Sample details: 8978c08e23045b8bb172eaed50146f06 --

Hashes
MD5: 8978c08e23045b8bb172eaed50146f06
SHA1: e2c353a1ab776ee9dd9b48271bec8ea0af6f8a8c
SHA256: fdfb28d16d5fde4b616d7df7df0882a38941070cbffc79cb220b80395b8c8f2c
SSDEEP: 12288:9AsHa7YCpVPHZnEC4Md6L0oz6tohqTJHG8nUQlte9:367YCTBnR4Md6LnUpT
Details
File Type: PE32
Yara Hits
YRP/contentis_base64 | YRP/domain | YRP/IP | YRP/NETexecutableMicrosoft | YRP/Microsoft_Visual_Studio_NET | YRP/Microsoft_Visual_C_v70_Basic_NET_additional | YRP/Microsoft_Visual_C_Basic_NET | YRP/Microsoft_Visual_Studio_NET_additional | YRP/Microsoft_Visual_C_v70_Basic_NET | YRP/NET_executable_ | YRP/NET_executable | YRP/IsPE32 | YRP/IsNET_EXE | YRP/IsWindowsGUI | YRP/IsPacked | YRP/IsBeyondImageSize |
Source
http://natviigator.com/val/val.exe
http://natviigator.com/val/val.exe
Strings
		!This program cannot be run in DOS mode.
`.rsrc
@.reloc
*GZa85
x dIdja%
Z Zeeqa80
llJ%&8
]Z 6K9Na8?
%Cba8{
Z j%R3a8
vTcZ ~
 n)84Z 
 Q'tA%&8
S7Z 8h
G4Z K}=|a8
m5]%&8w
 FgS{%&8~
A@%&81
Z <<pYa8
~Z y^-
 g')?Z V'
 jDWq `
:c%&8h
 7]9;Z 
:f)%&8
 =/m!Z 
Z [^![a8
u9Z /L
]Z z"(
	 #<X1Z 
,u&Z L
pU^a8q
OZ _c"
 d`HuZ 
!#jZ f
& Ha.38
 [hK0Z 
fiTZa8
;oUa8U
 pSW*%&8
L"Za8n
k/Z x2
hZ {}Q
MFZ >[
 !-uuZ 
 O*tqZ 
2|*a8.
$!Z @,!Va8D
/dSZ vv&
	 3NrBZ <*
H#Z v9Pfa8
"*#a8?
 ?}?F8y
& 9SA}8
x0%&8s
 >&3P%8
dv%&80
 )izs85
 JDJb%8
O|%&8h
 {6&_a%
D$%&8p
 dL_W8[
 /)k4Z o{/
 |QH98
 B*?MZ 
KzZ R~
 	[-@Z _
$>Pa8y
QH;a8T
 Ly[=88
C$ja8H
 VD3ZZ AK<^a8
 Qd"ZZ 
 SzKGZ 
 SMgj 
Jw)a80
 r_8{ 
 JM<wZ H
Z R%O5a80
 ON_{8
*eQZ Xt/
	 \x;RZ 
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
FqdVQv
`.iZyd
16v8LH
oe\x#|<
}`;@{Z74a
63X+]_
^u:r|f
;&)ND{&
4i]_*#
C'E>D	
.Z{$9D
y$m<V;
fq{wAL#
u!^e|9
6ZrQ,OA
),[)/?|#-)
(+7qvQ
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
hSystem.Drawing.Bitmap, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
??<Iojy
{/q}Ro
s\az;E%
%]$xcr
5Pq*XG0
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
W<RA0@TKhWe
{)%.oM:
)#kfv[
w!^2X[
3S?y  
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
}H8"\8
}6u\~H
-AiF6r
sMokYZ
k8L	FcS< 
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
NP"=30
\((Fj^
VQ}MHjkGF
_g)#[^
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
oBcmYS
)"TH	*
f@_!Z{
jNsc}p
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
A*}6Zc
E7sKxI<
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
yfBg;{
n~Df*]
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
FJJ@J$
Y_Q`V/
^zA:0\
A~j<Eq.
