order.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 4/53 Related 2098
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 117.50 KB (120320 bytes)
Compile time: 2016-08-03 00:20:43
MD5: c584117c347dcf4ea86a6d7786671e92
SHA1: 183822ee07d6961b77f488c8779292d20658f400
SHA256: dc23d734f5fb3fc69713a815c39f42b8da2c3ff302189e7c74464f9e2ffe5b73
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2016-08-03 09:21:03
Last submission: 2016-08-03 09:21:03
Filename detected: - order.exe (1)
URL file hosting
hXXp://[www].songphuongrninh.com/chidi/order.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2016-08-03 03:35:33 [4/53] VirusTotal
PE Sections 2 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0x1cba4 117760 a46208335916f8a3b274351905ca9f9b f4bd820fc404e54c54b450226d71cf0f810848b7
.rsrc 0x20000 0x600 1536 180cb89db095dcc208f90cb167ff5b5a 20f38374af0d7ca7ed25ba7e00001b63ce9e02a0
.reloc 0x22000 0xc 512 89d53de9fd97decb6e687186d3f5ee2c fa863ab830afa75a79d49731628ae96d952c6c3f
PE Resources
Name Offset Size Language Sublanguage Data
RT_VERSION 0x200a0 830 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_MANIFEST 0x203e0 490 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: Copyright \xa9 2016
Assembly Version: 12.2.5.1
InternalName: sunpop.exe
FileVersion: 12.2.5.1
CompanyName:
LegalTrademarks:
Comments:
ProductName: sunpop.Properties
ProductVersion: 12.2.5.1
FileDescription: sunpop.Properties
Translation: 0x0000 0x04b0
OriginalFilename: sunpop.exe
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: Library
mscoree.dll
IP Found
12.2.5.1
URL(s)
No URL found
axr2KPLyc2kaznI91
axr2KPLyc2kaznI90
12.2.5.1
Comments
_Encrypted$
PublicKeyToken=
InternalName
c3VucG9wKg==
dynamic method does not support fault clause
unexpected OperandType
StringFileInfo
Translation
VarFileInfo
publickeytoken=
Assembly Version
FileVersion
Copyright
VS_VERSION_INFO
sunpop.Properties
000004b0
ProductVersion
FileDescription
OriginalFilename
LegalCopyright
c3VucG9wJQ==
CompanyName
sunpop.exe
LegalTrademarks
M9X6LQ757iNYWB3a
ProductName
c3VucG9wJA==
2016
_8 (
}/[*<
7i*$
; (V
m: '
c7fbe0041f698ebcfcfd9524ff53ce1b9
PNG
9 ;h
}dWm
K)q7'2
l)+3$+
c438c8da05bc0c68901d960568456a227
get_OutputBlockSize
fnw;J
Cb ^
ResolveTypeHandle
nLmBq
!AL)rx
Wy;u`!
>;<X
set_Capacity
c9f23a04c52ad809b0d43369b4b7834ff
Substring
Process
2H]c
8v]%??
~fi
get_MemberType
Fs*
{la`1pU(
QR-k
%2JU
S F{
)nrV
u>H,
1{h?B
jr[)R
lAO d
'A=v?
AOEl
^\G
}4nS
YVH1
AsyncCallback
_"+4
i ne
RuntimeFieldHandle
wC {
ca5c502bc54ec9d74ac6818d1809849be
SD<u
,#& \
c8e2654effb93dd4672f317570b96552f
Q5@i
System.Reflection.Emit
m:$#
o r NSZ
r0UT8mR
Et_m
,X&&+%&
Fp>)bs|
*3e
EndInvoke
~)-Py
IEnumerator
-"&
S={a
bli
9 I<
6UP:n
c384f7dd00d6d373d6595e738fa8b9e45
#Hmb
0Cbmj
c4HE
0q_o
c89b836b8cb6d81e977dac0b6a6ca0ef8
WFfO`
QY 5
:j|~
c1eb435811d9e41500e36dbefa587e6d8
.7Cw
/F,V
K>8%50
w"z2
AssemblyCompanyAttribute
c968d1e16ecb7d00a24e8b45b38780bfa
FP5M
24
+&cQ
GetExportedTypes
L5 UYt
&*(L
='ziSM
o56r
S: l
<odt
&*(W
t gz@
B`3<
tta
Ttd2
&*(#
AppDomain
w0Am
sunpop
u N9T
get_CurrentDomain
pxrx
ce3d52464b91e77a8c94127ec06a28414
get_InputBlockSize
ZEf{
T77+
DynamicILInfo
av^
-f+d
PF{GX
,E&+
PyV5C&
D3QOt
@k`4
Y`1M)*
HCQS
S&MW 6
*y .P~
):_O
oX
AssemblyTrademarkAttribute
?g>s
J*91 V
ConstructorInfo
xv@a{
set_Text
^) j
73q+^
zL3u
OQPDu3
ccbbf585d9d42a4d848e7b1157f9ede53
!0#R
#Blob
Control
}r *L
d$ 1l
SignatureHelper
N/W{
i3Hg/D
c50550a18785ed5764d13dc21ebe54e5a
|$xET
~l8Yg
,aDH
X]j#
b-%M
BindingFlags
e_:l
@fYxr
fJO.
