Static | ZeroBOX

PE Compile Time

2098-10-11 14:19:46

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000326d4 0x00032800 6.34028111427
.sdata 0x00036000 0x00000bb4 0x00000c00 4.45428313549
.rsrc 0x00038000 0x001319c0 0x00131a00 7.80110453543
.reloc 0x0016a000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
AVI 0x000387e0 0x00002e1a LANG_ESTONIAN SUBLANG_NEUTRAL RIFF (little-endian) data, AVI, 272 x 60, 10.00 fps, video: RLE 8bpp
RT_ICON 0x0005a274 0x00010828 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40
RT_ICON 0x0005a274 0x00010828 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40
RT_ICON 0x0005a274 0x00010828 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40
RT_ICON 0x0005a274 0x00010828 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40
RT_ICON 0x0005a274 0x00010828 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40
RT_ICON 0x0005a274 0x00010828 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40
RT_ICON 0x0005a274 0x00010828 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40
RT_ICON 0x0005a274 0x00010828 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40
RT_ICON 0x0005a274 0x00010828 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40
RT_ICON 0x0005a274 0x00010828 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40
RT_ICON 0x0005a274 0x00010828 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40
RT_ICON 0x0005a274 0x00010828 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40
RT_STRING 0x0006d720 0x000002fc LANG_RUSSIAN SUBLANG_RUSSIAN data
RT_STRING 0x0006d720 0x000002fc LANG_RUSSIAN SUBLANG_RUSSIAN data
RT_STRING 0x0006d720 0x000002fc LANG_RUSSIAN SUBLANG_RUSSIAN data
RT_STRING 0x0006d720 0x000002fc LANG_RUSSIAN SUBLANG_RUSSIAN data
RT_STRING 0x0006d720 0x000002fc LANG_RUSSIAN SUBLANG_RUSSIAN data
RT_STRING 0x0006d720 0x000002fc LANG_RUSSIAN SUBLANG_RUSSIAN data
RT_STRING 0x0006d720 0x000002fc LANG_RUSSIAN SUBLANG_RUSSIAN data
RT_STRING 0x0006d720 0x000002fc LANG_RUSSIAN SUBLANG_RUSSIAN data
RT_STRING 0x0006d720 0x000002fc LANG_RUSSIAN SUBLANG_RUSSIAN data
RT_STRING 0x0006d720 0x000002fc LANG_RUSSIAN SUBLANG_RUSSIAN data
RT_STRING 0x0006d720 0x000002fc LANG_RUSSIAN SUBLANG_RUSSIAN data
RT_STRING 0x0006d720 0x000002fc LANG_RUSSIAN SUBLANG_RUSSIAN data
RT_RCDATA 0x00153208 0x00015740 LANG_JAPANESE SUBLANG_NEUTRAL ASCII text, with very long lines, with CRLF line terminators
RT_RCDATA 0x00153208 0x00015740 LANG_JAPANESE SUBLANG_NEUTRAL ASCII text, with very long lines, with CRLF line terminators
RT_RCDATA 0x00153208 0x00015740 LANG_JAPANESE SUBLANG_NEUTRAL ASCII text, with very long lines, with CRLF line terminators
RT_RCDATA 0x00153208 0x00015740 LANG_JAPANESE SUBLANG_NEUTRAL ASCII text, with very long lines, with CRLF line terminators
RT_RCDATA 0x00153208 0x00015740 LANG_JAPANESE SUBLANG_NEUTRAL ASCII text, with very long lines, with CRLF line terminators
RT_GROUP_ICON 0x00168948 0x000000ae LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x001689f8 0x0000036c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x00168d64 0x00000c5b LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.sdata
@.reloc
Y_c
Y_c
KDBM(
Z?_d
_b`*
v4.0.30319
#Strings
Compost
ExtensionAttribute
System.Runtime.CompilerServices
System.Core
System
mscorlib
CompilationRelaxationsAttribute
Boolean
RuntimeCompatibilityAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
String
TargetFrameworkAttribute
System.Runtime.Versioning
SuppressIldasmAttribute
55378b00-5357-4d9e-80e9-1d72e5d8c393
Compost.exe
<Module>
BkeOi7ZLmU8888wItj
Object
Program
GhostWriters
DisplayHelper
GhostWriters.Helpers
DeviceCap
GeoHelper
SystemInfoHelper
Extensions
GhostWriters.Ext
<>c__0`2
ResultFactory
GhostWriters.Customers
FileCopier
GeoInfo
GhostWriters.Customers.Serialization
GeoPlugin
LocalState
OsCrypt
BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO
GhostWriters.Customers.Enums
ValueType
BCRYPT_KEY_LENGTHS_STRUCT
BCRYPT_OAEP_PADDING_INFO
BCRYPT_PSS_PADDING_INFO
HardwareType
UpdateAction
Autofill
GhostWriters.Customers.Browsers
ScannedBrowser
ScannedCookie
Account
RecordHeaderField
GhostWriters.Customers.SQLite
SqliteMasterEntry
TableEntry
IRemoteEndpoint
GhostWriters.Customers.Entity
ScanningArgs
ScanDetails
SystemHardware
BrowserVersion
ScannedFile
UpdateTask
ScanResult
FileScanner
GhostWriters.Customers.Files
RecoursiveFileGrabber
FileScannerArg
FileScannerRule
AllWalletsRule
GhostWriters.Customers.Files.Rules
ArmoryRule
AtomicRule
BrowserExtensionsRule
CoinomiRule
DesktopMessangerRule
DiscordRule
ElectrumRule
EthRule
ExodusRule
GameLauncherRule
GuardaRule
JaxxRule
XMRRule
OpenVPNRule
ProtonVPNRule
EndpointConnection
GhostWriters.Files
CommandLineUpdate
GhostWriters.Files.TaskObjects
DownloadAndExecuteUpdate
DownloadUpdate
ITaskProcessor
OpenUpdate
TaskResolver
DataBaseConnection
GhostWriters.Files.SQLite
CryptoProvider
GhostWriters.Files.Crypto
CryptoHelper
StringDecrypt
Chrome
GhostWriters.Files.Credentials
<>c__DisplayClass0_0
FileZilla
NordApp
<PrivateImplementationDetails>