1#N+q?$
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
abSXEH
UdUX__
Mo&DZ	I
zaBOu8
TRa[828~
^R}iOR
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
qeoJ8.
Lg?,	V#Sk[
*WX(7U)e
a;*ah&T
o#Uav7
"M-=Un
mn^u#)
R+?ZV.
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
T|h4NV(
&zIK@]j
*dZ5Mn
"ihhy$=
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
 m;iM2
7wVSK2
Pl?!t|
6"R**P
kPT\Y@
4Rz~61
t;DdGfJ
J%g\T3M{
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
bA9Z>t
PUt(ET
:GP}t)
2LgwrJ
pTvxKx
dQwpYl
IPa<!=
#bMqehJZ+
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
c0{k6f
,%.gA'
X??U5<
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
	2ai1sb
uM4pSB
-d,gTmn
xz]6[Gp
-]|_Rl
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
HqPC	p
3,{*gA4
CSXkf;
W>.A~i
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
?hz>KG
S:mh$M
mw,K!u
j)['c1
U%sf	92
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
eEDfvv
o?TY}s
Q5= O%+>sl
dgP.:3
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
 xEJ\J
go=?ra
i"c=n|}d"c
5fSVVG}{T
*|ij8=-
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
t`cOuVch
8AcP-dD
X"F/.O
3=>NUsb?
AFSO@s<Z1
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
^j:[1i
:--HV:M
Fb`vR,(
E+U*gV
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
!hBrn`
 zvb^<
YZNjTn
?"b`*Ve(
">OG..)v
chK#X&E
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
?TI.~A
Kb[Qi|
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
c"!tx	
OFRDm_
x/f{nE
,Jz&cp
	B[D?5
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
QTiSBQ
qa{_:X&
/rnad9
C?R1;5
YCvXE^(
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
3F	jh>x
*Td"v/
7x$?@I R
o=FR+m
3$7,>$i
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
.iGUc3(>
X]?lzd
N'Z5aH"8
H!VY&LwH>
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
:b*9C3a
RNT(Sc
%~)uxv
D6;nGfrq?y
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
$ rZ!T
T1M	}xl/
"a=Ld4
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
HBxWKO
=0'M1`
"HFH~k
O{'$g!r
Y-R]XO
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
LnxS`K
p&tu4I
PVQzBI
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
SVrerT9x
0y3h0\
Tb,)jyJ
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
URIoKPH
K!tS9U
DqL44V
.hwe-E
}/+VUN
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
vR_qwrx
Osn*r\
P!$Fdu
[HGg +E+
uV/*$7pn
,8+FA?
L(>`] D
Sc6{Z6
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
/[cOZN#(
72b&EJ
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
	Ex@[i
eO0F}v
|V29bz
-)/Zcm
o<=3gQ
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
_VFF(t
l]Y)$$
.9:@]y
Z}zR2, 
3z5|Ze
[zI&dy8
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
a`zwP(
u\<zo/S	
pCl.5/n
AP&42~
oFz5qa
iv?<G:
#*%heb
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
+"CLG=
}dY7f.
fWqQwM
vt897u(i*wCX=@
DN{S=)
ztT`0Yu
"92?k7
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
p$9d;gs6!!
eK`B]>
\uDpDo
O8y(	G
^_"utd8
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
;UYL/Hf
h6u(x%QT
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
"&lB'$|
u@IM1)
')$(fEs
O2dg>L
Gvt|U^?
(mUx&d
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
ej\v2p
I.(z8]e
 ^R^8:b
YX#` %
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
YwVY){
8aU9v]Kc
}iN%!l
AV4^!I}
u2t0'$O
Q6p.e$u*
3zT<<@
]|K(J[
\4qC7r
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
w8{ddd
F0,)b%
}W/H}_n
X8!@bE
jo6@\o7
85@y_d\_
WioyZ3%
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
8:'6yl
E1nH.A
{A#1)N
@D'ZOk
?f7-4vk^f
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
OS:B1GA
=maA\E
X3eQg/1
1_Y`ya
Y$S`~2
8U$A*_I
p`X%gKO`
Sux9of
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
*-".u$cU.
