MalScore
100/100
MalFamily
Malicious

PO44555.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 16/68 Related 2094
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 484.00 KB (495616 bytes)
Compile time: 2017-09-01 05:00:38
MD5: df6493f3ffe8ed4dde66a00f83306e6f
SHA1: af64001fa99e990baaeb9d466701750e871b0cbd
SHA256: c97930b76fd90604e682020b719b39e1ec82799b43a1dc95c3f92fd20054553e
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 5 ;n%Tg .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2018-06-11 20:48:03
Last submission: 2018-06-11 20:48:03
Filename detected: - PO44555.exe (1)
URL file hosting
hXXp://psatafoods.com/patoguy/PO44555.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2018-06-11 12:02:16 [16/68] VirusTotal
PE Sections 4 suspicious
Name VAddress VSize Size MD5 SHA1
;n%Tg 0x2000 0x10f0 4608 28e25e4539d2b22d4cd50c22bcbf278a 05ba5a808455d476190ff376c51c6a5dfce42459
.text 0x4000 0x4f1c0 324096 5445019ec06e5ae5666542e25b18374d db6ecfe844e264467cd85e42fd190aec5fcaad74
.rsrc 0x54000 0x28260 164864 5bb8bd8f8e6c6e3ddc3f949078a57cf1 96480311c5ecb52d8de030049a9d09d2f6fa509c
.reloc 0x7e000 0xc 512 56b026729903dafe84213820b5607939 7052be4a943e7f6cff21186670942f917a930dd1
0x80000 0x10 512 8d8d80e79bd60ccad9ac9ce0ad41e97b 6435a89de2b223fbb20badc1bf36097485fd98c9
PE Resources
Name Offset Size Language Sublanguage Data
RT_ICON 0x7b7cc 1128 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_GROUP_ICON 0x7bc34 188 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_VERSION 0x7bcf0 900 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_MANIFEST 0x7c074 490 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: Copyright \xa9 2018 Phelps Dodge Corp.
Assembly Version: 0.0.0.0
InternalName: PO44555.exe
FileVersion: 11.3.25.3
CompanyName: Phelps Dodge Corp.
Comments: 5o1w1rhodge
ProductName: Ashampoo Snap Business
ProductVersion: 11.3.25.3
FileDescription: Ashampoo Snap Business
Translation: 0x0000 0x04b0
OriginalFilename: PO44555.exe
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
No packers found for this file
File found
FIle type: Library
KERNEL32.dll
mscoree.dll
IP Found
11.3.25.3
URL(s)
No URL found 
Phelps Dodge Corp.
cboCaIDzJdWJBTbupLibWcsfuyBl
VarFileInfo
Comments
pictureBox1
e2c4a01f-40b1-9d
7d4a9b90-05da-2f5
7d4a9b90-05da-2f4
7d4a9b90-05da-2f1
7d4a9b90-05da-2f0
7d4a9b90-05da-2f3
7d4a9b90-05da-2f2
InternalName
Segoe Print
xox
Ashampoo Snap Business
StringFileInfo
0e6bc4e0-5e0a-c0
Translation
Assembly Version
2018 Phelps Dodge Corp.
PO44555.exe
FileVersion
Copyright
VS_VERSION_INFO
Form3
Form2
000004b0
5o1w1rhodge
FileDescription
11.3.25.3
0.0.0.0
OriginalFilename
$this.Icon
LegalCopyright
bc4519c8-fdeb-060
CompanyName
Form1
ProductName
ProductVersion
QrxL;r.
og+z
wB3U
wB3R
;^C+
]
AN
98,W
^^{k
wB3]
vl!N
k]B*s
o{C9D
\%oj
p_U>
c?'?
0V05
wB3O
avC+
A-H
5Bji
x,3|d
*\\/
Int32
273;;>3
;?@AC
;]7z
q%+z
=A:f
M#]dk
HQm
w;3R
QsBeC
wB3f
/o.}x3Q
N'_Z
0~up
}:nc
+B8
bWB3E
ZDB9C
.oT~
awB;C
	 

vwB9
XC*.
atB;C
GD\D
SvN`
u..P
HFVt
kC?z
HFVv
]7^)
CoCO
|n@J
wB8,
XprhHIkEKWsyveOUIYnNAamrKiwf
k}b8>+
wB37
`dM11
Hf5
wB30
wB3>
ghRbk
_teqS
j 9P
7-\x
;+ax
awEG3
q=R:
$@2q=
FT9{
^t_^
%Cr2
XcKPhkdlvyIwGsXYCRKcMSELbNeF
aqB#C
;4>=
>#?DDEEEEFF
ymVc
5P|r
(cK
<T)X
Wz3z7
avBmA
8cqb
;}Ms
get_Controls
`hxt
awF(O
Kp6zH
2s :
U6?;Kz
`oTd2
Fyvd
7+A[
keeZ
-K1?a]\
JSS:
"]q'
p- %
0@jo
>@X(j
@AB5{
F('5
aVn|

auB9C
La6R
e}C+
~t_}
!yKZ
hD[`t
9[=E4
EFv%
9&'/
c?n{
}S m
=Uzo
3
@o
:6YW
n9+P
r q9
=|me
PNG
rekZ
&]kL
XBg$
R@^Vjl
nsM;
a`B8CJ
70
E
Ci
FR@)](*@l
bdt]
_:?3
D
Marshal
JsiqUYTRsBtbvwDUOcdwgvDHfcoAA
j&h4
a_BnC
aawBU
My(Q
T{mI
#b4du
q#A6
1,sI
>I]$
m=oz
}hwB8P
!-/?
~O~R
qZx9
B9CU2
vKbYO
Y8U=d
Xi4>
`3B3C
4RUX6q
=N,!
Ht&
op_Explicit
RuntimeFieldHandle
T$^]
m_;
a1	^A
wZn/
Zt_^a
,3WBC1
dwC7^
yY|A
`!lS
[nq3/
AwB.D
qm}O
$nf
@B9I
iYIj
\ J"
dwB9C
$6X7
%OB\n.
s/I>[]
a*\rd
fZpp
^M(6y
$}s$
uaMBeC
'?8r
yfez
p<d]
$2~w
F?Cy}\
fjNUm
uq?%
^WVW
qWcp1
0p&S
cq-oC
_G?_
0===v
( R#
ek0~
<)i
0w
a
jUA\lJ
=7Z6Zn2
rp]+
CyKv
S9C
EnableVisualStyles
n@/Q
XjB9
?<M0
Ry;j
<E9M
hfj![
4-W5
p(oo
[pk-
z1Sw
awV9C
kwB=c
1
67hzN
IGWt
-?xN
kVUO
Uvr8.L
?pQ#"7
B'+^
awC"s
0q0K
`b\FL0e
70';t
nS
z
>D>RS
U!syN
N=Q6
1RHj
~T"l
"pt5(P
Q
k*h
m%7.
cu_<K
]u/l
mY{{
~E]{
jD,II
bqP]@
a'BKC
)|/
xiHB
PLZbvRaPohmEFDbbnPEyRllIeCRR
]7f|
6@/s
xP$0
odMX>?
xxxxttttw
KcXC
4= |
Red<51s
G-9C
hk)
8 R(xp
DUnyqyAypdrFhMCJNqFDXeRdBgOhA
JA+-S
a}S?c
:"Q%
{2
6G
wOH&
6kyc
3
LV
kbGJQQQOOOOOR
x	s4
,B9B
R-_yt
J0C,k
AppDomain
8FMp.
a}Q?R
u[G
qr1
OGIp
OTs^
i3Jf
?pjL
Gs
!
so@8
}7/O2
g-H
get_CurrentDomain
pqNc
aTB9C
Po>H
pX5
r<29u
`Wx{k
awBqC
|zzoollY
mqUINoChlNUZnaPQNvKEamroBeew
iec%G
{nc}c
c+$V
|&26
ci)I
56yu
P9p}
\W9h9>tL
??BDDEEEEEEFFFFC
\q~"
awB8C
awB8B
08G8"
cDBvj
0~*%
vs_?}
?r4H"t
{x/O
c
.n8
O:P6
8*rV
awB8S
awG;C
F~[K
v*dZ\
z_CvA
+Q|P
P[_cdr
WI*kopD
$}Hn
hU9C
o\4XC
.wm}>
u==q
u==p
=nuX
ToByte
oqj?="?i
HEUu
MWjQKN
isU(C
s'ng8
|T#?
#+cE
:ka
s)H>
xxxxtttttU
Y*eaB
set_Text
6T9n
Z0~v
Yh.n
w&X7
=K^{
.ZDZ
net,
:Fj6
_F
Fy
0pW
SHcvRhGb
Q!2G
\ke]
awB:C81<
-+Ly,+@
)pUI_
lE`G
YK)g
5524
ScXc
>Ix;
F #`Y@
tjQC
#Blob
Control
b;z'
\
vP
qoW-l
]
Vj
/>)s
\G/.
X]n]
I*H~
T?'b
X?RMo
@.9m
h8hM
\UN0
;?ZwN
V@P1
0i3Lq
Xt_^a
<9G=
UbL*
[tZf
**9;:
aUB9C
,WJ>
"O^}
n~6|
OISC
Q{\
VZ?k
t/@1g
hi!
.5;
D,Va.
awS;7
u0wD
RwB=i
awS;0
LuI2
@G6t
E-9C
Type
9GS_V
nX#p-
dW@8M
, /}
Z
YD
7n\[
l]sE
WeS~
EvC
&^VeS
BeginInit
B9I[b
awLG3
awB\C
LeQ5
/PGM
Hz0:
:Qx{^v!
n;*P
@G5.
'
a&A}C
xawD
TZ_k3]i
atC9C
i{+)u
k#1w,
K Gxdd
awS;k
LvZb
Kyf>'.,
Amg
7
7/5
]Bw][
|wvxxtttttrrrUUUUTTT^
# -Ng*Z
CC
1Ye%n
%bAs_
aEB5CK0
=^	I
>&u{
wB3,
a^B,C
Ec(X1
h,k
H)4v
"!Cr$#@E  6
zFRi?c5Y
*(9=S
uO\
W	'g:'H
Zl?
*
B-9C
df=P
83B7]
$tB9C
]XO]
m~bj
awB9K6
SqKT
,!+Ot
V!a>-b
'qPr=
ib!(t
yP	P
GX>r
x
~r
-fI\
kw-,
H/WQ
0r'@
j:9S
vVSx
DwB?=
]rsj5
Y"E_G
^y%\#
a}S>cq)
]m#&
A2u#
XX8r
VseI
VRi?c,
18\E
nooleeeSw
R-hO
C^0:
i~E>@
?ri.
+NMX
vo\)
/@/w
E|Yh
SHcvRhGb.exe
Padding
TlAL((
z5t'
Pb20
Fv#*i
222C
aq~qU1
.wB3,a0
}|7{
:ll7~
get_FullyQualifiedName
ZC)eqWEt
_+%fAVoS
+wB39
4mkF
yfSrW
xa)^
Rark
i>TE
x;?Z
[t_^a
$xB9C
i<[>
*}5"
a>,O,
>!0%C
0F1
=^|3K5
-*mc
AkQc
2:$<ij
}/C?C
nB
4y
T}9C
}^1:
m}
cI
?Dy\F\qXzX
87R
N(67
/F83
iS^}y
0l;C
A#U0
,}tK
-i#Z
E]w9
TEwB?C
u-m^{
{&_~
%Pxs
L8 I
AvC*C
cD/9<
awr9C
53$d
"r9I
k 5P
:1Ri?c;1
1^Zt
AD.)_J
en_\
kayB
Uuin
B9C
0
O?Sz
zb<_
^JAC
awU4Cy0
e~9.C
c5h
0`$7
~38Hz
'%/"
.text
0b	x
f/%IJi
I|B9h~?
awZ9C
->"O
a>B9Cl1
;W5=
[!^\
4WmN
#`~D
GetObject
)HX^FE@>2
d>Bo
yh`
0PHo_
g=+#
Convert
lm+w
h8=R
*$*$
5__I
woO;
%awH(T
4,$Iu
^kI'1
0H|
m
y
--DhC
mIy(
m'6P
CCCD
g``
<OjKBx
r[n+/]|
@|j
+}>G
m~sI#
6I[[[
9|E?
Uf0
pcwB9C
~/68
*(U)
qO\-#[
ftlT
B
j2Pn~@
nF0CU
0~k`oS
|tL n
bFt?$
0f1N
#e$0
OaUk[
sH8Q
Q<cW
lCP1
iGS]v{
HGWu
OP;
|/|C
#Og9
l8)P
W!{
_zH4I
t9Ob
@`U\
{t_|
{t_}
{t_~
>VP5
{t_{
](i
avB1E
jNrranGNDEbbwIqORrHFVGAEYtUA
,%[y
x^D
{`v{:
ryJK
`
q6
CjVT
{5
6
awA:C
7_	O}:,
1IXe
VBs[
T S7
Q`/Z|
{t_\
{t_]
{t_^
lbHPUUTTTTQQQQOOOR
lvN!
&%.+
{t_[
[RP
}B9G
#h]nS
d_vn_
-9Cf
_ y(
ay$B*C
+&b<
.oy
#_[Z
jqrt
a}N0c
0156ed
cn<I
o8Al
D-9C
wwz/
pftI2H
0qBk
Fq2w
pZr"y
0>??ACC
5555
,eCBQ7
[^Y
D"Mh
T49h
i55D4
as0bB
lsz{
R)^.
f!ty]7
+ukD
C[0G
>_t}
9(~Ix[
j
$Y
;wNw
`.rsrc
MuT
awb9C
?2T9C
d>`
a{B9C
IhB9I
9yO)X:2j+
[IB9C
x*"P
#Schema
.oyH
HI!]
q?f_
u\
-<
>5>I
^a4J
YCx/
zNYxl7
p[F;C
_LuZ;d
`xu
$
H]I
kernel32.dll
k >P
03
9
1P*t
%+ou
z[-K
e{C$
. Vb
!O=0
m7]
3>#BBDDEEEFFF
tB9c9
0u8#n6
"*IXtX
Fas}6
?#=@
9
;8
A%~}
oC"
P^9Y
SbIr
m#^
awB9=
md[Oz
@?a
B?Bcx
?CRx;
S(7p
?Hyd%g
/Y"=K
^
=!
U]r^
awB9M
\v=A3M
-FP6
-OK
xMwI
N
oo
awB9D
awB9B
awB9C
]2:k
J@K$
]0Mb
a}jC
`lFdZ
{4o>
>w)p
qLf*
m,//
kLU)
W~CQt
J3*5p
M?:V^z
|$n1
)^<T
awH3c
,u
E
}KH]
awB9c
Q T3
s:(6
!IAK
31\7|H
;

