pnysat.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 6/56 Related 2683
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 689.33 KB (705872 bytes)
Compile time: 2016-06-18 17:51:45
MD5: de3b681b9cf1047bb6db1827c577d7e4
SHA1: 80842e3ce9b3c723bbf2a1703655d8caade1b9c7
SHA256: 12769d1632b1aae509facab57435dd9507e799318611a8645dd7be55a1c4fa1b
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 4 .text .sdata .rsrc .reloc
Directories 3 import resource relocation
First submission: 2016-06-20 14:45:02
Last submission: 2016-06-20 14:45:02
Filename detected: - pnysat.exe (1)
URL file hosting
hXXp://saskia-online.co.uk/dp/pnysat.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2016-06-19 23:35:07 [6/56] VirusTotal
PE Sections 1 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0x2fc04 196096 eea5119850502cf5293494f1a5dc70a4 e0a5f45f38a1c45751ed9df84639a5f2251de620
.sdata 0x32000 0x7b8 2048 be52b594c97bc0ca9795ca9d1650dee7 4568fee63a20d882bf3b9555f245ceb8d74c0f51
.rsrc 0x34000 0x547c 22016 588831037914373950a8f155001de311 e5adde661468985a72f8556733a8859818f39dcb
.reloc 0x3a000 0xc 512 7ca36426c163f1d47af1a12ac2273213 3bcbf723e732545f8b3e375371301c298c7ea31d
PE Resources
Name Offset Size Language Sublanguage Data
RT_ICON 0x38ac0 1128 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_GROUP_ICON 0x38f28 104 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_VERSION 0x38f90 768 LANG_ENGLISH SUBLANG_ENGLISH_US
RT_MANIFEST 0x39290 490 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: Copyright (c) TunnelBear. All rights reserved.
InternalName: setup
FileVersion: 2.3.22.0
CompanyName: TunnelBear
ProductVersion: 2.3.22.0
FileDescription: TunnelBear
Translation: 0x0409 0x04e4
OriginalFilename: TunnelBear-Install.exe
ProductName: TunnelBear
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: XML
System.Xml
FIle type: Library
USER32.dll
KERNEL32.dll
ntdll.dll
GDI32.dll
mscoree.dll
mscorwks.dll
IP Found
6.9.0.114
URL(s)
http://www.smartassembly.com/webservices/Reporting/UploadReport2
http://www.smartassembly.com/webservices/UploadReportLogin/L
http://www.smartassembly.com/webservices/Reporting/E
http://www.smartassembly.com/webservices/UploadReportLogin/GetServerURL
String too long
e2VlYjBhOTFiLTVmN2ItNDUxOC05NmFhLTgxMDY2OTc1OGZkZX0sIEN1bHR1cmU9bmV1dHJhbCwgUHVibGljS2V5VG9rZW49M2U1NjM1MDY5M2Y3MzU1ZQ==,[z]{869e35f6-0a8d-4b54-8455-517e78fec984},e2VlYjBhOTFiLTVmN2ItNDUxOC05NmFhLTgxMDY2OTc1OGZkZX0=,[z]{869e35f6-0a8d-4b54-8455-517e78fec984}
AEV
Version=
{eeb0a91b-5f7b-4518-96aa-810669758fde}, PublicKeyToken=3e56350693f7355e
Culture=
A`g
A5/
, PublicKeyToken=
A50
239
.dll
null
neutral
{0}{1}\
040904E4
PublicKeyToken=
InternalName
FileDescription
2.3.22.0
AZ`
FileVersion
M##
Q5#
Translation
Q5'
A<I
UEU
UET
Q5+
A<B
VarFileInfo
UES
ProductName
TunnelBear
M,#
aspnet_wp.exe
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789
M65
{45865388-c2d7-46ae-bb66-01dd1839cccc}
VS_VERSION_INFO
StringFileInfo
e2VlYjBhOTFiLTVmN2ItNDUxOC05NmFhLTgxMDY2OTc1OGZkZX0sIEN1bHR1cmU9bmV1dHJhbCwgUHVibGljS2V5VG9rZW49M2U1NjM1MDY5M2Y3MzU1ZQ==,[z]{869e35f6-0a8d-4b54-8455-517e78fec984},e2VlYjBhOTFiLTVmN2ItNDUxOC05NmFhLTgxMDY2OTc1OGZkZX0=,[z]{869e35f6-0a8d-4b54-8455-517e78fec984}
A::
A:;
ProductVersion
w3wp.exe
-,.,/,0,1,2,98:8;8=<><?<YXZX[X^]_]
AFV
AUZ
{data}
OriginalFilename
LegalCopyright
Arq
ERR 2003:
Wrong Header Signature
, Version=
Y<N
, Culture=
setup
CompanyName
'&(
Ank
U:9
TunnelBear-Install.exe
F!H&O*P+T.X/
A?N
A]c
Unknown Header
Copyright (c) TunnelBear. All rights reserved.