7Vq^
g0b(
c38ceef3cb8c79589235182495068bd40
{zWK
UHB N
O *=
(j3|
WG_u
n``c
Ppdh
1D)C
oxys
Q!}h
%$t5
W+#.
=/ X
S<:~
(}Q9
0'7w2
c1e8e2f5b7b904f7cfb078be32fa6cb9d
&Qu>|
2MZm
get_Name
CreateDelegate
Ap(M'
_So[n
onh^
9f]4
rLU5
x!)3
HashAlgorithm
(E
Z|uF'
B_o:
< L@
Sx'P
set_ShowInTaskbar
=4k{
t t}(
OXEV) T-
9T3(
ResolveType
3"=IO
*`K
u>}|
w^(l
h$,
;:Rv
Nc[r
GetParameters
wUb
DialogResult
ToDouble
!GJ!
.text
\|{ $
=ben
&:r 9
GetString
M$6Hs\e
Component
*JF:
KHWiXi
3Ih
+p. xi
$0994b0f3-9a9d-41ab-9b5a-803710ce859d
EA&#MX[?3
Convert
0PJ%$|
object
a< ;
z{6<m
&=4 G
I}8x
SgQ b
c1737f0d86514edf08001e5bcde47cc2a
"u6G
Kk95kp-
LKjJ
Hd",T
c18b4fc5eef212521d47128a516f719fd
7qK^
Monitor
ReadInt32
cc8ef45a41126770584f8dafc1fd602b8
;TVE]
$RxU
)z<f
S jQ
CipherMode
{ ip
\.5?
r(Akh',
}PSF
c0639509c5b69c235666730474fff8950
h.1JMb
45yN
^^950
D3L[
\6!^
sunpop.Properties
Zf {
<igC
cd9141f591ab863e8140d82709c69dd02
c4713705f620fc295f35dc822451b4118
ObKT
tdF)
3.bx
`.rsrc
(e c
,!&
SetCode
CreateDecryptor
result
,:&&&&~
p {4
pHYs
ao (
.ctor
*!`]
An\c
m5c,
XpK"V_
it~6
c45e270720655d717483d23ef7a341d57
ScxD
cTMd
9 f{J
@ Rw
|MP 3
~+oq
0x}c+
|=B[`bX4
cd1ad8dd476f9c70d3716882715522894
Zk?w
uMsN
eGpS"
v9r+ `r
,>-Y
E"<wK
MA h
E{~|
P6$y
V3EI'{
atQ^
b_
rm[5e
GetEnumerator
90t+
2!pI
DY;-_
RV!E
<|(c
get_ParameterType
#/,o
8/
c,R
GetBytes
D,wq
.npq
/i6[O1
np@&
6.8$
\YW.
