Static | ZeroBOX

PE Compile Time

2043-04-24 08:38:16

PE Imphash

4328f7206db519cd4e82283211d98e83

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00036000 0x00035a00 5.99504115254
.rsrc 0x00038000 0x00020724 0x00020800 4.66157953483
.reloc 0x0005a000 0x0000000c 0x00000200 0.101910425663
.idata 0x0005c000 0x00002000 0x00000200 1.14864242974
.themida 0x0005e000 0x0047e000 0x0047e000 6.08555950371

Resources

Name Offset Size Language Sub-language File type
RT_CURSOR 0x00039384 0x00000134 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_CURSOR 0x00039384 0x00000134 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_CURSOR 0x00039384 0x00000134 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_CURSOR 0x00039384 0x00000134 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_CURSOR 0x00039384 0x00000134 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_CURSOR 0x00039384 0x00000134 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_CURSOR 0x00039384 0x00000134 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_BITMAP 0x000399a0 0x000000e8 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_BITMAP 0x000399a0 0x000000e8 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0003d540 0x00004228 LANG_ENGLISH SUBLANG_ENGLISH_US dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_ICON 0x0003d540 0x00004228 LANG_ENGLISH SUBLANG_ENGLISH_US dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_ICON 0x0003d540 0x00004228 LANG_ENGLISH SUBLANG_ENGLISH_US dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_ICON 0x0003d540 0x00004228 LANG_ENGLISH SUBLANG_ENGLISH_US dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_STRING 0x000440d0 0x000002a0 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x000440d0 0x000002a0 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x000440d0 0x000002a0 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x000440d0 0x000002a0 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x000440d0 0x000002a0 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x000440d0 0x000002a0 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x000440d0 0x000002a0 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x000440d0 0x000002a0 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x000440d0 0x000002a0 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x000440d0 0x000002a0 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x000440d0 0x000002a0 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x000440d0 0x000002a0 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x000440d0 0x000002a0 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x000440d0 0x000002a0 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x000440d0 0x000002a0 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x000440d0 0x000002a0 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x000440d0 0x000002a0 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_RCDATA 0x00055554 0x00002092 LANG_NEUTRAL SUBLANG_NEUTRAL Delphi compiled form 'TWizardForm'
RT_RCDATA 0x00055554 0x00002092 LANG_NEUTRAL SUBLANG_NEUTRAL Delphi compiled form 'TWizardForm'
RT_RCDATA 0x00055554 0x00002092 LANG_NEUTRAL SUBLANG_NEUTRAL Delphi compiled form 'TWizardForm'
RT_RCDATA 0x00055554 0x00002092 LANG_NEUTRAL SUBLANG_NEUTRAL Delphi compiled form 'TWizardForm'
RT_RCDATA 0x00055554 0x00002092 LANG_NEUTRAL SUBLANG_NEUTRAL Delphi compiled form 'TWizardForm'
RT_RCDATA 0x00055554 0x00002092 LANG_NEUTRAL SUBLANG_NEUTRAL Delphi compiled form 'TWizardForm'
RT_RCDATA 0x00055554 0x00002092 LANG_NEUTRAL SUBLANG_NEUTRAL Delphi compiled form 'TWizardForm'
RT_RCDATA 0x00055554 0x00002092 LANG_NEUTRAL SUBLANG_NEUTRAL Delphi compiled form 'TWizardForm'
RT_RCDATA 0x00055554 0x00002092 LANG_NEUTRAL SUBLANG_NEUTRAL Delphi compiled form 'TWizardForm'
RT_RCDATA 0x00055554 0x00002092 LANG_NEUTRAL SUBLANG_NEUTRAL Delphi compiled form 'TWizardForm'
RT_RCDATA 0x00055554 0x00002092 LANG_NEUTRAL SUBLANG_NEUTRAL Delphi compiled form 'TWizardForm'
RT_RCDATA 0x00055554 0x00002092 LANG_NEUTRAL SUBLANG_NEUTRAL Delphi compiled form 'TWizardForm'
RT_GROUP_CURSOR 0x00057660 0x00000014 LANG_ENGLISH SUBLANG_ENGLISH_US Lotus unknown worksheet or configuration, revision 0x1
RT_GROUP_CURSOR 0x00057660 0x00000014 LANG_ENGLISH SUBLANG_ENGLISH_US Lotus unknown worksheet or configuration, revision 0x1
RT_GROUP_CURSOR 0x00057660 0x00000014 LANG_ENGLISH SUBLANG_ENGLISH_US Lotus unknown worksheet or configuration, revision 0x1
RT_GROUP_CURSOR 0x00057660 0x00000014 LANG_ENGLISH SUBLANG_ENGLISH_US Lotus unknown worksheet or configuration, revision 0x1
RT_GROUP_CURSOR 0x00057660 0x00000014 LANG_ENGLISH SUBLANG_ENGLISH_US Lotus unknown worksheet or configuration, revision 0x1
RT_GROUP_CURSOR 0x00057660 0x00000014 LANG_ENGLISH SUBLANG_ENGLISH_US Lotus unknown worksheet or configuration, revision 0x1
RT_GROUP_CURSOR 0x00057660 0x00000014 LANG_ENGLISH SUBLANG_ENGLISH_US Lotus unknown worksheet or configuration, revision 0x1
RT_GROUP_ICON 0x00057674 0x0000003e LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_VERSION 0x000576b4 0x000003d4 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_MANIFEST 0x00057a88 0x00000c9b LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document, UTF-8 Unicode (with BOM) text

