MalScore
100/100
MalFamily
Fuery

MUSE14789.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 11/65 Related 2600
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 349.06 KB (357433 bytes)
Compile time: 2017-08-18 03:22:24
MD5: bb0088e584ab7cce3bf54d7bc9202a56
SHA1: 401d6adc9d7862779c9913873603435f500b9ac0
SHA256: 51e62e2b9e9d5cc39a7871888f256705f4b24bac2f68a63a0c12cd8fc74eac92
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 4 import resource relocation security
First submission: 2018-05-28 14:45:05
Last submission: 2018-05-28 14:45:05
Filename detected: - MUSE14789.exe (1)
URL file hosting
hXXp://emifile.com/rus/MUSE14789.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2018-05-28 11:54:30 [11/65] VirusTotal
PE Sections 2 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0x52074 336384 76701815a390b54a0b75d4b9704c82c2 3933f2ac11212e39306f56e841c7a381f272f6e1
.rsrc 0x56000 0x1cb0 7680 dcbfa6f2329f7387ac9ac0e01cb42abd 84bd1eaae3cee5060edb2b4f439e30bfdf028c6c
.reloc 0x58000 0xc 512 5ea44028259cd3af2d9e0608ff4951d8 985a3fcc03c234c877e636cec80e509db2660438
PE Resources
Name Offset Size Language Sublanguage Data
RT_ICON 0x565c8 4264 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_GROUP_ICON 0x57670 34 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_VERSION 0x57694 1072 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_MANIFEST 0x57ac4 490 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: Copyright \xa9 2018 APS - Administra\xe7\xe3o dos Portos de Sines e do Algarve,S.A.
Assembly Version: 0.0.0.0
InternalName: EEPALA.exe
FileVersion: 19.14.32.4
CompanyName: APS - Administra\xe7\xe3o dos Portos de Sines e do Algarve,S.A.
Comments: 53oiiuocc3u
ProductName: MSWC Browser Capabilities
ProductVersion: 19.14.32.4
FileDescription: MSWC Browser Capabilities
Translation: 0x0000 0x04b0
OriginalFilename: EEPALA.exe
XOR
No XOR informations found in this file.
Signature
MD5: c23d68cd3d6d125d7b66bab72dd2a20f
SHA1: 9e3d0d2660033b3a054eed019e78fe9d64162dd8
Block Size: 12345
Virtual Address: 345088
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: Library
mscoree.dll
IP Found
19.14.32.4
URL(s)
http://crt.comodoca.com/COMODOSHA256CodeSigningCA.crt0$
http://www.usertrust.com1
https://www.chiark.greenend.org.uk/~sgtatham/putty/0
http://ocsp.comodoca.com0
http://crl.usertrust.com/UTN-USERFirst-Object.crl05
http://crl.usertrust.com/AddTrustExternalCARoot.crl05
http://crl.comodoca.com/COMODOSHA256CodeSigningCA.crl0w
http://ocsp.usertrust.com0
https://secure.comodo.net/CPS0F
String too long
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo> </assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDING
Assembly Version
VarFileInfo
Comments
APS - Administra
19.14.32.4
InternalName
77bf7199-4acf-a0
EEPALA.exe
0.0.0.0
7597506f-aea9-082
7597506f-aea9-083
7597506f-aea9-080
7597506f-aea9-081
7597506f-aea9-086
7597506f-aea9-087
7597506f-aea9-084
StringFileInfo
7597506f-aea9-088
7597506f-aea9-089
!Q"Q#
7597506f-aea9-0810
FileVersion
Copyright
VS_VERSION_INFO
7597506f-aea9-085
*Fg
000004b0
ProductVersion
FileDescription
Translation
OriginalFilename
LegalCopyright
%I&='
clarinet.Properties.Resources
CompanyName
2018 APS - Administra
o dos Portos de Sines e do Algarve,S.A.
ProductName
53oiiuocc3u
181ac818-e583-4664-a3cf-b271ad771c04
<<<Obsolete>>
MSWC Browser Capabilities
zET+
> g">
1bEE
LEc|7
idcy
abr^
ov>>6|
N]^z
^R.W
XFit
|lhw
`o%2
/{UZLL
mVnI
Qhv/
):K3d
PNG
zvTE$a
3F e
U-v
G[$H
/4*`
}^e(|
RmrXf
h5o)
:CWC
y8SC
DOrO
h_+A
6qXq9
>qp96@
8CaHd'
H6=L>
gxC*
wj9n0
DmC`
WQU9
$_n&
h3od
lT25
S\cm
&V~}
Q-aRD9
n~Y_
CBLU
>?<J
WD|!
.Aq)
M !7O;5F>
g=a0
zWj'
MDIParent1
hJhq@
{oBi
l1Ch
@@Zm
[8Gz
K+U7
zP 0
zvb8?
^Ts}
$N I
//<_'
t3rA
n_x*
<PrivateImplementationDetails>
PyE
oZ6x
0iB3]
qZ):[
)F[C
E@eY
pd&-
#W0(
5&P9
UKkl
N!5)t
ZRa5+*
U/1S
]k"S
NH V
<Module>
P^ojT
E JR
>/O*
F}y9tu
5$D?
--j^E
set_ClientSize
\[U[w
#\r.
&Gk+
@`w4
oti+
m rx
"F3I
P#W#
]gF:
0+0)
<'wm
B~ys
_W@3k 1
C$i]R9{
%*/,
/!+C
Q2Om
5t}~
/-1:
8Ar(M
!ROR5r>.kSg9
_Ej:
4;8:
{;rB
6"ZQ
yVM}
v\mj
~q_E
H-/p
LC.;Vr
XQRBy
~LB;
ZVy'u
vIVo
6k2O
System.IO.Compression
/%)u
*Txc
B%`)
Q+ 9R
V,Pu
q Y&_
wa6`2N
*WWB
{VK=
{@TG
F#C`:0L\$
RuntimeFieldHandle
G8>'(
pjz%
35ZyUy
RfQk
System.Security
mqMp}
d\O
s)o'r#
WAfcQ
WAsSCo5
VP/K
#,HY~E@
$wn&
m |rZ
Svmf
GetData
-=2m
uaE@W
@qox
H`x!wca
YX|y
)X01E
P/-{
WZ`Wt*b3
EbM0`K
cU7&<
*v
6ecQ
Application
}=yH
^I~N
d y:
U
@09Cqs
lr{p
Ufnk
v/vW
+|Z]#\5`
XiFM=P
7R11
0zKa&Y
`j1G
s0Mk
o *)
.L.%
1$+(T
.Y(V
eG yA
W:A+