A<H
_bY
DateTime
.//./3..33(&(&&
y(Rvi
SystemPens
Int32
!
AWux
eS1d
hOQoNkpxjyxIUt2xman
WebServices
T$< K
GetInstance
ResolveEventHandler
get_Height
jzv{
I`3P
3&.//./
ogZpHAp2r42cyd281oa
maxLength
ExceptionStackDepth
[O??tW
9M-<
67N
Substring
Process
f60D
JOhv
3pU :Z`
GetGetMethod
get_IsByRef
get_Controls
.3()/$&&&)(&$&&
Version
fez
rPY=H
CryptoStream
get_ModuleVersionId
$$$6
dk-?hwe
>k -
%({M
nSHx5Tb0kQBgFOIGep
dt4z
ServerFaultCode
DebuggableAttribute
Mw0
w954
ControlStyles
Marshal
D~TIM
,~b*N
SoapException
TtKEY5('/
]s7Ku
|`Le <F5
h/^(
user32.dll
ProcessStartInfo
1VBg
op_Explicit
RuntimeFieldHandle
System.Security
my2K
'p2h
in7}
)_ju
DqzG
&&/..)).($$&)
;(Ut
~e~F
EndInvoke
IEnumerator
WriteElementString
Wow64GetThreadContext
}Zo2W
get_IsValueType
a}g!Z
k;^D
Text
setup
Point
Abort
3\cu
{z}
set_MinimizeBox
AssemblyCompanyAttribute
get_ControlLightLight
CanContinue
)./../3/33
AxrHjq0rfyaOTVp0Cr
Format
..4 g
kR@ai
*d3
`}_u9
:Ilq*
AppDomain
"%Bk
CompareString
Refresh
jLt5
^y3S
d`n
eYiB2
get_CurrentDomain
ThreadExceptionEventArgs
FV
nO?<
:_%:& 2L}
w$z6
Y5qqb2e^
get_CanFocus
4ah*
PaintEventArgs
fKKOTR5VfT8pmk4YLGa
OpenSubKey
TotalOut
a.c"b
TextWriter
47pTS
FromBase64String
AssemblyTrademarkAttribute
ToByte
k7ul
NoaS
ugBPpF56JxoaSEMdMVq
RegistryProxy
Path
set_Text
?{d8ttu
GetThreadContext
UTF8Encoding
#Blob
Control
y~jZ
methodID
get_Year
Z=`15
S,P
add_Tick
AppFriendlyName
wwwwwwww
}L}b
GetILOffset
PsC20t-g
BindingFlags
IDictionary
Type
v-Xk{
f]v|iK
[+I Q
IEnumerable
HelpKeywordAttribute
IsWebApplication
05"l
#hQ"
t.b{`(
XUX;
"."c8
|3 u
npUk
M8 T
q#;$
0+\gM%
;;;&
ErrorMessage
get_ExecutablePath
Char
)_?Q
ProcessModule
]>eT
get_Name
GetValue
Handler
o^t6
(OAu
% }W
GetSystemMetrics
Y7RU
='^
qt.r
E)7!
H3)j3e
I9yUet5aXOMcOsAKnuf
fNErVT2PO68AQhIfvP
.Copyright (c) TunnelBear. All rights reserved.
S7pI
Kv+6;
a3AWRU5Gi66F1F27c9N
?F9
qpI3o
B/6~
Code
StandardModuleAttribute
ToolTip
kernel32.Dll
!kYT
EmailAddress
n$1@
!1y_
g^[#
RxB4
+ 9 R
a]VK
DialogResult
StrongNameSignatureVerificationEx
ReferenceEquals
tf\]
.text
List`1
($/$&/
GetString
set_Proxy
%[q[{
Component
A#O;
ExtractIconEx
GetObject
wa7Rs
1P =
Button
object
= 5Y
FlushFinalBlock
A> 9
bP SK
r@[Y
TunnelBear
/a&s_
4System.Web.Services.Protocols.SoapHttpClientProtocol
SmartAssembly.Attributes
sT"<y
HBShh95u05Cm33DbtRT
pcKkVC5sKZ0jWDKZIqv
:;N;
j.z4
Single
GetFrames
` +N
)<-@ t
StackTrace
4g2O
jt+f07q
Monitor
yIm1
ServerComputer
XmlQualifiedName
StreamWriter
CipherMode
:eP<
SmartStackFrame
rectangle
WriteEndDocument
GetCallingAssembly
GetFrame
set_AutoScaleBaseSize
\}!2
emailAddress
System.Net
,ko~
Conversions
qKIf
SetBounds
10?e
()3&(3&()3)/3
7;KE
OnTextChanged
w0N,
(R_3
6p!@
CreateDecryptor
get_Default
X 88
% 9
StackFrame
eVi
rSlr01pMQXNFDCh4rG1
%5&-
kernel32.dll
AvailableBytes
result
.lV2
YQnNPJpq2vkgi2lfrHj
< tn
Enumerator
%@i
get_CodeBase
|||n
e i[z
UBC~T
AppNameMinusVersion
.3$&/&()(.).