#:
k
wf
awB9u
9#UcT:
d4pP
J]9*
xawDV
fIkkk
irB8^
FE+
%B
(om9
yTI_
e+du
wlo~i
FormClosedEventHandler
irB8R
awFG
s/??i
JMD:0
De[Z
Okna
4	-Mc%
v)t+
Fn"+
t:=q
t:=p
y|z_x
g-tm
KJ=&
H4q>F
ZB``
f}L7Q
[k5=
o\gR
1G0
f%'P
g~&hm
C]p}
V&+!
+B&;
7
6'
fW@;S
}%</
\iqB$
B(j2q|
'`Mh
Mgrl4
0t&&
p.ZG4BN
7g?
m}susO.M
L&M$
CS05
CNM+
(
sz
nVVE
BbwM
.6?
0dO7
oT3P
bP
E
buR(
7
6G
x.j"
]Dmn
a3B3Cw3a
H-/p
(^x!
tvB9X
a%#I
AvwJ#F
\zxn
2hk|Y{KS
tkN'
TB<u
}qgV
)&	9
PK=-"
bZGy&JO
"-O\,
yt_^a
BC4[
7
6{
ywB8C
AtlF
7
6g
,zLP
FFEE8
NF},
ys?[F
po;,
{[Qr
wl6
^
I~dN
~lMQ{3dL
JwnQctU
eYBbC
Wv_`LJ
htZ=
~cvu
W~P.
EK#^6
9pB*
:r/Y7&
:BRg!
pAy
g/7;;
?Cma
set_AutoScaleDimensions
+z$.
N.M)
LqzQ
t=4Z
V.9o
b0AP
P7~
tG;X
nG'ZP
`G1
d ?(
get_Assembly
:Yzq
3@-j
j|RrD
_>+n
B '
lzv6\
e4.q
0Y,
sFL
qS<F
vybx{M*
*jva
W_8O[n
w};N=
/j"?
xb
$.X
w2
a
DBwB9Cx(
M(=6
POS5;
[4WM.
IF])
I<$Pe
An0G/
0P.
3(G9i
BRsie;W
i,r;N
ZyQ%
aKcuz
auC2B
g(UuXR
gwB9C
-CIxR
`w`(
)n-n
k8PH
;,Cf
sGo>
\$-K,
|rJm
cwB.
%e8U
c,[z
"(A$eEu
Xs:#%
.:f
|!8;
,-s
PKi
WrapNonExceptionThrows
prwB=1
eFS	
R.W(
j#]']
wwB=R
:hDG?
v/oo?~
$i_)'
,a7
|X@y$
<:G=
/An,S
O0	"
^_r1
Lu6
-s(pG
gpA+j
aw!8C
<gd^
3#M"
BafCej
.]*?
&[F
XhR'
I0B9I
Kj~D
agB"C
6tI:
e)-_
8*)j
<:^|
~0w9
_Z^q
_t^Z
,jwB<C
;
n,'P
zuta
y)7
mS+o
AW~X0
97}M
LPGf
mTc<M
i-kI
g~c:
>scQZ
aGB9C2
]Xh3kD
a%'Z7
fN{IW
ava2Cg0
e_99C
Hg`Q
STAThreadAttribute
2\	X#
'%]E
3339-
TE<P&P
asB9C
;})9R
xt_^a47U7
^HGZ
gnm=
IHDR
="-$P
e~9/C
drB8B
O/Ip
XowB9C
%dPL
~P.
x?}Hx
c4m
Q2z0
:2n
:]D1
xxxxxu
d/x>
8<	<O
mkrIpnPkNhCXHVXEhIUxddNMFijcA
c2Hb
>Z_SM=
(W=\P
YAn&
J5Z_[
C8Uc
oQuSZ.
,
Ro
e]`nD]
5rWk
6UcaE?$g
'?eQYJ
@M@
dqB8Q
4-]&
llI^
\"_9
awB>B
</c46:
System
EventArgs
2^=I
OE[}
Application
W
q0*
awF>c
_yc~
b"\{
[R%Y
i
Kb{pj
b5i+u
Ahqt
C4Gd
QN
mDT
MNO?NW
mXn]?B9C
doJ0F
`,sk
)a^BuC
8wB3,
0
"c]jfir
[~`8
szq/C
^aXJ
i~k[W
]nIZ
iYz$
Zq^r
xxxxttts
OfDV
[Km}
pewB9C
`|BGH
7*\T
p?'|~D\D
1h/[
"XvA
A{y?
hl-z
zC}CL
=d,v
lywU
*}B
_]nK
aw&?C
AWn2]e
iJ=GX#
:Yx{[
Zt^[
aBB=C
w>IQ
MethodBase
#Strings
BREN
!t[av1
a1-K.
[[m{
awSK0
uyAu
{t^^
Image
{t^\
{t^[
[Z';
KN[h
1vv
{1I/
Kl0)
Env
o^ N
Q5
lW4
.bUz
6uy	Y\
r=`4
HtBIkv0
P
-j
*
N]l
-BI"yH
ecg
?p]@J
r.vX
Hs|t
akC9C%0
R_y
zQu
9$.C
6ZSz
bq=}
l
D+Up
|xH\Y
r,:Ql
}wyy
P#0H
VirtualProtect
~NM+
#^"L
s6*
^6M<
B1-8
{A5m
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>

<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
  <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
    <security>
      <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
        <requestedExecutionLevel level="asInvoker" uiAccess="false"/>
      </requestedPrivileges>
    </security>
  </trustInfo>
</assembly>
0
6K
390h
(hrib
9c3B3C
eY).
Z
ffk
UDQzw
FKlg
swNt^
8X_\
Lkp'#
m[+A
#6C$
%7_]7
get_EntryPoint
\\*n
[t_^
}rIi
7L_h
f	"~wb
.~z}
wo~
F
P(Ld8
2	\A
V6m\o
Dz[g
0e$<
F-9C
" )&
iyb>Q
PeyO
E`gj
Z8|f
lr1w}
qR
~P;_
AdH}
Yt^_
[t_[
}a#F
]p|_v/i
a~B
Cy0
w<dt*
System.Diagnostics
uoV-{}
PY;-$i
t-TO@8X
waPBzC
w	f9C
'_L{
CT$n
XQ>
G-s
&5OR
]hLh
uttrrr|
iXH|s
.
+(
oB9G
*VyF
109N
pz])
bw=
(ASe
awB`C
I B9I
bH0`
<|o
B9Cr
XhY!
')on
IKK{
d(kc
jP>
`Nmf
moZ7
ti2>x
B8j-
!o+~
ja'q
<,frhgy=p
*jmyF
dwB1C
I\%4
-]nE
awy8C
>?@AC
X.ED
WRfD
asS?,

