MalScore
100/100
MalFamily
Malicious

qEu0xCz

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 29/68 Related 2238
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 518.50 KB (530944 bytes)
Compile time: 2017-08-26 01:30:10
MD5: d6b5c6bb055486294a1884cd37bf078a
SHA1: 0befe32e459be05100fad1c501b4a9780ea05ac1
SHA256: 06befd6a8ad7887fac76617ed4a1aa66e35efe123e7cdbcdd1c7228143f3cd06
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 5  D .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2018-06-07 00:21:03
Last submission: 2018-06-07 00:21:03
Filename detected: - qEu0xCz (1)
URL file hosting
hXXp://uploadtops.is/1//f/qEu0xCzVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2018-06-05 21:46:08 [29/68] VirusTotal
PE Sections 3 suspicious
Name VAddress VSize Size MD5 SHA1
 D 0x2000 0xf20 4096 6797a9daf0a13b06ed180db8834238e1 4d327fe13e00923eb3cdcc5740940b0e933df7da
.text 0x4000 0x7f8c8 522752 e775509d2b7a9f296ff16374c311c696 aa739bca9ea4bf3ab8db7084de18224b71a7a3ec
.rsrc 0x84000 0x670 2048 f591e980abb6a91ba87705fe36b8a455 2232d095c662752c857af69245ed294d55508991
.reloc 0x86000 0xc 512 e08652409352a315e5800834843ea515 89e52c547a5ff38d972f47be394e9582f2047b85
0x88000 0x10 512 6c1b0bc74abf013fea1aa29a5ccfd08f bf97577e32cfe328a516e23643942ec5488445b1
PE Resources
Name Offset Size Language Sublanguage Data
RT_VERSION 0x840a0 992 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_MANIFEST 0x84480 490 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: Copyright \xa9 2018 Capital One Financial Corp.
Assembly Version: 0.0.0.0
InternalName: PO472678.exe
FileVersion: 10.4.11.4
CompanyName: Capital One Financial Corp.
Comments: xbt0d23ha30
ProductName: IIS certmap authentication provider
ProductVersion: 10.4.11.4
FileDescription: IIS certmap authentication provider
Translation: 0x0000 0x04b0
OriginalFilename: PO472678.exe
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
No packers found for this file
File found
FIle type: Library
KERNEL32.dll
mscoree.dll
IP Found
10.4.11.4
URL(s)
No URL found
String too long
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
 
e1ce75ef-4f4a-991
VarFileInfo
2018 Capital One Financial Corp.
Comments
e1ce75ef-4f4a-996
e1ce75ef-4f4a-995
e1ce75ef-4f4a-994
e1ce75ef-4f4a-993
e1ce75ef-4f4a-992
e2c4a01f-40b1-9d
e1ce75ef-4f4a-990
10.4.11.4
InternalName
Segoe Print
StringFileInfo
Translation
Assembly Version
FileVersion
23320b6f-cd32-df
Copyright
VS_VERSION_INFO
wpp
Form3
Form2
Form1
Capital One Financial Corp.
ProductVersion
FileDescription
PO472678.exe
xbt0d23ha30
0.0.0.0
OriginalFilename
$this.Icon
LegalCopyright
IIS certmap authentication provider
bc4519c8-fdeb-060
CompanyName
000004b0
ProductName
c:\&qRGd\]#u7G9V1Hrm>;wY%}#
MP<3C
wB3U
wB3P
wB3\
o_WVb!2l1
k]B*s
4V45
gZbJ
g[D?,
,<:([
0o
6&
5;5!!!!!!!!!!;
wB3I
Int32
dZoM}
Fg1i
\\\\\
awHV1
&K$)y4
e*Tz
wB3f
wB3e
wB3k
wB3i
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
Igj>
awB;C
l(l:
`1{
bqPY@
g[V^
Q,]vs
=AYc
aGB:B
dF??FFFFFFFFFVF
$Lm9
]]]]11111$$11111111Y
l])
X\ps,
wB39
MqEVd
a4-T3
A,J<m
^?}e
-1"3
aqB#C
6`xC
8rh
)l"5P5
wB3@
cqD>C
"[8"
S<LB
GY
 +
D;;;;;;;
Aavc
tGBJ_L
WwB9Co0"
E;Sq
<
 Q
kivJ
kqBLL
4f}T
5q[D
a2F9C
aqD?E
`\.O9
`wB8C
?9-E\[Vo{?(knq9\,kW\*B18|=_".resources
PNG
4_1d
i!,3
VueE
P
hwF_
wwwwwwvo
Marshal
>	aMIX9y
A\:a
aawBU
15!!!!!!!!!!!!!!!!
9999P
@j>/
c?&L
aMLYC
YqEj
.Tv0
{6
*
,S[
a*B0C
]]]]11ZZZKKZZZZZZ
B<IM
yfeB
)&N9R
a}Q<cM0
op_Explicit
RuntimeFieldHandle
b6e]*
WB8R
0ewB0C/4
-`l\
$i96l
a}B8C
VVVVVVVVVVVVVVE
5?yq1
xjeB
'r"}
FVi[
qQQm
Y_l_
7;[B#W
Fr@V
DfwB8CJ7
A-o
ppT(DpY
2:Z&
8I(Ub
ifn8A
|".>
q`"W(J
CW,X.
VQ4+
dwB<C
[{f"w
999999PP
<<<<<<<<<<<<<<<<
`Z*g|
]]]]]5]G
{C[VX
ZZZZZ6
aaaaMMM
gw@?^
LeEK
{1PT7
l)"K
F?mpqv
EnableVisualStyles
`vC;E
_>VP)
mn+
C>0I
kwB=c
1
U"OP{
Vem;
"^D9
wwwfff
[/Jh
tqnnnmlllhhx
Yc5!
awB*s
aaaa
Rg)#
.99OO  `====(((AY!**************BBBaaaa*******
kw8SE
w+W+
k29>
VS3
uzN=
83&~
hSystem.Drawing.Bitmap, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD`0
_w5_T
wB8k
a{B8C
a{B8B
mlllhhhhdddda.
R b:Pa
zQ!,
[~<T
,B9B
AppDomain
Is`C
2V+W
816
P,;0
"5Kv
aQB
get_CurrentDomain
=Tc
z$hK;,L(3E
a3B3C
awBqC
PADPADP
<+W'
rTdT
1%`bw\+X64^,
a8Q-;
awB8C
^Qteo8Q
@
Uk
awB8S
\oU;
A<"3
CQ]#
&wf$
fwB9C
asy9C
!lWK
gW@+j
ToByte
/9_d
\aiJ
I:'9
_7=+
kpD3Q
VYB1F
set_Text
gwB;C
Xt%lN
7eOk
dd
&<
aEB	C
6 wD
_-EW+
h|tu
D`Yf
#Blob
Control
9CIl
MYjbb
Hzg-
pwwwpwp
awH2=
3}s'
C=Bf
r pPK
KgtrcXC.Properties
#`!+
g[
cS+V
wwwwwwwp
a'm/
4>,Mp
3gwM#
,
i\/
RwB=i
4
1Z
pawHCR
;_L=
Type
;	a)n1
3	`E;
Pg
UH
C`/lCH@>
Zut:
awB\C
$f8bb9898-b10d-4a4e-b61c-ceab726344e4
R}}h
Z=bO
kdD(E
~<7
vi&;0
PVoS
$
j+
H9z9(:/7"
atC9C
HwB=<
awS;k
A

