Warning! We are currently in recovery mode. The complete archive is not available.

Sample details: fd47d6e1158cbe35711ececb375fddb8 --

Hashes
MD5: fd47d6e1158cbe35711ececb375fddb8
SHA1: c92beadfb1a865e16cbdf0439c4991cfc292eddb
SHA256: 2d36e4dd9d8a998c8d456f2d2256b6042384f1049e702a359104e2d66e681b66
SSDEEP: 6144:VXUqb7bxSyTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTR:rXDTTTTTTTTTTTTTTTTTTTTTTTTTTTTn
Details
File Type: PE32
Yara Hits
YRP/Microsoft_Visual_Studio_NET | YRP/Microsoft_Visual_C_v70_Basic_NET_additional | YRP/Microsoft_Visual_C_Basic_NET | YRP/Microsoft_Visual_Studio_NET_additional | YRP/Microsoft_Visual_C_v70_Basic_NET | YRP/NET_executable_ | YRP/NET_executable | YRP/NETexecutableMicrosoft | YRP/IsPE32 | YRP/IsNET_EXE | YRP/IsWindowsGUI | YRP/HasDebugData | YRP/IsBeyondImageSize | YRP/domain | YRP/IP | YRP/contentis_base64 |
Source
http://download.azaleanet.it/updates/proxy/azalea.net.proxy.exe
Strings
		!This program cannot be run in DOS mode.
`.rsrc
@.reloc
v4.0.30319
#Strings
IEnumerable`1
ThreadSafeObjectProvider`1
ToInt32
<Module>
WARNING_LEVEL
System.IO
Dispose__Instance__
Create__Instance__
ProjectData
m_Porta
get_Porta
set_Porta
mscorlib
System.Collections.Generic
Microsoft.VisualBasic
EnsureInitialized
_isInitialized
Synchronized
CompareMethod
get_Namespace
CreateInstance
get_GetInstance
defaultInstance
instance
GetHashCode
WellKnownObjectMode
message
Enumerable
IDisposable
RuntimeTypeHandle
GetTypeFromHandle
get_Name
set_ServiceName
appName
folderName
GetName
AssemblyName
Combine
RegisterWellKnownServiceType
GetType
StartListenerHere
System.Core
TerminateProcedure
StopProcedure
StartProcedure
get_Culture
set_Culture
resourceCulture
ServiceBase
ConsoleApplicationBase
ApplicationSettingsBase
Dispose
EditorBrowsableState
ThreadStaticAttribute
MTAThreadAttribute
CompilerGeneratedAttribute
DesignerGeneratedAttribute
GuidAttribute
HelpKeywordAttribute
GeneratedCodeAttribute
DebuggerNonUserCodeAttribute
DebuggableAttribute
EditorBrowsableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
StandardModuleAttribute
HideModuleNameAttribute
DebuggerStepThroughAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
DebuggerHiddenAttribute
AssemblyFileVersionAttribute
MyGroupCollectionAttribute
AssemblyDescriptionAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
m_ThreadStaticValue
GetObjectValue
GetValue
get_UserInteractive
add_AssemblyResolve
azalea.net.proxy.exe
System.Runtime.Versioning
ToString
Substring
disposing
System.Runtime.Remoting
ScriviLog
GetStartupPath
_startupPath
get_Length
get_CanSeek
System.ComponentModel
IChannel
RegisterChannel
UnregisterChannel
TcpServerChannel
channel
azalea.net.dll