Imports

Library kernel32.dll:
0x45c078 GetModuleHandleA
Library mscoree.dll:
0x45c080 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
B.idata
.themida
KDBM(f
Y_c
Y_c
Z?_d
_b`*
0&5e&O
v4.0.30319
#Strings
!&!<!e!
Defrayals
ExtensionAttribute
System.Runtime.CompilerServices
System.Core
System
mscorlib
CompilationRelaxationsAttribute
Boolean
RuntimeCompatibilityAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
String
TargetFrameworkAttribute
System.Runtime.Versioning
Defrayals.exe
<Module>
Chr_0_M_e
Object
<>c__DisplayClass0_0
FileZilla
NordApp
CryptoProvider
CryptoHelper
StringDecrypt
EndpointConnection
Program
<>c__DisplayClass1_0
EntryPoint
FileScanner
RecoursiveFileGrabber
AllWalletsRule
ArmoryRule
AtomicRule
BinanceRule
CoinomiRule
DesktopMessangerRule
DiscordRule
<GetTokens>d__2
ElectrumRule
EthRule
E_x0_d_u_S
GameLauncherRule
GuardaRule
mYDict
OpenVPNRule
ProtonVPNRule
ResultFactory
ParsingStep
MulticastDelegate
<>o__7
DataBaseConnection
CommandLineUpdate
DownloadAndExecuteUpdate
DownloadUpdate
ITaskProcessor
OpenUpdate
TaskResolver
Extensions
<>c__0`2
GdiHelper
DeviceCap
<>o__4
GeoHelper
NativeHelper
t97E4vCaRoOx9vRSke
x0yb4g623v0xr6bXLt
SystemInfoHelper
FileCopier
FileScannerArg
FileScannerRule
IRemoteEndpoint
RecordHeaderField
ValueType
SqliteMasterEntry
TableEntry
Autofill
ScannedBrowser
ScannedCookie
Account
BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO
BCRYPT_KEY_LENGTHS_STRUCT
BCRYPT_OAEP_PADDING_INFO
BCRYPT_PSS_PADDING_INFO
HardwareType
UpdateAction
ScanningArgs
ScanDetails
SystemHardware
BrowserVersion
ScannedFile
UpdateTask
ScanResult
GeoInfo
GeoPlugin
LocalState
OsCrypt
<PrivateImplementationDetails>
__StaticArrayInitTypeSize=6
__StaticArrayInitTypeSize=10
__StaticArrayInitTypeSize=12
__StaticArrayInitTypeSize=14
__StaticArrayInitTypeSize=16
__StaticArrayInitTypeSize=18
__StaticArrayInitTypeSize=20
__StaticArrayInitTypeSize=22
__StaticArrayInitTypeSize=24
__StaticArrayInitTypeSize=28
__StaticArrayInitTypeSize=30
__StaticArrayInitTypeSize=32
__StaticArrayInitTypeSize=38
__StaticArrayInitTypeSize=40
__StaticArrayInitTypeSize=42
__StaticArrayInitTypeSize=44
__StaticArrayInitTypeSize=46
__StaticArrayInitTypeSize=48
__StaticArrayInitTypeSize=52
__StaticArrayInitTypeSize=58
__StaticArrayInitTypeSize=62
__StaticArrayInitTypeSize=72
__StaticArrayInitTypeSize=76
__StaticArrayInitTypeSize=78
__StaticArrayInitTypeSize=88
__StaticArrayInitTypeSize=90
__StaticArrayInitTypeSize=102
__StaticArrayInitTypeSize=114
__StaticArrayInitTypeSize=124
__StaticArrayInitTypeSize=144
__StaticArrayInitTypeSize=152
__StaticArrayInitTypeSize=154
__StaticArrayInitTypeSize=176
<Module>{56A8743D-31EB-47B8-8E1F-16DD61303D52}
DON5Y82GLsAaKW8wGA
tAST9TswAZjx4RVMqv
L2h0RxyyYcPAx54x8a
TMbrfGOBIHADZMIg9H
NDk32QUs17jIXJh5Qn
qKa80ExOL0Dh182viN
HMMLjYr2k0WlhuG3fW
Attribute
yL0h0Gi3gZJJcJnb7k`1
lxhCyJ5ZwJ0nyv6EuI
kYxK16Ja9LGCvvrWUH
yJqrj5YswD1Tp78ase
bKgLEEDjByuO1kIxBq
B33Jh3Na550NKPGMrG
MELunucIUYZSBThuS9
QopItgajGvIrDvWvS5
rlvBhvnCPX71OhLHqN
lKPrcsuumrxYtbCdng
K8mkyngV9ZdW7c3lGZ
sjcvh0HJlJw9UYoCBv
HUKE7YksbYHfIid6Bh
R8FuHXSk5gLh8TLQxA
J28jdcEvmxQr3GEWIk
I4AYYmFg9BoxsescBQ
c7QNqpVKIxAJUYRD2a
nEMVlKwJO0VZWDq0AQ
h6yI5To6OovDoARCh9
<PrivateImplementationDetails>{8523FF08-5620-4A1A-925C-3F0A7BE601A8}
__StaticArrayInitTypeSize=256
__StaticArrayInitTypeSize=64
yTJTaOcOqYP71U5Yva
List`1
System.Collections.Generic
IList`1
profiles
IEnumerator`1
Enumerator
Func`2
IntPtr
Enumerable
System.Linq
Select
IEnumerable`1
GetEnumerator
get_Current
RuntimeHelpers
InitializeArray
RuntimeFieldHandle
FileInfo
System.IO
get_Directory
DirectoryInfo
FileSystemInfo
get_FullName
Contains
IsNullOrEmpty
get_Chars
ToString
ToUpper
Remove
Concat
Func`1
MoveNext
IDisposable
Dispose
IEnumerator
System.Collections
Exception
sTrWcFYdn
Combine
Exists
IsNullOrWhiteSpace
op_Inequality
fUlCqqEdd
DateTime
StartsWith
Convert
ToInt64
get_Now
AddMonths
get_Ticks
dg967E4va
FoO2x9vRS
Replace
ToInt32
ueLs0yb4g
MakeTries
success
Invoke
d3vy0xr6b
ToArray
ReadAllText
LbhS6y0OcBahN84Sgt
l0T0LbXmxqsBkk5vvB
FromBase64String
aCTJ3sWLSUuAjWHcTh
XljWeGoBDSA9Bw8OFw
UlR7KaD3YVnEEro3QU
HvSNmeBiRX7wbohcdQ
J6iSsRaxo09kDrAZZJ
StringSplitOptions
qxtO7sQASRBAKeMOAM
Svu4M8M2riOHl94eEy
Gv3PukthimBmwU0vX5
F9bJU2ZNbbG9o9bHMQ
K2XxmlsY5GpUybCWcB
zZNEREHkpMUFowJQIs
UC2CelRqmE
CcLCwfkrux
mkyCol89iN
pQiCdumRRy
IXWCf7E3gG
bSSC4DMqMc
DFvCZCLZSi
dl7C0BuscO
idVCIuKAaQ
aHjC9ULmYF
sudC8FNxNH
.cctor
vCOCKhI4Q9
g3PCpCNQqH
get_Count
CMuCR6JaPY
vSOCho2OCn
zsSC3vir0v
VusRmSWDrIbJ2ZpJGyq
Environment
ExpandEnvironmentVariables
vjukpB8dhoDtDqtaYq
GetFolderPath
SpecialFolder
Format
AddRange
SLtOeON5Y
XmlTextReader
System.Xml
XmlDocument
XmlReader
get_DocumentElement
XmlElement
XmlNode
get_ChildNodes
XmlNodeList
get_ItemOf
NGLUsAaKW
get_Name
op_Equality
get_InnerText
Encoding
System.Text
get_UTF8
CmHMJKmYKJkg8NmS9t
jO2wMhqmtUFGxqtEbu
hcMIj7UaG8L2L3h87P
fVeN8W5qaG4cRkTwjK
z3dfQCuhDkZLFJa6yX
nD1fDv7AukCjokjtFi
yCp812CKI7cKmBrF9C
ne4SToA6vUHb3qIdxW
TlXOXUEA9JWxlAKn9R
GetString
MRrvPmy0QtjijLXLEh
WgBWsKr1VOe6JgIrPw
ByqNObwGstn7Kv6nWR
CqkD7a3XrYPFBc10lV
qDHDMg15JUFBZTjQG2
ngWOv7VxYCcJf3LGJF
