MalScore
100/100
MalFamily
Malicious

caz.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 39/67 Related 2694
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 291.50 KB (298496 bytes)
Compile time: 2017-08-25 14:37:30
MD5: a4b793d63825d01fc706b6234c5d2547
SHA1: 12be6651b27d57a54b2dd705d4d5e8564eada8a8
SHA256: fa2986984fc78ba5024f7706cd18ece37e89716b558cb82c0cf606c163eea018
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 5 /D .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2018-06-05 17:00:05
Last submission: 2018-06-05 17:00:05
Filename detected: - caz.exe (1)
URL file hosting
hXXp://eurcrowncork.com/ccf/caz.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2018-06-05 13:51:05 [39/67] VirusTotal
PE Sections 3 suspicious
Name VAddress VSize Size MD5 SHA1
/D 0x2000 0x4015c 262656 bb62eaf28ecc30874327c1cf42373631 3e4a3dc3d08356f3da8003e77210a727959b6a07
.text 0x44000 0x6408 26112 26353224f628bb43e44e75291169dc1f c0dd7a0493554091065b8b7bc980e3e4786bd1de
.rsrc 0x4c000 0x1c80 7680 b39fee1d9857b8b0b7851536c6c5bbff 706442cf19dc014e0c1dd3d8d12dc1e11653a5cc
.reloc 0x4e000 0xc 512 9085e484a4d6c1dd8eb7aa3cdbf1e891 d81e00efb3067bc57ea78bd7320a2d2848c47332
0x50000 0x10 512 9be6058bb936956619d20347c83ffd89 48d84451e3a95b517cc68b97bc67a0e06acb4471
PE Resources
Name Offset Size Language Sublanguage Data
RT_ICON 0x4c5c8 4264 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_GROUP_ICON 0x4d670 34 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_VERSION 0x4d694 1020 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_MANIFEST 0x4da90 490 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: Copyright \xa9 2018 Energy Economist/Online/SP Global Platts
Assembly Version: 0.0.0.0
InternalName: agemmemes.exe
FileVersion: 15.12.32.4
CompanyName: Energy Economist/Online/SP Global Platts
Comments: g1fwlagy25l
ProductName: Foglight Capacity Director
ProductVersion: 15.12.32.4
FileDescription: Foglight Capacity Director
Translation: 0x0000 0x04b0
OriginalFilename: agemmemes.exe
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
No packers found for this file
File found
FIle type: Library
mscoree.dll
KERNEL32.dll
IP Found
15.12.32.4
URL(s)
No URL found
VarFileInfo
Comments
g1fwlagy25l
ProductName
InternalName
Segoe Print
Cf1StExE\]<EYT$KXaJ/`o~0m$
StringFileInfo
Translation
agemmemes.exe
Assembly Version
FileVersion
Copyright
VS_VERSION_INFO
Foglight Capacity Director
Form3
Form2
000004b0
ProductVersion
FileDescription
0.0.0.0
OriginalFilename
$this.Icon
LegalCopyright
I7b
CompanyName
F)[
Form1
2018 Energy Economist/Online/SP Global Platts
1sdy
Energy Economist/Online/SP Global Platts
neTXJ
15.12.32.4
>x2X
b;3h
?Do
>9~J
=`!W|
; 8o
Q80<
W)c<
f o@
F 'Y
W=cv[
'(A(
S<^`
l+^Gg
@g#ZW
mz]\J C
)LpS\
zCtB
,huFd+#O
-E {K
IN<o
v-1s
pQNF
*fOnR
5|Y{
%>qB33
*B</
wTAG
69"$ss
QocS\
K5He
K'Wx
@[A4
H9=_
7os]j$]
gsq.
6 u'
AatR
R%C
ResolveEventHandler
P#8h
|4Y_
& ss
G#IV
#"~L
G=%/)S
lD84*E#
Yr9(
^Vw|m
_me{
|?h^
MSsiU
Nf j
l=Y7
E 1k6
u-P?
ztYq
ySL{
_J&p;
1|6K
TYDz
"smq=>
OuyI,sGK
u3N^
MarshalByRefObject
;Lxd
#n$Y
fz*J
2hPTl
|?{Rj8
`\>@
/q.|4
_6od
HaA=
rXp&
U=A<
Td[`
F5j+
/lEoa
n-s_
1(4T
yt25
Eu R
System
r*z
JiCR&
\ 2&FW
^.30w
m&Z@%
c@*?
*;'
$ H&
kKnX t
6B7CB1F76B99023BEFA8EB2B530216F00916E4DF
^\*=
&U m\j
ML1
K1Vd)
COX0V
AdsY
w X
Marshal
9kO`}
HmQM
Vx0z
Kwv>
n*Kb
j4.}
J{F6H
,Hv^
Emj2
nuv {
$oH4
75Kb
[ r
g)z7
'&lc.
uvj;Ck
C fj
W\Gc
q6<{
F)Yi1
EAyu
aMh+
XV9T>
u'Ie
System.Security