XX}k
Write
set_AutoScaleDimensions
c0b7c65060fd8873efecffa4725b17bf9
$"K;
{NT[
m'b2
u=\
n]jvt
T Mu
aLz1
_C^\
WMM Kl
@TO
T$wZ
KPE
9Y]C
CiZ{Rkg5 u
System.IO
WrapNonExceptionThrows
z5Y_d
JPPk
w}o}
A8oS
Q!Z;+
Ck"q*
H(9!<
>Of5
dc_u2
sRMb
get_IsStatic
fiTC
K:JA3z
y"{R
V~VU
5~c~
7VLqn
STAThreadAttribute
=sEpA
JXYb
y A:C
Rd95B
IHDR
System.Security
.`taX~
System.Globalization
.[;~
~FaW
>09cj
cde48851f174a76ec8603f1bd524508a0
,Tbos
c207a84da980ea577a0ff6b53dbc8dfd5
qg~Q{-
caad49e83272b95f04e5bb4f890380496
ToJ+
o1C]
'_Mw
*EQz5
get_LocalVariables
ow4y$
/(K`
cae5a8fd949b6b41205e7dcb7a8c24e23
System
EventArgs
6SMWO
Application
TransformBlock
%%Li
Oym
c1085d50f9277149bb596b567f323c1e8
'+4a
qJCB=
Jp{^dS5
;AZ
c8c478fe026b2bf4c685a4977c300f469
W:u*+}
RPLs
K!%d
c8b8443beee61814c811049fd386e6b58
Reverse
MethodBase
#Strings
6*K_
q("Y
bzLD;<
System.Collections
?{# qu%
+) 8
Z-.0`
Enter
Environment
* 9iAj1 .
c0eda93aa8ee0d9d7abdd89dc8e9b767b
}iJl
c623cdc15bc2da3f2ef6ac104f4bdb49c
zQDN
* 8s
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo> </assembly>
XOi0y
(4?\T
Y{'V
#^"m
s-.R
7O>%
6IDC
,P&&&&&s
s(LJ
W[ a [
kS m{Pc
get_Position
@ 9+
!!Giwt
+re5,
E;IM
R{g;
c488c790c64428e0eb4a405188ffc94ef
zb }
|c#t
^eSz
U$xk?
q\!
Z]y^
>XJc
YX/
D0iI6
]lL4
n_.
K7BG
;sEJ
Zw0<
b0P~
sZSG
;Y)x
LY~ {j
.nyW
KY0xSejtbl3iYHlT.Resources.resources
?Wt|
get_FieldHandle
r*pd
%sO8
0*s';
Intern
MD5CryptoServiceProvider
W"t2
QCL
<T,[
gZh
get_UTF8
5gE&
caf7998db60fc96a14f13660fd06f147f
> !j
Q;J ] g
]R#5-
<C-vs
<Lg.H+J
BxAw
@q}@
;KP/
ORtH
>YT33m/
hSystem.Drawing.Bitmap, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
}P1)
IEnumerator`1
zg Ugwy
,#& $
V= '
m!nF
rGH$-
c0a375c25f3a593073f0803d4706ebcab
Form
(T'u6+b
:z\T
get_MethodHandle
v9[!
apP5UN
/"J
g*44
c504947e6139e9ea6460f9935bd8d8330
Delegate
Q_-&
0T`UkP
9mAK7
cacb4f0ad5c98e0a2075217f0e9269de1
<8&wr
]7ii
get_Unicode
&m@+
ce2a24069648779356e1ae1e47cc98f5c
DSw3
ModuleHandle
[it_:
LocalVariableInfo
W=42
U!_}0
7##?
h)&
set_Name
d=2A
gKMn
p(@@cw
f5X1
I,lYU
RN?5H
get_Length
`Dq7
DESCryptoServiceProvider
*(-<
OR"`
_^W$
W*uEE
Ld7m
ResumeLayout
ca534d33e717b0ff158edff3b13c7eb4e
\9K7
5~*F
9c a
ValueType
c8ba2adb920186276948afa879575bc96
GuidAttribute
@`"%=H
V0pd
U$%,U
RD}1T
ow^S
miDP"
@A}Az
#kn3
W)K>
eR%-
qpJD
.G1
XU1sp
~+Dli
9]hY.
