invoice.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 36/55 Related 2135
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 169.50 KB (173568 bytes)
Compile time: 2016-07-31 19:31:46
MD5: f5f5d3b1c26e4df4788ec6b814b2ef95
SHA1: 64d450e157c9e00a3bacd3b8bcb15c30b383492a
SHA256: b66cb599603d14fa3f37170874fe189cbaab1f5b56fe739e4ff6b94f2e009aec
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2016-08-03 09:24:02
Last submission: 2016-08-03 09:24:02
Filename detected: - invoice.exe (1)
URL file hosting
hXXp://[www].songphuongrninh.com/frank/invoice.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2016-08-03 06:43:06 [36/55] VirusTotal
PE Sections 2 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0x29b44 171008 a522214a85ac98f7d688321f810e2501 c6858a410087b6d710183c19d6472da71cb6cafc
.rsrc 0x2c000 0x600 1536 7f070c4a6f4d01b83cb482c7dfe6ff58 b4ee1f42ab838da434cc2f46a35f336b9a79f476
.reloc 0x2e000 0xc 512 db57afd7b93b0ba1b5c65390ffc8d0f2 add665bc9634219d635fda1e6b957e4c31384e6b
PE Resources
Name Offset Size Language Sublanguage Data
RT_VERSION 0x2c0a0 850 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_MANIFEST 0x2c3f4 490 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: Copyright \xa9 2016
Assembly Version: 44.2.115.1
InternalName: jsbrgrkgh.exe
FileVersion: 44.2.115.1
CompanyName:
LegalTrademarks:
Comments: Event log viewer
ProductName: jsbrgrkgh
ProductVersion: 44.2.115.1
FileDescription: jsbrgrkgh
Translation: 0x0000 0x04b0
OriginalFilename: jsbrgrkgh.exe
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: Library
mscoree.dll
IP Found
44.2.115.1
6.9.0.114
URL(s)
file:///
Assembly Version
axr2KPLyc2kaznI93
axr2KPLyc2kaznI92
axr2KPLyc2kaznI91
axr2KPLyc2kaznI90
mCCDjCjhY9F7t4AmvT.s2Baxa7sCsQ5hjAKhg
Comments
axr2KPLyc2kaznI94
Location
$this.TrayHeight
44.2.115.1
{11111-22222-50001-00000}
GetDelegateForFunctionPointer
{11111-22222-30001-00001}
{11111-22222-40001-00002}
".=N
FileDescription
{11111-22222-20001-00001}
Event log viewer
$this.DrawGrid
jsbrgrkgh.exe
StringFileInfo
Translation
VarFileInfo
ProductName
jsbrgrkgh
System.Core, Version=3.5.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
InternalName
{11111-22222-20001-00002}
FileVersion
Copyright
VS_VERSION_INFO
file:///
$this.GridSize
$this.Locked
000004b0
{11111-22222-30001-00002}
ProductVersion
$this.Localizable
{11111-22222-50001-00001}
OriginalFilename
$this.Icon
LegalCopyright
{11111-22222-50001-00002}
$this.SnapToGrid
{11111-22222-40001-00001}
CompanyName
LegalTrademarks
M9X6LQ757iNYWB3a
System.Security.Cryptography.AesCryptoServiceProvider
$this.TrayLargeIcon
{11111-22222-10009-11112}
progressBar1.Locked
2016
$this.Language
progressBar1.Modifiers
N:#=
l_n:
5<%d
GetBuffer
\GS6
T YNb=w
lxW~
fG=@n
Xm6U
giWO
Label
PNG
RuntimeHelpers
X=Qg >
B1 l
d4`U
vrx+\#
#n*U
/PJ}
ObjectHandle
x}##
sBWFA
textInfo
TextBoxBase
?K\6
WrH
&~fu
PwfxmjRFI
QIqH
)E|E
I wNv
';OhBhW
5g+nj
LU ~i3
{"n_=xA
NJdgEfLx
KFPE
SW(V
g O>
WtMrMeSI
TOqoKBRviEs
set_ShowIcon
get_Copyright
f!w
oh2T
get_Controls
qHfo
~RB9
EG_i(
yhul
CryptoStream
;dM2
sXh$
IButtonControl
s}e.
Ax4x
WBJ-
tx8:
Int32
H0TWF[=
AssemblyTitleAttribute
PP@(
*j+
jmlGTPMNUEF
2z
NlaZMGsRj
Marshal
<qgc
Q.# 'ap
~; dzB
hSpU)]
-2r$
laHPVgwAM
AsyncCallback
[@t#
m?lj
m_listSeparator m_isReadOnly
FuN/)
c%6
qB0-&2
CompilerGeneratedAttribute
RuntimeFieldHandle
I8T?
cQCINCbSV
LM}F
@H>X
SEDHWS
f\hei
+KT|
mscorlib
ghfpbdjdxj
vaviErxUTA
{j^-h
uO F
EndInvoke
y&G_
"Os^BmSwL:
oMtaK3D7QMIh2j3Z2S
flags
\ JU
d@)et
!6==m
+ zPOd'
Write
wKHtHbYGmhy
jXWb
~pOkU4
Point
-r'~
currencyDecimalSeparator
H1u_
7Gfd\
set_MinimizeBox
A+-:
7rc
AssemblyCompanyAttribute
9hLJN
cz'k
1MST
,B)cj,c
t,JQ
/j{q
GetExportedTypes
If..
