>AD
czDv$7Y
Mp =
| Y1
h',.
1FcV
=;S@
)L);
Apv,
lEPZ
eRd(v;
}E}l
{<GI
tAcv
d 7z
:q%]
+576
j&f:
} PH
!jE'
V,8(
:R m>e
laT
A8 M
or0*~K9
?#rQ
?nlL :
zLm$
o9_I
$%Yc
A/ *;6
Q2A$
Zz/R
@iA x
ldk7
get_Major
vn15
W_cr
(w8~^
RvGH
a5{%)sR&
K0U*
R$p^
@7Z[
Nr^%
p0oM
J1;H
+^HEUk1S
JL"_
B3,7
;__V
}T1c
LONos
PWh"
eaYajs
txY/
)mhD
#|w@}KM
G]k*
TY`
v2.0.50727
0+@AI
Yg%\
CKw(
*a.tC
/[fC
on_"
$Haf
=2 M
1lBq
,b-5
7:-Q`
*$m
*NGKL,R
li4K
LTZk
OWt\
.wIi
d&V(M
oNTJ
iR2E
ZcMu
_dOj
-o3##
%<X?s
!U`!
J_MMBG
Xa"j
}:r\
&UW+K
{Uhc
LZq
;pX&
H<zi*
2 +Xck
6;uN
l::wn{Ku
\f]Q
A7Vo
X2dl
~Zmj
; CR3
3qd
+ms Qo
Tx ~L
B1 |
*8_K;9
@E !E
{`Nt
4$M"
;d}ys
8 *b82
^\7!!j
)](j
?.
w$[NE
Dqd
RU>T
+Ctwp
;DN>u
"6Nd
Qm/T
F.)
_`~!
!HLB
YMeC
E/I\
I.i
4d9{WLwA
X08cQ
Oo^"
8c}`
FP |t4!
#mf2g4or
:g?wNXVp
E@6a
9G8E
GetTypeFromHandle
hW>%
XW)L
Mg0/
Z /QF
[WlA'-
pif`
# v`rM
d/5`<
tyz1n
G"Y8
"HV|
CGV'
{<0
^Po.e~
{dhA5b
>"OXN
uk!"
TLXK
:1<
tc`
EFoz
1tug
~j0
ssQO
aR,2v
lDJ+0
G[0!
n+)w
f:8W
[9|YO
my b
-ip]
e{
^Vvs
}b<p
l18q
%JEZ
iD p
.]sZ
i=lT3wZ
:Y=i
!O#:
%7L%s
G}E}
/ .?
Sc/3k
hT=
+CE[
System.Runtime.Serialization
q9:rp
|$Bo" 5]
IO&4u
`n<0L
8T=~
YS=Eo
: U
Lj@]
> G
Lzvl
D;RL
$XDk64
H{Z%
4FlT
W27E
2L_O
nh)S
H1M]
'b11|
zzRL
6Ro&lu
3%it[
sz_F'
frT3
K)+S
1?} 7
@: 7
Nbow
s;J@<M
N,3{
C(I'
B.B>k
).zc
{ .&
d=l=
!C-?
~/wI\
nP$QV\K
u;DP
~`s
hu.@%
k V
3m&k9
?:\+
OgUn]
8_jth]l
j-(SK?
*-1%
[D#*
ig&\Hm6B
|S}h3jW/
! 'mE
y&=?
zeT!
Y;!U
#>Zs4]
B"vBm
=&.3#a
vlu0
8ZRD
System.Runtime.CompilerServices
mjmk
^ rX`
[\xJ
u8X ao
IQR*z
\hEy#
[i
n>J,02
= 8
f?[o
`=qT
%tK;Wcx/D
IEND
01-(:s
VEPl
UW*^
iRP3|
>\o*B
CETg
;f**yE@GC
x Q
J#{
*NoB
ot$~
wVa~:
I/xW
]ObhF
G.*V
<=X
XAN-
JN)@y
>g"&
[nX#
N&,E)5
:DJR
[h1I6$
Hoa2
Z=EA
cFQ^
|UrJ9ZP
OAh?
l"M"
XxJW
esGjX
u_[+i9$
Ph`T
J1N'
&- _
3>qoB
LX%j
M v@
%t1^
WO
^yWen
/A#N
z|5J
uIvg
0c9$
P#TR{
W E Q
yB^h
Y,!<
ig8,
GetHINSTANCE
>Hb~k
g jo<
-<!
^"ci
;T!c
-1k
JY@Q^
/do*
'/?(
e7 .b
~-4@
$NXf
YB.?
-hGU
d>*
_*[t
g3$9
Xnh6O
g0K.iH
9Q<@S1
j j8
Ya m%dD
WJSU
Ax{7
2l;U
qT+uGW
X/~U
j'cy j
SC~KG
N4!qq
"4#L
a-A=
5*0!+p
H(/UA
qu&E
=/@Y9
drI=
4H%N
/uTs
1YY;
dq k0
Ly0^cT}
K:T @
T753
;C*<
K[LO
Bs*
<v>o
IComparable`1
6<+o2L
ts& {
g5N+\
nB|
O,nU,
rX/6g
[:/-
W &9
e 7P
7f%8Y
rC;c
+<B
IgL%O
c<CA
]Eke!
.SG3g
6UF
B*wh
uM[J
`>(k
<Module>
+=^A
F YJoM
`I`a p
=rO:
OAHa
a.bE(
C&51lu
{^t4
2e:d
bn]^<
nl.exe
BP+r
bpsF@&
\z~J
Y/U|
IEX?Y1
QsYLE
%, //
(PG@
wYDO
/M%w
95w^
VmG
nM=c
B;Fv
K@ex r.
Ov`3
Me?J
S\HY
Hrjx&i#%[gV
>\xNR
6(I,
kdr}
dCsN$
o4 T
UxL<
-3_%aSqT#@C_
TLch
pf*j
]G)x
k-XkA
iTKl
0&'!4
)[ U
<d"!b7
l)\sf
j*-q
wI+WJ
tr[') R
O1NC
I.=,
++5j
e0Gnt
gA'g
W*4{
o5G#
:^MI
@ y.l
h8f*
K.AC
b;"a-qD
Bs.$
Qg(
6hM
