MalScore
100/100
MalFamily
Malicious

do.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 10/68 Related 2805
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 487.50 KB (499200 bytes)
Compile time: 2017-11-27 11:20:53
MD5: 996f31a8014d0d546acf98a4fa9d89c7
SHA1: 6756809ce348d2c925024306d5654ab462d256a5
SHA256: 00495de645454f66111fe222ca0d3b26e61145e70dd560278f6d59db01551187
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2017-11-27 13:09:04
Last submission: 2017-11-27 13:09:04
Filename detected: - do.exe (1)
URL file hosting
hXXp://temizlikhizmetleri.net/hill/do.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2017-11-27 11:37:10 [10/68] VirusTotal
PE Sections 3 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0x6be24 442368 869cb15c5f61d9923246e1ad491fe454 f3ad10708ac1627460bef039c93b0c4c2173fc09
.rsrc 0x6e000 0xd9bc 55808 a5238b99d961b37c122178a249aaff13 79e67dcbcb275f0a8cdc9ab12823b3974b9c89d2
.reloc 0x7c000 0xc 512 32670310ab6ee74ea224eea68decb15a 35f2fc9f0bdc71d93e522fa4cc0d4ec5b20fdd4c
PE Resources
Name Offset Size Language Sublanguage Data
RT_ICON 0x72630 36439 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_GROUP_ICON 0x7b488 76 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_VERSION 0x7b4d4 764 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_MANIFEST 0x7b7d0 490 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: Copyright \xa92010-2017
Assembly Version: 0.0.0.0
InternalName: do.exe
FileVersion: 1.0.0.0
CompanyName: microsoft
Comments: microsoft
ProductName: microsoft
ProductVersion: 1.0.0.0
FileDescription: Msword
Translation: 0x0000 0x04b0
OriginalFilename: do.exe
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: Library
mscoree.dll
IP Found
No IP detected
URL(s)
No URL found
1,:
Comments
b4ad9351-2521-2438
b4ad9351-2521-2439
b4ad9351-2521-2434
b4ad9351-2521-2435
b4ad9351-2521-2436
b4ad9351-2521-2437
b4ad9351-2521-2430
b4ad9351-2521-2431
b4ad9351-2521-2432
b4ad9351-2521-2433
5,;
InternalName
5,>
7Q8
2010-2017
Translation
bmV3YXNzbSo=
;!<
1+4
LegalCopyright
{71461f04-2faa-4bb9-a0dd-28a79101b599}
_Encrypted$
do.exe
51M
VarFileInfo
51F
51X
PublicKeyToken=
b4ad9351-2521-2423
b4ad9351-2521-2422
b4ad9351-2521-2421
b4ad9351-2521-2420
b4ad9351-2521-2427
b4ad9351-2521-2426
b4ad9351-2521-2425
b4ad9351-2521-2424
b4ad9351-2521-2429
b4ad9351-2521-2428
1.0.0.0
=!>
Copyright
"!#!$!%
59b
5!"
59o
ProductName
/50u1
b4ad9351-2521-2445
b4ad9351-2521-2444
b4ad9351-2521-2441
b4ad9351-2521-2440
b4ad9351-2521-2443
b4ad9351-2521-2442
dynamic method does not support fault clause
ecgbrme
publickeytoken=
VS_VERSION_INFO
Assembly Version
(!)
57_
CompanyName
Msword
5/?
5&,
b4ad9351-2521-2418
b4ad9351-2521-2419
+au
b4ad9351-2521-2412
b4ad9351-2521-2413
b4ad9351-2521-2410
b4ad9351-2521-2411
b4ad9351-2521-2416
b4ad9351-2521-2417
b4ad9351-2521-2414
b4ad9351-2521-2415
*m+5,
! !!
unexpected OperandType
StringFileInfo
-!.
! #"%$'&*),+-+.+/+0+1+2+324+546+768+:9;9<9=9>9?9@9
FileVersion
1%(
000004b0
ProductVersion
5=s
FileDescription
0.0.0.0
OriginalFilename
5=z
d76056ec-fd84-49
=,:
microsoft
b4ad9351-2521-248
b4ad9351-2521-249
5I6
b4ad9351-2521-240
b4ad9351-2521-241
b4ad9351-2521-242
b4ad9351-2521-243
b4ad9351-2521-244
b4ad9351-2521-245
b4ad9351-2521-246
b4ad9351-2521-247
6~{
x@mv
;It<qM
a+L
v6pq^~
PNG
8P?n
- T m
`> w
b.i)
<P'%
S*q_Q
7LY?L
B#OH:
<%Q*
ResolveEventHandler
KTSC|
bcWbt
;dNxT+
j 4Y
U-Z
set_Capacity
,b)\H
<mpFf
3j\F
#Z +
Z oC
Rr@L
}r8sw
L$O[
i6* d'
E.2Zz
;Z !
Int32
=9Dn
PeL
[ula87
a ~y
-Ra8
_'g2
fqp+q
-P,I<O
yS]KA
/d^Z
D<4U
/_ep`
vF;O
X['N
k<5T
pC.X
System.Reflection.Emit
H3AZ
_Xpf
EzY .
e6|g
4la}
mhGq
in)(
OnO d
]a8q
LQ6)
lYXp
poKR
[ITn
{z}
v4^i
ResolveTypeHandle
~w?w#sV
_. U|c@aD
%&i?6
sR4Uo
`zC=
S{{S
Format
v hc4
G6yX
Enumerable
CsXo
!R-n
%&i?l
!5Z)
x| 3
get_InputBlockSize
ky%&+
Tq6Y
^bsg
iPUK
TE[c
Ux*9+I-Hy
@[jN
;8Gm
[Y 8
KEuS
rmX
@~q
/CU)
c<Om
U)%"AB
0O a8
?FlY"
5< /O
_i>tOH
W+&i%
J:
mx
sefkZ
e_pt+<
`kcH
%5W)s
MkQJk
r8L:h
3wG:
&Y*t3!
^E
uiu.
,7N4
gKE{tC
}M]g
vg3L
hk\
%I+2#
?K]w
0Jz6i
oD)A
'-E;
"23Z{
i&[@
hmeh
Char
S)RY
<~|k
~a84
q[k:b
GetValue
=Y 8m
jsR<
P=Ib
b@7o^
?~a8
((
9!e3
q.d5
l 3}n
~a8s
TtVcS
SYYL
ca88
~a8b
5'he
[ Y2%
%0eP
[ Y2(
J|-J
GetParameters
)_cB
[vKx
GgJ^
#pl
H)24
%I,RRm d
.text
mw|"
Y$ox
d8%&
Component
kDJ
</^`
CryptoStream
{RTO
7Z +}`
xu6
FlushFinalBlock
f_QU
rI|2
a\B%
DL@KC
<0F"
`c+f
_U/d
?QL@
0NSG
P.I*eI
D}a+
=a8W
l )aa
GetCallingAssembly
;}Q
7s-pUs
XOVT
8Niw,
sK$Kb
,koE
+C G6
@J{
'6U0Z
Nzxtz
h+4!
CreateDecryptor
^aY9
qa%
_
,D
tM%&
_"l|KUT
r>yJ4
B>L1O
}gx.
EH<
kH A
?Ji`
y9B\G
P`HyZp)U
5wQ>0w
i}a8|
I@=
~ZbAM
le/~
;lI<