__StaticArrayInitTypeSize=40
J~JGv7
m_useUserOverride m_win32LangID
njVC9PQJIDfHYNVoec
&&&& 5
iC}^5"Y
rlmmDtEgLK
&&&& F
&*(/
&&&& B
NQqqX
6e}m
1-~W
t* d
)/<W
UB?J `
'?cV
wdI=6=
get_Assembly
PADPADP
G3]4
}5yJ
/dm{
7ZSp
SqGMSvQGAv
K G,G4
)vFk
ORFXpVXr
AnchorStyles
Ct,%
dcK"
FromBase64String
F`)b
*r ;y
vmtdzGOl
m_name m_dataItem
h Qy*Y
EC5i
get_CurrentDomain
`wV3l
F{a3
set_Text
QKZQzgjO
oq&1>z
"X<\;p
=O;;
OGzqxDNpUW
R4BT
#>p%t
Control
?;U
nKts"
+ y"
T/N!d
BLKxwHmO
|2Zj
)Oo&
S0OD
:e[`
9SnR
^if7
BindingFlags
Type
!z Y
pU=} 5"
*J+
System.Text
\D(7
_L?mb
98`Ax
HkinIhtK
Cs:"=t
EYbfOXLfVK
n %]n
Z0 h
g*p6mpI
hDtJKxxAN
gPGBGjNZW
O2k=
DAwj
%8,PzV
>/e)
;>Xs
<,7U
kB w
numberNegativePattern
IpbO
wx$b
n1S"
LGNu
j"8
/h~pqa
CreateDelegate
2(7s
u'F[
;G[[I
JkDoa
HashAlgorithm
set_Multiline
W,l:_
Padding
OPKqlg4EFlQL3vVBAVA
zB3T
:]aZ
JBTkTaWkV
CIB>
?^n.
mb"c
OqDU06YllK
ResolveType
Zq Z
FJHK
}TH'X
4@Q7[D
26dh
=Mh7
qJ[m4
s '?D{c
Version
9 }B|
set_ColumnCount
a@4_H
Z=Hu
OqBxfhxpEkS
DialogResult
bG9xYc
;w|V
6B>G
xZZYAQUjxhK
.text
qN4|e
~! +
ce4DmfsmSrOT856tDgfrkMb
GetString
~J!~
SuFbgHbNcom
Component
b|Qt
ThwEtARMwOK
4&sj D
9;l$
3WpR+
oh-~
k-92
Convert
R*P
.@=*
Button
object
percentGroupSeparator percentSymbol
FlushFinalBlock
numInfo dateTimeInfo
dib d
jqCAMnifMs
%gPJ
FI]8
ViiUUXhMl
H5j +\IeK
1NRT
mAk
At|+
(, G
$VDP
FlagsAttribute
?y?2
PerformLayout
Gc4C
~KAD
*{'K
`HAQ
KcP9
brWG
emBynBNmAqQ
IERwOvki
".0/
UrU
|{&>
CipherMode
B=&(
\-e *P
u5(Er-0
J;_(a
bEem
;!`d
<YrLo
@>L~
;, Z
System.Globalization.Calendar
+SZ#
ep8O
set_ReadOnly
tQnlaDhs
`.rsrc
Clj%
method
%./0
FaoLZDUFKm
[N~S
tjV
d x(,
IconData
mCCDjCjhY9F7t4AmvT.s2Baxa7sCsQ5hjAKhg
M`I5(
`ph\
[O, _G~W
result
/Y]wG/
Q5m:M
.ctor
'_<Z;o
-%n-
1^F
get_CodeBase
QiFm
*E;iR
8Q$T
}"1dOW
jKb{
|_ *
qfg=
NF7
MVxmMAEUO
,V{~^w3T
ZbXE(
IajDkyv6N1pFiY6gyF
@Q5=
&$
Xj'
UaJ
>e^K
D9zc
epM}
bktgjtTjD
height
?!gf;
kPsP
[BzV
M m(>fz
o]KS
Xr%]V
Y)~&
.q]l
o 9u
hR|F_b
SymmetricAlgorithm
/NgL
TableLayoutColumnStyleCollection
vagD
JhQrgFlW
w<=G }d
>d83
N a_
U9o
*1Vn
GetBytes
[s_1
~%6Z
W"4tY;J
ueMoJtSGpP
>/db
Nzm*
^KFa
A yC
3Mz]\?
b
xF|e
zZVxdwFnySr
^QJ{{
dMFtOgKQw
#2H'S
set_AutoScaleDimensions
`>u\
rI5=
Dw u
` "u
.!9>%
nativeSizeOfCode
ueYF
sa~W}+
i '5
zrj
fVHvde4MDiqMdxgMAB8
>+q"P
Q\N62
SF{Pv
RRuK
.lt
x_2`
pss5$
9k~*
B !C
;%Q:
pzfmH+
^m(G
_^IZ
1/e<w
System.Reflection
h}rQ
AQ.h
F_ap
System.IO
RowStyle
WrapNonExceptionThrows
N$ -~
System.Globalization.TextInfo%System.Globalization.NumberFormatInfo'System.Globalization.DateTimeFormatInfo
numberDecimalDigits
=)K$w
a=j\
hET`
Dabbwy
percentNegativePattern
D 9C
$X:H7
[$AO 4
dg@U
wkYSEMWXU
KfCwoKMjG
0N\
"ca~qx

__StaticArrayInitTypeSize=64
`EkH
a*W%
l^#[Dq\s
IHDR
8W@`
;gIs{k
KC<.
