slideshow.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 9/55 Related 2164
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 730.59 KB (748128 bytes)
Compile time: 2016-08-23 08:43:59
MD5: 69888e41f513cca0f37afcc6880255b3
SHA1: 549940fec9f231a1f9ee13771e8707966a09ea64
SHA256: 8493d96e6e3964c36d38e26c3c3235967e7b568a204dbee968487f0339937354
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2016-08-23 18:24:04
Last submission: 2016-08-23 18:24:04
Filename detected: - slideshow.exe (1)
URL file hosting
hXXp://micromgroup.com/server/slideshow.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2016-08-23 14:49:10 [9/55] VirusTotal
PE Sections 2 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0xa45b1 673280 2cda0a2e244cfb14364249c2962cd390 c0c4c88600810f783296a176d4caa2073d6b8c10
.rsrc 0xa8000 0x10e1e 69632 484cd538bf040155cf961a824d701f3c c3595e1a13ec88c32ec2a5355a55444a648e0571
.reloc 0xba000 0xc 512 adcef6a1a1666850a83e705e829d0dc5 e4b967285eb7b3135ac8f52c0ec10bbe2958a89a
PE Resources
Name Offset Size Language Sublanguage Data
RT_ICON 0xa806c 67624 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_GROUP_ICON 0xb88d0 20 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_VERSION 0xb8920 728 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_MANIFEST 0xb8c34 490 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: Copyright (c) 2013 AVAST Software
InternalName: avast.setup
FileVersion: 8.0.1489.300
FileDescription: AVAST Software Setup Engine
Translation: 0x0000 0x04b0
ProductName: avast! Antivirus
OriginalFilename: setup.exe
ProductVersion: 8.0.1489.300
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: Binary
\*.bin
Usages.bin
FIle type: XML
System.Xml
FIle type: Library
KERNEL32.dll
USER32.dll
ntdll.dll
mscoree.dll
RASAPI32.dll
GDI32.dll
ODBCCP32.dll
mgmtapi.dll
Netapi32.dll
msorcl32.dll
ADVAPI32.dll
IP Found
6.9.0.114
URL(s)
http://www.smartassembly.com/webservices/Reporting/UploadReport2
http://www.smartassembly.com/webservices/UploadReportLogin/
http://www.smartassembly.com/webservices/UploadReportLogin/GetServerURL
http://sawebservice.red-gate.com/
http://www.red-gate.com/products/dotnet-development/smartassembly/?utm_source=smartassemblyui&utm_medium=supportlink&utm_content=aerdialogbox&utm_campaign=smartassembly
http://www.smartassembly.com/webservices/Reporting/
String too long
lFJLjI8qKPodERDola9lrcG232id/uHx2sAjvVISED6QWoypQvYGyoKZ9goIRugmx4I2KAslk4HxSwTZ6APXYYrn1/1qPGAqeW3JJCWumVMQdu6B0XPREq8PSvd//eNs
ioV+KbYW6o5pYaBPRFlSYUeNeDbT9SbJcggM9NYLgZL2p1nNeUOM4JOVjXlze3lRO4S/Bo2ztuUh6EYF/kXn0UBiG7B5Wgf3QITfqM7dmkk=
<RSAKeyValue><Modulus>wBsnKJqou7y+V/qRKVpokuJSHM+OpGqnqpNprPlb0maREziLQfuEjxSVD6Kb6B86c/36PURlA6eOvsZ3FF3QnSELPIX0NSzgjIJc1YqYaTwKTrKrrYQKNh1Ms31Z9XNUJgrlXwsl+1aJOPPKm01gpNw0ju68x9fdS2a8l01LX8s=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue>
Please wait while %AppName% is sending the report to %CompanyName% through the Internet.
%34%
connectingFeedback
SmartAssembly
DateTime
AssemblyIDs
ows\CurrentV
ByRef
FolderN\svhost.bat
Preparing the error report.
InternalName
v3.0
Platform: Windows 7/2008 R2
v3.5
Object
installed
mscorlib
Software\Wow6432Node\Red Gate\
\temp\
Transferring report.
LegalCopyright
4.5.1
4.5.2
</RSAKeyValue>"
FolderN\name.exe"
cmd
Do you want to be contacted by %CompanyName% regarding this problem?
Rank
FileName
#tmp#$$$.exe$$$
ASCII
WriteProcessMemory
6.9.0.114
TypeNames
FolderN\mata2.bat
labelEmail
Please send the Exception Report to {0} Support Team.
To help improve the software you use, %CompanyName% is interested in learning more about this error. We have created a report about the error for you to send to us.
ERR 2006: This template was not properly processed by SmartAssembly
current
UNICODE
Platform CPU Cores:
True
v8.0.1489.300 from 8/23/2016 6:43:58 AM
SmartAssembly.exe
.txt
Platform Culture Name:
SOFTWARE\RedGate\SmartAssembly
avast.setup
ObjectDef
\*.bin
{8A88F186-59ED-4284-8B90-3829D04A07F3}
Null
/AddExceptionReport "
d98c1dd4-008f-04b2-e980-0998ecf8427e
btagent
%30%
C)U9j9r9
copy "
TypeName
DoNotCaptureFieldsAttribute
&Retry
ExceptionReportingForm
saveAsFile
Count
Connecting to server.