__StaticArrayInitTypeSize=6
__StaticArrayInitTypeSize=10
__StaticArrayInitTypeSize=12
__StaticArrayInitTypeSize=14
__StaticArrayInitTypeSize=16
__StaticArrayInitTypeSize=18
__StaticArrayInitTypeSize=20
__StaticArrayInitTypeSize=22
__StaticArrayInitTypeSize=24
__StaticArrayInitTypeSize=28
__StaticArrayInitTypeSize=30
__StaticArrayInitTypeSize=32
__StaticArrayInitTypeSize=38
__StaticArrayInitTypeSize=40
__StaticArrayInitTypeSize=42
__StaticArrayInitTypeSize=46
__StaticArrayInitTypeSize=48
__StaticArrayInitTypeSize=56
__StaticArrayInitTypeSize=58
__StaticArrayInitTypeSize=62
__StaticArrayInitTypeSize=72
__StaticArrayInitTypeSize=78
__StaticArrayInitTypeSize=86
__StaticArrayInitTypeSize=90
__StaticArrayInitTypeSize=102
__StaticArrayInitTypeSize=124
__StaticArrayInitTypeSize=144
__StaticArrayInitTypeSize=152
<Module>{A76F6C50-7A6F-4D94-93C0-63FE4EF1033A}
CDCWSn7SaPjUwoq2Cc
SOj3wtG2Ob7xEudvw7
SFU4mbT3GMret7THonf
MulticastDelegate
DyyVDbaRvM1YfIq9il
vJiGl01UUJfXfNWas3
AXBrnIFfMAfABnJrF9
Attribute
z0oyxsqySXMDuI4ZyY`1
ay67rn8SHAWRagidNL
rL2N9N6wh7IWY3IC3G
LhmiV9AUoOr1v5yhIs
Lk7BwHKFmNJY32ZC3n
WDRJe2H6E4HVV6PGZs
xrUtBVoaXtCT6B0w6a
cH8IXcwQY4Peh2qpAn
KKr6hZkjvwWjdm9A4Z
c5uHW3cSW8ou55rAF3
R2mIapWar4cwoqqx6Q
zsd5DaYg9lOJGmlIO4
dde9wksVEKdElHkEKH
T9eZG8XLTT9vNo3j18
<PrivateImplementationDetails>{AB71C578-3C10-4CF4-9086-00CCE0B5DA96}
__StaticArrayInitTypeSize=256
__StaticArrayInitTypeSize=64
<IP>k__BackingField
<ID>k__BackingField
<Message>k__BackingField
<Key>k__BackingField
get_IP
set_IP
get_ID
set_ID
get_Message
set_Message
get_Key
set_Key
.cctor
IList`1
System.Collections.Generic
Enumerator
List`1
ServicePointManager
System.Net
get_ServerCertificateValidationCallback
RemoteCertificateValidationCallback
System.Net.Security
IntPtr
Delegate
Combine
set_ServerCertificateValidationCallback
IsNullOrWhiteSpace
StringSplitOptions
Thread
System.Threading
GetEnumerator
get_Current
MoveNext
IDisposable
Dispose
Exception
MM7e2bc7rqri6KsTda
pMexbWGuhQmyiA6S2D
ArACfwIWqHiwgxYZJJ
wppsUYXonnnH5etXQo
wBmLwvWbItBm3Kbkj2
FoWEfq7OiqF9EWJIQJ
uih4F0Y9cFCseqyIj6
alNBOONCqttb94JrEl
CpyTFB1R1VeUfJeOCh
QmHC1bdqP4Z4lly0oI
mHqKSW8SvwAAQKi6dk
DialogResult
System.Windows.Forms
MessageBoxButtons
MessageBoxIcon
MessageBox
Message
<>9__17_0
<Main>b__17_0
sender
X509Certificate
System.Security.Cryptography.X509Certificates
certificate
X509Chain
SslPolicyErrors
sslPolicyErrors
jjCkqUIu9YfTRaaqZYm
fCxcEEITp18sfhujkg1
zZEqTEI33HW65BdBLnA
zdYNenIQYojLkm2Wwhj
GetDeviceCaps
nIndex
gdi32.dll
GetWindowsScreenScalingFactor
Double
percentage
GetDisplayResolution
System.Drawing
Rectangle
get_Width
get_Height
get_Size
Bitmap
Graphics
ImageToByte
MemoryStream
System.IO
R0xCYvoD208LkRkRUa
FromHwnd
CyfSQAU22OsdvUG3eD
GetHdc
ltMvKSioDaKNJ3XsSe
dNBn3EnQikuQkbKjtQ
ReleaseHdc
bmGYhNf3IYOF6d0GH3
tuwHdfepyDGAx05v70
diyn85HtUlXAuaJaDK
v6iZ0M4R14PKWj8P5M
Screen
get_PrimaryScreen
No6NtTEaA4D8DRFdff
get_Bounds
ABFFvJgOX5hWuin87O
UC4spLh5qMJlbbiNml
FromImage
tsaEhIJQGXepf8DpTs
InterpolationMode
System.Drawing.Drawing2D
set_InterpolationMode
CmeFgmbfjXp1T8jdrn
PixelOffsetMode
set_PixelOffsetMode
kQSL88y8gnMqO0C4Gc
SmoothingMode
set_SmoothingMode
UTyy22PsJ9uDxbGDkU
CopyFromScreen
DIy1XCwdLSoRGv1P3s
W9Vftjk5mpuwlAsjeC
h4eyxjq7CmigtZkMV2
ImageFormat
System.Drawing.Imaging
get_Png
JhUeIgFRxRm2QdBhcG
Stream
kx6GJfDtqCQ9o4FqQI
ToArray
value__
VERTRES
DESKTOPVERTRES
WebClient
StreamReader
CYitGTvAZHwIV62n4c
RuntimeFieldHandle
RuntimeHelpers
InitializeArray
paAcoV0M1BdSecSf6m
DownloadString
u9JItr9Qm5sEhHLcJL
ghDr6Is6ZnOxY7r2jv
J6ASyLj9yakjfNDdYJ
JlY1LsrBhA8e0D2mHO
BWV1pQZB1JIxNgAhAf
Contains
uQnCfo2D8mx6x5jG3Q
w4DKYeKg0YsM8P5Fe4
EMlBq5BXVTJdriy18p
mVp4BYt9AwWFl5axIp
BUBpcXT0WDuWwdKb5K
Kw6oFx39pgdSwRXBNR
sRVmr5ub6CZWuumoYx
qYqd7JQdr12UT43Xen
IsNullOrEmpty
IVLQbqR8hMd3YQTZ83
p5ZkbhCduxGgKg2diD
Replace
PVJlqUOu4RnrL67xsl
WebRequest
Create
wlay35mdr6lh3Qsu85
GetResponse
WebResponse
HB0Y79A8XyCQmyGb8W
GetResponseStream
bVNL81lmHNUMWIya5m
TextReader
ReadToEnd
k8089FMAcN76HSw8Q2
GIY6Tw69WpEbpdqKdu
Substring
JolwioLqiSvfSygySP
Kfm8VbSkAlYniFwVVd
CreateBind
Binding
System.ServiceModel.Channels
System.ServiceModel
BasicHttpBinding
XmlDictionaryReaderQuotas
System.Xml
System.Runtime.Serialization
BasicHttpSecurity
GetProcessors
ManagementObjectSearcher
System.Management
ManagementObjectCollection
ManagementObjectEnumerator
ManagementObject
ManagementBaseObject
get_Item
Convert
ToString
GetGraphicCards
UInt32
ToUInt32
GetFirewalls
Concat
GetBrowsers
RegistryKey
Microsoft.Win32
Registry
LocalMachine
OpenSubKey
GetSubKeyNames
GetValue
FileVersionInfo
GetVersionInfo
get_FileVersion
GetSerialNumber
ListOfProcesses
Process
GetCurrentProcess
get_SessionId
GetProcessesByName
op_Equality
ListOfPrograms
System.Text.RegularExpressions
Func`2
Enumerable
System.Linq
OrderBy
IOrderedEnumerable`1
IEnumerable`1
ToList
AvailableLanguages
InputLanguage
get_InstalledInputLanguages
InputLanguageCollection
IEnumerable
System.Collections
Select
TotalOfRAM
GetWindowsVersion
<GetWindowsVersion>g__HKLM_GetString|11_0
ekGvUk55tgOkCwKx9Qy
set_MaxBufferSize
bsIPoG5p6TIYhONH8GO
set_MaxReceivedMessageSize
Cy0ZeC5VQkM3SI2SHWV
set_MaxBufferPoolSize
tLGWv05xqMbmLlBCfvh
TimeSpan
FromMinutes
ztV1GK5NN61W7BUgHoG
set_CloseTimeout
kaqwNf51BWwoIO5IBKE
set_OpenTimeout
kD3hqK5cEQ1M39DSRq9
set_ReceiveTimeout
kGShkW5G7cXvbuNUMyZ