?"qX{rC.
qD(9
` @
{zx.
UL c1^Eo
M wW
}?cQ
EnableVisualStyles
%o2y.
~ ?4
SWLX)
^% ~
M"j@
'd]"
Y&%p
FC>M
YO l
N{(Wg
X,VX
CultureInfo
KXo<
np6u8,vJk@
lWL,
9$e$
2}:^1
qT9z
` !1
yN\!
6U$ &
Ph{H
@)sx$
:8yv
' *W2
7-tl
8vi\
7lOD\
TCm?
kK7X6_^
TD1
E;G*
R--0O_
TtuG
qU0f
Cambridge1
r6u%
GL-)
!u8
YClz
hD!b_uo+
2]<U
BQ0|
M;(Y
L <M
6D=0Ai
)v~]v
@Buf g
gto4
&*8v
^H}
1Q4+
" Me
!k>,
Monitor
|y9#
QGX}
3Z7
1?90FfX
ResolveEventHandler
H\2{
&HB7o
6i}X
(0H =
uyL-
gVW5
AppDomain
@n^X-H
| r{!
"B"B
D~N[
gVv~ 4dA
J1$f
2@ *J
CVoI
gov/
get_CurrentDomain
8,lG
WOvG
Eon
HH<F
q )a
@MO[
uC\0
=d^
*|x
V 7|
The USERTRUST Network1!0
OlK#
G]BK
65!j
Du
LrPU
z5%Y
nv1|T
{r\7
}bH,
oZ 35F
ZrYy,
:*s,
Cpl
jTe/d
mQun8
HZj(
'gS4
4B'-
k%u
NMXo$F3a
( \fV@
_ qkjj
|iH%A
Pat|
4 z@
(IXU
1%*)R
Vspy#J
>857ap
/sd'
set_Text
4*;4
rY50
7!]6
*hI16
w2Q<
gSdnDP)
g~ J
VX-lR
^zC
GRk&D
z| C\
ae_r
kw#T
tV(}L
iSA
f\Fz
Id'[!
I$W'
DH s
Control
]Voa
uD:'g
U~~y
Umtg
.[/ &
wr{s0,
Z?eQq
tLd;z:
S <o
uGD<
TW4s]
YW %4
[Ic2
WvBo
%22W
3{zhby
$'?K
FN7 *^b
e$Ctp
}u{Jbe
\Rh<
J<>K
=sg7<T
0P*JR
$=|%
\akD5
,VwI
ZR+i
Q~uc
~HsL>
0d+
XJ(Z
o|y/
nt[q
R&uQ
]~ko
Pc-g
YQSh&
8k Z
Fe>q
X# r$
g_k]
]unm
cX Sd
)hBr
IEnumerable
<]R
q>w%h
o%T>
_ 1TV
q5m/
System.Text
%elf
n gP
sX :Z
zR3l
141222000000Z
oc'B
by{7
Buo9
)%.z
\ErIbz
?Z7/w
xb)+
^yA
7To}
K c2
f2IM
wVTp
!1YXn
6aQY
\wv@
K5Z%O
Assembly
Ziw\
=HT`
6*i
O9V\
P/+3T
Px\3
SuspendLayout
n6%R
I=`T
L;K!
y2Z_
k1K<
2% j
.6/e
~]q&N
i%0HQ
gf)4c3
cAdM
iQJe
;WB^|t%
D*Of
+& 6
21U%
{DR%
P%i
v/M7
:r4:7c
F8Dy
"oEBhr
System.Runtime.Serialization
v+:0
'/5~7P
%\&{#z
czl%*v
o'S)R
SM{/
_LZ:
S=nyh
dm-fc
:c i[
g]ve
,f<_q)
To%=
PQ-}n
"-cr
0{Vp
4 N0{nC_z\
d5?+
;aD
lj'c
\UT
O{8#
,9E*
iA UR
01L4
P'4\
igd!
*Q a
phSrN
<H;8>
_p~)
%}I>
AK0Z
Ql)k
8R&a%
F=pUn
| =u
[ Y2
X p2
Pr7UB
^4p<
Fr*?_
Ge<J,in
M"{A
(Eei
+A">
Ia{&
3=@E#
zZ\-}x
1]]?
0+Ep/d
~*h$
@/%zh
ToolTip
P:+;T
FsSqT
sXU6! O;5
GxR&{
9q6Xl
QKba
d Qy
Dt(z
I]l^<
?6X,
q[(B
SDP5C
?#i0D<
{
SwpA
g 59>
Q[.kU
Q3s
@Glz
RSBm"
u d;W
7^CTY
l:ev
tVB
.text
ZY0
MIy p
b0Hk
G>xF
^+jE
BN.C4o
]4Y9
]Ic_
(qy(\
<hIe
Za
ToolStripStatusLabel
/ BhI
pE;r
\t:q
x3v
>m*6
cMfb0
&x^vd
Uho^
6 : 4?
D:'g}
CroU
x<\(
System.Configuration
<Gm
wg -g:
6&v>
\^+jT
i DA
\4;
Dv`J
my3E
x~[q0
&_Ylz
q AJ
`|ewI
a(5,[W
M|F(
r2YA|
w!u|'
a(qt
D%*#D
Rg'
8k@ACk1
P ]-
n >2
PerformLayout
FL~S
T>tf
-\rZ n
}$t}#v
S+Y$W
n_`$(t
IAHfg
#kIIh
h4/N
1t~&\
StatusStrip
^G9O
^Sy*
,p+&F
U=i^
%qPk
-'57p
r5x/
~ZKpe
3jhL
Resources
'I6O
/lBD
H+M\
`USf
TSG"
4?Gz
!ZEg
k$NtA
6:vGsg
&1rhu/5x
=zU"
-0< zz
7( IR
jQEh
Ld:;O0)(e
clarinet
bl\;
R 0&(
]OuM
D%s)
Q:Ir
c<@x
o^A/
lQl*
ML'3g
7MSS{
#Vf7
A6d)C
E[w
Maicuta
|\-o
%3OB
70AR
MD;,
6IS-
get_Controls
'$B5
5gHw'
aDG$o
`.rsrc
yd6X:J
'H@FD0
B$r
J-jk
NZ%#
3`Bk
gUA
`m~0
XC%H
cK"U
kkX2
get_Default
GKl@d
"!l'
=u )
&l|}
)) t
rkaH
;Yb'
zbu&
veJz
K2$G
f+_n
G='N
OSB<V
/b=J
T1J`S
=Aq0v
set_IsMdiContainer
>k1,
d].^v
"U"|
set_Size
{Tg#o
^tDd
Z$|<
}vbcp
:v4r
Z@ @
X$|*
Settings
d#5s|
g>}]
&9 O
c^3iU
?_T
" \yd
GDP8
`MBNP
WKA/
_ ~,
iSJ]
~Ck]?U]
/G+9
6h CW
b0vxX<
vk}
?o{$e
P-P}
g"hY/
Y?Q?|
FO"IG:
Q1Ey
PFYC
O+%^
/ Q2
r]6:
<6E;o
s;T"
Load
&*8?
i%()
ToolStripLabel
{}.S
0n0W
'h4As
hze=
?:X2
s(#F L
mGu|8
XB +
S[\|
X /8a
7QX@6
8lcS
1Z0X
m&]`
% $
:{$4
f0.^
MP\
"X"J
FormClosingEventHandler
i' w
d"bv
k}cl
T<@*
>$uTW
I%K)
W1hb/
Z ,[
7W@>
<JE@
^3"[O
S~i@
aW 7
]fno
G?5d
otfg
C o@
tbGw
DN__r&
\/1p^
=]'-
@rtl
X ;J
1i|"
%ou
as"
*@qv
5http://crl.comodoca.com/COMODOSHA256CodeSigningCA.crl0w
hROO
~\uX]rw
7RxH
b0B)<PVX
]D9 >
N5 Q
!N@?t{
uSATR
<>KS
cHd{
W hz/
!1hl
d-`F"j>|v*c
$2d
[F|%X
EventHandler
bpkb\:
G!('
MW",
aM G
&*8T
0qCK@
Y795
Lb3K
System.Runtime.InteropServices
o"vy
%a&o
Write
}VEWi
set_AutoScaleDimensions
7h 6C
jUH
% (J
Ezj!%
!Ei$u
]MEs
5tq
2-fSx
^c|1
_oQ2
m^] 8
bY{q
Tfno
170704193409Z0
PJP9
E`[5
W?iy/
$$kr
>w`!
d#v'
7WDl
);u,
(6)7
H?cz
DWI1
Pd6D5
0%*)R
sIv`
U%D)&
H4Q<
4_%H
ccl
Tv<
s*(6Xs
' buo
z_1q
A2/_
b:lo*-
Invoke
BzIp
$PX E
WN/2
3 0
lT70
&0fB
m+Y5
Form2
('M\
Ow-VQ
System.IO
WrapNonExceptionThrows
!h|=
P8mq
q!q7k
U^b5
,D$AQ
BoC
+VG]yF
Ae V
nf8 'i
0DGt
;JiOR
M{ <.
fLL;>:`
z}-s!G
v{MT
`ua
f}4i3
vEk
|3$B
}j[8
L0`k
Y 8q
&*86
uGc^
wi /
;h#[
;1H4
r[~$
Y 8@
IExtenderProvider
A;6ky
Nx"hI
q>k)
$Kt3
System.Globalization
+>r$h
B#4;
}1rhf
~Xob[
=+0
&*8U
&*8V
&*8W
&*8P
Tt@h
&*8]
cIdB
WWqZ
&*8X
&*8Y
&*8Z
&*8[
IHDR
Form1
QorU
agMBY X
80n!
Ah(f
>0"k
prJ\
!hLD
addB]Et
.ip#
sxmN
JYya
JfEa
&*8w
M#R0'
/1*x
k-3k
J, <
(s{KX
S $5B
&*8d
&*8e
ox #
uYI|
uCLv
q4!}}
gk~A$b
1 Y2
3$@@
) Cu
CK;7
v^R3
m~rG
jC!WHi
wAf8
System
mg\"
tVjI
YOxI
w:#*
a&YW
}kKZ
{T.K
700H7
YR>D
cede
?2ik
( ^
88j{
/QT,
49tRP