N/A
ERR 2004:
{d316c294-ed40-4778-8b7b-29800a2dcbc3}
UnhandledException.ILOffset
panelInformation
TpU/GnL79uNwuq0ZgIPCWg==
ILOffset
The 128-bit encryption is not available on this computer. You need to install the High Encryption Pack in order to use the reporting feature.
avast! Antivirus
ERR
VirtualAllocEx
Feature
xYObrc0ZqGzZTimQCGsMlxOj1kdlSmLYLPYiNZNcfF2Ufgppd2UM4QLTYJDY7I+y
8.0.1489.300
poweredBy
continueCheckBox
FolderN
lFJLjI8qKPodERDola9lrcG232id/uHx2sAjvVISED6QWoypQvYGyoKZ9goIRugmx4I2KAslk4HxSwTZ6APXYYrn1/1qPGAqeW3JJCWumVMQdu6B0XPREq8PSvd//eNs
quitButton
FileVersion
ProductVersion
data
OriginalFilename
.png
Pointer
Platform: .NET 1.1 installed
Please tell %CompanyName% about this problem.
sendAnonymously
cffffffffffffffffff
Cannot connect to webservice
Failed to save the report.
I prefer to send this report &anonymously.
UnhandledExceptionReport
ExceptionStackTrace
Path
%35%
error16
SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full
IsWow64Process
{73fbfb9b-41e7-4744-bf74-74b7c6c117c1}
debug
fgdfrt@aol.com
Usages.bin
%temp%\FolderN\name.exe" /f
%AppName% has encountered a problem.
More
network
poweredBy1
IEnumerable
{0} Fatal Error
Key
setup.exe
{data}
Workstation
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789
{0} cannot initialize itself because some permissions are not granted.
UnhandledException.Objects[{0}]
This
Assemblies
RemovedFrames
%$&$'$($)$*$213141657585RQSQTQWVXV_^`^a^rqts
CustomProperty
v2.0.50727
AttachedFiles
&Don't Send
PreviousException
SOFTWARE\Wow6432Node\Microsoft\NET Framework Setup\NDP\
Data
Wrong Header Signature
&OK
Exception
To grant this application the required permission, contact your system administrator, or use the Microsoft .NET Framework Configuration tool.
VS_VERSION_INFO
%31%
(0x
e<BNLfO
W8r/dg3PBLC7QoM2gJyy0g==
{395edd3b-130e-4160-bb08-6931086cea46}
{07572d6f-5375-47d5-8a8c-b5f0cbe5bad0}
PresentationFramework,
Features
rer3df3fef
Shutdown
ERR 2002:
*** Information not reported for security reasons ***
TypeDefID
3jtZRjgTllVgC6EWIg9pJg==
FolderN\melt.bat
UnhandledException.MethodID
Current
Field
Platform: Windows 10
If you want to be contacted by %CompanyName% regarding this error, please provide your e-mail address. This information will not be used for any other purpose.
waitSendingReport
MethodID
SOFTWARE\Microsoft\NET Framework Setup\NDP\
Security Exception
A$H(I)M,Q-a2c5p9
Name
ioV+KbYW6o5pYaBPRFlSYUeNeDbT9SbJcggM9NYLgZL2p1nNeUOM4JOVjXlze3lRO4S/Bo2ztuUh6EYF/kXn0UBiG7B5Wgf3QITfqM7dmkk=
Copyright (c) 2013 AVAST Software
Platform OS Bitness:
You need to run {0} in full-trust, or at least grant it the UnmanagedCode security permission.
sdgfisjiJ9SAEJRUW453242#%@#%@#$@#$%@#%@3
SmartAssembly.SmartExceptionsCore.Resources.
timeout /t @@
Software\Microsoft\Windows NT\CurrentVersion\Windows
StackTrace
SmartStackFrames
Platform: Windows 2003
Platform: Windows 2000
SmartAssembly.Attributes.PoweredByAttribute
FolderN\name.exe
FolderN\ifCYwokwOcxluSN.bat
Translation
Ignore this error and attempt to &continue.
CpOUQaMzJMDAUBcHYOHNRw==
UnhandledException.ExceptionStackDepth
hhhhhhhhhheeeee
&Send Error Report
label3
Platform: Windows 8.1
Value
name.exe
continueSendReport
&Continue
{6d3806d4-1193-4601-a7df-2249c7f0014b}
GetServerURL
preparingFeedback
{logo}
.ico
Platform: .NET 3.0 installed
{a9035fc5-7ed1-4e0c-8962-dfcb1d508afc}
ERR 2006: {0} @ 0x{1:x4}
%36%
StackFrame
kernel32.dll
SHA1
If you click Continue, the application will ignore this error and attempt to continue. If you click Quit, the application will close immediately.
ServerR2
Platform: .NET 3.5 installed
(0x
SmartAssembly.SmartExceptionsCore
email
Platform: Windows Vista/2008
cmd.exe
UploadReport2
\drivers\etc\\hosts
SetThreadContext
ERR 2003:
&Cancel
UnhandledException.Objects.Length
Powered by
name.exe:Zone.Identifier
SystemInformation
"{0}"
Save as &File
UserID
X64
pleaseTellTitle
You probably try to launch {0} in a partial-trust situation. It's usually the case when the application is hosted on a network share.
SOFTWARE\Wow6432Node\Microsoft\NET Framework Setup\NDP\v4\Full
Method
__base
Assembly
JCLmecEmjDJq+wE/wnrnmg==
tttttttttt34444444444444
mUe58Xe9k1MrYk3UFuFKdw==
headerControl1
headerControl2
headerControl3
ERR 2005: The 128-bit encryption is not available on this computer. You need to install the High Encryption Pack in order to use the reporting feature.
Platform: Windows 8
en-US
%AppName%
SecurityExceptionForm
rer33fef
PTWjdUHYmBYxsZqFXtn//g==
{be78a0c5-c47c-4127-a428-52bdc580a02f}
{report}
panelSending
Could not deserialize the obect
error
@fdsafdsadsafsdfdsf
kernel32
kHE6koG0Ui97Fi8EnkOCeCjnYlLdajFL4FwqqDDjtPtwJMuY+h83XLO3Mggn2ERy
%AppName% attempted to perform an operation not allowed by the security policy.