)]kly
Flush
WttNz
DataType base64Binary
IAsyncResult
r8HV
add_ThreadException
EE .P
@http://www.smartassembly.com/webservices/Reporting/UploadReport2
Focus
Computer
_4e!Dg
Y 8E
uohU
h.@ =e gW
get_IsPointer
PlatformID
\S8J
2v\f
$6;L
PictureBoxSizeMode
_d}X
fatalException
K !p
uPBfir5E5BAqhYo11Ee
WebRequest
encryptedData
Q%p*
GetProcAddress
(eh?)t
mJ+E&
& o
&nxE
%I'7@K-
GetBytes
{45865388-c2d7-46ae-bb66-01dd1839cccc}
exception
i}W5L
p6xFDJpO8NnFfsD835q
$"G$
wP%F
oQ[X
OnPaint
/J"W
fr;I
kernel32
~EC4
hD0RJFpEK5AIy3HkIut
get_Top
Write
`QH+"3T
47_T7
STAThreadAttribute
7!M3V-a
AppWinStyle
ServicePack
get_Assembly
?u<08
wn>Jj
?Ov8P8K5
AnchorStyles
System.Xml
T|k4
UInt16
M'(p$
MeasureString
v\'y
""C5H
i]Wb
DrawText
>Rss
get_ClientSize


)acTP
DesignerCategoryAttribute
get_Text
SoapDocumentMethodAttribute
System.IO
WrapNonExceptionThrows
get_Now
^nQsD
AsymmetricAlgorithm
=2UH)
Vx*5
9 S=`"
Conversion
h-~D
Ehj
E|JKb
AttributeUsageAttribute
get_IsStatic
Y 8@
ilOffset
[7MDq
* (V
}ah,
-9=]
zfb>
w1Q^
ResumeThread
3/.).)3
A/*k
V*{*
)hTm
QZ|&l
G$$ H
Epk~
mgg
.3()////&/
System
EventArgs
p{B]
Application
r}U&
l@~M
`hg_
vpF1W5
'_`/
user32
r&N@
fRf`
SuppressUnmanagedCodeSecurityAttribute
k0rX~
CreateInstance
ToUInt64
ZrBv
p#9kl42>
MethodBase
#Strings
System.Collections
Image
G#;d
4
^pym
U]-zJv
bXT:x
System.Runtime.Serialization
81(#
Environment
minCodes
aodBmLpYqmnVpfR3NgK
2^:=
kY@|
CWK{|
NnFSm3SG8WyPb85XPI
OnFontChanged
;Uzs
I6xVMfpSiHUmqKQsDle
.u1c
jpi
((&&&&)
zM}3
<: 2N
proS3A3SAtect
HHodZJpfr6XrIouu0oY
MC|+
ugI7
5?T=
get_Position
System.Diagnostics
$A$q$
GetType
'zT6~
set_StartPosition
uuun{{{j
add_AssemblyResolve
*V
MBgqsRpa7hKKhEE2P7n
ThreadStaticAttribute
OpenWrite
+ 8a
set_RedirectStandardError
Activator
N%iB
8\
2#YpO
}z5
0v~Z
XIsWnbOqfbFpAHU5l5
set_Anchor
,8v
Double
8j'.m
ProjectData
a!K>
set_Location
Color
| SZ
8.0.0.0
&U;.
set_BackColor
SetClip
{pym
@`@A*
8O}.*
get_UTF8
get_Width
ContainsKey
set_WindowStyle
7nG a
`x d
%u _
7x{q
licenseID
kAmuRtpLdXxv01wxGF0
xQug
SystemColors
([}T#i
333"
YY2O
3333
shell32
get_ManifestModule
6-\
#Uf )
J BL
2.3.22.0
_b`}X
[R}q
.3/////////+
D0Y
=O5oR@
b`~s
BitConverter
UnhandledExceptionEventArgs
Oi *
System.ComponentModel.Design
yii9o355K7wLdC2BeZv
Label
Failed
ntdll.dll
get_Second
Form
W+yu
&&&#
]` '
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
&&&2
GetAssemblies
&&&5
0awGZ
CommonDialog
2[
<<<&
WW[
Delegate
AssemblyName
get_Visible
IsFlushed
I -
yu x<.