KF[Wg_m@36
IconSize
Ty6F
BO{<}
E op
&*8`
s?.g
.Mn5
It)(
5Y:uf
`3&W{l
3sO]
Qr?rpk
System
EventArgs
W:_-
%jz
Application
_(!
y/G1
vUO10
AChJZPKP
System.Drawing.Icon
o$ t
"N )
AAS'
B)`ss
$"&N
3zX_U
c`vu
ZtR
hjFq&
3:%"
{Y`?#
-vt w
Nt+Rq
W>:*
1?x`
2M<
$`c1>
MethodBase
#Strings
J69IK
dh7V
f,bJ
System.Collections
5Zx>
set_UseMachineKeyStore
@I{{m
U =c
get_Company
t(Sh;$
oBdQbzjytW
f7(u
s`_ 3
QVcQhqElDx
s59JmnigMeo2wXMRJN
5&Us
Environment
gx~KT
Event log viewer
currencyPositivePattern
bfGVfbkNxk
a'Y[
axR[T
digitSubstitution isReadOnly
x jP
width
B(Md
3 m M
wWSSl
(Yhm
bg^Af#
T#1[R
iV|:
/OZD
*.+
+BRN
rknAJPpH
vtmKdlFNw
HF_8-Ts
G6KDM4T0Y
TgSi1pAeRxLuMcLcpn
System.Diagnostics
Tq1N
GetType
set_StartPosition
oi-;;1q
xgewyJlVo
! et,
E7M-8
;eUb
ns#\
8nNT
AssemblyDescriptionAttribute
o$Q4
'r]M
MWA5e2FTupqOkfoxV3
Activator
onjR
]>[D
HY {
C3Tk7t45EDc62s5kDuF
9xeu
m ?=
Sn4:y2r
k:u%
P:3Zzp
MVmL
^N!X_
zeQL(
set_Anchor
78a{q
ih@Dsz
?XlD
o_r7<m
B--R
{ho;
)zk:V
&&o$
<vPT'
KY0xSejtbl3iYHlT.Resources.resources
}%VB
lLKFvPxufU
7^(=
MD5CryptoServiceProvider
[|`E
D+o4
tNLx o?
get_BaseStream
w\ [
;r_;
_CorExeMain
EfQbuFVpN
j5^~
ScrollBars
EEDiFNNg
#?x?
F?|s\_
]X`:
|a NN7b
EAaPjLYyUM
?dRc
emrvmN
pvaN
jsbrgrkgh.g.resources
T&u?
_d5!
AssemblyKeyNameAttribute
)$eW<
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
x`;j
WGRFb
rs~{
>\ gI
get_ManifestModule
hSystem.Drawing.Bitmap, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
NqGVrpGr
mIAuCcJfwR
Q6Fn
ZZy%
wHz%?/
9p?}
.z4\
WxoTRaHN
BitConverter
tiF<
)W.>
vT2
H@~g
XgBrlupUQln
lGg
B)[gg
8<*8d
e{g9
Go#1
bGbsBpwsHQS
m_useUserOverride
?K($D
VglcpUubquJ
jsbrgrkgh
AHg I9
`c-M
Form
8h'V
[~$Z
$=]`
WbAqQY
PR.j
llb|$
s^Q5ZU
CreateInstance
ko |
vlmX
y%Ms[
Delegate
L_=)
AssemblyName
,`dT.>=
xzJOHwlkNP
/ w}
AJme3b47EgjoLkyVmPG
"gg
!DRR
>);
p%Jj
Q?~-
gtbI
N,nD
X7]v0
a:/V
.?1VQ
"c<wd
RunInstallerAttribute
InitializeArray
r{Fg
iZT]L
Yf>d
Gel4PZ4nGjkdaZqAdVC
X eF0
Enum
set_ScrollBars
-;F?
s.ZPq
T&O3
xTnxNeftN
O16'?He>Y
Mvp5
g`/-vr
>6m`u
<G&wY
w,YH
D?-W
le?`v4
BI~qE
get_Length
perMilleSymbol nativeDigits m_dataItem
kogvtVbiz
U-9
DESCryptoServiceProvider
Rk6V
Of9Gaf2
_J}5.
UGg 5
sIxOxnEALh
m 0?
FuZYt
:l"]%+
mjHSDhhSHa
QK4l_t
<HYgsc
&&88
(4=i
_`"
f_`X
ValueType
lq@ Y
$R z
]iSL
d bC
mylMv
=zm
kgzj-6
#~i!