U3Q{
vV:qxy
mZW;
WWJ#
P3Vl
NZI6
xKrl
p3h}
%EAW")
#GUID
7wh!
`U]b
~]*\
M<9:
Sw4Y
wy/=
}0y
;3q,
'_r.
_its
opmZ
>4}s
1=n<
li Kh
)\ju]e h
8.I,
'fE
aHs6
~%Bvgn
@^bp
%^|Tqw
*"x`_;
?vtZM
?rAi
vvKK
+o)F
B?d$
"@(d
-H1m
R]$l
}(h<^
_`Ow-
Sbs3
&~;iU'
OS_
EyW'
3c532dbe-d6db-10.Resources.resources
N$#d
^4;W
\cws
{K@
3U]aTA_
n Q~tr
Uo*D
\#[4
Aa"
P1TQ
?,moKXa|
)'`6
B;V=
qOYz
[K$#
tW6Z
4nK^
XHy[57
@yK{
:Jp0
e[%_
?M*
(k@J
*20?$
Nc:M
SLSK
XUL8
;%g4Vv`
##r4]
l zP
M01/
~1J<
@L/_
~)E/
qvwq
=ly}
eLAA%
3 cv *tc4
f#'wR
|3,S^"
jMuoeH
,;d
OAs,
nCc|
hS3C
st<'
'6z>
>Qh+
O[i0
Gxzj
L`8B
~3x3
PB`9
aArX
Wj!"
2 +Z
#D(-
Q"3c=
T_AkT
iff
3f>a
c0n12
^NC
"8ua
[M \
Q\
`ED0
]52O
!,%$
_?5i
G\8W
^|0=
Jsyng}
p#Jz
a2B+O=^
_TwS
+?oW,|
{*_)IXH
7a,*R
tQ.f9
xSqaw
r72:
~!RB
GwRH
get_Module
/n{1
v@ "
fuvw
HR't
fi?S
kl]+
' YJ
`9nN
d>;D
y eS
_ckp$
mX= }(%p
*2i3\!
{/QH
H=:k&'
Cotg
XI\%^
S#5
Sx3)
\@?W
l=+D
B9E
_b+E
]_V+
>ro&
mmfF
fQB \H<
y'h,
w?>v
,H*s
x9l
6+l'U+
#;hH
x#{Z!
@kK%
r-=\ru
1QMay8
\/g&
=D^q
o!#24
9)~7
Q'_Yr
3 -Q:y]o)
%i/Z
Us3"{F
1#{:",T
Tf`p
,3mA~'
3hYl
(j|-
qH
x%= h%}P
Ma U0
n-hn
lKMF,I
Hi3$
\7.Q
fo_)R
2Rk-,
32pDA
.Rio
8HaGB
bh=L
FI[U
$zZHb0
19eD
\\y
97c
%z}W
5>Y7
CY2uJe
OV`,
H^%}
)x$< 7
#"'RJx
_r^G
_B|B
KCU
rgA5
N'A9H
S4 D
E7%L
W"8j
q<v@
6SI<
XS 3
\5Qi
O2
].@E
m;:o
IEnumerable
]K}|qr+
9-e'
YLpJM_
pxoK
[V?x`
dJ4L{
'D!q;e$
6FI$
2K N#2
O-Z~j%3
A/&hv
_(:w
qq5
@%E%
3>Ss
96q}
${"U
`g7
8Pe
{@,75
[a?'7`
' N%
s$e!
](/L'D/
WYW$
[9[X/
v6gi
slCm
w,W!
xW2-
Kmal
wI7$
z\oUv
U5U/
lTI(
b@=g
}U{\
y+r8
MxZB
Gf4B_
@9tO
oA lTl
3kJ
N)]z
System.Drawing.Bitmap
~- B
6!9EZ
O}GB
vy t
h^<T
-?>
N8,NB'
'\:[%
GgZ
HWVfv
r dPl
#eT$
3M=;\
e>v=
twe)<"
wS!4
1'*\
t'7+
Cb]KyU
#\+Y
4+RjHk
a@m
&<L&TP9
&cz~
10Lg
|xr<$=8
N~*
cc| X
48`h
%3\
_dc;x
To[7
*D[yOa]
f;^$X
3"/
f*F|Y
l/;
`Xur
*A;4
8=oP
&azk
m$!r:m
fD*
)t(!
U~EhE
cs&L
a(b~
X{*Y
*!)hQX
>*)w
wo:T
?@|O
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven04b_64 Seven04b_64 VirtualBox 2018-05-29 15:32:21 2018-05-29 15:35:13 172

2 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven04b_64 Seven04b_64 VirtualBox 2018-05-29 15:32:21 2018-05-29 15:35:13 172

0 Summary items with data

Files

Nothing to display

Read Files

Nothing to display

Write Files

Nothing to display

Delete Files

Nothing to display

Keys

Nothing to display

Read Keys

Nothing to display

Write Keys

Nothing to display

Delete Keys

Nothing to display

Mutexes

Resolved APIs

Nothing to display

Execute Commands

Nothing to display

Started Services

Nothing to display

Created Services

Nothing to display

#infosec #automation

TheSystem Itself @ 2018-05-29 15:36:20