OnClosing
layL(D3]
VjgR
xKoNC
rT=`
W$<l@
)_ q
LastIndexOf
Enum
wwwn}}}j
#.zf
Qr9ebBzq328QlbXRXU
CopyArray
get_Day
GetTypes
oiaB
bX~A
~ffhRpsC
5=[n
get_Length
?U) uL
DESCryptoServiceProvider
r:Nh
v@PR
ILOffset
V(jzCv4
C-hw
[
JSC)
GetSystemInfo
Contains
?27}P
CryptoStreamMode
X55OP
ResumeLayout
W-jCK
'DjWX
7oR)6
Qm8u
~$dc
$yhG
I2aHkmp54OaD6rHSGjw
ValueType
System.CodeDom.Compiler
set_TabStop
b~s
H #e
cA'd
S)2@
ToLower
BitCount
po+N
Rny{c^
HideModuleNameAttribute
X}M
qQMgjMpTsS15jq8Zj9B
get_Count
data
Trim
GetTempFileName
Y;DH
ButtonBase
Namespace3http://www.smartassembly.com/webservices/Reporting/E
/Snf
;}{Z
GetField
<]t`
SubkeyApplication
PQhU
whHy6RDo8JrdNivij6
6#Vi
iZk_J
W4wcoxp4jsSVSoPcmNj
H*va
do"7X
PeSec
!blTe
FormBorderStyle
2vPd
kn0F
Py]/
)0M;
UInt32
ToInt32
StartsWith
J!o1
WebClientProtocol
get_Version
)G[@/
set_Dock
fileName
YYSrwopnW1t2Qq7gLhF
zzzn
ToString
BuildFriendlyNumber
set_Timeout
333333333
name
R4tu
/~z <e^
Utils
GetWebRequest
Cursors
z8IC6jpj9tIjIs0vMqM
qu]
:Kg\ld
add_UnhandledException
'0Ci)ek
assemblyID
Wow64SetThreadContext
0kt^8
VTR
5UmDB
ClearProjectError
Split
securityExceptionEventArgs
+#u!
Rdg)
DebuggerHiddenAttribute
CreateGraphics
O(c.

ICryptoTransform
get_Rank
`asK
GetObjectData
m'w_6
add_ResourceResolve
we4AglQXeEUrKtXwL4
$$$5
C:[D
AssemblyTitleAttribute
ShowDialog
e}Vo xw[
P{(O"
set_FlatStyle
7;W[
SDSZ
Z2226
VJ!X
`^ d
qUse ShowContinueCheckbox instead, as this is now also false when the builder has chosen not to show the checkbox.
System.Security.Cryptography
]c#Id
Create__Instance__
MemberInfo
A}<{
Start
Combine
fEcYLN52EcodyWYcoqs
, h
vSKV
9,R;
set_FileName
set_AutoFlush
T')^
LinkedListNode`1
RegistryKey
MethodID
GetFolderPath
9a&g
oj
ok
ToBase64String
Int64
@Sv%<}
LinkedList`1
og
]2sXYT
t#{0
oR
XmlWriter
kIYGAZVaIBvqCGAB7yv
>V(0
.ctor
rC$
RCC
.LS9
/iO,
+ 8
& RCC
@b *?o
Invoke
XD8'v
+ 8>
+ 8<
FileSystemProxy
!{kZ
zbHBMnpvcyoGvcvQ3b2
DrawImage
Name
buffer
>97 )
5~Xg
fm+1
? eNv
SelectObject
Module
n;^
Array
5J&O
B* *
TransformFinalBlock
LoginServiceSoapT
$Kgy
MK61sZ5H3RRFGiRusur
@.reloc
h"cL
GetPublicKey
@YF7
@&W~
CompareExchange
GenerateIV
GetProcessesByName
4D[
SpecialFolder
Byte
get_Chars
~~~n
|b0l
Load
?o-W
P$9f8
MoveNext
{XL}|
uq0&
z:+&"
T6O7Gv5oiHFyhLNPY67
get_MetadataToken
get_ExceptionObject
888&
_G89
k/&
set_TopMost
IsX64
5P0S
[@+kTUd
T6Fj7FpAXBxUPg5waq1
GetVersionEx
r)]1
s.uUs
///////////////3/
MessageBox
& 1
LS%X
get_Location
System.Web.Services
;5=8~
^HoJ:V
jX}o
i5LYBG5zUMkfnf0tvEB
DDDDDDH
xmlWriter
set_Url
Directory
7})<
set_TabIndex
3te ah"
DDDDDD
umJ%j
6w|a
ybHS
C%'BgI
q nT
{` K
Y 8:
8
get_Item
U.^d*
FileStream
/P&
JifFe
&
get_FieldType
j\6#
set_CreateNoWindow
Assembly
DelegateAsyncState
8>
wk4,
GraphicsUnit
o^EK
".b
MxP.
FatalException
JiJ2sm5hWLlwfYH7qyA
SuspendLayout
@ dU
Qkkbal
s232CQuDMqQ6XP0v19
-^.D
# 'V
?i|0
Open
GetHdc
RSA1
ItZQZCpgvCQY5MHjiO9
x~9<
NewGuid
elems
siDSA3ze
.~~p
;!{q&
]fU@e
{)pl^
? i|
[DKEo
$Ck/q
AppName
Void
6rK)?