O<B|
XqWt)
" V@
lo*-
;O:5
TBN;h@s
=3 e
`OZu
;aLF
}a/~Y
D&kO
z{rX
qAo%3
A2!mI
k;}*B
n>n-
^:1v
At0P
`XR Mf
Qns,
A$]z
7CVI
\XAY-
g6;A*jlt
J~[V
2]*3
x7]Q
`lUj8
Vm~E
w~ 4
;d:D
yLC=
MethodBase
E yK
=vAb
XG=U
&<76
x7]c
System.Collections
O$ (
p]: u
2(}}
q s!
=n 5
7Cxo
DfRv
&= P
zZ!
$So{[
O^V]
h#s6K
tF:b
+*|2
{C@ *
)e8a
dO+
Ho[y
xiKc<
tS'
D,px
c;^
";7g/'
0EwG
mduq8
7|F6
R {"EV/
c~y{
{
~%p)
NXa=
H|).;
%!_0
'R1M
6o,XN
F YH
C(aB
{
[TOJq
IgYh
{9Ni8j
Ql.-
`y$8
M=Kx
`<9J|
$ zh
mVuK8
vg `=
xsfa
.nQ.O
td`U!
2TY_
oby~
BeginInit
I]wb
<Lv;#:_
# T_
[M4@]9b
181201235959Z0h1 0
EventArgs
x@$)
]45I
6;l+
E'%\
g]}F>
ZhIA0
h2.r
V} b
0dd
Evidence
|[ i
;vM#
ILA>cH2
tOL*
)9!;]
aU$e
pILe
rzb^
mMVIM
;2O(
Hqx
SIeX
u.:y
}mGFZ
[b&^/8
6^-u\;n
O +6
Fzsq
'pw`
+@ E
uH@Q
o+{=X
dpnt
Vfp1
6[HY1
rCEBg
`V 6S
z?,1
rRq)v
w R&
_wA
,qD^;*
Sw}Eu
8uN^
I9Pj
fp!G
R*@B
Khrap
~^WK
TQYa
c]c g
"UBV
r{@0/
R+(h\
R'F\
$18b71387-6247-41a4-bcaa-12f6003143fb
>wqK
e b-
>Vl1
mBHm<
RN%)=
>XK;UftLs w*!
`FXTB
t<R=[
fF>v=8y
x'9\
@%7i
set_Location
j9# Z
#O,6
*n ]
%G)%
Xbxy0
"t"O
ZAB[q
NSw(
G,{Ds
Q|m;
/L*br
F1{0
gm'
>o64
"pCO
oB`*
1_HL
jYQCni(@
kg@LE
$ Kx
@ Gh
xpX
ContainsKey
,?oC
fnw,
)!K@w
( nI
fHf)
hf?9!i
9285
Jvd
gowE
r4L:=R
)_w<9
.T5z
g(vs )d
.QM6I M
*]7f
Esu.8
Mt j\
gtlu
'n>L;
>>~Wrk
a]G
xe d*
u}DR~
EHGM7
kX\''
"+"}
)@IOXHl
6P[ C
DO EAg
GG'We
f)k'
}Wm
>3l:
?UM 4
e^]
`ta5 4
@.reloc
RX|-p
4X|f=
ur3C
hSystem.Drawing.Bitmap, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
f}4w3
q!Z"
{LG1
A\0d
'Gd3Q
eS;oi
T6Gh
RuntimeCompatibilityAttribute
D)u
6l N[
\ni!
% ,
4|=d
)) >
Ap~
l{nR
Fmr21<
l~l=
w,K6
PcKy
86
U{~K
V'p"
m,h3
ICollection
v P"@V
PJ9K~
V0rk
0. u
E @s
B AUx
[^
uk`)
ifnvH
$(~
q i:
<<<H
,3<oH
dD&|
Aj9
x"\0 Z
iTd
XG8vv
Eb-W
Ayte
s~1}
Galeata
=u=5M0
v }@
p,XE
%lu6
L (
%q4
X y (
Y!n8
c#%(C
zB"Y
V14{
O+:.
1BA
fQvKS
%C
PnP{=
Yk j#
M\!;O35
WW/~"
a0,bL
`IPcKd
>7 a
}!^6
R]xcf[
E=bs%
$T)7
)q3r
t &|
8G
r#9z32
L!Wz
" y
`Mk:
PM-q
(.eDg
Z}B_q
l:1%
hqA
[xkw
z J2
w &a
f,Ss
|%~)
XnL0
r_H^j
'w#K?1
bMf~
c-yK
uvHL
zaMv
;$D?<
<Ho6S
/v1Q
3=D7h_
OoV,
/C6o l
d'&Qt5
j(R(
1m^7
14E5
# h
p^,0
P8=Z
*w}^
!Vl
o>_<
/ xTy5v6ty#
KSivK
P{V%
c dm
Ow7]
33}{`
w Zt$V
xquH
^emC
|lz+
#Strings
!TJKj
-j O
avxgR
-}rR
/~,d
/h_A3
8CeI
Default
B.XsH|@
<g*IuE
$ *"dV:
5(g{f s
6c*fc| z1
r0Mj
W_HB
#h {
8=]B?
tzkX
$ t2
7 Qb<Y k
e5.8
p\KT
o]tV
/$p:
FV{A
0)w1
nV!x
64`(
;_;0
VssM
9^4TK
s" E(
_OTO
4q('
EgJ=
{HKU
Char
K-ml
MUqH
rfR^1
>4]K
1O\
ip%P <Q
zBLY
LSkL>
@g!3
tPC}
]`hn
YJQhZh3'
ResumeLayout
Lx7%q
3GX;Y
151210000000Z
x DE
I\-
IEvidenceFactory
6g#/+
rR$%q
Aw0_
]x~.?
-_ -
-% g
X |
uO}G
3https://www.chiark.greenend.org.uk/~sgtatham/putty/0
R$lKm
c dT
ValueType
/*va
b0H?\
'O"N
E
q[ [
\<-s
+D$7
0<i7
t:Sw\(*
wY&E
0`fP'-
:&B0
b4g]t
'/9zLH
XlBq
~k*Z b
N(jB
.%ANjzQ
kWMo
H- ?
c d-
j&EbB-
!}Vy0
vO&p2
At0[
P[P&
yy_m
a d)
57?(
P[P/
|o\>T
-PXP
data
Z:4Z=
/".r
Z%@'
^tXS
:\&6
w+-T
PSln
_mM5
M.!;
u}B@
'm:x
(w\#U?
v!}`]
-I&O
X C
t_=-
0v4k
.2N8e
System.Drawing
Y{o9
WehI/S
{<lo*-
2%L~
IEquatable`1
G!CX
6koQ
/qG~Wk
cf9z
T~9w'2B
yj},za
:rIC
#{GF
&1#(D
ABbJ0I
=*+f
l}(*(]
c?`8
&+\o
ca g
Lhh}
r/vJu&
)BEh
) 7U
] vh
%W))
W""
Ur|g
Ad/I#
V4TR
dfl(
9HJ
>GF+
R m
ComponentResourceManager
M[RI
^*ga
ERs"S/
Bk 4;'
Gj>*)
`] 5
s M[y"%
NYZCR
DnEO
a/RIK
<f"+
ToString
kz(Z
@P %
ZWX*
190709184036Z0
(~>Y
cXS
"S|"
Cplf@
cKhs
E^`-
PZM)7
c(yQ
uZNM
'hb[o
$O!t
ww|s
0p jP
1cb>
cA|1t]U
BB'4
M%Zd
;QO3
\190
Gb)P0
k~ZK
aOo)o}
,"e~
>t m
'5JX
N0AB
d 7f
E9K>
e6tj
],. ^
(F,}
PDW+
, N><
ServiceBase
(+ Xxe
(trE
COLK
v'x7
w_R(
uY>a3
13.N5
h /r
9% RH
C^T*Q
88~O
XVT TZX
g v_ ed]
a<Fs
_u9J
4h?-_
:&1/~h
4N\^y
.A("
-xjOkw
o}tY
[AS^
#DXm
rwsC
sHLy!VOX5P>TkSg
)NB(3;Ya.
rf!l
15.0.0.0
ToolStrip
e/Q*a
^A''
{W+{
?0=0;
)?Co
)FAC
cN7N
"<cI
Mz!SOc5V>Zkxg
yz>
v%dZ
q 0:
b_qZ
E-^}
f*9
1,K?
P8+-T
50 p/
`>O$
LpGU
zD1K
ed)8
z7x:
W9~s
/,d'(1
Hixm
:{iu
Rv~<i<T
<H;8>{
KXvSF
N$O\
^6qc
ggd
hC.F(
0a #
/*IO
add_Load
%^[]
YVZm
[ Y2
"+{$<
5FQ0_n
O#L>
=% [
@S.Jb
A[Z%
SettingsBase
\i"y
GCR!9
=@i0
)^b@c
Jz|'
. [Y
}yv"K43
U.WM>
9&"K:
@ d+
IwCf9'
*~%6
y@2B
Simon Tatham0
Z
CIuKZ[%6
EditorBrowsableAttribute
&D;(
I%l#1@0z*
C "#R
IDATx^
\c:*
] %% A
bmDP
Data
tV]0
VRG_
^a="(
8k
8i
%tjsE
$z&I
Ei7 @
^aeO
jt%:6
m>el]Lw
]@? c
XPok
8}
P(-+z^j
rD:z
w$=
T#Ja
get_EntryPoint
x S"2Vs
k@Z&d
*2;|
!,
,*EEP
iy
pHYs
.ctor
TPrt5
~}"R
c yM
X!1j
C_qG[pd
hkrJy
8<Lf(g
7_[ 3
C=We
A7)Y
V!ix.
Container
<T_?
X}PK0
E!d9YN
.Q(7
dFl~
yg.W
Qny9R
+M E
11.0.0.0
f6pqR
Q[P.
Z:vs6
Ay0i
g) I
.J(%
~[6^
)<7fg
W ",
j<+z
e(^}
hr~g|
82R,E
kiW'
Mz!zOh5s>Tk}g
-CE$
b1u'l(
F&WS
T,o*
0mMP
g'd
fw4_3
EvF/
)w
Dxg G
e] `
(v a
WZkY?"