TableLayoutPanel
M!B8
V~(]
a!wy+
.hBy
9-Kz
z}"
!4OM
Trim
4:)4
JmQ27L4PelxEa7ai9QZ
-F9
validForParseAsCurrency
p2J)
2086
System.Runtime.Remoting
kcjdGeGbnx
uyx*
xwh-a
J?a|
>2v1
XYF&n
6G6M
(Wr}
PeqT=LD
,gq@
%W[P
LIy1
&QNuKK(
#bp
w I
GJ!E&#,
Udr
FormBorderStyle
S& G8
xURAtWqPVd
uf;W
UInt32
ToInt32
rQnJ
mNXUVWMvKWFcE14G7t
%xm^?
get_Version
set_Dock
F h>
TYx {
ToString
Zl2g
n^Mu
DI=7
LDm w{
siRJIm4GDBfK1dD4G5W
!,\;
/rwj
SFljJVuMY
28ag6
;RF
8do^p
cNvSVjgvzr
|\1n
FM``[H
H\.1U
KszNNQvfu
PFKkTMLzFff0ZRbFY6n
Y}s-
pR8Uwqv4tV
|6r8
Unwrap
Isd9
/ZE56
jsbrgrkgh.exe
~E><j
oV %
ICryptoTransform
i~ccG
GBT!
HYcZGMVo
hk8m3
pN!Z:
AppDomain
o,
:mGb<[WR
d<M~
d%H,
AssemblyDelaySignAttribute
Dc)CF
OVRfmjKDzEP
`k:J
FU787
] :
Installer
set_RowCount
System.Security.Cryptography
iV2f
add_Load
gwTqR
PN8-
MemberInfo
ZtrKzSYekhp
!iB^
qH7%
l\7
nPvMJeDzAA
mD<k
dA.'`
]^68
Data
~3gHq
uKZ
oqiUMpZnpLd
I^mh
g "Dh
KT'a
#^_%
ToBase64String
4 i4Pa,
currencySymbol
numberGroupSizes
/nwE
bL6@
dILdC
Hi8;H
numberDecimalSeparator
pHYs
Lq?5
Container
|e_
g Ef
[MSA
huQr
St5.
,_$*~8
4`?vA+
Invoke
%w*J
I|4Gd
wA\~
dMsLSuyqk
`MZe]"c
EMWD
wfwJ
V!lf`
zV{+~i
iJbh
AB00>
N6c+l
TL_`
sAD/h
* 8x
PoF X
<y'\
wrgfUfltQ
RV12ifIQqWh7yPOC4s
U #_7
"g * GH
Module
T '\
Oq i
NGqX
T ]@[o
Array
XYz?m
BnM7t7sUyl2hrcyeve
aR3nbf8dQp2feLmk31.lSfgApatkdxsVcGcrktoFd.resources
&u5,
i5K-
@.reloc
v2V-H
|-G1
pf Q
LExx&
#8 *{7
VWcHIUmhzW
Flpy
VW%c
`5@W
f,|]!hq=\
A;H)g
Byte
info
CryptoStreamMode
currencyNegativePattern
As3
Dispose
\:22
:z&D
get_MetadataToken
set_TextAlign
A.J9*Vgl
^df6
)!-
vgTNBHhKJ
0z|2
L`/ \uv
rqSnBVhBxNHoQmHs4X
Attribute
j7a70CYWs
CSmqZsrB
OKvKf^
- IB"ZR-*
<b.
A7[nlD
calendar
.\]\Ud
numberGroupSeparator
I N,p
GH]<
System.Drawing
mSMmZrAiGK
get_Location
U_55w
QlScFMsP
QudcZBcDUYD
ISystem, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
+N{u
comp
jsbrgrkgh
<+E+w3y
CPwizDPDFL
>:sss
*>+
zh9<c
K/RS#'
set_TabIndex
sqvlYFseNT
U'oS
+E!8
X(Ls7290
j3.m
th?
CTtkkkfoh
?X>
JYkgu11jwHF1Q2uMIc
System.CodeDom.MemberAttributes
TE~TA
FileStream
o ^:l
t.qf
\
WkSB
Q7C8
a3D
q:K"N
M,\FH
!c"8j6
Qy~U{
q,7y
Assembly
1mNr
5^gC
myOW<_
get_ColumnStyles
Z1f*.c
!W/$
vkg
&& /
/)Nb
IDisposable
Rxt]
xU9D734BXxAluNgnZA1
?~ .rZ
System.Drawing.Size
6lD\
vRQ>
SuspendLayout
jSB teb%#
Exists
u*=J(
;MX,
ng'K
!e 4K
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
IGrUmHVCw
Size
zW+o
=2(
U _HI
BzRncYSnM
*M!X2x
fe[ Wi
] ,1#
-u7
wZ,va
0,f[o
}?Ps
UlL*
qj[f
5(ep
<Qo1
J[ &
}V,_#;P
fFP[V8
RF/9
O~16/
tE:u5
t^lD5<D
IAmT[#
IContainer
t/``
*.{8
get_Product
xXYv
V?3`#o
GetCustomAttributes
oQdJSonfNR
_"0Y
set_ClientSize
~Oj%
z1iGV
})kR
X NA
7G4{
3 )I
4L2R
EfVaRUxYMB
QB Rb1
yN%}7
?lpj
h4
gc0y
]m']:
~ K1
#Blob
q#m
F5Pj
TableLayoutControlCollection
44.2.115.1
3Q9*
!"qF
h~I@
9=10G
P` _Y
JqqMhWBe
i@wr
X!`0
RuntimeCompatibilityAttribute
mEt'
JJN]
GetExecutingAssembly
Gvn>
get_Description
NEV}
PropertyInfo
|1*eY(
|!C
UOtXtjlUKy
pQ6j^6J
CF FO
'5V|}
}r"F
ContainerControl
#S?Z
$f<O*e
-"-
]^m;
l^SCX
T4]' }
Y. AR flV
UYUZ
n4N4
o2|i
|&p'
'zoPmy
S+&5y
yubZ
#OD^
']+f)&
,. uH
UEa,
MFkycENG
0 #L
ReadBytes
B1~I3a
C&\q(V
8V =
~QM 0
8 ?~W
eMbGkttq
jY"(
i-6v
rh3Gw_
k Rg
AssemblyCopyrightAttribute
}QF.