set_FormBorderStyle
>8 u
[sV]0
Kj7R
7r#c
m :~pB
\'jR
:!j"9
[E p
2&TV
V8-R
xE@C0[P
LNq2
otqJm
e, V
x|zF
mscorlib
sLsI
?@13c,
+ J!
w3g?=
}FmM
//
;,<sk
-2$E#
.[ZC
2c#P
YEo>
6'J
x4]c7Okpx
C@wv
@+Az{+|
=R<4
GG y
]z;=
+GaRgst@
>?IN Udc
i v)
.##(
2xl,
_(`"
G+J
M t:
{5q!jyG
EnableVisualStyles
s2M
2-zmY[
gpPMQ
#"+7
$5*
X ):$
ZSq
Q&!i
fz cRQp
set_AutoScaleDimensions
*qSc5
n=/f
L3T
{H6':y
o0P0YG
, \"
q>/Yc
-)r
J d\
S#O*
hgFpt
S!F~f[
KA'51
nJf8
D2PA=
Mk+2
3kKO
y v&
JGnJ
f781_k
%l;1
rWxQ
!P3\
m%'
$\'K7-!
w5YT
zYW>
gj{|A
&A)X2
8{~!
_5 d
GetHINSTANCE
gA-c#
.`[W
qdRk
R_jaA"
X; :
&.}7
2&87
AppDomain
V2f+
xg[h
pUcO
]To&
%}FA
rTR.
1?
V^Ab
NzY0
`rHx)
#FfYR
yz/f
G 9u
k05B0
7=sI
get_Assembly
sR&?
0ZN[
cX}
oCI^
s@\!sn
^R
>u:H[
]-/2jm
wS=;5
O,81
FR"S_P
d4a)6gH
\ kgkdQhR
_JiI
OO
dTLe
E(YZ\
Pup7u
azbi
\"Y)
92 I
%8I?t
<mfb
Wi^(
v/aS{
xnG}g6^
ToByte
#_?y
(WR2
UMSg
Z]R`r\g
km),
jl5x]LG
k)/r
!;.a
VsNd
w H%
dO`L
Mz&+
1Hg
!aiLx
IFlsA
'+@+
+QAR
`z*:f
&0~g
<REm
tgKg
2h[i
nC1a
K8!Z9
vZm
h QO
ws H
N3KQ
-Ns68
#r lp
Am]&v
.Crp
qZY'
5\Po
j7oy
b8N[
no?R
XL$"#
bZs;
537LQ
_vku8
Zwp`#
U*7*
xy
Oh!p
KgtrcXC.Properties
p[$
Xa;B
2L a
i=iTUe
_ejS
jO7$I
@Y.i:+
#- H
System.Drawing
Xv{^
{],
HcLJl
Q-4Q
.8 4UM/
F5Lt
e8d)ll_;&`r8]y!ZHb(Ykri2%
Q(;
lTu-H
2xCdf;
-Zdm
}P=Q]&
/.z|y
5I{#
Hcds D}
*wN@
\WPcA
0h=q
z,"oy
`R]xN
?!y?
TvDH
\}jf
1 82s
x;Ni
9_+-
0[u3
;kt
@unLH
@aRSf
Q'y^
!|]3
#(A&
n+.y
JySm
{],b
Kyl.c
X' )
ftW(
e{Rc'7
Lmeo
#< 1T3%
HhFj
'F*0
vdR*
gtKa
Jz?M
S9n=c&
w`g'Hj
&x_
Wv$'L
/L)6zam
r9bw
gLVs
FQxU
?!|A*
EARMl
5 |<]
_L 1
tK|e
get_Name
xn'T
o l
m_3c
I<GE
JL!L
QR*E
O`KW =w
8FOT
?(dw
2Y6rH
Uuu. d
P:Dc
C|Wv&
beTx
B+e&E9
<wf8
U\4g
k $q?
(HC&/
8B!!
r=l9
!y3H
gS,
;FR@U
AlkVl
l lI
Zn'YMkg
V6=
ES$N
Padding
c9I2
T.tb
#xY)a
@2y+
9QGd|
=A-*{
,XvN
I Y(
s$Eb
c"m!x
(3mVd
@-t:U
c<y,
8U9B=
,*a:u
lc#C
? ;W=j+j
~aiPN>
a<KQ
{ "{,
u=bd3
WrapNonExceptionThrows
6{1z
xQ2G0
|\ a[
f8VI
%EV*
7)Iod
3P<Lv
ST e
wawn~
.text
Z{v:
(-w<
:N`GsU
_O}U R
!Y*e
]QD.
e+"c
^|TJC
S(xJ
H#=9
+9-4F
u_hVo \
D)![
$;@}
:Y{'
Gy6
cPp)
Convert
(b,i
S J
/B.z
N@U
System.Configuration
j%&3
nR
)i#~H
(sbf
-F0R,9
~l!4
g B
=%cp4
3WPy>*
plz0
]Fw;P
_Yae
,LdOZ
Y.LMX
'{6b
UGjEz
N]wN
rsi %
HSx:T
9_]2U
UKfF;CV
Y"n&2*
ae}"23
., SX
y;(@
SnLSh^=
7h`R
g tK
oo.V
m{\&
t!`_
i>W"d
/_+z#
LJD\|?
XsZ!W}Tx
W'(
qaM`V
l1Lsq
4H2B
v`;A
3 zv
Ch|+
/RAD`
.yIVB
4IJ"
A"S19
vB(`
)n^&7
AG?]
e~ /
4dgq@|
VN8W
G? S
853!
qU/
x cr X[
1.$nc
,.?P
YCmC
Control
PD&v
+T8p>
>S?5O
b]j*V
e^Y!
J)|$
`.rsrc
50}%
2n*0
Tm0`
Q_1m
x(*C
0g{d
i(l@
jUXSL
(Sn"
&k,'
"yj`
7 ^<"
G92)
kj~+
[P%x;*
g f:
S5Y%
v#>eI!
Yp?u
#P%2
% W`p
af3T
7RNb
YeR$
~,Yy
MytQ9
dIL(
*c^? B
*Tht
~ N+)E0
6caAs
]l0&
-+OX
9!6s`
?:ga
Settings
eBa>
6'&|n
;s
6Wd{
5lH)
V$i40
wyoQr
Pf(a
aCHwgD
KhMY
" H i
Q+6E
zfE0
6[N*n
8{JA+
++0F
dgdgse.exe
A rL"
v1~cNt
zHN@
?h6:
HPfm~
wc6_
}j5
OA@w
CultureInfo
0NEwV
>zKe
VJKcO
]:^H
Ia=f&<
JlPZ
0=y3
] A
[PEef.
p 2O
'~ E/
< /)
lK.<
t#1
r*wf
b(o;
("-]
u3HS
YBy
=bHT
5q-t1
Yy+Bi$.
9 BP
xP\U jt
&b`K
@ )6$P !r
Hf\s
#(DF([^
8I<
kr$8
SizeF
W}Jl
2T{<reb%
]b R+;X
(
|K*
o=`
uh0"
*{=d
7f-t
=PM8Y`
r2a "
yX{2
;v9"
+nP(
:T&8
rlI=!
NUjg
)1P<[*
'Pc
!M1C=
v)\).
EventHandler
BR)pDD
L6Fn
TS.af
>C
m/IW
?{e~
A#zk)
I;Hj
'pB$
#s\y`
cn`QC
J?ijkn
v{KcI6
Char
)^k*
' Uk6
0#uz9
m3b:
nNl_#
>_`)-z m=
f.<!
Ci{w
@Lc=
pvRM
7/ui
Hp4/
c! ]
A{!.
xZ+=m
tTUe8LsO
15.3.0.0
dMiqlE@
#A1a
v)/o
mA|P1I0>G7
!m[0
get_CurrentDomain
L3<~s
gj?F Tr
1~OP
'Fbc
5?aG'a^
,c^u@
%!'8
'H]x
EvY \
2gZ@
d4NHZ
ZR&{
System.IO
T9I=
}IjYt1
*W"b
-7yt
| 'Q
b0HWl
hZ>8
mv`4
\"f0
%gQ$
K4R=
]ke3
u?e>5"
C+C#
n0nk4%`