 111
(flh
`e[+
2s1H
__(4g
gm=A
hYG/P
dP0fM&
|r_<K
%n
N
#Y?o
=wB3{$1
^1of
w/ma
A2<+ba_
?8888g
wwwwwwwwxx
1-U'
Char
!1U?"
VQQQ;5555;GDDDDDD555555;;;Q
>9}AxGn
d.4h
Cn0u
c\LRE
hyA*B
<%tV
pd<3
e+0c
P@s4
Jg0M
D$Liz
%wB9Ch0`
f9C
1,1
#
wt4K G
Padding
qz.
gv|`
x%\
pnka
\aEJ
yXCY/
?HVR#X
A7p5:p
c;[:\W
mllllhhhhddda.
x@Zu(
)(~i
+|94
BrZFJyM
a3'_*
aw]y,
Rj
au
dU]
vfff`
]%	Ql/
Z\
D
PawB9C
|yL![
~UUL
Z's]G
31)p
|L"fY]
XI
%
asB8B
$-
?
QvB;C
>mI4
jUqN
,c5tSQn
.text
XE(
'eb|v
GetObject
9Vr<o
a}b9C
Z	1Z]]]]BBB%%
B4CT0
muNv
3|v;`V
h.AOV
Convert
HYN\|COo
System.Configuration
hc"M
xK>m
IjB9I
T988
m\W>,\0
\\\\\\
M,m
^
|rW+N
&c{78
p[1'
qFt[
^M}T
9	'>
ojG?C
"zm4&
g@Y
v^$6
O4*X1
pi
avB1E
EvV`C
sZ+E_q
mI|
nD
|k^$_
pRwB=ihCw
adB-b
iWA8A
55]G
}B9G
a8IYC
~D.
0-km
\:E
ya}Y8-.w
`rb8B
awB#C
:pF=/j
$
8Wi
a(BoC
Gv\U
S|1Zr
z]wF9
?B*
cuZ$K
wh^G
nwB=J
QvB)C
-`B/;G
h:wg
:*'6
?rPH]
V(!
*ZZOz
A=*
awj/C
set_Margin
!(!9+
lhRak
Z *n
?Pmq
a}BiC*
w0\"
oy
1'l
kernel32.dll
`cc9C
a,B,3
jiguyvs
mhks
!`3BvEg2
eWC8M
efG(U
eWC8K
HCRWd
\
mJ
B8^v0L
a;-Z(
~DE
"KK""
awH30
`Pw'7
K<;2
`cT;
XewQx
awF!k
O4-T3
hfFV
Settings
hfFY
$ilZ
awB9B
awB9C
nnnmlllhhhhed0
,;$qg
B8^|0P
'C8
fwB8C
III$III
$_`
awB9k
U:T<\
JIdsRu
cDBuE
awB9c
00]]]]
>(jd
EW4<c
;H6z
-f8n@
#.e]v
qo3j
dfB}C
gqB9C
V`Gb
A:3
2/1r{
a}ivD
height
(w_
DaS+
(w9G`
*R*OMqw
yhwf
$
Y[ qVE
EAHd	9~
d^(_
wwwwwwto
xpQ2]
T:gv
4DV/
Ne)z
9~*OT9
bQ|A/
2222aaaa<<<<<<<<<<<<<<<<<<<<<<<<
;o}
7q
i
(.n
E.4Tu
ya3BLJ
teo8_
VVXVQVQQQDGXG=%
_6)
`wB:C
t_Xa}
Ha?iw
awi9C
_ekT
kuI/O
U|NA$n
;wB30
@@@.
jz
[3
nF+T
w
I&
bwB4C
T~ui
dwB,C
Q~tC
v#K#
CY|$
LT~
M|:bG
wawDV
`jG$F
wawDK
sj@?J
set_AutoScaleDimensions
!!!!!!!X
T
___`sss
BW^_
Pv
FIS
fffffff`
,wB?P
ecNYS
2FaS
)EVF
get_Assembly
Yviv
{Zmi
O-q=
iec%D
d+fn
l3{%
Gyj
fu-AC
ajG?D
?9-E[Vo{?(knq9,kW*B18|=_"
]9fF
<AX0
-a[BnC
6 <f
x9g
7ZCn
pvwwtvp
fWA8A
e1Qv
auC2B
awB9C~0
gwB9C
'fSf
"m@D
IHDR
ljs7
WrapNonExceptionThrows
%;&b
wwB=R
T&	$
JRco
FO.n
josB
vo^79*-n?`
5Qr-"
"_a^\[
GpC?=i
K<**BBBBBBaaaa*******   6**************Z5MMV!*****BBBBBaaaa*******OOOD*************Z55V!*******BBBBBaaaa*******9OO	L***********ZA1!**********BBBBaaaa*******%999OO  `====(((AA1!************BBBBaaaa*******$
wvfffffff
?T0Ji
???<
e7G<
a/F9C
==vha(
agB"C
{bEP
awFK
:E/(
y8{*
fA^6Y]bn
awB(C
iq_<K
sFW+n
a1TkU
VB'Y8
mD_^+
w'Z,
##########Z%%%%%%%%%%]]]]%%%%%%%%%%%%%%%%%%%%%%%%%%%%]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]
;DD!!!!!!!!5
STAThreadAttribute
agB<A
NbA.
aulD
=NrO~
iqS<E
I(K
e&C}C
XowB9C
k}H0R
N:mO
System.Globalization
:a_B
1&4{
{[a{
IconSize
~BGe
6fTB=B
412'WM<
T;'`
"Q6.
uwB=J
m![G
[+-XjkC[
$awH
y(y@/$
z*^3TW
aeB8h|0P
bqPi@
4-]&
System
EventArgs
@2`sHZ
Application
wwwwwww
wwwwwwp
s!JGp
!wB3I
('i.}
1:C#)
Aht:rV]"V]vW2lhpoY2)Ka(\#
wawDGe
I`B9I
$+=N
&tV~
<<`V
!.Z9J,
`|BGH
KKK
0crC
faTJ
fIiG
iiik[ZZ
bT>Ugs
aBB=C
MethodBase
#Strings
asjlC
\vzu
MS1|
k/
awSK0
i/`Q6
6,kl
444!!!!!<<<<<<aaaa
MwB9Ch0
B8Z|0]
8|
o
r#ry
X]]Q]
)3=U
2mUE
[tN/A|?
<x^.
?awB9C~0
*cwB0C
vwB=R
%awB8C
5(5#=
VirtualProtect
abG9C
}es;E
+B9I
c:	qx
mIBG_
2#uR
a7n9C
(m:'
lG'qY
gggggggggggg
width
`x&<p&s
TTT`aaa
get_EntryPoint
a4-W5
pLZ
%*x-
wc]as
)pqBdV90
aYBBC
]i)#
a4#U/
eWC;K
2
\E
wwwwwwt
^4?1
>,w0
set_StartPosition
$6X0.
Sf|W
cuL7I
xsfZ
e	m9C
fp7Ry
7<Fb
hqA=T
dLNG
\XkX^d?
qIw3ne
-!+
rilzB
S{BM
Ilo~
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
rw
uC
Sv%
No,]
`vC8G
`vC8@
`vC8A
`vC8B
Svj=
System.Drawing.Icon
O;&ql
r#\O
6t!wg
}}
<
?-o
m6(?
wwwgwwwwwwx
~ttqqnnmllllhhhx
nx2'
ax
TF|{{yyw3310/.,+*
;L^E
FB9G
`wB7C
aYB	C
8#^
aaaa!!!!!!!#FFFF
y=0IhCt
!
wUp
wwwwwwwwww
re	h
#}L
Z.e8
g_K9C
**&I@wD)
ComponentResourceManager
wwwwwwwwwp
3N&U
vL~#
6Ufi4D
kRT?,
V
6
%%%%%%%%%%%BB,>
%)q4C
Z_+7G}
\a\(QG
q=f[
J2r
^	K
cx>G
q$)P3
e!%t
ZZ]]]]BBBBB@@%%%%%%%%BBBBBB
W~fdQ
~[S5R
9T;
Z6666666666666
ghFFNUb9
\P.`
7;{"
j#VA
aAB`@
hW@8Q
ucFB
0O$Ai
e_:9C
:i-y
iiiigZgggggd
ZwB9Co0
bvL%R|
Aw_:F
4pCQ
rXxBWz
sA\'
C'0J
llllhhheddda`.
7wB3k
lwB?k
<Gd[
"#4Fu
N.b2C
wB3H :
Z`b
Y^t&
o6.
hY6D
_z	Qh
ZEe5E
(aj]Rf
kZ8888???????
,m>
w1\7
fffff`
JnL=
fG	]
<RHw
p{S,
Form
Id54
QiPY
&&&&
U`5N
%wB3,
N!3/
xafB
/a+t9C
?%
D
@|`M
pvww
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>

