Static | ZeroBOX

PE Compile Time

2024-06-28 13:00:54

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00012984 0x00012a00 6.04220346889
.rsrc 0x00016000 0x00029946 0x00029a00 7.09002820083
.reloc 0x00040000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0003f04c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0003f04c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0003f04c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0003f04c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0003f04c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0003f04c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x0003f4b4 0x0000005a LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0003f510 0x0000024c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x0003f75c 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
3j%(H
v4.0.30319
#Strings
1ngp3bnQz87JjCXHMls13ELmiOpZUTpTrBvGnWOPY5ffe9ecrEpeuPsHEM5Pe02Quz8esSPU9lZ9s54uK59c7nsszPUavi00
fAz0bgiFgOwVEgCTTcubgyaKIfklOhq2UI3480
stskDsiF1mNmwdArmZMH5kDS5c16UHnEW7GsUnnVdE8b7DcttfOGXSpLseRrp6LwhNUfMGdA0
Yn3jjrY6bcgWJCvthmB0
0OGfPV35fgumGAEHmDD0
2D5Wdlg42fs5p0Xfyj6aynIPpHaBygACNzmiE0
BFhpQMU0DMyLiAhC0QmqA1efSuzEXy55W1xRM0
A5CZ27EFzUYB9XfMPcODhJlAIZjBu8xNGpyMyYOdtFdVqrOKG3HZZyN0
OEntHjC2ympW6qdB3I43eIJuJMBGw2YxJmNmpcknBlKMDbdItuighB9HrzitzsoFijVZRyvT0
NaHNIPTKMWdfae0
uVKVHOWu53tOUHa6HKjab03y5hKZPf90vswjn0
LkiJwV3HLwO9X6EmoC4OlkVM8sajh5RwxBRSw0
RDspLWvAoKcpYE8gUSfmwz1mahRTxxyUVLdnPWhycZnRvefhvuva9w9FXL848kiRRjQCBZcN2gtTD0X48lF7sGA1
2c1Qjr30ulUjAI5KoQBolK1
HTpxiMvjxPOYeV1
_Closure$__1
IEnumerable`1
ThreadSafeObjectProvider`1
List`1
mcXr9Q1o0bXnkR9OA6NRCIKN5PI2stc52NjzSaBObNgqWAcUfty2uFeQKCo37h6l3C98Hro7B00hObVGbNVJkD22
Microsoft.Win32
UInt32
ReadInt32
ToInt32
FqNRULuObopKDcLAwqkLd4poTZ5oiC5hL9lXLa4LLg2EkegHiaq6zKkpQEZHi8fuYH5JBkTUgPxxAT1K5973m0vJJmEdNZ82
tXhTocBba0vkOK4scmaZSM2
cHUvGuQwffBJNCSoQB2xhX2
Func`2
w9oELzJYq7eSeVMDtp7s6YfYwjtg9kIJPY3bb2
cyiQTZGpLRZUUd2
D6REbwJNSo8aOh2
WA21nkpTtVHlncInBUaGs0NY7aaWb4l9i0Pr4EWJUqn8AnAxICrRp2uxzqxzHUCPaWGhNWOn2
xlvqEocsKTjQ8DCKGtlPpw2
uamuDcwCElq49SKjwjmBGROdixVTE8MLZZ7QZGqtVVBilu3STXhK7XsAXMel8rCFmqzeiKjyy5JxXyov4VssXS53
L3FwdoRFmrRpczmrJJPVS3NaA739Eg6YYGoPTvVnlXNiwyzZtaEhP2uOlonToJi5hCTVWHjswqKs6vRPuQw98vH3
GphyI9aUwKZkcXFclEvNnQrKz9suTvozGhBb9RSLBNeyCZu7ZZMvYSerBcOOX4E0zHY1RqDP3
BuFA6CCVNTWbNJotP7dujzyyOo44A65rWkfjf3
3FddwhvhfiOdmg3
GfCwO41tiqnv5Bisx2j3
cKZQ2KlM7yaDSxnN3hJbDG8bVdmI1lOqot1wO516YYmoE1a9ExU36eq3
OzlKZT5ZhaJBX2zEMV7GE6QMNyv7RhENHXDGGtgwKVlWzjYG7yIgfWDPwbJAAUGl13IBs5x54
UInt64
i2UwsFDT7iOk72mkrs2RgjjR1RbMzbsvaprFB4
a7flpxwYWTNkS9vnKSxJgX2eqhcAmJ8EpiETylBinE2kGXt7MEZ9k1J4
UHU0E928cMhQfOe6STTu3lGi2e9JFZAZIR5MK4
mFVUq5XXIJI7Qi4
48nM5hpmY4a218cFPVpfN0sl4KE4XmvZiPMYppSmnlV1iJ9WSua7dW10S5nHMKOpCFk1XQbk4
WNqOVLoVuESRJa3t833Oq81DaHm3hKW0esl0EZ8AdwOptvFeCOR9s7dsxRDX6l81voVHyPf2gkrMNyyqgRIhKyn4
ekIJfFJuxCQ5neRagkQvPDQgo7wvyXSP5E67v4
uOQUJm2mBBQ37HAFCOhR8aDfy3XGPMLeC1cwWGANpwb0yyYEyCVyb431tI6tvq59xtVhdV0gNKbt0UKnjw2h6b25
iLJ3qBgIp6CvOSwXfWQLtzjjntfq8JsCk7aS45
DMosTgb0auUBNWvrppP21VcyjqnbK45qWjO4G5
ZA8TicwGj97LdkdtHNTf8ObJm2mSThJpLMWqV5
NH9ISBw3GRA90vtOaNb5
F4AGpqLTzkFiG2qM0acgyrfUPlhN5OjwJMoBs5
aQLdGbbBU8qPlv5
7rNEpro4CkXgEcfWqfz5
QqBKtgHwfl0a5kP6SAWhTwBI44X7TSl2fOlAb6
pAkj4kWfUFDpDevQcaEFfpD5ZwXPI0P60BBdl6
id8djGbFk6vk470Hriy5Pg7lymSRJ2bLjsWnPdoC8l8N3LyNbmsJYqRYDRovDl6sOhMtem62045zErNll1fBCzy9sz67eAm6
pMkcG9WDl25ytD17BpM2QVU4MULmUgOfXW9smMxkfcCeKjObrJw1bLEne6RSMCDlZofFGqqLEEwmTtEHNJ7rHSVfL8e5CJm6
hrnIyL1K2OCEMcp2QPSnJuFViG4T6hMBjCsdD1i5pMTAYcsxA8f9YTAONXLw7nH7dEJfg3ibfesKBv9sLZFD2Orkv4r7gWn6
76DRaCsO8mGpw3gh07x6
e57pyLWv4NStMEX40s4PZx2Uj7i82FWmWceTx6
tGEcKCZcwlVQ0cjhQ6CMJ3feVefECZJgwL5464hgXH2Q9ZtUdLLL0YhG1Pp4VceQzIz1EvkVZrw3mDX31pBtJnA7
o5PDdmDXeUyQBQRIgwmODiiiA1NC4VFmzHj41IFvlNIYjGeDFbeOcNqyvTMKIVqWWa8C9dBzq1cEp19o3ykJrLFdpSECIJd7
aKlu7uw3CBX2Mg7
uDmXjgI6ckKwGh7
kOUw2F30Ocjei0AncmNRuW08eNjYaJEouUoWoLyDcobFVIdbAlD053ZiFwEypzDzCf7wq31s9SVNSNfokv9JiGn7
bGi7m50k1nBgCBbaFbrLEdD03MrBIXOE6OPM68
j2kyPXsOo3S8QjR7XVB8
get_UTF8
60gsbz2lH2QubQkNCNfaA9BiboXjVJPxK2TigrHpkalCnihZORWp26V8
_Lambda$__8
MYOffgit1110SDtlt6YPhMiX6RiGeZbuXurZS33bivFHuZcZDha6hVc8
yLK9ImwFeUJGR14U54wkxu8
dcNBz2NnB5CPVAH3Vuy8
gWxGn1UDWvjVjKrmLpYUkVjjyx3p8MD3DBpKIhkTTWhVtwnTr5IK7u39
WkeseuZLkwyYpQTtwVscaGwzDtvJSR5OnHzlNsoH3SODkhDHxfKD45C9
oFq0wlUToc4HiIRItttGTSMZ51sy4d8kI9NfF9
Bwoyv4yo98bmsWjUs9a369mhqMBu0e7KyNAvB5fiKFqvzzDTeFyJsZb9ZmnjXrFITXdTAQyK9