LbGl
=:u/C
+E Ha7C_
q X>
wjYN
n `
?.5o(r
k3V)_
_m!s
E1e_
xj P
r`?;
pZs
op_Explicit
VVz
Q_WR
iO0
Z\|(
{W'm!0
System.Globalization
|~<T
gW;rNl
BYQT
-(6O
0WP0
C`s_
n rV
tE)uE
9ils
MHj>
lF<q
#*6i3H
ytd;
3]m0<g*
g, O]
VGHH
UgmC]
\a.
Ox?a
5_6r
Hlt]
7sC$
$[/<
;uy}
5B?jZ
SYDC
u- B
?1)M
l=QZ$
c"#t
>n &
DC[_
Fvdg
z.gO
m\Pr
+ J1
:lH*
hXwD
'?wZ!
1?S^\
un9[z0
&{q5.
Q6^{
8na:
EventArgs
Application
dlr
*{p`
iMhG
Z]9&((k
{O_O:
;f%F
;D?3-JP'
#Z^:8_
~'Tk$i
\]_c
^p<&Qs}2
J&T]P
za@l
<ef
5@n5&2J
U,u Sm
^uh
A50QK
#3Ms
B&{j
= /
tQil
,| -
YeO'4
:sEy
vhC=q}BP
pEVo
"Xl rZM
@:)2e
CU)+
`bLC
PHkvTS%
MethodBase
#Strings
6y6
%K\!q
><(C
O ,d
TV(_=
Kgx
Z'3Np
L'rV
r6 ,X
>@"J
@nJr
%;G7
*k7X
rZ?B>
92us3
9,<5
System.Runtime.Serialization
Aq`
e}#j
%'G#J
<217+
GUfa
VirtualProtect
&&7!
Y8?j
GraphicsUnit
f>q^c
Ph9ToI
RYXY
$*6
)D,ZB
PbA
/XkV,7
WCVAN
M#4J
[bLU
*9w*
BW.H.m
>\Whf
jD3
!o-})W?P
"2q_
1sqc
{cO+
t`sW
t0yt
UXyh
1W6c0J
)$!J9 $
qrUm
69R r
G im
.0|J
mBC
nbLL
g9FA
6QF/.4
hai<U
v5 1
$F3lF
<rf#
f k.
zA}}
wML2%
set_StartPosition
u.[,
)H_'
d5N?:d:
lI Q$>5
:kbY ]
add_AssemblyResolve
u `w
RR;
MJa
G.VO
l:gS
x (V
x *@#!D
\4 C*
@C:5
f@Kg\
QO!1
0G<"
Fb;J
d*sw
=T-u?
]rs>n
$1A
]vI-
@_w
>p`@q
\`MK9n
ku#IG
N\m
kI'o ~,
U]J[JYw
r'fRKg
3I,v
ZDu=V
gJPj
nc~z7
mc5!
L^C3`7vnm
Wy0{
m.b{
Y|-'$VN
h& ,;
\vQm]u
s+MMO-
`eGc
^1Ux
m "W
A2:WC
`v!n
3J5$
;<+f
vK TM
=bGe
$8l~
86v V
2k W
?5.)
IwLO
,mTjh+,T
ebk'8@
Q{a8
jGwaB
!B=qY
Z!>8
PNt(
Q:@G.`
rU+A
r]l'-
) $)F
p.8/
> }
i1u7
?cM
`Dl0
tYEl
HX_
=ek-
STAThreadAttribute
t#1!
]e?=
Yi&YA[
z,2 &
[@ jj
5.>o{
F`e
a> ]-
')h=
g>[d
w-S5
KH62
dNV
&:ot
t6u3
h$]H
v|R6
+c
VbI7{
8V4@a|EZ
!tHK
5~sW$W
hEEt
.asc
lS3(Ik
;[Dv
hL@z
q? B
%b0-
`g3X
&'!q
% caH
:2VJR
xB^0C
r"-,
UgO.
r9JP
3 \D2"0
!&FS
J U
p,Ng
RVA)mP
|)`1
u8]
X"_D
OS%
Z5/G
M,<
7)$COJ4
8f!{
\8 q
:~8=
A,i2 `
fzO %7
%_xJr@
o}a'
yA~,
Ap F
Fm "
hxNY
"Vn0
I- E
m;MD
Wy4
!JZ
pWU$
BZ6)
,bH]P
4Vy<
SD*6(
1K f
HRE ?/
I$4
c"FT1
dRog
F-f%F
v2Lj@xEf%,B
\x WC
Mf8~
:EwC
Form
OQ]Dm)Z
%3[@
L@*^f
b)+Z<
)x2Z
8n?Lk~a{
?mh=
JHB<
t4s5
Ht/+.
aY9>
<'G/p9
jtlK
|Zm:
uDcV
SecuritySafeCriticalAttribute
H;rw~
i]xP
UmL)'
*.Cx3/W
b~ Z
1Duq7o
~U,=
3[bIWa
7l@I
4.>!
qG
G4'i
j,!+
]_6Cz
SIc:
_uTB0
W_ZP
m{7f
XA]=|y
$<pj
H]8Q
7=m0#
U8'}0
|,\
J59Z
(PQE
fR YT4
^VY1+
]g]
V3Wa|
wTyo
1*R/
?NCH
}_t
boM*
I9<V
8`kL
$:-7|
#GUID
S`fn$
-c
d_Kn
Ir~
Q)f\
Ql~@pn|Xi
3A>L
0[D@
bN ;~z
J&HK
bF6U6
RT|/Q
>_u-r-
&OW_
x_?Q
F~pR
G!i$
ug|y
set_Name
iYn_
)+0B
W?qu{H
o;I|
vCl'R
qoO?
=~;')
~){#'
Fm7)7=
/=Bc
H2>\
A]=h
Byte
/|Da
get_Length
w"vxT
zSd h
`[JS
get_FullName
<xB.m<n
D86W
I3 <
\hNZ
N3co7b
%wuI
O :$
yshs
E5j3
#mCF
=ET&v<B](
Zqs{
Yx_V
Read
ti14z
F?:y(
\4E!
,W>
tt7Q}
ResumeLayout
&)x.
O8 L
HiMH
0"[4
.R{%\&
8)\5d
=i`0
*|Q_
LQZT^}h m3
%CI#
X8"
ValueType
C8*q
[v}q
System.CodeDom.Compiler
0,{4
GuidAttribute
3;x,
_R,4
SetCompatibleTextRenderingDefault
~%W"
e e$
".b`
n&#t.*
~3s~
w0hB
*6K8
lTJ-
GcLKN
/J'M^
gJA~
d3Gf/[P
u Ao"E
'Lw9c?
d ;H
OAJ
!^1\
I&tX"U
gb/#3
}c:2i
ysGL
"NW/
8Lo\
|,0D
u K~W
>9}jjJE
KH|=
t_Vt
jEvDw$
*R8B
46l33
&<(9
"6j7
aPb
QlAJ
9Re.
gf6(
ZyFXo
oK ]
\!#CL
cYsf
} !
Pm,{
-(#)#
-bLu
@wj4
f[`:
2fl&/
;Lh3
nr-i
Q.k+
m9Jr
qu(m
6HkN>
#aP7
BnGU
LBEP
[V|
^ k
)ELut
qmP9ho
e2c/
{{T\y
UInt32
}v7
\ +*.e
#{ WvT
Sz89.
cJU9
y@jO
@kC`
~ no
,N$C\J~sc
h+\y
GH^
6^`m[f
s["i
ioEr
@5 s^
Qx8@4
IVAU
k ~l
Xe t
_&7*
m4wb
EFEm
6KD
*^z?
^l#p
YRr9J
A $kp
Yk|)rc
FormClosedEventArgs
jCY^k=z
XFQb}
G7B_S7?
\QaJ
naE;g
Nfk!
yd
zl?e
RYn:
_i`|
>>=u-
0 9n
8~4_#
6m\x]A:QA
e5ct
Id5<q
E1[ :WC]II
@Y)B
( f?5Yp
c|f*
y,}Z
"&;RK
J@bR@
P^l#,
.r<VC_

