Static | ZeroBOX

PE Compile Time

2024-06-28 16:15:18

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0000fad4 0x0000fc00 6.0401066129
.rsrc 0x00012000 0x0002995e 0x00029a00 7.09034017877
.reloc 0x0003c000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0003b04c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0003b04c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0003b04c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0003b04c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0003b04c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0003b04c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x0003b4b4 0x0000005a LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0003b510 0x00000264 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x0003b774 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
3j%(H
v4.0.30319
#Strings
qj3BYIayCJxXm1c3XIXo9JHLq3NlcLjl8F542igGLD0
MgOs7slA7K0
wF0BvVGurCD8K3FFe7od3XMdW0
rfTjUTQvbUKqEYtRq7IwDFl6X0
3al0biU4YpcR1Mhs4HUQ52hdoRw06QKK2yRTWanQig0
dJOBG4VYAUbgOYYfzILZvwSIS6a4giSVissM8zEAb61
6XHOpQ6zrC3YkAgzaQiAzfT2M1
D1D7GbLvJpTvb8mnzWt40xUaP1
_Closure$__1
IEnumerable`1
ThreadSafeObjectProvider`1
List`1
sSBUBYDQSTuMWxljF8G2b6kRd1
lE6zmnTiMp1
KPYUYybEJBuPe8OHZ1y0WqlXIm0R3D5INryx7G8b0r1
XkTfHjWwbUsWmItBEnAdhnmH02
Microsoft.Win32
UInt32
ReadInt32
ToInt32
xqlJHXtrOqhqz8LCV40kE0k8A2
FcAlfxFn9K2
fY6MjJo0YkBpWeBFFV6lpyc2O2
Func`2
YGd2j9LPCh34FvKVawLpBOqTtJpq3Xn9VQbS6PTIQb2
AMe1z1tN7cNt1VOf4E3xakUoL2vf7vL7IIQFZ3Y6A2GxdnvEBVY2XASzAZwm4WnoqHOCeTKsa7UaAx0Ti1r2
iE6lq493N4fZR4S6BtpngT6Ku2
iVq90bq1pdTmvho7HwTfGLka23
tVg12JtV55jgFiYOaEuIrtCOB3
zfOiy9fgznor2HE8uXEpGw2BC3
5TkUmi8ZSXv0YR73ybfbFyM5MPkGVNAa8Raa6woOMS3
f5wxFuhjsElYXhU4SrOSRRn9x4Xa4gwLJGbtiwNu1U3
OBUuCDLINY3
S0GgMmku0qyqd6MoyjUVVlubgb78IIoauxOEuZiO4c3
rjcW1gDxZn3
IK6TbBIYKb7evBWzqFiAoUCIu3
43mzk7dSC14
loaded28062024
nBENVix1C34
UInt64
6yoCdSzcgPYsTnihWpeeGw2w74
b0zzowxO86kOdfzW3vKy2X2c94
OvdIehbDnMwtEhCz0DdP7ftHA4
rzLXv0vWOR1TJ5r0M6bdGw4tZ32B5YZAt6mSbruOVwHLljNoVe43F1StBJAsCqDVwAbme8HjTiIKmj0YA1JSasAkw6BMBSGIL4
vwHeKmdKpS4
S9lIATMM8U4
RhVfRU6quh4
A7IcKUViMrT4rkpjNZQdN4mVTwHrYOtsFitLP6V7op4
pNBY9kAZ32AwYYnMnjWP17snKD2l5eemR00ttVL0aq4
KVPC2tQqcsvZtvHN8m9kXN9m05
RQjqSdjmLKBVHZetEIgvG6ubOwRLqLEwYn5NOLeDJkHHCRqVBzucdOKt9GXncLLLczBiFppMYYxu5CHPmfB5
5Anp2qHKaoY43SrOXrRVJm6yD5
1zWGH6oEkeeuj7PW3NzwuhiUH5
NMEUM15nmItanwDoiyh8GvrnP5
maiopj4BLN8IaDZ89RkSP48eZ5
yRRxVVS1l7v9Bbckw9cceOjFzupKkZ2WMNv2cDzoexu2ntdOPvasNDPtH6xJfQp4ucVjPin0EwpqsEigBYl5
aaExwUOh7kOeygzKYENlLdKRn5
YBLNxNF58E6
xGfq2sdALV9BETWxpGp93JLCiAyRNnV1IshmAdgoKX6
dngiWOHHegXBe9KKmMWfySP8Y6
omezxoMJxq6Plc32WA5R8x6Iz6
gTW2YUUBk17
qrzuiNvQ3HW9neK4J33WylhsA7
tCRLDijEjH7
qf3JZcJMPR7
giEuJx0lplRj2YnlDCONV0y9l7
ENUH4ilHj2aVYfoyyAuys1Ao1UHUF77j1hj2K3zEXr7
P3FRIcy96jz4tV1ihZfcPZwvsqHwHJADdqSTravEX5b6mkDYhCQ0n8Hu3NUlef3VK8LJjL8cEZw7UOn4vHx7
lgn8xglJOWmxqhElifjusPIAS08IFRHXlEbNFhEDsy7
5bwR9BLuJSDncnSZmROxqMk718
3LVlptwAy5zWUza44VHS9CaU58
jmlNzTPwQRpPvVyg5W6Fxqc478
kjIMYyRw098
T7ckGBs27A8
get_UTF8
4ItDW4GbqPGgg2FSiXuSMZRzkxzMuwg1x7QudAQX7K8
QC7taA8wtzdIp3hHQu1RmOUxRiTAfCc4dM4rK39g1M8
pJ2PR0iKqM8
Lvx6Dh0QnT8
_Lambda$__8
Z8crVgr3GRQnaQvii8LO0nXYc8
MGcPjb5lif8
M4p1J8AYrlJ9k7PZG9x2WYuPi8
bKI8VIwhki8
lRPCi2iJ7955TWTGk5rGHmC8j8
vXoIQnkAwYC3CFzehCh7dhFK7TyYhaUEisJDJh98Bq8
kYxzUGynk8MnIR83xzLNQMTz99
SBXsi6rIKHcdl6FlyaqLgyehhb2CHoW09bAHL8yGlOR2B7GH4xzQi6yhAwXY2K5Q8ZOmkkEF599GKatZeWf9
jXBolBmy2v9
Vfj2KbE3ERgUG09EBXo3EoBax9
<Module>
zcW2xWFOwGA
8D8SOau3y0YqtSJnvX0C98yiPA
paTVjtvEAfNlFvB3Z3Dirn3UQA
WZSAl5jOrDedPRGYFu3f04aPToK3JHjyl2VIyPPhlaA
BXdmMSNVOPcFO5rNcdEwenkWQHeGStEF5x84FxyFzeA
RKqHz0TEqsNn46pcEWcXEKEQrdHp3dMu2xJNxKjctlA
capGetDriverDescriptionA
tacS74DiDoA
M9sC9bzh1PCi4Ai3esNguxRpmIMC2J78tqMnhtOPHqA
TQpWdxHPcTqKPZ7nqWPXpresvA
capCreateCaptureWindowA
8wjBc41YSldGnIeetUIRrgcnWB
DJKLccNMNUY2vfOukStnC4sycVB93r35k3lGpXwgMeB
QCnSQLcpWUKvXeaWDdb8DUwCsB
V6Q4zT42dh9vFcvljZa0Mvcl3GyvqHYkV7ih7nzPhxB
ECDpFPCF92OnR3wvnJod2ngQBC