Nlo4
Ay`M=
Z \
Y4 >Ot
ywhA
{XIN>
~W[vi#X
KIM:WW c
_Zml*
#v}x
}03t
Czg1b
~?ib
c3c0589e0813d7448d2ad3185364c17cc
YpB#6
{[k^
;5@F
q_(
Parse
cff7c7521f2b89c17d768de56c1d1bcd1
%o8h
J#}]
z-58
VARys
VR#(
)i>K
B-G'
ICryptoTransform
\6,b
M,?V
c1cf77158acbc57735b4e581d2a9ca325
AssemblyTitleAttribute
x3.w
M8Cc{
V4n/r
_Ryim
wvZ@
mOnJ
c6336148d7a82e4447864a840ed34926d
O6J#
c6267308129830bdab8192dfa802e373a
L>UYd
B ZjM
System.Security.Cryptography
W3~-
add_Load
G[*w
MemberInfo
7l6<q
iv*FdT
W:<K
}~QB
U9iMl
ezq0
:<h<K0P^
6kC(
IDATx^
cfd0ecf1152e190b60bd8f21795037185
2f g
z)|G
Data
OpCodes
ihQ,
Int64
{Wwm
?Z3x
GetTokenFor
ryGj
bQa9
6Y8*
;UXa
,,& P
Container
U[*V_
SN 9pJ
Z ]f`
Invoke
.'f%=
c55ba2a6397478cd623b474f18bf1ad0c
OV/q
[SXR79
vix0
KEck
c5b02a50c3070237518ac64be290290ae
kqk1
Kk1vJ
C6#X
H:?_
cdd66f312355554749181b7c8065961cf
Zy1O
pEbM
Z/:pQ
Module
H#a&jN
c693bdb554a6d7191d774d74e17f38225
c45e3dae0346a0c44572a049f608cb108
Array
v7><
Nu3{DC
2d{D
?^x=#
@.reloc
cb29d9e057cc106ce39ef66e588eed952
5Vm2
d6.f]q
gUaB
|6j,wC
GetProcessesByName
<~xF
,-&
KRNJ\
32p$i
)C>2
yO_'
get_Chars
uso{
:bkV
8!T+
EX96
MoveNext
OperandType
P Zw\u)
8Y+cp
>bMW
Rr]T
*~^z
-7Pc
PkOn
DynamicMethod
_0ju
@ym3
AddArgument
NumberStyles
16;}
d. '
5:N-
SOkS
3i16
3Q.8
}0 o
MessageBox
L1uG}A
[g 8
X{?^
0nK~
yV;
naP\
LDP
S~~5
qS?
*JB*
ZrYb
\9J#G*
NsND
e%
vnOY
` {?
z< 9D
SrpZ
get_FullName
sx|k
Dfwr/Fc*.
}>sF>
o4&v5
Sq]lGJ
+$ oX
^h_]B{
RuntimeCompatibilityAttribute
V9Su
ymvq
X(v
_n/m5-
Assembly
&& 8
RtOC
AssemblyInfoAttribute
; A3!B
=J ;(
c,ct
}+;4
*4gQ
IDisposable
)1.V
r'4u
get_ReturnType
7_~?
SuspendLayout
&& |
}{Pw
khNe[
&Sz6
.xdgl
Size
GD!6
DNE)`
b9*{c:3
&-pN
cd8378def29b2b0d41d590f5e84fe7b9d
C 9`
c583b9404e5a80b027e53568022220352
set_AutoScaleMode
ioL
C]\~
MakeByRefType
rRI,
Ecf_G
hBoB@ x
&3MT
Wq7x
Yl5#
`/:4P
?~KJ
-(Wf
:-AN
UDrBw
cf7a68c41ca70b920ddd51ae4cd84e613
xd[9%"-nwy
v a8p
gk2Z
V5Kf
n(!.Bp
3r P
A, |F
1-89
vAvY
,.;
ad t1
H/SMR
09uK
4+R4.
h8G"
-__@=
+ha?FA
Qnj
y>co
get_OperandType
NCBf
c9a019b7a824f62d84892ee69cc1bbab1
<o"@
\.fN'
]s:g
XCC:6
r|<%
G;q_
GetExecutingAssembly
<Q09Y
c0c25f5971fd1c2232bd9c0615eeccb18
RTo~P
1C,,
c00c5980334035178d20a987da99ad611
w*bj
ContainerControl
k|0Z
ciK)
kn@2
t7fm
-(&&o
xq c
l@>IfR
NXp vw
ReadByte
OMI+N
>x1at
(vE
]:Ha
wva{
bwLi
gz_b
3 [RU
r ;i !_
sI K n
85Df
XCk:
~@cF
ag"|
AssemblyCopyrightAttribute
ry{P
Q ;orr
Zq"O
0ZY|
" Y
|&Ig
8ex{
8` Z
H KX
," \
" *
get_Current
5V+m
[C_+%{
HW1X
d^0x
MZvH
AoJ}
mL8#9g
?I|C
IndexOf
UGo:
i0 5
Ya3V
SDQ38
\6Ft8
rs9P
-&5
7bXMs
u:[T
ZI*5p
?P 0
GbP
BSJB
8Vahr||
Read
Type
:7Ml
g@{!