set_SendTimeout
N3epet5I2nVkk9UiHYJ
TransferMode
set_TransferMode
RTyOUc5XwyEld6WVdwa
set_UseDefaultWebProxy
Aq7Hva5We30Lx11j3Ae
set_ProxyAddress
CdDMgm570g2CvLi8hde
set_MaxDepth
nvKo1U5Y3Pan7KdsGye
set_MaxArrayLength
qZ7eZB5dR84sY0xQ8Bw
set_MaxBytesPerRead
fBLlvV58xc31a0o4PCj
set_MaxNameTableCharCount
FaXUjb5eEq721Evsw0I
set_MaxStringContentLength
A60GZ05HLdqWH8kRvuF
set_ReaderQuotas
eECBra5oeJWEjoqb952
BasicHttpSecurityMode
set_Mode
z8ZUc65UPxeWqIdcMaw
set_Security
L86M16zPuJGeC8gIQx
emWRWE5aBHCB3RgB9qf
RaWGRF5i4UnqR81lAoO
sFw5md5nhfq5wX8Fpi8
rd8VVD5fA79KhyuKDoo
L0SO2454aXSnvmYHNHh
Hn1rBS5EwUZMTVMnZQ8
xS0w4i5gP0AFpnsEL8V
sMaSPc5hNms8K1Fd8Sl
BI33Lk5JoOv1gN2heNC
ToDouble
GPsc415bm6y2rFfVi12
BwejXD5yQek9DveHXMu
Format
AtGHJg5PkH08F2ywfD4
S8kZoq5wki2w1sf4KC2
Environment
get_Is64BitOperatingSystem
Vrmjnv5kS3uVL0we1Zm
Qkubwy5q2XBvYlR75H1
JjXxFp5F9kd4suU1hJq
h4KpTg5DdSL3cpTkPlR
BnK1eP5LHCkr5at81xO
<>9__8_0
<>9__9_0
<ListOfPrograms>b__8_0
<AvailableLanguages>b__9_0
xylxsRIALG1jNgRCr7w
iBPbqiIO7M0l5Zc6CAv
pg7g7PImj6klJpoKAQg
PFcLT7Ilg9t3UlUVeHP
aR7QtlIM01gIjLUeyrR
get_Culture
CultureInfo
System.Globalization
ld9s2iI6FUu7J3iTBHV
get_EnglishName
DistinctBy
property
GroupBy
IGrouping`2
<>9__0_0
<DistinctBy>b__0_0
ChangeType
GetTypeFromHandle
RuntimeTypeHandle
StripQuotes
ContainsDomains
domains
IEnumerator`1
SelectMany
ReplaceEmptyValues
TPy9Go5068vv9gea6IJ
r0930759JCVTjfpw8Lj
w3hvuE5ScafC6FiZDbj
IW16x35vxSvPkVuHYqS
ISThcS5svSuIORE2pee
QN9oeM5jFReZVQkkDYb
uYmjgy5rtiSjbEIrJk6
zBYVVU5ZlI1BBNDM8Fr
xlq7kc52G6AGFiBuG09
IEnumerator
pZhlkC5K3s4d4aKVhrV
alWuqTIztaB2jBS7uwq
q6IC3yXapHHt78sTgSW
<>9__3_0
<>9__3_1
<ContainsDomains>b__3_0
<ContainsDomains>b__3_1
mlmheHXVXT6CpQawI94
pgwyYGX5X8iaYK8Hbdk
DMuFhfXpNQB19ge5Oll
UZpQu6XxqLpbhkoOLaP
JavaScriptSerializer
System.Web.Script.Serialization
System.Web.Extensions
get_JSON
FromJSON
Deserialize
ToJSON
hyqllU5TsZ37HO0ldJw
set_MaxJsonLength
zOQyXt5Bpf15qLCxwVP
n0wpvB5tNfNbIC11qUY
IMk10e53uQLZqybEvNr
uiCiBf5u5lam0MUe2dL
Serialize
settings
result
AddRange
xCHc8s5CDdH3qr3MN7H
pLygUP5Opv9hVw4tEy1
csK02Y5mSbstHufKVPj
sEYmvX5AO9M63Z2std0
wGeKhx5lCPZQR0tHX4L
sbuBMy5MRLq1F5CtaJJ
IJCqWi56Yi0Rwh7Z3Va
SmVCn35z61rufGtcxJF
Td2RKVpatuhYboav9vf
DE5IIMp5LI3R7CA6Y5S
eH0ZwYppUcBAj1bbusU
QsT29BpVQcktQHvdm2v
get_Count
KeSRXlpxW4SGcVGZBVY
ijxelQpNd2cqNhGZvPq
get_UserDomainName
LJFFk3p1B8SGwrCji2I
WindowsIdentity
System.Security.Principal
GetCurrent
t96qafpcgLlF2Xbpy1H
get_Name
CBZSPxpGoefJkj4cXhD
Ko0RtqpIBDvIehdX0Xj
HuTH5fpXxAIU5aFq82Z
Yb0p8IpWUJZAfBRa68f
tnkMDyp7hZTJ5ZAfEyx
eUX5uZpYpBh3AC9c3sx
Assembly
System.Reflection
GetExecutingAssembly
CpSC3gpdShORTB0W1d0
get_Location
tTaYg6p8WN67vyv5aGR
get_CurrentInputLanguage
pYAx9FpemWOoGaTrQy2
rvTbkKpHgks2DYtInW2
oE8ueGpodsxDIBOsneQ
TimeZoneInfo
get_Local
dZqBjxpUpAk0rXbTZoq
get_DisplayName
zOZk8gpigcTLQwJMbSe
LT0BL7pnrphMj813w3v
D28gpGpfAy9S1lMLvVP
HXOUpOp4r2KLKUF9IUH
dwKnUypE0L2ZodCjZkO
E8qkBGpgt8waN8iJZED
a7lDYMphkMgi7PycoNb
uouywXpJlLnDjKBQaRv
L7VR5vpbhndakT3RbKI
UeNUZ0pyHXqIdTBooKa
sTfUIhpPlJdReBsCt76
rkPjx1pwSQvWRblqn46
SAHLnppkQDp8whDElTg
TGq4LLpq6e315TWjRpk
V0HVJgpF47WQbIxO8Tm
OmsQKopDuKOp51uIJgh
J5aDuApL6k24LaYRK2s
cYOysZpSdE5o92sds1i
MM3A7S5Qmlm8fynsnEe
BJQ0jy5RuifWegToyrq
tmpFilename
createdNew
CopyFile
lpExistingFileName
lpNewFileName
bFailIfExists
kernel32.dll
CreateShadowCopy
filePath
CopyToTemp
FindPaths
baseDirectory
maxLevel
FileInfo
DirectoryInfo
Directory
GetDirectories
GetFiles
FileSystemInfo
get_FullName
ChromeGetName
ChromeGetRoamingName
ChromeGetLocalName
Ib4MOmp9t6SI4l9njJd
GetTempFileName
hSc8mqpsYvEs1N4bGv9
AVCcZVpv09SM3gJBnsw
uvRhFxp0A9GClMjBsAB
fMsU2IpjpV28jCW5s52
jSWZDuprSefo6XQdjtv
QgnTJIpZ4GV2Ou8O1pP
sY4HRpp2Yx10EpXmxNm
z1OmXspKVamO9sEyAhS
drsFi8pBkJwpF47ixip
Tq2pMGpt9kEEg295fpG
Delete
AfPSKWpTb0oXtDDiaF7
rHfxjVp3XtMgacEsNj0
<Location>k__BackingField
<Country>k__BackingField
<PostalCode>k__BackingField
set_Location
get_Country
set_Country
get_PostalCode
set_PostalCode
iag5hBpuAdWfXsk6mfT
LKUATXpQ8olTPcSn0DP
ItvCCepR0WVkoWkf6Ep
A6KeV9pCgdmYFrHoO99
Location
Country
PostalCode
<geoplugin_request>k__BackingField
<geoplugin_city>k__BackingField
<geoplugin_region>k__BackingField
<geoplugin_countryCode>k__BackingField
<geoplugin_latitude>k__BackingField
<geoplugin_longitude>k__BackingField
get_geoplugin_request
set_geoplugin_request
get_geoplugin_city
set_geoplugin_city
get_geoplugin_region
set_geoplugin_region
get_geoplugin_countryCode
set_geoplugin_countryCode
get_geoplugin_latitude
set_geoplugin_latitude
get_geoplugin_longitude
set_geoplugin_longitude
rMkYappOIaNABimmwMh
SiZ71xpmXo6Db35kD25
RWbOkCpA60heM1NUfGk
LqX9j7pl2pvEkjPBVw1
geoplugin_request
geoplugin_city
geoplugin_region
geoplugin_countryCode
geoplugin_latitude
geoplugin_longitude
<postal_code>k__BackingField
<ip>k__BackingField
<country_code>k__BackingField
get_postal_code
set_postal_code
get_ip
set_ip
get_country_code
set_country_code
IvBubxpMoSgV7QCo84i
IwOo1Kp64FA0seCl5H8
tnn5SvpzMEjA4OogkuX
zJrCfNVagjDYKiEQe36
postal_code
country_code
<os_crypt>k__BackingField
get_os_crypt
set_os_crypt
OxbgTrV5miFwbwIlKSg
taw8gjVp4w8lurLuIvh
XGyAuSVVH2PAwBk8aTG
co64eQVx8Fqn3Set4l6
os_crypt
<encrypted_key>k__BackingField
get_encrypted_key
set_encrypted_key