<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
  <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
    <security>
      <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
        <requestedExecutionLevel level="asInvoker" uiAccess="false"/>
      </requestedPrivileges>
    </security>
  </trustInfo>
</assembly>
awC*G
awC*H
i^f/R
m-g)3
00000]]]]
0k
,$ChT
fr[6
DJX
CG0S
Niv#
s\X}q
S529I
vy3B3C#0q
c~C%b
a%#W'
F]] )<hr&
/~hh
*a@BoC
VDfE
S &o`d
awB)C
wB?X
QtB+C
[Lf}M
wB?K
g6:^
Y9C9C
Yd`V
ae3BII_1
vw`$?/}2
dw/`
kkk`{{|
gLlu
2DAI
atB1C
wwB3
!!!!!!
wB?k
6N8B
gqD?C
gqD?E
@|rn
:O-T
EwB?=
1'Ua
nnmlllz
set_Name
]]]]ZZ>>NG
Default
awB?C
=wz
}kq8
SM:8
t	_|
^P '
atL7_
get_Length
\\\\\aaaaBBBBBAAABBBBBBBBBBBBBBBBBBB:
SaNm
avBMC
M7p-
EwB?k
vgEj6
B8Z{0Q
Y,>KN
K
v$q
A':|
5
n
%'X'
aaaaBBBBBBBBBBBBBBBBBB:
5:>.-,(&
mEI`
KKHNm
EH@L?x
ResumeLayout
l	IkZ5
_ki1
awS&S
m3.#
avBiC10I
XDwB9C
a~B
Cx0
cdBNE
Ys*TV
KA9~
ValueType
K	`PQ
System.CodeDom.Compiler
eqD?E
GuidAttribute
aRB8Xv0L
SetCompatibleTextRenderingDefault
1%\
}eU`*
E;k#.
&_d(
"W7
w]Bx_
3tI
aoBGC#0
o$@R?
O07$`{
T@.n{57
(mU%
@8h
yo@0[
X
<]-
22aaaa<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
s9qqr`|||
7f/G
&m.*
rO@Y
S^sYY
/wm
Vepv3
yVYM
t>O0
BG8=
^cbZ$#
wwwwwwwwwww
gZDJ
23tL
WUc
3 );n
wwwwwwwwwwx
%NvY
7=rBTp
k^wJ0
"('}
FormBorderStyle
L%%%%%%%%%+II
i#@MO
dWB+
xUdA
UInt32
Itn/
jfwB?C
{W>9
C40W
jej-Y
q_>A
n\)I
msS3Q
;v5t
$A
 1111]]]]
:gN5
S+b@Sj93
aWBoC
cqL:E
VewB>CJ4
B$;J7
V0[%d
pwwdgww
\U7K-
Ba}R13
r9E%
1xTRnG
::0[
{kNn[
;k,8M~
FormClosedEventArgs
yvlM
=/`Q"
p#Kc
iek]
oY	J6
-5k7H
vB9A
qyk)
~yFA
D
awBYC
@
???
B3wb
ifGV
`rG8B
@uXv
,J#7
B9Csu
awS;kR0
Or{t:
smlllz