GetManifestResourceStream
MemoryStream
System
resourceMan
ToBoolean
System.ComponentModel.Design
AppDomain
get_CurrentDomain
get_Version
GetFileVersion
get_Application
isApplication
MyApplication
get_Location
System.Configuration
RemotingConfiguration
System.Globalization
System.Reflection
Exception
CultureInfo
DirectoryInfo
System.Runtime.Remoting.Channels.Tcp
OnStop
EndApp
ProxyServiceApp
StartApp
System.Linq
m_AppObjectProvider
m_UserObjectProvider
m_ComputerObjectProvider
m_MyWebServicesObjectProvider
sender
get_ResourceManager
ClasseLogger
SetLogger
_logger
ResolveEventHandler
System.CodeDom.Compiler
ClasseListener
StopListener
StartListener
ProxyListener
IContainer
get_User
get_Computer
MyComputer
ClearProjectError
SetProjectError
Activator
.cctor
System.Diagnostics
Microsoft.VisualBasic.Devices
get_WebServices
MyWebServices
ChannelServices
Microsoft.VisualBasic.ApplicationServices
System.Runtime.InteropServices
Microsoft.VisualBasic.CompilerServices
System.Runtime.CompilerServices
System.Resources
azalea.net.proxy.My.Resources
azalea.net.proxy.Resources.resources
DebuggingModes
ToBytes
Strings
get_Settings
MySettings
GetCommandLineArgs
ResolveEventArgs
ReferenceEquals
System.Runtime.Remoting.Channels
Core.Utils
RegistryUtils
System.Windows.Forms
Contains
Conversions
RuntimeHelpers
Operators
System.ServiceProcess
components
Exists
Format
NotObject
MyProject
get_Default
Environment
InitializeComponent
OnStart
Convert
_cList
InStrRev
azalea.net.proxy.My
ToArray
get_Assembly
GetExecutingAssembly
CreateDirectory
IsNullOrEmpty
MySettingsProperty
ClasseProxy
azalea.net.proxy
_proxy
WrapNonExceptionThrows
Azalea.NET Proxy
Azalea.NET
Copyright 
  2014
$7dd0140f-ce05-42d8-9132-799b1ffe74ad
1.5.4.8
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
MyTemplate
11.0.0.0
3System.Resources.Tools.StronglyTypedResourceBuilder
4.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
12.0.0.0
4System.Web.Services.Protocols.SoapHttpClientProtocol
Create__Instance__
Dispose__Instance__
My.Computer
My.Application
My.User
My.WebServices
My.Settings
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
C:\Progetti\Azalea.NET\VB\azalea.net\Proxy\obj\Debug\azalea.net.proxy.pdb
_CorExeMain
mscoree.dll
4u1wuF
^knl!}
L96mE(
<m;a~"
.)olm[
~}	rbc
!T:P7e
x22io-
/I6V3@1
72hJ'9
:=m1k/
HIVPkK )q
 FU%BV
{kN2j-+
^fjoe()
$VZZmE
vWBs2yM~>
];VI^7
wwGwe6t7wucVqgWuwgWuwuwWp
A%a%`P!aacC
pp%%%%%%%0paaaarRRR
SCCGpppppppppt5%%%%%%%%aaaacw'wwwg7gW'rwvWvWwqg7CvW7
ptqe4t4utvvV
etwx0w
t44%%$RRRRCCB
4w%qpw
pt4qe%at7Ct7x%
ugwgwwvw
V4444v
>r^#GcL
J9Q+i	
hjjr\Www7
ihii!;t]
\Q[VkN*
'Ob~~^
W0K{	O
>07gnn[
`---hl
Hv'=#a
*hmoE}
455m;c
<n-	vT%
fA1;'y
ZNCss3
}wh7Ys
u[zf-#
ZNCgW'
IDAT]k{
XROO.'B
KVZ,F?