N~;V\f
K m/O;
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
l<JG?JL  
p2OCkn
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
=5q6"i}
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
LHd!tbi
j.rf-m
q,#+'y0e
qL#Mg2
QO	_uW
tzp% Te
TF	&tS8ir
*	dy}f
(-jV\;b
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
PW[_S[Np
.odfh'
-zb2N@
msj&[c	
HDQ?vY
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
KUPQM%
.5M9<>E
}qvjg2
L]}`kdy
[r	Juv
lxJT69
Z-2K/o
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
&4/MDy
iA:`Dh
*B9^;X
 >Vk4A4
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
cguHTw
u!T3Ux
Dkzh8xwBk
YY^wEB
aW(S?<
ds&YGKY
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
YK6)!:
3\)~Nr
*JXkJK
jK%G*jv
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
R]eH;I
]EG`?OHK
#cy6+V
EuT}keY
	"DPB&ga
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
OiT@>L
pdOmUY{
F4H)s7
dieMe|!
4t+}xn
G^|e)T`=U0
PcGNDt
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
Tg&xy8`
oo*V\-
U2^C-'0
@exSh#
VJ<j{y
j<jtz&
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
%f0(RR
`!5O~*
OzlwWu
(}E4OGt
_(Jg*B
R=)oB9
1s0mgq
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
RY]8GP
,wb^n)
[5zr"{
a(py&N
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
/&,s,9FJ
96{fEn
:Y7V7I
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
6CPM}`
oU]!$%]
"'fZxt`
eV\1p#
J)9#Eq
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
!/2oi%?5
w"y @@
4,~`UlJ,`^sM
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATXG
-Icf'j78
[C; vc
]JW|O+
]2pxRg
pBBnCXf
l=Dduf
3.G}Bb
BJF.0VGc6
:K2{B]
y?f3aH
N3T^VK
_e5xIn
Zx	N\:
M;r\)k
CbM7e>
@AqEF)<
7S~PX?RB
1E	V#_
%7bla>
tfa'Sa(
Cw;Rpn
po:=<b
e.\vNs'
W8Dgu%
?u\#.&
'0.&GD
IegG(uy
sDQ}` 4
NSK]O2
7*&>/k
ArP}NwP
OsiRzUr
O8~s%c
WnMA^4
>jt$	p
]gHw$hr2
XZ	Aq*
x<S^+FN
EK]-u{
dxYfp8
\&'9an
F{HxH,
@Xp6O&vM
9o{m["
-!T{X@
u$/<v_
^g$lgR
V=Ah[0
==kt	|W
Y[A=Id
(qx.fG
3?H*>,
L-|IGw
e",v7}
oN fu)\m
&{mH\Q?w
@{/-~w
4kQAvfN!
VQhVI\
c6hQ0K
;iV@Y`$
#YWf	n
$o$;s)
{%7D-z
nB9TvS
WiHWTw
y'dDr!
=}YyGx>
um$(\v%
s/P{86t
NjecBC
P^)4Q"F
C/R [U
_:wy ;
v9<&].
cjleJFmL
G6OY3 
Wl1YP7
X08M}d
`TyNqL2[
m.:#1,A
@}X2(Q
,X?XyQ\
d8[]XwC
7cv={3
E`nhU(
'-q_R$X
#EwJ:8N
jf)q3KM
yV}g-}l
KR	psEq
f>6 J*&Ss
8X*Z&e
?w8UcI
n^n5KX
>4JpX&
oS- b7
Yk*3'b
.T1LH4=KA
p6Vc'c
DC}(Fbq
rwPPQaYb
aLtdM5
q=4917
Q$:jFFt
DdjX	>4
"zrl\8-
i>S"il
~>=zL-d
!_y~|(
^n<oIo
}%Vuy!7
H|fvTS.c
}t;f l
c3\1 n
^^vGV;d
O2a%{-(
pR<&Mi
F'KR"cG
/mYc78|v
.-S`ME
TeF]+My
,+!ZEH
;dV'c*g}
4Kfe6nz;
uBYFs.
I.r9\$r
_=x4h#
qRJb~dt\
!ew[QA
4IqGXm9V
>r	<a-
^c0"Xbu
<?54Y\/
~Tzpkl
7IHd+P)
C?8E89
w98D{r
K:dG:6
A&DirW
` rwWyZz93
zy#2:qV.