^)/=w
YC>>
OqC9C
9J\
4
Ex
__&]
J>2 Ei
XFHY
ug$]
rdQ(L
avB8C
;Ji
OrW(
s
-
!T
ZokY
4YW
qXY$
p!]<
KX<v
n|K/
(|XZ
QsB^B
ON"r
B>J3
o''"6+
icA
[{jl
OGl	m
L$Rd
|hEL
TIo0
aWb9C
PKOD
k)@y
\tP
aYB	C
~m@i
w|8~
k /Ov
set_Location
R)h)
*-[J
hH|%
M7LR3&fx
Yt^Z
p-;P
1`JU
auB<C
GEUx
o
%h
ComponentResourceManager
p`Yh
.a]B8S
jt:U
.{?Z`
kLEctNdFiFXEmLbVusWbBNsdfyBx
\nx[%
YqjL
gQ{L
1M!c}\6E5^
z	(Y
w8J?1
ICvhNOnkLZAnQKnLRPQRBFXAuYii
d ?LB
stbRVSPPPP4
6`N>?
4O3&.
^t^Z
hEEG
VjIg%
F	i5
<:F=
[t_{
7WjiH
7{pL
a}n1c
CI}Q
i s
EfGB.F
}0W'
@/Ez
rRS~
|/l[
i%Z
RrpS0c
t8=p
mMqe
YS)_[$
i"(e
Nnxk
Q>+EJ
!D6;
ww&O
}X
Z
AwB3C
awB9Cs[b
&)>I
'9S	@
}n72
4\/J
#rri
M0.
"#+A0e
DAZ4
8cwf
+=I9
Z=i5U$
#M7	\Z
;a
y
iVgeeeeSSRRROOJ
p
i
)'k+
m {
X-9C
oFBM
ajL1C
rC}Y
hSystem.Drawing.Bitmap, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
ti~B
<9H=
yt^]
8@nif
cI`LOD!R"
I8B9I
DN5:
\BJ4
yyAK	*/0
h7qIu
+J@Wd)
0_
L
`	8t
"6BLj
`
irb9Q|i
a`M~
@VsNk
{R"1
C5c:
;Gar
~t_[
'$."
V`wB8C
0kCD
c|qFG
xt^[
(qIX
T)4r
$I7PA
g	R
46=H:
w1\7
`7S*i
1g.b:Z
ucbQ
![f\)=
e0;-
)YX
M#'Z
/Qe/+i
zt_\
k175:
<giP
-|LV
Form
nVz)
aNB5C
sB9c}
xt^]
`EwB:Cf
rBWCtVkERvMYSdcsatmKbkEwDkjlb
4ny4$
n6o:
xafB
4/uGE
s&^$Q
D@2QH
k_"9C
QJPhuxUanisZmxgBivHIagvEySaA
>E}~
Yt_}
Ze>E
@S)I
8*6T
c<!q
AH*&
awC*E
fZddE?
-pu
eu0~@
w)11
0T6!
P0JW
3r|+(|
\<Qn
d-'
[*jV
g-[h
#XB9C
^<IH
kSFj1
{1w|
fd6F
WV5.
I1\@H@D|n
B2CB0
q_K
&5Cl
wt*&Y
.YSG
aR*^
HewB;C
awC*s
,K
&R@,tL
":F,
eaS0c
[Kx^
bawB8C
u:|wO~O
DdK#
awB)C
/Onn|
wB?X
c3|Q
*_Z,U
awH?k
>Roy;
26C&
xK#Z
SoNM
A?$,@
EP A,E@\
M,RI
|zuwmi
y_*9C
[ _x
wB?@
awSJ
^rxY
wB?D
Z"n:`G
:\(]
*wm1
wB3
x+jK
@"<5
C1o9
atB1C
!Ec0
r8jR?
4x>.?
B:57
].n:
o31_
|eg1Q
FWV}
?
a$BMC
A
4eH
BqC$0
H.BZ
!BH|
gWB8C
LJ&;
-*oci
}g{OO
Q/*I
set_Name
bQZL
oYX^
I<x=
:M?A
u<=p
awB?C
43>-BDDEEEEFFF
,N[WvZ
~GlZ
X?G
6wZ. }
XDvnY
LwB=o
/cg[
^#7G
Z0'l]E
Hiis
eVoR
#)+x
b{"G
#8)e>
get_Length
PSO&Z
h%bff
wB3
[F{d
AwB9
*5OI}
[
~t_|
u8=p
u8=q
VF i*p
a0'M
Yt_\
wwYW
_vVy
cS~mk
hU2
%NHz
xxtttttrY
{t^]
=B9I
0g
|
Ja1p8
*h({
v]S=c8z
cf#y
+A3X
_
X{
\5w@5
awh8C
cp<JC
p%,P
ResumeLayout
0rS
@&@@
_\r8uMg
\.jlq

=,
WR		h
avB1CV>
A#

_D
c].
!Dm#
XDwB9C
k 8P
Brs(
t
i
%Zk~
iSwbYGxDcGhNTSgwjneDuDnyWjzH
>2K\C
ValueType
3N7>
H\+xP
System.CodeDom.Compiler
set_TabStop
GuidAttribute
hwB8
`G
SetCompatibleTextRenderingDefault
<i
d
m{BTV
e{A&05
n:(P
i,3[
v;nDY
SR!9$8-
b_
g
Xt^Z
Uf?I>
awB*s
f,G[
}/$Vz
B/ B'I8
a}]5k
zJN/
x
d
c
vH
_t_{
]{{{
_t_}
_t_~
-@@@9"&
'.,`8-
xm^t,xc
a}H.h
K%R`
]a)1j@W
IuB9E
p?Mx{[
Zx0V
>w%d
PSLRHt
a"B9C
Tt=!5r
pG0x[
hCm
wg8(?
_t_Z
agBuk
kljw
_t_]
_t_^
a62I&
SPMjbMxOsNHzAOFFieexBvwXULAy
\Kst
aoZ)C
L( 4
HKzOL6
sjZ1S
N,^u
\ZKS+
On]{
+QDs
5M,O
}+I
:oZH
l
?`
0j$S
!~5O
reM6L
Zdo9
TD$/
/1#B
7TY4
R6{)Z	y
~`89C
5#J&
+fo?~
Pi^&
.4k)
mawB9C
k	Ob
6&]1
Xr(#1
37O|
M_XXzJ
qS>U
y /_v
y	I>2>ujQ<
zC
% (
k$7?
@6l-b
:B0k
voZG
5aa53839-cdd9-24.Resources.resources
mmT~
k	Ox
u6I*K
8wB3kg0
UInt32
m};p
aw2=C
GIOXnUlDBjcMJMSPKfWqKVuCXJCC
aw/8C
awH1c<q
xxxxxtt
98}%
i[!S?
msS3Q
__8/B
N)5\n
a~B	s
2Ri?c
wV*
-+92
yt_[
]{Cv6
$'K5
yt_^
3gI
@P9W@/
yt_\
loZv
s;EI
A4-9
GqI
a~B	O
R^
:(e%
r7)fC
BqC[0Z
fwr[
[CKb}&
kwB=A
C>a|
kzS=c
yt_{
`gmS
ty%C?C
FormClosedEventArgs
+|x<1
]_vlw
P"jQ
pv1?
FBXXp5
|_=7
nJJ\
)r	_y
()HQ
cboCaIDzJdWJBTbupLibWcsfuyBl
Mg]B*s
b
|d
qN9C
vB9A
eRp^
AH;Z
awB.h
CEh5
s'vl
C@U
>le><
PU(H
avjvC
0qQ
16|]1N
cX{\
MWSkA
Y,9C
=wB3cV
Tl[C
@uXv
DebuggerHiddenAttribute
I
B9E
vB9c
^p;o
4$t