E)ll
TB{1
PMq/
}NVVy
j}vE+3
K7U"
e92K
grEu
u O<~+
d&$n
w7$t
OLFb
*tO)K
3[?#
f_>"
0<1
whmM_
dU#I
kfz3
Exo){
.cctor
/cu9W
5p c
Ht)"
BY*::
IcxP
Z~sJ
k pT
Zl}8
%L F
jmu(I
*G,S
kY&Cf
qMCqW
'H:}6
dx5J
add_Load
g-I'
EJfdqWU
*^38
!5fi
4L46a
+zWZv
SettingsBase
+l"f
L.L=
<$dh
@Y6'g
I [T
DA&\r\
ugK4
dK =[Vs
>(l Q
^NySX=
qG#z
wa< ?[7
] T;v
y!3n
,A}b
A:#Z6
j'9$
h+)O
DHZ$Q%
[\~hS
w,wED
>J0`
a"es
/slc/
kVB(_u
@ dj$
@ -n
\N/t
q$iv
lk< <
}(x1
qE>k
5#5$o
sr6;~
4t 4
e9 .Cr
&osN
E"Pf
[<rr
SjH}
9S<]
A6gZ<
widt
.ctor
+ 9!
mI7'
0_ED
uwWp
hW7Q
5<6&
^ !m
^xu9
S<YN
!This program cannot be run in DOS mode. $
!V"y
_zL?
n%Dz
2]V4
c]hN
N ]wiD
Zt@J
t9hJ
6[*Z
5A7F
'N R
Invoke
=8QX
mUCr
JT),
_ZPg
qRch@
WiFr
/t,#
H5T
YJC9
4n 4
[4T: _s
L{/' K
R$P7L
lvg6
HRPe<
yn).
k&"X
fJx
Q9y*
](D^Bib
w7}E
X=iG
XGt-
Nz)k
d g7
"QicDmz
fx[mOU
.w@K
5zN
Module
Uo#L
|DLb
TrDg``
KX;A
^ H_t
UkZx^o}K
O Vq,")
dgdgse
z>W1
g&6m
]nf5
:G032
.#i a
~<*>
@G C
s ;n
@.reloc
v#>f
>3 b
jsz1/
u2ex
Z:g:
"V B
G2PI
a$WD
Fh/a
V[0fi
>3~lQ$
#: ~
bDx
f#Z
.A]<IHC
00#
y59T
79a3ac71-ceef-3f.Resources.resources
mX>V
o?ht
p~[
2X\f
v$w6q+
np d
>1]}
8*H!
9: $a
(pm#
LV5F
:[i3
f] >e
v- D3G#
!0_+
O](2
ud=A
S:,u/
e % a
!D&T
(h}
Y~_t
i^zJ
r7ap
@Hj!
)d380B
p`-
uny\CwP
6iYI[
zc~p
0!7
-q6p`
plT'
@f[Gt
#ia-
hD]_Tb
^i@A
4B`z
kNS{W
".}8
+]g90
Y\m$
Q ATXh
8wM#a
!Sz\
H>6y
=:$e
ylLc
Bke*O
U(4uX
892
[#zs
L%p
P;l}2
MUCO+
@"{aR
$r w
B*|iG
E%hw8Q)
OMi!
j$'n^a
{$@|
BbE"*
0 )
(/k
z!&.
CA$<
IzO
Hg'p1
;90>X
NZWXqTcGjLkBkDuueqqgAElZNZXt
Qf/
LGBW
YRfhi?
P1^"S7
O;)R
#OU,
Rvf
d}E?3
But
xGLog
blJP
\gOl
4ks`O
W=v
*m/ILA)W
yTh!
<F0F
0i,#
d*GH
gGy6
)T5[
:fCm
ir,>h
/Eo_
VZ M
d#:@
YT<
'eEH
dy43
}J%4
XG
B_-~
?b0J
_G|L~1n
| R8 b)FoJ
NB_?
&{X^oh(
RuntimeCompatibilityAttribute
p+|1
QI]I
I($&
VmJp}
^979h
Y+^e
:gm
v]ve(
K])q
2U^b
Assembly
[?m0
6R{o
T%Y}NIg
*Qxv
OgSn@$Y4
)U&_I
{* {
Ka<.
dR!7
'$05
3~@"
0=9x
V;n
w$i8
_`[6
:a9dl
H] U+8
vsDm
nx{I
sP|:
nHtbU
~{j
Ll%<
2dtl&~
v<n
Y5Q
00P@
B m
2"j>
3X5?
5P8G3shBk
SuspendLayout
set_Text
\/$e
P)2O
Eqq8
M- ,J
G|k[
2wUB
!X][p
/E3xR
b#Ry
tK=.z
+SUvJ~
#Fc{>
%dGE
ACT/dv qkc
W& bBQ
lL G
GI\#6
/FEcl
Kgkj
2hlB~z
:.]f:
D 1"~
1i\\
_<iB|
(H?Y
hfz5
1H_Z/i
>}1{
set_AutoScaleMode
9o1e
k%b7
L)";@
0"KI
,k"
Hz`6
TN\{
U/?
qCg'
dX_<
9a,
A0:
W] ~);
?a;>
tM)3
,:"
S)"
BlockCopy
'I7 B
PJ
Y@K9
kOU=
iPox
EhsP
A.>B9
IContainer
rCU6
JPNp[
S2WQ
Y'aHR
-i?J,
=.-I
>5C*
Bq?P
OsPa#
'j{
e*n9
Wk&%
p{Gw
0)?^
]#8T
tn`
N"'T
? mP}\/
IY%O00
P@ElN
H$q=
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
h3uA
ISerializable
T}J!
LcC9
/Y\n
?-_I
~s=Ns
CmC
.6&6
$)wi
(:bo
="HUx)
DjCbvR!lX
?ds|
g-NF(
FontStyle
D+#h
%\(jx
2L3o
DLn#{
:O1 Q
LY`i`
klfE
< U7 [
4rjb
.CG:
.XhFc
Ap48
YTBl
$m3b
R xeP
#Blob
Q!|J3
n<gu
Q@B
HtI
[ vA2
,/u[
XWSj
x>Q{&c
Zi;'
;\&-
%owV
^YG"
iuCyi
{ g
dC_'
DLSpG
7747L
+?uFW1p
@taT2
m 8|y
[4:H@
_O16@\
*[jh
;r>;HU
ResourceManager
2\dJIo
PPTq
< 56
;M3 t
o5t~
],Yl
!+36
M+T ~L
mHv
a_ E
Wuck9
qRcZ
&aimO_ [e
CV9}6
/%]j
3/u/y
YYImv
J-(P
ContainerControl
get_Chars
<CQR
Db!j
VB~'',E
r6Io
u~lX{b<
fmC.i
[q%YL M
]OAG
e&0Y
*!o`z
xfx '
7Fts
1Z* }
{Kk]B
s (+
[ +2l
D'3:
GsSM
PDYA.g
zrcZH
Q5bo5
ReadByte
}Us ,
>8rm
System.Resources
d:7k&Q
7MJ(
-nbt
KWU]
9erM
0-<f
bL ^
]t-@
AQ*[
OpOQ@
`EJ"2
93 U.
Z6'K>&6
*UVV
%0~
_viG
L{>q
d4Zo
~wW6)
OifEr,
W+*@
Q;xB
cV p
b,d
X39^t2l
- _DhU7?
ztV1
i*Tc7
@(XU
;3RK
]!5%Q
M{I)
meQ9
g8=p
RoGa
ju D
$x\m&
hqBH
cj1;
|yC>
GnF,
]%^
z;p8
AGolcV
IpZ{
f/`6
1av<
T Ah\
( i
)^~h
I&,S#
^O|,
)YOy
|;B Hx
")21
j$[P
pK~;
vVXN0
YsI <
g;25
9R=3
h s:}
lp<o
N _0$
6xH\ j
st- ]
VozVoC;
$n=a
jY< 8#
/T<-
J![T
T%aB
a$.zMV
F {L|!Y
THs^
u[ *O (%d
.:{pK
Type
~'I
zMy%
D s\-
`I*_
hG\
P{BZp
>2ztk`
l_.
k7Ou;w
I Yk
"cu[X<F
eeZ<
^kWH
d;En;k,
Vq#}Y&
N4\A
\ ~g
k8O'>
$K1_'
_1Ku
W:[(
l'
K#WF
Z1Vm
|r ;
axxT
`5ij
?|i:;
fsc
4rYM
0$oU
~klj
m `e
a9~ac
_nv s
Y3eT
?ZJiDZ
9At4G
LZF.GW
"m1K
ys['p:
w\w[
iv^~5N:S
<cD9
/Ln *(P
*$:S
P7}q
pTAEs
jbl>
;3of \