rIjAFQHIKy
r+Bb
#>M\
g\XD &
cCmnAfeGULT
OF7gFFY
F(FI]
classthis
hoVs
"*(Sk5
TJETgI4HUNGjSuUFhFm
Infinity
*hx
N8m2
n_UR
ColumnStyle
J Luq
]<F"
cDeBBSgTC
r&M/
Ud7m{{<
FileShare
^#~!Q`
oMokX54RU75fmcwGXHH
5f z@
d|vB
set_MaximumSize
lqw!N@2
bLHVuLzL
|{3B
:'3a
set_Location
5c_
j~TW
zKpXRTp8gFpMY5aIW6
#Ej[J\
|\}2
MHch ^E
]cgI
currencyGroupSeparator
,&d8th
;0oG
Q<!h
PEgklOHUB
"Powered by SmartAssembly 6.9.0.114
BSJB
CdNETqNsHZF
jjnFBkcYEN
vW.7
..)dM@
Read
+f W`
^pM
-}bz$F
RvMd3
value__
*a 0
!X\K
6d <K+
kWS@M
gthyuzhDBN
`wa8
q|u,rQU
y['
@ /
lC.!c
Y/_@
:}I/
sD68y84KMi0mvKvJMUR
;6Of
ZVsX
gAMA
YuRS}
W]IC
/=WV
AutoScaleMode
DN 8
u MaU
.cctor
.+Qz
SortedList
\ ~0
set_FormBorderStyle
1AFNo
}bY4nz
N(i{
FileMode
/ \&
PEc1La49rUNQPtLcnCy
GetMethod
?)SD
jv.
VMuZ
Y>;3
\Dufa
set_DialogResult
ControlCollection
mvfw
|+0s
RSACryptoServiceProvider
3UU\
o$\D.
,SQA
?+'/
/ ;r
naP1Dx4aa6AOgr1L3Ff
f r]
wr8*
IUWudsIp
`\Ax
x4@]
|sIK?
fVET
"LR1
RkTQPFpcsln
RuntimeTypeHandle
\EdmE
E&e#
Ywj
H\t8c@
> %`'
\8*J
$|$`j5
AI*DoZ@
s|Lc
~@F'I
*ZsM
HG5u4
NV_e~
pVzc
A? W
EgiwA7RX7YoW7OrP1i
{x5_
Auoo9O
OoUh
CIC::T$
@D-4Q
DWL*
LloZ
0{\.
6W3yL
b TP
set_ShowInTaskbar
&w"wE
2o1X
EKa
}&>zJ
JLDAb3bDvPUB1rJH0L
QQKfVEIPY
>fc!)
& "[
[.O8b
set_Padding
1W?d
J:}
TextBox
74MC
ObqsN
NzdVpFupa
@X5q
mT ]
>zBK
J#I \{
Di |
\ly!
2%"b
NJ Y
N 8}
*jsF
OT!h
set_AutoScaleMode
}Id
qW^L
3T!U
percentDecimalSeparator
4\* m
>(rp)
:sr5
elU~X
WmLigCvcgKS
hDZtS
/QQ{
J1=!
hp8H
SqaZn
ez`Z
System.Configuration.Install
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
7*[!
Wlg^
mUQljw
GF!E~ix
'S)%E
;5S
mscoree.dll
!This program cannot be run in DOS mode. $
_#U9
callback
7Py$Tw
File
ycnxFwjjIIi
* 8
6botl
M#xs
Cuq3Ltx7ASAMNdu1wC
=Tb\4
x +u?
<4-Jl
HMlm
OA |
BwQzf
DL0k,
%lF-
$?f(HY
:D?03
-R?
UQR`
LI@c
gS47cNywdHPi8qbKh8
Binder
@jE05
zEz?=D a
M;!