uWU34JBwIzXD4hOmW4V9
xkoKiRoBa8w9JW9
52Ad3q4bpwR7favNNMByfVBSXD0E47yvTcLleeGSmPWjq4yjjxSHoBTYhV7I15OOQXylYppZF6rP53npnMdt4oX9
e3u2AJoL5mjiyvnZrR4PMEfuZE4PtWjOLhsab9
rpvdp4svehJ5TJHWsW0NePY5qePMAbmpUT9oh9
sR9lh3hp8lSsMqHzTna7Twxeh3kFRX1YM5jdoYjHSoYZV0HkakJ6sND9nlWou7e7zNYKxFzr9
4HXG3F6FtsqYY9DT7hXO0gzuSiynk7F5ZGMe5P7Lk6vG9nHnu8KQOfx9
<Module>
tz73yiqaKTmx7TDl6l0Xq7A
imElbIXenMHovVNQAOIng1i5o5Y0Qq5e2F81kxINRulBhtFXqvVBjqOyni90jvkPDllpZFkC2Biq73epvRt6HbAG1Uoa1eKA
Owj0pxmihCSpkMA
0bQ3bODDbv4T8bA
GCQfyMie0pw5iCggTmLAIAwkaboYN0bL1ejOfA
PyI4OZlvZKfMuq8SxuXBARkcG5d3dqtjBFbRHB1UbZWHjk2AMyjbOaydIEIDkBC8NYrMOZgrqtRUjENiwZaHVX9ymfCRFyjA
Gnz0dA7xe7wOrFfnt4nA
capGetDriverDescriptionA
KqpKJSdAA8tSyxsSuxlEhJNxjJFAaLwIlZh6k58CQzQxUKf5Ph32rIX6hW1nZoPZkmv9VdGJ9tDA0D739dBoZzBfOxDgImoA
DoADjiVWMWdlAmD6m6rIvtXsdReydZ4QpSoo2cGC9wm1Y25ufvU4RarA
J3tWdYhwfgEv9vA
zEgXrtMBUrrn4TFpa88onVR5PkqZBIZ4a7ZLlk7YPNy5pNa2b2kqTFatuwcekCcSn6evP2izXlek2QSOzeqTdXTH1JSddTvA
capCreateCaptureWindowA
FYlgFWs3UMa20fF4xJis7QAPYlhsyfzurtSxFEQHR7WyfJvjI7TXsX1B
cc3LKtC0XAi8HOQ0ORjLSxlTzmIHWDgvk4oeBB
XTJvPwMZXDxfsQ4dKTODoLo2yTaNUbVUQfKGHB
Tc8Z9xVJx6cioYgoxbIPTbtAPldo8iajDTxKOB
gJKlzhr03H2cRU0B2iRcukvGKKKHbPUcxw7QaTIzPZClRqWkuNII86y2Y96ps2OfQppNNfRIFz5yOj3FmGpcwfw43vLA3bOB
rLIDgHzfZ2getPB
sgQ2KAb9gt4epwlpkHkJlWB
5tnXm5s9mPb3jdB
TGlLN3GwCPCADkB
bZPoalHjWh0NJmB
VljeGcvMsucggTrFSxnB
1sdMMBhqJlvPHwY7RRRSFYbPfc0aMvtEDdvqkc9MOT6azyj9uipQI7a77DpzqzocwzeqCEuvB
S5GI11YlMYZ01SYdBfuOMlDpQcKZ4qg3LdKI1E10k6QXZ9pIcPSXPCcQwp1vNccZpdWp7T6tyr8AOyAa6RcpdNwB
2r6r5L0kuZkqMOBuT4loBJSEsatCgLjbJn4cwB
HtUcvswcRB2utWjYRl3OcwSSfM1PBNYmvMgpQORSDVoVjV2Fjh6KoXrj9Bm4OuOelXu8nRcvd08YwUShdXmHRcIhmJex4Z1C
iw7talNckTaWhwGRDxgb9sNDATsVKGQKJ9jSpu0S9rRDBmX39zAiiP7UnCYRKRMd0itaRM0WVBKthqUnefbK4X7C
9c7Iux84a47XStBK32G39XC
dKk8Hj1mFCAORa3IukTw2J1x5dQ9sI9DpfvLZOOkzQTSNKRs1RbvTGRogR8l6ozoLu2RRXHZC
BTuIZeDdmXqo56NOLNuFhUJ27RMGseYuvApOhEqCG7cldiXedYFUE7bC
5KtQOxE129Vv4QtM14md86DEKh5do0DekEhyfC
18P7pXTjZGN50tV8hQdbcEcO2ooMH8llwRILeZiFNJM1ndFaalewywIoXOBFPUp97tO6xdZsQce0QnDSLsgmAgfyM03MFquC
ES_SYSTEM_REQUIRED
ES_DISPLAY_REQUIRED
hCfZ9r2un2BBrpH1QiRGctUehGpBc75nqIM4Q9hndJTeKIRKD7r73piaAoSBxRyOYuOjWYQdD
3Q4zassGRk0lpuD
qxMKDluctKDktO7Zyx1E
hjQDxShR9bgnMPE
EXECUTION_STATE
UXM3oJT5ZAHyHgE
e7ITZOj0Bqzj3GzjoJUw7YarmgWHIPCvzZ02xwYYUHsqg0flrdbOuXtoMMObRqHS0Bch5dlKL1kxxP7BqJyIQJjE
nlDmka8f2kGYhu7Jh1lE
MYuCd1uQTrMWypE
6c7LN416R3JfRlABSt21t2h47bWwiIM352Wz7fgKMwlX3xvkks97wQC0nThNznUmh5T7HljIsqr4xfAd0BGgmauE
HQ7EO1kat9p1F0Fmy4OF93BkHGIinYuS0GxEep3cKaF1nzoyM2bhQhNKaOXoymZVDNmyd7yNwy1UckEYoee4Xg8K1zk2St1F
cL6mnbZQVEh0hXKMzkXFKTBcS00sBJyxXMzqqiZCZShCHTxk2rQC1bGuU5dqZV7Htk6CkN4DF
6nZ2OhBlJ470u5wOpI5XRmt1IMdZXO59X8qp0pfFy5UBA2dhqLmmCofHU5q6aHMCJ3xPiWAkBq6vxkFyJ6GRgXBxrTHywTFF
TAO9uuVvDBcH6IcHJXFlGbCEjuGKLgVxiDwY0cRr4ebBCyOMebucIVD4eJTc9xcGLlUE9wJ1pEfBjMJ7sRGq0t76GRx5suSF
ykeMIWX6qyzHtLHxJDXArDtaMaXlMVwnQ9GbUF
dVUUJnUJoarNMdoUNOOsjwSDFVilnUtEM9hmYF
hnGRdm2c0Jkbri2FCvQiPzZOr9zETv3YuimaDjeFfDKgJ9ClIR3G4I42HND3yByowxm2netZF
eRIaxtsXla17ymmeFTjmrm9PD0WcZgOpv3T6zg9c7Vd3UprXwmel6BjF
MmuG9fy1yQyQhiCO6UjaJjF
mUZY0MLC5lkTnGSNyf4bJVPmwTyBiME8LyJCuPKfOJ50KrANmixZRXHonWJ7Zf5WXt5bFb1mF
URLgysdyzsdWpf7nekDDejhTtN97Vym95PCZ7G
IUTX6voDnwIFgrYuw1QG
OFzndzE7bv5DUSG
EllbafPwvA9WXrSZpixDeCtng9Bm581aMCJuSTsMQWA7ZKorF7vi5zzvwTwkV1kkFdSvVlQTG
cRSxboZmnnUscWwcyqQNrMO8aJHQRnMrICk1UG
GhDbX93cowQPK6cTxthUMWG
BhQ9JkF6LML8YWG
7DG5Fs0Ax0BEXdG
wOIM5rSZYi3K2fG
Y3TUH988BoC0ohG
lDybYnUtpwc8JnLgcOYl4B0T2EyuvNIET6u30L3X8eRByGYqoGLLqPqaCa5MA6fdx95MvDGoG
BC0H9m7TwKjqymZOT4gnftqJX9AYb2PSGMNvzvwnDsRsZnexvArhiSUfSB0sGrK2RwcZBlG5PxWB0xM1V3o5KhAc7n9stiyG
yTDWurZbQKcIRVc876QZM4rJoYdsV9dpd5HkTpWeZu27SSLDRG3nJ0IQ188WBuQciF1CuG1iHRROU9ZpkC7HSt0H
badbdEJ5YLFXcy3CGk4H
hU8STrMs1BXdnHH
9iKdkYtBMED8tL5TOyKhNgiGjxCnun1yb6AG94yMCbj5IEV4yvNgED9Cnb2lT2G4Gsn30ypMH
ok84j4YGjSHLLNH
enrSJUb8QcetQdshw45oarjmMt3bW6OhJEN73eBfRRPGklWoMtWtahghanOEaZxbiFuPIjH7wg1IdlZCUJBeT4mH
urxCAT6vCJpJnq6z3urAoazViyqidfokGpOrrH
mDA84Rws03Wn3hR5IwfPWCByxcWuyGNLc9c0Raam2z3xtGWMQdTEJOyH
2T6WKiUHQBhQKhQhFYHI
get_ASCII
2Q1D9VfzNSQaqQI
yytSX7hVBhEMGR3co2TI
Gre2NS2lVd5PCgI
rolblAhcneBvBXFMyC1ERPrlQ9uaEccvDl7jU47IjeA22GdX6g2XB0eb9rITmH7kTEvCQjuvI
cwBjLbQniKKYhrFWvbVH8l6aZs9QDIuNLGXZaa3Jz3VrSfv4w4aZ3HEKaiDWqzZF2GE83N4HPXGN4CDQEbKSJXlvSUlVWlxI
klGmyQFHYdoxSw0I6FpwMf16RJzsMc7XGD2RpjezcqMAW4tRPcWQvZZQroxyA61syve3DX5EJ
Vh2M8Ff79nqHpeH2VQCQIQJ