Xd3mYlhA4Oqwy2bP9h
hFj2ae9Glh32qgplTK
MwGxAHAST
GeckoRoamingName
profilesDirectory
GeckoLocalName
TABhmJGXmVgCjO2PBK
TPJtoijFFZLmkXDK5k
BhBy7aI9uiDPnwx4NB
i4fNEJTQ2EnaHl0hv4
iEoNiPF9NMMq9G3jcl
YqBxNkNTYakPj3TQ27
DsI1q74SKub9WwB88h
g4tCmRT3mH
stPCGcf1av
lf9CPttSbW
FUan3CWB5GOhs9YQXgp
get_Exists
GetDirectories
SelectSingleNode
ab8HRYnoUTSXSrEQnf
BCryptOpenAlgorithmProvider
UInt32
phAlgorithm
pszAlgId
pszImplementation
dwFlags
bcrypt.dll
BCryptCloseAlgorithmProvider
hAlgorithm
BCryptGetProperty
hObject
pszProperty
pbOutput
cbOutput
pcbResult
MTwrAZjx4
BCryptSetProperty
BCryptImportKey
hImportKey
pszBlobType
pbKeyObject
cbKeyObject
pbInput
cbInput
BCryptDestroyKey
BCryptDecrypt
pPaddingInfo
Decrypt
bMasterKey
chiperText
GVMiqvI2h
KRxAyYcPA
CryptographicException
System.Security.Cryptography
h545x8atM
VrfJGBIHA
nZMYIg9HP
nk3D2Qs17
arrays
Mms2cvphZM85209gEE
BYjICHv3i7iwCJFuDP
GetEncoding
Ug904KLFfDpc9p240W
GetBytes
p2H51QOvnKtsJuj0A7
UuXwFZb6R1ahsQ7sYc
OSoZO7SBxhELSwP7Ir
hoQoRAkFMS3RKdr5tb
KwmIogiiceD42Bq84J
laWooDfnDCMObo3WOS
c5qS3o625galhwjvXb
KlF7B6RO6UVyFnYtqy
Marshal
System.Runtime.InteropServices
FreeHGlobal
dTNwAKeDm2wI0VGZ2L
BitConverter
gUFwWFPmTLYcL4CXen
get_Unicode
nAph7MllTrCqOCZH2h
AllocHGlobal
bwWSKhzbuOvlf3MJSc
yPYC0V2YGg24wYNRpmW
ScaCCJ22XUG7CfYeUFE
Buffer
BlockCopy
SHvdpn2J9RTLAouChZ8
DecryptBlob
EncryptedData
DataProtectionScope
System.Security
dataProtectionScope
entropy
GetMd5Hash
source
MD5CryptoServiceProvider
QIXNJh5Qn
get_Item
CultureInfo
System.Globalization
get_InvariantCulture
IFormatProvider
ICollection`1
U6VjnK2oP7C8KLCAwIN
A0SsTE2DWtUolXyUmDu
uEYg6m2gWYZfnyyylgD
kAvN0m2c2lwWo5fBmT0
JbJIla20uqSLmTIUIXx
ProtectedData
Unprotect
lj4xlH2XfU82rtrnsr2
get_ASCII
KMY3p92WVZCDiDkUw5c
HashAlgorithm
ComputeHash
FYMnHs2BN32UxkL4Aj5
Vceurv2a5t0f3Q6rhkg
BadsHQ2QXmgjv8kkyUZ
qKac80EOL
StringBuilder
KDha182vi
ohMnMLjY2
stringKey
i3cEAN2ZrAWbFf6fmZM
PLPgL52sxhwNN9cay5G
get_Length
E3fK3M2HTq4EPHlJY9J
Append
UYvqD42MtgqqC0l6urQ
hSI8ND2ttl04r1GDqlZ
uaXnJh28LjQLC3574vl
C0EJCp2VdKtS4QMsEA2
Y69JjF2hK5ZmBqDHkO1
u0WulhuG3
hWWQuY2mSXUqIt7OKbB
RequestConnection
address
ChannelFactory`1
System.ServiceModel
EndpointAddress
Binding
System.ServiceModel.Channels
CreateChannel
TryGetConnection
TryGetArgs
TryVerify
result
TryGetTasks
remoteTasks
TryCompleteTask
taskId
managed
IClientChannel
Gli83A256E6TJ4VoN8m
iy8Sle2u6TZWtkaIxUL
ow6sjd2qjEJvW2437wB
xuRkLA2Ul1Ck5T3LxHQ
lVNK5b27ALstQPIZndd
FXbDh92Csyw4iJ7onMn
uAf6pm2A1kT4o6BmEhZ
AUfksZ2ESea6u8EfQjq
updateId
PFFpdO2y0e5K5as0Kp3
dTDTSQ2rtYWC3sRL0CA
SuppressFinalize
uCyX3A2weHogqaXJI0G
ICommunicationObject
nwVn2f23rAGnyvAIhkK
XFcyji21Bs1fZK9FvsL
CWFgL0h0G
Execute
Thread
System.Threading
ThreadStart
set_IsBackground
SeenBefore
Directory
CreateDirectory
GioWd329Zat0OjXbpmN
jZBf532FqWuvXnIvKV3
OHwpQN2Nu7wdncwvIL3
teTQtQ2GHPg2aCKIdWt
V4D3XH2jPa9eOmV7T6C
HdHear2IU6IoxjQfqLx
J12CBp2TeqKUOYbAY8T
UR6S3k24KeoS228qbP3
KSVKNx2x7rpMoUeriqx
FWQevl2dlRSxBQ1SOnn
mvQqtQ2K6qm3XHaCAuC
Tr24362ngvUIj25xndr
b9U3Pp2SHe6W5EM9GdA
MmvxqA2kkqAW2tHZ3pP
wdUrAW2p8HJRbdXmXus
K5E4G32vcSwTqZ417Zo
udHCBJ9UMW
LfvlKmWajfsdBGtPe7r
X8uCjRhRLO
mbQwbhWtuVm7ikYuVhE
DialogResult
System.Windows.Forms
MessageBoxButtons
MessageBoxIcon
MessageBox
lNmys9WQpfX8Rsfbs5l
oTxLFVWMMp2VqWHZrRW
Message
sRlwMx2LYpFcqObkR9P
OI5RTE2ihfCwyAPvwrv
KjMQSC2fRv6tGqBaHVT
n94INj2O66CLAIAlyTT
hsK7en2bNTYK6TeQZiF
scannerRules
GetFiles
SearchOption
FindPaths
baseDirectory
maxLevel
patterns
TryParse
GetLogicalDrives
rootPath
searchOption
searchPatterns
EnumerateDirectories
BSiHaLJYgs1hTms98ws
GetFolder
scannerArg
filePath
GetScanArgs
ct2T88JgvuUBs02tjRb
BbVxr6Jcw4UqolVhgIX
cJZucZJo1YdpMdnuaka
q3BsLmJDY987Bk5ghco
xYirmgJ0UBrWq9YlyAS
YaQ7orJ2JaQd6ywZyKO
vbvGa1JJODcHLC4uZrf
A2K4jNJXJ30hnRkPu64
ld8gAGJWIyhdkgQiRRY
eOLbVEJByLEKNYcO23P
LpPvCXJabncH1BB1BOF
KMOkwKJQ2GKgBEtPOMM
XPgcqZJMEnOd4p1AgTM
NcqEplJsMPCEmrLE70a
jc5UMsJtOBpsnqfxwmn
cZTiKSJZ101pW4IFCHd
rqrSxlJHOBiZVsrCSwP
QHKTBoJ8e4vyfyjakvH
cNNSa9JVIIsETkttoxk
UBrnf2JhIUZD2uorm69
njU8VdJmjKowteMt2Hl
gBnfeSJqEACy87IY8RE
oS7HOTJUebceeAaEekL
JWYQBGJ58glhL5lFMgb
EKa4lTJuObb8ILATokV
rPUgylJ7ttuacQZ8JDZ
HgZHJJcJn
V7kkwVCTP
KeyValuePair`2
P3pL15JCAhSxdZ63CZ4
browserPaths
get_NewLine
get_Key
get_Value
kkWKkCJy8HpLXJweCmh
JwdfnkJrFvNlv1DL4QQ
alNhPlJwENPD97i1XQ8
O3kwMcJ3FMUpKkXCtkD
P3qdSYJ1rd3ID7jy0Tg
HieejgJ99F0LUZZEG4W
aEFFHeJAQDlARx5Lgmp
p4VlJaJEvvBbNDJTAXI
rWvCtnoZXo
ptaCTc2b0e
EoeCbTltvK
Q7YCMYovKu
pZeCXddcNf
dBArV2JF8f1drrlKHOX
eoOVcQJjPwBpwCnmO5Q
aiHb0OJN2uJRgtjjDqN
ioUAnEJGVNuBFmw0OTf
n0DRVBJIb7LDew9xsAL
s3ejDpJTQj5A7HT34Or
sFfOXXJ4YTWWXQ95VaX
xIQSJGJxcuNGdVgd0XS
gU4Sav71m
GXcrPuJdL6CRiIttR2g
get_PassedPaths
set_PassedPaths
fileInfo
owkXy2JSQ1F67aAUEQv
NKgNGZJksnpEefe6JJI
o8LBSsJprtrySe9vVLB
m5YddwJvfZNCB0IUgJa
m7AwbCJLcd0vmPBybm2
qgUmYLJOfceqcPfY4jN
qtjUIsJbNtgXTvyYpXU
KmtweEJi0fr2AwyAKHv
DhtFAOJKu15uvjCeXJV
WCtDBhJn1iCtB71y6jM
PassedPaths
GetTokens
<>1__state
<>2__current
<>l__initialThreadId
IDtUZHW82q3D5WUna8w
get_ManagedThreadId
System.IDisposable.Dispose
System.Text.RegularExpressions
MatchCollection
System.Collections.Generic.IEnumerator<ScannedFile>.get_Current
System.Collections.IEnumerator.Reset
NotSupportedException
System.Collections.IEnumerator.get_Current