o0Z
sJKxj
Y$Sb
%Z F
L`W
0'OR:(4
+=nfh
aa8!
f+_
Jm%\
muct
`U6
]L%X
a:a8
$@nv
oBEs
xIu^
W^&Km
1ON#Fa
>^<@
%@G!M
3g8{
:(/
(m8@ }t$Ma%
=WvO
eLU
^<)@
W2u
>J*B
\T}o(G)1
~DQ5
@?OtQ
Km8#
g kl
{Q$g|
i:b1
eA)t
F.2
System.Reflection
pYa83
#uDFH&5
dUKY"
q?g`
S8S=w
+%&
dSt?
\fH|
1\GY
&X }
"I %
S[x7
&_u9
rIx]@)
}W?(
hmYx
)J[l__
IHDR
*3%P
yB`C
~?YQ
%&,$
%,\8s
*&OMMa
HJ>d
/W9^
(s9if
_<)9|
System
EventArgs
Application
avI7h
upu
RUJL
s?2j
~<"e
fb T{
xag
a)A&
!YXj
/~*S
qFAwT
p:QS
pWY|
MethodBase
R
\-3i
mKme
p{B&
d+99
Y x
` Hi
e%$~
Luf*c
6`u|
"Z`v<
n7[k
z~J/*
nsjh
]{a[
%&%
fp0Q
V_4V
UNb']
- !1
fJAs
NUK=C
KX5gKV
p#av9
get_Position
=Z]'
;1)B
v<D
!PjD!
`:.i)
'nxv1
t>
\LDZ
%&io/
GO Cl
'IC[
( 0(x|
=z7'
|HU0
Df:0 b
]j8t
Xlf -Q
x$Q4
get_FieldHandle
*=C0"
4{)
ADLMb
+WkG
'Ur
set_BackColor
`mN5k
7Hi
!;0}
O%&+
ContainsKey
`= FK>
|O:__
aa%
Jo&<
[R}.
9W;X}~Oyw$
4_}f
JI"}
Func`2
?3<_
OW8}f
C a8
ZCc/
F_L1%
%xqv-(\
c]Jp
_.60
f* M`
=g?7w
3PTvZ l
E40
W>L?
%&
4g=8C
9#!{8)
6(B
J 9)
%&
2r~";C-
"T U
j9hH
k*` =
WI~G
7*7?m-
jZ
R{R
/+hP
Tu;H
, S
%& ~
w [m
^FfT
9|`f
L| F
,$32
Ed#w
ffE6
}IP`
qsD
8XNy
8Pn<
#.zf
ut[M>
2~7-
2LKw+4
:3%&8A
set_Name
%& (
1q![
% (*
\j:M
Ttt_ds
TpH5a
m/%+
N<cg
~`8g
;Idc
lnn2
<xIJ
Q.:I
j.$-
09@'a"CL
#=6
R8.Pb
_;W]
26gf
ToLower
$w;
E+"=
CuAOb
`H{`$
tZ M
nb
?#w`
y80HiQ
62Ew
tZ }
vJMvO
!v ^
szqD
%&(
KwbJ%
6TV8
;>q8
P`BV)
>,z}
3Hb
ToInt32
h?W=
%&(Y
iP_[
%&(S
ICustomAttributeProvider
"K Tt
%&(N
L3fz
`Wx
%&({
B .FA
Q<rl
%.a8c
$au3
oZ l la+
newassm
w,D
+G i2i\ X
UoXH0
-kX7
S;cA
2{N4
5Ida8
2a8T
C'LOK
\]wx[
|r^x1
<Za8
j tG
?{/&W\
j^!x8E
zM&i
4zW2P
i75.
==vZ
wm+aB
t6xtA
+gPc\E
get_CurrentDomain
1rDM
OE+sZ
gIDATXG
H< v
ToBase64String
73
fCxuQ2 d<
. b >
Z ;8
# 6]` a%
q}g1
<w/=R
1J!
xQdX'm
:|OOm
Ay:s
ST$
7`.p
k !k
Invoke
= 7<
s^k^D
/}? (
jh3:^ !
q I(~
^Ad
(M\Z
kJPs
O4<
afV"Q
F_ Z
nN{W
qdSXS
Array
Or
Z cu\pa8?
dqYi
GetPublicKey
SHCf
%+D~a
x|=\
XcHS
;*+=sy
iUB{
r,b
^ %+
BY$xH
iu Yx
h[6b
newassm.exe
F+!X
oh' 6
"JJ?
aZ 3S
$IIS
s+vK+i
pqhy_
J*B0U
DynamicMethod
Q+ :
HxHt
V"Z
8a8?
d{$y
F9'i
i5l
0==M
/[!t=4q
x$.s
FylA^ "
Z DA
YUwy
/YYYnn'
>p <
H.-m
w8t+
%&X
nN31
;1YF
; e5
Directory
W\3
^p=-
9 ,J
p8]M
4h#Q
!*p j|
pZ Q
4.!J _-
$|~)w
Zjz
woYE
-7d_9
#xp5
[VV{(
9,CO
F&t2
lw
4g3~%t
ZZ L
!n{"x
R\*kb
ypd-\s
>`T>Iz9
get_ActiveCaptionText
Size
8!a+
:_OZ Ph:ea8
-Gb%
]A{`
Hca"
~l >
%&&
L}f)
A(,JfQxV
LS M}
9_o]
IContainer
r%.Q#n2
03']PtR|
a;a+
z36>
=t71~
a0S_
%& (.
}Z hmD
ISerializable
8s
)Z ]s
z;F#
anF$
lIDATXG
4emK
rzm^
5Za88
M(v9
2#|ok^
zB\4
au}@
m7a+
U@_(
*D()
KPm<
.KS{+
v_A
ql9k
set_MaximizeBox
AgVe
9$+w
a#rx
GetExecutingAssembly
0`a8
kR%r
u` U
qVI(
7_ 8f
ContainerControl
FW8qin
_d {
0mZ
t=20i
Veky
'iuO
i_Cf
4Z`y<
2RL=
x>:ol}>
bAf@
!WF
T(*L
aG9r/P
Lr_+-^
z?Z
2H9O
P q-Y:
|KL#
\+~4
K:F=
J +3
tww
*Ma+
tqv^
Iz#d1}lWg
>2|W:
Jg/U
Empty
^A.7NT
,?bYo QN
.!1k
P/5}
e
V+rso
CYc`~y
u[iZ
X
+ rw
G = {
Close
W
8 Ym
YPCKH1q
fE'X
e}>a8
<~>?
7qMHI
_bX
"UFNz
Read
i:CjP
%&}_
_KF8
[ea8Y
"2Qt
fWkp3
oTC_
]l\ $
3Z #e@
%&([
U UA
#-i5
G0"
H_ta+
%&(o
%&(m
6rkh
{ t
qZ q
!]d[
-U5K
l`FI2J
g/({
oLSe
Y0#&
Y 1
%+d+
tu4a8
t$? |
J7twi
qZ V
[ 8$
mscorlib
ohH
V'm/G
xZ f
e;Za8
bR$J
*),EQOa
Y n
?iF:
Y w
WVJWZ
BI%|6
_o~N
@^hg
:<5i<n
n5:/
}Z :
b1*E
Kq%+
=f*`0J7T
RuntimeTypeHandle
Nk]g
|mo2=`G
SetLocalSignature
362cbbba-d7bf-35.Resources.resources
HPMq
Usa8X
.^z%k~
Xdy&
set_ControlBox
`o'Yhn5
Ii)
}Z B
8j|]
m me
1V,va
]k5F
]Rr Ck
set_ShowInTaskbar
get_LocalVariables
4%"pXZ
NzXi)
M Mm
$@a8c
S}:1}W#
kT0&
^$SN2
zOa;
FmZ E
f FK
<<0q
:
h\gg@
wS_k
@vFIp
~9Z
jlnn
vT Z
os& ^?
J~R q
fI9
=W4g*
qH8@
..]SE
BadImageFormatException
ufff
9uB9`S
*qK,
s
/U<8
-e#a
!This program cannot be run in DOS mode. $
.!di
;KZ
v h
wW-5
Dispose
SmBf? P
Zv+9C/
HU
ep%a<
K|S-
tOIc8A
:4rtw
7(I}
%&
Tf6=
set_ClientSize
O vy
;E?{
s5ui<
T55|xT#q1
en{3O] $
z/*W
}b+SZ )
-q*P
\;U=
.]bkk
vd\TJ
Locw`
lR.B
x+8<
2 >;
e;YKl.%0n~inS18
~Za8$
W%x$,j
W gKwj-
l\6(m
get_MainModule
yVWWY[[c~~
MmyrB G
@sbA
lo&x6`g'
G0SJ
Z3a}
op_Inequality
!#-7?4
Z .C
QJ_^@
get_ModuleHandle
76zd:'
Sg-
Q)P+
XbJU(
;{.k
YZ =
%&,#
n}6>
%&,'
%a8f
.}>
'VMJ
%&,
System.Linq
3oW-
`K\f
YZ y
=?Z a4
;aaeH
'<~z
j3=]
ZL,a
Qn{| \
;x|_d
z/J7d
QxC%%
A6?H
=vpl
:C;M
Z H98
BlockCopy
:?7K
0w +
>Ba8d
tFb%+
`13R
tM 3
<Tori
^C`v
,~pg
qZ@J
![ol
dYd
pb:D
KVQym
set_Key
d[B%
>7zH
s B[
?t?A
"GsC]f
z^La8I
8 39
m044
|sRW
Z[U0
wMNs
=.-a+
MethodInfo
1eV$s
L`bs }z
<$4
s t
MemoryStream
LKx:
y Vl
WhH[j
'WZ
+++(
}SpU^
J1.M
_m9V
Pj9c|j4
Z A
z.6&
es|`>C
%Ic:
x9R
jvq*
o"Z
z'F
"~A0nN
^E
xfkL
_43
e|4
O ?C
Lk;a
HV5<`(
c}Ih
POcw
f;W]
3#(U
%&iXj
,+Ba
nw8yr
!GP|
5,*M
' K?Y
8D$'
fun#
C&bQ
pa_RO
x:<q
18?%(
Ma+
,~UC
%&r[
Concat
%&r_
iNR*
&h=?[l
MJ</
X9kp
=1N
haq_
v7e}
Kt>?
[6xe