Objects
n>3cFr=
]~XT
4r?'
ZV,!`
TargetMethod
;G/*
Clear
DDDD
/xc~
\r]p
pi~!
My.WebServices
GetProcesses
~\Bh
GetCustomAttributes
8bO4J4
JTQMKJ5lIVC9LUBKvyu
ISerializable
pR1fKNpRUVHl7bZW81I
teXKe>
UDuO
B7aE
set_DefaultExt
r,c|
set_Height
\|-Q
bx Z
bkQP*
//.)&( ././
acTyXe5UmPDEgEvxOLf
\?(9
Zjz
]r@Z
set_MaximizeBox
)Zte
MissingMethodException
zVCbK3pe3koiENo622l
]7= 5
9z@8
ResourceManager
RuntimeCompatibilityAttribute
L
b[Tt|
$&33//)/
YX}{
PropertyInfo
XmlElementAttribute
33333?
UEq6p15LwkRYSmOpKFw
X
yyyn
.LB#
_&`hY
/)3/(.+
X$6
ToInt16
&<5t
{!h*
MyGroupCollectionAttribute
ReadByte
CreateProjectError
![${9T
{sKIM
m@p(
'a3c
)//.
securityException
ReportID
Interlocked
,AF}
~!
AssemblyCopyrightAttribute
quCwlW5Qb2M6a7fEAfi
<j-W[S9/6
DrawIcon
P7b4
T\t@U3
LoadLibraryA
Empty
Bv&D(
YX
Operators
firstLevel
ReadProcessMemory
DeleteFile
FileShare
s1"@
Uhjf $ +i
FirstLevel
get_Keys
VBMath
!!<H
Z~U`"
dQ g
(WeyyN
IndexOf
get_CurrentUser
Lr5R
.3()///.$/
Close
.v8RLs
Encrypt
"Powered by SmartAssembly 6.9.0.114
hsni4O5WuK5v9J7u8bH
>Z9 / 1
GP%c
set_Enabled
^ YiIx
appFriendlyName
:p5j
pa (
Read
Intern
EzL"
#=@G
($V C
1K>%
L\N|
,Ps%
My.User
TryToContinue
set_Interval
WriteEndElement
{kwO
AddRange
canContinue
get_Font
'+[F
iTCtPs5j5sYkll7RqoE
^](_
CQq2wqH3E5aZ3kTUFs
iwx6oa
Ceiling
get_Left
.cctor
AsyncCallback
{KX
set_FormBorderStyle
mscorlib
GetArrayRank
FileMode
GetMethod
20N<R
666"
GetObjectValue
p(q5
,z91
ControlCollection
Kill
RSACryptoServiceProvider
mj+x
@<QQ
Guid
D`:"Hz
71n1
J3U~
[X}{
?ftJ
System.Reflection
DrawLine
M
.
^K$4
RuntimeTypeHandle
MoveFileEx
[V..!
method
/ru;
f?P'
oc
Hu6DTA69JQ3gwjYpnk
333333
M3'M
set_ControlBox
UInt64
Cursor
%FfwF
sender
ToInt64
reportSender
Size
Append
get_FontHeight
o,R1g
set_ShowInTaskbar
n$ #@
Rfc2898DeriveBytes
^ Qs
op_Equality
9^/'x
444]ttt|
)5R~[
yEg]
/_ Y
r:nP
#Ngrd
hgb><
/.)(../.33/333/$$&&
MTO 7
~vdz
IconState
AssemblyDescriptionAttribute
"Zm
securityMessage
0lM"
dSaI
proceSA3ASDASss
set_RedirectStandardOutput
SecurityMessage
3RV
vvvj&&&D
P2?P
8| o
35$/
rB5R
---{bbb
P{]
EndApp
9>-(
4ia`
!fL}
FLKQ
,F6s
KeyCollection
*~(U
yPYstXpC9WwVNKqtT62
com1o7qVQB1xQwMu4W
$~Ag
Ls>
r^#'/
NtUnmapViewOfSection
(3$ .$/
Environ
)./......)..))
q7hKJR5KvFLZK1esn8R
/(Y2
esL/
get_Message
!This program cannot be run in DOS mode. $
Hr-R
DelegateCallback
callback
z 6=
K!T|v
File
% }Y
Ay~0
:;<
_dAs
XmlTextWriter
Dispose
V9gK
{xK2L
g21xQc5vOyOnji3tdpP
GetHashCode
m"C&R@
`wx
WriteAttributeString
GetCurrentProcess
i|S$
Binder
ZUh\
ServicePoint
SGn_U
rw3UQ
MI^2
"M5 2ei
7@:5L
get_Window
!JlO
DDD(
set_ClientSize
mmm3
B3LrjOpbk2F6D6s0lR3
System.ComponentModel
u/rx
]/yu
get_Key
CompareObjectEqual
PoweredByAttribute
b0k5\
2xI;
get_IsPrimitive
;Sut
ei^n
)pA5
addreSA3AAEss
SetProjectError
F' }1
AddValue
O L'
@~wX%
ReportingService
get_MainModule
80Ib
ReportException
+)h>
SaveFileDialog
c>+rP'
2qi
op_Inequality
6/mr+A
%%%5
GetManifestResourceStream
x6Aj383UQUFuqMGxTQ
GetLength
N@P9
fLta
z8j
SeekOrigin
proxy
LoadFile
O,%a
~x .