System.Collections.Generic.IEnumerable<ScannedFile>.GetEnumerator
get_CurrentThread
System.Collections.IEnumerable.GetEnumerator
IEnumerable
C2mBsQWm5X8my4fTGiI
y4sf05WVCdPQI5kq0tW
mGgbcRWhmX8b8P9YxGF
j0xo5xWqhCxXrUDxhZ2
joadj3WUjgUbManl0GM
MLWKHEW5WRlvoxIFJBt
ISZWNwWuWyV7CDHHeeH
SG241oW7kPA5GJTV1pn
FIeZLyWCswIOQNkVgyI
sT5aGqWA2eqKTuZ6haK
Matches
KrcGBIWEqN8iquUWG0n
yo1scEWyvweWTvFnw8f
tB2fd9WrVxNWonpe1EB
AppendLine
wLwMF7WwnHQK6bw56nW
wwCPKLW3NXltg6FxIkq
GxhL6oW1aEqbK36kaic
Mgj6jgW9xWJlvmyWEsJ
JLJjKlWF2IEP6QLJYCf
aVfMbLWNls4sGOgiqMw
System.Collections.Generic.IEnumerator<ScannedFile>.Current
System.Collections.IEnumerator.Current
XWMLXhJeifBngOFPkUw
UpygFAJzukGryR8EheV
dYPrBYJPRggHGEqtgGI
iao0xkJlmySaByuP8nn
s3ZWLLgYe3fCt1PuHhi
CXanSDg2p0Kx83Hex1w
C2Xii0gJAhve7kPtTvr
oUDl47ggqu8up7jRBuy
ho6uI0gcyX5Fs6GW0kE
xsEV8fg05kmtecjDkv4
f6IF0cgXZpEtGtR59OO
yoFXHEgo8r3q8wgpeeZ
wW1OvWgDJ5oWI4X5Kuj
PtxksvgWQKKhxuviAEp
M2WJIigB8pxNR2G8i1r
AYQf2qgaCGX48rC90WT
bONGCYgQd4dqglj6voi
YUPHTBgZ5BXfxYUaA5Y
FWHRBNgsmA4YEr8p1Es
WcxMccgH2xkTevLHJHo
RCkBihgMbcqs1iDZIhl
fNecgegtDLJgIwo95mI
PcicHrg8ah21mx8mhff
wKOR01gVOIQCrSDj8kP
H8AwFTghtZSvjRrB3j5
GbDWCGgm4YkFsqasF7u
rUFiypgqalXbNL79qZs
RegistryKey
Microsoft.Win32
Registry
CurrentUser
OpenSubKey
GetValue
OLMCCVgu2HHuvktRTHs
pOrmAkg72KEDxipPJL2
pE3LqXgCnpyryt0dI6K
vvBBfKgUMOrTm4ooPIV
YD5rXxg5vkt4NRXMpaO
Qcx9pugACLYXZI0KW6w
zGKfbPgEQ7TeKkCVV6i
TqpKWIgyy0P3gVi0dfJ
lVqXydgrgGNyc0pOYA6
jym9Tkgw18v7gJZb1tV
JaABCsg3n6iD4E3HA7K
VFjao2g10ecrKrhWVES
c9BHZFg9UiIeRy9A6Pe
ElqZLpgFAIkQy1AaiLq
HGbFHSgjBgZWYJV09Up
ktW5SGgNUAWWVTSJF7w
KsMgJIgGgWMAIqU9DSu
YqQhYxgIJpU4f3bK000
OC3aXlgT6OQ155vWdBW
oaomv5g4Jo47PH6Pprt
SYxVcAgxFk8nwS8199M
kNGXR8gdBEnIx87Tsod
pjSwIOgKX8lKB5NoVHe
i2VPJCgkD7G5WeRty3E
XbKw5ignKarRGcMLAT7
xa8JZogSp8d0k8wApQj
rebejfgptHQRhrqeKuJ
T69sccgvq88DIFQ2iy6
l8QPu3gLE1StOkTRsCd
VmnR1VgOFcQ7np8f76a
J5d29Zgb80tCWRJhBVe
pwryxkgiZTa4BeKXa2P
Reverse
ytnECJxhC
bqK0qGgzLokPM5JUtrN
OrderBy
IOrderedEnumerable`1
Random
sl9HSDF234
settings
AKSFD8H23
asdkadu8
sdfo8n234
Assembly
System.Reflection
GetExecutingAssembly
sdfi35sdf
get_EnglishName
asd44123
CallSite`1
Func`3
CallSite
Create
CallSiteBinder
Target
CSharpArgumentInfo
Microsoft.CSharp.RuntimeBinder
Microsoft.CSharp
Binder
InvokeMember
CSharpBinderFlags
fdfg9i3jn4
TimeZoneInfo
get_Local
sdf934asd
asdk9345asd
a03md9ajsd
asdk8jasd
ToList
askd435
sdi845sa
get_Actions
set_Actions
pkTiuLcJMVhS6Q3pFDR
W0V395cYBysjNVfTmx0
XwPsDDc2qaJldOhL6rU
FhgecFcgNYPlUjlHRr0
ukXSctccin0jcieFxZt
wYRd6kco1Jub0LvV2dG
DY9xcncDpl56AE1dWBE
NjSlI3c0o1K57BNKwxu
hiM47HcX66D2b6f5h2i
hEDAQKcWD65KqL6lW77
MW08CEcBQYS41W0OA01
u0EQTGcadqV3eaY1XLC
irefyucQg5AB2HU8P40
oWPBPfcMFCQMPZXp4tX
zGwxZ1ctfPu6HT0DDyx
rsTJejcZSMjXjSR5CQ4
ALRpHycswQb98Pdlujy
vXM6H6cH98j7L9pkUyq
get_UserDomainName
XwJ8e2c8Dx5FSSAr5JS
get_UserName
RAbcGycVSfTachC0GnJ
tX9afbchcaePaqaaXAJ
y5fcbscmLZCAc3KqcPn
gCjOIIcqyeiitBCVkle
CClghacU5IZNKfGCFxx
get_Location
jRido8c50ZeWTSdnDQ3
InputLanguage
get_CurrentInputLanguage
l8dmk4cugGiSJJeaNyF
get_Culture
N99bBvc7UWVP5O5FBtY
juNpQBcCZOvkN5RgJ5U
RuntimeTypeHandle
GetTypeFromHandle
NP8PH8cAsUUWc7oN0jr
UCq1uxcEFtdg85uKnbs
CSharpArgumentInfoFlags
QGkB8lcyGEX2PWNqai5
get_DisplayName
fRwagJcreAmTJK8CVBG
XMdHNicw5ULD72j9cYO
EU02kyc3FlHCsuonUOf
jT9bhHc1Y8noOurx2G1
YBJ7quc9mlEcA8kuxOU
Q5UKxYcFPFw3jlupMHw
fXuJJlcNgImV5CH0AeV
MkevaAcGuSEM8AsO35H
G3CsNNcjf5OUXgT91jO
uO0ksVcI47PCo6ngqIC
eVP2hucTuMyhdEDwwnN
ErhkfHc4okqqpl5nTWf
Actions
object
method
BeginInvoke
IAsyncResult
AsyncCallback
callback
EndInvoke
__result
J8rC1Y2hki
LBwWAKWGAhUNmp6KUKF
j7iCqXxB11
y9TfjAWT061nIc2Yyt3
tfKiQKWj7uMuEF2H6QV
NgDWbYWIjm0A98j9L1E
N6qC7JUQOu
vpxClB3T9C
EgLdEEjBy
sO1fkIxBq
UInt64
B33eJh3a5
l0NKKPGMr
Fields
P8EpLunuI
hYZRSBThu
g2wvCAcxWkMGh8rWoai
get_RowLength
fileName
ParseValue
rowIndex
fieldName
ToLower
CompareTo
rowNum
GetRowCount
fJZvwJ0ny
Resize
x6ELuIAYx
get_BigEndianUnicode
ReadTable
tableName
E16Fa9LGC
wvrVWUHFJ
Wrjw5swD1
Up7o8aseW
wGnebdcnCeBahZwgnq7
XvB3l4cSlPwfmTeydQj
V432YEcktX4eoEU5qyp
ReadAllBytes
GDC8Ykcp3pWCnsBUQ1p
XKpCjCcdPSH4JhMas8p
gosS9jcK6GksurnlR9f
zD6kkWcvnZZ3XYM9s92
A4rJvccLvMnCVSRguZi
vXhMGVcOwTKLvoFrQhj
ME65G4cbDlBGxYA9MCL
k3EENkciJitoYrimtg7
cFE5NtcfcMvOIgToqcE
Lloi95c6bBerWDKsYGG
YQp5oycRtwjEn3R8TVd
C3MLZncee1n4UfJevyo
StringComparison
Compare
kr1sFdcPPnckpihOGd6
IndexOf
yAqJJYclnhSNYTcaWUb
Substring
nCLJM4czej1JqSQ5K8T
TrimStart
syUAdUoYcbeoEFFBfTe
FZMkCro2tPTG0uErcOE
uIA7ROoJElpSdtw58nA
nbREPAogILCPECgJPSv
RowLength
AjiQq4ocR77UWGcrBZg
IsValidAction
action
Process
updateTask
ProcessStartInfo
Kd09NnooNM4N8eCrpIV
WghH4ioDuyA3R4UwOUE
OqbcA3o04kM3n1DVNmB
F8avapoXvxWHF4ZcHhX
PW0MT6oWGlC5rXp7pjN
set_UseShellExecute
pkujJLoB66o23RYYOp0
set_CreateNoWindow
t2OoGRoaZ3SgtUVYJlM
QxbLjAoQYqYsmI5dTx9
WaitForExit
flgOnkoM76ffPw9vTXh
WebClient
System.Net
bwJ7cIotF3CCNcIA8rT
wXOYlsoZj3U3mi5cLeZ
jookdMoscErhJPNArOJ
SnvXE4oHgicGNpOYlwt
fcZWyso8SVJOH6ZSUxs
kAEZh2oVKrHRjbygZpO
DownloadFile
XqGsD3ohvEyugZ2v0Lj
KMIksMomS8enCKEM5Ie
set_WorkingDirectory
O96Tv4oqPioIVmo3r5L
set_FileName
OtXJiIoUo1OupINMQhN
DownloadData
pMXohso5iuHNiIXkjP0
cNb6saou0nNxcq0ehy8
V0BQRpo7Lkx5rJiS34i
UA5i52oCoL84K2KQUDd
XjMko7oAYKD7wS3a3Ju
fLOwpSoEmpDw6RJb60B
bParC5oyulEOJON5nvZ