D4XNO1z
:.0eD)
(-@Rw<I|
'fo#sI
j5S&`I
$Cmc5z4s<
O1>KrY
\f(iA3
C*IG'Y
 !LDA]
0?N	DD
`xNJP6
Q];M\s
YR5eikf
0$t#Gz
:E!Cszi
sgW*Zp`
1d>!oF
5/<Dh%F
IcWD-PtNNh
eh*p3.
Bo5g^,
YT-Au~
V<y3id
E2ly2"
VxXK1"
14rn}5
icelgK
Lc9%<C
?J;DG7O
K=PFa4z=
(8|4O[t}
Uc~` %M
c/KQHw
%SI~B-
=vl\h{v5>
Q]R|<:|
HI9Z=O
kT.`SW
ZpRcD!
)|"69}
T*j{%L5
yh}O3Z*VrMd8
&0<Nh[
^|HRzk
bb$c_+
-(~<8 
n'o	dGh
!~5xf+sT
<y)"_#
`I&]jqytke}
}2~]SJ
pfL}	iu
:c)c[`
wpi<>DCd|{)
:lDaoQHUo
,_B1v|
&b<!Ow
Q{<;/Z
W)1flG
"J6n*<
Q:t4qMBQ
!k-LC]P
EDa)`m
%PO/	Lg
6&j)h(
YyP^sp
RF hU$u
Jrk.GM
S32^qA
sLFb~:v
* V%Im
@I#n	}4
O_nGL2T
_mv2/R
de	tzG
0n^B].
&UB7i8
[tQUfu
}%xL{&~
V_G`j|
;OE5}I
|lWpU]
Dt1(-x
x7t|~;t
,QFFlm
Y:Jf#xz
+gN(0d
%YhsQU
kr0!Kh
W/K|;I+j
3ht6<y
llhlhlX
H(G(A(
V4R4\4y
;f5f6f^l0_
v2.0.50727
#Strings
%	=	\	d	
lsjnvhfdghg.exe
lsjnvhfdghg.
mscorlib
System.Windows.Forms
System.Drawing
System
System.Core
assLoad
kernel32
.resources
{b075a9ba-499e-48e3-a904-e5d6ea0a9680}
6d219eac-833a-dc.Resources.resources
<Module>
.cctor
MethodInfo
System.Reflection
Thread
System.Threading
String
Object
ParameterizedThreadStart
Environment
RuntimeFieldHandle
RuntimeTypeHandle
GetMethod
MethodBase
Equals
MemoryStream
System.IO
UInt32
Encoding
System.Text
get_UTF8
GetString
Intern
Buffer
BlockCopy
GetTypeFromHandle
GetElementType
CreateInstance
KXVmGKn7kcVjeMnWVn
WtUQt1YBcakFKdKVqX
Q30j5fFZ6fC9wBrfjl
l9Y3anRKDVipUZph42
RuntimeHelpers
System.Runtime.CompilerServices
InitializeArray
gkDwwqfvRLe5Riwtfk
vqfRN7oSgGEfYnItU4
Concat
lxhuueCjFtca9akA5a
Invoke
t4RQQcrkrUeDvwHpMg
FailFast
rk8dOdTGY2CPM2IuLN
set_IsBackground
FH4NqmkpGmyv5ibHji
KEkg8IwNYPc673T0mR
get_CurrentThread
AQYc4nvAx93GO0dt3S
HoKVh7AHi90yK4HHmA
Debugger
System.Diagnostics
get_IsAttached
zSKaxLO5kBPc4xgMST
IsLogging
XoKt1SJm4Kq1gVM9RA
get_IsAlive
zX3iU18Xylp9Y0nb12
Stream
get_Length
BBVa150KG71xeZ6w8X
ReadByte
FLqYI4NCTOnFYBP8TO
YC0MRNxBdoEXDRT6Yy
NdW35B4JgseLZ7JGCV
W9mXNM7MPQMnlRMKrf
gDodtOtw8nGAjU8cq0
ValueType
TBdvT1Wf00eDUU9gt6
uwIdQE9xmtE8syhgDe
Vw6ojc1csYIBG2j1wp
MLfofNc4wO5dqFGck4
BL9U7qZXMHnthJF8tb