Lhval9Y2CXsVE1F9lHTCZqUakyRLUgK6WhpM3iux7I7c5eXZ67Cu1TpJ
EPWT7pOx8i7ihzhbATcIvmxaFWoQBkqj7LAD6Tf8dXVrgTeIy6lysezJ
u3lnsF46GoWhyUmKqLUfwS1YvIljPPgRPank1K
0L0d0aeJTA02xeCroK7K
RaHjppYJ5I00L3NkymM4hEK
HL8htVzP0e79VNxImmV7rQK
4JNM7BSlYwMdRXBnPecmgVeVTqnHsQx7nKHeTK
xz5FvRMlwYCUpdJXOa74rjal2jufkltu67EDVK
mRaUEyneBJ5UlxwbOdDFLJcuj4mCOJ4N6CdqZtOWv7oHIFKhsXj7Ez5gmUFZFgZ2NdNuNX1fK
9JPgPlZ8ULsWPlhgZGYRTtwWy3r0nxRAgayJjK
crtSSjZltNp7Lh9ZHsRKqm086TKz3crihjztpK
yyW4voDzIwCmwsmWRO2EzFG26AgEicUZ86bmW5fHaTc6yIRPbw6iqgUg05mILPh81LOtNOp6L
0Jx5njh4T3h1AR8fHWLL
Hf0RBfK1DGQGoQL
Q62Vf25zTHYZE2L3qP4t0zW1bhAahv3X0Q2KDbkqRfzki47g8rjGVVCHsCMuoK2SXFn78W6UL
qjFk1hZWQHyV6WL
ACTBlWDyAgfC5KQ1pNTsKQoaWSNumUqJzc5ih39frDAVxQHvJeBMLQeL
i6TRk1xQRjVRPQaUq3lL
ncSHwm7RGSyd3lrc4ZvL
xWqryh8xeXKRUKYTiMIm6wGlxnZDrStIUL8KEEBd0kM7zzOHovImUfSXjC4KLPn3y8H1My96M
5ywYImplBlnEj6Nbma4I11V1CgVUw2hwgw7NNM
0hwyTblh7YMOFrrf9B8nZQ3lg9SejNQTpSFEw37shwuqvAeJXrxAhROM
h1NWkpLRjSl0S0d0lmGUlTM
lxfoBSF9NZw74jowHtm0B3g70jzTUKWhpXPlaM
HNGJ933sSDGjWWJOQelhE4x1v726sQbttyN8KTwzY7JRimIZuZGNX5cM
SMNbqWzwEBhEpUi3NpNeTkM
VYxEJ1CksqW10NNkkewh4LxZjFmf6Q8fqUqqtuKyarLCae87r5E4ys4DQCP534JbOuxIvKWBelMShmLcOH9CZEqNyDrvaRmM
pBCXm2miAhQIZoM
l414EV3O6TG15rM
nAdCbh6Zkc1nT9PrGYD7IWP46dU0nngInWdoAYpwqHZ0Oyc2Cvj8CT0jKbGZFIfYpzCGUAY6N
CrysuxCHa8WSxMN
IZTd0XomnG6VqHRLDfffDHZ5DrgrqNhkGR5F7yfPevm4juMH4wR1bKczAhw9pXDwNlAo5qpD83pEcBOsULDjL5QsofGzHzNN
eGOC1kE7vYiIAON
U9KZtmHDWSJf5m3Nn7qtGEbOJ3yh1H39JwCCWN
Y4PXZYPmWAjEgDChy0Rz5csCP45i1bNbdtS3cjGJfD4YjJUctIHpPj0eGllZfb6ud4rmm5aYN
26fXqz5dydWfTEkz4FLi4OGh0W64rqEfIoM3N3sbGrfQstmmN8QeXmaN
8uZ8t6xH6R6orjGwf5z8TnN
nK5PMPQLvYQzbIzszGefDWTnsRLfVb8TLzb45O
LASTINPUTINFO
System.IO
caqEcGg5FkUwxcGuUi9slIS0UQlsXr6I02spuhwnADSnbK8LrPt86A1t61HV5WczPm7vocrfTpssjTlagBgU3sPO
0yLv7fPQsdVm6cD73FHEAVTg797rHlvSaWkHTO
GNDG9xdObtYPqwsoT6qWS98yi3822yUQlngCYFzWMIZ8rO7cZkkqoSVO
bRSV6WYXZoScrQwhen5k6zBJN7CFip76RgrL3RxW9M1gmoqZvDGMSOdPvvrNnI5bcRLHjtloCs25dUqxwqVkokZnASqUPEhO
xijGF5g13yl9GaqcazgBAUF4bqnIP3XnfqicxO3KOBuCIwz8Oof8XbmO
AFBrUhp1xvEgXxO
6KPSZ81bipZqLCBFUY3LK0mla18GwQUWOBanBjRMPQfbSAylB7kzQuA7sbYy6C9QUWISkKlL0R8PbKL3lJSxmK6BOypLcZxO
F8Y2xj6yuBUpEWyQykiKt3I0z5DRj8iLhcoGWs52VtL9B0SLZXotO4POSifDoVblUKnWXH82P
OLUI1iscnFS9N3jL3wRP
sNzn2U5Sr7fZl2XJQaUSD1VTaUkxrU5bZbWlZP
N5FYcAKqaZUsNM9k6CpOsRK2RWRsmZopr9EMnhmOzFnFEQWxbDRBRmkjeGkEb64KUktGJPmbe64IZ0RQiBQhVJejNviFtVbP
Z1mdlJrBkZ4FgcMpUnULTcPZGRjljrX8c227r8FchFGrZFN4wuGhXLqP
uHnWQpVrmxrjV6ooYwE2mkmPl2cerPyU0H4cZi36y1M5R8503EOcmSCPZMWQFX8PwS809lTWCGLRYnYUy4QbdcqP
kgCNjmtncMGYPRXNIAjNHXvr3z7cSGRD2F0NwDg1y2IZfqd5wv5B4CoQ4jdHWXnmgHuGe6uxP
Teh35FF3DlapctnNCFVMI9jDBJaxqPjnfakI2Q
2LLwdzfsYA4HNFFwnxyTcH4cBaWu3BD5le14xkT6XOTWoyS4MCJeV98Q
pPbOOspfw223UiVRjniJeXThQfExOrcUuGPPCQ
R4SCZy0uiBM9ySIRUM8mNhy5DU35ArHCGdHREQ
REBzf2jLXnLjGuOrAK28VPONMBOTTokycOnzzjXBxpDgJQ
hdJK6gy6XhEmhlLvKyL1tPv9tCPP98DQGE28bQ
3tCUpjAJupziG4KuKucQ
XUrNZkOYjkgQoyTa0BCNTPzPLdEJBOU8F9I9dag7MlnDCbSiIY5yUS2BWpoQa27BlaCyc8ZCINrRMTmHTXEKAm6jvpk5TzgQ
HNHsNgBAADinTnUbYCLi8rUZIjp8UfO8vKZ6EzkO5VzW4KuEUlJmRn4tLYh2O070sfrOFOuU13MqmJZf58Ghg3vQ
t0EfEyAMCSySG0x2ciNsRYcIbQ2tiCgUcS5ovQ
MNJGH5Uk3jhOwQfK8LpGh5R
ZUOoGBrhfsSiHTP27u5a8buO1ulluBZTSNqyjOElMthF8MUynJGop2XhKlMX0o7QZDc1uv7a7wN5OP0CcQ99jlDBx3dBwy8R
gxh9RXGOX93Dprpip3Z9iq7GzskAseP71FCAER
7RMMyDhH7obV2JR
A0UGhtnhsDaAjOTLAHVR
zz5m0z5sBdqgzyMTDHHbsYR
mZEXwqs8ulczUb3LoBIc0MAgYGuV5eg6JOYlQAiXmZF9Aa32ccnadA5xjqVQLbnZSr2UqtgiR
eCYPR1rn8bjkFz9m5izIbjR
0MUrUrz16kDzcjR
xY9ca1UImvOCjkR
yrAGyraGsyirthUrLMmR
VZZwyYT6ucs2js2fHvnattahhEx1ULH2BgX4PyiNZoLos5qLa1qHz5TFh0uGri6DLe5ClaJ8KIJ1jSiQmzQ1joxUjoS4yOoR
tkWteXnBiNu53eWdjMdFDiD655RECtbcO19UKAMVJ4bkjdrsqCJF2g8He2pc04IJMfM2ZM3c76zA82YAUgQM6x8Hh2x65frR
S6uAzlg0Gi49qhMSl3aFbjJyLhAS3ryaEu693Gm7482uCDnR2QoMFAiHpmPGlNMdA02SRv0uR
3g2AiakyAp6NBsj4Q7yanHkiJStyFiCyzoJ7vR
xinq9ag87qlRZAXPp2OXh6CVTAVC1z68YbPr8S
YQQie65kuXHa8QrTcXvhRFS
kqcNrWx9ggM4hvXONHT27IS
J8RW4C9MZCzmdIIIy2naAUDvDYJVqH4xrjTfxJ1WZvdrHXC2Gc4VZ39qlnDYYCLpUd3aDsy1InRDyN8vCwaeZuLS
AVCBEAexbnVfzRS
ZLaiLN6qYwuUm4ZPCuj6dU51IdWEeWTLCdHXZpqoqXtwGfvcYWlOKCSS
ES_CONTINUOUS
CWzfwgaIhMKYerkqrYGoEt4TbAN8yTkUTwasenHx6dvSEgGfecXeFB6rwrrEUpk8l3aSsGYH64bEs6c5UfGMBsN7v0xQRylS
bpMCvbOeJWW73QuKpmGEPIKLEz4fcdB9lUMsYfp09MB5HIHah0izZetAd4Lbp56P06wKw0V3wip0Lv7wJ9hsQQmS
LoxoZqi53i1jXqS
WA2dlornUwxp1FV9frVuXSMKwfW5dzMJlL3exS
CsOljrq1fzHhyufksP5T
dslcxqavouzxJpGD83y69DT
APFCYeEMhWZhBLulSrF66N8dSV80D2IDxLenimdD4gXJfWDMab5odsLT
PN9AFRqeaGLBAST