OuTqWtiTrKKka9YIshih18q7CkQyhVlISbqau01CVfCSGmMNhp6LnXvnkUFAPKGYbLqD39W6qYgApvzr1HbC
VCiI0sIjDlC
zDREGs5t3BIu526AzJAtWEcqmC
cB61sdlBRO64ug7g69E8UAC3zKyfudB7IeNCEQIuXpC
DTlXEnoh28vdiKlaCE25Wi4koZatHHr32exi0itVazC
QZ38GvKHIGme0P9FSRJKI9ubbstSUDV0PRe3RKaimmu0ZPQqUSbIBtXB8oqczMqmyYqb8k0FqcConqq77y4D
ES_SYSTEM_REQUIRED
ES_DISPLAY_REQUIRED
LOxFYoemsgYrNVhmGJXcbMBTHD
hkfr41sdBID
cBHPCrC57sv57sQIPd0TWKoZOD
11UbYE0JWo1tOdKeTst5Ms7G3kJFkN86lWYbkPHqjHXeHfPhVZEDdnhIdO6rpQDb6UFkl8KuMbrhinWgctTD
3LZVuMFISGgEhyiqnsSOyGskuFchTEwVjxouV4IZZWD
Bseg0HwVwdD
921KvewsMSlabnavWIRXQuereD
2k62ttEQKVM7Ansf5OhL0MEFrBF37X8oOCdDysB6HkD
CmAhoFBzQzyWCPw250vW1m5AlD
1EOTnP8LowQycsIFsBDmjGig4vlGWEUMcFoAM4CHrzK8PiQrlYLVmxSbznrqzL5gXD4NDKf8yHSWjRZHhEnD
Ng00PRBNWxKJjVfCRv8mSp0nsD
Ci4ue2zdURMYrDRLsEWTcWE43E
rb9he7NOYxeB1CMYNIf5fWZVl1juuOh1fLIjJTHAyBE
th7zTcPiSWDFOWKy5vaQZXOUPE
EXECUTION_STATE
y4Q5LcktqcE
Pop1LZ5kpxRpi8nZFNuXISSyiE
uqAwvw57m6F
aIvpB9ixCHoflFeo8W3DROBdBF
NyajamvOXMJxv9T5KW0jlR1JCF
C7WqxFwednW8uYWLZf8Q76ULIF
xN0euPBn37D3PqzlmzxFQXgGOF
HYLJLIAfqUF
ZPHyI1dhb56ExJeORAKzQEtk8QPMadktgoUf2CLkJZF
M3vFW3K4xIWhMzCn2Jp1VQ6xcF
IFC9oS6RffUVfvbQrtvN6TYCf96fC3WDZNMRPC2XCvF
Ez03Eo9nQ7C08Q0Dmb55PVX55gtxDDDjY6Z56mH7NyF
xUAOo3sMCHQzUjwspe457cz5jXQYpWgzBBZOixekx4G
CpdBIGGSY6G
j1SM6OGjpRerPWM9yQzf84L8IG
A7BjwyOG4KBsmqFjkR52Le8IKXBAzhXPBEXegX8klJG
uwjHBenzHVlYD5Nz2hDKuSjlRmuSGP8sKxbShi8CvKG
a5YfukpWNSk48f7UeoZAXgfWOG
xIQkeN3wQmjwlQxzCBnC6lGdQG
67qGw4hgksdz7G7r9XIS6D4xUG
ajx4cwFXpXgAVYy27a0W8BZL9WLULkNafMFN7tlxaYG
UGotLwwsII87KPrkfh2hkNVcoG
EO6aSIgXIUa9lS8jtmfPznk7zG
MuecOUy5rQzlIHiuY48sbLi8FCNF7FOVEIfV7962y1z9GMKiY0G5dBjSklUhWZ6ZfQklnJ55lcn1zUMPFzCH
AhdTIZl71lvuOUDV8ZfFD4XaEH
MXkqDylaUHH
LrLMOQ6YBI9LeaU7YJeq6opsV1juFWFHCdHXbsw6wMH
yugVBR6YF7H5XRscnDo1xIrEcvsF9vudKlkz6QNGR99gBv0Qv1e1unpy0ZIegvepfyGwYPEjsBEGaNIAPkRH
64wm05DzLVqtJglEPfbMpxQNJE1V4U53aQjT3AaRVVH
8PVysNbVfVH
WAOcvme1clH
r6V7vOyqpkOwwV2LqVyV8bNKwH
nud9Qc4Ql5I
Y8AClT0FeTsEeuoyUbUzQmTrAI
hzJf4b43XjIrfj7qAPtaojVQ3HnXQJKUw5xBz9QomvMT7t3nWpF3kCsvnYND15FH0bRjBoY6nhjvhxEZRA94oysr41Qq4HQfGI
get_ASCII
Ar2pGxc1Xklm5CM5S7GQbvuuXI
pcy4sHXGjooBO3agtchQyOc6eQdXtLVx9x3l3QCsCl0rgN6hvtok0TVS7ISwOBm3ukR4IUOlLqOWO5H96SqI
aALxYGbPOsFz2ZLi95OkQXKBCJ
bWeVmf6eH3m5Na0DSsMd2F1pCJ
0xXR2ka6ocFOSZKZspig1rua03vhwfdqh6c6lsSo9MJ
Yc9UqWdkQm2yXCPvoyRi9PzoOJ
ukH3iiujl6DX5ldrpzA1o9qdXJ
8bcnFkxJJbO23WSi8oBZ5r4Nvx1GBxwNOeQmXzKQukJ
KOBTB4f2f6K
nSiyaKS0CoKCow4Ax7khxd1LJK
OoTQOwXk3jCi6E0P605yWBZeTD1hrphc5nwtxTpX0NK
RHzOdBQ1sz2vQFKuWbLfy6acykYa0NSKbe8fUJKRMOK
IRv7QIJdO5x9sN1Q3BQMvus33Hzh1b9Wc5V5Y3VdAWK
BMTrIVJaCfRqWXvlXOaXuaht1QNMgdPQUkVD2HWLHXK
56D8lLETFgIJZntTiN9KQDwSaK
SidZaJXodaLMpgNZTXu5mkcJiK
U41V7xQ5e1m3wbAJe8ZIji3NiK
7gZbDcY6iLFOomaCETpw3CglsNBuJtYWVo8GGesUanK
NmZJXT6G8uK
jkt23ExVFh3onmvScJ3Dn7oD4L
PLMfwvmU20nAM2ZWoTt2JCg4RsckEpHX6bwhpD2ofimM4UHOnKQye7bPih2l4QrUBsLAGvfoKEONBlTGqIEL
FI8S030BLKL
N62Ah2H61EHj563Ju4HSx5z66QqmtePtSFvrgehyENL
rkiC1af2uOnTrE7TnbMPKtRARL
mpQv6N1c8llmkWDnLZV0U2SzXL
w9fBNt3E8YL
z13k9cCCyDXtd2tj3v4mBrxvoL
T55EBOU6LYU1QvFEaVazf9dRWjWolaZO4QJV6QLzXvL
ys3YBvNOWmdzj6NguCnSrxGhrpWlGPKgAybmoCVYa8M
0JXtURsZEbudNif6xWvgCyjq3EfjrZh14Wt5appLxIM
xJFb4MrNWOsME6w4khoRgHH1LM
TXgWkUAP0hUQm7oyrOyfLQU5m3YOekMISWVchzQ7ZLHTURb1rt1WbSjDQ6MO4kkWSSw2STLwTp83uhlqm3UM
Gx1gnSaC5KgOcqyiOjzjiz8r5eMnv57LWQz2GRMvLXM
w1kGdAErXZM
YDFfOtHvdZM
VtbSXVe5ZRTlv8sxNmYbgbl3her27ibKsVQsF5PVmlM
Qm1rIEBcgj3i9Vf0Eg4iwvxvGi9l8LFWBaQK8pDxRi02aZfYdzsb75kgELS4OmQ9zw3FalJKdxm2k0NNLt5N
9SV2fGpoFDN
BI17o2hUyPN
c1Pz6Y8lZWP0Iu1rPJjCw5XaaN
wRrxapt9NeHCmMEDmmG4OS7EdAzdaU23KcwSMLf7zrN
ihO2ZubgyTo9IPDvpSzon1c1RoUTEyvm3wUeyZp6V2O
LASTINPUTINFO
System.IO
s5McUSvKLyLJ8HgduZeDpUcCYO
NZ9DpUvFLcO
hHPIvzk7nPAxHkUQFpe8bpZEiO
muPiPsaIzRRyzTnN8bJycAkrkPNmZJ9ySwewgtvjQqO
UleL2YL2wMquwWEV6jKvRZcGwO
UVljLwIinwO
OI5GDg7TlzO
WGiuxN8t8wKChl7VjMtqaGaE5P
1kHc9YHswq3eEt1VVNkIyiUwCP
uBZt5WFbREP
0Y5k8ynlz74GdwRzkttDd4l1IP
B1ffZg9PO27MGl1DUGfmXodlOP
NMTSJPlNoSP
BHRom8bD6cOy4ks1C1We23jMcP
iKTHhPDwsdhLJZcf5gJmsBBr9n3s88uj1YmBfKEC4gP
3QW3XnngizM2K5Z1Fw9gw1waFqJHzhyZ2U7Cova0wiP