}wB;C
<`wB;C
*tqnnnmlllhhhhx
fiS7
a%'X'
qX)
HHC]
)s^LZ
oP<B
Lp2^
8@WY
aw_7K
P8z|$.`
O0R^m
8ppmut
<}-x
XowB;C
o%ND
vB9,
C$0E
@w??0
L(?18$
+B;
n&A'
?aLBcC
C$0T
=2oJM
]Jsw-
'Kl=
(1y_
hZIv
add_Load
wwvfgwwwwwwxv`
s=I*
YZEp
BawH;,M0
DOL%l
SettingsBase
7]}*
:g`!#
wxwwwwwwwwwww
j~a#
5njS
,fVt
aaaa
jg:2
VX]GX
nq-
u
<BBBBBaaaa******* `=****************ZM
gV66
IDATx^
Ed0f
7uZ
YOzQ
11+z*
Data
)*g,
CvbyA`
dgdgse
+`Q(
u<
g
G/y>[t
"X
A
b~C}C
8]%y
DU=r
a}g:,
xtb9M
hBCy
G
T~3L
wFa$&D8
`Dd`J
Wp)k6
qf}pc!
o>e5+
s	$My
pHYs
.ctor
~MYC
k_b9C
N]os
ygg6
fq-RC
`5B5C
aVB3h
crC9C
ATef
e7QX
E.~3
+&&0
prS=,
#[7}
%6,%
ZplS
QwB8
!aaaa\\\\\CCC3HHHH
ffff`
15.3.0.0
xwwxw
VGzF$~
"-NN
Invoke
}us|
\=f6N
D;Uy
m#bN
ha7r8
kltU
N	^=;
bwB9C
^[b^
bwB9F
a>BWC
{%SmP
J^OQ1
e-5$
Jla@MA
1CeB*;K
`	[4p
GQVDQ
QtB*C
?d),
sb
7
=lGd8O
U--
J[EC
JZr$
O]e&
!W
X
a}jcC
@N3o
iyb>Q
71b3
Module
Q[PS
Un_2
"^_^^X
2>8,/m6
Array
/v#
8'tr
tDK
ZZZ`ooo
B9I[k
%BP@
@.reloc
(2}
awBfC
^-(V3u
mc\A
oq{~
llKhw7N
k	w9C
v$':
IawB9C
0k>A
XaSV
~_]P%O
DW%RX
Byte
get_Chars
3%bK
-B9B
wy}q{
apB4C
CMH4"4
uoA;
sn_+Z
H	f9C
^QojP
`sD?E
V.XL
a}6	C
CEV
|wC [
eWC;M
8sfV1
i0g$
6!W*
wD,Q
fpA+
OOS@OOT@OOT@PPT@PPU@LKO@EDF@@>?
a}808
2>^AC,#
AS3
knjcC
ncR!hX?
HO~2
X?>^
e	O?
5u|t
"awB5C
!!!!!aaaa\\\\\\\HHH\\\\\\\\\
Qp
k}H3J
AuC*C
l()F
*H_m}NTq
,Y|d
<l&k:o
iAsp
z}D@D
Gi@2
$$$$$$$$$$$$$
]C(
pDwB9C
t}8-
a3B<B
0Ty`
y8B~k(
7v-F
]UC+
*5*!
I.B9I
ItN,
asKBT
asKBU
;	j
{8e[T(
JP2>%^
>,O,
h&;2b
AI;3
V
Q#Y
%%%%%%%X
DDDDDD
}+N,
}kF9B
eawB;C\0
iu_%E
:L,g
a6BJC
nz UY
DEQN.t9
&3HZ
~V>U5
!Q7sw5b
E
Uf
YY	s
kK#J0
I^lb
":Xp
RuntimeCompatibilityAttribute
awH31y3
<LP9
B{lMiXKB
cIDATx^
ji>80%Ls
IckR
vy3B
Assembly
,c!
=rUMb
&&
=]XE
Iab3Ny
GraphicsUnit
~wB3k
] ~n
iySqR
rrr`
!!!Q
~>8n
System.Drawing.Size
GGGGGGGGGGGGGGGGGGGGGG
:h:n
dWC;Q
`wB8C{5
41C3
SB9E
SuspendLayout
gBDc#{s[
D#S@
HVyc]
a/C9C
_w1ZC
_[d#F5
.)\n}
lIAb'
*kmC
Qu'
"RWRRP
z82CF
g8F+v
Size
#a~w
awB9CN4
Y4OO
8%tg
set_AutoScaleMode
#wB9C
cwB8C
a}jdC
w~x$
Jn*	/
|zxS
wB9C
|w/B-3-
wB9G
sx]Q[
1.X$
aGG9C
`vP$@
M]aMg
_<wh@
h?u^
}3XD
;2<
"Vgggd
awSJ
/B9I.Q
t_Ya~
ewC7M
ewC7K
&Xx[
{Zts
awB=C
"XWPRW
8C`<
ik1V
sGR/@
S+:A
IContainer
pE6`zn*8
c:&qRGd]#u7G9V1Hrm>;wY%}#
||P]
:43a
8owS
,rOZ\Mvk
D`wB8C21
R6A?
r]
Q
TMp-
lj,]
@|,J/
gWB$Q
I.$|j
}YM_
{l#s
lu=\
|"BR
?hj;S
e/C?C
A+"D~
'p*FN
=YP	b
oA`;
v\A/h
,x_rMP
a|~g
-?igV
<<<<<
>tP|
]48m
~DoV8T
BkGOI
<
ResourceManager
mN`R
9S`8M
RB9G
#O^0)
w$2f
v-~ y
!!!aaaa\\\\\\\