IsWorkstation
Delete
IntPtr
get_Right
33.&)./
thread
".J;c#&
:/l4
r8
) A\n
(+_.
gdi32.dll
333338
Microsoft.Win32
FileDialog
2 z0O
z*
& t&q
exceptionStackDepth
>Y-|
*V~!
InvalidOperationException
' n$ajJ
r9WG
R0apM9pzZ3AQs9CiOtH
RijndaelManaged
k 'r_
()))
niW]yl
get_FileName
FileInfo
/( |
u^an>
Y_?*
add_Click
U=b[P
PK
B> 1
CPZBbe5xdbvVXIWEG8R
7CYe&%
BlockCopy
GetProperty
j{,%
DockStyle
((
V:h*
SizeOf
bSCJkbVb5OOH5LCvQK
SecurityCriticalAttribute
CreateProcess
)K3]
set_Title
O@$2
boPo
.|+_
I$!U
set_Visible
vVXo8yp0wj90ott1ZVO
IsEmpty
services
/Ao
get_NewLine
O <_O
qA7chipPxYALod4yn1v
+<<</
MZB~N
Boolean
q%B3
BrowsableAttribute
UflEbjpcIQF2QmhKna2
get_Checked
d v
XA-+
IsNeedingInput
'p&0
d; N
G99a
dY@L
MethodInfo
u%k)
<6O3
CompilationRelaxationsAttribute
* 0
[&1f
kjXVSX5mjoGmqDETxkg
bb<m
*B+$
q if
MemoryStream
AddLast
4[O
get_Graphics
`-tPo
ResolveEventArgs
get_ControlDark
HttpWebRequest
baseAddress
GetServerURL
^xh$zS
bytes
LnDJRm5R6AJFKrcwlmU
e~,"A
TargetObject
wwwwwx
ZT=ZJ
DesignerSerializationVisibilityAttribute
Yoz
VXT3ij5yXKV4LIr1QdJ
~nzq
SmartAssembly.SmartExceptionsCore
% }V
d_Nr
SetToolTip
BringToFront
Microsoft.VisualBasic
3Z k~
*Q2m
WriteAllBytes
ThreadStart
i!Y-Q
nBcHuTLIYhfnMoNBl2
objects
G| !
context
| QC
reportExceptionEventArgs
buildFriendlyNumber
set_UseShellExecute
YnZN
Qq{zd
NEXJ[
CanDebug
#GF9
Rectangle
zE[,S}73V
g
cDFo6ep9mDVBLCXoIcq
4c*}+%
.3////////
pf x
FxY7bYEZVDE3GleNms
aF:F
7;40
444"
StringBuilder
get_Data
)Sif
*>2bJ
wVf)
IWebProxy
UW%z
Y092=/4BT
bytesWritten
fNs>
dbcvPvpli49298rY9Od
gDfO@
CompilerGeneratedAttribute
get_Hand
get_IsInitOnly
Namespace;http://www.smartassembly.com/webservices/UploadReportLogin/L
'CW+z
*V ]
mM@ 5~
~F3}
K O2
8pc5
pfTU
2 gx
Copy
*)MX{
| 8*/
get_IV
AssemblyFileVersionAttribute
<Vu~
';%v
NVY.H
GetTempPath
System.Text
GetName
L8h%
U7o{
IsServerR2
}jD!
SpUJda5FW7iJVI7qxsT
System.Resources
Di25
Seek
get_Registry
asksj9sSfB4uIGSpi5
IYD\
E.IM
nB1=
0N~$?5
Si#9
GetElementType
serverUrl
{869e35f6-0a8d-4b54-8455-517e78fec984}
Dwj;
A*Q@
AyXF }
'n0=
WriteStartElement
l% 8
` <g
unhandledExceptionHandler
Icon
c00w
vORsi
errorMessage
ttqm5WmAR1s9IjpMhM
);`v
DelegateAsyncResult
currentException
dQA'o
\ 2C
Show
DDDO8
FieldInfo
Font
codeLengths
y+Pv
+Bka
GetExecutingAssembly
Convert
il/1:
TryGetValue
Yv6~Qj
String
ICollection
_CorExeMain
System.Xml.Serialization
>+[ ~
WowSubkeyApplication
kVxMl
85;K
Timer
step
+o*7
UploadReportLoginService
DebuggingModes
v| ^
)_ r
InitializeArray
;G=F
MajorVersion
FileLoadException
S\jdPR
@R b.