WriteAllBytes
uIRwElo1rwQZU9WmHHh
jMgjswo9jFB4CvMEtP8
vHJIR0oFNKaCx4B9tqH
KGcWVOoNp0PP9HVHsYV
v9BhopItg
QGv3IrDvW
AIBEHVoGnkhx0xVEvIS
ServicePointManager
get_ServerCertificateValidationCallback
RemoteCertificateValidationCallback
System.Net.Security
get_TaskProcessors
get_Result
ReleaseUpdates
Ri3iuOoTxGOHwMfERQq
SecurityProtocolType
get_SecurityProtocol
yFA4nno4EVuxIlociQI
set_SecurityProtocol
Uv2vGgoxdNg0mCn2Ek1
Delegate
rl6kXOodmQTUIR753nD
set_ServerCertificateValidationCallback
fQUuRaojBohtNYf9aRn
vdDhnyoIdlLjZQXNNVm
TaskProcessors
Result
hnA6Qg209N
hgl6Wkqrn7
l64CzdF904
sender
X509Certificate
System.Security.Cryptography.X509Certificates
certificate
X509Chain
SslPolicyErrors
sslPolicyErrors
NashkMoKqtekDa1KrBc
DistinctBy
property
GroupBy
IGrouping`2
<>9__0_0
vQE6CEgu7G
ChangeType
StripQuotes
ContainsDomains
domains
SelectMany
ReplaceEmptyValues
n9lJamokTYj5vmsXfEV
YWE0dWonydoRyadq130
jgXBKHoSqMO5wwD57wn
d0rj7uopbGH1wJB4QiF
XeVxrkovFCDg11bOGCJ
QRMQd1oLupSqgd9c6gG
z72UaZoOTvclFJxG6wn
dVQfPQobjfVDdHvRYS1
Tq5723oiVZYkpa0q7yN
cu76sB2F8j
nEj6yxpe1y
LN16OtDlNm
qLhuCvWL6KkHq35dVKf
Sk466mncoH
Bff62wwuHS
Ng3axiWOvuyofLKjZ0W
eQjPIsWbQONPFD6YxjM
wS54ulvBh
JavaScriptSerializer
System.Web.Script.Serialization
System.Web.Extensions
QZxZU8of2YE3CdFuyED
get_JSON
set_MaxJsonLength
FromJSON
Deserialize
ToJSON
ANX6Veo6pFStSWPkMRL
Rgw4GDoRmYWLl7qUX61
qndATYoeIOgLPtIFAyK
KBvLh1oP8QTtSHSpt3B
Serialize
y8EEi9olDEmj7tbBpin
xCPZX71Oh
GetDeviceCaps
gdi32.dll
GetWindowsScreenScalingFactor
Double
percentage
Graphics
System.Drawing
FromHwnd
ReleaseHdc
MonitorSize
Rectangle
get_Width
get_Height
get_Size
Screen
get_Bounds
Bitmap
set_PixelOffsetMode
PixelOffsetMode
System.Drawing.Drawing2D
Action`5
InvokeConstructor
Func`5
GetMember
xHq0N5KPr
MemoryStream
iErPtqD2lI0xYHRanmg
GetHdc
BgF9qkDJyeqU13y2XIk
Eh4LE5Dgsl6fIG6YBMu
brRIuSozbZCihNAJgY7
uWwSfEDYFlimGb3vcUk
VH9PFbDcLLIE5dO1IL2
get_PrimaryScreen
yhes82DoWYHdwrBOxX4
Vei0gZDDObip4Lo4QEn
hPAh9mD0glqgAQUbngG
VYyc4CDXyUehqSAm2fk
ECNPaRDW42qm5FhSIMI
FromImage
YPXBfCDBub5lge3R55T
InterpolationMode
set_InterpolationMode
kcZ2iLDa7DtWZVCbhgn
SmoothingMode
set_SmoothingMode
nXV5ZWDQIUiDY1fdkcg
zHAI7jDMiI2J3XSa0Du
CZ4f0dDtm7xaSVL0ss5
ImageFormat
System.Drawing.Imaging
get_Png
aRtr5aDZQtt8HNI6PM0
Stream
kilvScDsmRRvh2frnwc
value__
VERTRES
DESKTOPVERTRES
MWY6UndNkm
wJS6xCUFs6
Y5h6rrimL2
QUl6i1eVNH
zPXVMrDHUu3KnJbE72j
ruA6WRDhU7r2hLtQAfX
c79ciaDm3DdtpKjYZUq
mLH5TADqKR2aEv7WyvI
AY4xeHDUuQGnRl3W9qL
aROjKbD59u7lMHg8REJ
wZowKrDueM9BXoJidxd
cFVcPpD7brAp0U47jBb
ldUXV7DCZv4li67bC78
QQB9aQDAiFyQ35hE90K
F9C3OrDE2XLVNKFsY5c
ThoZeBDynciF9Fj6MQI
wtYQGdDr4OhCkSSKXNB
T66OXNDwtKjXIC6Cmqg
KTKYYYD3QXIjcO1eN6w
YycucUD1tRKTy1uk2GJ
aEnwfJD8ml2BbfGnLEV
sx96wIDVV7La7wRpY6S
TsElZ5D9dPQ82ahGVRF
psuImrxYt
LoadLibrary
kernel32.dll
VCd9ng08m
FreeLibrary
uyn8V9ZdW
GetProcAddress
Xc3PlGZgj
sTrcFYWdnyUlqqEdd2
GetDelegateForFunctionPointer
duMgPIDGD9TNjU4CX2V
BcPDLJDFNoe6MuwncrW
hWlULyDNMsZF7j5suKK
nCmdShow
RDre95DjwpUVbGIUu37
CreateBind
BasicHttpBinding
set_MaxReceivedMessageSize
set_ReceiveTimeout
TimeSpan
XmlDictionaryReaderQuotas
System.Runtime.Serialization
set_MaxDepth
BasicHttpSecurity
GetProcessors
ManagementObjectSearcher
System.Management
ManagementObjectCollection
ManagementObjectEnumerator
ManagementObject
ManagementBaseObject
GetGraphicCards
ToUInt32
GetFirewalls
GetBrowsers
LocalMachine
GetSubKeyNames
FileVersionInfo
GetVersionInfo
get_FileVersion
GetSerialNumber
ListOfProcesses
GetCurrentProcess
get_SessionId
GetProcessesByName
ListOfPrograms
AvailableLanguages
get_InstalledInputLanguages
InputLanguageCollection
TotalOfRAM
GetWindowsVersion
pvhm0JlJw
HX9HIaD4FfZTsbqq0lD
set_MaxBufferSize
ABxWEJDxsjJvx8NbvxS
set_MaxBufferPoolSize
cL1ncRDdI9TN25hnXvi
FromMinutes
x3cFe1DK6NGboS4jiFQ
set_CloseTimeout
fXDTRZDn69NxFjL97kp
set_OpenTimeout
XLTQGxDS8dLaKMAJ7fR
set_SendTimeout
EuIk39DkQvqoyEyADEF
TransferMode
set_TransferMode
s50YR7DpogBVHUdxoAV
set_UseDefaultWebProxy
X7opIKDvXC9K4gV0B4h
set_ProxyAddress
vsxawNDLuvKtbRZrNk2
set_MaxArrayLength
tLbFnwDOtuUJBbwojan
set_MaxBytesPerRead
od9SH5Db1TuLRZaMUqE
set_MaxNameTableCharCount
ceEfqPDiQXm634QgP2B
set_MaxStringContentLength
XHDQfBDftH2MOBo7oUW
set_ReaderQuotas
XC052VD60qgFXPbrnqd
BasicHttpSecurityMode
set_Mode
GZwohoDRaX6Ttylqeir
set_Security
ISdr5iDIjvY8XMJAqXj
bIWRMQDT6iSFSwXX6tQ
yfAw51DeHT84lYHekPr
Gs9kjIDP4IUg4JHtaQe
P4jPBpDlTuhnUwTGu3G
mSiENQDzQpTqIJZ4PTi
NjfhGw0YqlHtgUvTraY
QPoBxJ02YTA921QaA5T
cahivs0JcDNeBon4a8A
XVYyfA0glpPF2seldC7
ToDouble
OA9qKM0cJJOJTxvYZOP
WPJKd70ooAxpuycrSE2
sDnE7r0DIi1N7CukBx7
get_Is64BitOperatingSystem
YWMLbn00a4lsJhFmblJ
OhAALN0XcLfqDfQSVY9
myO43x0WtOU7c7GHykQ
FD2yRH0BRLuJeRckWa2
UgjRNM0aoZtnHNlYVy8
hIc6JT6aJy
m6J6YnI6GI
yks6DhIjDJ
VvXYU0WlvU18ItJD0U6
pmU6AETNch
U5E65KnBq6
spgtF7B2M7lhtJxCrRI
zGQKoWBJU72noRpxrEt
a22ZbNWzMi2RT3Bh9rO
MlbZGGBYPNwrMlBv7eS
tfIBid6Bh
R8FMuHXk5
yuM2U80QkbBrkNXZBsd
MUYGoCBv3
CopyFile
CreateShadowCopy
GetTempFileName
gKEj7YsbY
ChromeGetName
ChromeGetRoamingName
ChromeGetLocalName
H0hTbh0Zcu6e88MsH9J
MPeyNG0MBs0HnEpQEyu
NAhNCQ0t5PbCLNIIwK9
yDjfXI0sQU21LlehJMZ
pFUn1s0HoAkVUDB3KRY
PtNd7w086pO7Y3lGt17
Ff1CvZ0VkGUQttvKKuk
jOhuBm0hHQ0gKsf8a7d
TZtaJu0moxFYqLWktyF
Jv9mhi0qSrmWStrMyY2
Delete