bc*1+
iC];
?4J0@4J1@4J8@4J9@4J:@4J;@4J<@4J=@4J>@4J?@4Jr@4Js@4Jx@4Jy@4Jz@4J{@4J|@4J}@4J~@4J
pA`}-
rzTS
{m;e
(2x*dm
System.Text
JX#hv{l
>)Z3
o>G1tD
ED@0\
0kY]
1gwc
sZ B
._b _@
+a8{
kl5-~JL
*Z n
B2':
=5'v
`VvgA$
)8d;T}
DjMg
9/{jH
S"kX
hA]I
vw`Z
l;j?Y
~xTH
@. 6M
Z,V3hS-?
VO!}K
"Z ms
`c=iKs
skuFG
C1dRt
1X\&
ZL ~
V )5
HaZ>e
3-)
]E/O$Q
-5$&
Dv?t
lo|w
2-(E4
1:B:&
Zk'YZ ~
bSa8[
o}<{f
r:`-
TryGetValue
_CorExeMain
7:q-
TB&b
<((E
oa86
ki)?
a*^E
1\lj*_W
Qy)UXF
8CG
FileLoadException
n`kOc
ToArray
n;QV
X0hS
4s{|
sLMM
wkR
uTmJ
mA[t
K!s%
jKv8
2Ay{
m*%w
Z EX
get_FullName
S$!&
)l,}
i#%6}
Ql x
FvrS
y_BI
<_T'
LwwwO
Z e/
*s>g
_b` {
f7D[MC
!Wmf
iY__eaa
VRb
p b>#gk
UCy)
YA' *
DirectoryInfo
& tUi
*gHlLw
(R*{
=kFwl
#a\d:'
eDY!
'N,333M
MI8,
(0}~
zv]x\
^E
0Xv+
jWm3{M2
eD,.
Z{Z |
^V"c
>p {]
Q K$W
=f)TL
g/lh
A\ V<
J"C9
/di)
XV\P^
9Ja%
@ZG4
Gc !
1Df@D
sss4
byd-
Z =s
0J<Ab
s>Z
hIDATXG
XZ 5
! a%
p,:.t
X@B7n
>6Dkm
Z =.
@rb
CSE'M
dZ !
Stream
_u!)H
MOU+
sRGB
VU 5
uF^l
1-,&_}
}R z{
{0/
BDRM
u\423
BmaX
ZsO
/Q*&[
>yZ *t
R0i'
4Wc_ v
5; ]
.\i]=^
MWn54)
]KJ9
Fk45
Dw93
0VX`
?S#d =@
;VMh
?/.2=
FormatException
RZ >S
z$,[RK
i$_&
hR\fk
r@tT\
!aX`
9g5~1G
b(T
&Z S
?^*Z ,
n^wCI
Tae&
PZa8R
,1=^
V7x Er
%-N]
*:3Rh$zU
GU$M'E
Z ^k
[`TH
(aOZuS
ZZ 'l
! Nb
I8SU
$;J(
">J%n@
jM{h
gPw;
WZ
Jw{-
set_IV
TW_.
t*ISA
e_T>(
ZY0
?i_7Yt
\N82
e/a8
=Wcn
[es,
aQ!G
e@N
z E
=zCV7
#z i
ZY0(
?b\1
2,D
c3O9
:qH1
Qa8=
PR8E
P`}}
q\un
X[%&8;
m9a%
U|QpG
BBqZ 2
`y^o
$NG?
n 09
YF>XZ
tEyj
yxFz)
@ u bEx
vL@C^
)|".:
|a+
zI?@
iU 8O
kP|Gk(
55ra8
WR -
@aN/[(
& =aL
9L%$
%&}f
,Z jQ
[<%&
qfffh4
O t
P`%\
%&}F
pctq
;;;\
a Hy
HC_(0=g
%&}I
mvct
kkj?
tR]i
#fW'
%&}&
@R&
dY
,#s0
cWuC
U7N<8P
-$}J
aPU?n
Z[nL
:RJ>
hkPV $
%eB0&
Wuf}
}@yhQ
5!V[
mv^
(.o.
Z {#
"Io[
o="eC
%&
M^DH
xt uAcla%
u3R@
%& y
%)MOOc
Fn6R
1~ -
I9}w
kx W
%& \
?(iZj
z Z -
7B7t
%& K
V< U
ra8X
GetSignature
GetLocalVarSigHelper
NG3L%
Z i{!
Ry+B
o3A
LZ(+
{>D$
{=N,/
P(P(
g?4
f/`W
:EG@x
2.pA
KqNo
}-if
Itx4a
IDisposable
%GAH
8|Hu
y76[
c[A:
W8d |
(/`!P
^E
yH@;
/|.2
(bIZ
!VH
C NN
Zz<cB2W
%&X
6sE;
WOEe
Aa8W
`!\id
#Z Q
X\8
F|y[
K_$R
/f#Yb
?Z;J
D1(t
CpQ@$|
=Rj"6
G142
mRn(b
s Y_i
M\Ii
E(5g*)]
'fJ\
rkV6
%fggi
tAa%
*YI%+
+'h~w
Vb c
/)q7
XYhz
0h:~)
G mW
r\29
i,w FH
#GUID
>WrUrUr
588h
k9aog^ S
D;]7
pY
*}PJd
k(U-
i&O)
L$xD
OK_nbtc|R
+Ag9C3'<
Z37P\.
4 Dy
SCCE+
=9U*
5"Z Z
( Kj$i
QRe
>Hn3
*`mE
Lj"7
1H:KLB
LhU9
pVQr k
bS9
k4q6
1vh(
ZX
#F$v
mcT!
V,Z
nny_>J
2iB`
nMh~->
IlJWk
zkv
#&4)
1a8g
YI^k
7N
H#X0
IDATXGc``
'V,p
1o6~
Ni,k
2gUW
Q1g M
<gM4
uLIY
':2H
QzUv
@ KNI
) hih
v!#?,
L70 ,
+xh`
Z ~
L A<L+
=g]A
:%u~
%j6#
z!.1
get_Size
3%Bq
nU[gMl
xa8
-666y
1CWKbu
&Tz@lm(
#48G
[y!;M
TC`
ifNf
\LA6*+
a:R#
(giQO
-~m*
Hs1P&wyb
o$N}h
84.<
^a;l
F'Vh'8`
ff%&
-B'jQ_
FOS<
set_Cursor
O=We
#Mlq52t)
N4D ~
7Kvr
D_rb
Ra8y
$ws5
d<Z
BZ67W
KD(?
B-q.O
&I4|
;Oh<
n /9
ac
_cq~
%Gfz
&6mTF
fE8Dh_
1I'
."0(
TE%;
Uc@v
O78v
TApa%J;
@ YJ
7a81
0 M|
+={Y
%&s?
%&s:
?r|?
HIV`
HtkZ
EUuZ,Xu A
FF=Gb R
@8a82
6t.a
7-u1
Substring
2\Zy
DI 9n
a -
a )
CE@l
ezZ1U
%&&
$%JR<O
?\bv9
@<E]
F"%6
12S"
PWIO
5{/I
EL,b
P S`
1)RI
[[F}0yG
\a&EJ#
hjNJ
L$29
4Xx(
5(A_
L)#|
S V/
\yU:c-
J8nb
DZ' <a3
hE-o
35g:[
<>)L
$ Zk7
~ R7
MJ#\
?^q 4
ECC
Y%!B
! y'(
Y|?`kk
=Y 8M
Zegg
Wy y
Fw#!-9F
$8o(W
^]-2/
g6_c
~2G2.
eFB>
H]b+
XM
.sIR
;EZ
e6wH
s]v&a
$kuo
Z 1x
fEKk5
\mO2b:
K+v%
r)p8
+%&
(ZA Y
k$l
9TZ [
&7LMwN
\'JG
85&l
AHLJb
el#y
0{,sP
p<Vy
AppDomain
I5V_
\q,]
Z[$D
' qa
f =g
kH!B
-CS7
r1c)
[! y
=t"z
/>a8p
~}E:
&^E&
IQ :C
7Wg!
M3?@f
aYun
q^'N-
< {8+
4Y@f
Control
SignatureHelper
5L=_8
;.#`9
am I
kN~9
Type
pSA=
`4JB
-CK eG
vL0]`kk
&O_b
95=m:
Z BX
b%&8g
a0;@
f<F6
(9K@
q5c?
8rwd
DqOa
_?Z
Sz3y
3__l}
NyD
P6_"x
E]0: :
D/q
e!c!
^KU6
aI57O
r aH7
[I,8
^Kwg\
b~Oq\t
< 9
._aNaHa
ResolveType
0hn@
&]#Z m
|c/k
|T}Ip
Hk3I
x@%+
'" L4
6S]z
a$J@
n]?
GetString
us]$
=/n?O
girC`dvx
l54
~%3a%
K/Lf=c
%s_K
%&9R
W[-Z
AU}%I
Monitor
w +<jA
\qGv
H?;a
cr!fw
CreateDirectory
0RBC3
qR
* h9x2
a{%+
CvM(B
MgW
zY S^c
]-AwUz
TG~;
)36m
U_Fc
tv@
YO [
D X
y8b=\o
Naa8
}*a
1E@Za
%&i
+++\
,*gp
gOK>:H
SetCode
7)+*
} 0
Xyry
W9`w
s/ `
GV > 3
v]O8
nj0.3
`A5+
kPo>
W@t
<#G/L
OBXN*
[=,
"$H2m
z]>f>
^+\/
{sD
pTV8l
}N'l
]t]8f
!?'l"Rz
b:Um[
sZPm"
[!dxu
O2&Z
_R76L
Wjn
$a1i
Qb3r
N;]7
G\=
49=q1j
A_fP
S)e3
%Y 8P
eIDATXG
LWa8
PDyK
{+f]
#QJ>*
[H8W
+ Oa+
'a%
get_ParameterType
(
< bc9{
? FQ
X% }
LHsK
H>c\
NoGI[
.UR];uo
zvK6
kernel32
)zcNA
set_AutoScaleDimensions
/ 6>
J6xX
&M';{
<Q"?
@wV@
u0N7C_
gOe>
7$EZ
PEHU7
i]Wb
(,_a
J+8b
h#$
jsO`
)Z R
{gTn
9 6X
9GY>
get_Now