pbtaNjIrFUgmajchLr
o5aCCtsiSjRBWjDcoH
JNkNeDPKfGnGN4spMe
BDKaGebpa0Ebb59sNG
suGIx9m3v6kOQMW5wq
Tl9XNRHjD9xIMxBrir
vLR5sUG9KrDmoEAs53
UMZYahBfsHXbs6rnCE
kHKpqljQlsbFKScLHX
SVINAHdJNd6H7M52b1
OYElg6Lu4NIDqS1wdf
ey1JC2gDXVB2q1EjEY
BqXrxW3KUOihDHrjby
QcuOt5lEEbpbtuJn3n
XQ9qcPUycOcFgWAVUg
ThlINf2XqPJEoWnGdr
UvJSq5iTPGn0ccSp97
XBM8ST52PARMhbWK6S
HwF8Lwa9e07Y6uC7uB
H6HT3JeiisFGx4bCFw
PrZLNPymIv6Q6lQvA8
wEkhVcXbl4Ecpnsr3t
nae12oSbff3wtheSoB
Smi4RPq5mHVY5ZJA1Z
zd9aG9uikPW409CAe7
UVSX63pVKlXEHW7nEf
rSo4wRV0544t9qKuYm
rZNi4eEAioAaVqnOKx
gunFSc64dGJRJGjOb3
XLtPF2Koi2aXhgcZyk
Vkge90htCGOmNP9rI1
pGVsUQznPr86vQWdjP
UX8tiXFDIFhoRwfQ8jb
ke7FJ0FFV52WYvMadAn
iHgB3WFRTIljarNOj7c
CvYjADFnBitId3XASO1
UIfZRmFYetIdMOmA87l
suJWl3FfSVt1n71VfZJ
NI9GXyFoTMJQynHhAsV
JgRduIFC6qkWYUJmnhH
tGmstEFrLXLH0ddVmsQ
shm4D1FT9RRZGtWmcBL
SecuritySafeCriticalAttribute
System.Security
AssemblyName
Assembly
LmiEGWFOxPG4tfVv0LX
IndexOf
UTp36rFJRORKRRnTXtM
Skoq3JFvMtBAbh4KHjA
KfgrtcFA3Wro9WquZLE
GetName
U6dgndF8J03lR0Y7Pxf
GetPublicKey
pO3LJcF0GeIO2hmFtdh
StringBuilder
Control
byr6rpF4UvhpQAoGlME
Append
Y128XWF75Qc3cOQ6aGm
mtNu96FNsxOVwCJxg47
sbG3atFxhkjJUwoEXmb
B0bXBjFtjTE7AdTBolD
SuspendLayout
VR7ThCFMtIyAbsXPqZV
AppDomain
ResolveEventHandler
nCR2wLF9rHjSMgYmAwe
set_ClientSize
OftEWqF1pYkLUJOu3YZ
GFFOvEFQm2YmthnLFxf
qblyXjFWyJa2ONLoL5Q
add_AssemblyResolve
w5k1xBFcMac9V3BfkRZ
_MethodInfo
System.Runtime.InteropServices
IComparable`1
W9fqQKFPaKCZ7OZQIrv
get_EntryPoint
BqRcl5FI5B7mFcsb9Uh
Substring
RhtCjrFbG1bo4FIds81
OD0cnLFZZlYGGNkWP6A
C1EIJRFs9MP3PTUgNg4
aGDNZDFH5mZJ2j2ucZk
get_Position
MDmYA1FGjXcfv98hf3Z
IEnumerable
System.Collections
ProcessModule
SymmetricAlgorithm
System.Security.Cryptography
ph0JdRFjNaXXcGMFSFd
Q0BYnwFmhtj7cObJNfW
kAb8tIFBrhOnWdmUH3c
Application
SetCompatibleTextRenderingDefault
W6gGg5FdejsrUUiROfy
get_ModuleName
kSAJvsFLJbeiibMCZvl
GetExecutingAssembly
HBlAevFgnhFJ3GbCN0W
set_Name
SHoi71F36Ujqra1ifY9
set_Key
YfVRknFl1rIENrhYI27
wi3TmFFivQhhZl7NT8r
Component
System.ComponentModel
Process
ContainerControl
De5XouFekQQ9WNbqU0o