=4=3
MYP
j+!P
(PgJ
~WXMjPd
H_y4N
(A[/$
9bOY
x7%_
l+\^
HR j
PoweredByAttribute
bVYUkUDUvQ
eMzmvrHD
N|/y
~Ej>
U\)6Y
xFNZflWI
Vz,$
T~\gs
>o U
Lh-P
1D ?
s7G]W{
OQ6 Br<%
#6Ss
bjIc
vOoXUtgaS
fUZh7aH0CYWsk0A3UP
z{W:*l
bhZvXbWZC
ContentAlignment
op_Inequality
p,7/
GetManifestResourceStream
mHsJ5IW8cf18DUPSHd
rrp]
J1C{5k
-8I{
;;Rv
c>E[
IntPtr
N%NZ
iWig
rg(I
W&Gc
z]53T_sv
{i:s
||q(
v`1e
\,"$-
0q'O
^?K}<
cMqYKkySU
0d2C
GNBf
NQMj
+(>
8^+?
E2<'4
?/B)P4h
ResolveMethod
Egb!
sPQUcmzd
*D,cY
~<}T9
i CB
O-wa
xigpUGENt
;%[{
?P0n
pn2L
8STs e
P$,2
un[{ :@Rhh)0
DC5h
77#nP_B
J6~=
H{sz
7_SD
uUjN |
*#z:
F}D$
r]rNKtJb#
D"aQyb
"gta
BlockCopy
&&&&~
GetProperty
D4 @N
O?RY.AXE
.!N`
B=/S
=YlVUY_
(!
mFt&h
6?8w+`
W)=s#
>A;(
vfpCSYIU
kdroFhdEkV
$ 3
lZp0
86o#%
HBs3
set_Key
VqDjFrYbc
}v.
20V>
=By>9
udg_
RijndaelManaged
mn!I@
168&
[@;1
=5_a
7p.G
typemdt
e a<n\8
V4+#
S2So
1Kk.
|Gbr
aRxTtzhmS
4yRQ[
ZG,HU
*vROvyF)
MethodInfo
F @LJ?
c1 S
PAsA
|zID
DViyhWzK
Wrr-
CompilationRelaxationsAttribute
* 0
"fHh
7+4)
-1$(
m2S?;F
Hashtable
eNgWMSTk
hv~|
MemoryStream
tunMriJgRZJycmuHD2
N[\#
0J F
H>#%
3d{z
R &N
rui%
VFGhJaVN
_-P`L
s4 I
yz'S
bLLjvECz
Q:i'9
FP+1
O- Do
mwq}d
>a,J4
^ .U
culture
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo> </assembly>
Y)yL
7e;R
$mo1
1)_3
IEND
JtE7
oJZoLCvbN
Path
oz
tWQX46uKM4T0YnlgfY.dgNh2VawfmjRFIDmhC.resources
J[>Z
Ps} >
>V>b|
xQO2'jh?P
Z9;A5
1f^uT<x
b(pl
L9e{
[3={
1XOa
FxDHCLwUONX
O],s
K G
vqKIukbSD
5a6-
} Ut]
WmycOe
AcM
v+eJ
)|p
DockStyle
~%1D>
<l0
jr|jL0
K$} Q
JfGoATtON
")Q(#9
8lzN
TS\r!
8dtX
ved!>
System.Globalization.CultureInfo
4GA@&
H8l$aQ
NzQY
XB|x
W8s1
amf`
ComVisibleAttribute
ki>W
System.Runtime.InteropServices
m7L<i
kykI
s/A J
Zm&4
6/ZP
WYvG
tWVR
Copy
AssemblyFileVersionAttribute
@qu>
IJNOT{
GetName
get_Unicode
=9W"
<Ge=M
*:+
~A i
5i4*
>m2L
7.y0=
-ro a
b?y$
c$%+
T#;\:R
+\vg
-89
(3
System.Globalization.CompareInfo
set_MaximizeBox
QIYs
09vzG
#z
*-HWP
R797
rTXf6v74ajk57DDXhd
&yA!
WxctRrkOiM
F|Jw
`u#m<
OuugNvgAA
LB#kX
2na,w
b,0W
J)Jk
__StaticArrayInitTypeSize=18
0 0
__StaticArrayInitTypeSize=16
j9PHhm4gQZldaKqglKU
BinaryReader
9.@VFu_2
FieldInfo
TpsPVHEIJc
IjIQGUPK
TBE=
8 .E
R oM
uhNVmdkf
cS<+
String
5Hy
OAoKOwrPxp
,O#(
positiveInfinitySymbol
TableLayoutRowStyleCollection
get_Title
8K"
E2 Y
XD=y
5em2
>>KQ
Bu3{
v5&)
pJGumEGplUA8VBQnpY
XKfTaVSh
Z`X}
b2uO
j4 &r<
DebuggingModes
<5`w
>j@NQ\k
~?<>
eCqbIIRzVw
_g}M
FL2J
Z <_
L5q7
b v-
ToArray
'tz?Qy.IS
fSystem.Drawing.Icon, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3ajSystem.CodeDom.MemberAttributes, System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089mSystem.Globalization.CultureInfo, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089fSystem.Drawing.Size, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
jO3n
k"T%
rLr\d
pH]k!
eHuf
v] oA
t#j
ym3A
%X:1
<PrivateImplementationDetails>{0060BF74-9A7E-464A-93CE-D588475E260F}
uct6
,;Hn
jUAx
t0Au
S18%
K~:]1
t:0+
:'h
SmartAssembly.Attributes
*Sds
Load
+Z=wy
Ed|Z
bDf#
r_Ys
sQiNChqdt
1~Y%
78O#<
Yj+b
8#%iRb>
GfWuQxREmz
set_Name
`?Mz
GetFileNameWithoutExtension
BeginInvoke
&p+V
.q B&
~_e]Lm
DebuggableAttribute
fkV*^
w-Z]%
CallingConvention
7DDH
D"Iv
Uhp{+
~vo>{
g\0{H
Reverse
MLL<5
# u0
UUa
Mc.1V
j W-
M }i
=&k2
n\!