LQd4LsVNdOx09OGRQ3r
MwBILqV1LVLGB4UujdT
mASD1GVck9WDjSq3td9
eUcL1cVG6u3SyY0OcaQ
encrypted_key
BCRYPT_INIT_AUTH_MODE_INFO_VERSION
cbSize
dwInfoVersion
pbNonce
cbNonce
pbAuthData
cbAuthData
pbMacContext
cbMacContext
cbData
dwFlags
bGfCCFVWZ97Ki8WQZ86
YxkPK6V74hG66hll0MQ
tNUESgVYdmP7SGqgIPs
V3MpX3Vd2uC7d9v6hZy
Marshal
System.Runtime.InteropServices
SizeOf
AMHpLxV86uNFPQhxHTR
AllocHGlobal
nJDsokVehDlXu1WXm3D
HtrSW5VIhfC7ky2rZI4
xPws83VXy6beTGJQ2wt
SxUY5SVHUoFManhhtfu
op_Inequality
s91WatVoS9O1UJq1eir
FreeHGlobal
dwMinLength
dwMaxLength
dwIncrement
pszAlgId
pbLabel
cbLabel
qLuCaxV4Ivn2wvQdiHR
RjNlCvVn1ihsMDJPFQ4
aAg8RAVfkt8ggSSROL3
cbSalt
mjLNYEVhK3kGCpxI7Ur
PnxEmoVEiLT1EwOYk7u
KN6cOKVgQrOLmBqKqmS
Processor
Graphic
Download
DownloadAndEx
OpenLink
<Name>k__BackingField
<Value>k__BackingField
set_Name
get_Value
set_Value
FfwK0VVwL3hIPwKxBpr
lAWTxwVkFkQlo7WUiXh
vXDIrcVqosYBlqboiHT
OBuisWVFYXMLjUqI49c
<BrowserName>k__BackingField
<BrowserProfile>k__BackingField
<Logins>k__BackingField
<Autofills>k__BackingField
<CC>k__BackingField
<Cookies>k__BackingField
get_BrowserName
set_BrowserName
get_BrowserProfile
set_BrowserProfile
get_Logins
set_Logins
get_Autofills
set_Autofills
get_CC
set_CC
get_Cookies
set_Cookies
IsEmpty
TaKSw8VDf3JxNPXb10d
eiSCA1VLEjhy9bMXFf2
iEVAnnVS1tWNw4DN1YX
ICollection`1
BQdueBVvFMFiRaB0FN8
e4NMp9V03QMDR4EFcTs
tSBLApV94pAqeSbSfhH
sLwEX2VsvE9EUbLdhrF
iiwJFsVjpjPHvk4g25f
BrowserName
BrowserProfile
Logins
Autofills
Cookies
<Host>k__BackingField
<Http>k__BackingField
<Path>k__BackingField
<Secure>k__BackingField
<Expires>k__BackingField
get_Host
set_Host
get_Http
set_Http
get_Path
set_Path
get_Secure
set_Secure
get_Expires
set_Expires
FTjPiCVrR4TvtUppyjR
VQi2mdVZhYcNeLG93Ay
il4JAmV21FPD1unCUxp
NOxUW1VKUM30w5RRsqr
Secure
Expires
<HolderName>k__BackingField
<Month>k__BackingField
<Year>k__BackingField
<Number>k__BackingField
get_HolderName
set_HolderName
get_Month
set_Month
get_Year
set_Year
get_Number
set_Number
WcgEgTVBlq0Xb3kAS3n
OBFKLQVtmSm4dlFKoFU
Cay3KXVTsj4Z6RFMO4M
pgguS2V3LLDsww3n8na
HolderName
Number
<URL>k__BackingField
<Username>k__BackingField
<Password>k__BackingField
get_URL
set_URL
get_Username
set_Username
get_Password
set_Password
agbaVvVupb56y5YGoiy
svSYoQVQdUHDycfUMaB
GCA4gmVRd91hDLQSx2C
HVlJY3VCsu39QjK9H4r
Username
Password
ItemName
RootNum
SqlStatement
Content
GetArguments
VerifyScanRequest
GetUpdates
VerifyUpdate
updateId
<ScanBrowsers>k__BackingField
<ScanFiles>k__BackingField
<ScanFTP>k__BackingField
<ScanWallets>k__BackingField
<ScanScreen>k__BackingField
<ScanTelegram>k__BackingField
<ScanVPN>k__BackingField
<ScanSteam>k__BackingField
<ScanDiscord>k__BackingField
<ScanFilesPaths>k__BackingField
<BlockedCountry>k__BackingField
<BlockedIP>k__BackingField
<ScanChromeBrowsersPaths>k__BackingField
<ScanGeckoBrowsersPaths>k__BackingField
get_ScanBrowsers
set_ScanBrowsers
get_ScanFiles
set_ScanFiles
get_ScanFTP
set_ScanFTP
get_ScanWallets
set_ScanWallets
get_ScanScreen
set_ScanScreen
get_ScanTelegram
set_ScanTelegram
get_ScanVPN
set_ScanVPN
get_ScanSteam
set_ScanSteam
get_ScanDiscord
set_ScanDiscord
get_ScanFilesPaths
set_ScanFilesPaths
get_BlockedCountry
set_BlockedCountry
get_BlockedIP
set_BlockedIP
get_ScanChromeBrowsersPaths
set_ScanChromeBrowsersPaths
get_ScanGeckoBrowsersPaths
set_ScanGeckoBrowsersPaths
pQvG2rx56TtK0EFNkpG
GkIhXRxpfg2k47Js5x4
FdZcJ8xVkRfgk1bbily
tRq0LpxxXEHHewvaeBV
ScanBrowsers
ScanFiles
ScanFTP
ScanWallets
ScanScreen
ScanTelegram
ScanVPN
ScanSteam
ScanDiscord
ScanFilesPaths
BlockedCountry
BlockedIP
ScanChromeBrowsersPaths
ScanGeckoBrowsersPaths
<SecurityUtils>k__BackingField
<AvailableLanguages>k__BackingField
<Softwares>k__BackingField
<Processes>k__BackingField
<SystemHardwares>k__BackingField
<Browsers>k__BackingField
<FtpConnections>k__BackingField
<InstalledBrowsers>k__BackingField
<ScannedFiles>k__BackingField
<GameLauncherFiles>k__BackingField
<ScannedWallets>k__BackingField
<NordAccounts>k__BackingField
<Open>k__BackingField
<Proton>k__BackingField
<MessageClientFiles>k__BackingField
<GameChatFiles>k__BackingField
get_SecurityUtils
set_SecurityUtils
get_AvailableLanguages
set_AvailableLanguages
get_Softwares
set_Softwares
get_Processes
set_Processes
get_SystemHardwares
set_SystemHardwares
get_Browsers
set_Browsers
get_FtpConnections
set_FtpConnections
get_InstalledBrowsers
set_InstalledBrowsers
get_ScannedFiles
set_ScannedFiles
get_GameLauncherFiles
set_GameLauncherFiles
get_ScannedWallets
set_ScannedWallets
get_NordAccounts
set_NordAccounts
get_Open
set_Open
get_Proton
set_Proton
get_MessageClientFiles
set_MessageClientFiles
get_GameChatFiles
set_GameChatFiles
pGhKNcxcbRkywtjAtUp
anSaU3xGiFPmUWbVItn
UkhpU8xNBk9rcP55DeM
W3jTCmx1kBcPrdJrDsI
SecurityUtils
Softwares
Processes
SystemHardwares
Browsers
FtpConnections
InstalledBrowsers
ScannedFiles
GameLauncherFiles
ScannedWallets
NordAccounts
Proton
MessageClientFiles
GameChatFiles
<Counter>k__BackingField
<HardType>k__BackingField
get_Counter
set_Counter
get_HardType
set_HardType
hXZ40LxIvyUjfOJZIPe
Fa3Fy5xXgoZwx9NUbMm
KKCsRLxWuGOAcDmtf15
ly9jXIx7c2X9yPdijRa
Counter
HardType
<NameOfBrowser>k__BackingField
<Version>k__BackingField
<PathOfFile>k__BackingField