tLhX8TLQx
kZ2t8jdcv
OxQTr3GEW
LkTbRXrMC
Qfpen30UHl5I9GH0ILY
get_Tag
set_Tag
set_Directory
get_Pattern
set_Pattern
get_Recoursive
set_Recoursive
Ovwxn905qFgLTit1yBr
LTArrb0u82v7XccEosP
Pattern
Recoursive
nIrqBcFmk
jnkIY9073uQnmuYNOfJ
set_Name
HRWUPC0CB3bOGUYnkA7
oERgJb0AUDcL5h3raMv
CheckConnect
GetArguments
VerifyScanRequest
GetUpdates
VerifyUpdate
ItemName
RootNum
SqlStatement
Content
vSu1PYW11
Tjk7WTqMt
a8FQ8W0TjYvGDRw4Sgx
set_Value
ICapqv0498EUqV0db9r
ha8lB30xfiTQTISCVKX
qMFlh34AY
mmgz9Boxs
DscWQBQ67Q
oqpWWKIxAJ
hYRWCD2aDE
RVlW6KJO0V
uS1cqS0d7bnWRifNtgt
get_BrowserName
set_BrowserName
get_BrowserProfile
set_BrowserProfile
get_Logins
set_Logins
get_Autofills
set_Autofills
get_CC
set_CC
get_Cookies
set_Cookies
IsEmpty
fPAOQF0KS2kPjbfZ5QS
FYsn5j0nTTXmF1dcbUg
DoGUlw0SH9l8tantxQR
TjdSTb0kDja693bDACp
DiS7ai0pT33LlA1meK2
AxN4w50vZv1W1XuPmiV
BrowserName
BrowserProfile
Logins
Autofills
Cookies
JWDW2q0AQU
dyIWs5T6Oo
wDoWyARCh9
NfeWOKvxqM
Id9WUyx33S
IoSWxZOkt1
A0pWrsXK6l
G4GGVi0LnGoJjfyQpcu
get_Host
set_Host
get_Http
set_Http
get_Path
set_Path
get_Secure
set_Secure
get_Expires
set_Expires
dUV7wu0OmQxITSdj1U7
VDeiLZ0b3uFBrQ3mN8p
Secure
Expires
UdfWiL7cfg
xS0WA0LOPs
ks2W5ytGht
v1gWJmllfL
l1WTMc0iivUbOFXbsPC
get_HolderName
set_HolderName
get_Month
set_Month
get_Year
set_Year
get_Number
set_Number
zDy4Ht0fkfZ4LwJqnIS
KpEpis065BQUCYElZ1H
HolderName
Number
m8YWYnI81t
vaRWDfHjgK
BwMWNtRhuN
Gh6U5Q0RV7wMHXMvxRC
get_URL
set_URL
get_Username
set_Username
get_Password
set_Password
hpPCxp0emcRXvmBbHrY
WC7l6d0P30iKVc0ex5c
Username
Password
BCRYPT_INIT_AUTH_MODE_INFO_VERSION
cbSize
dwInfoVersion
pbNonce
cbNonce
pbAuthData
cbAuthData
pbMacContext
cbMacContext
cbData
WoXckM0l3itV63M80RX
zdoGfxX2rBnXilK0yDQ
D4DuE4XJw8xghAdJtbj
SizeOf
y4oyHlXgQ3t3y9X02at
gk3MwoXcYaCQyKmYkdL
WQ67ix0zIJYBxyGkntm
avXKcfXYBZ1hipiAZIt
IHIWasXooKYcA1jkgiO
BWm8i3XDPorWSSMG64X
dwMinLength
dwMaxLength
dwIncrement
pbLabel
cbLabel
kTwL2ZXBPiVL0biqA5H
KTDhlbXaVRlGdLv9o4o
sJW51pXQ2wbJidQ7KI6
cbSalt
aOd8fGXMdk7dXyGWOjI
Uvf7mYXthjZNahWibjS
rRiBF4XZfcNmq5Q0q59
Processor
Graphic
Download
DownloadAndEx
OpenLink
HFcWc8SmQq
IHSWavXqMd
ACiWnGH2XK
pspWuKyutD
kUUWgnOn8D
wkSWHlVtGv
tNBWkRYLkO
AImWSGapUm
imxWE0sqjq
I6FWvpEBBR
WIXWLXhvVa
IMkWFql0re
YGZWVEo1xG
MsRWw6KeLx
OOc7BoXqaomvxN2VJrl
get_ScanBrowsers
set_ScanBrowsers
get_ScanFiles
set_ScanFiles
get_ScanFTP
set_ScanFTP
get_ScanWallets
set_ScanWallets
get_ScanScreen
set_ScanScreen
get_ScanTelegram
set_ScanTelegram
get_ScanVPN
set_ScanVPN
get_ScanSteam
set_ScanSteam
get_ScanDiscord
set_ScanDiscord
get_ScanFilesPaths
set_ScanFilesPaths
get_BlockedCountry
set_BlockedCountry
get_BlockedIP
set_BlockedIP
get_ScanChromeBrowsersPaths
set_ScanChromeBrowsersPaths
get_ScanGeckoBrowsersPaths
set_ScanGeckoBrowsersPaths
z4Qx8DXUqaLdUnxOr6L
QTFcOGX5hSXA3OsmupJ
ScanBrowsers
ScanFiles
ScanFTP
ScanWallets
ScanScreen
ScanTelegram
ScanVPN
ScanSteam
ScanDiscord
ScanFilesPaths
BlockedCountry
BlockedIP
ScanChromeBrowsersPaths
ScanGeckoBrowsersPaths
f0rWoBiKvt
fmPWdo18C7
l5YWfifQXf
sCxWeCSptM
VwXWK5WAmx
wHBWpi00ng
xTAWR9hvTE
ta0Wh2oF9k
e7hW36sroi
QlHW4erALL
IRwWZXTkh5
M2SW0KUeF3
nBSWIOt92t
cjyW92RLdH
dlPW8YRhqY
RrHWPDAMhK
mSS886XuSGII6N92ouL
get_SecurityUtils
set_SecurityUtils
get_AvailableLanguages
set_AvailableLanguages
get_Softwares
set_Softwares
get_Processes
set_Processes
get_SystemHardwares
set_SystemHardwares
get_Browsers
set_Browsers
get_FtpConnections
set_FtpConnections
get_InstalledBrowsers
set_InstalledBrowsers
get_ScannedFiles
set_ScannedFiles
get_GameLauncherFiles
set_GameLauncherFiles
get_ScannedWallets
set_ScannedWallets
get_NordAccounts
set_NordAccounts
get_Open
set_Open
get_Proton
set_Proton
get_MessageClientFiles
set_MessageClientFiles
get_GameChatFiles
set_GameChatFiles
NKIw7PX7lm0RELiGVOj
jqlI3lXCJW6ipBjgMg0
SecurityUtils
Softwares
Processes
SystemHardwares
Browsers
FtpConnections
InstalledBrowsers
ScannedFiles
GameLauncherFiles
ScannedWallets
NordAccounts
Proton
MessageClientFiles
GameChatFiles
l8HWmu2JQ6
FGaWGCdqiP
OYGWjHNaCE
Bh33yPXAbnfGlfmtmHU
get_Counter
set_Counter
get_HardType
set_HardType
IYdHE4XE19nXaSMDnvZ
W7sVlGXyoeEGMY50tRX
Counter
HardType
EXaWBJmCti
RWqWMKF6l6
wuWWXqeYOt
EQZtqtXrb0Hxx4kx2nw
get_NameOfBrowser
set_NameOfBrowser
get_Version
set_Version
get_PathOfFile
set_PathOfFile
CAudRNXwS0CTQHptq7R
WoBmfjX3iaGwsUlYsE8
NameOfBrowser
Version
PathOfFile
koCWtOSADw
BT7WTMmjDy
qWjWbloQAU
t70Wq8c84K
HY5W1u3VcO
KnAVXSX1tRQ94D4fC2p
filename
get_NameOfFile
set_NameOfFile
get_Body
set_Body
get_NameOfApplication
set_NameOfApplication
get_DirOfFile
set_DirOfFile
rP8V2fXNEAT33BD9YZt
Y9ON1oX92PAMUv78QbZ
ulhAMxXFOTZsq2RWx6m
NameOfFile
NameOfApplication
DirOfFile
M4oW7peXfE
OKqWl9gFFQ
duhWzog0Cq
BXTCQDkXLC
YplRsfXGgAn7CQJUS1b
get_TaskID
set_TaskID
get_TaskArg
set_TaskArg
get_Action
set_Action
get_DomainFilter
set_DomainFilter
DZjNxlXj3fmjPqTk46x
ujYIGrXIRQtLq19K2KJ
TaskID
TaskArg
Action
DomainFilter
IVZCW3AJ87
Ox4CCRvaym
OhVC6QNlsS
NDdC2cpBX3
dEaCsOPwGN
PJACyUYmEI
ddGCOmQA2D
Ns3CUTtoyr
nLGCxLLp6D
TXGCrpJjcE
xXaCimf7PI
FPaCAF3kVi
UikC57jwpL
rgDCJqULSF
ycCCYbdnne
zBquIpXTDQ4hWc3pC6N
get_Hardware
set_Hardware
get_ReleaseID
set_ReleaseID
get_MachineName
set_MachineName
get_OSVersion
set_OSVersion
get_Language