tNPbMg583qIEXcLk2il
'~c 1
Microsoft.VisualBasic.CompilerServices
H,s>
"""4
\N8u8J
OrObject
ToArray
+\`Z>
)f?(uMF
EditorBrowsableAttribute
vkl*>
StreamingContext
g}AT
Re-d
~y@@
4|`w
User
`.sdata
9"rU5
tyDSA3AS3pe
nZ <"
}vudV
,jk8g(
Ar SI`
!XBA]]v!
info
]vWPjqT c
Attribute
System.Drawing
3.)3
_\_*
B/Bag
get_FullName
bB]v@k"/T
{n{=9
H|A
Dictionary`2
GetFileNameWithoutExtension
BeginInvoke
get_OSVersion
Dispose__Instance__
E>Nb
QgTYy45d063UtHV62AD
p<vczQ
Reverse
get_IsEnum
A iBD
DirectoryInfo
RuntimeHelpers
|Sq/
AvailableBits
V#EE
get_Platform
\MnDz
fn5$
{,ku
73)J
R6o/^Da+W
FromXmlString
b>#4
KtYV3rpuyFNludXZiF2
Object
lWH{
Step
Registry
GetFileName
ComVisibleAttribute
5Gzs
BadImageFormatException
OpppD
-'z W
F\"4Y
UIs,
get_IsArray
CwNG
()3../3)3
=(3>
ftABrA5TLXLPb7vTX36
get_IsAlive
ObsoleteAttribute
FlatStyle
d C
nVp3Q8p3gtPEvfsD9gn
VNVXrZpDbnNqvmTl3r7
AttributeTargets
uY86
EditorBrowsableState
Interaction
%J'E
CreateDirectory
Yj_i
Vup$
&^9R
5g* 7
3388
%L'[
` !6q
2 Jy
Fq<b+
oZ0]
QMJibWpIagy7EijEuxa
$&3).)3)3+
CdKuok5tDSilmOGbHq6
`\|[U
ScaleCore
qbQQJapJUZr1tLaS1mj
oca2mL5pAr1QbZwfNuN
8L
aawt
Stream
SecurityException
qluWDK
-!0yO9^
IsNullOrEmpty
X 8
% (O
+<p_v|
CanSendReport
Exit
get_Bottom
psl.exe
ApplicationBase
I k/qx
[< =
get_Namespace
)c8
7CO0Hc
get_Minute
add_CheckedChanged
2).o@
777&
pU-t
El`
`}n
BBB3
sH
)>CO
\ r]
8n>R1j
Z<d-
& &
process
3_L
assemblyFullName
get_WorkingSet64
FormatException
m'ky
OperatingSystem
]54,
HttpWebClientProtocol
!#S
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo> </assembly>
}}}n
get_IsLiteral
#Kfs
FormStartPosition
X (\
oYJSQkRKo59G1XTqxH
)ZM
wqeO
get_FileSystem
l}T0
System.Threading
PictureBox
[[[?6666
get_Month
../.
MessageBoxIcon
:U61
1b-N
UnhandledExceptionEventHandler
System.Web.Services.Protocols
WnR
R{);5
get_HasExited
userId
$0k6
DebuggerLaunched
t9^X
>jm
set_Filter
Shell
`!y
Buffer
UnicodeEncoding
zg52Bax4KUk3N22N3L
W_dA
pending
get_ApartmentState
s{t&$$
GE7NY1ppX6WIS18bdf3
:<
lG6]T,
OnResize
Microsoft.VisualBasic.ApplicationServices
GetInt32
InvokeMember
ReportingServiceSoapT
b>}nV
4 ;y
LHR
GaN=
EndsWith
Zuw']
6 M@
%"E -
xLn1
get_StackTrace
(Z7t
t]AO
$K8Fh
Nfl
get_Major
SoapHttpClientProtocol
oiD QA
7Q=@
get_BaseType
My.Computer
$&3)//).3/.)& /./
E y
v2.0.50727
nZ51
WaitForExit
y9sCRQ5cStPTX5vZMyu
z,H&
nm_0
Z(jC
set_Item
ToUpper
}uh@E
pMdr2c5wbu1jm6viPZs
set_Expect100Continue
PuM
get_HasElementType
Exception
F1IsWC57n6jCwZh5NNi
ML +
IL[YMV
get_ASCII
O3338
s e AR
.3$&////(/
K\S:
MWhj-
Y pf
set_Size
WriteByte
GetTypeFromHandle
*"1S
VersionInfo
FileAttributes
GetEnumerator
SymmetricAlgorithm
h&l-
IP O
"5 J
GetDelegateForFunctionPointer
MessageBoxButtons
222"
Int16
3333/.)&
Vo;@t
Graphics
m1$-C
y(VZ
ApplicationException
Ghttp://www.smartassembly.com/webservices/UploadReportLogin/GetServerURL
mn|Ing
UnmanagedCode
Enter
"T& C?H
3{"-
wOi'
FileAccess
GetProcessById
get_ProcessName
set_Position
>~[z
HDDH
geLp
#
text
System.Runtime.InteropServices
t lDEx63
v22[
Math
ApartmentState
'Rir
set_UseMnemonic
Microsoft.VisualBasic.MyServices
#(nk
+B* ]
vaUb
<nrC
cffyw
ThreadAbortException
Iqyc74pkBJGscUWAC5T
] z
{Z\b$~
System.Runtime.CompilerServices
XfI!m
\=NH
!!!0\\\JeeeQ666D555A
Z"m%
_?(!