\\\\\\\\7
wawB1B
K)Q`
]]]]B%%%%JJ%%%%%%%%%%%%?">WB]]]]%%%%%
kqBDR
raQ-U
awDGO
ContainerControl
b[i '
Y-;G
}k_6
auB1B
MC	Qi
i 4
LMwy
l zX
%%%%BBB]]]]%%%%%C55HH
awDGj
g_
9C
k|E?U
1>]x
w_99C
+On{
=:!~w
a2B9C
a^'
arB@F
<-^9*
TF***************
.R\#?b
xk}
~W%
;;;;;;;QQ&&
avC9C
Hc8W
*u?Kz
0i
!
"QGF
\\\\
_:Op
C{&
a*B8C
5qMq
@#X1_
awH&L
C<0d
~:&m
Q;yI
QkqU
tawB9C
`vC=E
H0^I
y@Xu<
#H8Q
B8^c0W
[B9I
[x!S
iwB;C
aeQ9
$+C&
Xn@I
I	B9I
V{rj
gkj;
Z5$oD
q5m-
u6H?C
r|T*O
@>AB
eYB
C
|%2s
S0Gga
awBA
ewB8C
4
FMXH
Bb^C(CG3
|?w^W
awB9
a!B.C[0@
vKu$
EUIZd
a(BpC
}5$-
Z6FgVgVkgkZ
Z;:8
?@lA
qwB;C
&o<
n|v/
)AtQbFn
awB'
~bze
?uW.
%dx
FU|>"
bqPIK
qD|b;Q
Close
@Nov
yl
C7Cm=
AvpK	W
awS;1
]4p
IiT&b
\<a
I
awC11
-9Ecn
&+h9 /
5;555555;;;;;;;5555
a}H?@
q/9C
RRR`aaa
hUEa
M^"}/w
7	uT
Lejaegokaegy.Resources.resources
P)U	&7
awSGu
awSGk
pxwwxwwww
wB3Ud
n*t&1
$Mj
`R{
.fF@
XWX`PPQ
C"0R
q]/3
QvB>C
hN!j6WI
b,\~U
vOsN
(q}!
(glN
{'Nwl!)%G
`B9G
eSIl
avB<D
6B7CB1F76B99023BEFA8EB2B530216F00916E4DF
vwB?0
C"0q
qtO1q
WViX
e]B*s
gAMA
DDE$
C
0I
?#[[
awF(U
'##=
awF(Q
|<y&
l4ET
8q-=
AutoScaleMode
^
awF(D
M B8Uv
]n*^
ZZOE
c>'8
s@_
};tY
=l
6
.cctor
\-*U4;;
m>E?
")))))))
'Lvl8
^
set_FormBorderStyle
QtB&C
t`	C
mscorlib
fSystem.Drawing.Icon, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aBj
\;SLr
6hA/
g}AN}
~,7`Q:
e	[
IaB9I
-ewB:C
ioK+j
psjSC
8wB3E
#haG*
aqj&C
|3wB8k
&&O
cwB9C
BBBBaaaaB******===*****************
mRgV
snF,T
Tt~i
awD2h
)U0o"
&hmN|?1
=9WY/8
"otLj
apB$C
91Mt
E
gV6kkkk
?N+/
xB
]
N"(TV
Q=e9
$$
 111]]]]IIZ
1~Jq
h\	?
F-yj[(
QF*@
G	8
System.Reflection
vU$
`wBVg
GavW
@VwB9Cm0Q
-GOta
444444444444444/"0Q&&<<<<<<<<
zB9G
RuntimeTypeHandle
nnmllllhhhhdd0
Z/O_
:Jz9
mLIG|
p
b+
KwB*s
4]FA
auI9@
k}K(k
^G%H
n<l.\
RHdQ
QrBNB
nnmlllhhhhddd0
50FO
BWUBDFE
aWB9C
Ko1%
Q0:CqH
#G'v
bai9o$
[9,G
=:L.
oH%&=+3S
:P_,
G-P
hWA;S
:J
q:0}b+
$.J
$/*.C
Pt
i
iD|C
N6<\
"EsA
UO#s
vfffffff`
C}7)
auB$F
K,?=
#dJ1
=<8<
III'
]Lck
z;oJ
a'B9C
0mJR
OOOaYYY
_c[,
psqB
L1,E
&O+I
awB	C
D.,E0
:1h}
a}1aC
<L>a
3WQ[
0W&ry
*c~/@A
2'It
Z@Y85<K
"KM"K
-5aa~#
5DDVDDDDGGGGFDDDDDD7
aMPYC
&wB9Co(@
<:lg\
;w@[I
GstX
Cb0X
[%
wY
agf9C
fgST
oawH
<wB3
psS<k
E<P';/p
XxWe
1p[g
Yq=
sB+P
p:EXC
o	`~
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
w1=
!!!!!!!!!!!!<aaaa
wB?,a0
r/Mb
F?Q|)
$Y
c
sjL+b
";R
c:\&qRGd\]#u7G9V1Hrm>;wY%}#.resources
Mwl9k
uGS?
mscoree.dll
!This program cannot be run in DOS mode.