Y`8
Q4]nT
)X|O
~I;[
!6g
!9_:$
awB.B
\s4;
twte
ifGK
Pt
x{
k=@_
oD^=
\/?G
\sP2-b
AssemblyTitleAttribute
BatBDC
/G|s
}3q`
pF;$<
Iy-0
TlXj
(U;N0x
=`Js
#7`
ZobiTJZBLXVPbpJxRyHZKhTBlyiQ
&ph.
Az`u
$H@
vB9,
tQKd
oCMW
J:HT
NwwYvttttrrrrUUUUTTTQQZ
h@k
o,1]
(3'\
`i:U
;\r(
?S>4S^
`mI
3LT=
"erAn
>j-/
awB9CsZa
add_Load
IdSV
zL?L
2l!$
~<]o
Io?j
8U0ka]
m*[w
5$gfq
?\X'
mO4&0
awB<C
P%,k
++/m
J~b
a}I:k_0
v;-+
zR }
LeaT4
Vd#T
mB`*
y[)g
k*4)
`:yf
!9L.
b^jKx{[
i%_$
IDATx^
MMb!
}}J
sB8J
awH.k
CsB9
&	cTY
iwF;M
Data
]%5g
S-S;g
crB;B
5ln"
//S
7+0B
`?cX*
*%t#hr1M9
E6B
l1Fz&D
0[0'
7j<d
!`j`
o*eO/
iwC+
U~'g
htD(g
iJJ*x
7V[xC2
}0iP
!gpQ
f:-9
l{f>Ey
.ZwM?F
\WA"j
#KZdo2(wj
~wen
I^p+
pHYs
.ctor
~xjcC
b=ZQ
?2U9C
d_(9C
I{FO
a'+A&
B9I
-Hge
}k/M8
mgC8]
4Q)pK
VMz/+8
G@sh
GTb	1
B(CT
BE`B"
`b4?
&Tq\
MG)M
QwB=
HrXb
$O>
^alJ
n1ci
L@Un
7A5o
CCCB
`2R3;
a$#O&
Invoke
ee_!K
:{,[CQ,
_&4~z
MYLa"
u0gU
_t^[
fCy
5\8Sw
aw#:C
_t^_
_t^^
iI\l
XBN
bwB9C
m1nt
GR]),
+G:
/~	>
eB9A
=lCI[4
vCuE
awS;k
0
g2	(X~/
R:q<
Zt^\
[o}>
Zt^^
*t1
mYSR
Zt^Z
N-/e
P*i
<X{+
yh3y
e_Cr~
$/?s
Ev2/>
k'DT_~_
t8@n_
K	k'
I-2o
9eO7
w_>9C
awG9C
0f2Q
!EL
R#)$
YwB9Co(
CW1#
(
Ro
5zN
nw;
c	sP
Module
HS_H.
Jh-	$
j/wy
\Oh<
~mPO
rLUW
Array
d%"P
eBnC
+TQs
lOG^
g}dB
~NY
nY%'^
Mr1@i=l
~-.~=
Z8fO
a#-~&
(}[2
2Z`
@.reloc
8row
yt^\
yt^_
R[W	}
5a[w-
yt^[
yt^Z
f=BP
a&B9C
|7ml[
sh\
_nOv
x`](k
ud
[HhxJ
VV}a
f
i
gLq
c-C
t;=p
t;=q
@
!8
bOae
VKB_
R~j9
/Qyw
QW~
(o8%
Byte
get_Chars
ax,O
VrN`
J:$\
hWc-8c
zt_|
C( CJ?
a[}Z
^T=
apB4C
Nxn<S
7Ju`
+0yJ
w{7zmA'B
B0Y-A
OTR~
u^c$[
-b2G
AuJ1K
VEq[v
`vny
E9.V
8ZO
mjkW"
`t,x}
Ac&w
hC.
O40@3
0a	rW
-Cqj
0l'T
[?T4
L\/N
8gwB9C
arB9
l|NG
Ix`,
]j&B
MHfr
j,)
P@
Y/km
_u-gg
yuK!M
KE	+
^wB30
b"'.
Z\Y<
-{jc
ufG-,/0
H;M!
evkW
hHh
a}h*s
<B4
7J]:wt
KA?$~
NwYYYtrrrrUUUUTTTQTQQQS
sbj
\(rUiq
AT	v
9B#0z
a7td
kWEa@
aa|p
fe7B2C
*=8J
~wB=C
/
gHtOPFnsMbVpauyAtRjCrDDseSBY
85CB
xE.
,W0dc
Kg(P
pSwx
YgN+
$mB9C
0~k`
+7U|
iaWBgC
Rz+[
x|V>6
;F}y
/~v~
KM-b7
de s9
m4Hk5
=v5Z
vmbQUWLLLL4
m|F'C
G$OLHh~
UCd:sC
@p_l
I.B9I
a}S'kM0
asKBT
AZJycJwKWhGUXvEIhtjbyAPHshnG
]CKo
-LMN`
a8BKC
h37&93X
676XY
6DW=
i{a0
b3B3C
aV\.T
v~S#=
BlC
0
set_TabIndex
;W9z
u947
.MZT0t
6Kd?
r0dn
b`|e
mz m
2{Ve
a}N0cc
mhqX
xoYT
&$jB
&&{'
s'{~
~
DW~
(S
5
l8x
.8~>
-a}B
G>>
R&54
UG3R
ave;C~0
kzb6
hjxrCfCjbpknHLmFEaBtiRuaWPQKA
`a-#
RuntimeCompatibilityAttribute
o0:1
2D#-
FONyJ
avB=C
C0
|zzoolllX
fTo2v
IG|
vy3B
@9C
1
+l>j]
Assembly
c0;;c-@
ewB>C
q<s
yZ1H
w"Ma
wFv6
'P;H
7l)c
[`fh
V*u=
6`dh
0&}n
GraphicsUnit
b%d.t
1fA`
<J>}
d$<
@wy9C
6BI=
p.
P
k!r
=BaX;`(
e
]|
bVC}C
-=YOL
+I_]
CAAB
n;&.4?
6B7CB1F76B99023BEFA8EB2B530216F00916E4DF
pobM
@YT'
cXgs_
awB9=y0
&F?+
SuspendLayout
0~k`P
+C9C
'>aZ
X\7z
59\u
^C6W
.~X
K88|
#?le
qB
S
JT*w
mP10
'BUG
nwB9C
's8O
`-.i
iemd`X
#!)%
CmNfz
yadC9Cjw
F:=6
Size
VWIWVh,/
/8>&
+9GM
LB93
@<Pn
EC63
Zt_^
Zt_]
Xk$4
Zt_[
Zt_Z
bQ:#
taWBaC
%
 D
4FJ2-P
set_AutoScaleMode
cwB8C
g>A3
kk$;^
aj/C
$6S'
S-Xm
#jd"
/&~)f$[
wB9C
awS-
awD1k
wB9F
PNq
&
wB3I
5kQa![Oy
Zt_|
Zt_{
1.X$
@y(#
fs_<M
wB9R
4&*;
0'W&
>6Vg
}l
&
=2[O
CzIM
WH`Mw
k{S>cR
EwB=1
sfJ0D
avO]C:0
#8^
nP
uttX
vF]cQ
RKMlTqBPSBJtEtMvQTUNjmAOLAZF
aJS
IContainer
3~<>#
]p!s
a%B8Z
awB=C
D`Wh
%;*y
D]ZaR
NNWnK
g0$[&
c1-w
<N;=x|j=
uo"w
-SC5Riu
aw@9C
|k0!
ec,
apBDCD0l
nW8m
HO.b
cFlV
dPif
AAAA
e+l4V
Dp^B
*W{89L
jBDn
b5fV
v)7m
r'Au
D@kE
?A5M
[wB?C
o{J
}q-fy
m_:
G
{"JN
rUY
^m_3
=-qGN
QVutVw
0t]
=
b_
u*1P
[1"oH
0c4H
o{K1@
/pw,6
'oQQ
Kk/-
9l8bF
a0wA
.'vg
+7>5EcZA
Cg:(=v
3f~D
kwC,Q
n:*P
^VqLg
`tJ<c
a}Q)c
Cz=a|(
;tnf
h+;997$"
E,ss
'W_}uf
loO8u
d$?P
u*FG
.B@?@B@BDDDEB9.!
`oo
H"<
c3uu*
Txg1A
+^Mz
nt,x}
])z\
_zSZ
vbm8%
b4`9
^&W-,
0m/-
_a^B9C
Dom+
^t^\
^t^]
ResourceManager
~_pmr
zbOTNyJkJZIhVQMUGXEtzqbFgzd
h=`.
29Y;
z{(,
d^1
xF@2
cD^|
%
ce
`j,l
$!JPd
m,%P
c47
cboCaIDzJdWJBTbupLibWcsfuyBl.resources
6Knz
z=FG
Y&#
2o3
zr}.I
,-%Z
4n
N'/
ContainerControl
a8BwC
j~bi
AHAZf
QuB(C
pLwB==
\tsZt
0p,2
st,x}
eYU.
VOCRY
<B9C
4Q~X
a$_j*=
6{s7
z&Ka
EShm
j~p
KxmWq
Mt;~(]
t7*o?r
XL;W$|
gspvX
GDx
][^w
:uf4
B
daoAalmTnhPUjfJKNApOgdUdHaPRA
xk.K@\
A)/U
[?_.w^w=
aOR9C
Te\<
J)qB6	Dx
]A0i
M(r
!u^/
wB9Co(
b;t.
a6&]C
}y}~SN<A
g{
w
lo\-l
5k;y
\/)Ga
<9t
,m
VVUeeSSSRROOOMJ
ij:ph
)`3BzE/1m
O$'M7
Pv:/T)
fAfk,
t/wB9Ch0
-(k7
q0l?
pf6
\Kz{
8jpw
7S	r7
bqVo\0
Gj+(
cjA;^
AssemblyCopyrightAttribute
G6[&
~^2HY
:8F=
aSB9C
0
0q!:
{UdDRm
VloQ
-awH/
pG4/
bvGAbLJWNoBZQdjoeyekJzzTeXUzb
3+z.3-
Unfn
[})B
%/ajJv
OBkb
f*OT
awBx
z$MHW
_rl6-|\7
Skmw
jvVy
NA[
=omO`7o[
$~!(Q
1wB9Co0
{^Mj
OGl	a
'Nd~
FQ5I
Ukl/
SO=E
b-*s
BTzV2u
7o[+
Xp]uK
?Cjy
&Ey
QWzbe"F
awB9CsV]
3j.8~ct~ W
)4L6
tE~^p6
->
+M
3C
N){b
CamB8Z
`#h"s
6Id]
a80P
7t(o
}wB9C
O}*6
Ogy~.
*`0W
K}*~
lv}D
UwNrV
ctqM|
w\y
awB9
<ZOMTK8
[VHZ
en5*
/5qB
ipP
awB1
0e?RA
B9Cq0
qwB;C
x*1w
4:3P
u&kT!
VT#!X
&@UP
awB!
<gFFT
I$'k
awz0A
X{^
$Sw.q
{5b+
|rJ0D
pBIkv0
<N&)
P6o
ox,.
BZ'i
F8?
\z],I
Close
)l{-pc
P-LB-A
kRw
Y
grO
x4d3n
y9ZC
]:}n
QH|&
6u2'
!@
vfExBnHFJjiQfBZkLBsJsOdOrMTeA
}qke
0F#
~Uf$e
08v7
qi4pg
=>>338
0cq
WU0""m0
awLA
.eEE
pYlZ
TSJ
*"*"
EjIdzz
a1BPC
{B9G
=pnQ
Cd-"W
hqNQtzRJmXIuqdlvBtPVlsGphMZIb
ro?^K7
JKpu
)?O'
4[YQ!Q
GF";
"k?#
k
S!c;
M}wW
'7
 3
RF^X
ZnB9Q
h_4jQ9*
Q2'\
A9iN{
awHMM
74_
rWvM
.j~i]
'(+r
6dtI
(2Xf/
VU0tw
LDO
`(
x
;(o	!
\`{v@
>N=8
6wB9Ch0
~},~
pqbU
O|26N
\2/93x
Pl\D
k"IJ
<6`J3
2
~w4
k)Rh^2
v:=>6
QHp1$<t
YHB
\Y4[
zoolleeX
5554
|a-3~|
t9=p
@i?]
AB9G
~^xV
9cX+
1/#1
]"Dcb
a$;J7
aq+f
e]B*s
q,6P
gAMA
a;	n
>K5
h`$z
i
he
9]L3
^B0,h5'E
o6+_
^t_{
cc<-~Z
45.
P}'<r
D}^g
^t_~
^t_}
^t_|
Hg|=w
`f+1B
i2F9C
AutoScaleMode
b%"
YOI[-:
Lz}!
xSK_Cg
sOC6*yv*Y
0`B1
vXn
O
78Dk
f7oI)
uzS
V.ZY
(~[J
<n1+z
_\k
^t_[
^t_Z
awB7;p
C0A!
W+lD
.cctor
^t_]
^t_\
fZ/kg
>3

h
JRB
wdN(D
xawB1B
n_$
-Jy&
y5Dn
mscorlib
M\7>{;
0v_0
awF(c
IaB9E
^Du1
oL[8
IaB9I
`'/?
=n}[
2pB^71J
X>sv
^hwBaC
P)$/&
ki[*
wB8k
.Gv~
kN!8C
cwB9[
'H]GT>>72
;9G=
A(qT
cwB9C
0[Ij
8wB3X
K#ODQz
O`']
I:rm
QDX^[i
PNv=
II:>
I6XF
?V;P_
T
'X(
vp"\
uO>Ho`ISK
q'9C
zt^]
ControlCollection
zt^_
RCk>7!]
|wch
zt^Z
wB8S
(-b!
3G^{
_|
$n
:8G=
v1U8
igE<Q
CwB<C
4}{s
cwB9k
cwB9h
AwB3k
h#Y_
?KKy
H9C
vaWBgC
4 .KC
9c)]8
z,mZV
56^%
\"-3r
{t^Z
3
6{
d~_f;sv
a61@-
L6
g
k +zm
RTjT8$
ps^ak}0
RV>a
3
6K
xKpfa
System.Reflection
awB:C
acy^
@:BV[
`wBVf
S_Ir
POb5
^iUzn
iwp2
9Ayykh]
RuntimeTypeHandle
;F0*
ehKg
9
i
&|f*,o
Av_<M
G]0v
{Z~y
aML(K
864#
0~ro
nIQ:
x,+P
KwB*s
0N	6
auI9@
o2mz
W{o)|m
EakBQC
imcr
Z&+\
0i c
I_j4
hI|T
>[m9
!aaA
hks;
%'X'
dYXxg
$+f{
0o8,
89G->
aA42c"
&"`
Ia`B8j
0o8%
ZrdF
^JqR
BABt
b@fK
-{72
Y}R(
=lu::
\*6M)
QVT
&$3j
`Avy
gdN([
ji
[)9dA
{*)$
8wB5
%pq
jHB9C
${*F
N
R
a*DM
?vZs
k "P
6c
*
^CakzS
^x
^
e;&P
\|es
3pEv
}3Cr
k%]r
=o	!
awz1K
5:u V
!jwB=C";
I\<O5
M7Jd\
|rJ1A
4Skf
uP1P
=ol	Y
fBy
vBD6
0q ;
>@@@@B@D:/-
,p10~
@IbI
=b(K
j0[>}
&0X7~
`IDATx^
1U~~
kWd9,
/}48GR
\w#
@c49C
@]i
)`'p
aRBJCF0
Hl+bpy
Ht:o
3\
!
Ah5
kf[V
bYB"C"3
8u|i
0~ko
YeHMD_40
68;
awB	C
vL?+9
6+%n
G'P2
luL%K
,g]Bx
_7~,
awB9CHRU
awB8C'
Z/P
vy9eb
asC!^
=BGM
Yr4T
{aLBvC
5F
zM(dG,
vXm:!
IyYG
S5|s
j-vi
Na|B8R
hRb%W0
*&hC
a$6K*
0a2,
rBPL
k,;2
IB9E
k_$9C
@?Ca8-
3W)]*
oawH
:(	
F&vc
dW@8_
4d	q<$5
HFWt
&{tw
O]zbq
Xt^[
BSYr&
Xt^^
ZZlOg-
v:;v
0~)A
xX&T
j-
P
N=^:
FM7J
oJB9B
BZF+:.
64ze
OVK
_,oS
R+5=
'mBonw;
P{^3
#gJXf
"PtF
A
RAe;Y
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
:%m-j.V
u?s7
O#>u
W/og
.Copyright
qj-U
wB?,a0
@frO~
k.>E
<v/[
sjL+b
av_<M
?)P]
B^~d0~
a6Mwy
Rr^C(C
l-Yf
0g$#
u
=
wmt49[
AZte
95[s
mscoree.dll
!This program cannot be run in DOS mode.