2vuUhez4NPNQyW6juaHSSiZzzwyt0AsMwpy5xlB7iuP
FHCReYL1nsUSySWPIDxK2yVuUDznrbSPQ8sJYigpZ4Q
dliLV6Fo9LeoUBy6WOYwT3fQ82sF3PGZjbUeSqLPRBLot0rQDJmqNuDJ7jkAoUAuv8aFzWbvmS7DFz2Md0DylFHAOVkLRMkD6Q
qgDWTJuNYtQuEyD8Hn5ZRw069Q
yQDvatcXmhQLlfasXnmIVs6jkYCIxqThHsvVyxXWr9Q
3GEd1Np3kV8bvOU01mOijqUsg2X0Ha4RPxSNY7X7AGQ
O4Pe7L4H1QyrqIiJVJvqFy7sLQ
0IMujIikkUQ
aOaltQtbiQ1OiSmfj2fZ7isemQ
rmszEEpZD4vJfifNeqhyW1cIUaYau5Qkvj1mL0G1EyQ
43Iste32V9GOmX1nRGXdNnBryQ
IkiyBx73aOR
hAytrtzDOI6lf8SJupBtzxpISKoUmplgt5qZ81jaiSR
5ciJMGP5SxtNAbwvcXJSmBoqSR
HiH49hYc8ka1my0RVdSBurQBdwGk1p5uVVEiQeheX9rHBC2ImvjL5ke7nczIwTrJp9taMdIEyOdGbovrtmjR
7S4EpIhrrHD2UdsUk6KgVZnwAS
1oCShuv3lUIhTGQrUZhDAodEHS
ES_CONTINUOUS
iB9SAeNoVHt64uSVDFuOR8sh3Uxat0XKmRRF78VjzUS
fVOzWa8BXbS
Vtz7CvktefS
IUpcNKasI1SpVXOgL2lBGFb3zS
IvLspjsYx0T
9HNm6gSvioq8QvHsWJVRl2ftCveOydpJm6wT12fC13T
vJpIqevu0BRgVE3XOwSCHtl66T
LZt7NBoyP68fvIqBqPyOK4l6BT
1UXHKWRCmOJZMK3sER2RC8EaBT
gAX0gjXgKS7YrnGNasQvOMENRT
XToQQ2JZzehiJX9tMKNq9PcAQfo5sMfZJeCOt6u0EjuGDskifBZv7MYweznOKCMc5jdr6DjKpODIw7mNZunKMErjtbE66kWisT
NRHKwpEA0v6tCbmAT7oA5ur90U
TxyY7VDiCnD24SZOuzjVv8dL7RTurPxxQ6aTlQPSkDU
9CA7vqISiJbcpT54z80jvZA4HU
2ofTSlMVQjEJsfXmQO8VEJ3zP7TAGyQ1wQQv9c8xIF8lg3479hDXfKu5Kr57mcJdKOKBnRzuPPpLA3bmTWUU
ud94QnojnIjBOccaSY1LrtWAWU
u3A7rS7t8aG92WWPb36a4CB0mU
ooE229uAs0nh3gjpmYXSwpkfVbqfHlygd5ZVYBepxzU
3R3ibJ9VG5V
JWU4eUxpv7V
t3gPSFr41JV
c8LCt5wcaC6ytZ0bT3aXircDiV
nH6yX8yaAjV
XcZ5ZtjYrVOR1RKV1gfihMsooV
9loXLxPvFjCvXy4tUDhYglXYrV
tvejLqXPDmvDjFzDYYOpmbsStV
l451AwMkLuhCoJyVOmOIHXqwspTjidI7MveZBaXhEW9rgmFIObI1hyrNy6JKdlrNWnJNqHkFPISqGEBP4u0W
k44gx0uFE5W
hbxT0booeAW
zrEKPPe4fvdwEKcpE254H0RqFW
cmOr0HFYUXHVmoshZOhJVaQHOW
vCSd2gg8CYotSquLuD45ZvcYRAYEdFts57LSWWQaAkW
traISwTtrpLc0mqIvo6G70jo1nJdCWYtD2pjArOrcCfziyvAmqNjIbOOa7ApT1jlSVaw7Mqw8uavnVoCQ6lW
ig4JRxuQKDr3J3QvvJycvh3AwLRCFtd1G8yCxuj7DGALoy0K9zF3V7VSkTpKhTwe53V2zua5hoJiCV16wgmW
TavZRJ9FBwW
ORO6DsdOqkdcB0LNwchqJ74Y4X
7ffW3eDPJMgomQxIGoqf2aXVYZrvoIxFPwPbZvyWb6X
PNlwWUsAH71ohucwKkQCKVk9GX
zRgGuX5qCdba31KuN2W0TkSBQX
9xSVSrsB62x3k4lFrkJH8Of7VX
IqQa8BIxURpCHgvHYDWsrfKfWX
11dduD6a8cX
YKvcNIidQsD3uzy3MOFYlDMhcX
PLX51aIBfCTe6A5eDh76FbTVGCu7jsfrIlPVIlmlGOY0HFlTnXmQZPzhJ3FOB8iX1WsQdksoXcXIdmi6RnqX
wqgnueGvwNzxPh4Niizi2TppxX
zf2Pd5dZBBY
UlsXC22WfGAp4XMUrtbArqpNB9LvmvomLLwldW5CgCY
RV5Cw9cCJLAF5tDdmOFwx4k7IY
ouSRDbsl0wHYv9PQT8bGDVCSMY
7zXYReReUMY
9AujGiLC1QY
eu3bfCWpA9529EMj79lkC2YVRY
xUuokwZubi4FPPNgoxSrLoVa9hztPcciLeZaiVkB2UY
HJhy1QQYkJbYmzjaeYRQ2FZf0FIVhc2Vm3vTafNWbbw1GTRKmmAJ6RbMorFZRxsiI1tTW3ycBITLL97D2ufY
NHzP11ztwpIYfBqZjfEaszXbiY
kToHgP8hLUVhM3JpbVmZPyRROnq3BgvgxSZmK2OauHTCOftBWMNHdYXcFPcoTmIL2mhCEs3FBfGre3B9xVoY
KDbaNUP43KKRwaUPBOQIncZPV5akwM6KDgM3SXrxXx5C1NVD9NxHxMGZgzxMCcAzhZKLU2fpXIx5fji9PN3wAfL170LrzBo9pY
0pZe5uwUyCSKG7VIlbJvFC1SvY
lNiRyOfG9yPZv0GnxX1VqWNl1Z
NK2keICHnLD6y4P92q0o0AGK3Z
DEcsOuEyC8Z
XSDdwcvfMAoQiG1EEii2G2qvKZ
DQn1jyTVvDHmyQ06kkJ2F1BsSZ
qQHHq0Xplu89FK2w30agBXfuosTEUfW5F0IZplbYQkZ
HjeS5DgysqZ
ZxgXpAZVTREvdO2ehgNpDSGCwbg2KkNVH5bHqmHXUuZ
Dispose__Instance__
Create__Instance__
value__
NFZaC71ORYa1s2WUgnVfabuIYa
ofcWw88XPKp0qkSUiSQ4uw8R7XvUtB2smInrBTqZtXmYoHs61kuYG1bbvx5p5wMtGDbMccel5fm9oaH3tmqa
ProjectData
osmkoZOS9e9DfMhdEzHSDQoFHwcGCYMeaXvC8hYhMdAYjIdbfDaIUp2OBYrAXPY5uNYrBIVSpAH7iZFkotwa
QlTZejhrkVb
qAiIUBP1GGHc0i6dcjbyFG2B7DgGmkklXVbwf3Mg6Wb
65Gl9pMiOib
mscorlib
wn8XKC8O9uNSiZ6bsPfbEYKUlJGqmrqZgRi4Fb8xnjb
wVRNfLJCQfgKOlgZqh9R1lsxDc
WDYIhqhLPIc
97RKIdbvjIc
zomoVISLbMc
vtSaFCLHjHoQ8LJJB7j5XgcNWc
jqVkVBSzGLuHx96rb73c5OnowpJoU3G79zLAgHW1sgQwjyCDn7vcVkFdNH2xmbAIoNlHX1ke7VwxxPB7aohc
System.Collections.Generic
Microsoft.VisualBasic
LowLevelKeyboardProc
YttHlMBveNI6lhRxMuaox6Zetc
9gd8zrpKPuc
m4CJcfZ2BCIlDV42KirzvRFdCvBvBHIdqqqiIOQi9xc
MeTP6RfjUDIX3g0UE3sNrg7t6d
ua2pj4PLs8d
ZvTnhKjsgKbCZOVP9DE0rxYICd
0UmFKIsqMUgqNUdSA4tncvlwGd
GetWindowThreadProcessId
GetProcessById
sDm3qwXa3zVhrLjEF0sjmlud1BZjoyT9M6ex8ZsfITI26q9O5B8r05hejO2YQgXQOK3mhIX998uyESgqkjJd
QXJrKDigY6bz86nnVUsjo2ihTd
a2uwz6OuzNBDdRmWLIWyvwIVGX79ynPx20ws0gofMb0mIYc6u5Plg3VcsG5PXuxBbRTIqsXJlYEaf70eCvUd