SByte
ugJMwSr
<k _
set_RedirectStandardInput
9
kfK}3'I
V:\E
d}xv6
"b )
!!!4
"7GS
{f?f
featureName
ShowContinueCheckbox
set_ExitCode
GetManifestResourceNames
>hKHT
:::&
[V@O
GTSG)
email
System.Windows.Forms
set_Font
2u>%MbP4
a T
U3v6
UIntPtr
F_--
UploadReport2
MGiI
get_IsTerminating
6
Zq1~
IDisposable
fWr6Top1AfNAVG2BBpP
333333?
Exists
J|\M
KR<
?aS (
FromHandle
`sYW
N8d_
get_Current
fSh o
L1qWdq5ZKq52ki5xUUj
Randomize
p?<)
FontStyle
set_Mode
:A|6"
y2/P!
q~?l: bu
My.Application
xC?\n
AssemblyProductAttribute
E6)d
d<"v-]
Wl)BxF
Equals
j Rg
\d~=
C@0q
-\ y
<Module>
WriteStartDocument
n?
555"
MulticastDelegate
reportId
oa4rAoy33qeV1SXd2J
CancelEventArgs
4/>/
3z G
Bitmap
SizeF
get_FrameCount
get_Hour
(BUJ
6eXC
SerializationInfo
[>r}J
tJC3YQMqK2kYAZIFFm
bufferSize
% }[
CreateEncryptor
ProcessWindowStyle
ThreadExceptionEventHandler
MBTC
#GUID
Panel
###5
###4
#61K_
set_SizeMode
get_Exception
GETI1vUVBhCpTb7NAH
Bw64
RkhZ
ZnTW
K^9CE
_b`}
cx\W<
get_StartInfo
*r@
\}bq
:'m
F<0m
ToHfont
/; H

<q.eC
`5b<
;x8s
set_Image
{3 ,=
pUx<
ArgumentOutOfRangeException
X 81
notificationEmailSettings
}___E
3j,*
!8hZ$
OYwq0Ipw2HMgaw5HG4w
333333//
DesignerSerializationVisibility
!,;9
EventHandler
Ow(3
Thread
,~2~
)Feu)v
wlbjag5irtfRLJLpTvy
Microsoft.VisualBasic.Devices
MyTemplate
Jidr7l5XUu79hUP0wQC
G4z~bd?9
BHSI
Encoding
IsFinished
get_CurrentThread
GetFields
SetAttributes
CheckBox
u%z:Q
EEd&
value__
- V
get_Module
ReadAllText
%JJK
CryptographicException
L#/[9
WebServiceBindingAttribute
.D0AX3
&*A4
get_StandardInput
;,FD
_bX
YtogAo
+9 $
#Joo1m:|u
).!P
get_Size
nTKP1bKsd0ZgFc9eJl
EZ04tc5NNEYLIqQl7Hh
OnVisibleChanged
6pNp
nIuQ
Hf:f
CL|sQ
Replace
set_Icon
Zero
LocalMachine
384WE
*BSJB
ReleaseHdc
}Qcb
P.Mp^
OH}1_
<HRe
^y8gj^
lllg|||s
mscoree.dll
%G/#
X/=.
SendingReportFeedback
ZYQ}
&8s
gcq S&
X% }\
iDQS
System.Collections.Generic
(kw =
.rsrc
vP@Y
SpJ[
Concat
set_Cursor
get_DesignMode
EvSQ
wf / SQ
Ibq
+jv=7 T
&oH\
r{)"
get_ServicePoint
x5TV
get_ModuleName
j`)$}u
get_InnerException
SetStyle
~UDWgHM
GenerateKey
a=Eb
GeneratedCodeAttribute
AI`\HW
mscorwks.dll
*rm/
xuk9
Remove
HBzM
rSF)
ToBoolean
Y%
ak^0
&uex
Sleep
ASA!
7e\k
Y% :

#infosec #automation

TheSystem Itself @ 2016-06-20 14:45:02

#Ransomware #Zerolocker

Davide Baglieri @ 2016-06-21 11:57:31