get_NameOfBrowser
set_NameOfBrowser
get_Version
set_Version
get_PathOfFile
set_PathOfFile
xCFVnexYS7XJ35XqaXr
KM0QuDxd1neoBovY5K7
XW0xfyx89ihdrV0Ls0A
nP8EoHxe07A7NqbMDqx
NameOfBrowser
Version
PathOfFile
<NameOfFile>k__BackingField
<Body>k__BackingField
<NameOfApplication>k__BackingField
<DirOfFile>k__BackingField
filename
get_NameOfFile
set_NameOfFile
get_Body
set_Body
get_NameOfApplication
set_NameOfApplication
get_DirOfFile
set_DirOfFile
f16WvTxUMDQL8NQYuI1
NpGCCuxiWOrFTUEHSR2
CRcKQwxHbbCA89Yp4Ib
PO27CYxom1F8RSWJsqw
vllqQcxnrG84kNEcjeQ
r4PEyExfUE0j32aLyQg
cnSpO1x4xTvOXdgu5X7
ReadAllBytes
cbymIaxErQD5COp4B3O
NameOfFile
NameOfApplication
DirOfFile
<TaskID>k__BackingField
<TaskArg>k__BackingField
<Action>k__BackingField
<DomainFilter>k__BackingField
get_TaskID
set_TaskID
get_TaskArg
set_TaskArg
get_Action
set_Action
get_DomainFilter
set_DomainFilter
ltksUJxgehVaGY9cVlJ
bDmF6hxh55SMjs0kThC
YCcJS5xJp8XaOUaLk2E
JplYeIxbOVv2Slm1jTk
TaskID
TaskArg
Action
DomainFilter
<Hardware>k__BackingField
<ReleaseID>k__BackingField
<MachineName>k__BackingField
<OSVersion>k__BackingField
<Language>k__BackingField
<ScreenSize>k__BackingField
<ScanDetails>k__BackingField
<City>k__BackingField
<TimeZone>k__BackingField
<IPv4>k__BackingField
<Monitor>k__BackingField
<ZipCode>k__BackingField
<FileLocation>k__BackingField
get_Hardware
set_Hardware
get_ReleaseID
set_ReleaseID
get_MachineName
set_MachineName
get_OSVersion
set_OSVersion
get_Language
set_Language
get_ScreenSize
set_ScreenSize
get_ScanDetails
set_ScanDetails
get_City
set_City
get_TimeZone
set_TimeZone
get_IPv4
set_IPv4
get_Monitor
set_Monitor
get_ZipCode
set_ZipCode
get_FileLocation
set_FileLocation
hm8iEdxyBLAVLZYG0vq
J23nJbxPtrNHwfJjSqj
Hardware
ReleaseID
MachineName
OSVersion
Language
ScreenSize
TimeZone
Monitor
ZipCode
FileLocation
scannerRules
SearchOption
patterns
ExpandEnvironmentVariables
TryParse
GetLogicalDrives
ToInt32
get_Length
get_Directory
rootPath
searchOption
searchPatterns
EnumerateFiles
<Tag>k__BackingField
<Directory>k__BackingField
<Pattern>k__BackingField
<Recoursive>k__BackingField
get_Tag
set_Tag
set_Directory
get_Pattern
set_Pattern
get_Recoursive
set_Recoursive
Yvgnq1xDxKmq9MIISPE
BwqsESxLQJBdspiNyE8
ePo20cxSOvr1GS0WY7v
RI9iboxvi6mcCfil6pG
Pattern
Recoursive
GetFolder
scannerArg
GetScanArgs
B3QOgdx0Vdm366S7RNv
NhY6mjx9eTfn0sysOpF
SOc0OBxsoPMSeNCjPYF
NsBv2jxjtquKhZfA51q
GetFolderPath
SpecialFolder
BuQrhwx2504nIx9s83y
AgXMyHxKx1NayQJuENg
vAdxCuxBaT9k90QmVDX
XhSpyaxtVsglByneREY
vJe7B1xTwJMCprHnoPC
qYAvAnx3jnVraSLe2Jp
hrBGrJxrrTjbXIt1HZi
asaljexZS2AiZYfy5uf
QFvb6ixuBNJlQxlJK9J
ICKBkmxCCglmlyVtRL9
GuRPKwxOGdoSIkPFGIR
K5fSeExQldgVsQh6cK3
y3ogLxxRkVGlmLGqXY3
RaZFRkxmYNhagtg8b5n
afMef1xA7GofVObs5OE
RosEtfxlRxckZOwriV7
nXheodxMhe9MPDy4WnI
CdE0MFx6wSBHr2HliK5
JT892QN5fq9wcieUgNc
XSjTEXNpaHtk5CSQi8C
bk7EgDxzUnajkIiyUS8
XpxSmhNa1dG0AQL7jIa
VdFy4GNVkZJDklTOkK9
ktZrs2NxB8uiisAStnl
eLNBg8NN9aAf6CG1UEn
l4mUNLN1EUFxVc8E6mv
XmoGBtNcxnjPhJeyl9h
BrowserPaths
ExtensionNames
Dictionary`2
SetPaths
browserPaths
KeyValuePair`2
get_Chars
ToUpper
Remove
nk1J43NXeVNIXtSLg2Y
TdZLMtNGCvTvjvTdF8g
ygVZ7ENI3jOC2nd9w3v
NCrYZ6NWTBifwFgr9vc
SOSZyKN7GDD0uvuHnys
pl8Y9JNYLvwakg1NeDB
L3rG1RNdYMuWZvBhMGF
IC653fN8FSChpgILYsQ
<>9__5_0
<GetScanArgs>b__5_0
oigQtJXc2RVYs8pLtgh
ax2qChXNAyF8xMvxtPj
wYDPlnX1g3yGRyTWQx3
WtLXbEXGj5FpFlyEumr
Pu10eOXIuljeyrYUNLP
gw0owVNo0BpOCABAebZ
Op2Cb5NUH8fZwBIjMGK
o3tJACNeqp5oEYR72U9
y1CoxuNHyLUlk4D9CZ9
XGusprNiUBn93CGmNGs
pdApunNnls7NhFATPiG
mYuvaYNf7m3HQNyjI1k
Hg6qcuN4BFvwp6ov3g0
qryafWNE4GTnlQUcjd5
<PassedPaths>k__BackingField
get_PassedPaths
set_PassedPaths
fileInfo
UhLsyDNJStmhFQS9uYD
uXqc3nNbfVjAmhtZNdH
Syw875NyRH81kGKtVta
V3rY9cNPoBDBmZWm71y
VitoPZNwp3LSpLDA8CE
E7MuSFNkdPZuxlISBYe
MAeFh6NqEi0Pi9NGyFx
JkpOBdNFheJpK1EUZVo
OPdi6UNDVG2K9SgHtHu
weRSvINLDNF3OFI7Zj7
NgErVDNSK6mdDLYsmSk
QNU2ItNg2ooDdDLJWOQ
anrTMlNhdfJqKSa7huW
naxysJNvdx3k22NsP70
PassedPaths
GetTokens
Encoding
System.Text
get_UTF8
GetString
Matches
MatchCollection
get_NewLine
GetBytes
pphNt0NsDDYF4NUAMdD
yyBH5pN056RRZxpWOl9
OOVZCPN9DwyWi1BnVOs
ciwmaeNZlymnSK32QUG
tOSNNGN2gP43vv0R7YI
S18yOJNjgFkaUTUQXMr
lhB2HANruvaA7Ht4F8R
VdcEnONKCmvuRKCjc39
Ba3jRdNBECondGJDpq8
mhbBtwNt5D2vNKJ7dko
auLGEiNTAK6nayeXg4i
NTW24TN3EFPAokj342g
kQV8XbNRm5nsCR0ePIi
jFM987NC28mLv5uGcIY
AWudtPNOsMnl2p2Z37A
uBWGfANuSdvaS9gtNJg
q0rmbfNQ2xBFHtlcaUG
QjJlNuNmPjqqpPO92PO
mS2TJONAQCFuByutTDm
P2r1s5Nllt95bDi6RPS
eP0goCNMPGnvZjbjQxO
noNyOmN6aAahD2nUSqv
xhcFXW1541scJtI7Q1k
rGmRjs1pXtqsQ0DYd1p
bKRyxHNzxFaTnwAo6ph
kreuc91a2WJHpyYVOTY
wS0DCH1Ve7qhia9wD8U
MGhjMt1xPootMrJhaDD
m1ERw71NuXD9GNNVW1A
hTuwUV11Naei5ate4Ls
mVbOEh1ckx1dlAj117B
CurrentUser
Exists
mquJKY1XaEOJ6pOFQlV
J6HxRG1WpHS0EH4vLNF
qLPvxS17QnhqBG2T1aT
glSkRg1GU9bsDPDHr73
u54kax1IKOpZUNVA5M6
ArEq181YSiOpdbVT3pq
dJ91jV1e0twHxhs8w0a
RsVsT21HlP2YUhEQ36j
HeV7T91dOyAh8T5cvpN
Egk8VO18DXFeQMayo4T
v5q5x91ogGR3pUZLBow
PWxGOv1UoTqTQjBiHEH
bRyrem1ivdbyubq7DZY
pp1YCi1nFYQPY8nWk9q
w5aOmm1f7xySdRdoCXU
aChLAo1grrF89tu0d8W
UvmQAu1htVhoeRUb0ue
apJCY914jVopfndA9ou
oAupR91EGH93y4wfJ3A
PPxDes1JoVoWQqpXNEn
QjUiAD1b5ov6fRr7KR5
PhYn8y1yUe13NCnirFa
tvp4IR1PMHtDehnjB78
yh5EV11wCfHTqbCW9Mx
XbFSaq1FfiiBQ64ZnJZ
BG2CAq1DwmbYUVOBIpy
NPGO6q1LPMKC2UNm2Rx