$
awCV
@!wF
P|1#h
#RNC
#;;;;;;;;;;QQ&&&
;KSK}\
-h(l
KG~i
=WUX[
Dispose
R>zDIf
m612
aKMCC
5wGm
6ddZ*(&%
+4{3
|,BE
otD+
&yQ
TGut
Z5?
2dY
hSystem.Drawing.Bitmap, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
I]UV
oV*I^
BIky0
3ocyQL
b5Y_
R1x=
v\8C
a's
$:j
FA_5
-
1hqB
2222222aaaa
85p{d
@]}jk]B
6A],e^
set_ClientSize
Pg1L
hwB9C
0fV"
$w0Ro
w7>cW
VGGGGGGGGGGGGGGGGGQX
E|FLPH
ZbR.
06+$
O*7R
fqjUC
O>,M&
ahE9C
h>Sa
W4/N
*CD
{
avI!
qKi2<a
\R>u]
@xwwxwwwx
49~p
8O5	QL
*wB:C
BSJB
WP;W
dopfp`3
gvC<F
R*Pb#
o`Z!
oXq@
}}d!?_
$awB*C
jawH
o_MF
A'7[/
UBBBBBBB
`wB2F
a!B.C[0v
N-.^s
Yg7}
]~3<j
9#<n
r
{6
B~P
9qf0
`e"=I
MH3Az
<ii\&
9dV"
+'GG
H	H9C
IntPtr
;*mV
awiV
-`)Ry
GwRuC
kqo?0
]]]]]]
s**d
^;pC
cy^1K
cl8!
BeKe
6!h$
HtqM
nEh@p!
*aYBnC
)peB
U3wB8
JJ~
Nd~W
'##z
n)Mv
C:0`
yA9h}8
``wB>E
k# u
phwB=
1HC[
M]P
1j#G,nyo$B
uCmYk
anBMC50
vI'p
0Z>'g
j+Y8
a_J9C
G=1N
atB;C~0
A4?P
bwBC
a9'A7
v-X
i
ct
dwB4C
V8`OH
^cwc
VZZZZZZZZZZZZFV
+^6y)#
A2?(
_D>H;U
NUezD
,&A@
4hq1
V;Me
{9j%
}eE'
V1KO
qnnnllllhhhhd0
Yl|,d
Tw&6
#	:#Rr
awByC
x3qu
avB,F
tuv6
*Mc<
)%`jIoFc
Tl\[
"J1F
c=k5E|
&"}C
;O.zL
kY^(_
iwB9C
:5q *0A
+GBE
TTT`ggg
rVH?C
oSuEi
:-]&
ZZ]]]]BBB@@BBBBBBBBBBB
.[B
B7Yc
a~B!b
&nqrnR
z#Pa
!B9I
'QrxO2
]]]]
MyT*ga
evB90
cah;k_0
I"B9I~
WWWpPPP
]Nq/Q
|r3=&+
*R}u
=u!\
qwB9C
wwvf
]]]]ZZZZZ
gT6gggggggggg
3,Yg4
ak](43
C"_&
."gM
<fP?'
agB*C
X8p=rh
aoB7C
aq#t
\
	V[
qmEXC?
evC<F
MethodInfo
h)KFJw9
)ZxW
}tqnnnmlllihhx
[
sk
wO3C
awH*F
6!Z&
P#&`O>1/S}
p_A?R
Krbg{
sth#
s@dD
CompilationRelaxationsAttribute
uuS1
p(BI
axG9C
)< #
f!uc$
u&|c
ppppwwp
rCs/
Ib:3
eqFW'
xwwwwwwwv
F?mq
wwwff
!m18
5rA@
+(=OE
vff`
.lKt
avB:C
ne6@wL
QNtNx
V<{;
fjs@
!!!DDDDDDD5!
wwwwww
W_/g=
arb8^
awB"s
5bNge?7
%%%%%%BB]]]]%%%%%:&*5HH
$NWfU
NWL&X
FaT
(
avBF@
vxB/s
iQB)
6[)?
nv.U
gqE9C
gT84
sBV83+
l1g2V
Qu
WwB=A
*D93
eALb
3;W"
IWo]
mCyY-
IEND
F	rf
DawHJ
6qP4
Vlq>
3tA
`\~o2
;N~7
cwB;C
C?CE?@
Qc3k
`uD?D
ocX^
*	=#
Cj5pX
*	=>
#L
.=s<
`u?#
GZ]+
krHQ#
wxwwwwww
gajBC
B?C>!X
l35>
_8	S1
iaQ0=P0
awD(K

&-4n
a3B\C
H.n;
15.0.0.0
'jR3
)&>Zy
+&NQ
_zZ.
=Z ]
C~bV!
8hDg
"mIN
.xK
awS/T
l K.
Z1~q
SY&U/
}Vy4!
kVH?C
xg`}T%K[
NNO-NNO
!!
p@EXC
!5!;5555555G!
Aqn];?
}"7aW
ZlyV
}Q&q
av@`M
gBdF)
J
Q
{f@=SX
\a}J
<4%A
P-oC
!!!!!!!!!!!!
h_b9C
dBvD
vawB9C
avB8B
`wB=C
i,:y
avB8C
,|,>W
dwB9C
-))
dwB9J
q|qB8_
wB?@rb
Oe2L`>
f%}w
Aht:rV\]"V\]vW2lhpoY2)Ka(\\#.resources
>G2m
xwwwwww
kKcu)a
wwww
UtiC3C'%
avP K
IN:a5
$!
e
W.R"(
R|bN
wwwx
AssemblyFileVersionAttribute
9rnyH]
sBIky0
oy@;A
drG8B
G`
:G
vffffff`
e8x<
uK1v
KpQz
System.Resources
fwE!
,
sUgE
:'M+
wKH@x{"W+waf
7};o
aaaa\CCC
).Z4h
w&36s
pjn#
`Sc9C
gZ*Be^'
UvKs
c3Z6R
aNB#C
DU(Y
wK9
[#ty
RXov
s~--
AUC\
yD9h}BL
?140l
avB9C
WVjM
hC*$
9sC;3
r?b3
+R?????
Icon
-n1W[H[QD
B(C|6
~ "
y|yQf
KJvk
2?}fV
SC&
kELdz
*c?*
1p.Fu}
wwwwp
"(4s
wwwww
oo9x
#;cwh~
@w>'
(a]~}.
g[~.
}E<.
Font
;;;;;QQ&&
P<8[	*
oyL7F
fpBIky0
C,:u
zGlT
@\mJ['l
cwB<C
awBGl
xr+J
34X{
String
_CorExeMain
h}B}&
a7B9c
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
[wMG
*D?+P4
g8888?
awB1c
9BG!22t
ZMSG
olYd
\\\aaaaBBBBBBBAAA***********BBBBBBBBB