set_Language
get_Resolution
set_Resolution
get_ScanDetails
set_ScanDetails
get_Country
set_Country
get_City
set_City
get_TZ
set_TZ
get_IPv4
set_IPv4
get_Monitor
set_Monitor
get_ZipCode
set_ZipCode
get_FileLocation
set_FileLocation
get_SeenBefore
set_SeenBefore
E9BPDlX4sJCCLMTA9k3
bm0JdBXxgIOMNLsEFP3
Hardware
ReleaseID
MachineName
OSVersion
Language
Resolution
Country
Monitor
ZipCode
FileLocation
vPoCDNytRt
WBfCN0NtRg
eBRCcH2gri
JSqCaMuFsd
rrTffAXdC3GjWIKDI83
get_IP
set_IP
set_Location
get_PostalCode
set_PostalCode
qknnNEXKrWkquKbYB2l
O1p5FmXndPEvW4tiUBe
Location
PostalCode
st3CnwSnVM
oonCuLnxOI
JVPCgBu4dJ
RK1CHVtSQ1
HdCCkwK7LD
g42CSqf1xj
Yu1LvaXSHY8wa4VmGQy
get_geoplugin_request
set_geoplugin_request
get_geoplugin_city
set_geoplugin_city
get_geoplugin_region
set_geoplugin_region
get_geoplugin_countryCode
set_geoplugin_countryCode
get_geoplugin_latitude
set_geoplugin_latitude
get_geoplugin_longitude
set_geoplugin_longitude
KMEiJXXkECn1xevR40s
tVXMgWXp4PnRTwHoTd6
geoplugin_request
geoplugin_city
geoplugin_region
geoplugin_countryCode
geoplugin_latitude
geoplugin_longitude
y1tCEaS0WJ
PCyCvlTdG1
AfiCL3EYRt
WBknBDXvk2wY47D7iQp
get_postal_code
set_postal_code
get_ip
set_ip
get_country_code
set_country_code
IaMVlWXLGJMEmMZ9elB
s1jSRnXODoDfsPDZfdE
postal_code
country_code
iLWCFySLxq
L13JGAXbZPe0JqIg0hA
get_os_crypt
set_os_crypt
QSGn7XXinsbO4K7cUXT
rTcUCSXfsvhAvYyMYLp
os_crypt
awqCVv1Puo
WbnxviX6yv9bWKNkTO2
get_encrypted_key
set_encrypted_key
WA81DWXRetyw0ZsS5PX
GNU7rCXe4tg0BwQExYT
encrypted_key
007A56C60CB686C542C5A63F4806094A4F9494B7
00D675BCFF1D9FECDD0CA29C78CB6A24748C8788
0120863AC3B080C82E4A63FF1C012D6F1F216979
0410277C15CAD5E63A25F491DAEEF493B897678B
04EC68A0FC7D9B6A255684F330C28A4DCAB91F13
085EF559935ACAE54FCEBE778C7DE9948289EEDA
0E5921723BD3C6CB75662A156FB56AF05A7152C6
1076B53156E190E9BCBE281016712F2D3F02D3B4
1558D1AECB3B09D208F6718AB18D24E2F6DF5828
1674D4347598B476FA761898A499DB4C02053102
17C588718030CA902BC760013FE165199AD1C85F
18B532EF2959EF2ED8C549D712E3446FF49E4287
1FD54CE7DFC413755F07B7B76B1B118B3B2F3844
20CB5B8963ECE3D796594F043D66C0E0BAD86669
24745D8330E61F986032C2034A579B0B80181594
2A92E2F98903398CD12F10BDF583F44C2C6EEBF5
2ADC9207E27E1E7B3C16C7A8A6F212757DCFE863
2B9522D4F7398AB5DB789596FE5DB90589B031E9
2FBDC611D3D91C142C969071EA8A7D3D10FF6301
359A00EF6C789FD4C18644F56C5D3F97453FFF20
387D8DBBFB12BA323F1E0F1F539B4DA9550070C3
38F431A549411AEB32810068A4C83250B2D31E15
3DB6DAD76E13B54DC03AF1C6092C40388E57FBBF
3EEECA8C90CAA62AB5F9CCDD8715DA5023F4BA00
3F6BA22DF7E6EB52DA3166FB3020D155A2776ED2
3F97CA5BE7FE9C129528F72AF4DFC001E9A3D047
4369729D8B79D0C651E00137A3B22A1A24DEBB4C
459812D18B50C8E5F96831EFD700F962F692D29E
46884713B2F882E5304A1FF1B16370575A53E434
46F273EF641E07D271D91E0DC24A4392582671F8
4956BACC797B0C6C013C7E4846581396C9EF0D8E
4B05CEBD7D70F1607D474CAE176FEAEB7439795F
4C1117B01D5C4E103EE817F889EC547C63B47B7A
4CDA4454A3C36A7EBDCF8FE8B804B379A31D33CA
4E3D7F188A5F5102BEC5B820632BBAEC26839E63
4EC18FAB222C9FF2E5161F21A90F187D5D98E042
4EF472E2E74116C7FD95C74AB422CCF80DB1C404
501BADE98ACDE8BF4A0424FD9A4354615FF08C7F
53BC7B81AC10B7341D170997DB2266FA0D71C1E0
571B1023DF3ABFB94C92465B365B1814FEBFAB3E
57F4CB785574C3A09AF99937BF91EA2C31E37C8A
5BB3788A197C26B8310159EC9A81635814ABB05B
5F2F91D44A21E42A979E24B620CF42F2CB8687EC
66AC11F7A6BA80682D713682C531A74CE1550B1D
67CD3B1DF0AD5BAEAA1ABDDA3FCAFB2EEBDD2684
6F66485AF823BAE1F185740DA7F4F595701CD22E
703C0129D2425B4E51361C24EBE8A0042E483AC5
71E427369E07185AE0407E3FAB1A16ED62BD159E
77A9683FAF2EC9EC3DABC09D33C3BD04E8897D60
79E9B68FB6E1987DED749BCD71143BD8EB323CE3
80E5A0A2B81DB2473AFBB3FDD6F479670B7B41C6
81E046FA1D93B661CC948A4DD1E01F20D6192E9B
855FED6E03442FBB3AF914FFBFA9DA82813817A1
8743F6DD6877BBC815E9F16BEC59057DD1A89B0A
89597D644F71E5F46E2E63751A3C5F94FCFCD516
89C95FB6F8086AFCCD50B1B257669F2B17C047B7
8C49F78A06E711CF0E21134D0B091985336CC37F
95098CDF929872F9B67E58070D088F8238F7CABE
96D6CB223DCF17F7C9F93C825239BDAA3634674A
989657DD93570810E43C5B1F68E529460CA796F1
9B88C78E81ADB9E7247AB37D1F5F3861810916D8
9D9AF3AE11A58D55EB8A6AEC8F03F7AD01E8994B
A3EFD00EA085079EE7F97407F8EFF07E3990696A
A8A5F2DC86E781EC7360D1DDBE09F80EEECE48EA
A8F9B62160DF085B926D5ED70E2B0F6C95A25280
A9139732ED4CF84F8CE948DCB134114E4F24598A
A937C899247696B6565665BE3BD09607F49A2042
A9B6DE7C485B3014653A30C8B4BEFA8F70610178
B14822E504AE1EF678AE0E823684D7B32F95A725
B14D74C51EAE4F88FBF39B8BD07DA392799FCAAF
B2EB15883388285C96FCF1CD87620F26DA5A6BF3
B5B4FA236B87DBCD8055443F05776B10DDEFA5CD
BEDDFAEB0360B1694AB8CD2A69986414790A1D9A
C1B005D0B122F7297BE8C0A68C739049E1D1C94B
C39241F447680C35D3966F9446AAE6D462E04AD3
C58D707276695E733863DD82C6DF4DF66A3AD49C
C65515937CF3E8EBE3C3FC981DC02EF6D36A9E53
CA800E6788E431A0A8BC7A47AE9929225FEE5702
CE18B047107AA23D1AA9B2ED32D316148E02655F
D67333042BFFC20116BF01BC556566EC76C6F7E2
D7DC31ED4320E74979DEC780486CF9586470608F
D82572C56BDDD62E320B8BDAF0397A0DF9DD5BF7
DF08DD4DFFDB6C9048202CAE65882EF91ECE6BA8
DF2BDC3975DC25BFAFFA4976E9CD1E38AADF463B
E0CEB3E46E857A70CFB575A05B01A64806A8D426
E3E8284EDCB98A1085E693F9525A3AC3D705B82E
E63C93C721909983D6276C980CFF923987A4D2AA
E705C6345C26AF82E64D22DBE44B2A3514F2F06F
EB1349E7340F525AD3415F68FF2122BA8CAC3682