7fRrP/bM
@WjY
3Da2
d-i*7
Lu^ni
HB<
2Ar:
6$_}
VbX3
CTER
)Ag>
_z#%
,~k2W
B@Q{5
m=:p99
kvg+
b54*3]
"NGGG
`Ncm
AD~-
gRoz
c+zC
>S0P
+E$
Kl{,Gr
Array
>#A!
$)?h
84f8
#(ew
^Gj<
khl"X30
2aW
we Ldh
@4M
:{Z`
tCw^
C1#8C
4Wii8
$~2K1e
!;E+3
`Z@d
k :2
vkFI
YEl&G
4u-wy|!f=
6N%E
D=16V
Cr*1
-b7[Y
j }@
UF&V?
.j(0
3 yI
+F #
D&&}
@ZnV
0L*yR
?k4S`
vb;6;5
$/_^+
s+:<
fr4u3
http://ocsp.comodoca.com0
PMX)
#m4)
Mj ;O;5
T*W3i
Bm .
0K>B
nN X
GlhY
i94\
n=8D
;mX@K!.ZUy6l
X{dM
Form
8YlY
KI~F
tTl;
an %n
)`7Q
Yf<\
ContainerControl
C`yN1
2k-'
G>Wj&
qA?p
&#{-
8SR!]wuWz
Lnq}
15#I
fa4)3
Ai/z'
MED$y
1^og
|-G]
(' 'mCT
x lO
y?"X
}9%6S
Pjg7
$"|L
Y 8O
oA'O
set_StartPosition
XAT8
*INW
Y 8P
5R>Xk
!3W7
wFDZ
H,{
' k<{
Y 8]
Y 8\
c8USC
9}&Yk
3zW-j
OCGI
]u^k
~F7`
* F >
S^]S
nl: @
XD1Z^
]Un'
[ G5!Z
3cTs/
LIvi
Ow5+> kJg7
Nh5A
FPsm
6f/OHo
Y 8
E/_3
T/_}
5]D|f
4*}m[
[_ b
o!*|
On W
cY6BC
; Y!~&
Ls?s
r ->9N
|1Y]
set_TabIndex
I2J;O>
*" T@
'lx%u
pcbqV<
b4$[
o;ga
&Erj
!p/vy]
.r(*
c@gcO
:Yq
{*'u
L@^{(
=eV`Yz
=RTL
>b!A
$<Bk
W-fKB9
\k`X
p(K(J
E!;X
vqy
@mr
W<`e
`:lv
{;!l
{iV+
wY]%
,Ad>
Q"
3?C9e
Gb:9
GetExecutingAssembly
cT1
J X2;
I!=X
@ciu
_U#]
~?D
64 VJv
`VE}
jIT@M15
>~iK%e
PN(
+ @
{PZNF83
BzSO
XV^}
Vad#
IDisposable
wZ6v?m
v$'8
j*l
# FM
!oAf
U)]I
<#%Io
5p-w
H2MI
]ono
@c+iQ
{E-M
"a"z
" ",
)eUK
2z<W
%>Av
"d%fN
3http://crl.usertrust.com/AddTrustExternalCARoot.crl05
DYt
V)/>
ep4N
D2&d
QV@
*Swi~O
Wg5J
SElfu
ck Z&bU
g]2'
Y\YUn~
N7P:
9$q
hd^z&v>
{dbY
@i$Iu
Pl+{
VSb&
kQWh!w
set_AutoScaleMode
l, 1M>
e~r8#
O3#k
6}e A\
]dn}
~Gj3
y4u8_z
TgekB
8_
9^$*1
PB-p
8R9i
^Oj'
QoBA
\\v?
+!@Z*S)
B`nd
2~+K
^.A=
:TY
6r}ol8I\
8SAi
=0;09
X
z%S
8~*<o
N~+ I
IContainer
zF3Xe
V]V)
x9=qLA
)XaN
+<|%*
,> y
)z)
7I1 $
Os55>nk_g
*JPocY
y@5C
SetData
_]S\
a[NT
|XsB
41Zw
Ut*C
5r>zksg
Zl _K
]9R+K
&wfl
"+/i
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
[N4F
cF{(a
gYlG
4N<&
X`J/
zH2:
}%*/
mX/S
<dey
RxJ
4{G!d
; <?_
1oj8}3g
a]JUf:
Ee^-
dy|Z1
_I~L
;H B
upf]
Cgnp
3e83
_I~V
-KS4
9dU
X h
}zI'=oeSZ
/[Ro
!lNE
tFfe<
c9yl
eOv]Q5
MKX%x\b
;6:}
\' I
P/7?
G6`
DeflateStream
Tq'0n
GuidAttribute
Dc_p
s/18
SkPoT
n\9r
P^+jT
w[&[
)PnE
8=
M^B1
@h 2x
fov*
q{uPs
P^+jJ
T~o(
cXrS
8*
\Sw-
8.
3 Ff
Z(+/
T(y
H#uay
'n5M
DDX"
#<?#
v&h M
s3 ,2
I\Ti
w|jH
'TI}
mSN{s
P!Fi
GgT:7<
pq52
VX8S
CompressionMode
X
UUS<
X
System.CodeDom.Compiler
'WBNc
s$5
+SMmz
P3)W@!
mpu+8
G**J
Simon Tatham1
$5,d
q6E}d
s(/
~#!y
-il,
G,,~
6h ]
&Dy&:
}o__
"#c%#
R'4r
~&7
N]N [
}BE7H
&$J{
'*bXo
_ =E
L 8(
ApplicationSettingsBase
;ttn
ZjI[
_]~O
{!Jdc
9"5zK
Ch,L:{
w [U*
$5,I
h5e>ekog"
*^|j
be]C
W[&L
c%<1
;&h b
]@*z+
ep1Kl
)(%v^
EMBC
,9 2
}4Kr{
9&tr
0( w
@~TJ&%
$ +7
r_H^
IComparable
5wk%
9IL^
8,V
5|1dZ
;~~Q!
9k3
~:Fv
[%>@
)Y\,Lrs
WLX)
<mCy
b&e
170704193415Z0#
IXJ
0 ;
,s-q
]>n
^w$B_b
b2L"
:|,A1
^ |B
9%^c
http://ocsp.usertrust.com0
5Zl, p
wn&t
n0Jk
YLY%
}'O(|
@2-=
<8Zt
YG_'8.kG
aif*L
^]n'
X'AB4
Y 8.
IVu
C -G
`7a4
z&]U
=TF74
0)PU
/yH
Iv `8#
"mv"
)nbv
AddTrust External CA Root0
M [.ux
`)Zm
qZ~@
U]s1,9
i9V&w
\A &
/lWn
IEfG
`0Hk
nXxZ
m' \
,Wsg
w+^m
W >w
Y 8{
20 fU
|r<Yx
>j<c+6
tOHa
oQj3
2;no
Bs"b
Y 8h
m(ub8
Y 8m
Y 8c
o[KE
Jn6-
b:l-ho
l P;|
(lk v
Y 8Z
Type
P&K$
mAJl`F
DK5B
E|0X
c9@}
Y 8P
O7 #
V\OW
F
Y 8T
aip,
o2/F
F\-
28"K(
n?$7>
Y 8L
Y 8B
Close
S(cN
WFl76
h)le
aMI0kyQ
ch0c
5rC'D
PWe t
Vspn
Pj-j
5P/J
VgQf# 3
}.m.q~9
L ?#
e'.$C
Mt!xO]5k>zkIg
BSJB
*Z,x5
d$>o
}c[J"
RKb&v,K
kS C
P5PA
*d;9
<*D{
Read
yD~
Salford1
G bt
vC8s
/ HP6c)
mD 7
7 OPT
+t.,#0
=i^1
Z]2_
{)@'
m ["XVy
K1iQk
Pf m
6b`Y0:6)
*_M
{;rE
Y%s&
ic A
7$q/e
CAeXaN
0;2P
Z1Rhg
Salt Lake City1
NX"I
: (+j$
#9q]
>FDO
{{B
Tvru5
*R_1
VZQ*
@Z$0(
V.}Ob
`qw"
EQV
iyF(
Mthh9
]Y!
Point
AddRange
-P)r
2dR{
Za;R
aldwt
gAMA
JP1b
0&p
QoQFa
PR-Y
daU/
.h(!
r;|4
= 'zF
fjs/
\5 :O
eDp]
AutoScaleMode
=C[I
?Qa x
MarshalByRefObject
get_Items
KJ'=I<3
PF-r
2aVG
hA|^
u #} v
M9dpz
lVa co 0A
.cctor
Pf-/
\te Q y
L) A
v(-l6
B@Ve
7(iTHt%/
o? e
d",&
mscorlib
KC]}S
0R!B
\Pr
*cT=,
_])<o94
f[n#e1
eIVS
M>#A
UpYf
]L(=2
U1Uy
TXQ2
aEbp
aY4hA
U2@oC
Icon
E. (K
#9J%
/.G^
$Ltk
/B p
c d(
"A?A
Kuav
Pf-h
rDHLxS3
6I~B^
?D]
F^dx
ControlCollection
!vhz
Wi=
k~[K
os]E
I>CcE
Enter
TTrw5
3>=t
ug8t
Ieuh
8OXi
H?p
j@V
BK+i
:P;
&J%#E
s,[z
K.?|
Hd\A
rl x
790y
/<g2
`jMi
s1l-
9 Jn
^Z^V1a
"BR'
q%!V
_+~L
^!0Ax#
(enu<
System.Reflection
of_o
D3`
=a)B
SizeF
|eb>?
}@{.
gzx
151231000000Z
RuntimeTypeHandle
'Nbbm
^d$
PC<>":4h9
?*td]
}+~E
qrO@
_/~=
V$(r2
b|"F
d\d_
q0o1 0
Eju=
Mu$?
br{1_Q
0K0l8v
'I=O
v?5Z
Fi6B
!fmwm
G' \
P.YUN
6r1M
FAC
fDv ,LN
v=qd
L8'8
p%)O
_R[J
$E_5K+
@rY
l!b <
bhr<
]Z6C$
TwG%
1),&Q
zX=l
]Flo
P8P@
OJGh
Size
U K"EVs
Append
Y^ )MU
FA 0 ?
Object
7H!f|
JJ$J
vsnPJk-