ANIzYQoSY5Io554f5CpvuxJBoP6UyK1zndzmeb1Bu17hEVHoGlrgETtJve9pCqom0va7iN6WT
PgD0nSfXcj2S5cT
4cTf3cG93rFXGoT
A5i15nXwBEuwLBUupIYLZr1elZC8McNJIXUvDjdREQg2XBkOYBaLQ8lROQfyca05d0pVi7vEU
zpYPvt8KvJZ2pYcMv7V7Ogb7gKglrTj4M6pgjcjwWG0och9QFyUm4doU
zw2EqphsxdNmek1bQCrQfVSOPPm2JAuPSEHugFtBZ4qApAInS46ETr7w9KCQTmMptByIlKx1V
UQWPtGVQKYaO9M8sx7FzHknHeHVh3LWEXOoX3V
mUPnkDvxjxt978qjctQSqUyvvwwbtEG3uccJ8V
qB0VQykHlDs3sKtVECHeMR2LiGvTbzFek1xIHV
hugKd7KpDXGTH8hUTWF5zzij2V0U0CwhSa5ogDuKCKBd9Q1V75KjzvsJc8oPz38ptEhMfnzYml49FcgdjNtNrq7Fc9mgIaRV
XRzIYEqkk53cyQrnQOYV
yJYr0ZQj7zsNt604KuwOl5zY5AnKHshwgeh9iA9Kbmh7zZQRt5iE3pGFPmFP23yolKSfMkml07SFsxfR4ND2meYV
ltcrd8dlvida54bENI7jF9U2x18sHk2wFekwjV
o1iFDYs3cFSjevYTDYgq9yIgevS0uOD7HzvvEvHiYR2RQcYLkLkiydkmy3JPk6J1UZaOh6DxV
vAq5vHdxA7gNvVoMu2rqgroMYfsn1ioTnvpcp0cPl7qOTumYtHZaP7jjRKg29Ty1ljvMST5qhP87eP9WiTBINIso7HEcTdyV
NXKH7A5zW8CsZhJ0GHocfiC52HQZ09Pv1WTq0W
ve3YAZkjt9bcbbZNwS8W
NjOccKD8jL7o3Ih0eZaDl8ahKbWKuuG1noPn6XXTmHTIREVnJZAIThanVeyhuP1fJv7obpGeh1hgORQGVkJaTtqlEHrnmDMW
T9bL8NTNvcLQeyJgT51xiNMKUinSdbbAsbm3MM9CUfGrWtRnLnl52fD6CRw54bCwa3C79rWXW
9K9EIUwDKNHHvGFvfeLy840Q8xUHu26jY0jqRXbZo9NBYFKaFtOVpeXW
CqNJvqmhDoSDrY1ylC9rK9InmfHBII8N05xyraGgcclOuDvbfFmyCY3rBuwUmkQIZKa9kT2aW
VVljpTow023aKRiEfKS7CIQDLlB4K2Qtb0fHaW
BgyqBeTRxOiRpcW
pJjEq3kvVsmm38aHDzyToIrKfSq89A0PZGVGgW
VsxtMtJ43WRNCuDtTK9pdayitDRSi37eyOAMhW
gzU7ZxFW4GS7GaHKL5Cq2IEwTQrEaKrbdqxLiW
BRXNzhb164XCpILMUDok4VdfW2e3wXZw7u49IGtiK1iTwoLlaTyfUmLWaCvo43SLC18XflUAyNHPIoOxvn7pKRYs9l4ogzpW
AmtSMjzk4HuwwZTK1Y9TlyprBbqr4ojI0TSEDgaBEy2dHOswlSeDpwqW
CwdhaghbH5vLTKnpzgN1Q1X
UJgarVhxHDadQ3jmD7l3GQxbvhG8tgfNuFj64X
jJPppdHCig7b4fGF0EpeuBkhHL1jpf7Kv4Cu80S98DKGgGpQzSyQgb4X
1G9YUPA8dVMu2HX
OoFkGyWOKxHUOGKA7xUO9M1tAxvg4i8g23bDnpnG4CUCdVrqX5SwxO1eAbwWlXJ0xSESZUajSkv9bAuOueP2YPIX
l9WdHTyOSuzKgbX
8InMS1UvAY93sk6aMojG2taoqiFYGfPXNZM4fX
QK01eSGq5q7k2DM9HXmJKxX
rMX6TYnpMM6KmK4dwpwTTCgen3xNDPcdxjYbhcEHwqORpNKnEHExFv0Y
DrmGlAfIzRi8QBY
v9h136FArusr80xgAGLsQgaoQhSRuutW3ezxjfmDA4hQTiTaWpdQxiMd8sFwnCzT4I4vJupHY
XSgM1zFNc3GM075VMchYlahoQIvJEFgs57zORY
udUsd5bcFKGVEhulKXzc0zeh8LOGKI0it86ORpQLdqLqiYVfeu5SBidY
PwlMr5hkzwSMFjY
0iD3VTnw1a4SJsvxxBHr78qNvYJc5hUf90gq0Z
qB7hPa7Fttr7seW0oBRqt0Z
jYhYXGr7eUJVEPSxEEucNqdlw5Lc1GCalaNbuMtfnqpIWp1Z69FvyN5330fecLohE3VcZm7KZ
ETTR818IqFfIaLZ
WVhZ9Vs90kFDfcogl2p5jP0g8NLKsDxX5NxKHt07o4FmY02j0RY6TYOfZXKyIujunlSpWduxQzQfQAZJ15Aaowg3IzxFGjLZ
mAIEsZg8pKmOqdYJLbQuazOmBCgCjm6qqV10LJ02dJbZ2m9vm3omAKOMk8GISNsWJbG23qqqZ
9xX8W2o49q4onGYWvcd2TpaMH4cANjypmfmjuJ8MMepQyT2PUqBXY7dtJmkf2ZNnxzllYmWBWJHQLYgxXfUHsVdjxXwiXRzZ
Dispose__Instance__
Create__Instance__
value__
gK2H5rJbxsmzHpyg489fSHzvwiOSxHPmbE5alVhI0DrkFICw9p5Tvct8LCzpr7jt62Ygsg0oJokGfRgloQ4QVXje5MjU8Q4a
hZNWNge8QQHxgXpipVBBMjwuuvtvpQY8dDMLSa
mSocxf9upsIOcfa
Slovakia
P4rWJO0jqGGLXdbetFE2z2yxF6psuWVeNM0Ola
vPXrx9lD4fK5LEKeqRXqyzfc8hPbGWuihzdIqa
CQH8sCsiaINoPsa
ProjectData
L7TbPr45WhU8mRuFcOVa3ulnkOazHyuoYkBY4b
Uyi4GZLfahogNtcEALaAXuSxl4h51Z8opiWyQb
9ENo1ODSRgoaEsGJjGuU5db9Hua9oN3Tl6AZo4XEevzrwo9GEmWSCQx2aRySfwLZlY9fF5SltOVUFkWQJs6hgtir6QUJ8Pfb
mscorlib
vvGyTT9zFU8NWMPsH7V4nT7JtU4nJDEZmrjwuB0BtNyypzX6i8BRlo9SK1wWCjWk08ANDBW2rlDATqYw3zuvmOSSl6b4GPsb
LhrkMNsVsqDabsb
pzBzffSqMsEkxufi7t7c
kncZSWGGWcJekwFlonZTGURWSOBnCeCGUgyLbmx1g1VFwrxN5TnPSln6gQeNSWMtiLNkMvgLc
9o54VbLVe9WHbVJnCPHvOf8u2UduFhc1mfh8Oc
heGWYkBuhIP7pOc
8Q0E3xCFDzO9i77xXczEXac
FLOFOwO8Vg0Y8Sli27RDakWd7Y21NTQoBKoaGdekVigSrl25li4KdwTPLnhdhWrIvcRxLcxcVlGL4qHrpsCsndABw1huBxcc
System.Collections.Generic
Microsoft.VisualBasic
VEK1NqYKDRCJYkc
TidqdB5plYI8gmc
LowLevelKeyboardProc
bnX3OXuTWT5EnBI9nUSDYFK273o6DYuYd5PCpc
Ug41lRt10FZ91VkrPeAzD1BHGISoJIBLmEHgBd
GetWindowThreadProcessId
GetProcessById
ZjRSxI45hPjT5WQAI6P5dfyaMmZoDzzq8kmSNd
72ZCiC4TZbrzbzW6uaFToT2ZK5mi2sDu8hxrVd
0uN52RZVzldO5Xd
Thread
RijndaelManaged
get_Elapsed
EndSend
BeginSend
Append
RegistryValueKind
set_Method
CompareMethod
TargetMethod
xkvTrETGFczJDQq6EjpPDxXDvdv53LepRr0Cpd
oXuGgOF68tTnHwuBd8Yi4KhForaiJBMUqWUy4FCDP0hNE3BTKiLqMLgSuz0DXP0j18s7edUrRvdWbmZJWDzhWxwd
zqXpwVkRpTdl810fNI6e
0bLx5BQbhHnFVFcbWCBTVxWH4iEDT91fHkPQFe
ESZAqPlgGOmOaKe
mMnr1m2kGoJjTckiyKzbr1iWmm9ZnzQ6vq0LOe
Replace
IsNullOrWhiteSpace
CreateInstance
get_GetInstance
instance
GetHashCode
set_Mode
FileMode
EnterDebugMode
CompressionMode
CipherMode
SelectMode
FromImage
DrawImage
get_Message
EndInvoke
BeginInvoke
IEnumerable
IDisposable
Double
get_Handle
GetModuleHandle
RuntimeTypeHandle
GetTypeFromHandle