c0f7b2f6fea53099afb2e493082607d76
i!o5R
5rCV
O4 n
XVP;
hse
y))1
8t$77f
cceb1970499f771c248b4bb8a9b6df101
c98a36126c455031cab8fd6bef44c39dd
gAMA
ToSingle
o{dl
q#!W
! A!
;o`(
:IDT
{l \
Lh]'
AutoScaleMode
]$.
cf8a50b822ca16c4fbf1b3ced7d3fa5cf
GIDATx^
9}g"C
.cctor
vq|Fv
>;~7h
%+p-
mscorlib
wg+|v
Q}S)
{l8TIO
ResolveMethodHandle
^?}'
c20b7971204c2278c9bc25970b065b8cd
Jy8hy
`|79x/h
?I*@
([Qi.
_pAg
?<Pd+
c60354d5c507d930edb2fffca8a4e916b
c4bfb0827bf0184bf67a80df62149fc3f
G<L|C
LBX{Z
hwLj=,
;PV-
cdef78bafd6f8d9440ff0a75414528c25
PEbi
@_-%~
System.Reflection
'gww
RuntimeTypeHandle
c0b7b13e99fc5fd123012a102e15fe27a
SetLocalSignature
?t$p
oq
0.O '
y48Kf9
d?hz<
ToInt64
$ =t
WR=X!
SetExceptions
f21G:
~gg\
[@&1
IList`1
"^Gg$X
ju1!
xk4)
1T6v
d B4
^{")K
0R{D
VD 1Zk
]*f$@
AssemblyDescriptionAttribute
Bd2?
m4L2
D7 {
oh9J
cV|
p8ox+
c8b28a9955759333a4a178bd0c9d523bd
R,,)?o
Z*(*
cc2307856380a4710f805cb98f6768634
>HWa
BWHp/
(*
ResolveField
1kJV%
njTm
/'/
cf57fe77d713106851659983cae9192f4
lxCB
ResolveString
_ ;a
I%VN
9&Cc'
2UP]
N15
7u(j
;('k
g~/A
% ATU
M&_j
jkK2*VX
!u1c
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
ce8f7d22efa2a65d198e203b474f65570
}fpP
YU(0
! ~
s-V
mscoree.dll
!This program cannot be run in DOS mode. $
callback
System.IO.Compression
e&hb
+ & X
+ & T
Dispose
+ & P
+ & L
+ & H
g~!R
+ & D
+ & @
h<gY;<Gn
+ & |
cede02f5010bedb70e6e6fab849a6deea
+ & x
s.]p
i*/
+ & p
)A%Y]
y1g6-&g
p1*lp
+ & h
!(s
c881054db7c66edc901491b0a86a0f6b4
BwL8j
^>Pt
vW^
w sd
+ &
set_ClientSize
GetValue
+ & <
+ & 8
+ & 4
3%2sL
juhs
+ & 0
T);G
+ & ,
+ & (
D zY
l]3T
+ & $
+ &
z-x
Gdq e
,LTQ
hk`g
IContainer
P m$
c24e07074b3f900970cd106466e530217
get_DeclaringType
b#+
GetManifestResourceStream
get_ModuleHandle
+My
HcuB
BitConverter
c7058075a63da9deeead189c50274599b
c19654106e02222e030c3c0737f6901f2
iy|
MfKB(
fQ
GetBuffer
.@})
)4{O
OSOW
)2 f
]Uq
tr>D
ResolveMethod
Q/9:
-sJ=
gq*
()}P
sI(
O6 TT
kEY pRcCK
"' i
4Yz}n9
6fEOQ
*{2I
<)`^
cca36be7e9ca0dec47ed30addc4234bbc
BlockCopy
&&&&~
GetModules
(,
}w)e
=<1
TM >
jA{ +z
c14d01fb6a23eed472af9b85eab5d3560
vlfV
* /NB
?V ^
N*!]