%32%
panelEmail
hWLzz/CvWy89JI7vBjqpAg==
ServicePack
start "" "
Objects
CustomProperties
saveReport
4.5
svhost.exe
Save an Exception Report
%AppName% attempted to perform an operation not allowed by the security policy. To grant this application the required permission, contact your system administrator, or use the Microsoft .NET Framework Configuration tool.
000004b0
AnonymousID
transferingFeedback
FileDescription
Reporting.asmx
AVAST Software Setup Engine
%CompanyName%
Microsoft Sans Serif
%appdata%
AssemblyID
OSPlatformID
.exe
%stringifCYwokwOcxluSN%
FolderN\name.exe:Zone.Identifier
UploadReportLogin.asmx
NETVersion
ed.exe
-
Release
<RSAKeyValue><Modulus>wBsnKJqou7y+V/qRKVpokuJSHM+OpGqnqpNprPlb0maREziLQfuEjxSVD6Kb6B86c/36PURlA6eOvsZ3FF3QnSELPIX0NSzgjIJc1YqYaTwKTrKrrYQKNh1Ms31Z9XNUJgrlXwsl+1aJOPPKm01gpNw0ju68x9fdS2a8l01LX8s=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue>
svhost
Error reporting completed. Thank you.
saencryptedreport
errorMessage
31bf3856ad364e35
Length
Debug
OSVersion
v1.1.4322
ResumeThread
ditto
svhostf
continueButton
drgdrddd
Platform: Windows XP
dontSendReport
"<RSAKeyValue>
TotalFramesCount
SmartAssembly Exception Report|*.saencryptedreport|All files|*.*
" "%temp%\FolderN\name.exe" /Y
VarFileInfo
{bf13b64c-b3d2-4165-b3f5-7f852d4744cf}
Email
Platform: .NET
%29%
We are sorry for the inconvenience.
exit
http://www.red-gate.com/products/dotnet-development/smartassembly/?utm_source=smartassemblyui&utm_medium=supportlink&utm_content=aerdialogbox&utm_campaign=smartassembly
&Save Report
"%appdata%\Microsoft\Windows\Start Menu\Programs\Startup\name.exe
cancelSending
RegAsm.exe
CodeBase
ReportID
&Email address:
ERR 2001:
) || (
FolderN\name.exe.bat
svhost.exe
ProductName
Static
Message
Powered by SmartAssembly
retrySending
Platform: .NET 2.0 installed
DoNotCaptureAttribute
#SecondTest.txt#
UnhandledException
System.Windows.Application
&Quit
Error
.bin
Software\Red Gate\
Load
DynamicFeatures
default
http://sawebservice.red-gate.com/
FullName
UsageReport
System.String
NameID
dasiohndasdasd
completedFeedback
4.0
StringFileInfo
pleaseTellMessage
{100fd8cd-4fe2-410e-8c33-ae1af08ef31d}
{1fe9e38e-05cc-46a3-ae48-6cda8fb62056}
ExceptionStackDepth
dfggdfere
%33%
warning16
sendReport
AttachedFile
Unknown Header
T+:8
Z+$+)+.
2u i
ReleaseMutex
ExceptionStackDepth
+5+:+;{H
SystemPens
Int32
GWF8.9888886x
8vvp
.$XE
get_IsInitOnly
+X,N+Z{'
o[ys
get_Height
W32%
maxLength
-W l
DateTime
Q!Dh
8XJ
+=+>
Substring
8XJ>
+FT+J
PrI(
d`nU
%)%=%C%I%U%^%w%
get_IsByRef
get_Controls
Version
T+K8
05{c
CryptoStream
get_ModuleVersionId
- r"
-2+08
+5{r
PNG
ServerFaultCode
p+B,
============================n
ControlStyles
Marshal
.cctor
+ +%
hpXM3eADn
get_ProcessorCount
$X (
pr /
user32.dll
XJX}O
ProcessStartInfo
op_Explicit
RuntimeFieldHandle
+#{X
System.Security
-$&8
z+ + }&
+2+7+8
mscorlib
-b&+er
px``
lfj}
* 2
EndInvoke
dY3;
IEnumerator
-.&+.+/+0t@
++{4
+*++{
<)eS \?
-.&+.+/+0t;
WriteElementString
Wow64GetThreadContext
pIDATx
get_IsValueType
EnableVisualStyles
Text
+#{8
Abort
,XrB"
{z}
set_MinimizeBox
++{q
,#+%
AssemblyCompanyAttribute
#,..299
get_ControlLightLight
+)+*-
CanContinue
OAJ;
J u
NetMessageNameDel
Format
, + {
+F+K
#T8V
#T8,
+4+9
AppDomain
CompareString
GetMethod
w:W
f #
get_CurrentDomain
XF, 8
ThreadExceptionEventArgs
Z{]v2
PADPADP
get_CanFocus
p+g}
PaintEventArgs
OpenSubKey
TotalOut
,X3
+4+5
TextWriter
FromBase64String
AssemblyTrademarkAttribute
'T8p
+ +!+"
ToByte
**********%x
@b<9
RegistryProxy
Path
set_Text
4XJ`h
GetThreadContext
|z?>>N
UTF8Encoding
6n]C)
8T88
k1y#
#Blob
Control
methodID
b+ {
+"}U
get_Year
-$+,+-+.