EventWaitHandle
Rectangle
DownloadFile
IsInRole
WindowsBuiltInRole
get_MainWindowTitle
get_MainModule
ProcessModule
AppWinStyle
set_WindowStyle
ProcessWindowStyle
get_Name
get_FileName
set_FileName
GetTempFileName
GetFileName
get_ModuleName
get_MachineName
get_OSFullName
get_FullName
get_UserName
get_ProcessName
CheckHostName
DateTime
get_LastWriteTime
dwTime
WaitOne
WriteLine
get_NewLine
Combine
ChangeType
UriHostNameType
CheckForSyncLockOnValueType
SecurityProtocolType
GetType
SocketType
System.Core
MethodBase
ApplicationBase
HttpWebResponse
GetResponse
Dispose
Create
MulticastDelegate
DelegateAsyncState
GetKeyboardState
EditorBrowsableState
SetThreadExecutionState
GetKeyState
Delete
ThreadStaticAttribute
STAThreadAttribute
CompilerGeneratedAttribute
GuidAttribute
HelpKeywordAttribute
GeneratedCodeAttribute
EditorBrowsableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
StandardModuleAttribute
HideModuleNameAttribute
DebuggerStepThroughAttribute
AssemblyTrademarkAttribute
DebuggerHiddenAttribute
AssemblyFileVersionAttribute
MyGroupCollectionAttribute
AssemblyDescriptionAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
DebuggerDisplayAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
set_UseShellExecute
WriteByte
m_ThreadStaticValue
DeleteValue
GetObjectValue
GetValue
SetValue
set_Expect100Continue
EndReceive
BeginReceive
Remove
Slovakia.exe
QIdDM039sKEZKUnd4bye
cbSize
get_TotalSize
set_SendBufferSize
set_ReceiveBufferSize
TtIuYcrh7T1WRXqTyqpgX9kJhm5hdma3fgBPtwNWimQAtNDo0JMjnuH2BBT7eAkcQYyQfoGbXiwDez20gVnL1M6f
VeIUGZvsukRBOjzViuXBrNGxMUdrvjwd8gsQ7f
oLieh6dTlNyYFOf
SizeOf
dQrsi5ICfQapJCKy1IiuYD56ZZ4WOjgmB9clHVmWTIJvxxEsJHHsm7nsf27pvpOZA29PwjREdRpKBheiAkPdENVDqKJdXTef
fcanbCSt4V9Zc2bS4xL7FamtH9mF32TWNe8Jmf
deUBiGVp5bnOi8ffrVXmvzI9rA7VREJGg02K8P8tjm9umBjYtPjfwqFjCYpEQRpmdPfwNJ7sY8RhaOgI5vCRDmR8YayfQouf
opn82pth1s8KjYMqUN7oYH0Iwft6GZK30ZJhyf
e5MkeoOTyhvLgci26wRPfvKWl7cFaliDEAhGz6ifbBDHpZQ07ks2jq3W9PXEIPL9Thsh5UOxDtTKjiA4kQcLsOMg
oDOMO9ccVVpxkbg
get_Jpeg
System.Threading
add_SessionEnding
NewLateBinding
Encoding
System.Drawing.Imaging
FromBase64String
ToBase64String
DownloadString
CompareString
ToString
GetString
Substring
System.Drawing
ToLong
set_ErrorDialog
KNvTZOHt7xM6GxKpzyMZkLYsm9DWsVziZQGnpM1gzWFby4ZQ5aXyfyY9bk0wJvhUnvC9rqcQ2u7chbcO4EmssTdBozg0hSqg
zuYpLMJsCGvGzSDj1JBdbEHppl4HortHAnDPzg
kRbBE0Fy8gakU6ILs23PNHxAmP5TN91wV63CJh
Xaa1OBapNROd3wRINVzZhem1EUGHF44jp1gATh
Stopwatch
FtUs2IL9dTI0V7EP9lsFEhh
5QfKNA7YKCSngptyXnsxTWIdWEUQrdhEkNllkh
lUbfg2SN9duNmqh
ComputeHash
get_ExecutablePath
GetTempPath
get_StartupPath
GetFolderPath
get_Width
get_Length
EndsWith
StartsWith
nrG25btnSsn35LTVzJhsrQYON96c98WyTgVa3i
xiimYk79Rsh7CGi
kASHRfoKG64AgGi
7t7GXmC6atu06IJfsKZA0xll8TDAupBx2Fj1ZQ5T7A8Zp6wtKAoOv18rkYDmaVBuKCfoIDrHi
HLMYj3ynjomM0kwqH6XaowZ8JficlGswJIcyMi
b5qPULOppLZ98evkxQTi
duotc1aLstcr1ai
vy92RWLs5iJwRji
hxIGKfZtKSmrsT9NxxsO8si
P7VNZFDA6od1Bti
uaqhTy7Pi2J9EJivY4806hlOWReA7Ibyc52Jti
4v0vE5JTErZHd0kSpXcZ0IAsSH3XLvv0aR8d0j
gqrs5KGLy8qpJjhsy5KSrJ5KD44kGg3YKhjGzbPJOF9zUXqxjygCUEtWZ0oYdiUeDeIr3KQ4mcmnR1s3zG0E6E5j
7jqNaty56oSSbMj
ibjwDgnEKK62KxeVYgz9pMtbEYVWmCu0c7Rp6FyELx0OkLPSYVQD1mq9jPiP5RhLXXBQ2GWzLPagnPbVlWVya6Qj
nLuIMhIz0wGx1d0ZzIhLjRKF4wlILICA6wDBEKfvOVjzvLxMK53OwPSj
sqLCaValPvMPnaj
kwnG7Pw7Pa9ho1Brs0a9sCcQdyvVYZvHzOnojj
nbLMsKSb5wTl9FiNU6SiM9EpFLOrTQZEfuVAuj
k448r1RTkdaSkzj
SahWTjeGTLQozDk
jinbq2jVczne1Hk
8w77se72pMXEoOk
ahKDVU6fzouF4eTbWtexBhmlawSw4IElVl6Afe2umz2e8NcDKG0k57Q4LL8KGc3FMvKpT5VWk
Cv6TOEqB4xuMX4opTCuXNbhvxxLTqaafnmpaak
get_ServicePack
AsyncCallback
DelegateCallback
TimerCallback
RegistryKeyPermissionCheck
TransformFinalBlock
Ylqm5XFsWdm9V24vHgAqAeQ2p094JSSszc5MVo2jpDjaUhzRlhyKk4jk
uiCT6MbMpDJ14pl0JJkk
oaIP8ZMgUtSIA7g9DMyuo0xF44lUKkVdxtdd2l
COitXtn45VfcB9wyM5ZUagQlhSjlnn7p9lGLDl
4JRdJA1pBSnF7raKBeBSFJx8aZAMtHMQyZGzOl
RtlSetProcessIsCritical
Marshal
System.Security.Principal
WindowsPrincipal
ConditionalCompareObjectEqual
02KCkwEwWtTX3OGYFHwELel
System.ComponentModel
LateCall
kernel32.dll
avicap32.dll
user32.dll
SHCore.dll
NTdll.dll
set_SecurityProtocol
ObjectFlowControl
hPxMeSF3PZycWNWUgP3sui1pHk65Bv3sHSNEwl
aczUdkaHYqi3RDBbCoJBAERuk8Oduj7TWY3ZixksNupbia7ZidUdOuZm
FA2HXgWSLOl7JrPYHcMFyZm
FileStream
GZipStream
MemoryStream
lParam
wParam
get_Item
get_Is64BitOperatingSystem
BXuaNvnQLbQrNgRIaIENaNDkHE9o2dl0aUAvem
SymmetricAlgorithm
HashAlgorithm
Random
ICryptoTransform