Kg1Gjy1kRAYrn8M0o5v
m0F2Ri1qaGglmWe0Arn
h9cgT41S997mbSfKy9Z
QVO3Ff1vYsWebagV5Hn
cF2PDc10deC7wCXj8ap
DlYuit198Adlopki3Sb
EIwMsU1sy81QODpbAJ5
jc9Nki1Z7NL5kWgjyi9
Eff07U1j8LBLd1nLoAB
lVhTK31rLj83kkwWIwu
FOZUOx1BubeY6NtHOt9
K9EaLa122X13epoIpqN
gdKnUy1KIJT6f3S1juN
serviceInterfacce
RequestConnection
address
ChannelFactory`1
EndpointAddress
CreateChannel
TryGetArgs
TryVerify
TryGetTasks
remoteTasks
TryCompleteTask
taskId
managed
IClientChannel
DwgLMK13XUbhcJWve8D
PBOX3h1uC4HLVvQ8lug
u4FrqF1tAM0kdfsTiae
IQkc5m1TINImKyRLRk4
DF8snl1QohKxui946Y6
NrW59N1R1K06sX171cO
zEuSr91Csa0EwbSGRcQ
hWGMSl1O14KuFnn2G1w
uBiOfM1mcRq9hSx6vHE
ywCKbl1AGU5bVBVychy
aRpntN1lrTTS8oZF4CA
EyggNG1M18orQeRVxRx
SuppressFinalize
wGWZvE164xMMqv36jvv
ICommunicationObject
qkQrH31zUsALsW3hUVx
IsValidAction
action
updateTask
ProcessStartInfo
Dx7Ib1cagmLvQousNEH
DUU9Mxc5xXu6g9RiuXg
LuHawlcpJDEetjH0bmo
YeaBoacV6Fd353xdQP7
HpHWBBcxQiRgRkCIbUS
yVKcjmcNVhgDihoA7a2
set_UseShellExecute
iO4KN4c1ugwZ5ImBv7B
set_CreateNoWindow
VVeaFdcc2pDI2Iy27hu
YLYvLvcG7h9rH1oU6dX
WaitForExit
YiocOCcI7vS2RqY9K8K
g32eklcXrGRRHAhhXmm
jLFfSNcWXevPkVtKKDK
NFkmk9c7qXXAIg8Gne3
secruycYW5yKeCb7IOo
unAbkMcdSXcvU5N89M2
GaJhDWc8J30hTbpgSW4
FNX6JCce5ZJYTrFBJf7
NPOCShcH6iY0Dp1s8oD
DownloadData
dKMeg7coCVwHnjUdyP4
WriteAllBytes
MeY5ZEcUxyrOquPFU21
OyPCerci5OMj4U9yGH3
pP8ZsScndC67rbMcrOm
set_WorkingDirectory
epuIYxcfmN1rmkBdqFR
set_FileName
FqE45lc44kVZMs5vEa0
NWyKp9cEcbfrqKaeBVj
LZY9lEcgeipAMlqVrp8
LQt4hbchpPrOS51RNR5
bl3diIcJQJqhsYETFV4
b3IiYScbyBJ6rl1xQuU
LAB1vEcyRxU6bNaa5J8
PKniFdcPNmJV2u34gyE
dow9StcwjOsP5YHds2p
AFBKlYck9yuR7vj5UbL
XlJtKTcqVtH41PSbg6N
F3483scFn6nkZhXaA4c
D7aSBecDDBBThSNNavQ
kC5fqxcvrvM8VLxuDs4
ok70Kfc0tR13xyYmauR
PMuo36c9SVYVhGFpEUj
y7yCpHcssUsLr8HM3H2
hpUMBtcjQ3M5p3b5QXa
RQT0bKcrlP6iskYP57K
<TaskProcessors>k__BackingField
<Result>k__BackingField
get_TaskProcessors
get_Result
ReleaseUpdates
RnIKEJcK0SxO9q7pyBa
z9wCI6cBRd8aGZyGBKo
GJeKeIcZ9vHmOGwbM5h
Si2EqHc2ay8lXlKWT1K
TaskProcessors
Result
_sqlDataTypeSize
_dbEncoding
UInt64
_fileBytes
_pageSize
Fields
_masterTableEntries
_tableEntries
get_RowLength
fileName
ParseValue
rowIndex
fieldName
rowNum
GetRowCount
ReadTableFromOffset
offset
Resize
ReadMasterTable
ReadTable
tableName
ConvertToULong
startIndex
startIdx
endIdx
XJ5xS9c3m4L5YeqL1B4
egW51ocuGePIbfPgHQt
Sw7iJNcQSx8k6P6QEX2
dpK77XcRQhAGFRoqVHi
QibDbCcCpfh9RTgPNu4
S4jBTCcO4Pw8XmFsZ4p
qmjWrWctJO4ICZRAPrw
CkfqIqcTlgh5wsCuOUi
yQg03wcmamjMhenbQEl
ToLower
YKO95hcAeFnatsCmooc
kgY8UTcl1gxjF1A8u3s
CompareTo
OCRbVScML6k9e6UooMx
jEvgIkc6Xsa0DiPrcKB
GetEncoding
EpKoM9czjKagrf6jels
iPgGX3GaEyW2ErXqxHv
get_Unicode
gnk85UG5j8I0Jl6rfis
get_BigEndianUnicode
EpEShBGpwyuPmSX1Rem
rv17DxGV5AhVqGbPRrF
StringComparison
Compare
XDiKgRGx5LmR9uRqWL9
PUeldSGNWYGF3DYBMOv
IndexOf
p5HCwBG1mRcf6xA9sua
BtI4tKGcTd1YYHK87Cj
oAD6dgGG1C1e6NCyIW5
TrimStart
j5xiPVGIjTSvtrQd6km
duRkqEGXP10ZUWKgrds
z5CalhGWb8yGp2tBbyF
BitConverter
ToInt64
RowLength
BCryptOpenAlgorithmProvider
phAlgorithm
pszImplementation
bcrypt.dll
BCryptCloseAlgorithmProvider
hAlgorithm
BCryptGetProperty
hObject
pszProperty
pbOutput
cbOutput
pcbResult
BCryptSetAlgorithmProperty
pbInput
cbInput
BCryptSetProperty
BCryptImportKey
hImportKey
pszBlobType
pbKeyObject
cbKeyObject
BCryptDestroyKey
BCryptDecrypt
pPaddingInfo
Decrypt
bMasterKey
chiperText
bEncryptedData
cipherText
authTag
CryptographicException
System.Security.Cryptography
MaxAuthTagSize
OpenAlgorithmProvider
provider
chainingMode
ImportKey
GetProperty
arrays
H9VjB8GdwaIxRngJBX7
w5Oy6GG8Ud4oe3nFLBW
UiL26oGek4P54mSS1Uv
y8ZQDIGHHjInLZdV20H
tuTqQmGo1QYkIF95dxi
kNQWDBGUmgo8hHBA8gS
Eni5A8G76XLCL0iGf56
x604qjGYj4RoP7V9PjD
pOTXy4GiuwI9uiPuwd0
grJ5IlGn05itYFtNZC4
NdU3ufGfB8HUgMr2TEI
aduJxBG4xhVKuCjeksp
zvehyWGEpmifRlVAF7S
zkWE6RGgaBbFAsOTrC5
DuH6k9Gh3L2vEXPPcpo
SBBHcmGJ77byj0eaAQj
ocLE39Gb1LG7WDCqQsM
Buffer
BlockCopy
vGfshHGydGcDoepjFfx
Ek3P1nGPIML9QH11CD8
DecryptBlob
EncryptedData
DataProtectionScope
System.Security
dataProtectionScope
entropy
GetMd5Hash
source
MD5CryptoServiceProvider
GetHexString
get_InvariantCulture
IFormatProvider
yQpaQiGqDTMYnQe3Ph1
z4J9V0GFgfuldkgFiq1
wgBKTKGDFGCTvEwIMee
EtAVJ2GLyDyaOJXyYGh
PcFkmeGSTaCxM4uJC4E
SjOARWGwygphvAcnEJs
uJUhB9GkQmg7ZB5xwEj
iADqA5GvuTpxXq2bts8
ProtectedData
Unprotect
NAdmIfG0JXP7IqDnIL5
get_ASCII
kfYLQhG9j5phAbRXS1y
HashAlgorithm
ComputeHash
zeJNQhGsrGjw6pnGvc4
VR7qMqGj686A1o0E5Cd
stringKey
StringBuilder
FromBase64
base64str
BytesToStringConverted
MarhQFG2H2p3wPyGi3c
BeFPNMGKE36TQV3j6CB
KnyrnpGBEFNL1GW0iK8
Append
J13tiyGrh7o4DpuiEgA
ufsNRHGZJeBC0WuSa88
K9RThMGtgYZ6WR3RDaD
ToCharArray
twT1QDGT1CGHnD64vxS
FromBase64CharArray
NidGeUG3JwCSMUmebvl
ROcg7HGu83VB2MtePKT
Hf8wQEGQN8NvJ65tR1V
r7ROjxGRUAuhBrjoZfj
Ich5ygGCWlGNyuM8oRc
qRvFLCGOnnUSwxvhUUC
profiles
Func`1
ScanPasswords
profilePath
ScanCook
DateTime
StartsWith
get_Now
AddMonths
get_Ticks
ScanFills
ScanCC
DecryptChromium
chromeKey
MakeTries
success
Invoke
ParseLocalStateKey
XNJVw8GlLYbc4HhCrLE
evmImRGM40l4vYgl7h8
QLaQ2ZG6n9fQ1ejY0Vl
sPedrLGzfjj563P5bSF
lGKZkyIaJjA3bTh2cZk
lVGRRIGmU8iEySR4iAI
lY52eiGAvNcb6HKKS4R
MPMrVaI5FlVK8EjdEiR
GqnlGGIp6gkElLD0g8a
W9pAMRIVT6dGY4faiKD
iwC3IvIxp6Clkp9wJL4
OHGNTrIN7XaxGwKqJMa
RGjEGJI1r5WW8tkXk5p
ReadAllText
nern9hIcjcQjE3Zq5Of