BinaryReader
MS3UE
x)@G
set_Key
1Eu0
WY"=
I\ 63@
F4.1
ExceptionHandlingClauseOptions
^5R6*
1;RJ
p*9a)
cf064f951249d15ce312ab9e55ec5073c
&H"
ca56f638b223864ff4620d481e5181dfb
ca7f8998882f1e3628887923d46b0eb0d
/Mvm
}K%&
Rs/2
6[U{Q
MethodInfo
aOBv
$!Z
lbOT
p3".X
ZO\u
CompilationRelaxationsAttribute
i<$?r
9&OiX:A
z%@_
XHue
c2aaf8397290097667656da7c3a486137
MemoryStream
g%Z3
c20082cbcd300a9e9335657b1d052c30e
8D1x
B2KT
f{'h
cd562f66f96dbd78c5c47b9baf1daf286
"K,Y
`Jn)
==?Nc
)x(z$b
MDmy
`QD8
Y>]8
TEw,
O0\[
x;U8w
cad4373ab0e1f9a4260d2afa46afd1e72
BB@o
c9d320def501f77714efe8983ebd9ab37
,>+T&
6\6+<
7WKI
^u3#
[6BC
$m]z
H;}tw
C.VX
IEND
@BIi
_BA O
Mp8a
Mi^6,
'u%49b
ed=$H
?>m6.
L|qx&##$
vYF4D
_z/3
cdee943704a4b964bd8ea70e31a495098
|DTJ
xTg:
~:v2=
$p@3
!>S^
get_IsPinned
c89ea68f70c05066e63719610344fe321
S\6~
2^%nd
Fa8I
6h[p
Concat
}
STi
jQw'
!G7/l
&@\L7}
ca0(
ParameterInfo
[-Z*:
CR_O
t@2OT
W6i<
0n :S
CompilerGeneratedAttribute
q `m
bbt/
Ckhh
MemberTypes
get_IsValueType
c6e3cda34258111b9c6db111b3a779501
u9FPug
N00'
OpCode
}15
+{C}*
AssemblyFileVersionAttribute
B^y{8
System.Text
lSop
I#oZ
,@i{
/\ik~
>v r)`
fUMN
RuntimeMethodHandle
cafd6fed6fe443908f253d37a3d01813f
elW-
\ ${J
81MW
;4lh
Q#Fn
(dX-
ahm;;
5zVm P3
AVwp
C+ pX
]$R#'
]W7hdq
-b|JZ
*LLG
9W>H
Anxj
ADIl_7
c0c76d184f995a6047d1bcef193426c2e
mI2 G1t
c40fd6097a13371d33557d0ab17ea33e1
%vy{
!#Vh2
Show
p7Cu0
c30be479d40c67e351cdec436256e662c
FieldInfo
v3Q.f
A.c384f7dd00d6d373d6595e738fa8b9e45.resources
jX}%
% (G
*vAW
&&8T
TryGetValue
String
_CorExeMain
o;3F
0]BX
co;S#
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
^4'J13
tHDj:
cc4cd33dfcafecf7953f579fd07f1fa0f
dncj
=`R +`o$
L z
f~vI)j
c3f360a291ede4ecc7f833d9ae5d35e1f
D `[
-|<C
zL6!
DebuggingModes
InitializeArray
leL i
{MG:
sunpop.exe
i4AEo
nw>T
p?X{{zkj
ToArray
{E+]h
9xIlX
@P@
c5b4748ac3608343dca666f856810f5bd
EK)^
bhSzM
NPIsU
,J3D
c28475edc8054a3f8a57308b8c593b1bc
UT4
Nz8nCv
;L '
w IO
Load
w&EF
Attribute
~n 9m
System.Drawing
ResolveMember
c48539f8b6d44f8f51760f3aacb25f4f7
A&, '|
`1d}
L5d<
%+g{
$ yEg#
{JE5n
Dictionary`2
BeginInvoke
AnM<9
^_~LE
*}y4
BVa!;7Ax
DebuggableAttribute
6&ot&H
\#L^;_ D;
!62<;A
H&Grt
z pC
f,0r
_~'
ca06c5800b892fb83399d27179c3e62f3
[(XO
Q/5?