WKcFJRHFrPR8m5lwaFlri0MwdVJTjBwfrS6M6GtprCy0yRphhVOYPiRrf3gaOrbXZjcszF7Y0IvLl69MgWMWu3um
0w0iMnw1nEKVyhMxdyoYxQiijIjGhHWFkU4FdRybWcPxYv5YPHUyEium
oJYGObXTruk3qKs8SkuGORHsEq6B99OI8U4DHAhju9qwFMX0dOSHxOCn
y0DMAEdby4LSxA9ksfEepDn
ToacBIqczBZjW76JSwFGUmsFq71a6LUfAmbiz0YkF7UtNtm1Q0Gc4CWQdma9jQ4OCpZrgnNDKLJJMniMyrBReYUljZZ1opSn
c1YlvTj2g4epW0ebIr2YzFiA7budEBLHmCPqVn
ToBoolean
op_GreaterThan
TimeSpan
qOpykZRKpn7O5yIRpEcn
CopyFromScreen
get_PrimaryScreen
hFsqjP6I1yRcwE2ErxERypohnFXNNkRpl2SGgn
System.ComponentModel.Design
AppDomain
get_CurrentDomain
YVwvN1Vtpsroe3dmlof03OZ8MOJiYODcmuaUfVEf7gBdT93VJ70ciNkn
M8yFhj5oTEBnzX2p6n6IeLN4l8fRgQmYXgOokn
GetFileNameWithoutExtension
get_OSVersion
Conversion
System.IO.Compression
Application
CopyPixelOperation
Interaction
System.Reflection
ManagementObjectCollection
Exception
Environ
KG523wFbEfHV7KSrx2OWt8y6W0YX2WerOKIVpn
hEWPpTf8ObpsH6gA5xGYlqqWJ2we2RspR4Eh9hrpzSghHlaSjBoFk7cNshAim2FkapSFlHVjkGnnhoabbXSEEWrn
NE80eJPbwO983f2Hs1WDUwn
SocketShutdown
0fyYOXl3DcVpU6QQw7H1V0o
Jywl398H37cSeRkDDP9ymgdCIv1vqKsx2m4fcO3LHyAMbOeAbbnr8Z1ncEeioc7xY51NgSqho2S6PvG050htEjjHnDzdgT1o
F95CiczoQxwHgME8SzHyl1o
yvGTogEAeASQv8kMT6j17GLsa6OvGZGP3Jt6NYJo7C1XI5Sw51IPeXIo
tOndesK4fBop85aEXDr7eaKikppsflqxfnImRo
hD8rC8wTzj9PNFNr3r5wpcCP476PRkDvnAljbo
get_Info
MethodInfo
FileInfo
DriveInfo
FileSystemInfo
MemberInfo
ParameterInfo
ComputerInfo
ProcessStartInfo
GetLastInputInfo
DirectoryInfo
iD7nZAfIddcm3YBfteyROwo
xm0ZrFpOl5dovWMGEM4L8p3BGOdXJko5TPN1y3JFZ7G825lmT1un7e3p
XMiV2i8qJSmh6wGoLorB2W1hXRXkxb2ghUbCEp
CUqSV1ogQaXEwzIib9TY8K5nKgrOnEnxdDMwwgHpK3I0TvhcOLfRHW4LvgYaggCokNBDmTfOp
UfKPbkE1De9yyvF5eSy0UHBwHj4DAqkf7kxRUvR6447la7zvtsD9WAYp
Bitmap
l8BWfOylMIBotnd2z2JZOB71BUVyTDSUoXvLo7prI37p4BEkte1Y9i9Hq2iGcgQq7kGSqjyyhv1ddRfeKT26iQ6azhfbnfcp
YzcZBEUPj7WZEdp
pNaZpb0pq5p30LW112GSNxJSkbdnKfHn7eVSip
EtvnRajXhalmBmduw2QL1VxsheHaT6LG6b1Mnp
dQWnr8ZYfmA5L4fPV8pQlC1YbGgWKSarvjEfLpeZNMlFaq8Ps2XdPx78sY3qYSBrcOQeUnK2q
sh5AZig5KXzVhPXsZa2q
zRwM64Su6FQosY9lJDpZIfNUFYcDp0CBYnc796IcNAW4AeojNszV2X7OqXv5FrAMPdmrIhnshUtPJaaXSkRfOqySGT2tHm5q
hSHXBh8X2Su1rEq
RUswztypfYFYphMdrGWO6hR6HhvRCd1zsNy6AjSQX9X0npnFfooADBpNbcvMonHX6I3Wc5MAQzSZ6V24AhRaVtEq
z2VusfSxgwWPuWmbrMNzm4b3fBtjyUNKshOKJq
UkyRoJ7ThgkqOMq
O7nMxfS86KEt3UwZq8Yq
4v2V9OD3ANoHurr3HifpuW7oLYosgeqxCTw5c4NBYiBxj1BG7OcvRZdBOy3sT6PklJlIW3l52O7K4KS3mUVwDdF9BCpp1Jfq
kg8ibdA6qXk4Otzb3hXma6pe4IvvdgtywX9omq
System.Linq
flSW2ossk6HU0AN6n24r
c4t3WItcaQmUnAdAzfWC8rdRNVhYGUYcyGfPDr
VtlNcW4G9N1sLhV7tK0YVcuWwdZ4wm2JseVOH5ciBj9J1JWxjaYWrSSKpDvW5IGHwjEqGhpoMgObXekBtwSBAthkOxiXV2Jr
6OJzA5Pd8Ytgg3Y4K3dMIv5FBqYVVJBTXr35Lr
wJloMPXZVA4RjNr
6mIxIzjG9lOCsTZSyJ8NRD8CxocD3qUV3580tosS8xVsImrErW94FtzA0yaI7wnCnY4PyJEOgAMMlTMPwMaaNDVCExjNR1Qr
sB2pUZ6TFdl2qEDAcyqln8LEEWiK25acNHcK2HpRXekkAeyDnV0uX4ar
cTCAzmdjdEvx8hRXa0FkHRDfQ8W0F9I9a3f5ZQPIXyFdfO6b3PmjuNfVFGH6toomhseQ5OQer
MD5CryptoServiceProvider
StringBuilder
SpecialFolder
ServicePointManager
ToUInteger
ToInteger
ManagementObjectSearcher
SessionEndingEventHandler
System.CodeDom.Compiler
ToUpper
get_CurrentUser
StreamWriter
TextWriter
BitConverter
ServerComputer
ToLower
JUquDABH7gmiaH1ic9ir
ClearProjectError
SetProjectError
IEnumerator
ManagementObjectEnumerator
GetEnumerator
Activator
.cctor
Monitor
CreateDecryptor
CreateEncryptor
IntPtr
4DeVRkTS1h2CiPAmMKzyX8lLx9h7CIeAAOZfur
jE8YJ7Xu9TLEO0s
yKpVblrjtf9pJYrJkbLHEAGfiYX9oL6r4EbyNWBfvHIJby0MzcmkbO4Y0eoaVcG3dlKeqaU3s
VXQYCSi6ZndZeiECgBNIKbAJ8EUQ5ctkKu2mEs
bUKCapyFYyicQ2367BtF5LB4sOsYmZYI9gZLv9QNUlyq6xIJttT6gaHLWqrDqBwA7BR7FrB0UqbjUsDQzXCPGwEs
yCCBAOungCVbTJs
ozAqssIkl29aZ0B3eTp9SI1OYH7HFDSURrXjTlq2V3lQwLDdAnAb7pTKsMff7LuokipQe2lMs
to02vqfOqVJHPp3ziDIkq1gQHwaiyItNgTQWQs
zqDv0El0bTJGFTs
OAhg7y6VckNKl4WpSq6FJpk7A2JRfY4DlX7yu0mmpawBhzAvSXo1fTas
Graphics
System.Diagnostics
FromSeconds
get_Bounds
GetMethods
Microsoft.VisualBasic.Devices
MyWebServices
Microsoft.VisualBasic.ApplicationServices
System.Runtime.InteropServices
Microsoft.VisualBasic.CompilerServices
System.Runtime.CompilerServices
Microsoft.VisualBasic.MyServices
ExpandEnvironmentVariables
GetTypes
GetProcesses
GetHostAddresses
ReadAllBytes
WriteAllBytes
GetBytes
SocketFlags
Strings
SessionEndingEventArgs
o6tnQNbezvKlgGxwCNnDy4YoDaD2QQaRbMnPjRUM2CiwxcSeLWRPbYks
Equals
System.Windows.Forms
Contains
Conversions
System.Collections
get_Chars
RuntimeHelpers
GetParameters
Operators
WVdAAVhz0zADWdl2koF5Hw6Ppy37RyLzh55oB1iL67wwKrdOSYSXSKss