0byQsv3Q2Wd
s2QSfWiolsQDh4vQe8rboG9nXd
Thread
RijndaelManaged
get_Elapsed
Cg7eAPnms8iiirIPJG5if3UJkd
ODKcozhJelvnL1sJnTgfNgHFQxI6gEqxPiOOqQqPXld
EndSend
BeginSend
Append
RegistryValueKind
set_Method
CompareMethod
TargetMethod
h48afxBak8a4SkvDazDXKrG10QexRwnhr3p5J35lWqd
W94oi5ng2vd
8LKyfvudN6y0o7qxzfnSMrqTDe
9RA5ClCaaCbldZZhzDzmNJJAz5M1lbBXAiWFOT24FMe
Replace
IsNullOrWhiteSpace
CreateInstance
get_GetInstance
instance
JUiiE60bE1nYYWbuyDQ7m7U2de
GetHashCode
set_Mode
FileMode
EnterDebugMode
CompressionMode
CipherMode
SelectMode
BJhMt94hQUhi5IgKdl4si3Heee
FromImage
DrawImage
get_Message
EndInvoke
BeginInvoke
IEnumerable
IDisposable
Double
get_Handle
GetModuleHandle
RuntimeTypeHandle
GetTypeFromHandle
EventWaitHandle
Rectangle
DownloadFile
IsInRole
WindowsBuiltInRole
get_MainWindowTitle
get_MainModule
ProcessModule
AppWinStyle
set_WindowStyle
ProcessWindowStyle
get_Name
get_FileName
set_FileName
GetTempFileName
GetFileName
get_ModuleName
get_MachineName
get_OSFullName
get_FullName
get_UserName
get_ProcessName
CheckHostName
DateTime
get_LastWriteTime
dwTime
WaitOne
WriteLine
get_NewLine
Combine
OZWHYCe1CQsL8EVR5TyUSRMaHb5yDWU19sIKejMrnpe
ChangeType
UriHostNameType
CheckForSyncLockOnValueType
SecurityProtocolType
GetType
SocketType
System.Core
MethodBase
ApplicationBase
HttpWebResponse
GetResponse
Dispose
Create
MulticastDelegate
DelegateAsyncState
GetKeyboardState
EditorBrowsableState
SetThreadExecutionState
GetKeyState
Delete
ThreadStaticAttribute
STAThreadAttribute
CompilerGeneratedAttribute
GuidAttribute
HelpKeywordAttribute
GeneratedCodeAttribute
EditorBrowsableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
StandardModuleAttribute
HideModuleNameAttribute
DebuggerStepThroughAttribute
AssemblyTrademarkAttribute
DebuggerHiddenAttribute
AssemblyFileVersionAttribute
MyGroupCollectionAttribute
AssemblyDescriptionAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
DebuggerDisplayAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
set_UseShellExecute
WriteByte
m_ThreadStaticValue
DeleteValue
GetObjectValue
GetValue
SetValue
set_Expect100Continue
cYBzNdT5knl6OtBZhaLRFrjCCju5DxaWsJaMI2Z1aAQU7HShrtrBEC1CE18eXdbWIBFDcFvRW32ELQLeyFZ7JVyu8magbvOYve
EndReceive
BeginReceive
Remove
loaded28062024.exe
cbSize
get_TotalSize
set_SendBufferSize
set_ReceiveBufferSize
4VuobQt7mWGXHcTSgC1C9ptMmVelqFwH66mGCnzSr3f
XOqoioD94nsbpmMP9RJTxWGX4f
pWbOQ0HHMHf
LtXcl2vldKf
88jmnU93NowCWGG2MVdaRESKLf
SizeOf
z2wdPcBhZw1l683cXIFZKTXZhZ4JfHAsydeCCZs8vPf
jsylsosvUSf
xSicM5tIDUK5VXn29Hr10bnFYymTr0oq18fhlEGGaTf
eO4aQcc8O2FyKrefX0bb0fYWVf
nXx2KCCf8Xf
dhnZI97I7qf
Ur6YxKnebAg
43vnNrnEabnNo5MFzPNpE9m7Bg
87OfLwAxUBg
yo3DssPvkEg
rjxfvAk4nREdgZeNAWlo1JgINg
EfzbC8waZV0Fp5PFq0pOzrG7Xg
get_Jpeg
SkSRerQhLmg
System.Threading
add_SessionEnding
NewLateBinding
Encoding
System.Drawing.Imaging
FromBase64String
ToBase64String
DownloadString
CompareString
ToString
GetString
Substring
System.Drawing
ToLong
set_ErrorDialog
DIHKoxXxUzbMz9GZlHZuzTuZqg
qjcOtqSVbftmq6SBTa0Jo2KIA5869qft3CXt8U5nlxkc1MiCTwTzR1JH7wopRuGjn5yymC2UA0FQAA9JtZSh
yuXtzGHo1x74Sptam4OzfQhXWh
3EIu55uu7ah
xhvch7YKFAxBCsGYRr5oBqgxah
Stopwatch
oKUnZ6FFffh
ComputeHash
get_ExecutablePath
GetTempPath
get_StartupPath
GetFolderPath
get_Width
get_Length
EndsWith
StartsWith
Iq65bjrErzh
ZuGkiZXdFvFsM7u1LUoQscNe0i
QdeArOqCwpP0bB8JCjdVjrPW4i
fshrhiIfhmOU0spHNFi3EiLB6i
HtTQI6vlR8i
0oKrzC8vzaLMN18jJT7akW6x0hvT6DTh8gr2QEYBlAi
DKRa97G0rPtomvdWvZhZvZN2Li
dBnENJy3DeIg8lIVbGuBmbZvsRJznzrIuti6Lq0YeOi
fn9M6Fr2uai
YLJWhZeXCYiFMBVFX0Xk0rlHkqKOfTAX8MgB5Ur89ci
RBoqznQGYBOk7eM903AMKLfeA0ie3vul8Gvmug17Lii
C352KRXJ2Zt0wpgd7oFm8TS1hTDHQ3oYdleOjazKBKSsL7DPJM2PBuF2juw22riEARlQTet77apSKolalQni
YEEvk3eV5tiyvmBCyHynUFRNPIKOlOu5VeNiiDol1f5FpKUDZlASTkmSoUMTD7VHsNgghwkzGovsvHIFqNwi
8dbEMQVQSxi
MdwxoWN8hLZifNx9UUyHjYWyikkObWUshMJobxIQPoDnJYxFFBHFonqYkEwYiDKCcxw3V2yYfmmKByLxVNyi
mv8UZgmFEDgsO0090iLrD3jVvKlXUoEojto02sZKx6j
dshv3800fZAPzmikC80JVX4sAQeTIWK1xewK00td8XX0ONXkWehc2h9AweNiEPewGZYuKEwa6ceMUIpOzXDGDoZl0L0gV0riHj