hc@
r`x:f
,a8F
)3u:x
r}`r>r
c@czF
7 j2$=
TP*.
Z 7W
#%&+
$yU6n
0~&t
,a8w
O&k[J0
}}i[
q? {P
`25@
l<K}
XW';l
o%LD
K6Th
z:03
KsXm
} G?
rxvr
c0HH
6Ljm
z`fj
=9>,b
?a8R
~-~Ht
%2pzs
UG*!%T
?a8c
`jV2]
xBP)
)7/M
+[ 8
,;J&
n8|I
%& +(
I_Z
Vh.n
zF=Y
T}a8L
#Strings
Y/ F
sW_X:
c3qU
?N~F
3hqbq
sLst3
7/L
/d9xc
A|7:
=o 7
)5fI
' u(
z'Hr
*(3y"
eAZa+
!Gg^WZ
w;6(
2^X!I
add_AssemblyResolve
y,_b
^9a%
> M^}
:g^>V
y,[&B>
=%+
=iGmZ
*#%
:T=?
l]g[
xaI.
o@H)
a7bz
F"Wn
w<
Ov1m
)C|Udg'
6Nr
d b+t<
=%v
nl^_
' oR
2L4@
#7je
";#4<|%
t s"
hR?>
g(a%
%z0sBH
cRk{cRg?
6D ]-uj
z0%S
/.zzj=
L\4m
zo<6E
+&
M>V
hSystem.Drawing.Bitmap, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
liz2W
$5J'
hg[p
Z XJZ
lO?s
Z Pd
BitConverter
?JyU
w<TH
5^av
get_Second
QyI"
\.36
Form
. _
2%C`&
KcU8,
&ixQ
-%&+
b(T
Ooj4
`3~a29
get_MethodHandle
BFa8c
@( e
'6_|
.fD<
#>2!
+vsf
fBD,v
/s6e
~E^c
`X{2
KC+0
Delegate
`oOKU
2<p
?%&8v
wTa8
P3{*
odg*
Z 36X
a8q
8s O
LocalVariableInfo
Tmm|
yD#vX
:=d
WsZX
h~.0
Jen[
a#i
BebIIS
yx+]L
5Oz
YZZb}}
W<_=
f},0q
VfU^
4+P:<?
$Ga8{
]DKe
rU( 8
L$a%
JbzQ
uH,{
M\Pm
ResumeLayout
+g
+hoi
qB!,
%& p
X #
s&+.)
5`c({k
[QvJ
rBa8%
5,p8>S
X 2
%&*AL
${SD
`nM k
xkda8
<d[
#UP2
h*P(&X
RvY x
@ (}y@
@Jg[
zDUjl>
Ew7[
8j(6i
Z z:a
Pravj
~9T<9
%|bk
Ea%
]HlP
%& W
ToString
[fD
d|'b_
Parse
Cursors
Z%cZa8
jGa8%
XDiw
0+Igy#TE
u`TwJV
k\li
* YPgg :
StZ >Z
k38>
ZMjS
J^G|4
0"'cD
dRH@
m1H
<'%Wk
V25G
I$77
System.Security.Cryptography
O,3W/
Tf"0X
[ Y2
JW:a
[b< NOq
dcG
3qAt
-,H;
@ C R
k$4
~r&^
3SSS8
vtJwK
e/Lh
s:N8
r/~c
kiwcOE\
BLZ
@G{g
mlh15
PKRCK
.ctor
'+Ag
0{1n
P;]JC
IcZ%&8
h9rE
|8%&
T-r<
^l<^
*lKv
hBF5
Ua8A
}q{Y
u ?j
Module
ZxXCz
0dnn
@{c4
@.reloc
2O~v-j
/J9P
YD8r3
0sRl
LZ W
&#e%
pYw[q
n>-i>Z
5Qi
&Al6
Y!BK
1:z
>T0~f
V7HU
^M%4]
c:9
G!^Sv )
;<)C
C@G~
R"{8<
Wu{s$
o\Y38
AddArgument
NumberStyles
[KPi9|l
4a8a
|D4a
$PyzRB
4a8e
|>,\
6~Z1L
L \.
QLa:
gZ (
D] V3U
?pa8A
Y_is
lGjd
g pZj
wpZ
6 S
zu8
E!"4bG
,I3e
m fZ
NAe?L
/7|F
X7>z
5n;A
5Z "
fdwAZ
FileStream
<JbF
Wa8/
B]1i
.gMamQAx
$URt
%G\5
}HpN^
k 0@O
=J%o%
+$ oi
2B\55X
&%l4)
y9Ok
F8\d
*)e/
gMo18
tN%Ks
aFwm
*om:
W%8)
&LI%X
yad2=
/: H
(w34w
z~2x
]> *
}n@
$EEp
4h
H]<
4s
ERsU
5_*0%
>(Vo
SW"r
. DH
,iYS}
gx<)
LTd>c#
} {
>-Z
^!M5
Ybnr%+
hnF8T
Z s
&p1r
Q LA
]VHe&
38Z_
EN/
MUIDs
g 9`
8U}D7j
fz#<(
$S/<
yIf8"
WrZ
=l>_1
d(Mb
!8 ,I
41F"
:3 x
/ypM3
D'~S7
:a8z
@3T(
..?c+66o
-&6sp
;@jy
n6N2
!u?}9
i( P'U
:a8\
\TQ-8+
[i?,
!' p
s3B:PV
b.Ua
+hm8{
IComparable
.UZ M
xm9<
DqVA
Z\^pv
aI#4JZ
s]|l
i[OT
k\G(M
bM&
Y 8?
SA1H
KNe-
Y 8,
HXV~h
<Ekw
#^J
]6!c
g7]]<
ZS (
Y 8
B N{=
MFiu:M
\ \{
Raee
Y 8~
Y 8|
:~@pb
^JNFGcc
k+ Q
_<#7C
Y 8n
Y 8f
el96
$e'|z
rHJGJ}
%& ~W
Y 8@
||\tP
`cO
@P2?e
F3
D 9
{x l
e Z:q
NT8"
3{
jZ K
e8[i
B1Xs
F`
l;Z
gz^
Pj-4
cZ t
Z K`
uR-v
gAMA
+>x|
N6C |B
|Z P
6~|(
kz 9
M5Z 0
V&6(
zet|8=
Q$a8
WXtA
f):F~
.<c4
_D Z(
43G$
2s h
{>#,
}'S
K4#\
#$iA 5
tbI
c Yp
X<K-
get_UTF8
Q^ppO
K,xo
y?M~x
MZ ~
zz6Qq#`
/sd;%
>i#]
H=dD'
`kR9lUq?
sK8|
Q5c%3
u;G
ka8R
5_.g
wMq X
S M~
v t2
_&OB
2hMPEv
2 -Z
4L3O
%TY5t:
w{;a
r<r/
Nw,&
BZ >w
"n;sk
ibFa
b,Hf
bq+'
3\ S ]m
D{P}!i
2} '{
K6w$
DE,Y
ka83
+I}a+
N|MEp
IList`1
.00pk
5xXnbRZ
\,Zf~[
% {
,` l
[!j?]
J7s7p
Shr>
qdr_q
jVI+
m!RI|
*Ol<
""?4 <m
!KXL
v3em
R c
Ufg{
,_B^:
Vcvv
jZ /
$ozN
|u|X>
K!*l
RWpmKy
BJ
rC@R
/ Pm
|=9]
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
BX:j
Ea87
mscoree.dll
Ia%
File
>M"&
gZ 9E
`D67
>/wn>9D
[jC.
^eii
e{;m1
3gXZZ
ICloneable
`e5%&+
@ @3T
_"]E
IXbW
(J=%
RX_\
H_Q`
-kk +
>Uy(
-)S{
F36G
! i
|WhCJ
U4>J
`4ld-
y@|+
h47g
$86m|
2!`Hu
a 68N
sfi4n
Vg-}
GetManifestResourceStream
xje
7>,}
s&If;
|4(j
,*1/
QsO2
g~~XT
F'er
`mu
]D%l
|U8x
zOT5&qsK^3
s GI
,333(
vYtD
Z:LKI?
.@}?
q(Qp
+%&
%&Y
nbQbQ
+%&9
%&i
%&o
+%&+
+%&(
+%&,
+%&-
+%&
+%&&
+%&Y
n~d(
3]_w
%&
%&
%&
RijndaelManaged
aihUn
F5lY
*{~
>I_
ayVH[
'O,#
c7Z"
%&&
%&}
%&+
%&*
%&-
%&,
Y +O
%&2
nw j
1 [9
GetModules
Vf`wn
"Z$Z
Ka8p
mAtZa}{
~dgq^}
Ka8D
1YwO
B.os
ya8E
g;&T
%&
#=yL
~nN _
l>{,
t a+
$Pqq
%&X _
0=]#
{D(7
Dne6
E-8mk(]e
)/b;&
|W o
V2lipz
uBjC<!
B% ^!-
@67(
hN/A
BP*A
YZZ
^3qv
jhG%
PAsU
1Ek|
%&
3^QD
.m90
lxN9
f`,_
,,z\Eq
aI2Pc<"
a{K#
4TIs
%&(
2H8:h
A{MQ
PR+X
F7%&
IDATx
g81S@X
C&pc
YS!m
} :?P
SecuritySafeCriticalAttribute
dIDATXG
OIY6
+%&i
_vZcz[m
T|`5E
Zc%'
\wN{
^7e.
(S;%
gXt=J
%*!Pc$
XN8U
ResolveSignature
~au|
HI?x.=
HvBZ
u,b|%&
eyB(9 O=
#$N)3F
(Jsf
M=.6
#aC T
get_IsPinned
oG<=
I6Bh
xUC5
![Z
,6&"
StLG
S_U:
Tcww
Ikj@s!T
| G*
3 !1
Wa'@
0rgcV
r EG
?L:pgc
F%P3|
PUR6
C0oz*R
kc{k<
*:5=
% {
S"2 YeS
qnI.d
}r?5
'a8`
M~tV
\;Adw
1@+][
kTKe
0e:m
<&
GetName
Z jo
~1@Z
&*MU
Vw2f
<G7l
RuntimeMethodHandle
YZ5%
j$}'
e,I<
ReadInt32
dr}R2
W{+|
LA( zOB
)^&%
E\?X
T<sr N
^Eqy ,
>FGm
+ (R
r.^:
6AziU
uc
~k-Q
VK[
& ,]:/8@
g+9;i
O=pRB7
%75rO V
JXfm-
/g[
&:EZ
1oc*
#%fJ
<84:
tP>=
YwI!
2[Qu
0Re9
9FJu
:I/d#
lzX/G
i4vI
tO!-
\ %+
Lio2
Z "S
mi_TPE
?[L0
*ziU
Iz]|
qK+lw#^q
]A i
~M$H
@ T#Ia
8{_gn
:]Q
Uxm
?T$1a
d>VG
w)&~
J nV
uw^F
'jZ
3OrV!
`Xqt
sa8p
9[WK9y
c1A-!
Z*8{
#5E
%LX@
!e&@
%&i
b}A/
|%H
%&i2
}F?#
eR@E
sa8_
%&i
sv[5
HF1=
%&i(
XF])
%&iX
V $@
La%
__l
Dhg'7
;-C$
Attribute
ResolveMember
- ;N
%&io
]ih9
.nO_
]I |
DP-Z M
Wyvd
:YP2
9*76
#U
G}A/w
(# 4&
5KAs
Reverse
X6]<
vOR6
sJ>
q1)A1BbD5u%
#hNF
UA}+
9.ne
OZ M
%j'q
W;a8
QJsR+q
hUSm
0W*e
jyaF
RZ /.
>Y8K7|
]LWUx
((YuB
dX8k
:'7
*V7c