$
A+$}
awCV
WDH`
zt_{
fFToS
~Klwn
?3{yG
4(:
gRS
Zt_}
jqfZ
,&77
<ECQ
0<{
b
T+y-
IU
u
5_A5]
TudU
V?3j?+
o/|o-
Dispose
JMD:,20
tgZ*
0x*"
m)e5AZ|
p_Z![
yx[1
0x_e
Y+RG
|W!P
T,[]
_\ke
ol*(J
JY?&
Yu]l
;Y{r
:-$!
TGut
_
8y
Zccj
T>70
)fKx
zt_^
O2[.mR
lj.o
zt_Z
}f	[
6t$B
^qhP(
A|Od
awBAC
jW,{M
$e612388b-d761-463a-b43e-bfb6057c13d3
M`pP
Z#\)
!=Uc
a!BjC
bKB
0x_0
u:=p
u:=q
$:j
rWg^
"OSz
:<3>)a
Y+OGjQ
adB+C
]q ?
UU}n>
)XcJ
adb9C
set_ClientSize
IIpB
n&a%
)s9F}
M fSzFMI
xisiw
hwB9C
=wB9c
awB3C
qgB8C
ynER@
>Myr
U=r	Y
7p}
)v:`
'yA*Blw
*"nl
4MwB9Ch0
6rY7F
f^]c
"	^,h
#GUID
)!^wa
b6cO
DDJbU% 5
BPv{2g
0\28
pT:P
~}\&
Ma#F@
/`k?
1U?	C7,U#
E`P$+
569<
CP*r
x>1q}
HpR8A
kREV8
iN&St$q
\b`
ZE7L
npm3
Yd{d
h#N]#
a6uJ
2_iA
H~;T<
(699:@DEEFF
~q%P
BSJB
j)qB
F# F
2y|
0Q1
tT`z
Y[Z,
\QzI;J(dc
Rprf~teC7
o2lP
@6\Gf
Mr 3
4EJkV'
QrBMB
p-4P
nxS:
B?CM|\
A'7[/
Y4}Z
jawB
b~;g
!'K*
B1PQ
W_~a
IJ$C
apB'C
vzxb
co[V
pgj#
8!4q
Yt_^a
ayB0C
k'Pe
c!.~9
q!:P
auN9C
FC*}A/
I=y0
=vp,Z_
hO[\
EY9f
$(@z
)|*ib
29[M
h(Zg
x\?s
IntPtr
L[)'@$
N/;N~^6
wW7
"I4A^
wW5
=G'0
EQ+?
Xm-\
c0xz
y4xV
nK,R
KwB9A
I{.&
*Xbpmi
s#fyu
jR[o
_GDMMMME
Yh|C
wW*
rs].
V,?2s'
^;pC
)Xdq
p-Vn
olm/
{/N:
Al1b
_etF
l
_g+
H6O;^
RkG|
`yZ@
>0N~
F#
I>3^
LawB9C
b
BG
DqT?
!D([
xaRK
?`w2
_N_l[
{@An
GH'I
0~kp
:MQo^40g
Me1BxC
0p.
|T!RsL
&sf}T
c[wO
b__9C
ZO<p
Vm	e
PxfR
^de4
UioOMlaBenkUhkJZQAeokBQERzrPA
0o;&
BcYU
J4*H
0n,
=Sl`
xt^Z
:5}}
M_,v
awB^
VyR-
;9F>
JUA6E
b/Ym@
PaJY
nxh8
@=|D
,Z^%
:RNf
PIPok#@u
"\=
1[.v
0o;G
tBBd
--n'
Z-fuX
FFFF
::OJ
k #P
E:bp
a\W/k
*1>M_
r
5pq
awBey
br t
kSn$
k8i"
a-B7C
Nxw[
-"M"$
{nJp
oz#s/{
mHb]
,_=4j
k`gm
B/CF0
d,3R
vRGC
(Vg8|
a {Z
q)*pwvq
"7>o
.^D[$Mag
@?U~Y
awH0,
s:{]T
!<.S-_r}qi
!+#-<
/dH^
cPnSE
CI6O;>L
O[@.D
/,^K)
j]>X
c+C0V
[:O=[
7M+^m
^B[)
W,'U
%%`u
awBym
&"}C
Nq7U
tuuYt
^jk\
z
Lh
T$v-m
@FMw
)sPZ^
bqPm@
WX<qPr
8qh3
o8)P
~rQN
~OL-#c
QvB2C
awByv
hQO#
`
e"
\zuNa
0~k`_S
3@y[]
Z2-O
yyR(
|'96d
Rohz;
HGWt
|FE>b
P
PS
dVMU
|0~A
9kv2
]Fw^
qJ5'
m9mY
@	x"
g=O]
1cFd
qwB9C
_8Oo
$'
c
+pqL
i21NF^*c
s3WiUG
7>]G{
%3d~
p\^se;
AP2
?Bjo
YaWB
?u6~
|"yD
ZYZGy
![a0,2
rfSx
ISupportInitialize
uzvx
arB9C
^4;G
n^j
n?~xz
@w@v
V`wB-C
k 6P
-9KU
~t^[
~t^]
agB*C
~t^_
!:
=@
Vyqadu.Resources.resources
S"PP
h!h
gtb9D
z]sk
rNDy
[eju
L\g
,%ug:
awB0C
MethodInfo
OiQ
asjmC
=*34
Xt_[
Xt_Z
awH*G
awH*F
s!(#
r7^w c&s(
b0
NJ
Erqq
9h/j
yb-9C
awH*J
CvE1`
V#mxN
m/7Io
IDAT6
p;JM
zg)"n
Xt_}
XEC9C
)]K?S1
Xt_~

-ZT8-B
0Z;R8:M
&^?5
xnXWU-
Iazb6(
iW#u
S@nQux6v
wGOg
Qly/
aw]9C
sigleeeeSSSRROK
ZG\]
yRi?c
IoZ!Q
I@:T
C\g^
K6.Qc
wxxp
k 3P
"[Q/A
njk>
#vJ2=
)< E
IDATe
4'V-
z6^e
vRY{
rT+
R"bD
h*cio
Gg<Q
Ph1C
ewB=C
G;O{
`jL$@
8uy;"
d_a9C
2LQ:Fmm
i0U/
!+@t
6P+J
4QUaF
Vm<x8
IDATx
JyLA(
b-/ 0
zF*w;j
-ezU
z}xxw*
/16`u
J=[9C
,/^})
Dz]4
zuw1C
awB9CH
aRB9C
djG$F
.G~zE
x{	ve
`X)qF
jz?`9
22C@
awB9CA
nMJ5
7]H1
Wt^|
2@		Ms
gbP4A
J''>
atC7M
&De-
awB9Cq
+	5)
WwB=A
{!YQ
rX['
y&
%wm}
rz~Y
/(d{
awB9Co
@S>}W
IEND
?W`c
ywB9
!P`o
M}Zi;
[w2F
-V<l
53\69
xD\D
s+\O?
Oj35
sH]m(Z
/jAc4
!Fy
jJq91
{T{w
Ttpm
?	I>
E+<W
{3
6g
ps_3
,~lT
C9CO0
63(
#4
*-O=
r#|/(E
v[V-
a1+U&
j#;P
)1r$
I,-.
VB9I
f2QP
7S
,;;
4jx
wB:C
]^&,
*cbp
wB3kX0
f 8h
r`HL_NNKK2
awBFC
j9'Q~
,;XU
/	GUZ
MFA^WA
qV
y
:h/,
=4bx
paOBkC
Ri?c5
+Kq
t9=q
uB9c:
Zt^]
3d2
%?f
fej@
awS/i
69mG
ugPD

6>X0d
$v*Y4
[k:.
Nh	n
k2<v
BwB,C
15.0.0.0
4)-W
xhwB9C
u;_{
c$6P
awS/I
0v8OOu
;p
*R7l
M\uW&
YzDz
%\ayC
K`G]er
SZ
e
'w>BIY
7<",R8
iG]C
O/sx
6mJN
)(r!
p-%u
g#6P
xxTI
=}8<
;WzW
)|xO
O$6K,
9u09
0p/&
<(^J
kmH9C
_
c#
)2kK
#Z\`
m+1
[
$$-
f gb{>|8
awByC
OGyM
%b\Q
ms,9!
`g1x
p(
P
3b
a
x".<
$	4mX
t3a+
DDj\aS[
0o:#
8A60
"|"4
fd7QZ
BawB]C
dp?=
+~-
rs\g
4W>&
"7}wo
ZTC]
CompilerGeneratedAttribute
awH3
y~cwh
V4Y0
1a3B3C70
!A7p
ztJSQ
VJO't
n6]
e
SWb
QHr(6
S/P2zFs
p3J1^
Xskd
?u?lW
I)OV
3B
P
$"+$
k  P
.wl(1
0d=G
F 
1
jY9B
(KMW
q"*3
{C%$T
tuuI
I~!F
e/?H1
`sth
Uq+)
TQRemBmTLHnJrIOnibIJbEhJPOHr
AWO7|
)gsD
,j'4
]J.>N
d(a9
M%
{c
Z,<7
{Gx
AssemblyFileVersionAttribute
uX\[
$g
6
vwvtxttttrrrUUUTTTTTZ
>UFm
/v-g
XejP
=`8.V
O;#)
g\{
`tBn
wSdB
x0\-
WYv4
<4bH
System.Resources
B`8:
|0|.xrz
hrb8B
(CwB;C
0~T;
0cwB9C
Xt^_
YVM`
ct?[
t==p
t==q
)t4:$
3yK1
xt^\
EhyoU-
n4h
a+@}6l)*POw
$'MA
IO"<w
WTT3
avB9l
[~-"
~T;P
aw"V
VcqyM
CompilationRelaxationsAttribute
5Y+f
aNB#C
@W$,Gv
;$
?
ywg
[f_;
d_n9C
l~6O
$B9I
j#<P
s9r$
gO?
xpz
alj`C
4d3O
_5lwF(
"!/6
hJLT
H@jg
.IN1
0yro
-i5Z
Yicn
ewB:C
avB9C
E\[
K^"(
Ib+=A
9qNy
zi
\&-O
7]-p
;wB30
y!u
Icon
s&w[
avB9,
Wb76Q
W*_4
scq^
0\t
;wB3E
<Y''
j60<2
(/,Y.
FmBt
e0JP
;n+<7][
^t^[
`sv|
Rg$p)Xg
@3?.
$'MD
aw^9C
0855l
^yX`y
awByw
^t^^
'&8`
UG1N
M ^Y
^t^_
hjpwBfJDyIAuBFzircCIPirlEvoB
6_NB
f=V[F
qiW@2o
J?Qf
1fwB
;8G>
H/u
4g(u
Font
iCm
DtRj
oB9G~;
pawH*W
T? 9
[t_\
[t_]
CMAi
usI_&
awH?cz'
ZUtC\C
[t_Z
IWB9I
psjTC
ykz?
teYH
J!R_
o
xZ
f4R_
-I9[t}:
U_ro
pawH*J
j"
P
OS}a8
NJ#/
9aun
String
[t_|
[t_}
[t_~
_CorExeMain
DebuggerNonUserCodeAttribute
'~+4
a7B9c
awBGC
>>w&*
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
-Hle
?][_
_UYfwY
8By
8
uhK!w
avR9C
Q(8Wx
k;hh
\yy
)qBc[4
~t_Z
Qx\ pcWW1
xt^_
~t_]
awB1c
;WA	=
$?"ID