Dya2YlHJ8jg9n2Xm3FjXjCzlQj
xJ6pne7N7pUDUk1Q9J1CwqZlUj
BJaoqT6r4RgEOJoJvi9ybbDjN1FUhe5mcy9clps3mZj
RDujFuA6v290Zk0XIhskh7axtcCgtTCfmE3pHBXFdNpkz0PCjQZ6gMaHO5XhZOCZuW49EkSkf0irc6yyZxbj
lJyTk06c3LtU5yHeKlDMjfmldj
lRiHEw9Awhj
zq7AIZG0wVMwpIxPl8L8pjzbb7Xt1f0cHOAGrwjvcmj
uxTilymDhsMbHeKNeGZ2y0P5rj
d1R8Y2R331k
baQpiUeRg4k
rbpe7MsfTbCe7x6UMM8ZC1Nkjyh7Sk9buZcQ1tWLSCZxYoV4WKmEgGZq2Yodjw5jjrysSyXe9TyihauRRM6k
u6xhlBZPgUk
get_ServicePack
AsyncCallback
DelegateCallback
TimerCallback
RegistryKeyPermissionCheck
TransformFinalBlock
oKmR9LdU6hk
FWnOf1v6Lkk
vozT8WOEhcj1bM4RwCgpC4Iwnk
jUgpILgkMC5Q3b93U181A0hvXJCUG9ZldiYrTU7UtLl
Iblxaw1RhPl
g91orskJqUl
RtlSetProcessIsCritical
Marshal
System.Security.Principal
WindowsPrincipal
ConditionalCompareObjectEqual
System.ComponentModel
LateCall
kernel32.dll
avicap32.dll
user32.dll
SHCore.dll
NTdll.dll
wtpIJZucPLLYewPzEugkv2kRyqzb0VwmvfkMWGfm2nl
set_SecurityProtocol
ObjectFlowControl
pLd2ZIfAjzCJ7gGnCy3trrxTul
jTHyMU6uiL63OWnUvCrwsa9Z9xmck9lYyeUh59Z0HFENelEJAkOYByvZCWQEnsjpQuk5Pf1deCBxZB6XVazl
EBKM7VHXDWeiH2r9G3yQr5cyXSrJgir0j3J13ptzhLm
XVVz0tknHXDTmyUj8IAJSPm4DupgK11KlSCYZrXmjxBHUsXbOz0IeFL5iNBPfpcGtnC7E4jqHJNDWkGPuMOm
FileStream
GZipStream
MemoryStream
lParam
wParam
ZJQYGwcNZtktR3cGjM32Q10Gj7471sZGAcjTF4h2W2lgdmEgxbNzCjKd51LqUNBELCCezagMyWss2zRfhZdm
upyzGIAW6gTaUBXsKcX9Lgw2p069VCmrJEkWvxotGem
get_Item
get_Is64BitOperatingSystem
SymmetricAlgorithm
HashAlgorithm
8EreA9Qbwnm
Random
ICryptoTransform
8CwJtUgbnzvZhhk0yEAjL8rbzm
1NdEayW3qAv1NbzcXZkGqJms8n
TDUnSn0M3txy54oxQifNOHfKAn
m5Q6l5XQuqnMzEpUXRcMMFYAaSNhZhoczbEfIIIuZIn
GkA8ORo11H47wbxHYgXitAq0Jn
5MMUvf5arqdCGKmDvikXoLFANn
ToBoolean
op_GreaterThan
TimeSpan
CopyFromScreen
get_PrimaryScreen
System.ComponentModel.Design
AppDomain
get_CurrentDomain
GetFileNameWithoutExtension
get_OSVersion
Conversion
System.IO.Compression
Application
CopyPixelOperation
Interaction
System.Reflection
ManagementObjectCollection
Exception
Environ
Uxn6JG7sY3pdfq8F3XSl65rHFSQPQS1eR94x4oppUrn
SocketShutdown
ZHsA9mtWmDR62mTYEGouiyTk1o
sr9zMp4gzAo
7tCmvezfJMo
LtAjh2ayGOo
nFKctmkli6PEUoaq5YaMriX5LwVwnIIS0c1Y6qW8ttu1n7DitKCwRfbesrwgtfmoce7aNjQjU8iHcPFrojQo
get_Info
MethodInfo
FileInfo
DriveInfo
FileSystemInfo
MemberInfo
ParameterInfo
ComputerInfo
ProcessStartInfo
GetLastInputInfo
DirectoryInfo
DjnwQCEhJyXx9Vns6ZDchM0sro
NDUR00Xpyzo
HXOlfJnuouTpoCRfUJMslvDQZp
UtRnHBnYZvuy0QZaXXcmudjl2mzFeGogJAHFITgFJap
Bitmap
NNSfKw3uboV6qI7aci2qYFcn9fcZZztX0YF50x7Ac3UafKU7fznHRR3T5gZ0FWSeFp6FX20Ro46InZwMIOtp
TD7Vaplr09FDnoxDE9mMPgIjtp
oSxzpKhEuq5hDJB6vdgBWUxGqUoLxBp7WYpiazRkQ7q
fBcYn3jxoLq
STNYUhUHD8Cf2ApxxAz34aR7Nq
Ez1TldsMkwkONqkLHgjbXEi7SE8fHMF9ZlEbhutiobq
System.Linq
LvLqr2rbNyMdv0Loltd1EZW4sq
Nr1z3h2OWEcw2S2HSNII0e0DBu5b9HfoDFvcONbewsq
UwGr1eiD2xq
MxlsWalfRCZMJFTRgPfpWsL2Gr
dXduJVB2XGr
MD5CryptoServiceProvider
StringBuilder
SpecialFolder
ServicePointManager
ToUInteger
ToInteger
ManagementObjectSearcher
SessionEndingEventHandler
System.CodeDom.Compiler
ToUpper
get_CurrentUser
StreamWriter
TextWriter
BitConverter
ServerComputer
ToLower
rAhbqMNNFWGN4baW3B9dVdRijr
H7HsN0taB4Xi4SoKsDapGeaSlr
ClearProjectError
SetProjectError
IEnumerator
ManagementObjectEnumerator
GetEnumerator
Activator
.cctor
Monitor
CreateDecryptor
CreateEncryptor
IntPtr
8ymjJrIdyvr
PoiWT4iaTINU5ekIwRJuW0Khzr
Jf2nMbUTTGgF0988rKlittnkEs
ueQoBrIMFQaLlCQj0tGVZFXh1VDF1a1F3W1AuNoBMO4hP5KslXdffk0C2PrYnCJJZUEYP1RWowBO0FMWpWKs
ADpPgVqJtRs
Graphics
System.Diagnostics
FromSeconds
get_Bounds
GetMethods
Microsoft.VisualBasic.Devices
MyWebServices
Microsoft.VisualBasic.ApplicationServices
System.Runtime.InteropServices
Microsoft.VisualBasic.CompilerServices
System.Runtime.CompilerServices
Microsoft.VisualBasic.MyServices
ExpandEnvironmentVariables
GetTypes
GetProcesses
GetHostAddresses
ReadAllBytes
WriteAllBytes
GetBytes
SocketFlags
Strings
SessionEndingEventArgs
tmo5cE3w8uvBpz1bamQ976RRqOo5rl0NWyKqleFqEis
Equals
System.Windows.Forms
Contains
Conversions
System.Collections
0d8XR7WlMos