zH*
Pp0[
L(jr
DGK$
/Pe3
D f`J@
4kxl
M 10p ~Ttd
_eP+]
O4^R
z"$/
I3Vb
~Gau
$!VW"WtR;;
9J^4
"!k
R<00
FRi.
_Z#\k
EB8#C
ep3 L
4T1{
K+Z@
O%tK
A]CR
:}[
$Yg#
d84D
D Sb;_
OrlT
1!1e
E3wq
U(t)r
A^TU
],TF:
C N\
<;?s
?/gZ!
ny|
t*7ZZ
Fd g
#c{eA*A
=aw]
fp<L
P1 =
!7Rz=
}4z
$s\+
hb$^H
Ljf/
G|"`
2% ]W
c|4uH
]()
W!R-t
-Pv(
JW[2
dma
{H[ v
kpyW ~i
{su9-z
OoC
\0eb
'/C'
o`,:DFo6M
:V *
}Fm/
-=j8M
I\eZ
fQ`
q?].vU
/24;*B
m<i3
!H;u
EBVv
F&6,P
Hg'l
(6}*/
KU4T
@Yq@wZ
2KI8O
ix!Q
! };
$LtJ
H'$|
@0?$K
>5-2
}d>u
OpJTv
=GHm
O,SI
G, 3B:
\9FF
AI~g
)wK!E
m5((
*U:3
fkl:
@6 r
Qj+"I,U
Cf1StExE]<EYT$KXaJ/`o~0m$
Dt22g
H sS
*HJ
_Assembly
,X|#
n0D
"lj)/=a
System.Reflection
/+[QK(
$akR
<?Ls
I%{2
hHc_!
RuntimeTypeHandle
\H+
Y:1X
W%g
PyL?
!a@3P
2p]H
# Kw
4C ^
j 7Er
x\kh
E)9i
t]ad
ICF@p}G{\+t5mEw`?u%Y$phcj!.resources
E<kC
EA\t
G.lF
gG [
B*"l
k E/G0
{*M@
MeXD9
=~5)
|,%+
T5VJ
(f+0
System.Runtime.CompilerServices
IwHR
x_)3
Kc~X
h}":
Kp]4
<wemE
>l7!M#*
Ob&B.
R9&RY
$V#e
/QmF5X
LEIm7
j1Zl
op_Equality
l|WdR
e'9|
qUwv^
XE J0
ZTAz\
gtpC
m")4
Y'5IpGG;
hy(a
l%,/
)uCe9
TeKFjI
?$6k:
vfvX
7l |'
r")+
VQ-
U*ip
knM|
NGuU7
V-<U
Yn V
$FB~d
<o M
S)Jn
PHZ]!
LOpn
k | Z
@$|?
dD3Zy
W1^a
\Gg1rwY
xA1mF
HKI
TJ;1u
3q+ J
w! w
~]q+
h?8
G*q%(
uoU:
;3-E
}9HT
Ap`X
BC+Q
,
8ugh
f9N7
BGXj
XNrI-'(
C((*MT
(6^X{"
B< h^q
Tt8n
e8d)ll_;\&`r8\]y!ZHb(Ykri2%.resources
l";S
}FKl$
Z}#-xZ
=?q"qtZ
!CJ.
n@Dd
^ ]l3
Gsk|{
_> ;
m_rIEy
L2|a
jI \
'p']
x,(
8U-a|Y>
;Y>ei
y>)*
(RxZY
nHQwfg
%Uz
qLU*
IVe?l+
-D2x
:zti
ci0W
9Nbg
J0]F
(h2nuh
:DQD
T Ym
o_nu
"c8dT
iW""
DPm#
0;P
MVp4
p,DM
M+e=Z}
xsRP
>Zc(
ju@7
z*GuZ
jSeF
YU3*?S
R0\a
w/?nE
&x5 Ji
/@ y
DUL{
mscoree.dll
eoAk
N9`d%
Js(W+Y
inL,
_sR0^
'M$1R1Q
&Ga.9
IMf(
nj]M)
I :&
[[t<
vFJq
ZD/$PB>Y&
X^ $
Dispose
,g/G
">Dr
.Tu^/
` tN[
F [
6v~"
_2,1*s
-+[;
}g~
tY y6]
4:jd
*+%a
I9.
A*|3Z
=S\,2
yh\\ szXA~-\,B9#"gVy3<>E;a#.resources
$KJ
)qW[6
3/60L*93g
W>B+
Z&,LnK
NR/k
.$SJ}
bm$w
JOM|
DiG0@J
BP(r
9*M
nI(6
set_ClientSize
]?4t
Dw"k
,JJ]
H?3
cI_OIVX=V
K_} 6
4sdV$
Vs%+9
1h+7
h,P1
`pQ&rl4R
:1:G
n)qg1
Y0XA/)@
e$*"q
{fZ%BG
A@$+C
o|j+
9BL~
F*j
*Yt
-hb^q
TFU%
1xre"
A3T\
'[@>s
ZRRA
<-f,Y
BSJB
wz^V
;AS
'p/+T
Kw~Y
JiD
.{Z2
Q50$m
[mDd
S5Q*
%{1 p
oC?
*sx
+>!l
Om/4
x7%`"
+` {
y Qb
5u?]=n5'e
`&ro
M+ KQ& }
/@;.
b} F
iKlZ/|
sS~3
sN/`
VsEZ
:t.9
]4:c
gb/%
`9,P
g ou
poOi
i!!Tk
[7g]
0BhK
Q+zx
+-u9P
^m,1
vNp^l
zlsj
&wnq5}
f^:F,:
_}X@
qK Z
R Q'f
bZ@{l\>
jOI
7AdO+XPE
n F^
w?_!p
tK|y
9*'f
frP$
x'Q'-
8]w/
[+*]
18)k
*9;Dw
/9}E3
d5BlR+*
NX%mHg
>]_Z
O9-V
J<%o
DE\u
+6u+T)t|
=lnM|
]r/.
0XQ
vwO?f
=rWc
2(SO
#4Qd
8BNr`
RaFS
3;``
IcM+;9$
}Wi
\kAJ
#b +sY
dS5"
'6~%
LZ4i
1FyDfm
DlEb
2isuS
&TB:!
3]V0
~9lT*
\dd9J
).{o
\-NC
GetObject
_0eH
r =I
T@m!
:DQ97Y>
FF98
wW#V
rigO<
E)LE
Z U$
z gP+
XY,d,
y2+g
blZ:#
95m(
/W3?
m[+E=
eOPW
j)~+
'^J`
Y/HX
trFE
Mv2o
q|W+
s2 M
)$Oi}a
;MEruH4
X bd
BTV}g
08Bdm
|njJ
N1@)
]+5<
QDLA
VcQ-
B~
nVS2P
rv gjf
yl[*
,u]hbo
msW#
uj,Al
vF={
w ="
5IFF
yrAU
5Z1,
!):r;&* zu%?c
%R'M
e=wqK
.[P4
LPoM#
p: <i
>&3}B
gtx%
Kj1V
iGY)%7
H!|(
}|y+
I r XO
E5]n
L; r
$HXn
w, (
}_Z[
ap:7E
$Gm $#T
u~FW
X"X
@)b
#98 7
L@7T
d/`7
RFB^
rt<l.
L Gm
Od$j
c@ vF8
+W!!7
9*7GF
\}no
rjYp
Bs/^9
}AD
lI7x
xZPK
frwV~
YZ ]
%vh
Bu0Z
Ku2eN
t3>z
5O84
get_EntryPoint
Dos|/ u
5]\qs@
/O?y 2e
CompilationRelaxationsAttribute
}Ar
tAt]
fdWliG
{$%8
3q'id]
#r><
AsmD
L%Xm
2E60k
iK /
1/-r
& 1
xd$D
3vsY
<f(3#IwV
:QE/
(]|y
;4[=
l5IB
N !
Hd $91A
g)'i
+lSh
3qE"
ResolveEventArgs
YZ (
OEQ#
RU[h
T GR
LFT' jD
&Z56
*%X;
B#`4G
j+up
([ 6s
^>qN_U
CD)j5
<%C|2
c<pi 6
ljg=
qH;B
Xsiu
5D=Rz
Tp_ t
,;yH
3;wgl
Z'?d
xw~g
bR='je
Pg"=
x(@
c5w}
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo> </assembly>
Hz6`
#0XvF
):Uf
W:g(
S|!>:
Q<Z5S
7~KXe_P
L )\
9 YC
i
M/s6
&u[R&z
nd2r.Q
\"W
w dg
>I )[
:6ib
W,t/
_~n|
+%5-:
S=\9
#;@6
)Ie
3c;/
RS\S
WsJA
!O6
$Pu]
bd dp
YYmY
%:+'
e pp
56N?
| +
x7l
21 2kipG
'"G/
@wU Y
w%>O
HBM o
a&h
@Mc|
~Wwh
no%f
qjwjU
-q(e
fs)y
ZAl
|7X6
8GaB
J" t