-mS3
Ka:?
x?yf
EV&]
D$>iZ
)r%Q
Ez8L
q'zX;
F1 Ns
y_zr+
f!rW
_VfFO[
4Fs/
h2XK
?y&%
$cR1FG
48U1
1AV\\
B2E!
la81
la85
Pn ^&
m w
8%&8
Z ON
a\*>8
;idCG
\j3E
3u}O
fYB<9
JQ
5-%&8a
}k1D
=`Ba
R&yC?
h`8`
(1A}
{J^q
Z7XX
fl\P
869
IyY+f
6 z ro~e
~>Al
6LlX
T8p|D
CvS
m#F|l
5 El
yAK3
5H]8
j{_A
#Xn:
410c
E0ok
SUTV
P!O:}
,m 0
]<,TT+
/8d^
GetMethodFromHandle
jE25
cy;q
{|KD
3_L
rbTD
c/qC!
v; Y
b.@m~ ,
L Kz_"p
Na8j
W ,v
7<3\
D)~F
nbXR
eJh&
Z Cej
!u 1H
E D;Wf
o#_CNn
get_Month
-6{h
ITXhy
(d_ <i
Fur7
, sI
Z5no
Z)BY
qQ9*
baX7
D5Z
/+BK
k}"'
RmHm
ir}@0
Buffer
kJU/6
|D:H
(;[k(
e~NO
,k(m
i5msYyk=\
ui./
}FZ
qBa%
*e"mC
Tmcd%
NotSupportedException
wk1q
g&SW
r~
HudZ
b [>
rv
iTlX
ARW+
%a326
wicy
]d];
% 8M
(mGyf}
JK;
?]tv
@XW&$
fBOH
E.}J
ZSAHN
Z It
1P,4
Sa8u
(a8?
-98$
IL{'x
m2Z
9dyT
L#^
As c
Z92Y:8
!\=@%=
(-<>[
2333t
Xd wyJB5
.>JnIk
/G[I
cMV$
set_Item
H:Q
z$cd
~%-rri
9\pvh|
!~.BtO
+9+$
wa8d
Trim
Exception
M \xa(
3 DR
ETov
acjp
ZY0
r?S
.EsI
Fa^mw
%DD" B?
32t{
zk-K
RcypI
{dN|
4]H
F W)
XYY!M
LzDX
[ &w
~x,j
MQy2BMG
ww5U`%_r
Zh,y
%&o2
UnV^
29NjW}h
%&o'
1Z%8
Y)Dk
%&oI
$u$&2
Enter
:Ec~
Qz
&[&q
%&ou
RYS.
gFJ
^.0{
aZH,
abZMU
IDAT
z*@|Z <
# $yE
QJl<
n'EY
|"(g
Math
]Y _
1dv9MF
X4}n
<W70G
M7.`
^E
29 &~
{Sw\A
<dk_
m_#(s
C]U]_]
"ZX"
,u3Nb
K<@6
<fq*
C<*g
O0JR
[Z C
{m0a
u>1j!?+
`Fe7\
G?UU
%&i I
WZ f
Cq(M~
@Z l
n;^
yJ#+7
:i&e
7{ SNw
KNAy 7>
I+D*
MGiI
m0kO
OW LE
t^!+
82M
<sM
xQZ
k\x|L
pX^}k
,LX"
"r0r.
Z M;
&XNS>
$way{s
hZ /
<Module>
_ ,^
MulticastDelegate
u\5e
r(HL
t R&oM
hZ z
-}]m
SizeF
58sb
`J*{gf>x
}i"^j
_*rQ
kD1
DeflateStream
xm b
P0?xCs)
T=eel
fv6Y
<<lm
* &2x
)vJ:
8QVq
bt(U
7?B$
[FS@
!3^
)]&h
d!/
Y{_p
{,.,
9wa8
]/oK!]
4U()
D?c
[X" n"
W:J
?\7
91A9
T7l2
cZ ,B
pLD'
u[)E
T~ u
>lUA(
ArgumentOutOfRangeException
+i [
EventHandler
:kkk
s N)
VFs$X2j
!H%?
n8 3y
pP\~\$mR
SetValue
IWe-
qp~N6
@]
LO4^s
S>a 0
9rK&|n
82ll'LM{TK
& p7&K8
u9 @
q94t
_P! +
e[I"(
z)
SFZ
l7lN
J .8m
)'V\
_(,:
r` n
6-$q
xB~v
$X$R
BUg
Sq5C6
^WE,
loo#
' Cn
ta8
_OLN
F~!
z.%:O{
X[K}
{%&8E
:zV9
!~<M
7u JjF
kq\$p!D
jYio
n>a+
Rljk3
}E{1
System.Windows.Forms
-G#Z
$"zH
O&f,
'q
wM N
6 1}:'\
]vX
]zM
s"}:
D%dP*|
'>u*k
jYio5
bX
:;l1
N-Dx
q2V:}
Suti
I[#H
l }k
>:W(
,-M~;
^KN-=
Wmu}<
~E '
!I$F
X#Zn6
u_N7
vSVW
Mu0;_I7
8ccn
,f.!
i2xR
]ntH
h@_o
Q|?D
,%&+
nDl5
xER
dn6%
/_-Y kH6
]>5
Version
i3d%
<`yu=f
b){Z
4%u~
~8N?
dGfV${t
PZ 9
iWSq
O$a8{
F?HtQ}c
%4`W
W--O]
()n$
?sG,
u`Y&T
z#m{ 2
z11FZ
\?0I
YlQGd
vvr
n hB
-Ug]
/s .
q.e4
nwd 8
System.Security
Y B
fk|B3
dYG->
~ -%
\`xq
]`5n
KjX2
Y L
%dTs^
M*=bh
Y "N
Y }
RJa8e
,s3
1V?m
IEnumerator
J2`U
'a8D
c lm
i X#
y+^xs
j?53
N8D
tXq
`9mm
#}[l
v.&"
dN$d
6G:S
K+?L
set_MinimizeBox
Y )
|9UR
mO|o
0A_H
WN3I3T3
<P5L
ap&@
y6vz
'a8T
Z j9
lf;g
2mu=8
P nb
j$S.
);[-
},
"{]M#
&A<
uZ;;T
qoa p
~B[Go
@JUV
$.s/
Pv|9
oi
u $n
w]JD
Pd&c
m3}{
]~Wu
Ss$y%;n
Path
Ta8s
P(8/
[U"X
#Blob
get_OperandType
e\xfi
*`hO9
gCF.$
H t
} I%
BindingFlags
+;xZ
Dod=
l3IA
R}bK!
d%E_Nm
_2|=
f. $L
@Z %?#
!+gn UI}
- "-f,E
1 )o
TJ
Cursor
6q w
I-MZ
*+ Oh
+"oJ
Ifn9A
#HH=
ProcessModule
O7ZD
%A :
%(wo_
A!mP\
NY]V G
PG%W'
$wj !Z
6u|C
]lj%+
?<+O>
#4(>
&Za8
M\a8
/6r@
F!be
sByM]Z
m r=;k
1A`v3
J@ ,
get_
m^Y.b"g
c"5 /
-5&a+
f%Eh+?
Cl|~
we
s 'Sg
*t ;
ha]J
3| w
?7>3
&E`V
qn>`T
4 \j
b~mB
Y(gn
IdJe
t8*\
5;/X
I2k(
bLH8
%5a+
D!.X+
sD&F
m+_YO+
, Sw
n) Ul<jS
Z}Xz
`7#[?
R);4
%&-8
\2G;;
#R'U
B@IH
|6a8B
XM4R
@ \9
SWW9
mYNJ
,+ w
)z<E
1
vkcY
aX9dl 9g$
r&={
m't \
\:;U
R}9^K
crL*8
}@WxM
GetTokenFor
U
%& ~W
l_='
Tg9V
$Ql8
>K{
N5uG
Oza+
Pupc'vM
R?Rfy
0 XR
a'n-
n$ ]
{$)|
&'jU
O^y U@
jBJF
,/mD8
IR!)
G z.
s %2
%oJ
DKvn
B'|]
VW3UQ
4zL,L
R% ^
r-/hF
rRv<
U)P[[
+%& \B
R~Z
Process
sY 8s
H|Y,
}' M
`T8V
x:5
eu{^
F3F'
6(0c
6I|
Z vT|
#-$^
4>d
wn>Jj
)\`M
.a8W
}^F-wt
)hy
System.IO
l%BY
Q&-
7#{8
kl I
Q]
xVK\0
dl##41v
1Z
%\WL
AttributeUsageAttribute
sox{s
&*8
9SHMZ
~9GW
u%&8#
:[H
&*8D
RIfu8z
U)=_
aY87
&*8o
!a=0:
N17]
Y HY
7X7dz
TransformBlock
'SX
PMJR
z)`<
~iLs
nkr]b
^a%
%~pN
vQIq
(S2ZG
wScQ}
dIey
&L#)
". lP
Z ! [
q&t+$9^
L+0m
!)~
w?[r
jN3t
[_a8
VRlbog r
yM$c
7c#)[
)|`.
d\5@t
?G[_
34q 7[M
8Q
|/$M
|~IQX
System.Diagnostics
X ZM]XI)
UF~Q
XPPg
B<;a8s
GY35
v).h
OpenWrite
o/h=
S~b4
Gp<+
a8R
!KR!
^Ga8
}N#"v-
c3oc/
I<y8#+
s? ~
Mh3
TJ2S*T
<b(&
YvZ
Color
|AZ
p{`jz.M
JJ g
p>a<
&H?a~!
<Ts?
5]QS
}AzZ
1xTu
,4yh
Sw}
hlNk<#H&0
b`~"
tMl:
2j2p
G5l\A
(zxN
wj ^
, Q^
$k!a8
Hlu4
Z f)P
+%&
/L$byb
%Qz
}$&74u
IEnumerator`1
>|a%
UR[ 6
Z oe&5a8x
!fa8E
tGcU
zk'0
q;Z
*rq5
3+6T~q
v!V
V6LU 7
- |S
#H)x
U]6B[N
>UsM
GheF
p%t2
i9at
N4 s
=;2~
q=Z
' GW
NU>Q
p8DJ9:7_
9?6:
Ue+I
&HAj
ru;a%
ft`u
i !~
L7+D
_b
C0G7Y
F(,s]
s,K0
*k}(
& 2c
O[bF#=#
D K1F
,%*j
sx+j
?'f=[
@lzp'
e,lT
/v8s"
5GW180@
}X^0
[(lbr
%& 8z
YR#$
{'x
lW#
RDD6e)I=
QY2E
oix
~]LX
ZiJF
y#a+
1WV
O0\z^
S<%+
Tzt3R
%>s&a
s|O~
~{JB
[|oc
<gR4|
D*(J
GuidAttribute
HjS:
W+@V
[s3
F&VH
>a%
[ U
]##e
^FHH`:
D{]{Y
X}~
{MnI8
}|rq4
eFGH~6
^YW= i
U2gw
.e0Wy>
l(Z
JF]
<a+
eV`
ci`n}
jEi\o
IVu%
F0;EU
+%&,;
@2d;
XZa+
L[Zf
7T4T5Ti~
UInt32
StartsWith
01Gc
2X{r
ggj(
R;S
ls{g
fMWf
.oz$
jOa8.
l'f
UtNa
7JEBa
*1L
h%&8
+%&,b
G5p(>
<Pd"
n")w
d $r
Z G/
Split
5f*!
`Ba7D
l/wH
nf:NLwLs
ICryptoTransform
&4hc
2;;K
mxj~
szEH40
ck!b
mIDATXG
MA!+
\FkM
t(Nm
%&
Us:WA
XT~W
sgfde
P lw0S
C1)?
add_Load
MemberInfo
7LOK
%&` b
nk17h0
WHG{
^BA
=;T$
kF ;9
uKaK#
Oi-AX
5jn`
T[2i
'>'o