get_Chars
RuntimeHelpers
GetParameters
Operators
GetCurrentProcess
SetProcessDpiAwareness
IPAddress
System.Net.Sockets
set_Arguments
SystemEvents
Exists
h7HgGzAYL9t
a9CZvfLOqNt
Concat
ImageFormat
PixelFormat
ManagementBaseObject
CreateObject
ConcatenateObject
SubtractObject
TargetObject
ManagementObject
Collect
Connect
set_AllowAutoRedirect
LateGet
LateIndexGet
System.Net
Socket
get_Height
rRT9TrFP5N7BqXxxuSpMpuxWit
op_Explicit
set_DefaultConnectionLimit
GraphicsUnit
WaitForExit
8UG35jnhsBfGkOxUwThB5H6wajNUrh0DrvuXJv3PdNOnCuFguBOIw78TNoicmNEAL3hv3FsLvGn8dzrGKa2kThM8eEyD3L0Gjt
IAsyncResult
DelegateAsyncResult
A4HZiRU2ce68b9YYIXQPDfc6mt
lrbwbSbEp52BklKt1df3pQgeTi3Gds0Sj0bYGCtYjmt
1VVpwoR5Lx34eJ7v2I2SaLsrmt
ToUpperInvariant
set_UserAgent
WebClient
System.Management
Environment
get_Current
GetCurrent
CheckRemoteDebuggerPresent
ManualResetEvent
get_EntryPoint
get_TickCount
get_ProcessorCount
GetPathRoot
ymnQZjmFqspU2fkbAX6vDALzNQa6l4jmKOWGVanNNpt
ParameterizedThreadStart
Restart
Convert
$VB$Local_Port
FailFast
HttpWebRequest
$VB$Local_Host
set_Timeout
GetKeyboardLayout
MoveNext
System.Text
ReadAllText
WriteAllText
GetWindowText
8fTC2zmQa4u
1Z4PxHqF7mmH01JKODjxMWVW7u
Mvy2SFXyDBu
7eECFDmxaPu
J4GezxnpMUu
I8qkL8Epe1zpdoMOgBDwCCqlJ02JboqumkX73hK8nVu
E4ZxKQfSu6qnuA2Wk2aQBFsRwy2JkIWZp7mIbED8znmwJh8n7B2F0JHclGAtuEnKm3esfTGIyQuyQTAIx3gu
Y7OP4rqj7xobJgiPLf1wGvgQ2Wo5ywzTs4xomQnEEuu
j7U2j2YuuERxup7cnJpB4ueIXm1iVK3oCdJ3SHzbUvu
MyPLZnGhN9VfISuolbvhjxTxwu
z78g6EVz6zu
WIXY3aoXZA2WxP7l0mbROiwfzi4TOyKdANihh0ivroGYnSdHIFb4sFg9MVbGYj8yHrA5zDwZqgq1Yc7VM1QGH3pHIIyl7uKz6v
jxPHzdIxZOovHBUr3DOxvA9K46N92gk4mDQAVPF3LwZOlnjbomyTNDq6eAjaA1Q3RxeKtqyZ3M2G3UcakoJOGfAQZA4zutuIAv
5MtuQz5KGOa1MvuerJOziVq1OSaq6YKpnhpWFDW2YGv
eh4PwCyeoLqxcIEKl77HIpPcIv
ONeWotFSMeoYyXc3lcZbtPBgFhqL1L9ymoASSk16fRv
lwITfGCQ8Wv
zR09TyQndngmTRXwCkCcdbPIwNSA8LOZjE5UxFH3vtv
C1heu2wfbvv
hCzvA99Zag0kevSWlFA01AtpGw
jUY16xeDwm99trTQgnTaintrjLJL8ZLnUfBVuw1TTHw
PWXJ9Oi2xsgzxJ2aqMjuSu2KJw
Ylc44HmOw6FAKOSi9sfsO0uwWw
o59tmxpjRsY09cZnsHdfBXsFKsFjrN8eJOYFImetyZw
78PT3g1ALPGuo2KhBlPxnBIEfxEwSZJeg6XHrHBI2ew
GetForegroundWindow
set_CreateNoWindow
nunNB435pbShC9JCn23n3SVd1x
qHCOfBiRo8zq7RxPNkiKVBV6bNkrsfpMXFwSyA2Kz9x
QFyg62KWo8a3f5HPCkxOBgZ6Ax
PpqMledk6VviLDihodb8cY3yCx
jQYKfaumA3J3h6EzaGKX4If4Dx
RoGxscItdkWr5MjTXayvPSEzj8gtXjTokd6EYvkPtDx
ToUnicodeEx
UnhookWindowsHookEx
SetWindowsHookEx
CallNextHookEx
coJ4jAXbvYx
zE4CVhqHdGNXuQhQ4xwIZy3ETNsitB0fekGF8wAG2Zx
LateSetComplex
HDBYMqe9kLYqWSc9dD0amRtqnx
Z7WU7KtuWkwHC426COnPKA6z5y
15c8Yf1B67l9tqMr9NfMIAGmJy
0LyDpDFw4obLOiPcqRSf94vg6T89pnAOCGyCDSqgnqjgnpHLEPq2J3jR6dd6iPTuLjTCG1mQuZZCZ3N8zkPy
lPrNevJ9QUaQ63usrx9SeHjQQy
0kCQcjynTXy
lmlL4UprFdLku4DVW2FxmvjQay
ToArray
bVz3fyrk1bNfw8WzPlrEFVOTby
set_Key
CreateSubKey
DeleteSubKey
OpenSubKey
MapVirtualKey
RegistryKey
System.Security.Cryptography
Assembly
WiyoEriXKKyFc7oOhLeQo1W1PjAdxuRqZdL1G4XPJ65jcgC9mMvaaxM8mjdnJB3MGxV42ZkyLosSYDz2Pfly
AddressFamily
ObjectQuery
get_TotalPhysicalMemory
get_Directory
CreateDirectory
get_SystemDirectory
get_Registry
IDzOIN3iLty
op_Equality
WindowsIdentity
IsNullOrEmpty
pwqsOEnf8vy
RegistryProxy
kjx3y3V7Jx1hgzSWFzSvfnLECz
nfO6NeJdOLy5x6npXtEm3ZCzBFBMll0z6xtiVpDfjEz
FnsbspZn1bp4KzXGbmmniUDJGz
stjTzBca6Lz
aN68V0JleF2s5Dz7JdsYYlW2Rz
MAhXyzKwyPfGRIoujL1lb3bjywW8TY8gZDfONNnXNW7DeStesDujq9IKpuuwD8EKJzoeA9jH6eilhDcdfqUz
ie7ZkmFN0BhjJA0dSioMYz8raz
SjtkubhknivWpeAJedqZFcbZoz
WawChhOH9rz
9epD3ymhxlwgNWeHP6XLDMShrz
WrapNonExceptionThrows
$c00e28ef-2ec3-4538-ae35-8e0af53be252
1.0.0.0
MyTemplate
14.0.0.0
My.Computer
My.Application
My.User
My.WebServices
4System.Web.Services.Protocols.SoapHttpClientProtocol
Create__Instance__
Dispose__Instance__
<generated method>
<generated method>
_CorExeMain
mscoree.dll
C]58W-
j#*=R9b
$DL1Za
QA$!)"1
R h$I*
>q{?1U
dqBT_
EC6IRP Q_
0jH]O5
gZ$\v(
ykK;isQ
CHBTK4BT
wy'sdg`J
J53~"K2
hIjTfmb}
W~S9i}
"AijKj
stX5E3
U!Ah'B]
:jG524#G
}.*:;L
-}%Vb~
(Ums?CQ&c
d.hQ7D)
")3G(a
yrr4c&
\PP"Bj-)A
&(umKA#C
uG(\%)/
IsaQg8
}P&m.e
ag<o3U
]r^L%!