7f<s
]e~r
"Ihc\
`ek1@
^'^^
n<[q
IH`dl
InitializeArray
CGO'
->p
$DbU
~t_{
CCCC
UR=
bj/C
awB1C
h\h
2|By
Mv+'
vs~5=
n
/Pbk
Z@k6
N8!3
-oa{
M#_p`
(c~kA
awA]C
)sM/
X<r5dC
80Y
[v_F
Q>2F
pFy
lux:
J[+)
!RTWA
C
to
N:?-
ava/Cr0
yu/]
W+A}}
qvUo
EditorBrowsableAttribute
a^O~@M
-aqB
]_zR+
S =!
-Pm/
}u|=
XN{t1
;'u?
2Bfi/
cR"o
!-z"Q
ewB9
PcwB9C
rk_6I
wB?k
rq[g
N`<M
sXwU
VEf,
dMLVtrrUUUUTTTTTQQQQOS
stj`C
k'8o
R
dC$<(
`vL>C
f+;K
_inW
'O.p
aw8C
aiB<B
Y;J
XYkI
awB8C_}
N9ffYI
HH,dJdw
Lf1.
E)<:
7tGM
+
k}|o
ccvX
5`UFI
MaR,Z
@.rd
PMA{
Load
iu`;
mB9E
_
LP
g @\
/`72
GIOOOK
a&|)}
iZz.D-
Sm`>)n
:p
&
kwB==
Lweg,
System.Drawing
PwFXT
aqj3C
k{b(DR
g(i>|
dCi^
/<d}
w0#
4EV{
{ZV?
Z(o	!
0q%W
c*7<
n: P
0i1M
(*n5;
sgXh
M}mz
w_39C
XZCI
oT})
k}T2c
`Uvm
bP9C
R][]
!Z)z
cw
 ,
Fw&'l
leQO!-Y3
'
Ro
[ZB
(dJg
awH-Q
X-bQ
IJa]
j<:~k
]9-T
qZ9P
dWj&
fF|R
u<=q
.9^h
=([YU`
u)8q
I\@ 	2%k
_tP
QYw
V:;;?
! Q3q
pbRn
@e=x
g9'uv
Rb:4
C4wB9C
k}tQ
stJawQxhzZscRAKzJzDtBkrMFDLe
LVm&[
Ulj25Nk
&
A
eMRt]
RuntimeHelpers
7tk/
C+=t
rv>CuCJ
$
$v
pob].
ubWH
1v[C
hp:
o
Dzo^
'-#t
7!jIlz]
HZlN
9wB3
m3gQS
M+5__/
;1{/z\
]4^'
X
F?}PiC
avBAC20k
>wB>
j$A
-		-H
,I;{
okJ1J
k+j=
gjG;]
?jux
Ur@,D
a3B9C
^WD9V
~t^Z
ufF(F
~NnS
=r;}A0
BJsK|
C9Ct1
=5Kv
T1Z%
5cxw
J,Kl0
V4B1f
2XkW
P
yt_|
GlImeT
7
6
fnbF
h-h
65+U
^o=E[u
uUI)
`3j3r
~>{K
Object
wB}]&
a3'Z*
JI+!
hl)q
h<h
XqwB9C
QrB%B
j"P
"mz,
|N|H
o8'P
'9&f/
EG)zNf
s)[b1By
'l+o8
.fb
ComVisibleAttribute
UBK
&[ysH
r\f
3System.Resources.Tools.StronglyTypedResourceBuilder
zvNOkiaRdWSBDnKlNvTUVfDMFHJi
irb;B
i .u
#mj8c
.A0Y&
ReM}
28~{h
~Z^Xz
"Yo=
Y`
wY
z
K.1#
fmsk
'\3'
02J49E05
ll-_
awt8C
,]	
k
[	I9C
L'?oK
22LK/
08NJabP
d"
k
Nf|{[.
l"(:
FJl{
xxxtu
y/i~K
rr]!
vaQ7O
0~U`
i
=t
pUyZ
w0a4
I-B
/H@8/
yeiM
Ri?c
o>)P
=}~#
;E:~
PJ
Q
,)eZ_
f5=
awHV
EditorBrowsableState
9^B
XGG
Xt_]
awHJ
AZ7=
`JPSSRROOOMMH
\%p8
a;)
W8YW
xt_}
xt_|
nM3+
xt_{
a3B3Cg1
nN
L=
awB6B
CultureInfo
w%\7
aBgG
Z$g%
taGB C
g*Z>>97A#.
1.0.0.0
8Q& |5
f2d
Z*Gq
}]r>=
XnC9C
xt_\
J.o
xt_^
Iq9>9
xt_[
xt_Z
RQ?Z
f=4~A*w
vz\{
P@_`
wzmX
IDAT'
n:#P
B[@.
+|RD(
a}H;0
v"	G
F[T'
0Z?0
&
0Q
H*20
@C	%
aD\D
xw3//
VHZi
`t,HF
<ae`X|	!
Pvnwd
=.['NI
\}^[
sRGB
kp2R
r}]&
)GQ\
i_{x
a}I(J
}QwB8f
OKFjY
-].[
i .9
K.(_O
.
<@@@@@@<6;
/,[*
^QlpJ7^
]3eS
/
*t
<vXs
nP:I
[Wn
"<x6m
5zHd
f 7P
K_Rn[
B;ab8
3?BDEEEFF
2:44
[=0RTL
$uOq#
>Cy~=
{0
6g
System.Globalization
z$S?
y/qB
?^#4
zz|w
,Oy9
nxM8H
=|au-
aVB=C
{0
6{
v3Sv=A
qCb
Y~mri
QrBnC
&:p>
aqS?c<
`ERN<
2MlE
u;=q
u;=p
[t^_
[t^^
[t^]
[t^\
[t^[
[t^Z
ava4Cy0
/'XU
m
H
q Ib
cwBVf
O_j*P
;V^-]
$*E\
7.H!
.+$I1
M$)E
{a
KH
~<8^
%#2u
aqh*s
Zahz
NH-
mcIoo
;;>?AACCCC?
6w5A4
EGE(
xZ,Z
y;5:
=ZmYB
N&*}
Xt_{
yllleeSZ
?le>
bIo[
)&Tv
Fs:s
Wmj
i">M}
20#7
~{S5
I!k`
+tv;
uawB9C
'P@A
Edj
3c'T
R=o{z
-WR,
cDCe
o*Mt
=K~I
Xt_\
5I6+N
Cv4U9
0tD+
FYtc
vwB3P
wO>Pn
w5XH
G~ 1
gbj/C
1W,A
_IaN*
kvPaZ
0_io
`,08
lni/
V_xH
EawB
48/
)$YL1
6awB9C
Ck/h
a #P7
NB;4
j
i
}Xk^}
=CvS
:(IDATx^
h
h
<,3v
{Pw|
aTBtC
a:D:#ylD
f'CDB[\Y<.
3:mD
.5D%
z;-}}Y
IkTE
V.WH
PictureBox
ITB9I
D~ij
)/\tK7
R-;uoU-
Qgs1
paw1
Zt|q
WS{8F
g[A{
57n#
"gB&
nx,H
W)
"{2
^=\r8
#LGr
SZ#&
pl@2
\>~h
0x+/
r@n}
NawB<C
r}T*H
7n0xW
x9c
T+\z
1U<I
x	E_
C	0m
>awB9C~0
\\5
%B9B
jq"C
!dGCy
qXSR
ACKni
DIW~(\C
nD
2
:d.P
pHD'
0~jo
ffDVr
C'n..
+AA+~7Er
{T3;
B9E~
{S{a
:u\|
at]9C
rJ;
B?EF<V
<N(O
,Bs<
frzKv
Bb9
^j'\
0mOAU
GetHINSTANCE
h[k
d3[
$3{v
wkw;
TK
u
#"P9\A
qa3B3C/2
)n$8
IDATj}!
cd[?
P)aN
&<mhPQ
960g:
Ue^@
#M2d
9?Rf	
g
;N&i
qojOBL
n\Cy
ay@9C
cO,_
k1Y]
Z@Ht
VA{d
arC9CB?
S^N
r<u
B?CAe
O%'J,
ao]w^
aqd1c4
NJzr
lY[4
l~vY
GnM,
)&_C
8+no
O(o	!
+[+
J0IR
~	Jk
hP9$
zwg%
sS4\
N&$#
}-~
N?l@
"
NB
CBV/v
f2)Q
`C+w
P6\^
?Ceb
a}8([
*ggWB
@>&f
wBIkv0
ECCB
T-A+
wy	i
U+o5Z
.8G}
g*eS
j?&k
5yb5
SezRI
zmh"
v]aU
DSAQ
JuUT
\-s`q
!H0;
El+
6fHmw
`0dk
*3fK
HIz_[-
awB!C
}S"l
maGBbC
Aw@=c
>]di
iE1E
#Pi)"
p5}1
|}.9
kn%_
_^F9
>GyK
Qa
aw#9C
U&ie
{9lK-
Q
\A
<DO
,C93
ewB8C
a+`9C
9_8_
R
w
Bz,v
a:'J0
VKQ-!
BfZb
$+C&
Z|<@
o{{K
93v;
^t_^a
J\fl
1<)D
cFF8
{P7Uu
e"LH
[ak{
6Ny<
2008 - 2018. All rights reserved.
`vfy
awB]
3awH.
W_EYt
:#'~e
c"]?
;W&<
k&&vQ)'>
35 2
Point
a5B0CL0
-*M3
-FV(
/^..o
|pGI
Ggm79
-$5g
f}UY$
rq]
J)Tb
|YN)
-Im]8]
v2.0.50727
QJML
e4tP
C}CR50
o8&P
D8YK
G~ZE
CCq
B,CL0
UI![
Xt_^
5It'
<akT
Awb9C
4slG
o;&P
lea
FycO]
+a\T1
J@A9bM
B22\Q
D;8h.)`
TyLU
n~M.
@c**n5;
0Z<?
Ze=Z_]-J
P={0,
$:w?
Mwc{
IwB9Cm0}
$!$
V-7GML
v]B"s
a|IT
:,,Gr9<
psj@C
dP
K
r%{I9
HYYy
0f#3
OEav,
A!F
+H.%
[B,'[J
4n7%
Bu
s
-u6
c%"$"
"^ei
aw\9C
Nd#,
~1Y<
orSP
B9IrW
^Ob7
($L
3=-H
>KZ&I`
d>knT
UeqBg
j&ZP
awBE
WEx
Dp9
E_!]
set_Margin
j)qB3
B9Irb
dD #
Ddb&O
?V	/
set_Size
adN9C
GetTypeFromHandle
-aqB*#0
y6-xi
vC~(
B9Irs
uu\_
a!"
kuZV
o7}5hf
~S\#T
>wx_
[B>P
ob![Q
u!5~
3'1QD6
v_`ZV!I]
X9s	S
>#Z$
($O@
uZaY
1=_c
Y
sM
Z5s~#ow
o;'P
[Wrl5
FGy
:a!H
t$h
rrS?c
(
zJ
add_FormClosed
0xS
66M1
iiuG5.B
2'jFI9b
,7}w?
q>%rU
fwC+Z
5Hae
Jqd
~x,H
_t_[
#U~
n
{Rf\
Ri?c	b
[-$C
ET8x
`Q[u{
g` c
K`mQ
f*;=U
C{yt
z1!ig
z7"D8
'6KC
atB9C
a}Q=R
*i
L;|o
s&J-
&PfT4
tyF9