n5K\
+-*u
HBex
7i}7r\
Xa7s\[
cV8[
<I(!
] w78
w\fp
Int64
.RPo
0Lh0,
Ac93
j]Z
3AYL}%C
L05r
6GV D
o43{
Wg"2
-@"*
.poT
jU:o
JN T7
kPb+
71{
Yr<m
X\\$
F %Q!
h6Q~
]S+}
G7w9
?hS9%%
Y 8e
S;"'rQ
1>rfwk
]D[ >
C)'g-'
j@k`
C^S[
j,7n
k2Gq
get_Chars
H9ZKY
CryptoStreamMode
7^cgs
Sg.T
X(dF
KR i
+K>j
[g}@D
>|MrR
e=xwVqJ
V>$P
Ek.
~ -WO
& _Q
`v:E
FTZ
SZ\A8
d^F?
r)+ /
Y 8N
Y 8S
xw(C
Y 8_
=tD~
Ri$L
%&X
g a8
$atZ
I h$
<DL j
'^2i
I%&8]
1N,5
9fff
.^G?
'1Ah
%qSS
-30A5O $
{i?;
!LZ
13 (
kD) P@
dTfEx
z;!a%
ch1+
Z E#P
`6~1
Za8X
Za8]
"p
\Jc?
Q<:D%Or_
Za8M
K=$C
ujHX
uiN_
}y vh_H~_
o~-7f
Assembly
Za8|
Za8v
Za8u
%&os
Za8i
Za8b
Za8g
sfPZm
hSTz
_bY*
c. x
-wu0Rk^
sY/1
Za8
SuspendLayout
_bY
G"6a8|
a Nkmm~
%Q!%
L u
~tUJ
|yg|
g<z;p
Za8%
2nP.
o?&V
ipXg0
set_AutoScaleMode
IH5Jn
A~$Z
tswb
W~ ^8
=2[2
CgS2%
| {3
?]m*p
Z 8F
o?&Z
@@`I
6p-&
`qp{
Vi
?'u2
Y80.
C;)b
7:<z
{pGj
m!p$
aZ 8'0
8Y8v
n5;"
^d4Uak
[GXu
E<7[7
gT)X
v,+W5^
Diga%
cCxF
sEaH
-dm:1
\|u2
A;4D\
mha8
3:Z
< z3}
5c(
Pt?T
r"Mx
M(9i
2m"i
iXgw
RsX r
GYZ
q$^
Q12D-
|%!SN
@+r5
aF~|OIR
"\A@
).}3
1i!o!
#Fzq
6IsbXY-
j0$t
Hlw"
U.\8
L mB
CV %9
_-$\
y/g
AssemblyInfoAttribute
('/Gg
(Us&9
#\$a
* ,3
&''o[l
lta3
q#Ks
I4x|
c0^C
1ckK+
@hZ
5 m1
#mD[
jxP^
,O:K
\ebr9
ssgs
_F a+
l v
srdy
UZ Sk
~_aeB
get_ReturnType
s^\bdK
IConvertible
wAmkv
i*o"zB
?A/ 6=
Ey)s
,Par
| Uv
]f }
f ?T
F@7YI
(z2up
k=?1e
_tN
0oMB(
}?Q?
;!w'r
.cctor
84IO
set_FormBorderStyle
> d=N
(CM{b
nJ0Y
ResolveMethodHandle
Y#s|
]EM
H.z-
Z;`uxM
9VVK
~> 7
' OO
SR5g
1?=-
$/v:
&-O4
%&z
0"Tc
,KY PB
3/2Q
zo|_
cSa8T
,~;xP
%&-$
3555
"&x?zep/
ANOId=BA
3'Bv
'"7I
X+0R
"._~ )|
Y_Y
Y$;E
%&-
-Z
It#jV
2]&3@
\R=8"
m- >
EfZ
J
T@ (V
0 d
dQU0
L^rWQm8#[7hq
E;D+
o]ezz
Mi:_
X1<o
?ew[1L
set_Padding
%A:cu0
ii).
i)ugN
O&n"
Qv[-
t^#|
"Gra+
UZ p
^jygp
.7Z
Q3yG
ResolveField
,//#
"
O[8s
1
ResolveString
Za8+
y|!$
=z_<
_`ll
=<O`m
"tP/
6G/Z
sbWm]'
?{m'i
` a8}
%& ~[
)n7,k
U5}&Cc
%& ~C
3M #
1~+#+(
Xdee
#:v$
jZ )3
fIDATXG
)E &#
eatB
OpCodes
HW"D
&S4NK
[ W+
System.IO.Compression
DYw^#
=[^
K/S.
n |u
UXtsd
4%a+F
GetCurrentProcess
WzJI
V?a8B
f>:e
6 %_Q
r)[[
%t U^
50-Y\2!
=aJ
1-Z ?
&D5
>6d`Z
\$sz
0Bj\
&P}Ew
}wzU!
NRft
Lu2#
OK`U
$^FD
`1te
V+Q+O
get_DeclaringType
TN(x
U$)s5f
)PX
r,a:
SeekOrigin
Dna%
UyMC
GB~+
M'+de
)< f
qxFn
T; ^
' 6_E+
_AppDomain
L9P]
T)1?
8){:
oTmo
Bl5?
t49\
}[3wm
2r)h
ma86
I&l;
DZ ( z&a8U
$861bb053-01f6-4e94-89fb-0f3abf94d532
t.|:
Di *
28X;
&Z 0 R
uI+p
6363
;JkDhOL;
ma8B
Hi~r.r
bqIR
w DOS0
6_!TC
>eN$ ]~
z)3f
z,a%
/^VWT
U5hj7
dz!Ob
A{[d
y"x ?x
>eN$+
3KGRY
$M'i
ExceptionHandlingClauseOptions
t{r6
Z [X
6KN+
?xTo
zF
.o
.]p]
L&z
HostProtectionException
\?~7I
j!d8
n/m,
Ri=T
3?WY
I'G!
Ga8c
nq~&
Yj_i*
ResolveEventArgs
B~^2
B~ ~
_*)~
_Exception
I*pG
xL*%
QZ #
sq) k8
Create
wC\E
TBJI
m%wV
{]_?
M@Dz
M@2>u
n|T[Y
9:) r
|[ A
lPW}
;KWw+
%& 0_
a6;T
Y }H8\
H1H5
KWc.
=Z Eb&ba8v
k3K'
(@
7>Ig
jl d?9
&w4g%
T?B2U
j5V[
Uou*Q
v@CY
T) DR
+=~Y
y *m
Hiq22
Kh qP
@6I!
H(N9
:#rG
K2{yd
HA9c
G\o-
+*
=DY}
)4TWC'
j4lW
ULL !
FZ '
jY V
Cpz 0
[WpAZ uA;
BPqC
2Q/ - v
Bm]ys
OpCode
Copy
cgwl
X|}\x
Gwia8V
GetTempPath
tJUv
s{gL{
)-'0
\/+0_
' +(
cIDATXG
CUz*
zmd(
"_#0
V4:"
_b` {
BH%:
";h
*la8
V7aB8+
Q%&+
c4[)
%r,9
Q%&8
Ma8'
Class1
,Z
7Ma+
|f5s
S+L~w
Bya8M
5m:D
HPnY
}l o&
&W~m
J)D9
SZr{V8g
ha8y
+Z R#
$_W]ipKF
j 5g
('|+m
xt%&+
!%&8
ha8k
FieldInfo
$I
Qu"T
]Z-Y
k Ib8
05Ug
M9^| f{e
#={\q
i7pS!BH
U/h|F
~a+
7_PAb\
=sa8^
G}-#ccP
<Nte
(&u<
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
<x+i
+GQL
iFl74
xGk3
,7y.
m"nJ
3.dW
Q^"y
kY
Z -Us
gu*#
>d,>
"a8e
Ib.r:K*
0gz^>S
0V[*
>;8<
AMO'
.I{_
UC k
(fkK
J+"m
R0h
d/G
{w'liy
pq7
hwIZpDk
W`o
+xs!/
1K@I
KFf&
hHt R
k`ix
1F59
System.Drawing
WCZ'
"JW<
S/mN
%prY
MP5#
Z 8n-
Izw{
zsT64
J E7
zJBR
.'`n
^ 9?
-,cY
Tv'
P }l
Ed R
;n'\
cF8]9
Qj;)
p9_
D$$&Q
,(m_d
Z Y.
na82
0^ s
"J/
hWKM6
|dqx8v
90R~
{Ba8L
HV6m
(g=&
Z Yy
A Iz
x?A4yy
F.a+
}_v7ih
}
oS=f
na8v
Cf;}
aRP8J
S2UE
,6{ @
M3>g
Y06
's5
_Assembly
g%8+
Ooa8W
Select
8/
Cm)
& "R
AttributeTargets
s db
Ykl,
Ra8$
D3p#
5A}*
rl|n
Pf mx
o>TB
UD@
f[se-B
'8ReY
H=2c
.tm5
1I_B
P*(@
I9N
A?5=
~vX7
kq:f\1
8Z 7h
AX/&
{*=[3
p3re
7ZnU
get_LocalType
+Vsh
G%&8M
lte;}
NZ%t
6!VC
U!mD
Rijndael
t~xq
W>e%&8M
[2Tg
AxQ{
i`J
GetDynamicILInfo
P XQ
P~10uz.
(Ye4n
ZIkl,
$ Xew
n3unVk
cF0;
,oZ
x[)*
B*V7S
X4s0)
Nb17
%&~;
*L 1o
dWOg0 Hk
Z zO
+Dm%
SuMs"k]s6
&U3+8
&yI d
P#y8S
T0@
BAX2
0 57
q"9n,
k?%y
%&~A
6*
m'>c?|?
%&~P
xa&O
J0Swe
>/w
,FkT
Z )wHta8
&>Wy
&|+
CK
6<W
Q S]fo
T|tn
$gL
G[OEu
k+k4
PJQ(8B
iq%&
rcDC
c'Q,
-D?>J
{-qBi8k
rO=D
|#(d
Ja8g
{add101c0-4938-414a-9368-abab418a7690}
6S
V&Xl
5\]Y! C
_L1. UuP
s0<U
`.rsrc
5^{8
>'x)
IH^n5
`!6Z
>WB
hKZ
Nfr6
%&X(
QmA>7
<ie
K$.E
] nW
Rkk}LZ
WMv,
l=ny
m[f*
v2.0.50727
[{+G
<~~9N
AXYn<F'g:
N4Z ( +
12?Z M
SCR&
ixQQ
/6[$
(hj`
r,tW*
V 08
V= %
)mo6
get_TypeHandle
?6a:(
)zJY
Bg>(5
H9Q;
C Ms
ua%
4" C
&IMP
Z&jQ
nJc47
Z[Ri
Flush
>Ka+
zY 8
GetEnumerator
SymmetricAlgorithm
Gz;8E
x=4t
; Pp
|;`?
tHk\
:t*I
N +Cv
`+/]V
<)#/
<Y
da
d9 !
5AyESJ
<.8+
N\MW]
gi2m
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo> </assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD
@f3/h
#d6EJ
p|Z Cn
mP\>r
set_Position
F+a87
(c[^
B-&"
=A8d
T{}k
O~'~
'5 D
hDy@
oxj*
v?nhJH
}%mx
PM yQ
$6dwW
HDVO
I cl
!O: xZ
{#nh
auLHJ
`Q#`
9M3%Sg=
! )H
*Rh^J
ZeA1
8c&"$