DVfAij-
/;t;,U
Ys9/SJq
#5]TbR
&D&*L413
8x)'OG
g|sLU9
j}=c@\qY
oo-u]?q
2vWH]G
{*Ibg:
yTj1Ee
1n@nP2
5.m_`k
;N=*V,w
HT$&.>
VWWWUVefee
#K4[W`)}7
fov`?!
DFK:oR
9}pL<z
{S^nNU9(
@bK{rn
#|i%t}d
&%_o)@
]JN\l<
^'big%
/JEZvF
|/*|CZ^
P.SAoW
ZqT/X45
LoG7d_)`
X6"[MAu
nA0Y,>
X|gl<(
&0_6^>
@xcAxj
%0j)w0
\.ftSe
}0XUw.-
,@v_C5
)nu3sp
=\'EF0
4VDqrrTZd
W|z$[q
Xwi*:J
Tvtk0M6
MG+4a]
h<zCfo9
uR$ft(
ktRx$K
2]T^91
ipS\2
M~g"We
b2Sj:
CB&;!{8^:6
o?8Yz6
$x7F*o
Q^=r8U
z`3dbT.
p[\ao{I
@Nr>qD
t%J>d8>
%O$$v/
yxDFdU
Sj7)2"
Qo'5xO"
}`Ta4
d#coF,
:*{wT\
H/'#_G
bpLHQLr
+k!ztYH^
a# 4a%#
t)(m~.-
r*'=}.-
p)'Vz-,
r*(%|-+7
x8*td<3
H!fs@ W
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
vlb8amoieps
J5Gq7cpyuzM
pl4wv0azLMc
tJ9OH4s5g5r
vbnwzVSeds4
AcL9jTqoi9A
jLXrQbC6eh5
62R0TUD/qAHqAXeyvWTo/w==
iOVg0qpES7x9TEx2x8/7Wg==
56V3Gd2ZEPm7e9/sNYKiIA==
I3Tgv6/UDITa1hzPb1CN6A==
kGqoTe9vbCiabSP76CYXXA==
UEhJGu2eyqWDylzE0/57lA==
XKB4ryt3tFPZdd3WaExFpA==
VRrUNlFgImEhXtjrMm9Ruw==
C6AAGo0OX4F85W3k
\Log.tmp
ztvimmAGhO3
boDIhWJ1rOb
schtasks.exe
/create /f /RL HIGHEST /sc minute /mo 1 /tn "
" /tr "
/create /f /sc minute /mo 1 /tn "
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
WScript.Shell
CreateShortcut
TargetPath
WorkingDirectory
powershell.exe
-ExecutionPolicy Bypass Add-MpPreference -ExclusionPath '
-ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '
http://ip-api.com/line/?fields=hosting
Select * from Win32_ComputerSystem
Manufacturer
microsoft corporation
VIRTUAL
vmware
VirtualBox
SbieDll.dll
ur89vZS7fXS
TtxeXcDHXdO
d0nMkow4qfb
nom8BpYe8Kk
XiZ17XNf1x4
v241hm4rnnf
TWpF0cWWsu7
FF8kgyfXhLn
j7qONPRHmmO
bdHBQqGxUvw
5TbslVNCfIs
9WKItLuNSa6
uePA4KSCUFv
on4wOhEg1nu
Microsoft
Service Pack
dd/MM/yyy
\root\SecurityCenter2
Select * from AntivirusProduct
displayName
SELECT * FROM Win32_VideoController
Win32_Processor.deviceid="CPU0"
Core(TM)
UYRiqR5PGc1
CKTJMlI2Ych
fUJmtCb0NGi
DEUgUnFkZFV
KukPfmHczec
fnHthQmOdgd
BptmXhpmneR
tPmzhdKgfnT
g20mBKdNUB7
nhFDdSMf34I
ItSq1DktRzl
ErxOQKgTrUM
QWuR1dID8w1
S35dyaYRwRJ
Zu1mTyUqgtp
7ywRalSHRJE
WB3tBx2IKFF
BlGuyuVETML
w6OPoU3czAD
vTfDDaBVzfn
68QNTrsjGH0
uninstall
update
Urlopen
Urlhide
PCShutdown
shutdown.exe /f /s /t 0
PCRestart
shutdown.exe /f /r /t 0
PCLogoff
shutdown.exe -L
RunShell
StartDDos
StopDDos
StartReport
StopReport
\drivers\etc\hosts
Shosts
HostsMSG
Modified successfully!
HostsErr
plugin
sendPlugin
savePlugin
RemovePlugins
Plugins Removed!
OfflineGet
Plugin
Invoke
RunRecovery
Recovery
RunOptions
injRun
UACFunc
Plugin Error!