0Xdh
oyex
d p@
15.0.0.0
bB{\
Z'z vI
vj>V
fluL"
1s!6
KuA[
dJfQ
.0oT|_F
JMd'
r& 'u`
]+c"e@
G0nbo
kernel32.dll
]!oX
B[AG
$v3q
XI %
A4/J^s|
{rHB
.JeOm
+AP
}$>Z
QRaL
83,W5
d3Jt_s
Size
wH7Z",~?
-Y{[T
6+(E
Cf1StExE\]<EYT$KXaJ/`o~0m$.resources
\`g/
e^;b
igSj
_t2 c
Stream
)&2L
i\GF_
Aq-YV
[av;3
b&!W
%PM os_
>F*f08
+=1
B@*X
*!u
^3e
#fZ\
9Ef?
c,&?
jABsn
J(>|?
2ibZ
E`KS
b1&+
+| t@
P ES
g+ F
K+R7
YCCt
i1}
:'UB=|L
}bf
Gk/'
G23:
VE]q
CyU
o#kH
[Id
`du'
fS)h
gSi"
52'R(
=vZa'0
.&m* Lf
YhBDzy
nG}DY
Mw (x
3Cs9
@(7
?.B`V
N-Frw
t0~ 4E
aKO7
E:8&
5DN}
^kp7
c2{rL
nusD
P}y
S`Yce
03A/a
|O,L G>
a[yf
eR~I[
|_{\?
tY(,
Tr4,
0`EG`40
0*>@
\c;2
5!U>
QyzW
-OlN
sduy
p~Mn
mMM~Y"
5`/r
5(wq
a;_r'E
t kh
#eZ b
U0OO
2@Z2
#gx1
m?O`n
Gsk
CkG3b
?6Ds
Icon
j k\Y
S-$Q
gRN
hd7
#"BHD
#Z]m
?I'88
}V?7
LJd}H
H8c
5CuwV
\J}Zx
L@VbP
!uA?
X c
g]6X
Array
EY"]
/0Gn
VS<RC
~5L?-
i _w
sR1
M(JA
J`Vb9f
}/k
.^KW
g%I)
WQ8hn
]ti
82iz
MemoryStream
@%[W
UQ@,-,@
=#es>
7b3U&
4=>
ynM
kWg=Qh
u.+0RW
8N%a
F,tM
$5a
Ud-ox
)X 7`&
Ev?z#
ng?
=R!X
BH Cdv J6
.S*l
Font
o8kT7
e7@#
NHIH
{SnY
rTI/
VOF`
zoJW
k^q
cxq'-
-1(T
S\yI
Nm~T
sn o
MsjR
V.ok
RFA!
~ba5*+Q
[FZ91
ICF@p}G{+t5mEw`?u%Y$phcj!
yuK+
KF L~wJ
eO97S
l<E6
ywCe
String
c Z{
AhhU
_CorExeMain
'7`n=
d.O/
&J")
~xCU?
\dM&
Jad7
9SC>
s%52
= A4
$CKT
\RS$3
Rz~L
jIZ~
^!-X
=uo4
c#wp
7`PJ
W>:i
=a^My
InitializeArray
dm U
^#?&
L;p#
71M4
R]U%h
#-d[
>d\>
8eH$
&:.
yy=K
uuEf
FqT_
h!pM
KoOP
& SB
"XzB|
67Y
\YVmC9[
?>h>Z
oAy
EditorBrowsableAttribute
Q?'@
9)>b
ed:[
yh\ szXA~-,B9#"gVy3<>E;a#
W9 %7
&QJUTB:
^H&h
j ^ZT
&-~
I 9Ti=>LI
pnz(
8mQ9
qLY!q
) 2;
\X ^j
tv%g
}F Gp
s ? G(
=+PjIE
' \\0
^"MS
a;P1W
iS=8j
DwHP
IAo'
_RarD
. U
9&K
G|'X
8OVd
kG<
UD+nD@a
X?{S
aFe lR#<
@X(UN
{*DN@
Load
z1k&m
get_Module
| `
[Xl
w9-C
=%*}
)z6n9
*q8
q1@$BEc4l
ev9(I
3,F}P
\\!V
^}m,S
: mp
ys hH
%X:g
$-yj
>AIM)
fg "
dlAB
@j-tS\
x8!>
Ph N
r,m_
;<"\
B/3D
:ZK>P<
kT1\|
]gTU
[NU,
~]^`E
US@,
^"MNM;;U
;PF2
Nd0U
/zMV
. J
8!Ms<;c'
- _X
&W$T
>)[05
QYS(|
{do{wH.
%8T")@U
}jRu<
/tpNG
wOY'O
bjG7X $
Vkzc[
qQj
1y,6
1xKST
LCB:>i
;98H
lu7e
dQDS
wXT"
W,yS
</UC:
SC ?
[=mi
[pD5J
$n4t
Rr|m</p
=Z/c
0}]j
RuntimeHelpers
xTr4
:DpEQ4
$tw~+
(1}J
\QA^Uq
t.l[
vy}c
'M".
-d3?
(K9d<vyK
3Ug|b
Y}Qd
l=K_
q?Xx?
wvE}f
F)4pz
f =c
g?_+9
l+}R
wj 9
:+l$
W8i:h
vGCN
== U
Z;6o
|A ,
m LP
D5cr
'sH\
R6 v4($n
x=}Y
$4tP
Ajr]L
\oMT
V@2 ]
k! aa
Object
r6}i
T YG
7B:7
?(wa
uxj,
2A <i
ComVisibleAttribute
3System.Resources.Tools.StronglyTypedResourceBuilder
Gb
L M
*:)oW
)c)uT
3*ilg
<p<wT
49b3
/)>P
R4`M
an`1L
h)PK
6#N
RuntimeFieldHandle
z12wOW
OJly
rCKq
h "J
D;KpQ
%YS,
nu\[
PH r,
YmMl
KL%aT
r4- x
_[T\
l/ n
`iuB
~^tA
EditorBrowsableState
;}C"P
u7w*
MethodInfo
?V^]
$Iih`s
"j<l
i-s6
Rv&]l
*8 )
7_.#
J[c)
iv)B
{$#?
1.0.0.0
E,1 8
dE}%
))7q
C3x1
)(},\
<e=)v
d_~O
'k/d
ZwZP
OD!C
QMVL
&yr0
j}Ct5
Adc
VB_a
a4&?
>xl)
n%~I
F}2F#e
\+JE
nw|9
V <5
tlf@'d
6(z2"/q
U|48
- sf
,( x
*]E,
|UNa
>}Py
<!SL)
y|d0
2Rc0
4n84
LtE%T
5T7J
5e2)d>
U u
Default
YqrF
>JQk
PyXv
AutoScaleMode
Z6H6
>)Si
3Uhu
RA +
3pqC
U1 ~
- `m#]A
.XjN
:7( `
6bB
pek9
wSP0
ml)Y
8Z"v
B-Cs
i-W