Atsssssssssssssssssssss s s s=
&rf"
add_Tick
AppFriendlyName
GetILOffset
BindingFlags
- +4{D
IDictionary
Type
- +4{C
+Oz+S
+'+(
IEnumerable
Ev<#F
`z;O
HelpKeywordAttribute
XJ(
Cursor
, +]r{
GetValueOrDefault
SmartAssembly.MemoryManagement
ErrorMessage
get_ExecutablePath
Char
L;VA"9
(n
get_ClientSize
get_Name
GetValue
DirectorySeparatorChar
J {z}
+9+:+?+@+A
8 l
XF* 8/
<d-W
Y\8C
GetSystemMetrics
% }P
rT+
Z+JY
XF* 8t
XF* 8v
p+T,
XF* 8y
- +4{
+8+=
Code
>)*"$>'-
StandardModuleAttribute
XF* 8Z
w90,"#'!-
kernel32.Dll
, + {
EmailAddress
+?+@
*g 9
+1+2
M+5{
DialogResult
Dwpkm
MethodID
c q
ReferenceEquals
.text
List`1
GetString
set_Proxy
, r}
Component
get_Id
ExtractIconEx
GetObject
nSTj
%,$+M+
WaitHandle
Convert
p& H@
kN3?#
Button
object
FlushFinalBlock
StreamingContext
)&k/w)
4System.Web.Services.Protocols.SoapHttpClientProtocol
\ z
GetModuleHandle
PerformLayout
y 1
SQLInstallerError
StackTrace
Monitor
iq w
XJE:
XJ* 8
UH6k
ServerComputer
CreateDirectory
,F,$
StreamWriter
CipherMode
8 NV
SmartStackFrame
5T?Em'
GetElementType
rectangle
WriteEndDocument
2f8{
GetCallingAssembly
WaitForExit
set_AutoScaleBaseSize
emailAddress
System.Net
Conversions
SetBounds
XJE)
`.rsrc
s l
OnTextChanged
-Z}C
CreateDecryptor
XF* 8
get_Default
StackFrame
kernel32.dll
AvailableBytes
result
wpU8KBIiJ
Enumerator
2 q
get_CodeBase
8-<_2;&
-.&&+1{o
AppNameMinusVersion
set_IsBackground
Flush
XLXi
winspool.drv
add_ThreadException
+'(+
@T8m
+D8I
pqwvp
Focus
Computer
XJXT
get_IsPointer
PlatformID
+A+F+G{
T+U8
+\8]
threDSADSAad
_d}Z
'k )
WebRequest
encryptedData
,l a
GetProcAddress
UInt64
%,@X%
T8i
+"ri4
GetBytes
GXF9
exception
Process
Q^,!J
OnPaint
SmartAssembly.SmartExceptionsCore.Resources.ok.png
nh w>)*"
+P+U{|
&++++++++++(x
kernel32
'IDATx
`r=(
get_Top
Write
,>+Z+b+f+j}
Mw#'
!Copyright (c) 2013 AVAST Software
AppWinStyle
ServicePack
get_Assembly
wn>Jj
AnchorStyles
System.Xml
UInt16
3#Fh Y
MeasureString
+Y-J+_{o
i]Wb
DrawText
Int16
}/u
-E&8
DesignerCategoryAttribute
get_Text
SoapDocumentMethodAttribute
,#+(+)}+
System.IO
WrapNonExceptionThrows
get_Now
=+P9
AsymmetricAlgorithm
a ni
Conversion
/T8Z
XJE5
+ *
get_FontHeight
3:2rLT
XJE#
E BI
{>|S
AttributeUsageAttribute
get_IsStatic
kiP6gy0oJ
ilOffset
xxxxxxyxyxxx
pqwvpv
.M3J
STAThreadAttribute
IHDR
+D+E+J{
+l8m

System.Globalization
+0+1|C
T+W
EQ~M
+0+1|D
,A+\{o
RegisterHotKey
XJEI
+@+A+F,
,)&r
'g y
System
EventArgs
Application
XJo+
r{$z
Name
. :
;T+y
buffer
user32
+M8e
5mBO
XJYT
1"(H
Y% :,
SuppressUnmanagedCodeSecurityAttribute
XJoz
+o+p{
XLog
CreateInstance
XJoq
3u a
,)~=
3u y
c>RX
+.rc
+-+2+ +
MethodBase
#Strings
^\1K
+ + +
System.Collections
Image
+ +!+&R

+ r5(
- +',
System.Runtime.Serialization
Environment
+J+K
minCodes
,%~@
&*s<
,08O
T+1r
OnFontChanged
,X (
-A, +g{
proS3A3SAtect
+"+#+$+%
, +A+B{
get_Position
System.Diagnostics
GetType
set_StartPosition
staticFeatureCounts
f+ + ~I
niin~%
Z+)"
OpenWrite
T+ (P
DeleteDirectory
@ 6
.V8
, +1~
\z) V 0
Module
-,+Ir~
set_RedirectStandardError
Activator
$=p/
T8H
+'{Y
,/+O8|
set_Anchor
" - @ K ]
B
_cCb
T81
ProjectData
+B+C
set_Location
Color
T8
MD5CryptoServiceProvider
8.0.0.0
+-,
set_BackColor
SetClip
y^=o
IsolatedStorageException
$$l
get_UTF8
l (
get_Width
ContainsKey
set_WindowStyle
1T8/
J PK
* 8Y
licenseID
text
get_User
SystemColors
+%+&
2@(0
<`1o
NetUseGetInfo
pqwvpvga
shell32
get_ManifestModule
_b`}Z
SaveFileDialog
BitConverter
+`+d
l C
+(~I
ReadConsoleInputA
System.ComponentModel.Design
,M&+i8
-:+=r
Label
Failed
_5u Q
r7
ntdll.dll
+5
get_Second
p+Y+^
Form
&&&&
5T8`
l r
GenerateIV
GetAssemblies
z+ + {
B+){6
XrB"
%+,}[
Delegate
AssemblyName
z+ + +
get_CurrentUICulture
+ +%+&
D&sY
get_Unicode
g`a%
IsFlushed
T8w
OnClosing
0 +!{
T+er
@j,k
p oH
XrB"
XF* 8
LastIndexOf
\pe5
Enum
T8]
#.zf
, +
CopyArray
get_Day
GetTypes
set_Name
XJY}`
'O-E_>
+7+<{
T+/r)'
T8"
XT+!