H2
0=%r
`ek1@
aaaa!!!!!!!
R!P#
FG.N-+L
InitializeArray
gpB9C
ab(U
w2X7
,*S)
awB1C
C?0`
]c~R
f^*
pt__a
wwwwwwwwwwwp
awDKx
+`;"n
GCXHS
aTBuC
w>R
j4/92
vh1C
:
[j
EditorBrowsableAttribute
asS4\
O/:C./3PFZ
]!!!!!!
1#]z
knca
aaaa!!!!!!!FFFX
kwA$F
zdvK9C
PI)d
33]*
avQ,G
[1p|
i`~W
SST
GGGGGGGGGGGGGGGQ]G
`vL>C
5-k5Q<
!wB8C
5;M&
mCH
@wB9Cx(
;Xw`k
&	AYS
jWu~
B8Xt0N
x`](k
~Up,
Load
n~)\w
2|=$
es{+]
QV5d
System.Drawing
nQtTEl
)avx
get_FullName
1	7
sjZ+b
`wB;C
B%BBB]]]]%%%%%5H/
awDGP
e0NDdl
n{s
ivB1C
00I	ur
wxwwwwwwv
]B"s
a}UJ
S[rZ.5
_5nDK
e[E(G
(`}v
"RRPPM
T	]L
@#*
aTB
c[!2>
\Tp
9999999999999999
Gbg
ijG,Q
F:Gm0
.%;
F?mmqqt
[H(f
*{jw
-82h*
D&#@
!!!!!!!aaaa
\{j*
Dha>
RuntimeHelpers
PGh"uq
B`vl
0bwB
PDC?
|^
?
];;;!!!<<<<<<<
V95UO/
C?0O
rJ'm
Uqe
f;z*n,
:McW
cW-
L
aF,
(g^i
T{.5
c_X9C
C80h
nqB
dHa.
TW3A
.99OO  ====(((Y!***************BBBaaaa********
Dl5{m
6dGE#g
!XB;;;BBBBBBBBBBDD;5
Vnh?]
Object
xwwxwwxw
E`J
Uo
h%
XqwB9C
rtQT
wxwwwwwwwp
zUA)
*im
ComVisibleAttribute
.6W
3System.Resources.Tools.StronglyTypedResourceBuilder
0745e627-87b9-fa.Resources.resources
53U9
wawHV
$.t
f(/c^
sfQF^
L	M:
4q+Ziy
-~
1O
s^J7Q
xwwwwpw
myp)=c
aqBZN90
I>?F
_GDo
\#zn
HJEa
wH9C
H\W1(a
wxwwwwwwwwww
z)h;
"8bi
ZZ\KKKO@KKO@pnn
EditorBrowsableState
O8vLo
NaEB9C
QiQG
ewC:K
awB6C
D*V^p
'4;H
CultureInfo
b/S`D
[uiR8
#
(d6
1.0.0.0
B?Cd
adB4c
*******
@w?*
^~ c
~!f@
$QS"
e
.k
QtBkC
lCUI
T0v-$
][1*
atBRB
k5{,
~czH
a
C9C
O+=+
evC8B
aj9|fa$
ewB;C
awH2
a*E9C
d+Jh
sRGB
Ft#L
D?@(
tWo.
UwDX
q!9C
uypf)QW"$COOJ|\C>1WdTU7;!
qorJ4n
YhO'
SbSLI
m"	c
ZB9E
%WY4R
1~jo
QuB	C
`wB-C
u)~8
auBRB
wwwwwwwwwwwwwp
aVB=C
]]]]N+
qN,
py
e%C?C
aaC'B
'QFz
pppp
J
nuNp
|YQ
VX5%
n.NUM
ppp`
_.sw
uC
wfV(G
`	tv
D!!!!!!!!!!!!!!!!!!!!X]
aQD9C
0Aif
M`Z
n#)}/'
+<"lh
v1I+
Ha?x
Em[2
@wB1Co(@
DGQ;G
IconData
?](Ht
kA38,
~Eg,4
NQ|^|
wvffg
/Tm/
ex[
Qiq!q3
?5q
wB?P
?
9$
oR7
X*b$
1"3y
1.}h
<`wB8C
9;ai>Nu|
FormStartPosition
d8}
o
L(\Z
6.^,
Q"nPW
\okwb
)@Lx
ffffff`
C	0A
CN}\
%M;C
8<>>>><7
avBRB
ib3B
aaaa<<<!!!!!
>@~O
%B9B
O9BT
}88E
`Wwu3
dwB;C
lZZ~~
J`PN
a61J&
ojL<D
%
ut
}NkN
0~jo
aGB	C
K>fh^
nmlllihhheddd0
8"8,
f{O\D
^av
G!E`
Z*/`c
GetHINSTANCE
-`pP
x!;@
X@2))
~B=P
yrP:
wawD
"yBm
jvi*
@o.-76
v*\5
=Q^YGu
0`TKV
aaaa555BBBBBBBBBBB
7tSS
9>r
wwvfffffffgwwp
g{BPS
6
{ysc}wd
`vF?E
_ttr
awl9C
$;J7
u#U
U1.j
Cz2!
I8S
a}8(G
aB4'_
`v@?E
)B9B
}6_%
Z(04
a^G9C
ABX+
EId
CC0F
`.rsrc
VKAQI
awB!C
8pY-
Z Wt
0ma'
e$/
Wf&B
_p9.T
AwB9C
(^7;
Jk|e
k}B3N
lu28.>p
+
a>
]U'6-1
g>04
AW@SKiw
RwB9Ch0u
FKv{2
QQpQ
){~f
AwB95
k+J|F
Lzb
>XWk.<(
n+Tao
wSL.N
awC"s
2fuP)N
,f]B8S
e>bO
v2.0.50727
`k5B
P1'X
arC9C
1+U&
C8!
xbJzd^G
o%*%
ykM;y
w-! Tv
5wB?e
Yc$Uw?v
C 0|
pwwwwwwwwG
Rl}te
edB1e
A@je
:m
g	f9C
O<]e:
mbwBNC
3~jo
ZR5eo
awBJ
wwwwfffff
mllz
a;B\C
u@l8
JsMX
SpZC
a!B\C
sJK3
CL0A
v.q)
C?C>(h
CY!
`dO11
PF\|x[
j`%t_
?=,(
%x<+o
\\aaaaBBBBBB*(((****************BBBBC