>PsB
4#uu
1S%&2
7DoJb
Ml@
(UC|
validForParseAsNumber
UserControl
5`ITB7
XQZFzAnORG
.:? ,
Ox&+
v|?h
|J}rt
I \:YP
9QlVb
I-bH
NY~<
F8eG5q8eHd76LTC57e
x.X|6
J(e-v
i 1~i*n
[x%y
_8\AEH
Object
hzGk
*6c9o
O+K]i
\bP!
oV8H
sCkJ2(
xxMZZTFX
\PaiM
set_AcceptButton
}7:a
UTkw
`l{i
:] e
tj^ 0Q?y
QM ~
.oq$)
.&."
zBEkLMgn
[8sG
@7htb
ygovJVcoe
NJ2AgV5BF
o0Ca[
8)]2
_rca
e)|9
|_]+
VR)3
r}>3
AssemblyConfigurationAttribute
m_name
8O5e
S/Gi
f&r84e
<?2 h
qR/*
RyEW
K eK
okzq
%System.Globalization.NumberFormatInfo!
cuC
dB9|R
-? |4}n
G_r?
NKEKo
DJUb>_
TVDxM
t:)v
$o,
RDkPMZspMAx
QIkUeZLF01
Stream
SuZaMzyNmcs
gRfhn M
|3vL^
y?;$
<Module>{470780C1-7273-4DE2-B000-4C8DEE63D307}
i[CT
SizeType
.2[K
l< "
{Z=!
Exit
zAtzMOEksD
xZM
kh3y
=zvP
zKWtFzxt
cc^k
~; [1
ybxtOtPZ
SbJu
/E+'w#
uumu
5PoC@
z#gASa
l5Lj8
<jl*r]Pzc
ResumeLayout
*"mL
ZxCjUBGg
,Gy:
~gaiZ
uQ0(^}V
o[!R
SFU4mbT3GMret7THonf
9d2myv@4
xoun
;M b
percentDecimalDigits
k vf
P-m<
y))U
Q/O
f[5/(
Tj;
#CX6!
Lb77
,``f/
Zero
B&k|`
kfv
a,ra
FormStartPosition
@eY[
JRzjMoQSNJQ
qJUByldD
=|M.0
Z)\3
cx;
Fqe4
: dwa8
?k@K|
6hY0
Z'oO9
?5qT
jORmkOSaw
iQNg
U0@WC
)J<I~
mY-8/
z[2}
C5lu3
||'{
+LEg
^BSY
QZ^&
-#Id
^p7N
n1a4oB0/o
1rLWC6
set_TabStop
GuidAttribute
LLcVPZqF
VG_R
Cnd#]
1"
^]>u
S 8"
?>Rf
6f"s
iJ8^3&~a
currencyDecimalDigits
\bKl
wowi
B2j|
@\3*
&&&&&s#
&[;f
set_Opacity
LreX
set_IV
UoIaxCMQG
Q;O2
X0bH3
rc1F
>NH@
!?]Z<
q'~
+t=#
&Cr%
RGTuN4NnuxDOaVm4yO
@{cB"v
10b>I4
sr"=
)*G.PjlU
nYdyKumqIO
wl8cM
ROiR94o9DmZC8B24yr
Z*AMu$
IcoCmOLicXq
os,.
Oa$G|
*|25
>n$8
'6y^U
/4UB
.;S9
ajhc
- l`
Copyright
1mf2>
v [[,
W't *H
JHdH76LTC
~S9S
__StaticArrayInitTypeSize=32
IZ-g
__StaticArrayInitTypeSize=30
NRT8OI4pJPWItM9639j
vmfIvRoAG
8x/50M
yYAu
lkAEc8BN9RhbnsIIUo`1
v2.0.50727
xbr>
&r_J
U-rm<
negativeInfinitySymbol
7eL|
bmWCDHfv7NktKWIGqt
-Fl""
j}A
7bXM
:o<J
*{wt#T
lH$8
Vk3b
$55c8c841-1099-43bd-a72e-d0ebf7b22657
uP}3
$'w"J5l
gxLauMcLc
*Ote
(-26
(5fc
set_Margin
=9IA
z: W0
set_Size
GetTypeFromHandle
IAsyncResult
=m$E
SaspMcHq
!BYJ! #Z/
CreateDecryptor
:S[$/
C#MS
"g49
p;t
QHRHKToxVh
JHzeKlVgeEu
_;*T
percentPositivePattern
ke=l
;co%FnG
Y44Dh
#l_-PuD
ansiCurrencySymbol nanSymbol
&9jd/
b=9U
,~aGiUG
Q4S$
jO1^
q`cW
0KIDAThC
j7N:
{7QN
e{sF+f
A pe
5hs
c?gv_*
%!kU
GetValue
Wow>
]22
HOL|
~hYg_
FileAccess
Glsc
LwH'
2K%,
qM ?J
set_Position
nhwYPvPVX
c|B
DcqNpUOl
PP3l>
@e-1nb
]:3 7
B95#s
mNXUVWMvKWFcE14G7t.tcin6XTNu0BteNml3S+RV12ifIQqWh7yPOC4s+lkAEc8BN9RhbnsIIUo`1[[System.Object, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]][]
B7-qz77
4lT1|
swKDjEPo
534
7=o7P
mz nEXa
Z3}1l2
UnmanagedFunctionPointerAttribute
/C#~
8f>[
-Infinity
Fr jS
qH: O
}?<]
2%ry
i
7!q#t!