7Ny%
,TNVK
=l`@
c o
System.ServiceProcess
tdcJ
o0*C
LkqA
8DG_
|~ 3R
d1ph
MrgWC
Z<RT
B/YY"
0##
jf}!~fY
pDU]
DK+%
d}K]
p9KsD
Q'O\%Q
ZzQ/
:QaJw*
-&jS1
X77E9
}VSI
-ONU!\g
CPOJd
' d<
8DjP
PClm
fj5
d=
l{ o
7q%mv
il)@
E2"{)
2 1)R
KJ'=I;4
W 9=}
qP e
SSH, Telnet and Rlogin client
E
n_F!
O$N4
YPON
D) s
q#Lj-
MZL=w
[~ZV
`p&^
3G,
c6~:&
`oJ*
#Pbn}|
AlG`
eLqi
RY1_%
ZUTp
a!E)
FH%c
/[h$CG
vP NdM
IS> !k
iK&O
8+P64h
SG20
W ,1
zm<&D-I
vF2q
tE>+
gb Wm
\`hi
`bm0
"!S!
PHZF
Cejt
k@vg
8"skT
Q\si|
COMODO CA Limited1'0%
/i.A
W8,1b
b9D/E
=y{=
ComVisibleAttribute
Kumy
`|TT
wzpQ
l3jQ[]
A\` XF#
w &H
J`G;N
_N -5N
2TV
ooyy
hM4d
TCG&
LXop
IRBi
@@+l!C~(
{a']
)^Lj
$h@N
Z)n}.
g<v~ wd]
]"n#
d}$Gb
3System.Resources.Tools.StronglyTypedResourceBuilder
XL vQ
zA.x
gN.F
N=H^
cR%F
Vs#gU
]qkN
t)65m
KBM%
f|(4
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
gWv[ Hd
D$y}-
[ e3n'
<xbZ
A5~]
CVa}
h2Od
%>U#
k7+
%KiKm
W`G`
c n8
W `@
k,>K
1JBy
mscoree.dll
!This program cannot be run in DOS mode. $
BO7<76
WXhN/J
1z[V
djw_
wytS
+'d\
V)/k_
!bOV53>Rk(g
_ ~
2HClN
5O!"
[@%7Z
"G"G
UTN-USERFirst-Object
AeZ8
'eTm
]s9eF3I
Qw|TH
%"q?:
{oh+
@l?
QW@iO
. :$
4=r'
DO '
69MRE
o\keqn`TB
J[Bv
oPA:mP
90hu
kxm9
^O^b
&KU!
<=mn@
XLVi
pIQ/
0=4x@
:{Hd!
W a T
Dm&`
W=:^
System.Security.Policy
PX[my
w'C:
8>
dc'!
r,Ey
_AppDomain
j5+ T>
(|leJ
ld3S4xv
{4i1
uS#X
x>f R
_^yX
utvn
z:E%
cB2bG
get_Name
:119
+aLX
I.WF
3L G
-(SV]?Wd
C]Lu
C<gN
fPch
P0P~
S+d#
Yo
Q~0=
! Dp[k@
$ PF
Vp$ e
63v;
pg'Fq
/ iM
Fbp=
w%|)
;fI4j3
*fUA
:x8+
=2_Z
J%UC
`)vG
K7*9
xXc 1
F+[_
7'#g
System.Resources
TzMI
se7kVG
P=+%T
r}2^
X %V
m+Nd3
<}.&4u&
Rcy8
.qCN
VXAR%
OvsB
dJSG
O'&\
Eq3N_@oHD
#*xs
QcVP
)RB <z
1"k
m4A>
DbK)
uE%j
IIdl;
AL<
A\0o
ST*_bB
f"4c3
3 (D
8s)//
QBu{^
<8f*
CnKv
$O|L
T5G]
T`rj5
r #$p
\\Euv
ZD>r
\lTg
&WU0
k,O1e
Wr0pt
U;l
rq"_
a:{1
WCF N3
+o'*a
>>%[
^8R}
}a}h\
z%e/
]_kv
mGgZd
2Ek
ZJQ}
)4_}
]E>~G
QM%)<U
]~J<<
'Y]q
Yh?A:
F RX,
rxfsKt
U\to
%a(y_5
^5/"
D5z5
]>t#D
%Jl5 n4j
R,Q_
NVJ/[
_HvW
BY\
nuPH
t,C]
nPht
BAnW
lC.W
~<oa
D;rmj
4\{i]a
4[n,
AddTrust External TTP Network1"0
d%o2
LE<8
Ns?7f
:{p#58
|9#`0~
':hn
?ich
qWm
STAThreadAttribute
-_Odg
h7Ri
(.BdZ
$Ita
_ E^'
|]p(g
H1>T
Synchronized
+`ww$
'qbTo
P4]4
mrd
#OJ$
>Cyq)9
E_e7
v$dD
h:Mv
,ASrx
Fq`-w
r0z
:4=hR
;U!(
@^Gnw
pw #
wCk8G
%Ht <
^w S
COMODO SHA-256 Code Signing CA
"Cwh
,XO0
;ke/
e^Wc
(!#,
(`{-
N{$)
c:jN
k0i0A
COMODO SHA-256 Code Signing CA0
>o3r:
$,-y
)TO}
=_|t
5=_j{
B1c(
J6]4A
"aL$I
GlT;
`h7
N6PMC
[q/.
~BOy
*4$t
6$8p#
jIW1}
CluE
\q$5
P,G!^MH6
Fzosu
g6KQ
NvSE
.$(t
^o$4 z}
uWxT/,
OnStart
UA~K
^GU8
4$z7-3s
5(zy
+#$#
UJRh
u+o>
-z=|
22b27f97-56dc-14.Resources.resources
FormClosingEventArgs
>0!0
0}*aR
YWXS
klyA@
gqv;
=(J6
@`85
9Ir N
}PNI
f!&d
$1@[_
\9aI6R
h;/ -
g_~@
P+B:
KJw.
OTy;
XpA
yS?
!COMODO SHA-1 Time Stamping Signer0
&W8L
J>/j1rL
"$|y
' +j$!
( pX
j6o}
-tJ
/S+I
ed-?
|6~M
e-ScKy
0HsV
~ &L
g\t *8
zw ~
0~Wy
PS6r
ZK`e
*gWS}
ISerializable
[TjZ
Pk(1~
ISupportInitialize
AAm=
n rV@
X]X
. x*
Z;xd
add_FormClosing
i$~tR
$%-%
G;=g
z7L*?
5oF*u
[4vR
1M<=
c yU
SW<(Y
v%h)Q
{Q{E
6C61A2AAB9DEDA384120B3D6595C214F06494695
eimY:
(HP\
MethodInfo
Ag6Q
g+"0
h )"ZV
1.0.0.0
?/#Fu
'~6'
~R'~
k~\Mdd
} |K&r
xeOP
CompilationRelaxationsAttribute
ogyw
}#@A
hhR]4;
Byte
$5tL
5 r'
i/Sr
6Z5m
>010
8Rk
MemoryStream
bkVQ
T<N)
Rvpsd
ao)[x
gov)
_I~O
;X~Z
1F-#G
ResolveEventArgs
SzWH
&T ;
y!m
(V l
S>JG+NG6]
?>Iq
)TL}
wF}f
-~=Y
n \2
fgcNo
n .QO
DNyP
T@^
3v #
>kBNv,
&vk0e
_f0w
t)Og
2}_+
f;45(~
*_S.
;Ls;5:f
|hU"|f
+gG*d
3 /#j
n(rg62
+u~
G=:)
F)=WeO_w
\gon
%5C:;H
t;KaC
dS "NV
lAS9
WXHS?
1F(R
gN@ZJ
mGv3
0o1 0
yCnH%
P#KI
iPM5j
>IBK
D6!
Ya[
U~Zl
HhpR
1?p>
INP
yN]#q
iK%]Qo
s @cN
Ga (
baZTq~g
#~O(
TArN5
P^+oU
j5_\
M[2"b
B$@ [L
gq~h
_k|%
IEND
!;O:5
mLYR
`_[
wWjs
xF6Cd
oN*\
f0R4
0%+)_
_k|P
]\ CkWf
GetObject
M=W^
3L/W
ZQj\~-
Hd*
+5GbK
>q:M
lCb8
i'U\
?-CW*Z
4;+91
q?;'
k~\Th>
) {?
,?-r
-cz
]=e;
Qg3&
F#B<n^r
G6^"s\
)k/
J66]
HVyI
GKKB
(2dJ
Y=`z
Kb,
/B K
<+0 Z
1WCf?#
+c4s
OS>J
Fo(=&
j0Ek
OQU
94O4
B|!d9
wBst>
6w(<#R
flmKV5 ;
QV -x{4
C"F_
+&<
St$Bq
PpPb
}7U,
abx
bE9Y"
f`"F6
j l9
=:_L
gm'-
8)`+
]x1+
4V f
CFml
TWkP
yb`1)
" T@
oM'>
(qDb to\]
rv[}
q.%1$
$dtu
^K8S
%I)g
q,hA
rr67
Concat
FC*`{
= P)
!@ /
D /o
c"[.
Ua%O
]V53
fIQE
_|?xI
g.vK ld
XRXDr`
%i`Y
Z=1^
ab.
C=Lg
l,.!>
Rd9<
M=.r
Cambridgeshire1
t5%Up
.@e
-ILj
I|Ysn
PYGK
pPh8z e]
B`nds
5"]]
n3_3`
P:PG
hMWo
jw+
l:Nv
miC9Le9
Y!('
i)oy
A**]w
vOW_r
kkoJ
|8-2@
SY(Yy
P1jh<
!fyd
{
;sx4j
1(eC~
rZi)
r~v71
]fQo
tY!*=})
fy2tNXv
}|1&
~F3B
EOiGd
P`-H
p z"pVv
(*F
RMNpz6l?
ck<1
sF#`
B{rj
$d`_sf
Thread
_u^P
v|G;
PS"M(
(j,?=
$,-yS
M !ZO{5G>WkXg
K &.
ynP*ce
P:^6
GFG R!4
6H6)