; ,
~nWbT
C@kn
Imv a
jNIkeR9<"q
843D
Jn^Y15
@6+[
G(^x
P8DD}
t9;t
H{ U
[`252w>
;F3K
<<*_
e;8<V@
&mPk4
|R$_
{C+4WQ
3JP<
#W /O
x^ P
bx_0
%rHT g
e^+
qxYe
e_1@
6^]-
-F]jd
/RI
uIJ*
2/3Tw
o;E
QH=4
?/Ed2
%f"m
N<j8
]0I8
-~Kn
3)A|
,yF-3
{",
6qdK
gQCWY
'P@Z
Zky%Jn
KIgk1
*CZT
cOoMrj
~{S(
H:\0hM
^>ye
t@bu_
I2MF
U|N3
D"??
)`Uy
+*hV
|C"#
RRk&2
r#o%
$(mZP g
J1~5Bf
.=o)
@'9T
lO~,
rqZ1
?$]IR+
FormStartPosition
Ked@
cT%Yv
(Q$X
L`b@_
u^L g. x
X8M
lb +
OX Y!
kO/WD
^js9 }f~%e
>_*O
T =
$ec47bad5-2f47-41b9-b4ef-bd1befdaea68
HBsM)Z9
QVT~
8)}Mw+
[g4?
^CNxZ
%]S)
*O>`
wD6_
~>!cL
3gZL
6rKB7
4x \
aVRE
9aMK!
~:.=
iSS
[7j%
Ks%D
WFBw=
8K L
(1+h
|m=[
x,m&
q=Y5
\ L@
U1).q
nK6,
O.^&-@i
eBQ)
l+r"A
@crV
g_/v9+<y;
_@g_|m
ComponentResourceManager
iRl@67
4SgA
$};>GW'*
eB]1+}[
Ecqy
~_s4
Buffer
i,I
o|x*o
AVJuU>
LiS6
mn6'5
}Q{ t
qr K
sJR0
Nk#
dk^C 6)
\WSZj}
5.Z*
h 4TP>
CTi.}
Yjdo
D2w+
~-H/
O_Jc
rO\g-
U]^#
q=0p'
}-h"
c cO
1Rg>
%1TJ
\FR4
(p&=
GNI,1p
*H?]Ax
3e~?
2l E
y6yQ|
=wF?
4n5wi
% IKx
Ph }
34jX*
\kyeM
>W?z2t
= bD^V
;,,"" q
#o.{}"
2yUq
WIn1
w.J3V
}"tm
{'(qO h
ek'I
A`*O
CUv2
4@1=A
L@Dj
\7.H
.ZOc
? o@
T`{W
G!mrGNnU
I"t({
xA@k(V
| o]
#cS&!
Oj5oL
isY.
4AAl3
ai:_+}
/$Tf
cY^^
`( oWA
5[1G
>,G}
;C/r9
S0-'2
~/h5
> D;
,EVQet*6
:M4s)
&K5_
Xx>
L u,
8L(hm
TTG6
A>T
]UV>
=y*K
]@q
TL.^5sy)
L= Q
-Zf0iQ!
i(l/F>
+`t-f
}4AA
r;]
rNeZa6g~
iM.H
93!T
a+/5i
:LDJOP"_W S
?|<L
v2.0.50727
s\=n
p 6I
,S9q
,.8}
&{;r
,pk=^y1
f"I%
nf!pW
(G7ah
)PmUd
=[Tg
D\6ne
gJ:"
8QWg
*e#?'
<*"v
iRW[
z]C>Y*.]
n?Yu
mIkc
Dy6V
J5|4
TBb$3
\'Fn3
xPVL
]Co
r/eT
6cjD
{ ms
+6qG
=MUw
t,LPL
2E_p
L/Pv
}%BT
C<>
C}'d
j9b-
VM%R
eI9x t
WF}
p/Lt
]' _
!/eQ
lO]g
:hg?
^3h63
Lam?
&`F
"jJ-
>cj i
#8/ 8
=W8f
set_Margin
F:pN
<R-w
;$Q!
{m~J
wI)r
I}|>sU
GetTypeFromHandle
V)6z"
9R+8
z oZ[t> H
=UUH
<4(|
[,@#
6p%8
hK.
3H;J8
]||Un
"+'
!Hrl
RgtE
%>2C
5Tb,+V
J7Br
>#ivuQ (
9Qu
add_FormClosed
c(xRK
WyfZ
[P.*
F)($
3K{H
b(5P
!.<o
R[cS
pJmo
"d/|
{=\$
OIfV?u
Rashero.Resources.resources
FN6p
cgV#
wSkr5
Y@QA
V#0*
vt z
" CYD
s(f4d
}Gd
YOco
K,7po
U GT`
^0l_
j Jw]
7c *
mkF|
^fHR@
fu<F
'5'K
NM~Cv
pP8P
M=?j
86'Hq
+r{a
8a#(
w"b{YJ
eC4x
System.Runtime.InteropServices
<*Io
(}?E
ZU?^
}AO@
@X XT
.:mR= e
b<y^
@/Xz
gvM'
]Di)
Math
E{p
kQS
;w!dtY
>weD
qvfy
K C~u
g >|T
,I
&T\xuap
1Q\8
;w6S
ZE+) }^
n9Lsk
ldHC
e 1~
cLc\|>
2)<f
&'|G
1, -
p +
U1Z
vyJ
hE/,Yg;
C$h_Im
SuppressIldasmAttribute
XrdA
PaN.
^R(
Y)k=ID96
Ne6-5g
W1*MSk;
UX?.fA
A3*B
1LT
F;lp
|Qm<I.c0I
!$ *
BQX'
%~DW
B -4 SC?
\W_M&
G,&|*
!:`k
2lI)R
I5$J2eY
d]%/
0)$#
ClqU
"#^:
Ru1c
H7)x
_Yf"
bt Fk/
q$U4
vO?u3
6!@|
o,9n
L^uNm69!\#uX
)H~[&
?Mb~
ZgU%
@-z?I2k
'9Y@
Mx"
aXpr
4 r"
/P& :
9ZoA"
kqXY?
2]gj
# ep
W [G
System.Windows.Forms
set_Font
Tw1P"
ANs0*
(!y0
ul*f-8
;h~V
*NaG
$[1)
DMV)
='J~
*xl(
Close
C/PF
u B{h
'#@Y
)L<Q
-/bU
IDisposable
C-<$
<%o
Synchronized
(m4t
8[nQ1
NpLJ
3"B[(
7"Y
LYS6f
0 }U
%g];
|q0
gD3V
c <[;
F#]U
XVqa
eD.~
K><n13@
vg2l.
co#AN
DiRM
tA#`phvS
F1 "
WEV+
/r`!=|-I
5 Ad
FormBorderStyle
OA9_Vi$
kR5+
D}|_
lad:
>ZnQ
@R#a
y8*&
@,f|
'jIIA
p|0<
3.am
{(wY
qo! 9
7I)D
su*V}
WRx0)_
f7=Yz
<B';
*U$`Z