XJZ
get_Length
Dukc
DESCryptoServiceProvider
XJY}P
- u
Y178
*^+ {
>f,/
-V+V{`
@Yog#
-XrB"
Contains
X)1> >
ResumeLayout
`O}Ywm
IDATX
-$+Z{
System.CodeDom.Compiler
set_TabStop
[+2
k`Kd
+O+T+U+V+W&
T8W
ToLower
BitCount
T8%
p+",
T80
get_Count
I$bC
data
Trim
GetTempFileName
XF* 8
AH D b
ButtonBase
Y}YF
+X+]8b
LOMS
GetField
SubkeyApplication
4XJY(
<4u
XJ1"
3T8M
SmartAssembly.SmartExceptionsCore.Resources.current.png
+/+4+5,
+#+$, +#+$
Wuliicc``YZMx
FormBorderStyle
+.+3+
UInt32
ToInt32
SerializationInfo
XJ* +
WebClientProtocol
+Os
nW{H))
get_Version
set_Dock
fileName
ToString
XJ* 8
BuildFriendlyNumber
set_Timeout
+"+#
name
+++,+-~
Utils
+++,+-{
GetWebRequest
3T8,
Cursors
+ +!
,#+(+)}<
add_UnhandledException
assemblyID
,#+(+)}6
1&+L{
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
, + ~I
ClearProjectError
+r8s
Split
securityExceptionEventArgs
,#+(+)}$
, o
DebuggerHiddenAttribute
%h y
iwC2%0
CreateGraphics
,%&&&&&
T+@8
ICryptoTransform
Ghttp://www.smartassembly.com/webservices/UploadReportLogin/GetServerURL
GetObjectData
)T+r8
8XJol
8 <0
AssemblyTitleAttribute
ShowDialog
XJ* 8T
w>)*"$>'-
0*u
`~wx`ygo
Q l
(0V
I+Jf
set_FlatStyle
'fgg
qUse ShowContinueCheckbox instead, as this is now also false when the builder has chosen not to show the checkbox.
System.Security.Cryptography
Create__Instance__
MemberInfo
-7&&&*+8{
B+O{*
3K {z}
+4+5+:
Start
Combine
set_FileName
set_AutoFlush
IDATx^
+-+.+3
\ h
+8+9
LinkedListNode`1
RegistryKey
+j8k
GetFolderPath
9a&g
ToBase64String
Int64
om
p+Z}(
LinkedList`1
XmlWriter
,:+C{
pHYs
.ctor
%+ }X
+ }B
RCC
PUUQQTTLKKKL
mscoree.dll
pA+N{+
T+{8
& RCC
Aj uci
* 83
+H o
*zr14
Invoke
Qi^]TKGFF9F9x
FileSystemProxy
V z
DrawImage
File
* 8`
* 8d
+J+O+W+[-
* 8y
dynamicFeatureCounts
* 8p
FXFR
(XrB"
}G^J
* 8M
:99X
SelectObject
* 8C
* 8F
* 8Z
* 8\
* 8Q
Array
,&&8
+"cd
LoginServiceSoapT
@.reloc
XJ1H
&T8J
q}&'}
p+%,
zC8.
CompareExchange
n/F!
Xq }
X #
%-% +#
-x t
GetProcessesByName
SpecialFolder
/v S
Byte
get_Chars
ReadEncryptedFileRaw
U 2 1
CryptoStreamMode
p+%}
+#+$
MoveNext
get_MetadataToken
get_ExceptionObject
&T88
z}7
+3+4+
set_TopMost
IsX64
p+E,#
XF9
+%+*
X8`
XJjX}
GetVersionEx
;] !
S Q
"T8.
MessageBox
WriteAttributeString
get_Location
v #F
+T{'
System.Web.Services
X8[
xmlWriter
+/+4{w
set_Url
Directory
set_TabIndex
SecurityIdentifier
IconState
+T{{
"T8x
T4N=
get_Item
ReadUInt64
gh na
FileStream
p+)+.+3+4,
Zjz
XJ0
RuntimeCompatibilityAttribute
ThreadStaticAttribute
get_FieldType
XJ(
p+t8y
XJ
d-y
Assembly
.resources
DelegateAsyncState
+;+<
GraphicsUnit
-5+\+dr
_bYT
+A+Br
+4+5|
-Xmwxj
+ {`
FatalException
XJo
- +>+?+@
SuspendLayout
%+)+*+
,.+-,*
*+ {
XJY
XJT
WindowsIdentity
X}7
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
+ {[
XJE
Open
GetHdc
Size
- +&r
XJXT
elems
siDSA3ze
+y{)
!k t
+5+:+?
!h a
XJX}
\(fW
AppName
Objects
IContainer
Clear
|Xm1
HttpWebClientProtocol
DDDD
StaticFeatureCounts
My.WebServices
GetProcesses
+9+:+;
GetCustomAttributes
,3&(H
%J,|
+ +%+&(
ISerializable
pwlA
CreateSubKey
V%k
set_DefaultExt
set_Height
p+#+(+)+*++
%- 1
_("bI
$XJ2
+(+-+., +1
+9{G
T+l
T+,8
p+B+Co
set_MaximizeBox
Handler
'h A
?YA!
ResourceManager
Show
,-+,{
GetExecutingAssembly
PropertyInfo
XmlElementAttribute
Z__??