@{HVJ
o}|.B
HPP&E
~ KWe
^s*u
`;2Tfv
BiV
JSFo
:UN
R<8|
"q%/
1@W<&F
$GSAVQ
!2+ug[yo
[|V'
q :#~
CLxo
Y*8l$
V.f"^
HnUx
r}3r
i+e4
PW\!
m-Z
_Acwq
!aHF
M{!}Om58>ZkKg8
H KBi
wl]&
lbUG
-|{h
={Qh
3m6D^
_z~
8IxDC
Sw5
ZKfs
\u`2
_GVOP
;71hE
m~
q} B
g2kt
'dg
U~uw
o>Bei
X# r$5,d
RXOR
_R@+
n1`t
ZLBNq:_
^Nc8
c ?,
9}~l+
L`W}
!;EI
%p"
^+`q
7{,?&7.a
J l"oV
Pfu\]
U^~d
Hgkp
Dispose
P^^D
s]Mlw
w{FP
R=/o
OC"^t
7{m'
)2V$
cyyW
n|u
br<kDh7E
vI pd]
(_iA
m|Yn
;t2P
N ~k
G/%W][b
WnbI
n&)Y
8G0|
p'N[
f|S
m9>h
Vl%R
C~"j
ResourceManager
5w%U
>Rv7=
T}c%;BQX
/&lq
KG5"
91^h9
v c
h= J
/ *3
VQd-
lG2u
HPNKe~
Cu{m
jk|P+bW
m$/W
'^~j,
-~Px
gov*
W)v
2E8T
ld>
AF}K
22bxk
Yn=;{
P`-|
lYyK
oa/)$wQe
lHUK-
String
"*2
G>d
H"s;
5v6|>
_CorExeMain
) x&
2Xw;s
g!q*
0"kAwERM[R
NT&_W
.xZu$(u=
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
@#x lEU?
T` `
c9yf
zA:#bI
>%Esv/
)0'0%
pK3l(
{[ gG
hR T
vh"A1
Ik~[$?e
W`s]
)aT(%
hVXeo
j0h03
|[.,]
UTN-USERFirst-Object0
iD/$*
InitializeArray
N@iZ
HA=\
2=8q
7Ae>
Sh*l
3!ZNk
@<BN
d^"
-)Qy
3CoI
' jY0
|"=t.
GD~EP
n1Qh#
Y#_>R
">hB
>:NL
Wph3/X
K8=Y
t$^'
c!y%
dov( g)
170704193412Z0#
-Z(
*1z;v
r Ro
-Jftl
+ON8
](n0
7o{y
o`5 K
;uHP
lxkC
$0#}
] t1s
vw83
{&fH
oRyA
t h}
Xa@[
ooSF
#_Hr
G/Euj
}>JB
[}E@
qr3V2O
P3U*
_z~z
*"dmN
J/u\
c-yn
UI+_
D>S
\@DT2
8"*%+
piYVOg
N2u
[K9\kO$
;9OJ;
[["f#
IgV{aam;6B
\s{|
o*hFqS
;HX
TIR?
K3@8
2zp}
GZ\w
># KE
]!~2
^Ap`o
*DCj
f}IC
\kz2H
#7eD
}]bx
[0R>,5
foq7|
d}~T
5 Oqx\
Greater Manchester1
djN
{Mm5%Ta
{iNl?
QJbb
1 tt
7 \2
\"nh
aVrI
:g"d
set_Name
j~RK `
Dictionary`2
%RqB
y\<tV
Q=n^
\9 w
/fDS
n<2o
`M[`G
gs+;U
$dG{
@7
k~ZKbe
4;Yj
kzJKbe
.<J[A
%PeSz
3^e;
~fQ{
n20=
0%*)
ecH3
>Lr;y:e
K6t
'(bko
04(*F= az
Z0X03
n&c
000530104838Z
"s-O
E(16
Qmg
jI}M=P
TQrd5
(0P^
U7wzd
l:=9hc
c;MY1
N{f)",
G9B}?
jP5t
Qy!o
f_X
( /xX
6d5'
a=;^
6i0,
~0~ X
ap[<
")jU
RuntimeHelpers
#tmjC
lM"L
k :}om
ML!;O:5
""}v{
m' h
I_Z*
e\gMS
U-zVe
2|t#
4f R
l}UC
ostP
XmC
ZrqlX
's/1
IrgAxW
p=2^
]h!jMd
S7zyW
v2.0.50727
Mk0Z$b
3Cp*
WchL/d
c^t:B#%
,^ b
wK[j
dU%0
9XAS
<4<k
x$ItZ
X= Pb
6F\|
S& |
A0l\
c8 V
T}rS5
uEA!
V/_~
a'L7
ganD
R|,4T
t>c]!x
B }F
x&QH
F"P;
n&]O
O 9@
p*)S
`I^ 0
EditorBrowsableState
MzMe
q$KD
h#dO8
*>8"
> x)8
SJj~
-Z
y!Q|
*qiv
+op3
1AA97EFD0F65757D5249189AE2855C2CCB1885F4
i2pVUj
xP_`0
&jJL^X
3Fv^8
c G=[
#W6He
F1ph
170704193412Z0
F(6H/
^$<q
<[ /
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo> </assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDING
e!U+v
L _~
r^6fZ/
/IRmU
JI4zI
BwkU
Zg)W\
+;$&
h:G[QU
/(9x
GetDomain
S99U<
EoHs0tW
]~(t
8%
8NmT
k1ah
0CY<
*x|\
z=%eE
j+4?J
ML!;O:1
ML!;O
NjHoy
Qf_?
2bRKbgw
0d*_R
+O]I,N
&cS"
v6NI
xT(x
2tUi|
`^r7
NaAH
M|Op
^N 4
a=9iu
:T @k
>2~of
]In-
vm~K
a<^5F
_2+N
2krS(
6TMV.
r~X
!M6O
[]6p
' p7;
Crzb
i4>@
I4O
B;iLW
D~nKRe
7"k&D
U^~*(
2hSk(o
R-J'E
a,x83
Uj }
Stream
77f-
W hM/
/C*
200530104838Z0o1 0
cudF
m2[g
WVmI
Ec~
^O@*
dFu#z
/>NX+>e
XABL.
&M g
OoO[
(uw1
IlKI
l_69
o<}[=
FGzG
2^_\
&*6(=
]oNy5
zz*jo
jk;
Exit
lClz
QY;S
|^B)
&*6()
ng|i
pk'\
C*5q
D@[
1http://crl.usertrust.com/UTN-USERFirst-Object.crl05
umL6J
=U%$
=@a#
3wW,OP
V%V@
c y`
Gn?t.
h?/Y
/FpC
NlB@
p\!q
y be
nX|3
_,
RT~C[
7i/%
pF.$^8
H*~9
0aPl
$a6~j
vD Vda
iU`q
6j8SA[r
AM9|G
oK1^WcrA
=>Vs
.1}q
7 *a
6K/LA
Lj]x
IL4UPZ
C?:Y+
h3tBS5
L K&
=-sQ
_G n
>#v?MTc
Xw+W
Wk&L7
set_ServiceName
R&wEE
6}kP"
TqZM
RX7t:
$K$
e8u t
i1 [
TIr]5
4_B~'
M xV
;[>/
\-]"
j_V.
86cg
=`w^
f'c\p
k[2!
ypDi
<5==
Zil4Fc
H*T~u
n/9#
N%!0%
n:/$
k/%Wl~
set_Icon
Z` D7il
^oj=
G[R]
<@(r
*NnU
mx\Mdc
cbd{
jP;&
g9<VB
y&<h'
mFuu8
Edqm
FormStartPosition
mTLKf
:G!VV$
N_p
tJ>dw
xi* c
['br
?9
oJ!P
U3}`P<
>nm=
TSVb
Hm)
>3`\
PictureBox
1W_m
z"}p!g
m Q}/
`O8
w%$?
;,L[
!K%J
jxqw
("\.
RBcg
T`=J
M hqE}
^j8_
Uw)p
8b%]
:Xvy`
AKtSb}
.qQz~8
"yUd^
tVD}
Bk z{
pNx\
2NX
3 ~`
QK|G
cAQs
/h AW
&NK>
cWU^
jV_}
pl7C
x' \
3 0
W hx/=
* n"iV
Y:h#
V&ny/
']R
96pwY
set_TabStop
1;C)
r]v[
9T~}
Cqh'
.nBZ`S
wVe*8
n#v
fI+g
W hy/
K/]g
= yu
Y t5,0
.M(G
?6)B
aAb>
/(8v
zPPz}
"4"B
-8e|0y
RHfwCs(^Bf
hUdR
9 p=8
9.p,7
'%#4
'3vpZ
\l N
Ei2K
50Ed
~X# r$5,d
< {
'f)o
OSP&
b e/3$o
Z^$/b
+YG6
C7nM6
'_a@N,
-fb4x3
j#g#x
Nj38
nujl
vwSk
UMO
gli={
ldw~9n
E~UcmFX]Q
Be?HsN+m
I~ jl@
P!x1
{t'C
cKR
^Tk!]
.;IDATx^
_j5w
.vjX
UdvGZ
0@*zR
8<`;D
"m'*Jm
NO}}
I<U4
/-1f
ZY0
\OXL
)/:fL
Q@::
WY;f
W%i}+
1"s9
W4]p
c^wh
FT 0
;y_
XKu6
`Mht[Nz
WUxv
F r-
FXTtu=U'
0CH9
T%u
/I n
5'!M0
Kfac
p\k~^Zft
,DQ2c>h^
**t=.K6
%DHzAl
0,Ix
x=|I
AVgI
P:e3
p5A=
&5=
^IP/~
{1\h?
$ (T$
-aRD9
U!8s
Z5)^
_a<O
c d+
hE>
CULu
U\V]
/37T
AddTrust External CA Root
J:`;
Li|jk
0?Za
kK*jw
A GG)
Mm&lo
9dy_
>H9`
|gDT
xGe-c'Z-
%D'E#
e#a
*Mv;
Oj&.
03r9C
"IH=
riK_
?4$Mj
?S, S
wgu#
Tlrq5