QSNBnvF5ZuoFFiUXCug
YmbA9OFaM615R8b5Sfw
LiJQaFFybjQoxi1ySqJ
GetCurrentProcess
kvDGPrFXJ70NZ5Qq000
get_MainModule
rDF2U6FS7o1epI5cOjr
Monitor
iyUe7yFqXodoG9S7tfx
set_AutoScaleDimensions
Vf9Oc2Fu2B4XwiIrxh2
zpEfHVFE5uIEOvV4vfF
HpxkgEFp1BRfDQc3xqH
LQ9D2hFVZq7bk3LGCiG
Gn9UfVF6dBuVerPjL40
EventArgs
Dispose
IComparable
IDisposable
ICryptoTransform
pPKctlFzSLguQtA1fRb
VtpXV1FKkfycN3BLdeU
JywunRFhnQTiuDNwHGM
B6hfOmRDQ607GkhJXGv
IRJmnwRFsPnqxOGStpK
N6D6wARRGva8UqtELb6
fG8DpfRnUu7Db6QMBor
CreateDecryptor
jwfZ3lRYPT1ubVo3nvX
OUQs5mRChsBA97rfQhv
STAThreadAttribute
Ena6Q8RroGOjmo7AllV
sO1kGRRTEtW8qj0ZTvh
rWIYB8RkDnmHuabj3CI
zQvuh5RwmnOCfkEXsOQ
IConvertible
ResolveEventArgs
get_Name
BvbTQdROmvb6Oe7Riwf
op_Equality
bLCT6NRJL0XkVxM2SJi
EplETXRv4RB6NwD9G2H
rw6XVZRAnmMXVnvGuRG
StartsWith
hLV0SFR8p4fs8C9YHyH
get_KeySize
Uep8SlR0f8xasVc6M8H
get_BlockSize
qByF2dRNNjg66tOjYMI
DeriveBytes
OgAC8WRWFBmNqR58sig
QNnMZ5RMMXW49tyvih7
Esd1GIRQTOWypxQ5jZU
GetBytes
kcNijBR9pRW11MbjwI8
Jw9JLAR1Kq2yPlSo4I6
Dictionary`2
System.Collections.Generic
IEquatable`1
nXkM8sRsEWBcUWKHeKA
PKbLdhRPCeAiYFhIwEP
MAIhoGRcq8O8BmBAtvI
gSL788RZCyynXKmAwm0
Tk3y4ORI5tfoZBegMA0
yFA9pqRbneyFHZj1AED
Version
ToString
MMmCAgRm3cyJyaI5qFv
Vt9NKLRHGkWRYSrP8DL
xS8l1uRGtcDu2kWFcBb
Rfk0hiRBnKSYDNIAh3h
ixG3I8RjDuvAW78pIc4
rqZED8Rdr4CsRCRj86K
Exception
_Assembly
IEnumerable`1
ContainsKey
get_Item
FileStream
set_Item
FileLoadException
BadImageFormatException
DESCryptoServiceProvider
EventHandler
Rfc2898DeriveBytes
CryptoStream
MoveFileEx
ICloneable
InvalidOperationException
DirectoryInfo
AesManaged
CryptoStreamMode
ArgumentOutOfRangeException
FormatException
RijndaelManaged
wKAxEgRLU2huo200wtH
I0s9SXRgg73ZieWhnhr
gnw8OyR3x1TYQKddkZq
fNqjDyRlEqMgMRyJrGu
DWUfiuRUHhGO6YI4ebx
p5Gf45R2GQYj4pQ1G9F
iXueTCRi8WobZ3mp1i0
set_Text
Os15ofR5E72myb2YqnE
add_Load
bwHgwjRaF6al8csYj4U
ResumeLayout
bfmLSEReO607i1uTi2Z
lRhtsSRy7v2HWvNkCV1
z57NeWRXv80Powp2SYr
Class1
VRHbofRS9f4MWW5j3M4
GetTempPath
IBG3qSRqpXE160cO9BH
Format
R8wgvLRuFjj3n7VqDkf
Directory
CreateDirectory
wnWTb3RpYfxip81Cy9r