GetCurrentProcess
SetProcessDpiAwareness
IPAddress
System.Net.Sockets
set_Arguments
SystemEvents
Exists
S7HEvB1r1LxFGDQNFlOFFo5QI9I6Q911Vca47t
yvO4P6HDiZY9q0GoP1M8VIxrekzOAyB1RygSlPnYyQZTPfBkOVlWhv8t
wek6wvZYPRwmdLJEFuBeJPepccRu7S3ECKRhQH2orXsVvRcX7NV7yiHg4Slr3L1w6KFm5r3SSGUyVVBPSI2UW7hWzn4PuqFt
NPUhcf14NjOR087w6eP2bfcHNF9Za8mfFRvAFqdTxKXQoMw8RMl9xkj8nYqE99Ez25RXWmzx93V2ZTJ5N7e6zDH5aiwIQ4Jt
Concat
ImageFormat
PixelFormat
ManagementBaseObject
CreateObject
ConcatenateObject
SubtractObject
TargetObject
ManagementObject
Collect
Connect
set_AllowAutoRedirect
LateGet
LateIndexGet
System.Net
Socket
7eybjJK7sALyBRiq9Igt
ialUIzN0NEVtcmiGDghfxTZAnTIKDccQbYaKdCkH1xtE60v6U5iaN4HZDGEl84yG3a24aV7ht
get_Height
RVMINy270fF8cHrR3CGxjFqKhVaE3vj17JtHit
op_Explicit
set_DefaultConnectionLimit
GraphicsUnit
WaitForExit
IAsyncResult
DelegateAsyncResult
ToUpperInvariant
set_UserAgent
WebClient
System.Management
Environment
get_Current
GetCurrent
CheckRemoteDebuggerPresent
ManualResetEvent
C1FabvjCzafhH5yyzGGRL136mltCK1HDAcdfnt
get_EntryPoint
get_TickCount
get_ProcessorCount
FEgZmCsn5k6inzopc3nm7iRr0EL6mGUny5rJFZX3xEkdWquXQ60jb4ot
GetPathRoot
ParameterizedThreadStart
Restart
Convert
$VB$Local_Port
FailFast
HttpWebRequest
$VB$Local_Host
CpbUU4NsiM5wCmZqfyMEEJ3UwHbRG25nUlVLepxdzN86eWzBzi752But
set_Timeout
GetKeyboardLayout
MoveNext
System.Text
ReadAllText
WriteAllText
GetWindowText
bdRywx77fNDd80u
wCrE3lcTtmeIixtucqk871SDXC0kPjKifenl4u
0cxODqUibBJYLRu
zPOUMTTuVPDQek3MWrAmQb4lalF13lWJja19Su
K8hIXentUaLYAv2fEqL6lIgdSfvn61S88otjb7KmDO5wdpjNNYTSxXLEy45Wy8b0LzXefbeaOnVmV2wxAmIAGWVu
3ANQiPPXNQcaZK0Jurmu
Sdlt5vraEPRj0KSkMt66BRmdWwE8UFMxJvk0w2PvNW91F1B8QB8GZzEv
p3HUkqG3U1VRvcPtCNlLHfs9yijgbRffSKP5rAtyiHFgOuxgywV0RdygELb2V8RYxhA1PdW6Z7jEX8dfNqm7KO8seT1B8iov
9LwotbBn5ysfumCe8l4MTCLyihlnNqP76GXGYfE5IeIML5M3AvEGXGqv
0jkmuRE4HB2dica9iy4VHP0DunFw6ZfLqh88rv
3c9KtB2Aau0W1hoNKAxzX3c2JcIvjuWa7Qn0Au4hsiJacRYzB8GtNfQd3OA5NbDruE8V5SCbiBpiTAtbTTrGzPwv
DyZBEz3Qwx9G2jMnkcnaqGNqyLiaG4I3cSuk0w
EZek2ZlOVkdgaxkmUb2w
rVnxrH6UEDlhHIGr2QZ6obDh1PPEuQMDLYkh9w
06mA9rXSCQzAFGw
SXjS35VzDZ1xODYRNiS9osjck9YlJfKCppmjEPAX9r0jCtCxu6I8DzHw
Iew3EKWi2lc90wN4uNL4RZZh5oBIRuxmftVk2gfs2pgk4uG6sZq9fp4tz0n1PdUbThUZqz2PUS37i8p2NmoEyo82K0xTUWJw
8IDdwncqJHaTpt5QniWOwN9OnkNLk1FwTw7GPlcBl4MNzD2I4Asy3IRo4I89TBp7WX4zjcHFZ2H0Udzn05ChCmMw
H9YXgdxSPv2yBQw
Nh05RpM4KmbrR8HR3t4KKnw
GetForegroundWindow
set_CreateNoWindow
50rQe16FUf8jCtd6Y5aEEKxiuCJnlJXw0RTjImVlZcTtZmYezUdjGmnPHmRwZQbFw4Fy4Scuw
D20hGk2v3148AJqjLGiLSYCz6OgcjKYQKeQ8fxNzfjDAw9wU08JqoXAx
ToUnicodeEx
UnhookWindowsHookEx
SetWindowsHookEx
CallNextHookEx
Qw8sxpmj59z8xhzb4tEx
l2iq6TSO6TCr8bncumgWAHhkFcbtqItkKP8nE57ySEQ5wKDa31NlBmUkH5zLyquoK1fFe5vRx
v4xEmgpCe0GnqXx
LateSetComplex
FjDmYfSEAall5LT16GggcIvZ6zMps26tntFxjx
ZKooykhmui01OUc742lZGnZKQ3FivuVHmTZ9px
qkGHTqhb2s85yzkRQqm9VsauxrZ4fvBfoJWd4y
D99tpGoerLUdg7y
L4FDZKV73a1sPS5HF3m2NFciwBTwus8OjtPB9y
DBrD9f55fFIBIE41Cqeo7aOsREymAfRsYGAeAeMrORdpOtQTsdt2dPdcUXk22DCg2o3is2NMtyE2JmhHHmydcc9y
kahRJP0JaCKYufporXN02h8xw6GKhjPLXGbuHy
MSyIGWP6Bs0PrLNNKvu04lEAf8MXqKu7B7Jk7bPrfGuAVh9tbLUsRIJy
ToArray
gCSYdNaTKfbBkIIh63wbX3IKDmD3CCEqGoKywULdGYk5Lc960QIuOOby
set_Key
CreateSubKey
DeleteSubKey
OpenSubKey
MapVirtualKey
RegistryKey
System.Security.Cryptography
Assembly
AddressFamily
7IU3GXCTsOQ0Tvpb48JLzlFnjXRg5Og4psJ0oy
RGcGa5euqFyH9oy
ObjectQuery
get_TotalPhysicalMemory
get_Directory
CreateDirectory
get_SystemDirectory
get_Registry
op_Equality
WindowsIdentity
IsNullOrEmpty
RegistryProxy
BKjNPFwpOQKZpLwTGaCwCInNNTSpFX8dvbvMOZUrh031frOwGvf7BSS1ddhuR99flSNdG5wbfCcyQzlPGRZBKm1z
N9Vo7TIYdBeScZFGD5cHJEp8ZCCy9MDlUVqc2JayG28pViuZ6OSXSNp0hsEF4xa4KnbZPtlg3xwmQv95eAGntvAb1KNsMd8z
UGKxviJBekNiABnRcOHYfxbCfbmhxhg90I5Dmil6INo0fumJMcmKm4kY8OcAze5NSDcfM6LRQONXcCWnQU90ejlIZxgZ9kTz
r5bFLPHE0o0ocgz
GXlc7lUhzcSNlJsraX52GfsOcUzlxO3HNfJVsPH5uTmJshz8EvJi90uz
WrapNonExceptionThrows
$efaf5ca8-d241-4861-9e72-3529122c77de
1.0.0.0
MyTemplate
14.0.0.0
My.Computer
My.Application
My.User
My.WebServices
4System.Web.Services.Protocols.SoapHttpClientProtocol
Create__Instance__
Dispose__Instance__
<generated method>
<generated method>
_CorExeMain
mscoree.dll
C]58W-
j#*=R9b
$DL1Za
QA$!)"1
R h$I*
>q{?1U
dqBT_
EC6IRP Q_
0jH]O5
gZ$\v(
ykK;isQ
CHBTK4BT
wy'sdg`J
J53~"K2
hIjTfmb}
W~S9i}
"AijKj
stX5E3
U!Ah'B]
:jG524#G
}.*:;L
-}%Vb~
(Ums?CQ&c
d.hQ7D)
")3G(a
yrr4c&
\PP"Bj-)A
&(umKA#C
uG(\%)/
IsaQg8
}P&m.e
ag<o3U
]r^L%!