z5ObU7IGZODNugbDZfp
cBN6s7IIIBI0iCJ8ifE
dataFolder
<Scan>b__1
<Scan>b__3
<Scan>b__5
<Scan>b__7
L6OVacX7F447jb3yE6F
t8Rk7PXY4DOc0nSRwiB
H2R0nfXXuoVGSANFsMw
wnQAkqXWTXMjn9QpIK1
<>9__0_2
<>9__0_4
<>9__0_6
<>9__0_8
<Scan>b__0_0
<Scan>b__0_2
<Scan>b__0_4
<Scan>b__0_6
<Scan>b__0_8
xeFhWtXek55sR5H0Mft
mvisbkXdHWoSgwJU8iL
LrbmRuX8lbkA6mEOrUp
nTjbUyXHmcds9F67If7
BBnUv5XoBbZi7kphJtW
ScanCredentials
XmlTextReader
XmlDocument
XmlReader
get_DocumentElement
XmlElement
XmlNode
get_ChildNodes
XmlNodeList
get_ItemOf
GetRecent
xmlNode
KVFSXNI7LApeaZjP6Nm
CWOkNmIYXubrXfpbtNu
nFXqgVIdUwuERNxlTrc
iVUmKnI86ZXkRipa4mg
j8F5ZGIePflxSaYSE7c
AanTM2IHLshxvsiNJT1
AWivJMIorm0RZSB9fcT
get_InnerText
j8wISZIURDHEScYUioV
IkSHfTIiV9olcuJdHZL
rRcqs9InZKTkSIYZsB6
vql30WIfeoNnwyRJq3x
zpe1DLI4y2hmAvqqHfN
HNVr7PIEHearZEo2xqh
mUtGyoIgMc0bURQEnF8
cj21OrIhoGNPQ1qlRjK
rquZhfIJmuFVNXYdoei
wAfsHkIbvodnrUYryju
dSmDWLIywmH3PkdsbFt
Ry4UalIPjBeYUUPWNb9
RSnBaTIwJZLM7VitHgx
Ti1s7hIkUMrMqPolgdP
DaUFooIqAyFa5WfJEyd
eZJDceIXMGmQ4V2bfk5
GYa9ZYIWFPibW8mOI7n
a2anyOIFR0c4P2hveQh
TQy4qvIDUym3ZDASkZP
EnumCook
profile
GeckoRoamingName
profilesDirectory
GeckoLocalName
u5VUNgIvBZj1ULmKRD2
caM47GI0LZ0fQaeTWXU
eF2lnLI92lOsLRRv2mJ
Wsdu3BIsJuJIZnGhx4j
YjKOpXIjLvmRU3MA9qx
vlY473ILwCQq4incGKZ
tKso2JISZy52YDXQ5Cj
e2QDi6Xn5h76L1n7U5q
i7RJKKXUEOZ0bNLvSfS
TD911kXicO7cCrTiqpO
A9Pfe4XfSIY5uejeR3q
pO7nLAX4xynpBZ9hgwt
get_Exists
SelectSingleNode
auqRFII2orrFQkAmeMP
YKjIq1IKUcxuPfbNfi8
XnyisLIr3IUM8jtoveO
KlyEnWIZrvbU07fGF7V
007A56C60CB686C542C5A63F4806094A4F9494B7
00D675BCFF1D9FECDD0CA29C78CB6A24748C8788
0410277C15CAD5E63A25F491DAEEF493B897678B
04EC68A0FC7D9B6A255684F330C28A4DCAB91F13
085EF559935ACAE54FCEBE778C7DE9948289EEDA
0E5921723BD3C6CB75662A156FB56AF05A7152C6
1076B53156E190E9BCBE281016712F2D3F02D3B4
1674D4347598B476FA761898A499DB4C02053102
17C588718030CA902BC760013FE165199AD1C85F
18B532EF2959EF2ED8C549D712E3446FF49E4287
20CB5B8963ECE3D796594F043D66C0E0BAD86669
229718935FEAEEB35171F45396923068FC7D9721
24745D8330E61F986032C2034A579B0B80181594
2A92E2F98903398CD12F10BDF583F44C2C6EEBF5
2ADC9207E27E1E7B3C16C7A8A6F212757DCFE863
2B9522D4F7398AB5DB789596FE5DB90589B031E9
2FBDC611D3D91C142C969071EA8A7D3D10FF6301
359A00EF6C789FD4C18644F56C5D3F97453FFF20
387D8DBBFB12BA323F1E0F1F539B4DA9550070C3
3DB6DAD76E13B54DC03AF1C6092C40388E57FBBF
3EEECA8C90CAA62AB5F9CCDD8715DA5023F4BA00
459812D18B50C8E5F96831EFD700F962F692D29E
46884713B2F882E5304A1FF1B16370575A53E434
46F273EF641E07D271D91E0DC24A4392582671F8
4956BACC797B0C6C013C7E4846581396C9EF0D8E
4B05CEBD7D70F1607D474CAE176FEAEB7439795F
4C1117B01D5C4E103EE817F889EC547C63B47B7A
4CDA4454A3C36A7EBDCF8FE8B804B379A31D33CA
4E3D7F188A5F5102BEC5B820632BBAEC26839E63
4EF472E2E74116C7FD95C74AB422CCF80DB1C404
501BADE98ACDE8BF4A0424FD9A4354615FF08C7F
571B1023DF3ABFB94C92465B365B1814FEBFAB3E
57F4CB785574C3A09AF99937BF91EA2C31E37C8A
5BB3788A197C26B8310159EC9A81635814ABB05B
67CD3B1DF0AD5BAEAA1ABDDA3FCAFB2EEBDD2684
68F2A1E3776E8F2B096767D7A710103E13D9CE77
6F66485AF823BAE1F185740DA7F4F595701CD22E
703C0129D2425B4E51361C24EBE8A0042E483AC5
77A9683FAF2EC9EC3DABC09D33C3BD04E8897D60
79E9B68FB6E1987DED749BCD71143BD8EB323CE3
80E5A0A2B81DB2473AFBB3FDD6F479670B7B41C6
81E046FA1D93B661CC948A4DD1E01F20D6192E9B
855FED6E03442FBB3AF914FFBFA9DA82813817A1
8743F6DD6877BBC815E9F16BEC59057DD1A89B0A
89C95FB6F8086AFCCD50B1B257669F2B17C047B7
8C49F78A06E711CF0E21134D0B091985336CC37F
95098CDF929872F9B67E58070D088F8238F7CABE
96D6CB223DCF17F7C9F93C825239BDAA3634674A
989657DD93570810E43C5B1F68E529460CA796F1
9B88C78E81ADB9E7247AB37D1F5F3861810916D8
9D9AF3AE11A58D55EB8A6AEC8F03F7AD01E8994B
A3EFD00EA085079EE7F97407F8EFF07E3990696A
A8A5F2DC86E781EC7360D1DDBE09F80EEECE48EA
A8F9B62160DF085B926D5ED70E2B0F6C95A25280
A9139732ED4CF84F8CE948DCB134114E4F24598A
A937C899247696B6565665BE3BD09607F49A2042
A9B6DE7C485B3014653A30C8B4BEFA8F70610178
B14822E504AE1EF678AE0E823684D7B32F95A725
B14D74C51EAE4F88FBF39B8BD07DA392799FCAAF
B5B4FA236B87DBCD8055443F05776B10DDEFA5CD
BEDDFAEB0360B1694AB8CD2A69986414790A1D9A
C39241F447680C35D3966F9446AAE6D462E04AD3
C58D707276695E733863DD82C6DF4DF66A3AD49C
CE18B047107AA23D1AA9B2ED32D316148E02655F
D7DC31ED4320E74979DEC780486CF9586470608F
D82572C56BDDD62E320B8BDAF0397A0DF9DD5BF7
DF08DD4DFFDB6C9048202CAE65882EF91ECE6BA8
E0CEB3E46E857A70CFB575A05B01A64806A8D426
E63C93C721909983D6276C980CFF923987A4D2AA
E705C6345C26AF82E64D22DBE44B2A3514F2F06F
EB14352FBADB40E2FA237D444A6575B918573C43
EB2DB456E0D779E528D1474FA55AC99055A5E815
EB7EF1973CDC295B7B08FE6D82B9ECDAD1106AF2
EBD075615CBE4A710F9410FFECEAF6110A01922B
F413CEA9BAA458730567FE47F57CC3C94DDF63C0
FB77AA8CDAF4D2192696350B7AB546B533467477
FE79FF373808574898C82AC1320C55C1182FB75A
TWp4PNnQc
Module
RbNpPwWWNd90c
typemdt
FieldInfo
MethodInfo
GetFields
get_Assembly
trlfqlWftijE2RJBws7
ResolveType
ST3JJCW4EMQVFP7XWXN
MemberInfo
get_MetadataToken
h1ZcHqWE2E5k1bUK1AT
ResolveMethod
MethodBase
jBsoFbWgSMlHVLbLQvD
CreateDelegate
WmNqxHWhwi7m6LudVrZ
SetValue
O3gN0yWiksHor8EF79Y
NAZec8WnWyjPOmABU1q
eyrUTWWJAHsCGTB9VjL
m1Ja6ZWbgwanc0U0pte
QBFumGWyj8B7qnEoBaW
qqu23hWPua9iOnn0uId
wLxxE3WwYH5wqjEDyHT
get_ManifestModule
object
method
BeginInvoke
IAsyncResult
AsyncCallback
callback
EndInvoke
M6EKmwjSJ
PVVpfAGtG