4+;
]0n>
,E}L#
CvLA
F!&RN
,AVg
$_+w(
Upqc/
J0ok
jw'%g
set_Item
{ }
v\a@
N )Vz$
99-
WMJj
]fjk
m~I8
>uJj
t[+b
P]z<
JJ,vH
Zl,Y0
s7 7
-T5C
Dai
KJj(
G?Q;H
'6bro
Q eI
fc*:
=~bK.e
.u(C
OyE[
^`j2
~$i73
3X0%
Oml>
[ KCt:
M ~.>
n,W-
;JVP
8?*E
vi.[-
@D^\QkPY
CD7x
M(p|f
-K 2
tU#<
5 q~\
u_{Pr
vfWR
V V#
6?LLq
!&ur
mA_rZq
cx YmE
NE4_<
f?d-
suei:
zxr\GM
`+?%
Ryh-
5x8
iXxB
W~j_UFny
Q=zK5w
e]]T
>+L
e>p~
.|@I<
cs(C
rNt8W
GetTypeFromHandle
j`mX
GD~CS
P+ (
hp/<r
=VRj
S~Rn
X; t %&
4(B5K
$m5b
# WA
0EwG
Zraq
/:*N
@+%e
UVzI
\A]-
i`"N
~"C{
s7D jA
COMODO CA Limited1*0(
u ,"iVo
=Qr
w>&A
?`ev
rX)k
?xgW`
j O4L
<2A
]DV;
U[P/
o*/1+u
$'_b|.
}/;I
TuCMr
.f#4(3
O2b7
0{M6q75L
u,CY?
sYQ
HLd$:jJe
200530104838Z0
2A*
<$ObgCN
B)$p
b8f@
AEI*W
%Q?_
1c#
:&L/
"=LK
&-Qk)S
EfM{F;
Z2sJ
jX} l
O5D!K.<
lTj_h
LVHd
+o}E
B a'
Xyxh
0)= J
$(\[,
z \/
Kosy
5YtR3M
# G\
p^/z"M
System.Collections.Generic
vA7^
ccdh
@}cW}t
$A~h
Tgh&
~wA|
"a<[2
% gi,
WX[m
O:3(
B/1K
R+i,
Maf
clarinet.exe
_<~=
MJ9(
+9$9
UV_E&
R@+F
vB]{;
-kvI
OEY{P
*h"W>
\aod
J,H{
U&~*
wQS@
kwgL
!;}D
rvBce
SyzU(8LG
D OW
h?-_
*}t
c-:P
_ B\>
lKwe}
iqF2
OnStop
Q$</
=@y0
B<xM
X^+A
qFIL!
$Bjl
IMm@
iTo(
A3RUK
N|{#
System.Runtime.CompilerServices
U/~*
'n6I
oltH:r
])n-
mmup8
?g9_5
+OrU
SuppressIldasmAttribute
T83\
07x`r
)Y&
Cx@vf
=:G_P
&wEs
Z:n+?t
(Uz~5
5}!|
Aq0J
%s_75
$$\0
0W]5v
[/;o
U*VI
NNk
dx(C
l*r0oN
-/ id
@w -1
8a jie\L
/%+
ToolStripItemCollection
'u\
H/Dm
bQ -/k
76D'
%oQ
:'Ps
,aD]DK.
US1 0
~ 5<8zK)
<G g
*1vH
5Tl}
716*
~/].LF
l8gU
GetManifestResourceNames
R^JK2u2R)q
mfs4T3
]^iv\0'CR
aH;A}'
v5imL
scLQ
l-~f^
0[(Kg
cL_n
"W",
T0gq
cu kv=)R
System.Windows.Forms
c?o})
=#RM
;{0e P
MO!
1x<XA
66+ /KIM
C@\Z
AddTrust AB1&0$
+jU
7]s]L
P1ch~
"b"@
https://secure.comodo.net/CPS0F
?V2E
,h,g
n@8*
&Kor
#:Vl
dfmb~
XAS>
)L[;=:d
_-uN
%"4[
tbOr
'Gb _
XAS7
*Dkg
QIt:7i
squFYG
OlaR
$$xg vX7
:fLL
Y 8D
ZX/SF
{NNa
w\&I
,5v~
H^G6_
ei N
gfN4!3
$9T
jUl
L18]
+Q'h/
xcf[
CJB1
-@m:
*]"r
p\1c
4'>0
get_Assembly
Jo1>
jlL
ttdp
0 ~O
r3be
's#1
K;iv)M
OCL;
Ak0S
cPt$$v
lX.h&
DOHu
zwx.
X{W>
Z~kK)e
*/t)
#Blob
T$u =
hzb$R&
r=A{
f^hA
CF;Nd
r{``|
BPJ}
:tAa
2J|q
)1`1
P +]T
'Ves
qka
;_\P
PUkP[-IS }y
wgfv2
RD
7|e?{
aVCwWGX&
Rm/%|
ijX#
fgNq
*) #
gSph
p[ h
l1a 9
&o{.
u}ugM,
T!r[
)0kk
n:<c~ 4
-'!1
\8BuHI
get_Evidence
l6_
H_9>
6X Sw
CA\
/7*J
5.
G8m>C
'/]z
2o%y4
'&bwo
L5pO
.7*\
h'Me
;1}a
'.Z
ai/B
{RwI
c'dA
a9<Q
{kFZ-bR
bPCv%
]GbR
` )yb
}ZKre
@+2~
\9?H
|9p0
&#EGy'
WWE2j
DT$r
0"kAwE
KI0CJ
-P WOS
FAtT
&6vR
$b];/"
j|;.
#GUID
"1 bn
>4L
;K&_
V jy/
XsA
TO}/
YgU!}
]=JO_9
? DU*HTt[r*n
2L\'
lbA
*2z
System.Threading
ICustomAttributeProvider
<7<G
Jqdf
RB&K
P[du;GiI
EndInit
g _R>
]C# O!Z6
29O~
,'eAF
J,uc5
}QX v
? pB
'%AS4
}P92
Cb@ u_
=V41 0
j* 9mM
RoO*A
LH1r
{8J
b: -ho
Z} Q
g\gn
SWSY&
D 93
)PoZ#~
a<7vY
,x&\s
http://www.usertrust.com1
5http://crt.comodoca.com/COMODOSHA256CodeSigningCA.crt0$
zwxJ
R%Q
j o3O
k}wC
7+]
)=|Z
l $
L fc,
\Z6
:du^
fr=8v
H!SM
i`D
}*NA8
K6}I
f*\>_
h&$U
Zgu'R
e$6M]tx
1qDk
*TzP
#+CT
;[~8
3~qu
ppvQB
!}Q05k
sfgJ
9yhmK!
29J?}
Tyb"
-GfOz
v=o^
lO@PQ
Thr@5
yyR'
P|-^
"f,4
- $!P
RIKr
FY'AqK
DIi.
LTxf
I'In0
qVB}
UwHW
8E>3
@#l,
T{b
~ re!l
3.#f
N_;O
WegI
N ~2
uk*?@V
disposing
VtB Q9?<(^hi
ercfU
K.$"Rw
3+nl
)fiMK
ZOg/Z
1my
9o-r{2
x|07
X2=q
v+oU
8KiQdR
o` Ac
5u,;{
ifou
'-(=
P.P@
K)zN#
vxcb
G.N
o%*u
d$'p~
S6Qi=tr
h@re
#Poy
0 ~Ox
84gn
]fnoy
PKfw?7V
Sh0AT
N-}un'
o@L>
B3N
32v
H`$h!
Wk~J
ToolStripItem
9>NZX
1W^N
*9&]OG
<L&'
6.4C
/vg
8..}
FrM
. >~
%/ra2
U`.d
o<*`
ToArray
D/b;
>f1t
'(T]
E
M$qH
"O"^
,;a8
pXBa
3-x:
9<e
$ 5v
1 0
System.ComponentModel
_9JE
]U]AC
k,m
c|yB
|wd]
k;1f
Xu^
@9P4
ewp/
add_ResourceResolve
R_$7r
G&X
yc7t%
ZJY6
> T
6"*)R
+P,J
g._
~<tn
+(f
~uBz
/F kT
?b=>
_)BH,
m{u\8
K[xd
.~,v,
\ iZ
JP|7
1 P$
nn [
F_Iu
wJM6$xK
ZEGG4
f# 6<
*1q$
=&cj
RMpX*N
z@7<
/2NzQ
W3 g
`u)^>
PqZO
|!Q#
THJ ^
fKB9
jpRe
X)s?
<ZW;wR
CjLd
't\N
rjTI-
GTrS\x
U/~*
>+{E
Y%#5+^
tiMo
_k3Z
NCh^
4^"y4 &
]gno
;0907
*ps&
hJH5
AssemblyFileVersionAttribute
KgZm
LW; :D
ZB.%N
m/dT`S
2eDK&
]O1{Dc
L=A`
P*e:
_?xb
G~{4
ObNU
(+ '0
54{i
~ i"]Vo
1 Do
6o?
SetCompatibleTextRenderingDefault
F\&7
Z!@o
/Z3+
{5u6
zC_
KcG|
T-yH
TsG$
iFo;PY
wzp372 d
System.Drawing.Bitmap
<n/jJ>BR
!nn6!)wU
1Df vW
n,$ST
3C4I
~T Yj
w &D
<D]a&0
oG~H
:94sJ
gnQv
_k Z
StringBuilder
Yy\c
a,w-+H
GeneratedCodeAttribute
%=s4
ZW}P/B<
?i^_o
#}YJm
Y[}d
hl4hl;
$eBA
y\HL
+0e6
Q1Ix
4f2oCe
^E_Q
E=h'7h
39/E3
"QC=.
L>dC
w[&>
)jQ}
9'm>
`we&
?zw+G
ak,J
NTdy
e(Hz
,D:
Cxp s
i+{89
u7pWQ
clarinet.Properties
6bW+
[2 W
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven01b_64 Seven01b_64 VirtualBox 2018-05-28 14:41:23 2018-05-28 14:44:15 172