R0;?G
Siac
*%/d
17Vv
l4KG$
}!qx
E#HG
TransformFinalBlock
<rS&G
WXa8%
k2Pm
`\2tZ T
gw"M1 @
OD|i
?-{> g
[QTF
!,R(v
(Z &Q.
xH}F
h_*4
K2V+
Exists
@a1Z
={F=x
e`);
~gbl
zF%+
g(f-
S+]Jbs
Z]tj(
R)5e8 v
`%'1
T2a8\
(*a8
~9QJ
8Gom
` 1K
^E9}
+h E
UgY<vK "
zzr
g8C}_
~;
7<UR K
a%
=6ds
"[p[
-NMI
`w:.
Piv\
q|Mb
"
g+:^
sy;.
{^?/
Dv:~
b8Hy
set_
0Gyn
<677
ya8D
[rP\
?#r^ws
g{`!
h6(T
t?zx64
[1LT
D4-=Q4;em
X+67
La%
LZ
]CN9>
]MVu
nqd+[s
0ut,1
Uh@htN
:'S]Z
*:zu
sV <
S7`[
E<k&N
~y&`
f nb
GetFields
)=qx
2He9
;S9\
#_RII
Y Q
olI
Y M
;8rg
~G84
p"[|
=ZO+
Y f
get_Value
B"Z
xZcW
[a8.
4XFB
ea%
X Ii
Y +
`JAF
"MRp
g$2W
4]u{
a=ggV
L`a+
FJj<
] Kg
Guf!#
a(i
|Fmq
%&i `
Yd{Dy
8f]`G
u5 F
,l*i
H/GA
F[Z
QK'G
+t;]
_IRkQ
cp/k
Z 0/
Z-fggY\\
cOD(
+%&so
ak X!0
C\6/^
)mm,
yfC "j
?C%+
G:?e
Q{Cz,{
Ai
%N4~
@)kt
sKUlZk
5Ex}
x196
m6 qYO
Z V5h
;@@a8
/+z%
WkYG
hGgv
k .[
v\u)
mO2;
B7ih
<##/
1qSU
DateTime
E!xK
]k"N%&82
`Jy9
get_OutputBlockSize
z '
Y]]%
3y,_
D>
D`b_E
O`{[
7.M
SrW0
fC`|
zR Q
p\Ou
I _
get_MemberType
4MYZZd
0*;|
F[EH
/BO&
XpJ
!a}vx
L~Pr
zUy63
Q*HO
']}A
p.E7
!3s;\
O[
*#CkGU
oZa8$
5rqx
bOXr
LO>5}
iEQHV@
y 9~9
w=P&
bPhu
t!`
f{w7
I<Up
RuntimeFieldHandle
sd,pl
\d+
zK)52
a`Z.Q
S{uF
lOg
.p-+
eT C
bxH\
#;Z >z\
kf 0
Ix0
Yj (mx8
/Tc
({Mup
Write
M5]aJ
k0')
S,sX
ZY0
[]P@,
7UQ>r
K"Chf
^;Ub
:1u9rS
c\ k-Zk
qt%\
WoH*
s xm
| ;Y& a%
rJ J
[Fc/
<<7S
32t`~
%& Z
H|3i3
=mz6T
?EcV
ia )
%& ;
-&(]8J
GW3 m{
Yy, y
Oo8)
~Y"7[
%& "
r a+
=CZ9k
U %+
}`z!(rU
?W\[w
2 n&
FromBase64String
;L+
16M $
VsNt
5u>l
OWs#
5 &Tb
.n[`
?X'U
w{-*
)+b?
Tscyo
& DH
Y+>E@
>'A\
I 5v
Ds=,
get_Year
Icr1I
) ai
T%B]
R?D%&8u
}rKM
Yjmt5
.J?-8
5 W+
9tW h
Eh=G
=x
'd)zdT2*
:g F0
DeriveBytes
_[2%
q;aE
S)d(
_Y8K
ab1Wb
fhF=
$wzm:
zYkR
=<
?>T
EO?a8q
%&%
%&%
c#LD
` &8U
~TY9
/ 1h
'Yh,{
2!e+C
C^{=Y
get_Name
CreateDelegate
cb1c
YZY4
pg8O
4
g}.$]
TR-[h
YI?glv
UH4q*
:YIj
s>t 4)
N!PU
$^-3
|Wgcl*
z+nZ
4{
!KrNef
ja%
NEYKI
Y%&+
S_}3eb0!
=;fm
C>d7
=;fv
ZY0(
],hG
Uh[W
%oZAd
jC)J
b!t;
x jUK
2[v)U
`AGM9
16^ h-(
m23j
'Ubp
Convert
97SDu
Ya(W
vhs\
9zYC'3F@
5Ob
oCh>_
196o
P5,W
{s %
V r>
u*Ia%
}FSN
tj3o
HGjf,
m M F
)x0^
W*UH
V%&8
Z `k}
av]-[zw
KDa8|
y*fy9$
B@:E
NpHL
p{$4
(3PhW
ajrT
}c#,
FQN)
\.ZaM
'G>ta
zTQ*
N}wD
jX}
ad> 3?
2<( Qr
!<N
657.3
]jps
.GkD
(->vK
+7Sx
=+ ?
_ArG
vmg.
7X|^
K+66
t=}`
bKvV5
'lT\
sR6Jc
jR8+
kyH8
3lBq
m2S
tA8RHW
kLOO
get_IsStatic
|/ 8BR-
LzdZ
8X^'
gvvvt
+6=>v
_20y*|f
BSPP
M2%+
&; e
(9;-YF.
6NEa8-
T`/'p
a. l
vSa%
+%& s
u+:;
8dsY
GetBytes
et{X
Zzm:
%& ~P
c+Ii
%&8o
%&8n
%&8i
%&8h
%&8j
9rJ
%&8a
%&8`
uW{#
%&8b
%&8}
%&8~
%&8{
%&8t
03u
@5L.p
gg?y
%&8C
%&8B
%&8_
%&8Y
XA[_#
+>5!
%&8S
%&8R
OYZT
%&8$
O" ,
X\*x&
%&8?
!/^I
%&89
%&8;
M 8_I
%&85
6"1wM
Z HcP a8]
*ui
%&8
:14$
%&8
bb}"
OAZ
^xB
8^E8
igaK
;M !
u.SM|L
r7m"*
;:c
Qa%
cgbf
#Da8[
STAThreadAttribute
DPIr
Q:`
q/N&
,a8"
VjZ 3
System.Globalization
YtM{e
4.#+
GHz|
O@ a
j 3 a
<a8F
HZ ?/
dUa~|
( !A
&]}a8v
tsF%
1`J9
hyBad
LqAv
CreateInstance
! w
Gd=W
n}.
7Z 24
0L5R~mw
r68Hf
System.Collections
w6AG
$iU<
7lWY
=.$e2 !c
N/Uq
,,,07?
`75 J
1ig4
sDC^$
gh6*
JE h
Environment
J0we
X %XE
jIDATXG
OBCT
get_EntryPoint
&sjPS
h(
& '%
,?92
2[H|
#o"U
R77ZE
YsN1
Gc4;w
> 7a8
BUQ`
Juwa)C
W.,v
n?iP
Z *HD
.//smf
s4Z-
BF3\-f
n=(>
^1(!
6!ta%
z?G5
Intern
Gk'$
lZ j
1kz
-Brn
0a8L
PaddingMode
SofMz+t
NbfL
|[Z
O0 P
vA?j
HX[e
,5$
J6y2
+P`lL
65NOw
rfj
SystemColors
q'F@
+E\ d
>*yh@
;~F#
t.$N
_e2'
T`a+
}t=p
loK|W
_Bna
|776
^FD e
_HBU
x,TS
Q{WF
ox=V
System.Core
;91fX
9^?`
Jpt4
t?oLT
H[$hZ
9X(v9
AssemblyName
A*Js
txA*
DZ cg
F|ay^d}
q#Z
Seek
0~'}
Fk &
X`HG
ModuleHandle
7e[ r
Zv+)
e3%[5
1i^x
cmUb
,jey
U]@?
$F6f
Tl 4
?N$x
-+hy]uv
?)pt
GetMethodBody
get_Length
i"{
2WW }
6LkJ
DESCryptoServiceProvider
f@j
YVt{
IEvidenceFactory
.vnCx
P ?Qq
K~n}
#f"O
iZM}
GW7T3O
(:v(
MethodBody
( df
>8#f
Rha%
hR;h!o
_`{{
\Z9U
k6zh
n3==
{uMC
w}*i
N5@jC>66
QHD!.
&V#3
\p= D
,4_"t
GAMQ
FormBorderStyle
H@Vu{
E }0
^G)E
g [
+G ;KWw
9KdF
\`jt
C%Kq
['Ki/
\`}^_
]LlH
'`YH
1+HpV6
F:@
FHx"
e@{h^
1;;K
oFmi
"}u2
"I2!L
o3_K
0YZ#
Q$&
]\ ,o
C%mvM
{c;0I
i^T)B!
P @)
zecB
t%4P
9mrj
hW[Y
X! C
ze]5.
f, l
0ejb
lI,_
DynamicILInfo
QJ!d
ConstructorInfo
yobb[~
{]a8
Ed0C
. $
-V@P0,
Data
qI/4bFa(I
YlE I
)*(^
0;Oj
VbQ\nJ
V\ an
9a&g
+:~d
$w,w=w?Z%t
m0Z$
M*[o
VAHi
pHYs
gV].
D8BMx
rzFCDu;
B +e\
sgx k
0WgD
hP
(1#
5)
{5Nn
6Bz9
aEW
}6z `
#Hn;]
{mll0??
u$wK
'H6
GEO
L7c|
:KZ
a1Jb-
q<RGu
s.-^
ZUMO
Fc]
O!fj
!\;
9QnA R
5,|GO
Byte
|8Aj
)1"#B
X2&]km
MoveNext
DY +
K]P3
_kZ :B
tD>]
I q
y%
61L%
?Z s
*L?R
7VHav^
hHh
oI
vT4 2V)
2.& B
(@i0
%M s
BtZ^
da <
%Bxs
B-f?
@3!Bt
s"Q0
3cvY
\]x;
*f$TU
VUC{
tDo
?vg`
get_Item
/TE^O (lV^\G
Vi,L
Z \^
^?'3`
B!Xi
l w&
?C@[
. (4
)!J.W
JQ3^
Rg;5TBL6s,|
/PY
StG@b
NbV%
#VzwKV
DiGa
12'Uw
gx!3
(A0=
c={;
{L6*
o qP
=!GI>
]`"j
~d }
LRI%
MakeByRefType
B'Rl
X
qA0jo
WB}$T
-2lZ
t~9u
Tikj
DS ~(Di
xf#,J
W[k _f1z
X u
}vV5
xuaE"
Fh~a84
CU 7
X R
F;d<
X _
d,/y
X C
;g';
:y\F
X <
SE'8
p>w1
Ca8Z
L6k"=G
Apw>*
y'(Z
nVs
Q 4$O7^"\
d`n
6pGu
I2-u}c
ReadByte
t czr
jNC
HR:q\
3 <
'-Z4X
"Os& =i
PRtY
J'_7
Da*s
rDoU+
lUR/[
~vN!tl
m}a8&
$+HgA+
Bpc'
f_Vk,
v,ar^fvy
=v*U
5(N(
os!:
v}8h
Xf\
K;l,
DZVu
|D5p
]#^]
~nR-
X
IndexOf
h/@f
N
(a%
jrI
H<9w
Uj$
&4vw
$?ds
4EH'h
Y#a}
0Jj)6^
\a8
gGR
R=Ag
i1ZL
IVTd
at%=
{plk
K_0?
Aa80
i9Z
o wS
F DZ
CH 8m
AutoScaleMode
,o;P|
T*lll
_bj/
kcq>g0'