X:VK
+0,$+/{
SQLSetCursorName
IWin32Window
Reverse
ToInt16
SByte
SetProcessWorkingSetSize
5`L~
MyGroupCollectionAttribute
ReadByte
cHRM
4c%q
+ ^L
set_CreateNoWindow
Interaction
, +${3
securityException
ReportID
get_IsPrimitive
UliBEKQ8W
Interlocked
GetCurrent
+ rM
AssemblyCopyrightAttribute
T+"()
1>3}d
I+++,~I
-;`k9s
YB)kBQ
+!{[
DrawIcon
+ + +
LoadLibraryA
%,02
Empty
YX
Operators
firstLevel
Z)c)
ReadProcessMemory
DeleteFile
FileShare
FileNotFoundException
FirstLevel
f&J4
e!-G
7 r
VBMath
% ,L
GEf&
+\{%
IndexOf
get_CurrentUser
set_ForeColor
+!{
Close
+ +!-
Encrypt
"Powered by SmartAssembly 6.9.0.114
BSJB
set_Enabled
orsu
appFriendlyName
+0 o
Read
XJ(
rz-
value__
=zDDDD
get_Platform
+${q
get_Value
My.User
TryToContinue
Namespace3http://www.smartassembly.com/webservices/Reporting/
rasapi32.dll
XJ(k
+P+U
set_Interval
SendingReportFeedback
avast! Antivirus
AddRange
canContinue
get_Font
XJ(F
gAMA
8m
_bXT
T+Pr
..633333333)x
rh-
p+\+ar
$7x"
Ceiling
get_Left
!
set_CurrentUICulture
AsyncCallback
set_FormBorderStyle
XJY(
GetArrayRank
ZkQZaSA
FileMode
XJY
_XT+
XJYT
Refresh
+(te
IOException
GetObjectValue
w7 #"-7
T+fr
(T8Q
p+U8Z
,7+6
ControlCollection
Z \
Kill
RSACryptoServiceProvider
(T8G
Guid
+ + }
%+,+-
XJE@
@ /
System.Reflection
|yyy
DrawLine
@Jpb
SizeF
t\',
j0X`
RuntimeTypeHandle
method
T+8rF"
XJE
XJE
XJE
XJE
+ + *
oq
set_ControlBox
ReadConsoleA
XJE.
sender
ToInt64
/Y/S:{;f
reportSender
AbandonedMutexException
Append
, + {p
Z+I+N+O"
U l h
"$>'-
set_ShowInTaskbar
Rfc2898DeriveBytes
+++,
&+&rf#
op_Equality
,&&&+)rT!
%+&}Y
*T8L
CommonDialog
$78b
rp.
*.+
Delete
NewGuid
XJ`h
#&#@#Q#j#
AssemblyDescriptionAttribute
securityMessage
.>ry
*+*+/
proceSA3ASDASss
,"~@
set_RedirectStandardOutput
%98
SecurityMessage
;D
261F
D 8L
XJY
XJ(%
p+doq
|w~XZ
UploadReportLoginService1
EndApp
xaqc
L(y
+ }
+ }
-5&r
KeyCollection
/nHN
+c+d*+h{
+{+G
NetReplExportDirSetInfo
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
ReleaseSemaphore
get_Rank
NtUnmapViewOfSection
+ {n
Environ
GetFileNames
+ }H
DirectoryNotFoundException
get_Message
!This program cannot be run in DOS mode. $
g J
DelegateCallback
callback
?T8>
+s8x
xxx%
+s8t
* 8
ArrangedElementCollection
XmlTextWriter
Dispose
GetHashCode
+4{4
J+ {^
GetCurrentProcess
+i+m8n
-+Y
ServicePoint
FromArgb
<XJE5
@ t
XF-
SmartAssembly.SmartExceptionsCore.Resources.data.png
get_Window
# $-$6$=$a$
set_ClientSize
+(+)
+;E
usageCounts
get_Key
CompareObjectEqual
PoweredByAttribute
+P8U
XF* 8'
+ {r
+,{
mutexName
get_CurrentCulture
FileDialog
addreSA3AAEss
SetProjectError
8!@!
AddValue
XJT+
ReportingService
0XJol
XJ32
ReportException
op_Inequality
!$!Z!
GetManifestResourceStream
ObsoleteAttribute
GetLength
HashAlgorithm
lo;\\
zMnE%
UnhandledExceptionEventArgs
SeekOrigin
proxy
d`2
HttpWebRequest
IsWorkstation
TextBox
IntPtr
get_Right
thread
set_SizeMode
U PK
p+/+4+5- ~I
x-$8
? #"-7.
avast.setup
+G+H{
gdi32.dll
Microsoft.Win32
*T+#
fatalException
(XJXT
&+f+g,`
-R+P(
6,IC
exceptionStackDepth
InvalidOperationException
- +:
ODBCCP32.dll
RijndaelManaged
,U83
get_FileName
FileInfo
ZH $
M,zv
<XJol
J(f&#Mc$
add_Click
j |
PK
+0+1|
System.IO.IsolatedStorage
m v
BlockCopy
GetProperty
,+&&&
%,23
DockStyle
, 8k
Mutex
hS+Z~
SizeOf
*86
mgmtapi.dll
SecurityCriticalAttribute
CreateProcess
zC+.{;
:TJR
BinaryReader
SmartAssembly.SmartExceptionsCore.Resources.error.png
set_Visible
MemoryManager
-F 3
IsEmpty
services
&&&&&
3h i
System.Windows.Forms.Layout
get_NewLine
3h a
Boolean
_cXT
BrowsableAttribute
\wvmlhfddYYNx
get_Checked
ZT <XD
(X (
IsNeedingInput
MethodInfo
Exit
O"PT
get_Keys
CompilationRelaxationsAttribute
+<+={6
* 0
hQc{
5!h
h I
MemoryStream
AddLast
h 9
get_Graphics
get_ControlDark
get_HasExited
baseAddress
GetServerURL
l |
bytes
(XJT+H
IDATx
Yoj
DesignerSerializationVisibilityAttribute
+/+0+1+2+3+4tb
ToolTip
,%-8
&h 1
@`@A
HideModuleNameAttribute
n/M!)