4
:yZK
i}b=Q
r)ANHe;
>@@BBDBDEEEEEEE9
FN6~
sn_%^
l~!L
aw	=C
e+o/u
e\DC i
S.1SN(hz\
Ug{:%0]
QuB
C
qO[-l
axz"
Pa0B5C!0
x+!
G1~]
NipJV
NEGk
a}Q=c
avQ*U
jwh+g
z>-b-
=wB3c
K2m'n
E~~~
0m)
lBK0
&bQ'I
!hFp
1x
E
awB9Cs
IDAT
t8=q
a[FpCU0]
4yzt
a4*X1
Kh<x.
System.Runtime.InteropServices
HNAyeMplnNCDgcpgBKnqcphgpvfcB
5./"
85F4
<'YKP
vzu [
t/L-
Dd{Z
Yt_{
Vgq)8wa
sm,{
Yt_~
Cz#7
Yt_|
1B9E
IK9?
_wB9C
XtSowlJexVWvHOcytJogfDVIkvgs
N	l9C
KiFWq[)
x40y
a}nAc
psh8_
xe=(h#,
snJ+Z
*"Ahl9
wuxxxxttttrrrrUXXTT^
DQS=cF
d50y{]
ALHPfxIgZViwezGrXOwtsMIzLIxn
-PNn
W"qk
IrB9E
,Jjk
Yt_Z
Yt_[
SZ>{
#\KY
Yt_^
pI?&
Yt_]
Jp$C{f
9N6M
Jqb
9}ix)
iY/W
q5-gb
V;oB
^{d1^
CrX3
System.Runtime.CompilerServices
st,H
YiB9
xW^y
aww9C
\0s:|E
>+zLTl
3?57y
cy^;M
a}jNC

M(B2
-K6Gw
jbG_
efG(J
awBYJ
[wwYWtttrrrrUUUTTTQTQQZ
awBYC
B"{
Jqb:
8}w">
}2;-
v)zLk
"VmJ
29#Y
@gFJ
q/	
Awy9C
t #G
cE?4
b3B3C
lD[9Pp
ajC9Cy
Ir?P
25;M&
v"Oz
;wk:
F]=m
hlh
flQa
B)%F
_#6,9
#E
p
aG}2
zLl
}_;o
`f+
pfo1c
awB:C81
0~]X
qZ
o
#"7-
awY=C
kDq
'sS,
zd]\
!h34G=
0~khP
[)T5
s(
P
1DQD
O;Cz
ELsl
XLpE
set_Font
aw{9C
a'0V
:nzo
qAr-
H'u}
EtK	8
B_BV
i.l
S
qgw2
O?-[
~t_^
w+|F
atFxC
ez[>
0wB3P
2
6{
2Sv4B
avj`C
g^L9C
96j
rPJ_L
9]c"
IDisposable
asL9C
t<=q
t<=p
0Q.Bk
8?nc
mwBC
stm%
u	"I
~wA`C
{QKCm6
~`Vw))
-RZ*?
Cy>8
M_sq
"'nBN
{t_^a8 S&
z;?~
4"!i
0h0q
sqDCjDhxVsaShEXuffOhvTxYgzzCA
|;G;
FontStyle
d%+P
{y9Y.
;=(W
GVVQ
W]v1
agB.C
U>H
~t_\
X$8
gNzf
>!1BDEDEFFF
_p]_
ko/}
-ayB5E
EBUn
7LIs
uKZm
bes0
0g#6
AssemblyProductAttribute
udGqX
^a]c
awb:C
awJA
PAwB
a%'^*
I{
q
XX
 .
sqApE
G-Z`
:+#u
}|z;o
["}E
z#eUD
dRi?c
<Module>
<+ H
}V^y
UNtn
w_69
/lM
[
v
fwB
sTs?
8	[&
QvB>C
d1IP
0u}}
Ie7s
k105
jK:-P
L=ShC
Xt_|
;zSD
q[A8
V,/q
-:U~
"vND
@{`4O
f%)a
DU5\
b0Gp
=-z>
tsnD
w]TZ
d>gP
Nethb_P
adl0%4
Bitmap
'9$
SizeF
ewB9C
IZZFK#
"o\&
:[zzn
8o)E
p':R
N2xSM
c3B3C
*aqD
CL&:
rrJKh
%A,w
}>yk
ED;@
xVeZ
6*
9
J^=|
I(\[
5`Q7M
1eBg
Aw{$
P5;p
\k0- B
#+AC
:8I^
! /D}
/ncA
WaFg
YLhm
|0@?
HFUt
5AA4
\=Q`;
zqb
[/#i
G^8__^
@kF9B
$Q%AI
F!]:W
DdFIdSwXIDFwiVvCSwTNkOPGiDCDA
uB9c
+]{g
*Wt4
|tMWb
xH(n
jT*aC
r#'!@
7yf*
EZn
&O	E
fGy
awO1C
CwB=C
(Oc6
|?wB8,
DaS=
R3)3C
2S3v
G
Q'
a#\kB
<o[
[dxz
N|=PNy]u
avB4C
9Ic$r
vrnllex
pc~B5C 0
0Yi
:PQVVq
?_.
^
RqN
k*$Y}
Y{i
'yme
_Fj0(
EndInit
o{J3C
Ei,4
Elsm
O=g
aw*;C
$U<dI
r{S!c
Y&gmN(Ww
@awHJ
HawB9C
zzcW<e0
!gk0<
;QT.(
j)qB;
dx
'GW.}
yc4<
pS]E
Ruk7
`wB9C
=
}xxtttttrr|
a#xdg
)]W
YcG9C
3;>??@AAA(
Z)ZI
wB3kB0
JQ=D
T	ubxx^J
4]9GeI
B.52G
7.)
:T$,K
=wt7hy
g%b(
4UMAS
set_Image
4i_Q~
awSGk
:\Z#
qISuG
,KwBxw
g}D6
aFI9C
bwB7@
wwB3O
2RK0G
h&$P
#tOO-A
0HO!
z#0
6
T3bg
>R9r
'W5
lP::z
aaWB
:2 
XX
`t,H
W<cf5
Y.{Y_
EventHandler
a_CI%$
S?cr$
o*)IQ
U:wB8P
RP^G
XnlIMaemRfGWhdiMsfBMoiPMSenP
)'1
XiwB9C
e'.8VC
[bH8
75BB
"bu~
}8oV
_w#j
l$$P
0m&-
NKM7
NK^;|
99wxwxx
B$;J7
xV>AB
SGy]
I_Q+R
5~wB;C+/
e_#9C
xuE'm{
niX?K
4tZE
pzXy>6
O@Yq
k)?a
},zgB
a
}}22
^-m7M<@
F	AiDGS
1[Qj
Db`N<
Qbw2

=;jR
q!5P
'D)?
=;1:
x=3`,'o
+*n5;
Jqbl
QG5v
2bLoR
WjoM~C6
urB<P
Emr
8&O&/
/@ Q
get_Module
kQ&9
A]AA
h+HV$
Zx|zs
vy3B3C
TwB3R
A]u^
3S&0
h:wB9Ch0
93O1
-rq/
3[
2	@g3
msnc
b}P[
c\lw
nmt,
\YCZ
ul&^n=
*rZc
wS;aO
s7 dx
<a^;
pdJ(N
y/ka#,
LTK
G|
7\o|
|0{[
!4Gd
U0Q
98?b
j6?s
7RjJHz
Y^p;B
hnF}C
j)
[
Vn)H`
+uL#
GEWt
o
zGu
4.X"
Vi_
Yx|`
7%j7
KwB"s
){$E,
A(!'
d7OP
rcP?
n0C@)
$nB9C
Rw "
v>4vF
EM&z
~7^
edlt
0i6q
)B9I
awD(c
;5_L
TS=c7
|]zk
kQS>cY
Um]+
set_Icon
Yt^\
System.ComponentModel
Yt^^
4]7f
Yt^[
&>njM
:B9I
k;_~y
p~d
b,)xG
c+@
]`3"N
6x X
@[h i
ER0q]<
V(#Y
igoleeeeeSSRRK
awT;C
VQ0
17W
86Ka
C8#/a
6uk
H=6_
usfv:98<L64(V
7e?~R
1"q=
I z$*
#d%#
fn.n)c
oAwm{
Gy~
X0#B
A
a`GBc
lv<q
!aNB5CQ0
aFB:B
E<_a
,D`h"
!fe3
K}Q3
h%*G
lGr
.
b@[
J0W-
@B\
GpUaH
~jD!p
%Wk/s
m#Vo
hfl
;2KFcNa3
2I'U*r
U/|
aSr\&
"

,4*
!{IT
*hq
yz@$|
o9Y]
~E~$
F?hm
tb9B
_v`$
7777'*
]1sg
ewB(E
Ot\:
8{y_W
@zM'
pa>u
7+dNC
YB9I
JNqUhMIZYXrkUMnoQRXRIrGDhJnr
<6Eg
h" >
-;>+
>B9C
System.Windows.Forms
dEr)
)2Qs
@3x"Bh
(*n5
mOZ=
JhR(
@+_c
&L+Z
e=nO
8sn8
pyU`s
~W$g
0BBBEEFFF
O{%\
[_+J
uol>K
}3T*jO
#NA
a~B8C
=^7i
90S?q
B\*?
e2RR
aw$<C
System.Drawing.Bitmap
?YeH
z07^
uaFBkC
^A2r
`(o	!
{FUu
ts4
3&,R
i`i:U
aOU8C
p)$>
w);2
[9E.
7 J9
@>3460?@BDDEEEFFFFFFFF
3uj{
`{29C
h|	<
1>@AC
B9C~0
Z!V.
C"@
Y;1$@s
GeneratedCodeAttribute
n:z>)9
eHcsAJlRKukksdmNEiIqajNEEpJzA
x`)I
/Z3n
r%SU(
9O@J
& *[
.K@A
|k_<I
Z1(|
TDC
gb_[
>$!X-
^'%?Hk
jN,%
6:=M
bqoiXaA
:[
hW$S
}!9j
~6.w?j
}}uyL
RJ(+
S0P0R
[ccCt
^`W(
!Bwi
y/5*
awB5C
.5~!
'DqO
6ng8 0
s4lg_
2j@j
)?oN~t
(*|n
vaTB8C
,f0>
nwB?\
~qB+
NJ'j
[-mp
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven05b_64 Seven05b_64 VirtualBox 2018-06-11 20:43:58 2018-06-11 20:46:48 170

4 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven05b_64 Seven05b_64 VirtualBox 2018-06-11 20:43:58 2018-06-11 20:46:48 170