pIPREOylPJT
i! I
IComponent
System.Runtime.CompilerServices
48E
gXr_
?w$J
H@0
get_RowStyles
=e5:
a] >u
*
0@/^
!4o|K
Tbb
$^<t
mr7f
@c%>
-'w:+z0
5hb
TransformFinalBlock
yeyP
yV2d
at*m]
tDgzKU
ti@$
D lC
<4a#
p!b
\s<W
I`l`86-(
nhLo8
M5L'5]
bdgdE
Close
YkeoEbMJHn
f`aX
`.]}
oEcqkqhP
Me7@\
)3zS<
]CL2
Installer2
Installer1
Buffer
Kr|v1<
currencyGroupSizes
set_Mode
tcin6XTNu0BteNml3S
U I
i/F
54nB.@
exMN
UgYA@
cultureID m_isReadOnly compareInfo
T9)i
5 s6
AssemblyProductAttribute
~@o
&&*(W
X^#<(
,?h=
gbb5X64OOD3oY7KRqcT
<Module>
iokz
rhJkiRjX
1x6C=
&m{z
MulticastDelegate
KJ^]Jj@
ComputeHash
*A._
iCtw
J"_-
SizeF
qqVlGrBci
|-U7
~oTC{
2016
| 'Q
yNcNatpWFb
tj,"
DBKYGc4LXpsGmqlWQUM
+W ?
DgtUWkyVyGe
DsC"
rBj`<
_73B
*BU+~
xApCsoVudlR
41<r$
y"*>
CreateEncryptor
TzMUHwMm
fdUNypQk
Q_z ,5>
SIV.
_b`*
CKP|
LyM6
#GUID
WX~@
U +e/
N?RD
\^(-
kk]=
]`WC
f%T [
V`\0
?? [*
<&$we
# 1Wi&8
^k/[
percentGroupSizes positiveSign negativeSign
huTRqWospg
&evb
XlE|
0bra
;`[GkK
&&*(
1ADI
?j>]v$Ci
lyfnNl
E ? ^8
]?b
(bn
0%_k*i
GUn
BO7q
GetPublicKeyToken
System.Globalization.TextInfo
#9?W
EventHandler
n3:6
@l{}
P4f-z
ma/C
Mr8OqnCE9goB9DsKbD
bkly
Tk4
N]TmS :

SetValue
Encoding
win32LCID
4 :i
jQRcnKWkW
M^[,
GetFields
*Z+
y<R>

Eyih
*gi2
hJkDCDgh
__StaticArrayInitTypeSize=256
_JEd
}Ki1
ou -=
c#\)
ES:
tWQX46uKM4T0YnlgfY
+X=R
%jH*
m{r+
Xi7
1M~+
FhpX
F?1o
g vq
=v=+
T~dt
6p\
InvokeMember
6G;&
HD l
dVn`
Hvc.
r\> V-
!8Q*
Replace
System.ComponentModel
m+loj
AssemblyTrademarkAttribute
c&lS
K >_
uEkzhRryV
1(J|/
jqb)*e
aK\l
g 6T ZRN/uR
4 4/ (
dB33
BDdhVxGkk
hEYi
Hksz#
IH n
Wp}[
[pd*
]!(e
dgNh2VawfmjRFIDmhC
nAxYEXEvh
KyYy
wXUlGYbg
ojx
?v+)~
\h!+]
:2f q
}D_>
4`4,gD
amh/
|IDAThC
HSFk72
System.Windows.Forms
{L }
pSx)
JxIAecJxM
UUUU_
VzCC
xl~Z
x @vR
~9FE$b(
w-3\
=}sSc
System.Drawing.Bitmap
customCultureName m_nDataItem
3jvh
?_d
HDTp;t
yOZSPlHP
&9 T
{&%P
c9k-
! J}
disposing
[QJsy*Y2
"_I$
|wQ
*`8i
pzk{F
VwO%
*? p
7lL^
rU}z
LEOoEQgq
Rzzq
wyvXkYtg
,_La
nativeEntry
(zj>
bWtBWSkgnX

#infosec #automation

TheSystem Itself @ 2016-08-03 09:24:02