[X%$
RuntimeHelpers
UserControl
c526936426e5aa1485498ba20731ed8f1
}RF5+
~x '
Xq k
B[1>]:;
3R<K
G31/
@jvEv
?tGWe
Object
_/K'
, (,
< 2j `5
ComVisibleAttribute
6+'y(
BadImageFormatException
`6 y
System.Diagnostics
cbc1b5caccac37eadc83901e2500b481c
s/|z
HostProtectionException
zA/H
v4H4
'@e,Dq
c163d43ae39d6b861321818ba0de7001e
S^X;
d rZT
Hnlo
;"']
(bKL
C0DF
AssemblyConfigurationAttribute
: '%
3^x
7N^:
G|mn
w7<1
|9,V
c1e73e1f00b7d8a912d2310b5367c2bd9
qr90
3P[:
^ vV
S9q[
cc75d317ad3ed41c9d8abd5741a54aae9
cf06ddd406783da19e951dc1c8a8ce3cb
DO+~
+MGE_
=244.
o-&4
pk2P_
c581b5398bcf552996e62d7d44e5e986a
Stream
`2{O
#%2L_
%p5B
c54de8e585ef6dfe18bcdcae164bf9878
get_LocalType
2 b%
D^eH
Exit
] <
@ e^
cd29045cb70a0377b23d75cdab170e7b2
[+Dg
c77d41ea904011ccf05c2d0abb549d596
j8])a5
12.2.5.1
GetDynamicILInfo
5^N0
>aK1V
GetMethodFromHandle
MgLS
x6 x_
X=cH
:l-x
*DHAc
1`;#
u1I8j-\
G.P-
%*Wb<W
c29838007e914e62e7bf85376e8e3a1cf
% hX
uI;h:mL
E~M<
$I8$
}#,N /
{!.4y
Pgq7=
Ay"_
/4xq
System.Threading
+ #_
cfc31f8d9bcdfd92f167a55bbf2f7ed0f
=az 4
bcB0X
j18Bk
(lbD
cafb4b8d8590a3a04c232ece76e60315d
l*)jEI
fZ+k
c8dc2e7d3abda6c69ac06752529ff49ea
`%0mVFc
PF+sVE;3
*,H W
Empty
B#:=
XB;<
R. E
?-j7>
kL-1\
rm!n
**nF6*
cb8184574c58804689d698d74df1e9a82
LgZ]b
Buffer
L'aH|
j<GIq
m 0u;
NdzE
Byte
I=a[U
c4e3279c7fea8d5f653dcccca39b972c8
|[R$
Q8E,
,I5Rn
v21K
AwdN
f%I l
qUBa
se]e
Jd=h
9: a
c35b3d0409cac68d8f36bcaf1e4d0a554
set_Opacity
Y;mYf
.G=@C
4Rz|
c77dae32bb6ab888a48299682fb0b10c9
c1bc823cd4cd21107de6fdf9b0baa5ee5
z@'=
MethodBody
.|\6
Dwa?
M [
4|LP
\]qb;Z
0 *$
{8nB
`r&)V
$e~0
t ^
3:;\Y
;`l3
+&
Dhl;
~;n#
+3'S
w>4 .
Copyright
>5ak
+ &
m+\_
cdb9f003645ef8c1579365b371d494083
Ys.1_
Vr;q
k_Fl
+d
v2.0.50727
dX-%[
D}}
)GlE
.?IS}
cc2874e2959b2f0f1ad76777275044ec2
G3h[
set_Item
MFT8
n{M~J?9
t f% ]
\u]"
c2721f5133128ff5acbb7ec6d9ccdd704
Gph=PSm
t~|_$
`%K8
k~ a
get_TypeHandle
Exception
& y
&RJ6
G I)<`E
PF6.c
:;n%
DWo!
LLM;J
GetGenericArguments
tbp/
GetTypeFromHandle
IAsyncResult
AgTWj-0n
:(z<
c7e05a409dc6f47c40694afa573da1827
LDxE
SymmetricAlgorithm
cd27f15fe508adbc683125d761b840b06
(*9&
IZZ^
c2f99cbfe89e2fba8acca213a567d7446
c)f#E|
c(6>}
a4~5dd
OPC}
=A4`
t^4XC
5Ip?