6 Summary items with data

Files

C:\Program Files\NETGATE\Black Hawk
C:\Program Files (x86)\Lunascape\Lunascape6\plugins\{9BDD5314-20A6-4d98-AB30-8325A95771EE}
C:\Users\Seven01\AppData\Local\Comodo\Dragon\User Data\Default\Login Data
C:\Users\Seven01\AppData\Local\Comodo\Dragon\User Data\Default\Web Data
C:\Users\Seven01\AppData\LocalComodo\Dragon\Login Data
C:\Users\Seven01\AppData\LocalComodo\Dragon\Default\Login Data
C:\Users\Seven01\AppData\Local\MapleStudio\ChromePlus\User Data\Default\Login Data
C:\Users\Seven01\AppData\Local\MapleStudio\ChromePlus\User Data\Default\Web Data
C:\Users\Seven01\AppData\LocalMapleStudio\ChromePlus\Login Data
C:\Users\Seven01\AppData\LocalMapleStudio\ChromePlus\Default\Login Data
C:\Users\Seven01\AppData\Local\Google\Chrome\User Data\Default\Login Data
C:\Users\Seven01\AppData\Local\Google\Chrome\User Data\Default\Web Data
C:\Users\Seven01\AppData\LocalGoogle\Chrome\Login Data
C:\Users\Seven01\AppData\LocalGoogle\Chrome\Default\Login Data
C:\Users\Seven01\AppData\Local\Nichrome\User Data\Default\Login Data
C:\Users\Seven01\AppData\Local\Nichrome\User Data\Default\Web Data
C:\Users\Seven01\AppData\LocalNichrome\Login Data
C:\Users\Seven01\AppData\LocalNichrome\Default\Login Data
C:\Users\Seven01\AppData\Local\RockMelt\User Data\Default\Login Data
C:\Users\Seven01\AppData\Local\RockMelt\User Data\Default\Web Data
C:\Users\Seven01\AppData\LocalRockMelt\Login Data
C:\Users\Seven01\AppData\LocalRockMelt\Default\Login Data
C:\Users\Seven01\AppData\Local\Spark\User Data\Default\Login Data
C:\Users\Seven01\AppData\Local\Spark\User Data\Default\Web Data
C:\Users\Seven01\AppData\LocalSpark\Login Data
C:\Users\Seven01\AppData\LocalSpark\Default\Login Data
C:\Users\Seven01\AppData\Local\Chromium\User Data\Default\Login Data
C:\Users\Seven01\AppData\Local\Chromium\User Data\Default\Web Data
C:\Users\Seven01\AppData\LocalChromium\Login Data
C:\Users\Seven01\AppData\LocalChromium\Default\Login Data
C:\Users\Seven01\AppData\Local\Titan Browser\User Data\Default\Login Data
C:\Users\Seven01\AppData\Local\Titan Browser\User Data\Default\Web Data
C:\Users\Seven01\AppData\LocalTitan Browser\Login Data
C:\Users\Seven01\AppData\LocalTitan Browser\Default\Login Data
C:\Users\Seven01\AppData\Local\Torch\User Data\Default\Login Data
C:\Users\Seven01\AppData\Local\Torch\User Data\Default\Web Data
C:\Users\Seven01\AppData\LocalTorch\Login Data
C:\Users\Seven01\AppData\LocalTorch\Default\Login Data
C:\Users\Seven01\AppData\Local\Yandex\YandexBrowser\User Data\Default\Login Data
C:\Users\Seven01\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Data
C:\Users\Seven01\AppData\LocalYandex\YandexBrowser\Login Data
C:\Users\Seven01\AppData\LocalYandex\YandexBrowser\Default\Login Data
C:\Users\Seven01\AppData\Local\Epic Privacy Browser\User Data\Default\Login Data
C:\Users\Seven01\AppData\Local\Epic Privacy Browser\User Data\Default\Web Data
C:\Users\Seven01\AppData\LocalEpic Privacy Browser\Login Data
C:\Users\Seven01\AppData\LocalEpic Privacy Browser\Default\Login Data
C:\Users\Seven01\AppData\Local\CocCoc\Browser\User Data\Default\Login Data
C:\Users\Seven01\AppData\Local\CocCoc\Browser\User Data\Default\Web Data
C:\Users\Seven01\AppData\LocalCocCoc\Browser\Login Data
C:\Users\Seven01\AppData\LocalCocCoc\Browser\Default\Login Data
C:\Users\Seven01\AppData\Local\Vivaldi\User Data\Default\Login Data
C:\Users\Seven01\AppData\Local\Vivaldi\User Data\Default\Web Data
C:\Users\Seven01\AppData\LocalVivaldi\Login Data
C:\Users\Seven01\AppData\LocalVivaldi\Default\Login Data
C:\Users\Seven01\AppData\Local\Comodo\Chromodo\User Data\Default\Login Data
C:\Users\Seven01\AppData\Local\Comodo\Chromodo\User Data\Default\Web Data
C:\Users\Seven01\AppData\LocalComodo\Chromodo\Login Data
C:\Users\Seven01\AppData\LocalComodo\Chromodo\Default\Login Data
C:\Users\Seven01\AppData\Local\Superbird\User Data\Default\Login Data
C:\Users\Seven01\AppData\Local\Superbird\User Data\Default\Web Data
C:\Users\Seven01\AppData\LocalSuperbird\Login Data
C:\Users\Seven01\AppData\LocalSuperbird\Default\Login Data
C:\Users\Seven01\AppData\Local\Coowon\Coowon\User Data\Default\Login Data
C:\Users\Seven01\AppData\Local\Coowon\Coowon\User Data\Default\Web Data
C:\Users\Seven01\AppData\LocalCoowon\Coowon\Login Data
C:\Users\Seven01\AppData\LocalCoowon\Coowon\Default\Login Data
C:\Users\Seven01\AppData\Local\Mustang Browser\User Data\Default\Login Data
C:\Users\Seven01\AppData\Local\Mustang Browser\User Data\Default\Web Data
C:\Users\Seven01\AppData\LocalMustang Browser\Login Data
C:\Users\Seven01\AppData\LocalMustang Browser\Default\Login Data
C:\Users\Seven01\AppData\Local\360Browser\Browser\User Data\Default\Login Data
C:\Users\Seven01\AppData\Local\360Browser\Browser\User Data\Default\Web Data
C:\Users\Seven01\AppData\Local360Browser\Browser\Login Data
C:\Users\Seven01\AppData\Local360Browser\Browser\Default\Login Data
C:\Users\Seven01\AppData\Local\CatalinaGroup\Citrio\User Data\Default\Login Data
C:\Users\Seven01\AppData\Local\CatalinaGroup\Citrio\User Data\Default\Web Data
C:\Users\Seven01\AppData\LocalCatalinaGroup\Citrio\Login Data
C:\Users\Seven01\AppData\LocalCatalinaGroup\Citrio\Default\Login Data
C:\Users\Seven01\AppData\Local\Google\Chrome SxS\User Data\Default\Login Data
C:\Users\Seven01\AppData\Local\Google\Chrome SxS\User Data\Default\Web Data
C:\Users\Seven01\AppData\LocalGoogle\Chrome SxS\Login Data
C:\Users\Seven01\AppData\LocalGoogle\Chrome SxS\Default\Login Data
C:\Users\Seven01\AppData\Local\Orbitum\User Data\Default\Login Data
C:\Users\Seven01\AppData\Local\Orbitum\User Data\Default\Web Data
C:\Users\Seven01\AppData\LocalOrbitum\Login Data
C:\Users\Seven01\AppData\LocalOrbitum\Default\Login Data
C:\Users\Seven01\AppData\Local\Iridium\User Data\Default\Login Data
C:\Users\Seven01\AppData\Local\Iridium\User Data\Default\Web Data
C:\Users\Seven01\AppData\LocalIridium\Login Data
C:\Users\Seven01\AppData\LocalIridium\Default\Login Data
C:\Users\Seven01\AppData\Roaming\Opera\Opera Next\data\User Data\Default\Login Data
C:\Users\Seven01\AppData\Roaming\Opera\Opera Next\data\User Data\Default\Web Data
C:\Users\Seven01\AppData\Roaming\Opera\Opera Next\data\Login Data
C:\Users\Seven01\AppData\Roaming\Opera\Opera Next\data\Default\Login Data
C:\Users\Seven01\AppData\Roaming\Opera Software\Opera Stable\User Data\Default\Login Data
C:\Users\Seven01\AppData\Roaming\Opera Software\Opera Stable\User Data\Default\Web Data
C:\Users\Seven01\AppData\Roaming\Opera Software\Opera Stable\Login Data
C:\Users\Seven01\AppData\Roaming\Opera Software\Opera Stable\Default\Login Data
C:\Users\Seven01\AppData\Roaming\Fenrir Inc\Sleipnir\setting\modules\ChromiumViewer\User Data\Default\Login Data
C:\Users\Seven01\AppData\Roaming\Fenrir Inc\Sleipnir\setting\modules\ChromiumViewer\User Data\Default\Web Data
C:\Users\Seven01\AppData\Roaming\Fenrir Inc\Sleipnir\setting\modules\ChromiumViewer\Login Data
C:\Users\Seven01\AppData\Roaming\Fenrir Inc\Sleipnir\setting\modules\ChromiumViewer\Default\Login Data
C:\Users\Seven01\AppData\Roaming\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\User Data\Default\Login Data
C:\Users\Seven01\AppData\Roaming\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\User Data\Default\Web Data
C:\Users\Seven01\AppData\Roaming\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\Login Data
C:\Users\Seven01\AppData\Roaming\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer\Default\Login Data
C:\Users\Seven01\AppData\Local\QupZilla\profiles\default\browsedata.db
C:\Windows\Temp

Read Files

Nothing to display

Write Files

Nothing to display

Delete Files

Nothing to display

Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\MachineGuid
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Mozilla Firefox
HKEY_LOCAL_MACHINE\SOFTWARE\ComodoGroup\IceDragon\Setup
HKEY_LOCAL_MACHINE\SOFTWARE\Apple Computer, Inc.\Safari
HKEY_LOCAL_MACHINE\SOFTWARE\K-Meleon
HKEY_LOCAL_MACHINE\SOFTWARE\mozilla.org\SeaMonkey
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\SeaMonkey
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Flock
HKEY_CURRENT_USER\Software\QtWeb.NET\QtWeb Internet Browser\AutoComplete
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DcomLaunch
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DcomLaunch\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcEptMapper
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcEptMapper\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcSs
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcSs\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VaultSvc
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VaultSvc\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VaultSvc\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VaultSvc\WOW64
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\ProgramData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Public
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Default
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir (x86)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir (x86)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramW6432Dir
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonW6432Dir
HKEY_USERS\S-1-5-18
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18\ProfileImagePath
HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData
HKEY_USERS\.DEFAULT\Environment
HKEY_USERS\.DEFAULT\Volatile Environment
HKEY_USERS\.DEFAULT\Volatile Environment\0
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VaultSvc\Environment
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VaultSvc\RequiredPrivileges

Read Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\MachineGuid
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DcomLaunch\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcEptMapper\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcSs\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VaultSvc\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VaultSvc\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VaultSvc\WOW64
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\ProgramData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Public
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir (x86)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir (x86)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramW6432Dir
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonW6432Dir
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18\ProfileImagePath
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VaultSvc\Environment
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VaultSvc\RequiredPrivileges

Write Keys

Nothing to display

Delete Keys

Nothing to display

Mutexes

D448845E628773E4A9A809DA

Resolved APIs

cryptsp.dll.CryptAcquireContextW
cryptsp.dll.CryptCreateHash
cryptsp.dll.CryptHashData
cryptsp.dll.CryptGetHashParam
cryptsp.dll.CryptDestroyHash
cryptsp.dll.CryptReleaseContext
vaultcli.dll.VaultEnumerateItems
vaultcli.dll.VaultEnumerateVaults
vaultcli.dll.VaultFree
vaultcli.dll.VaultGetItem
vaultcli.dll.VaultOpenVault
vaultcli.dll.VaultCloseVault

Execute Commands

C:\Windows\system32\lsass.exe

Started Services

Nothing to display

Created Services

Nothing to display

#infosec #automation

TheSystem Itself @ 2018-06-11 20:48:19

Detected family: #Malicious

TheSystem Itself @ 2018-06-11 20:52:02