EB14352FBADB40E2FA237D444A6575B918573C43
EB2DB456E0D779E528D1474FA55AC99055A5E815
EB7EF1973CDC295B7B08FE6D82B9ECDAD1106AF2
EBD075615CBE4A710F9410FFECEAF6110A01922B
F413CEA9BAA458730567FE47F57CC3C94DDF63C0
F6D3693E1C1902D55B9438ED1414AC12A2B4E5F9
FB77AA8CDAF4D2192696350B7AB546B533467477
FB9B7F75FCE124A01CC281A8F6810C5AA65607C0
FD4C77C0C4405C6A46E5C3CE53E0AE6BAEE7746D
FE2C2369398F2E9CCEE2214F4E86D8EFDE954FAF
FE79FF373808574898C82AC1320C55C1182FB75A
N7k6NLOesP
ut0vTmaxuNG6uyO8V53
dqu5JTiiBIf3P
typemdt
FieldInfo
MethodInfo
GetFields
CreateDelegate
get_Assembly
get_ManifestModule
Module
Y90k4canj2hwbM1nSxW
ResolveType
jxaZ0kaSUvBFfDsKG53
MemberInfo
get_MetadataToken
lKlpgmakPHJXnfXFc5J
ResolveMethod
MethodBase
w5YLw1app12UrQb7E3G
SetValue
KgRPW4adLHwS8AR8aoa
bMY5sTaKTvdP55LgOu1
AiWZGwav0LTgXSaC4Rq
hxM6z58T3d
JBm2Q1M3yA
fef2W1oHdT
HjF26xdTod
dwG2sHQr6a
Tgm2UcS7m4
HOO2xIWFWe
TFd2iFCFa6
LTb2JgKxKD
m262HLtpLO
eck2SrMgLB
Nqy2LB5X6K
YXg2FtIPh0
MDv2ovRKHk
COS2fiGFRn
Cut2NIgBlt
jXG2cjZXKy
f822kgoCTt
i1T2OMfmqH
RTh2ucgftV
pj42E5CZKN
YAZ2A8erh0
V0m2vB1IWG
ApG2gBY778
ypt2ntdeap
QaX2V2eATN
JMm2rTsssZ
rKb2wchqs5
rlM2YyL66s
DcZ2DHQJWZ
Eqg2yyrrgN
Dictionary`2
DQj22mG56G
NgJ2CycoyN
sk32dWgfEC
GWc2aLUfbd
MhA25eR4JK
VIj2eNpEoB
SortedList
Hashtable
RSACryptoServiceProvider
set_UseMachineKeyStore
GyO5JTi9Ww2vR
JZ26c9ZhMd
IZl6abVML3
UInt16
GMU6nsRw5N
gGr6uMFR0o
fWe6guo58T
iBm6HteUCM
MLT6kyrjWL
NgO6Sj7003
SymmetricAlgorithm
AesCryptoServiceProvider
RijndaelManaged
Activator
CreateInstance
ObjectHandle
System.Runtime.Remoting
Unwrap
sYd6Erh3An
CryptoConfig
get_AllowOnlyFipsAlgorithms
W2Z6vjxRxb
igx6LDQbcE
BinaryReader
ParameterInfo
DynamicMethod
System.Reflection.Emit
ILGenerator
GetManifestResourceStream
get_BaseStream
set_Position
ReadBytes
BindingFlags
get_Module
GetGenericArguments
get_IsStatic
get_FieldType
GetParameters
get_DeclaringType
get_IsValueType
MakeByRefType
get_ParameterType
get_ReturnType
GetILGenerator
OpCode
OpCodes
Ldarg_0
Ldarg_1
Ldarg_2
Ldarg_3
Ldarg_S
Tailcall
Callvirt
fwv6Vm1GT8
ujb6wvVf3x
J186oGnQrq
J4T6dFoqsM
ICryptoTransform
CryptoStream
CryptoStreamMode
Jq56fxHBe1
BmJ6e8JYAS
J4S6KVJTPa
Yde6pkOYgK
GetMethod
BBq6RZYldS
GetName
AssemblyName
get_CodeBase
GetType
GetProperty
PropertyInfo
AZo6hA4tPq
kernel32
Csj63aFMMu
RyV64hkEcF
kgO6ZWZ2xJ
qD760mOSWM
x8D6IXsGp8
JLY69id6m7
zeR68oTsj5
so8WHSBJcy
S0Z6PZnDl7
FileStream
FileMode
FileAccess
FileShare
lRw6mQG6IM
GjR6GsGFYG
NX86jyNJ6M
set_Key
set_IV
CreateDecryptor
K4k6Bp0vtS
aPj6M9sKMI
qZZ6Xxhngd
wpm6t3GLf0
YkG6TBpbON
OYe6bpuT5K
YEk6qujlwk
chx61vKrs7
dSI67cmOnb
MMi6lMGYZV
GyNsnIoLpETZPdp6dY
kLdPdYr7f4JbAiaseL
ooXOFtghJnEExMvfMe
ucDta9TknwYCx3CPYi
TIXHTJEv1b79bHGHbU
gU41mqH7tbUkQcSTPf
Sn6unPkgyI8tcQuuPR
CTkxEsRVPFCf61Mrex
lEMNV9vEhwjMrPI73m
GetPublicKeyToken
IAM0rXYRfBeBngScfl
IM3LoZ6HETIEAnjq9Q
CipherMode
KBgYSxhdc1yLeCFeGE
JY5pNkCKmOiqgPaC9C
zg0RDBdwUr277huhvd
t2RCpqnjDNa46Q8pVN
FlushFinalBlock
sFWWnXlvbwd3grXSwX
zSYCmrPx8kBLFaXECQ
iauUec0DeN2vOvbBxT
V8Za8FqKBqbI6dcHIw
Wm2kOi7Grk1XA1KoEb
Tes64FBhGjhjKRnWIQ
OnAqcUWFNNLeraO6nv
AVCTPUAU4av71mLtnC
XHF2KnmcMl
CreateEncryptor
ToBase64String
BLdMjYalekXxPenDvql
w7S5BKazcjudW01fGgl
j7UuANQY24BjN1k5U6w
SbwkslQ2e1UjqYMVnNu
mjawKhQJBrooogn8nyb
ujtWxZQg8TWjuUKC6Ug
nY9Yn8QchNJTRKTEdoF
classthis
nativeEntry
nativeSizeOfCode
LMK2p10Ilj
C742RSUb8P
cwf20rfCUU
fHSkdAnkJf
HnR2huiDwS
JFg23hg8Yn
Qbx24VY1kI
ReadInt32
XMV2ZOqF3L
Vu5fsdQaqEABE2VoBgd
hHKPedQQm2SxC01j2rc
DGhvVtQM42xisZPiu3O
hModule
lpName
lpType
lpAddress
dwSize
flAllocationType
flProtect
hProcess
lpBaseAddress
buffer
lpNumberOfBytesWritten
flNewProtect
lpflOldProtect
dwDesiredAccess
bInheritHandle
dwProcessId
aKB2ILxoEl
cfSSAmQHlPDapt9oHsF
lRq5JTizxUEOT
nG4GbWQhL9ddAGiy5mn
JyHvZdQm0bRtwh91YMO
Antivirus Signature
Bkav Clean
Lionic Trojan.Win32.Generic.4!c
Elastic malicious (high confidence)
MicroWorld-eScan Trojan.GenericKD.46803342
CMC Clean
CAT-QuickHeal Clean
ALYac Clean
Cylance Unsafe
Zillya Clean
Sangfor Trojan.Win32.Save.a
CrowdStrike win/malicious_confidence_80% (W)
BitDefender Trojan.GenericKD.46803342
K7GW Trojan ( 00580fde1 )
K7AntiVirus Clean
Baidu Clean
Cyren Clean
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of Win32/GenCBL.ASD
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky UDS:Trojan-PSW.MSIL.Reline
Alibaba Clean
NANO-Antivirus Virus.Win32.Gen.ccmw
ViRobot Clean
Rising Clean
Ad-Aware Trojan.GenericKD.46803342
TACHYON Clean
Emsisoft Clean
Comodo Clean
F-Secure Clean
DrWeb Clean
VIPRE Clean
TrendMicro Clean
McAfee-GW-Edition Clean
FireEye Generic.mg.efb3e6929403a295
Sophos Clean
Ikarus Trojan.Win32.Generic
Jiangmin Clean
Webroot Clean
Avira Clean
Antiy-AVL Trojan/Generic.ASMalwS.2C8A743
Kingsoft Clean
Microsoft Trojan:Script/Phonzy.C!ml
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
GData MSIL.Trojan-Stealer.NetSteal.12KHHG
Cynet Clean
AhnLab-V3 Trojan/Win.Generic.R429793
Acronis Clean
McAfee Artemis!EFB3E6929403
MAX malware (ai score=88)
VBA32 BScope.TrojanDownloader.MSIL.Pasta
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
SentinelOne Clean
MaxSecure Clean
Fortinet W32/GenCBL.ASD!tr
BitDefenderTheta Clean
AVG Win32:DangerousSig [Trj]
Avast Win32:DangerousSig [Trj]
Qihoo-360 Clean
No IRMA results available.