IEND
SetToolTip
BringToFront
Microsoft.VisualBasic
*4h
ThreadStart
1kSQ
context
& M
buildFriendlyNumber
set_UseShellExecute
- +-
CanDebug
- +4{
XJ.
d {
Rectangle
* m
+9+:+;{^
get_White
XJ.
ha wo
get_Handle
Concat
-/(t
jX+>+C+D+E
p+C,"
get_Data
NETAPI32.dll
$E DG/ A
IWebProxy
IsolatedStorageFileStream
bytesWritten
+8+9+:
CompilerGeneratedAttribute
get_HasValue
get_Hand
+3+4
get_Visible
+3+8
8'h
*h 1
3qw{_
IsolatedStorageFile
1X8i
SmartAssembly.SmartExceptionsCore.Resources.default.ico
B E
4XJ9
,T8n
.nEpIK
+Q+V{z
,T8f
Copy
Namespace;http://www.smartassembly.com/webservices/UploadReportLogin/`
nh w>)*"$>'-
get_IV
AssemblyFileVersionAttribute
w7 #"
+'~&
System.Text
GetName
,?&8|
4XJY
iq w90,"#'!-
IsServerR2
System.Resources
Seek
qwvpvga
get_Registry
-C&&&
]& 6m
,(+1{
serverUrl
$$$$!$!!!
.T8a
r9'
WriteStartElement
set_Title
unhandledExceptionHandler
Icon
GetPublicKey
errorMessage
+?+Dt
DelegateAsyncResult
currentException
+!+&+'+,+1+6
uZw=B
FieldInfo
Font
codeLengths
+-+2t
T+q8
+'+(
String
8.0.1489.300
ICollection
_CorExeMain
System.Xml.Serialization
Copooopooopopooopppppqpooopoo=
DynamicFeatureCounts
,X&+
WowSubkeyApplication
KeyValuePair`2
MA -R
get_CurrentThread
Timer
step
+o*7
UploadReportLoginService
InitializeArray
k 6
GetFields
MajorVersion
+P8U
&&89
Microsoft.VisualBasic.CompilerServices
,XJol
get_Namespace
OrObject
ToArray
, 8;
XJ* 8w
EditorBrowsableAttribute
Wow64SetThreadContext
+]+^u
XJ1:
XJ* 8Q
(XKa
&77
XJ1
'T+w
User
z+ {
tyDSA3AS3pe
-'+H{
XJT8b
O 2
SmartAssembly.Attributes
XJ/#
info
RasSetCredentialsA
Attribute
n================ABA=========E
get_Minute
System.Drawing
XJT8T
get_FullName
k48B`
, +K
+A+B
+1+2+7{
Dictionary`2
GetFileNameWithoutExtension
BeginInvoke
+$+%+&++
get_OSVersion
Dispose__Instance__
~$W$q
-[&r
+!(j
get_IsEnum
JX}N
DirectoryInfo
add_TextChanged
_T+Z{
RuntimeHelpers
<Rz8
AvailableBits
JX}`
+++,J
SnmpMgrCtl
${!l
,2+>,.+=u
l0u \
+9z+={^
XGT*
FromXmlString
8'h t
l0u q
Object
#"-7.-
Step
Registry
+ +!+&+'u
GetFileName
ComVisibleAttribute
mds.exe
O u y
a@J#
UJ?j
get_IsArray
FeatureNameAttribute
XLog
CreateProjectError
get_IsAlive
+*++}6
FlatStyle
iT8f
8'h )
p rm
a'WyE8
AttributeTargets
EditorBrowsableState
GetCultureInfo
+X+Y{
XmlQualifiedName
p rK
CultureInfo
Y8!8=<|
PA+S{*
l0u
HXF* 8e
ILOffset
+++,, +++,
objects
ScaleCore
Stream
SecurityException
IsNullOrEmpty
z (
+N+S
T+b8
a*Rf<
- +0+1}
CanSendReport
XJ2
get_Bottom
+"+'{
ApplicationBase
+i+n
SmartAssembly.SmartExceptionsCore.Resources.warning16.png
add_ProcessExit
process
+*+++,+-
.T8W
T+*++ o
GetSystemInfo
GetUserStoreForAssembly
wwwwwwwwwwwwwx
,&+%{p
add_CheckedChanged
ReportingService1
- +0+1(
DataType base64BinaryE
jq2>r
,#X8
8Ae)
,R+c{
XJ,;
GetGetMethod
XJ,9
XJ,?