,]Np
r`OqZ
N`:W
@hyg
n6z
c.Sw
c9d74d3292ac7bcfa587026ed479c54ef
c3f060f7c8331a62661783822748c1382
<3|x Q
>Q+ v
c9fc01bdceee4c2ba9fcb189083fe2293
jsp 4@
Xyh<<
DLl
EkT
D}kV8
a=UZ
set_Position
u[f%*
~_rS
AyQ{
Sk y
System.Runtime.InteropServices
~f>,
G36N
0N$;T$
cV A
vzG%;C
a+\8
,U<]
`-p9
GetMethodBody
Kr3&
IComponent
System.Runtime.CompilerServices
e3z_1"
c1f438361466017c87140f17fb034ddc1
xzGA
GU@Tcx
cf5e9dbfbc35bc4a605b58811c5b439dd
PuK%Q
] 1Z
} K@&
c2PEl
;k]|
!EoZ
uo=
GetSignature
GetLocalVarSigHelper
g:9.
K]&Or
S`Y-
pz ;
&7r ro$A
TransformFinalBlock
aERO;U
y{}Z
_)W^
EUt#
lKR4
q:w2^^
E}/z
1'`g
e/pN
}-cf
c74ea6e0cd271d8b4cb4b575d471a1e7a
Ai$"
-tH
c1bc7fa2ccb39dd6869addb4d5201ed5a
c554698e72718292e513d47fd33bab3e3
L_Hm
>Y~8/
set_Mode
6<&+J
1cN
CompressionMode
E)xI]
AssemblyProductAttribute
atl#
c5695f55fbb20c8b8f9f6b6e1f8b89dcb
j}0
EL]a]k
c7ad266dbc1b987bf6d0f6322a781b3ef
<Module>
k.a+s
J7RXkj"4
05:5
MulticastDelegate
)`d
ComputeHash
sy^#
!T97
6M\_
c2c54e2bfbf8d0eebe286ed9995f51cd7
SizeF
ToInt32
VBvP
2016
c142b022fabd461fea067e1f1696dc7c5
q K6
fj
y"8c
:S&x
<PW%
DeflateStream
)| N
u6Y
FromBase64String
vp9
;!$T
ResolveSignature
Aim
#GUID
\&&U
J*w4R
pJj$
GIb8>J
ob"-
h(A &
/Va8
?wI9
ToString
l^=a
a67a
kZ@u
c07a8c737b72010bba9373163aaee10ca
cc7734e994a1eb60ef2a1eb8fa3df2fa0
:G"S]
sded
4~ k
x6N^
o^=
6.XY
c5c0b421ee012d2e6c5e868ffc0e47ded
gQ_i
VB!^
QXZ;`"
EventHandler
losX
`qU }
E)#o
/O^P
,U&+5 (
SetValue
-ozPa
Encoding
^0`g
NotSupportedException
;M}s
Rp<%
GetFields
)_Cv
IEnumerable`1
]fMZ '
set_IV
iTn'
C|3=e
get_Module
$| (
TlO$
sunpop$
sunpop%
VPwe
{0X1
mB).07 ?n>=
P-y?
Jl#`
get_Value
cee770aa3b49acd6161a9dcd02294d9ca
cc40e65a3ab170e26c5790290b5eb687a
get_Size
ch98
dLzv8
6XMM
Hwf&{M
System.ComponentModel
$~2wM
r|xC
jfl>2
{:bpsI
#(Q8
(i c
5\^c'
xfH3
>L5W
a#$6
LS[W"
n2Yp
F>m
a>`rz+v
3aN,i
S!$L_
X5Tz{
W?e/
I0/JK
jYio
Mqjh
System.Collections.Generic
c121e4f713b5ca98f39390416f1ac9a2d
wi!
^eK:
M $
System.Windows.Forms
V'NL5
j~dsf
u|4Y
Z7/X
, 1 id
ohr}-
dDAs84/
System.Drawing.Bitmap
f" 09'p
c9ff3d0abb687956ba3c71dd0d128d2b4
<Wg
LYQP
q/$u&
&&*(
ps |j
ml8,
Q,Pd
Vcn.
jYioJ
xiIU
c945f2c3659d8410be3a03b8bcf513c23
YY}0%
m0-
bRf|
H"|#^ `
c98ccde3cb917392246642f7829093f2b
c23e2c700d56b3d120eeaf4bfb5020ba2

#infosec #automation

TheSystem Itself @ 2016-08-03 09:21:03