BNZUWaRViavNOcAjQsV
Exists
Ht44c3REOs4sqpCe2sR
OpenWrite
NNRY2GR6qtoUsNNJZDU
deT0gaRK1xsc4gnrfhh
vFin7lRhyVldCsblCKH
LoadFile
wjW00eRz2LU3tI97PPg
nMkbKAnDFRPmSMAxG2o
BW92tInFyXDf8Wlh8S2
set_IV
pgAY84nRYqwcIb8ti2h
GetCallingAssembly
P1LgyQnndfdGVcktK4x
KsRCTBnYcJWFTnFoF5U
TransformFinalBlock
wqecHCnfJ3STh44rmLq
k3ycN8nojUshQvG8q8A
Convert
ToBase64String
nrWCXSnCLMn8OyATBou
zR3XWPnruZovUmt7GDw
C1AojknTthKPlXpWmQy
set_KeySize
MTMUAJnkuciB1Alx88L
ToArray
WZcpQUnwFB4E7vg1UbW
Attribute
vSWefNn8rVA174OdXmE
Sho0rMnOFG8l59iRDAc
w5c3i0nJc9j4oG20BGd
pqQSqan0uCj7L6r4WaX
q3tM1JnN0jO2jQO7Dqr
q4s9CinxF0OSShpleDy
AttributeUsageAttribute
AttributeTargets
AutoScaleMode
set_AutoScaleMode
nKcIp8ntgnr6vAcYAu8
ziiMdfn45jgHh3kuAaX
jCA59in7N6Xmx4W9kZ3
fjrn5cnMhfdl6WasrR3
nQbJDon95WJNvWjyfts
xrGNWDnQSlBDKXCw2nl
Pi8cYmnWZBjCwWhQ2EQ
b0DSqvn1Afvko9Y7Ya6
PBOAm7ns27KEn79rOvI
CreateEncryptor
uOLbKonPsZAmNwMWeit
wAiEIDncltKHHO4cX0b
jNTLB6nZGi3BYo9l5fZ
pAhckWnIsyIoJmJLX98
lZPgOTnGIw0lEpMf7l7
FWHGt3nbBtU6ht1xJkp
d5HNZnnHPCHaSarJEWH
BjneYDnmNtPSH3yAgUi
HRQ7YAnB4hxFkyxlXIb
UO5xBOnjPS1PEpLokns
T8UXkungu8DyTgMEA0E
CQ6pmend4WtM0LZXMXw
EC4AxwnLcsD1rvHBOan
tDAXs8n3DkjDWCR5a82
p4A2GOnl6GjqSXRiK8r
wl4aPPnUT5UXOrWsLjs
rSWfM3n2s8nisxv43aF
ISerializable
System.Runtime.Serialization
RxpCOpnaGW30ske69pi
qd196onijJi8PwAvt8v
BsFduwn5GkHrvbACKpZ
oTkC5snewJCT1wSL7n8
R3tesvnypdpSQefxn0R
ooeBO8nX6xxas61TgUm
ToLower
vHT2AAnSXQbxypEjciH
get_Chars
mS9EvWnqlWDN12JsXsT
IEvidenceFactory
pvhvPvnuL9YF5qcx8OF
NqfG6PnpAjYyh94BlRU
EnableVisualStyles
WrM4aXnVNoWbEJvdXeS
op_Inequality
cEdxAVnE98inRQ0BZ89
GetManifestResourceStream
TDanmun6CaGEtwd4WZd
get_CurrentDomain
mvy75vnKP7l3xhUGlri
GuidAttribute
$edf8f381-af8f-4609-9cf2-136394da4aaf
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
  <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
    <security>
      <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
        <requestedExecutionLevel level="asInvoker" uiAccess="false"/>
      </requestedPrivileges>
    </security>
  </trustInfo>
</assembly>