ghLACNa05
d1uknJpcW
SortedList
uS9zmJ6WC
Qwp4ejR7FG
XtL4lyIIgx
hIsn23p8h
i244bikuos
NFL4IGyoc7
dKMLoMpMs
c9FNce5cf
lodECQQVs
x3c4o2PyTx
j8hgmZJ7n
phV4Uu6SUx
firstrundone
NrL10qsNW
diL3t0peo
cQCd71PIW
hSjGubHK9
sMgC0o5PW
TWn4MujlZv
bFB44BUGlg
IBe4hEip2A
Hashtable
VvPxdPh3O
S0FvrGWpN
WS94a0Vnlv
RSACryptoServiceProvider
set_UseMachineKeyStore
mFrpPwWh5xQgv
creoiNvd7
jZiU8kt7k
UInt16
yIEeUuogE
HNMMnrD0K
U6ZIpjiMV
TYIaeXNeW
rI3lmZ9FL
SuhhReBcy
SymmetricAlgorithm
AesCryptoServiceProvider
RijndaelManaged
Activator
CreateInstance
ObjectHandle
System.Runtime.Remoting
Unwrap
QWOOk18h0
CryptoConfig
get_AllowOnlyFipsAlgorithms
BjkXsyRir
mCC9ZT9yx
BinaryReader
ICryptoTransform
CryptoStream
GetManifestResourceStream
get_BaseStream
set_Position
ReadBytes
GetName
AssemblyName
GetPublicKeyToken
CipherMode
CreateDecryptor
CryptoStreamMode
FlushFinalBlock
P4kZBQ8Uk
KX0HrYNeb
pvQ2Nvbv9
FromBase64String
gVU0QeojF
HK2JaffxR
ubITRqgdO
GetMethod
vZF7RiFiF
get_CodeBase
GetType
PropertyInfo
eM2t2dfoT
FileStream
FileMode
FileAccess
FileShare
vDfq2bW1V
set_IV
B3XRfqih9
sVk5WFvVV
E3GryunuI
yxOcIGI9u
Oihu8LNHm
ifqQyNVWS
hcDmskCdX
mKgSOTjDj
aYTwtN0c5
udfDaXdkp
qvDLYG78jdfocWhgG2
w1TZlHiUX7LcY0WTrU
IEfBn4sXQxpgcBoSpO
O7LaIINTRPoDsBELT4
Eg2T2gRlAGexUCnOR4
uQZGavK9UcjoT1WSBI
YCc7Xq3qIjhULOYkb0
Reverse
VXQAqpJoZlZFHqHBfI
b47VH0kKuJF7vAoblW
T98oOE96EWhTBT1GIS
eA2Bpd1PNJSYEKtnsJ
VdOR4q8a0pnAxvtoKS
WHYXqRBhxiu1gyo6QG
FpUXM4LKUd76EwGGvH
UMZHJEfLyek7QRongK
UgryZPGgvwXfHkYSjc
HRGyYVMAAWDW9eo4BO
scJKnuuEVbuqEKU457
XJvGoV0IWFg63HEMAE
JRtZI4XxM8WAEBShGi
ltujFfC3qWwJbIeETc
A6g7prWFkhYxy14hoBV
xsYWwLWDoWCO2v6bKLA
vVllYNWLrH7pSDra4HI
ejVjIqWS8GyCFh7vm7u
D4r4O0AxSI
fIHbUfW9AXBEZSlV8nB
H8NoEYWsTMtdmB2hXn4
S2XGfxWjPg0SK3QdxFV
bPClZqWrFleENpkOE1R
WFSbvgWZ1Hg53o9ctav
nSyN7mW2j0kraUQIqio
f7bCCeWKwSvOHGkd0WI
PQg95cWBiVIgkEIST9S
CreateEncryptor
l5jo5FWtej28okKOIDk
VailFmWTGrg7VwiCyQs
a1co7OW34srfEkG6XmH
kjC0l5Wu2F8MIySKLfN
ToBase64String
bWLb1hWQwYaOHmEWy9Z
rRt6SwWRUsc4N7YjerJ
classthis
nativeEntry
nativeSizeOfCode
bV44XU8KQo
Uu349Vtr47
ywq4VEynyU
JBjpPwWz7YR39
VBIHykW6ilPkmwrZqVd
Uur4ZuAaiM
ModuleHandle
D2tpPwhqPdijm
GetRuntimeTypeHandleFromMetadataToken
n9cpPwhjdStEy
GetRuntimeFieldHandleFromMetadataToken
U9pKhxWzvXoYIMpGcua
PRX89s7aNeIZBtWySxP
d9bhIp751HL6VxB5B4D
BPDqkX7p7PnFrVPCKII
aQg5E77VJNfLsY6ecjA
GetModules
eGJ8Hh7xxc1ylfSDf4h
get_ModuleHandle
CCw4Tb9h3V
n3x46T2MQ2
WP947UZNwy
Fko4i7KTuh
pfJ40gjxwv
eBxqprrF8
GetManifestResourceNames
Ypf4J7ba8u
ResolveEventArgs
AppDomain
get_CurrentDomain
ResolveEventHandler
add_ResourceResolve
kLjw4iIsCLsZtxc4lksN0j
c5rI0qbPYaMYfUyRYY
pGAcayVxIeIJgiRWTL
xvBiPlwEvQIGKJyrqH
hibQMqqSfeDCv3os49
qLTdOQWOppWVZhcN2j
jBOr8DNEP7NKrky0Pv
LeRCUDF0k4VxMIeFDj
GiVy3ylWNyEoJDS0V7
BvNFtheXsFFg89TxNr
oQ6kTlSP1RPO5vbWsv
R8G9UgGtmm9b6mV14Z
IWZ4FNxMCV
IsLittleEndian
X4o4BaXNNW
ReR4PkWY9i
XZO4yOqtpA
pcT48wm9UY
Y9l4jroko9
OY84tBcMwd
JrQ4qkE5mX
iRM4R10ean
AGe45CEX5X
Goe4rkO7Su
Tt04cJf5Ud
wDU4ucXGpO
HGp4Q5R9ww
FvC4mE2qIR
iv04SsOrFF
zBi4wdjAN2
PN14D93Kyx
ulr41vALu8
lQp4gbkEqU
IRA4KTlYfd
t5TlDJ7eM2LmJ8RJhVE
iPKlNr7H3JE8EDtCKUj
NVDFAM7oWqXrgs5dRVI
eR5IYk7UrMKA1MTQ2Xs
I1stkL7iUbn1e9oTtla
PBRqKv7nFuTmKJZFEve
iG0Kyx7f8dLnKXN3TlW
pT8mSB74wPQmjET4weD
duBvc37Ej2RWIYnYI8H
lKG4GM7gYWVwfW7Weo6
wFMo6Y7h3bYvYZVYIgZ
pveYEu7JnDLAxkiJw56
cdjKiw7bDeQB3EBkxse
mRk0S07yHT68W5F1LWL
FUQ7eu7PbUAi2AGMRLU
BZNXRt7wYRPZnEWoybQ
VS1E0N7koQmMGYH01R6
bEZVjP7qmDevVDUvYDk
wBdpxJ7FjOl1CLCNm0n
ivcxu47Dd2uCOYXCiC8
FM1K2X7L732MQGeK56N
rAhiDC7SECf2soROUdk
L9iS7J7vaVacSHXRiFk
SNWnaP70yUGLqH3JARU
$$method0x6000007-1
$$method0x6000020-1
$$method0x6000020-2
$$method0x600002a-1
$$method0x600002a-2
$$method0x6000039-1
$$method0x600005f-1
$$method0x600027b-1
sDsavCKjtkpP9hyNLp.GoCuGfvBw3Jcscmp4t
Antivirus Signature
Bkav Clean
Elastic malicious (high confidence)
MicroWorld-eScan Clean
FireEye Generic.mg.f487cf722746e92a
CAT-QuickHeal Clean
ALYac Clean
Cylance Unsafe
Zillya Clean
Sangfor Trojan.Win32.Save.a
CrowdStrike Clean
BitDefender Clean
K7GW Clean
K7AntiVirus Clean
Baidu Clean
Cyren Clean
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of MSIL/Spy.Agent.DFY
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Kaspersky HEUR:Trojan-PSW.MSIL.Reline.gen
Alibaba TrojanPSW:MSIL/Reline.4ed93040
NANO-Antivirus Clean
ViRobot Clean
AegisLab Trojan.MSIL.Reline.i!c
Avast Win32:MalwareX-gen [Trj]
Rising Clean
Ad-Aware Clean
Emsisoft Clean
Comodo Clean
F-Secure Clean
DrWeb Clean
VIPRE Clean
McAfee-GW-Edition Artemis!Trojan
MaxSecure Trojan.Malware.300983.susgen
Sophos Mal/Generic-S
SentinelOne Static AI - Suspicious PE
GData Clean
Jiangmin Clean
Webroot Clean
Avira Clean
Antiy-AVL Clean
Kingsoft Win32.PSWTroj.Undef.(kcloud)
Gridinsoft Trojan.Win32.Agent.oa
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan-PSW.MSIL.Reline.gen
Microsoft Trojan:Win32/AgentTesla!ml
Cynet Clean
AhnLab-V3 Clean
Acronis Clean
McAfee GenericRXOT-IB!F487CF722746
MAX Clean
VBA32 Clean
Malwarebytes Spyware.PasswordStealer
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
TACHYON Clean
eGambit Clean
Fortinet Clean
BitDefenderTheta Gen:NN.ZemsilF.34722.zr1@a0iyjbfI
AVG Win32:MalwareX-gen [Trj]
Cybereason Clean
Panda Clean
Qihoo-360 Clean
No IRMA results available.