Sy)Yf
y?Pv
:#!a
<Module>
CJ4M
@Yi
E|8g
4w=)4O
Joi<"~
07gO+
,"d$q
xKP2F
^L4*T
) =|m
uwQ3
Oybo]M
GBNb3'
Y]pt
<]+'
(E!Q
*d{P0
k+Mcr
kKAI#
7i8_
[ij^(
g|FY
L< 5
WD+^
IntPtr
:j9}
F Pat
Qs~R
YOB0e
FB>1;!E
h^}Y
u2%P
ewE
lSh'`
*jC?
=|g6(
l|Tz
~MMq
3">@.r
TfsP!
Ed*W
a,7^
&<3Z
Puxw
u} *:
;,C%
~|Xdza
2jQ7
"?q0
&3V$
Uv^+
`/ME
SVwH
.RLk
|Ghs
9$]q
Ym1+
xD<]
.{]F
LA33Z
'ISSDJ
S d9
8k|*
mUKA
yjU5
&nX ;
^=&4
; m2
E&XQ5e
eQ[]
,(<8*
OjL
n R
X~F1'
U>x6
\H~}
X 6w
53HTS
dJ#$
@OoW
$kEb
>AvI
Ww.w
e Ly
>=Bf
4ep<
ui@D
NX/[[L
%2)wO
k&*w
dgQ%
bYYCwA/
Q3{*a
av^}i
>Fd"D
a)El
`JC43
!u}E
)%!H
O5|g
b@^dg
DHO[
[n`=}
miQ9
+d;2
QqX8
<O=lR
"J`8
O117a
L/d~X5
:6ojL
Write
ApplicationSettingsBase
MR8'
}&"
'ZF<
O{Isi
"a6B
*(}'
=:s5.
$UEM2
Tac{
!lD!/
S~'x`I
5i T
Z<@Z
0.T"g 0
2TKN
\dT'
JDT+[
8{%Z
+gY{9
g&.~+
+ _C
|B K
)uX+
Ay T
Ns -
(SZ)
pVPwk
&RoW
=[G2
BC7,
+["
Sy]
ON+?j
y98C8
v7aV
FormClosedEventHandler
F)#ev
%Fh#@
f#UQb
PhWg?d
4sbE
_h&L
`+MV
YGvK
1{G$
S`V 9y
AhQ/
J]CF
&lO%
"{dx
ZS#FnO*
,zI<
A:2,
L^x1:
[,wz
ife
)p _J5iP
c:_\
S7L]
;<^C
ecDsFV
C2p7
0MY_
FOG?T(8o
6+Z k
ol> "
Ik "
@@K\
%)SX.
)cM"}
s }t
Wt5K
` nA
tFRR
(yYO
Y&4x
qfAr
$2a8
I*paR
zgJf
sQWz
wpD!
21k
=SkI
k|F
Dch A(>;
dNB6
-h d
/ 1v
u )%
ry,!
Dz/-v
9R!{'_<
:bmp
v<Y8
F3qNU
&w(uq
,p
D8k#i
fhf]
n%"
N ;1
10rQ
ynzS
{mUN
.|>[
:PqHs
PCBp)
TFJy
=tX(
z'ZP
Cu?}
lBn<N
n iy$%9
Z)=B
IP3Q
sDd:
O]M{
Ke3P
PWBc:
@Z3]
set_Icon
System.ComponentModel
%VXHE
U_edq
Fn_8#
d#u5
KJ5b
{aS}
cKE!c
i_vK
Z)z+
$(p5
+>g
y6yE
)k'N
kW"t
[iaG
m^*u
G 8G
pqkH
MaFkW
N,J]E2
8uMQ
e*Gs(Qw+3}
THF7HA c9
b1XZ=)
a&bt-
hsmD
q12]
[l`]
m_#i
YQec
nF,B%
qFYq<
qW!1
@^KD
}Os!
Y2@`S
g]e{H
|!;0
C! '
]/,s
^lBZ
(AF .
FIIN
HI8X)C
Ob0[
x/Fr
mb G
f'}
r4iPi
F~~7
#'XTj4
.Rgi
DJ(1y
Mm+
qV,N
ToKB_Y1
rf*M
vnJUq
YGQq
m0d+
9Y0j_
@$;At
AssemblyFileVersionAttribute
iW>_
T qK
#a %\L
{'aP
9UuI
Z=Qvk!
,{%cR
KX4@
+? .A+
C7 \
Y 6\/
!L8T
[P S}
9c!s
k iR
tAIWpa
KC/|
F} 5
{ ]3
vo{y
eJ,?
`rZ/
pU_Eg&\
T 3}B(0
&N61
1\+*Y
Pi-@
e2Rs
6(F7
GeneratedCodeAttribute
/FQU
`;E_h
) uQz
![lb
`1 9
\Nb a
s;dH
lF&/
T}R;
6<ZJ
Omn^
1r8D
@*}G=
![NtH=
P77
BLSt
k9)
'ntq
O@|n
DEl<
R\<g
U_!%
*y 5~9
oQmS 8
9?%Kh
N'0"5
hV pe
%WD(
2aI2p.
LW9W
:!jG0
2;0W
0y'i
5 hM
s yI
/Z3Z
J"X~
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven05b_64 Seven05b_64 VirtualBox 2018-06-05 16:56:11 2018-06-05 16:59:03 172

2 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven05b_64 Seven05b_64 VirtualBox 2018-06-05 16:56:11 2018-06-05 16:59:03 172

0 Summary items with data

Files

Nothing to display

Read Files

Nothing to display

Write Files

Nothing to display

Delete Files

Nothing to display

Keys

Nothing to display

Read Keys

Nothing to display

Write Keys

Nothing to display

Delete Keys

Nothing to display

Mutexes

Resolved APIs

Nothing to display

Execute Commands

Nothing to display

Started Services

Nothing to display

Created Services

Nothing to display

#infosec #automation

TheSystem Itself @ 2018-06-05 17:00:07

Detected family: #Malicious

TheSystem Itself @ 2018-06-05 17:04:02