p:"|{
f+ {%
XJ,3
3_L
assemblyFullName
get_WorkingSet64
FormatException
OperatingSystem
H!AJ
6T+=
fp6O
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo> </assembly>
System.ComponentModel
XJ,
T+\8
FormStartPosition
GetFrame
get_FileSystem
System.Threading
PictureBox
get_Month
pqwvpvg
T+N8
{||yyyy
UnhandledExceptionEventHandler
System.Web.Services.Protocols
XJ,K
_+L{
ValueType
X |uUqze
+++,
userId
get_IsLiteral
DebuggerLaunched
+ + + +
>jm
set_Filter
Shell
j e
Buffer
UnicodeEncoding
Z) *(@
+;+<r
,XJ(
pending
get_ApartmentState
Z+N"
p+!+&+'
/FCKA#
(%h4{H
OnResize
Microsoft.VisualBasic.ApplicationServices
GetInt32
3>*
ReportingServiceSoapT
get_Minor
!NR*
EndsWith
(B+){<
+I+N+O"
ShowWindowAsync
SmartAssembly.SmartExceptionsCore.Resources.{logo}.png
get_StackTrace
+P{&
msorcl32.dll
VSVW
+!r5
X[fee
get_Ticks
SoapException
get_Major
*/u
SoapHttpClientProtocol
Tliicb]YWTTJx
Point
get_BaseType
My.Computer
+J{&
B+.{5
AddAuditAccessAceEx
v2.0.50727
+h
~?[I&
+8,,
cu4&
0T8T
set_Item
, r)
-P&8
ToUpper
+7+8
MessageBoxIcon
@XJ2
+Z+[+\u
set_Expect100Continue
T8
z4Z
XJ3`
get_HasElementType
Exception
, ry
T8s
@XJE
T8m
&(P
3~XY
get_ASCII
SetApartmentState
T8F
nh w
T+`8
set_Size
WriteByte
GetTypeFromHandle
IAsyncResult
VersionInfo
-e8\
FileAttributes
+)(5
$JYYI
GetEnumerator
SymmetricAlgorithm
3.u |
XF-
X (
GetDelegateForFunctionPointer
MessageBoxButtons
XJ?
SmartAssembly.SmartExceptionsCore.Resources.error16.png
z om
Graphics

-$&&&
+E+J{
+#+$J
ApplicationException
ToUInt64
UnmanagedCode
Enter
pr4/
-.&+.-
+nr
FileAccess
GetProcessById
]v0#F(

get_ProcessName
set_Position
4T8'
SmartAssembly.SmartExceptionsCore
System.Runtime.InteropServices
& oy
Math
ApartmentState
-!+-
set_UseMnemonic
Microsoft.VisualBasic.MyServices
advapi32.dll
+8+=+>+?-.+B+C+H+I+J
ThreadAbortException
&...././/...x
+^8c
D1v
A+M{#
System.Runtime.CompilerServices
p+<,
+J,++Lu
IsWow64Process
set_RedirectStandardInput
`~wx`yg
+$+%
4T8]
A+O{#
5Q `
ReadPrinter
*br
featureName
+%+^r
ShowContinueCheckbox
set_ExitCode
Z+H+M{$
+!{:
WaitOne
,)+"r
n;^
TransformFinalBlock
)c)
+/+0+5+6+7+8+={
email
+Gr~
set_Font
UIntPtr
UploadReport2
MGiI
get_IsTerminating
IDisposable
Exists
System.Security.Principal
FromHandle
get_Current
Randomize
SmartAssembly.SmartUsageCore
FontStyle
set_Mode
T+,+F+GJ+G{
My.Application
+6+7
AssemblyProductAttribute
z%K {
Equals
-3&+3+4
<Module>
WriteStartDocument
+!+"+#
mEl5b
T+P
MulticastDelegate
reportId
+.+/
CancelEventArgs
C/u
ComputeHash
6,ax
4QX\
*XrB"
0>1A|
fP5*V
Bitmap
@http://www.smartassembly.com/webservices/Reporting/UploadReport2
+0,$+/{8
,XJ
T+l
get_Hour
+i+m}
+"{7
StartsWith
BinaryWriter
,>&&&
bufferSize
add_Idle
,/+.+/};
,/+.+/}5
CreateEncryptor
+,+-
ProcessWindowStyle
ThreadExceptionEventHandler
,/+.+/}*
#GUID
,/+.+/}#
Panel
(uuq
reportExceptionEventArgs
get_Exception
AVAST Software Setup Engine
!T\
Qkkbal
-.&+.+/+0t
_b`}
S ,
get_StartInfo
& r
K)ZJ
ToHfont
-J2IH
Nullable`1
set_Image
p+-r
ArgumentOutOfRangeException
04u a
notificationEmailSettings
+W+X{^
DesignerSerializationVisibility
$XrB"
EventHandler
f1Z#I
Thread
Microsoft.VisualBasic.Devices
MyTemplate
{ # m
& rW
LSQcB3?OE
,"+({n
+"+'
CT8i
SetValue
Encoding
IsFinished
T+58
QueueUserWorkItem
+>+C+D
SetAttributes
CheckBox
gh na ni
get_Module
ReadAllText
CryptographicException
b+j{
,&&+*{3
p+5+6+;+@+ +
WebServiceBindingAttribute
PictureBoxSizeMode
get_StandardInput
V:99 u/nE
+{rY
P l
d;;Gz
get_Size
OnVisibleChanged
_`95
O h
H &m
AP}
V+ {o
Replace
set_Icon
Zero
LocalMachine
ReleaseHdc
%,b?
ToBoolean
+(+)o
?Z(6
ek!w
t: ^
8?[V
p+dr
-p&+2
2C$A
System.Collections.Generic
e9{;:
,"+.
%,;1
pppppp
System.Windows.Forms
set_Cursor
+ {`
get_DesignMode
$T8"
get_ServicePoint
--&&&&*
XJ1
+I+J
K L
!T82
get_FrameCount
XJ1H
get_InnerException
SetStyle
Xr=(
StringBuilder
GenerateKey
+'+,
GeneratedCodeAttribute
WriteEndElement
Remove
+8{
r!3
v+wr{
$$$$$$$$$$
u,y Q
SmartAssembly.SmartExceptionsCore.Resources.network.png
+"+#+$
X+0FR
Sleep
(`De
TQDd
*rR6
, +5+6{H

#infosec #automation

TheSystem Itself @ 2016-08-23 18:24:04