jEcG#l
m jm
X Q*
w#mn
LYf+
c(hm
a?j
>e$[
#Ib@
tV jk9
kCGC
>a8q
CT*Kd
H=@^
)UeS
9 ^]
rZ !
f3>=0
i&S<
MoveFileEx
>1_y
6h&][@
Gxps
get_Hour
J.};
@h$D
Append
SetExceptions
/Ea&
Rfc2898DeriveBytes
|;
op_Equality
IV|F
twOw
{iHZ P
9)8Z h
E:,-
%&i(
%&i(
zg.";U
7*I4
|w
F-bxb
\f{{
/L&eN
ba \
}>w!Z
+W6)
|`S~_l6^
0yfh
KG- S
K Jpu
B@{
'Za8x
L']v
ED&<
sNtG
Y0sr
~ );
'Za8m
sYa8
h`%f
F\":
' A)
3NW^
~Nnj
i ?E
m"i;2
nKJ}
Q [EL
_z )
:-Q(
get_Message
6 p
~+czm
o7Z
Zx9/
l'mu
Ax(d
q= N%H
|d6B)G
!v^l
OperandType
wSMZ
4 #j
nyjGE
Zp2q%
&Zv3
<M%<g
:Zy '.
fnCo
oxd
;]FJ0Xa
Z !r
y9<V
5Z F
3nj9
ncC
? &5U
Y /uj
;(X
wL3%
k)g=f
wx7i|N
)N(l
BSJB
|J|_
1g?3
oG?]
FD`
!a85
sz8Jb
|6v
LoadFile
@3r]
v]a8
{6G^
TZ!)aka
I:g9
+[9
dY9
WQi?
WwwwMNw3&
ResolveMethod
uabd1
InvalidOperationException
MV3X
6r7V
r\L!
J"XZF
i,H!IM
ZZd%
V'e0
cOt}
5GD`
4)&-
HUfC
P15-
dkX/
czZ
a-T7q
ungD
f3 bU
un (
D[KY
4fz.Iy
B1v]m
"ruh
y2U`'
% {
77$%
~TxOl
[R &X
i~d.
WfT]
TPF\:
BhQ#
Eydk
sm~g
0A`Y"
)'Pd6
:_HG
&a%
/Y"|
get_Hand
l*sD
;@L*
5Ws
lFx>
&c B
?_b` 3
M@J?
-S'^
a($
K0f%
=(2Z
@d3I
~i0|
GPZS
I?nS^
1 ?
W{*X
Xr|
}:Iw
F{Y^
\jQ@
1~[iaQ
Z vh
k2dO1
x4fp
LOM377
I&p0B
\: P
|T]HL
/f%(<
eV5'
U8Rtd(
IEND
6ECl
58N4
& M6
>P >G
kIDATXG
,??#
8^ yTh
=/$[
v;1L?
$`q]
<,H/)
Euz^`1
ZarJ
7R@EL
D a%
`%&8s
DwI<
_z])b
\$BK7bA
FZ^q
Cf~aE
SxEiZ
_cX*
Vt ~0Y
Z !?C
%& +
1Z t
6 Im
Uq%n
StringBuilder
ParameterInfo
Lf0y
N\"a
N)5B
N} k
CompilerGeneratedAttribute
>o%I
_)%+
vJ>S
MemberTypes
7 u
7|u`
}R1?
8&MS
RgNV
e#:)
_2Bk
(vx"
:=a85
|D@
get_Day
.Ls/F
&W%t
*30q
(#B
K] M
RP(#
178?
M}9'J
GetElementType
ZlF/
Ik}S
D1H+
R[ -s.
v^,i
Z=@6
}: d
a\D%
3/J,
N4dtd XO
heSh
/L@,
4Z nd
^e5Nn
1;@V
BinaryReader
pDa+
92Cc
ia t*Z!
0dkk
uK+LjO
M\Bf#
String
"Va8
f
;/\#
&M]&
4i'g
^a<%
Ch8FM
yWcy
+o*7
FBjyy
InitializeArray
Ia8f
.4)n7w
~dn e O
V~|t-
Z-`p
2GYI
l+H
!$,,
t%).
/x_t
xNW$
*N8n
[63(*I
/~ m
$vg%
2]OR
"ygM
P$hu2
zhy(
wwz .
R+kJEK
1Sg%D
N3 ~
V, D
T5EF
ykl^
Load
sarNd
=>a{
k$;M
;wgr
l!znTJ
1e|
@\1
L\ a8\
<L1F
w>EEc
Dictionary`2
Aq{8.
=ZII
$l0?
$_#F
aarFe
;W,,
sq
_ Ku
UGO
LN xLW
vfM;
T~HhJ
b X,
RuntimeHelpers
6ww8
vD1
y6n*
rZdL
<|Mr
+K Z
e'mt z
Om4-4
Object
R ]i
{_'
O/ 6K
get_IsValueType
dA;t#%
La8
xkPcg
X9\7
mMr!H
04Z
.zP 9p(
b\/m
{2Mx
|yD{R,E
oa68L
+%&}h
+%&}g
JsW,M
&$ }
pl}?
4h9 Y
T[El
nE4
R T j
@=iS
"v p
8*1%&
`>Ag
HXXs
Z #:
p\!G
kiM
.D\7
Exit
#Zga
rK>M
.,H!K
J(Od
fYRhD
9rm
get_Minute
*} IQ
#k f
I *x
QZ JR
.am!
M zb*
fYUq
Z #J
vfRg
E]l 9
06i%&8
>"a+
7QW0
^YZ
RQC
n=0\
|rL#B
System.ComponentModel
w6u{5#
6S ,
Kh.b
1{ !
@(8wBR,8
?za%
oo E
g}BM
=:s_f
System.Threading
!,<'d?4
,f|]
C<@B
I U7
IsG]
fp69
\OV>W
igQ?
ValueType
YM,9
(Ee&>|~u
oR?L6
0Z p
<lvI
>jm
y,//su
get_Current
x0(HO
"uJfM
0Z D
0Z C
hJNe|
N<jZ H3I a8~
X
jO{v
ueq[ h
bzgttJ
B> tB
T*LMM1
lPe.
?: Qo
IIU6s8
8~D?
r$J*
s}0]
(]K&
%& {
sAx@$
4gbS-
pa8
-_/Y
, 1`
]ST;
$Z?U
`^/
pa8I
"#Kk
p9qN
=k&
MFn8
"T]a'
Ya8q
A~M?[
&n-Y
@Y Gs
Us
Vi2!
-,Q
}Bi
pY?%
ui@<8
ttuq
Vqk|
8bk{
Y&>4
T}1~
C>ML
]arE
wIN(
A$mr-
0AUMs
u7MV
UjGbJ
)R*d
TX
f5#e1p
+rZ Xc:
9R+#
j B-Y
#Vf:
GetGenericArguments
WriteByte
GetTypeFromHandle
~GTU
9R+?
[
=@?
QU ?
/a8
2-P0
~Y
=%sGqYC
Int16
X3UMXZ.
'uX>vUW
+a E
xP%3
System.Runtime.Serialization
#{#c
>g!=
/a8P
v#$ Y
/a8[
J {-
C{y=
I-N<
V a ISGN
QCW*bihU
p.1)
#A+p
System.Runtime.InteropServices
{W[_
g CI
Z iX
I,T`
i^a+
4&@
System.Runtime.CompilerServices
)?Z 3
<L3
Uq?9thT
}Op_^
<sG-
5G;}
.)0,fV
Z B5
H(8;
JFKD
*=#q
s< m
v])74
c{3
qTj"
iIDATXG
&7jM
[W@D-]
1@O
y4zE
kSNk~j
64qd
+6`AS
nIDATXG
+*N\
va8V
{7 L
"=i?vV
F8W4
f~Mo
6 ~K}
H$]C
J *e
<J7|'
C*a%
c%&8
xx6j
'*Yg
RZj_
CompressionMode
pv1w[0
IComparable`1
i/OC
7W/b}
151=|
xIGG
p:(r
%& )L
O)dXb
LVE ^M)
[2&
hqGu;
}E?
/9Ap
AkMv
BS~7
q.@
5Q8@
5`ff
".HM
ir\+
VB:*6
1F,Xb
f8`v
C7-4Y
mmK}1
get_
_b`
.N(2
}x s
ar_M6]
=tgj?
~:sVw
!Es%
CreateEncryptor
J'iu
k 5 }
%&` ^A i8Q
S7eg
ZK4.
Qkkbal
\0t4jMEDW
FE X0
-0V)b
pel p(
. x`
cO
.Za8
MZ H=
{xaN
(-?5
y+7T
s4;F
k v
)Vf90
*m.YiM
\sNcp
=L8F~X
P0];H
@h+h
Rd%&
XMq
(* Z!v
FF Wu
Encoding
y{ADk
oCQD/
BxO
= G@&#
/=2Y
IEnumerable`1
q%
get_Module
9=qtOL
"JLO
%&
8lRv
(|!i
b9yn
*0?;E
3v(;
lt*d
AB D
=U}O
yIU@
nfD"
PzcZ
P|{^9
buwM6
~N?%
we9Un
u^R+
*#*}x
d}}}$
<uMh
v.%+
s2Bc
WvC )
Y_LZ f(
\3Ul
8Y|UF
System.Collections.Generic
d,om
geJC(n
CJE
{teT
&4m=sa
}wYx
ZHX%
>[g5o
axa_
'=
*,{v
System.Drawing.Bitmap
get_ModuleName
wJyr
uG}7O
@.8g
z20
E)kM
| NV
*H $
)%&+
Y%
Y% -
!6O]N
MKEn
R Z
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven01_64 Seven01_64 VirtualBox 2017-11-27 13:03:23 2017-11-27 13:06:16 173

1 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven01_64 Seven01_64 VirtualBox 2017-11-27 13:03:23 2017-11-27 13:06:16 173

0 Summary items with data

Files

Nothing to display

Read Files

Nothing to display

Write Files

Nothing to display

Delete Files

Nothing to display

Keys

Nothing to display

Read Keys

Nothing to display

Write Keys

Nothing to display

Delete Keys

Nothing to display

Mutexes

Resolved APIs

Nothing to display

Execute Commands

Nothing to display

Started Services

Nothing to display

Created Services

Nothing to display

#infosec #automation

TheSystem Itself @ 2017-11-27 13:09:07

Detected family: #Malicious

TheSystem Itself @ 2017-11-27 13:18:02