]o)g-cD
Rw#..,
2XXX(Jw;~:(
O^'kA"0
iGv~^:
N\fGC	2
(%rZ~3
,--aii
kllllllllllllllllllllllllllllllllllllllllllllllkllqlqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqll
k_##%qqqqqqM###]g############.qqqq[###jqqqqql
k]##%qqqqqr'###]e############.qqqqZ###jqqqqll
k]###qqqqqK"""#]e"""""""""""".qqqqZ##"jqqqqqlqqqq_##%qqqqr##"""]e"""KZZZZZZZZ]qqqqZ##"jqqqqllqqqq_#"#qqqqH#""""]e"""[qqqqqqqqqqqqq[#""jqqqqqlqqqq_##%qqqj%"""""]e"""[qqqqqqqqqqqqqZ#""jqqqqllqqqq_#"#qqqF#"##""]e"""[qqqqqqqqqqqqqZ#""jqqqqqlqqqq_##%qqj##"E(""]e"""[qqqqqqqqqqqqqZ##"jqqqqllqqqq_#"#qqE#"#e)""]e"""Zjjjjjjjrqqqqq[#""jqqqqqlqqqq_##%q_##"Fq)""]e""""#######+qqqqqZ#""jqqqqllqqqq_#"#qD#"%jq)""]e""""""#####+qqqqqZ#""jqqqqqlqqqq_##%]"""Fqq)""]e"""""""""""+qqqqqZ##"jqqqqllqqqq_#"#+#"%nqq)""]e"""L[[[[[[[_qqqqq[#""jqqqqqlqqqq_#"##""Kqqq)""]e"""[qqqqqqqqqqqqqZ#""jqqqqllqqqq_#""""%nqqq)""]e"""[qqqqqqqqqqqqqZ#""jqqqqqlqqqq_#"""#Lqqqq)""]e"""[qqqqqqqqqqqqqZ##"jqqqqllqqqq_#"""'rqqqq)""]e"""KZZZZZZZZ]ZZZZK"""NZZZZllqqqq_#"""Lqqqqq)""]e""""########.####""""#####dlqqqq_#"")qqqqqq)""]e""""""######.###""""""""##dlqqqq_#""Mqqqqqq)""]e""""""""""""-"""""""""""""dlqqqqqqrnqqqqqqqqrnqqqrnrnrnrnrnrrnrnrnrnrnrnrnlklqlqllllqlqlqlqlllqlllllllllllllllllllllllllllk
XqqqqqqqqR
qqqqqqqqqqqqqqqq2
qqqqqqqqqk
1qqqqqqqqqqqqqqqq=
qqqqqqqqqq
=qqqqqqqqqqqqqqqqT
qlTTT`qlqq
Aq`TTTqqRq5
lqUTTUq`
qqqqqqq4qq4
4qqqqqqq8q8
TqqqqqqC
`qqqqqq
qqqqqqU8q5
=qqqqqq5
CqT8Aql
qq=8Xq=8q8
0q`:8qq
Rq28q8
kqTRPR8
kqqqqqX
kqqqqqX
kqA=A=4
Aq2>q4
qqqqqqT
kqqqqqq
qqqqqqR
kqqqqqq
qqqqqqS
kqqqqqq
ddgggggggggggggggggggggggggggggdG
%b#$ggggD$=e########Egg_##fggg2
egggX1G_
8>>>>>SggV
eggggggb
VggggggggV
egggggg_
VggggggggV
egggggg`
_ggggggggV
egggggg`
"""";gggV
egggggg`
egggggg`
;????DgggV
egggggg`
VggggggggV
egggggg`
VggggggggV
egggggg`
9?>?>?@?>8
=>?Sggg`
Cgggb##Vggg^";e###""""";"""#"""#Ndgggfdggggfdgfdegdfdfdgfdfdfdfdd
%GGGGG/
/GGGFGGGGFG
Ggggggd
dgggggggggg(
Zg\,/1g
gdX,-5g/,-X2
L\XXg\g
g\XXgI5
2dXXd/
Xggg\6G
(gggg%
GX%X665
UU[[[[[[Y[[YYYYYY[[[Y[[U!
Y[[[[S
Q[[[[[[1
Y[[[[S
Q[[[[[[1
Y[[[[S
2666K[[1
Y[[[[X
Y[[[[S
ISQRY[[1
Y[[[[S
Q[[[[[[1
Y[[[[S
111211
4U[[X[[[[[XYXUXUXUYXUXUXU
/[[[[[[[B
J[B-HH//O
MHO*B*
%UJC*%+%
<B:XXDJ::::OV:XX$3
1VY7VXHJ7:::;777E
'R?N?G
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
  <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
    <security>
      <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
        <requestedExecutionLevel level="asInvoker" uiAccess="false"/>
      </requestedPrivileges>
    </security>
  </trustInfo>
</assembly>