3 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven01b_64 Seven01b_64 VirtualBox 2018-05-28 14:41:23 2018-05-28 14:44:15 172

0 Summary items with data

Files

Nothing to display

Read Files

Nothing to display

Write Files

Nothing to display

Delete Files

Nothing to display

Keys

Nothing to display

Read Keys

Nothing to display

Write Keys

Nothing to display

Delete Keys

Nothing to display

Mutexes

Resolved APIs

Nothing to display

Execute Commands

Nothing to display

Started Services

Nothing to display

Created Services

Nothing to display
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven01b_64 Seven01b_64 VirtualBox 2018-05-28 14:41:23 2018-05-28 14:44:15 172

3 HTTP Request(s) detected

http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
  • Hostname: www.download.windowsupdate.com
  • IP Address: 13.107.4.50
  • Port: 80
  • Count: 5

GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab HTTP/1.1
Cache-Control: max-age = 86400
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: www.download.windowsupdate.com

http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
  • Hostname: www.download.windowsupdate.com
  • IP Address: 13.107.4.50
  • Port: 80
  • Count: 3

GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab HTTP/1.1
Cache-Control: max-age = 86440
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: www.download.windowsupdate.com

http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
  • Hostname: www.download.windowsupdate.com
  • IP Address: 13.107.4.50
  • Port: 80
  • Count: 3

GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab HTTP/1.1
Cache-Control: max-age = 86441
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: www.download.windowsupdate.com

#infosec #automation

TheSystem Itself @ 2018-05-28 14:45:22

Detected family: #Fuery

TheSystem Itself @ 2018-05-28 16:12:02