aaaaBBBB***(((*******************>CC
BBaaaaBB*****===******************>CCC
|rJ)K
222222222
aaaa
EvdC]y
*a2
'9h}
a?JrK
GetTypeFromHandle
.">-
dgdgse.exe
jO 
<8
ySVA
$'MA
W2Br
zrUC
FhW*
hefZ
[$$
 11]]]]
Q@Wx
f;W9
%Mtj
rBIky0
w~'|
Rwa~L
sst_mmm
_^]Wcb`Vec`Sda_O\YVIRNK$MHD
add_FormClosed
gqD9C
66M1
D^{d
RXv x'
wwwwwwwvf
gvC8B
2awB.
wxwwwwwwwwwwwx
kY\H'
-;X?
q
o
=&XWC
Gc|sSx
KKm[+
RC0@
3u&N
`wI\
=csBG
oiC?C
</+x
h)<}
Ycin
\E\}Zx
=wB3{
$=lsm
wwwwwpw
<9,m.=
HR|E
\f6L
bwB
w4X/
=c09y
^aGf%Q
T&!5Y8
rf>o5f
{}5~yd
=twD
oawHMA
.b<L;
\\\\HHH\\\\\\\\\\
xS
dMK*
RF93
lEwB9Cm0_
System.Runtime.InteropServices
X/l@
Jl5"ot
6`FC{C
ek\cA:
o:WDi
8PNr{n
w3
::
wwwwwwwvfg
Z9{@
V1Of
D OD
ajB<B
o
Dk
]9b[
u;t_(
snJ+Z
a40\"
ppvtwwp
@jKZ
~JZh
VFFFFF6
U:(G
h[6
a
B?C?0F
C00i
`wB>E
S\e#7
3@ABDH1
System.Runtime.CompilerServices
O#dV
Dq7j.
GwB9Ch08
oJi-
'`K-H
i_59C
^:8f-
pavM
%[	\
x0UA
Cs0q
xl1(
VZ<j
!*****************BBaaaa*******************************************Baaaa********************************************aaaa********************************************aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
kVH?C
$Y~\
T2s%r
u4n6
ZUd
R03
@;1%%%%%%%%B]]]]%%%%%B
llz
awB}C
"L3b
:
p"%
MO@s
{(=V
a}d08
awB:C81
?wfj%
8
UC
apab
V}-X
>B9E
5?RD
a{d9C
awY=A
`ddZ,(&&
93"B
V4Rn
^JL
E`*"
5V5!!X
set_Font
a}h*s
a'0V
eef`xxy
_fLdPL
qM]0
7nMH
KK2l
5555555;
dwB:C
a5.V
Vy+VyaE
L"!1$
7~jo
avj`C
C/Qq
IDisposable
J#}f
Synchronized
ph8S
a1kIv
:\!2#~
!!!!!!!!!!!!!<<<aaaa
431`y`f
:vBIky0
gY,
vc4R
2wB3@
FontStyle
fuSP
avJK0
agB.C
F/X2
a?f_
q`[P
guC8B
sQ
-
s{qeq,
C@0_
;f=7
WY]C
SKV
#i!F
w*Z(C
fZ+x`
bWB>E
6`xC$A40
>$Tg
PAwB
'0V$
a%'^*
Nuk|
}Kt6
rC,{
AvC(
<Module>
AvC+
qnnmllllhx
awB&\
7~|Q
rK:
B9I
Yd	(
!!!!!!!!!!aaaa
KHZ@
Rp'f
SizeF
ewB9C
avL$F
[/"4
AtJ$F
%`
B?C"1h
?8k66
*aqD
awB:C
2_9e
d.~l
0U$O
uB9B
WJI*
svP;Q
awC4=P0
|"-
awH0T
?
b
F#8jYT
OY~
2Nj
Z@3y=n
{#Q^
Y5,0
s6bs
g9oc8
#GUID
\[
Z
$6@/
O&^;
awD:0
C`0l
awC9C
1`,O3C
%9\o
y6Fm
k[B_*
<	BBB]]]]%%%%%H
wXr+
;>_M3
gV6kkkkkk
]g%De
HawB9C
aWs8
=#vnU
1pd"
`wB9C
Kmv1
yB9G
D}p
4%%%%%%%%%%%
ApplicationSettingsBase
9GI2-((
aRB9C
ndkyQ
$[%*'
1111
WCBl
)A^Mz
U>83ZRx
vU"?
xZ5%
h&1>*p
,JaQ
$8 87
*W	%
[r
45
zqQU4L
EventHandler
We(.
Xl8p
FormClosedEventHandler
tawHGQ
XiwB9C
U.D
pzj:C
Q0+<
awS9C
P.Og
= B%
w|6l
2)$_
ewB:C
IWB9I
>}wJ
O.xv
R^Yun
2
*
`44w
DQX-
]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]
08Xm
dwB=C
e5Zu
M#J.
get_Module
]W|l$
kvPmG
`\YY
iLy9H7
]]]]11111SS1111111\
<`+_
F}C
}cD$Xi
Oha7 ;Cw9
&aTBoC
n^Pk
C10`
4(J+
mohZ
tF1
irb;B
C10w
C10p
gez<c
.s&b
ie3B3C_4
n,LC
P8&HY
vvi&#C2R
33D7
lA5
+Gq
T<'
acA9C
GT.)
t__a
t{Y^%
X=%
set_Icon
System.ComponentModel
i	DA
S|`
{x
Kav[
R_<Q
wEz
>B93
pBIky0
S}K|
awB'C
CNUQ
T'*
<6
R7=&
7@5X]
;]YN
~9
.RbBC
bawB2C
'97]
awB9CC1
roU
qnnnmllllhhhex
HOp1
C#t4
7%,%Ah
guB:C
Z<*
2fAH
^WEa
w|zWL
y`G|)
^e1A
u?Gy
x<b
]4I7
))Q$
S"i:
[t98sF
aEB$C
HuN?
w\[t
,fT4
_o"
o)C.
C1w7
dH[I8l
uypf)QW"$COOJ|\\C>1WdTU7;!.resources
B7K_2
System.Windows.Forms
a1FkB
9eit
jba@F(S
b=s^
>B9I
;dwB;C+5
<;A>(
{7;}yO
xadC9C
aaaa!!!!!!!$)
CMN;5P
a~B8C
Io0T
System.Drawing.Bitmap
_mOd
JFuR
k)yc
20i0
[dsSg
CG<.
wH9N
F
>%h
I
(
`qb8^
S
hc
GeneratedCodeAttribute
}awB)C
%BgW
WjyZ
00Ldn
G5-!P
M^fkg#q
#S>?
aqjXC
2>h/
wnnmlllix
!!!!!!!!!!!
qXv\9F
rrs`
4BFID0(
fSB}C
^o.-
m1E.
}xni
atB)S
iyJ1^
d&9T
kmH9C
awB5C
3T-kr84?
vBIky0
YenF
awk8C
XcwB<CF2
UR:
|qp-
#|gh_
Z`PQd
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven06_64 Seven06_64 VirtualBox 2018-06-07 00:18:58 2018-06-07 00:21:50 172

1 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven06_64 Seven06_64 VirtualBox 2018-06-07 00:18:58 2018-06-07 00:21:50 172

0 Summary items with data

Files

Nothing to display

Read Files

Nothing to display

Write Files

Nothing to display

Delete Files

Nothing to display

Keys

Nothing to display

Read Keys

Nothing to display

Write Keys

Nothing to display

Delete Keys

Nothing to display

Mutexes

Resolved APIs

Nothing to display

Execute Commands

Nothing to display

Started Services

Nothing to display

Created Services

Nothing to display

#infosec #automation

TheSystem Itself @ 2018-06-07 00:21:18

Detected family: #Malicious

TheSystem Itself @ 2018-06-07 00:30:01