ToLower
Open [
-ExecutionPolicy Bypass -File "
t0frZYsaIvw
woF9JO3Pnut
Nxl8lFTkAU4
YI3KsHeuDdU
z1gRFG55nWq
7BHYS3Rs8UT
aX5H4bi7Jbh
96PnZ326SHI
AL0YhGxeHAo
eQGDnl17X8e
AooiYtoxnvq
sivsDeYV3Fh
lUivNMQrQz2
B1Fr6ITwVGk
AISfSp9WJ35jwX4KGgFdFzmOJj2TeK7D4FGJgHQHKD3
POST / HTTP/1.1
Host:
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
User-Agent:
Content-length: 5235
schtasks
/delete /f /tn "
@echo off
timeout 3 > NUL
" /f /q
r3WqU7yrWkSfA1RCodsiPrOKiLFOQTSjUvE5NGdEMY9
XOPPgDQRzjOmlnLnPv3cHh8acs4lBIVjYKIrP7gKkSQ
ToUpper
[SPACE]
Return
[ENTER]
Escape
LControlKey
[CTRL]
RControlKey
RShiftKey
[Shift]
LShiftKey
[Back]
Capital
[CAPSLOCK: OFF]
[CAPSLOCK: ON]
MainWindowTitle
ProcessName
eJHe01h5xCvE7DMByPY5Tjmcvv4SnZwcD5PeYMx4e98
H1kP3kJGFt3tgQJMofNdjj1dd5bGzPo55CnEmFDPkhw
88esZBv4e3qDIJvGF74Pt8XhLGRUORhD1cV8hO69mHG
g9EzD0L6YM14Bp2rBZQhK9aXSJ4ywP9KryBFHzokbZW
Xe3RhZ20mSkR8AINalt6dw9qzOUwahdBhcf9JBleNUj
ihs3liQAp6XrUt5IO6pTPpWcV7eU7MCKTqjtGchYdER
21lzID55tHPSbXfQjtYoX7hVdDcAGuVH39weT51e5BA
YVx0EQH51bViUT37hAwoklC2znPObPmToZunAGIDLYb
wk0HaV0pZZr0aZcqB3gq3XygDsl4J4d4iGNiuHQe2TX
WaO3yJYkOUmg10l1tFYltY9tDEaVblBKlwjXRWqmCR2
BIvENUh8qBLVqGu2m1HpudB21lxZ7OanhWkNy29ZRoR
feWcmKTguiUgK4TUSuOJeEuKwyE52nNzdVqTdOL702M
dE5S577mY3I6Q35EfoFAeOkj0iQqSyazMprsnSmbwF0
rkI1yRx936qhjihxwUI47UpQADKr2spfzWesd9rsuzG
YoHAyiXooxjYMEsTOO3SO6JGz7BgdPBF58kHKQIC9at
RACVLYDo76JSoog8VvMbYfoV0wm0CH7eTcpxPCVlrDj
qZdTlwCAILNML4YNBjDIHUAzTkFkLdKfqtlnjPBN4D6
no7evmsNUXkCaUC1rYx8b9Bf2t5ohRMRrg1c31570rS
GQVHqIm71Ol4yTMTyI1MWPZ6XXeOgdnm8bLCu1DuXNb
epo63ZGYEuVj4NLysBhDj7RnDlOEFHpzjCAyNbfmJ1f
X64wK0aY0PErA0CPVphLZf3QEZLElcaMBdF7mLnQx3y
x69GQQr2oly4QaMxMYDViFOgFSWf4AbmQeCYGoi1jhy
WQoyNiIN83yWZ37V8kOLbiRC1Clau9DWTMwFBXoVH7u
iTGsArech2Sj918ezAYK5F1rX1SAsc9RplHQkIItgdI
W677fdQ8bYifhOhNtqDs2Glc0sbdpP1xXGqSw7VOQVg
Software\
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0
Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
abcdefghijklmnopqrstuvwxyz
Err HWID
ToArray
ynwY2YNZftJh6xmlDMHK124HTACtO163BnDj2ILhJAd
rzcGd4oR5AhwhVpVv267Yil37FWNY1c6C4od9qQhX1Z
II0WaOYoIx1fd9i28M5RVzF1SNthIiENeQad98Ly0Xe
K8cKbKeLTME1jAOiowmnuiEU1lUdmVKOcL6YPnlgP19
SMZggeNl4pFba8bipIvsh15qlFkY1dFl7cHDP3kAS9X
jEFYvUdTlbfOtl2MV2u3OgLnjjOkQBHCxLcupUraWEP
LBleVtZih8cJZWQwkZEAOF63d2SgNTg0OpsZjlu97Os
Ab97UKEGcaUGvsGJtsBgFqj7iF4VbeHHQZWpHuZjHkn
qXJsDZbujGv9YC7sxAN101uf4UBsCdLUM11bQSqBaEW
FGzlqKY4ocxJXgOMWu9XEYApmYhnldSauU4UKVtRpQ5
glXKhFnJ3XYIxYE6RQeTKvhr85Uf914p17MpeWYSueM
O0HKMAldcdUeipO5o0zPbyT3DQY5YJoSAK1izGep3nA
byQRd7BLwaKygQHM9xsk3w4xPnqLnLDUHmaZEY5OobH
ceSwngZaZZQxF4OkU6uOmvUgWLGjCKKMlNMKrJRu2Ld
D70GpfrjduVxZ9GIbJr6Ot529DlhXemt9dUpgXE8zs1
LdiwUDYhZ9kuR8lyp9gHH6a96LQM4ShyyWwZsMNSLq0
sgbgJc0KRPmvWWAoFSByR3bFgNCXRBJYD7F6sqWT0fD
rkGPIsTHFN7F6X2lQWKk8zAxjsJPXIFrHm4x1n6V9eD
jfihkrFAkxIepM91rLd6ATz3fqkqNNciM22RnVpsm1p
0GCgX4CZBt4TAOCrEIk03l62aLqJC7NGWw8vAeqEjXv
eiCzEojCCnjtbPOXYCTgsjIGLJKFi0LAI5nPQZ3aafv
3hzSnCHjQFAGgKSqMcj2yJS0PRNB7ASRHnrIbR79dRo
Z8kZEjIF8Swr7c5ONOTnOvszUYewVddy89GGk5JCcfO
b5Crc1osJQFycQfQLOStL5Umr8kGkXcJjLdWRw17YI3
3oj0WvCyHEQrIW8DXng4K3NiMF1AnMjM9rmUJuMOR9n
mnHerCJcyCwrc3SXvkJOuTghnJRIqwE2HU15f52oX4i
EfzWv1w8lFPRDft4IzCrqX7Jyn7XPoX0cS7QsyyIbYj
9iW2PfKwxQViqSsFG6GpcIkwVRbjo5JF237z16MoKhg
abcdefghijklmnopqrstuvwxyz
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
FileDescription
FileVersion
1.0.0.0
InternalName
loaded28062024.exe
LegalCopyright
OriginalFilename
loaded28062024.exe
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
Antivirus Signature
Bkav W32.AIDetectMalware.CS
Lionic Trojan.Win32.XWorm.m!c
Elastic malicious (high confidence)
ClamAV Win.Packed.njRAT-10002074-1
CMC Clean
CAT-QuickHeal Trojan.GenericFC.S29961068
Skyhigh BehavesLike.Win32.Trojan.dh
ALYac Gen:Variant.Jalapeno.640
Cylance Unsafe
Sangfor Suspicious.Win32.Save.a
K7AntiVirus Trojan ( 005aa5f01 )
BitDefender Gen:Variant.Jalapeno.640
K7GW Trojan ( 005aa5f01 )
Cybereason malicious.0cfc50
Baidu Clean
VirIT Trojan.Win32.MSIL_Heur.B
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of MSIL/Agent.DWN
APEX Malicious
McAfee Trojan-FVYT!3DB7F780CFC5
Paloalto generic.ml
Cynet Clean
Kaspersky HEUR:Backdoor.MSIL.XWorm.gen
Alibaba Backdoor:MSIL/AsyncRAT.885baf50
NANO-Antivirus Clean
ViRobot Trojan.Win.Z.Jalapeno.236032.T
MicroWorld-eScan Gen:Variant.Jalapeno.640
Tencent Trojan.MSIL.Agent.16000605
Sophos Troj/RAT-FJ
F-Secure Trojan.TR/Spy.Gen
DrWeb BackDoor.BladabindiNET.30
VIPRE Gen:Variant.Jalapeno.640
McAfeeD Real Protect-LS!3DB7F780CFC5
Trapmine malicious.moderate.ml.score
FireEye Generic.mg.3db7f780cfc50d08
Emsisoft Gen:Variant.Jalapeno.640 (B)
Jiangmin Clean
Webroot Clean
Varist W32/MSIL_Agent.BUD.gen!Eldorado
Avira TR/Spy.Gen
MAX malware (ai score=82)
Antiy-AVL Clean
Kingsoft MSIL.Backdoor.XWorm.gen
Gridinsoft Malware.Win32.XWorm.tr
Xcitium Clean
Arcabit Trojan.Jalapeno.640
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Backdoor.MSIL.XWorm.gen
GData MSIL.Trojan.PSE.VTQMFW
Google Detected
AhnLab-V3 Trojan/Win.AntiVm.C5374869
Acronis Clean
BitDefenderTheta Gen:NN.ZemsilF.36808.om0@aaclp4e
TACHYON Clean
VBA32 Backdoor.MSIL.XWorm.gen
Malwarebytes Backdoor.XWorm.Generic
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Trojan.AntiVM!1.CF63 (CLASSIC)
Yandex Clean
Ikarus Win32.Outbreak
MaxSecure Clean
Fortinet MSIL/Bladabindi.SSNY!tr
DeepInstinct MALICIOUS
CrowdStrike win/malicious_confidence_100% (W)
alibabacloud Rat:Win/AsyncRAT.Stub
No IRMA results available.