DVfAij-
/;t;,U
Ys9/SJq
#5]TbR
&D&*L413
8x)'OG
g|sLU9
j}=c@\qY
oo-u]?q
2vWH]G
{*Ibg:
yTj1Ee
1n@nP2
5.m_`k
;N=*V,w
HT$&.>
VWWWUVefee
#K4[W`)}7
fov`?!
DFK:oR
9}pL<z
{S^nNU9(
@bK{rn
#|i%t}d
&%_o)@
]JN\l<
^'big%
/JEZvF
|/*|CZ^
P.SAoW
ZqT/X45
LoG7d_)`
X6"[MAu
nA0Y,>
X|gl<(
&0_6^>
@xcAxj
%0j)w0
\.ftSe
}0XUw.-
,@v_C5
)nu3sp
=\'EF0
4VDqrrTZd
W|z$[q
Xwi*:J
Tvtk0M6
MG+4a]
h<zCfo9
uR$ft(
ktRx$K
2]T^91
ipS\2
M~g"We
b2Sj:
CB&;!{8^:6
o?8Yz6
$x7F*o
Q^=r8U
z`3dbT.
p[\ao{I
@Nr>qD
t%J>d8>
%O$$v/
yxDFdU
Sj7)2"
Qo'5xO"
}`Ta4
d#coF,
:*{wT\
H/'#_G
bpLHQLr
+k!ztYH^
a# 4a%#
t)(m~.-
r*'=}.-
p)'Vz-,
r*(%|-+7
x8*td<3
H!fs@ W
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
f0HRKUzhBp0q8gnoDzoz5bY
qayi65V1QM2tfagfjD5kVbfdPUfgahdUnBc4IpZwn0MBojRhAoF8ymbJ
wwEZUEyryNcCn9Vkh4jHPQMQ8P0VITLbzzVEZw3Eb8uVFIZCuYJzKceu
fnYPKqhAi5hctU4lHuSNs7dOTvq16TBdJRyBYZY0mNFL5mcrA4xVHXLi
iRBpCuwibb5ZzjFzkWWnUMMy6espia9vz5A0xNZ7bJX5pQzG7GbiMpfW
Ch8ulKGpzXvAwxNunFpwyZTY9geFlldOTjQEg02LQ5NzLyZlllcCTFB9
kzglK8pxEkgxvVByICkyp1XZLIWwvWshBg7Pyjpn9s2npbum41Lt0Orq
EbmdA6G6XizbH/cQMgfn5w==
7eV3kvT8WfIkBFd9H4Iq7g==
0TruEfMyLN31EY4CcYTgyg==
J282RRr72jNe1BD+0O35FQ==
3IGVRBZX1VhU01cEDTlrIw==
WV6s2IuasuNPw08Fy7+ZIg==
//AFMemfXWdtBFe/f35gQw==
YwQo7D7UD2TFzKaM4pKDAw==
4odOHKHlOomgqvpL
\Log.tmp
4sesj2WX3aHEycI2BGMFEhlhLoSICEtFzpOArbM6JGFOCb5S3olqvgbo
biwWW6fH7peS5bXU9k8PIHZMwn6qr4HA70rvAEMTIWjROivs6xMiYSzQ
schtasks.exe
/create /f /RL HIGHEST /sc minute /mo 1 /tn "
" /tr "
/create /f /sc minute /mo 1 /tn "
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
WScript.Shell
CreateShortcut
TargetPath
WorkingDirectory
powershell.exe
-ExecutionPolicy Bypass Add-MpPreference -ExclusionPath '
-ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '
http://ip-api.com/line/?fields=hosting
Select * from Win32_ComputerSystem
Manufacturer
microsoft corporation
VIRTUAL
vmware
VirtualBox
SbieDll.dll
bRQNPGfxHc1Ei6Kl8Iv2gkeFW2gJFYr1Nv9jmFF7cqmp4vv2dNnyEnKW
lBVnL28IDQXtr57fop8fms4ewcGGRvE0NePLBG7eMZpMrsQWHm5lZIHn
iUB0rpE3HmrsPz9ZnHttxlurk8Enzwd4gNnPGyIpNwU8Z2DC8IQUoZbY
jwMHdunBBk2sDiS42DJgwunUfXBy6KADcyFkv5ftTGkKkvC15UO9qCRl
Jol5rLvo9WrIzO8z2ScZWsMZZxxekZwVIWvNrbtASV8vm5RG4WUotG0g
wG2w6t5UVSg2BuQhsP97FsTNwxQU5VtgKwS7W0Z3PCSaddFoSYwTMzn9
4XuqNfUDky4SO05M6MXQitBM8aHqiYcViImwyuU8IqYEdszIS1bDpx3h
4q1xxaYhHZVMDHKvp56cxIzpOZ3kJPfw35KU3nERaJxadmHSjH08Evg9
BufNkca7CEpaI9maaZEHT8XT95xB7RnO8ImeISyEh7QLum1S9PPZGWUS
nC3knmOcdYosGzi6GbcH3rPZMY3kOifDIgxpvl0JZpszVCjPOliiuGdT
mJOtncD4VVQNnb1ulgdHZFaNUXNj97m4Mi94WxvoqXBWe7VANGYuo7Zx
H06CKBS3X7SWUosh0xoCyUPdagsaEXSUarZlmRZ2jSsTyXemVGCm0UgN
17ECJlmGPrpcZObizleL6IwuzI2nwUeDu0nhhH5naLAMOYSZD0YL93qz
PYD3V0diHNVlsadnKl7g6ltb5qhrqdaFrhSLhuuJ5XV6ulSHSMpHTKN1
Microsoft
Service Pack
dd/MM/yyy
\root\SecurityCenter2
Select * from AntivirusProduct
displayName
SELECT * FROM Win32_VideoController
Win32_Processor.deviceid="CPU0"
Core(TM)
ikO7065XtT0gwZUkrv4yOrB8lx3lC5cxI40JgKgmHWhLGQMJ5kkxLKSH
V4kAuNbg4QvS6G7i1XjzVEYIvx4swPw9cZUNc445ak80KRbDzsB0y8dR
A5SnxU7TEJTlND6670nTsBKD0qq4jw3kKPKbEMMENHwJRtaFzQdgvDAW
hoodIX2MMzKY5KQkBhzhdb7801123iTWWJhxhRJPNLVfJBE1uP9hvfhe
qwTbEjufIyaoUHCZjal3bFye7Riji0mVo7tYBBFCmh3uZZVLToDnRHeM
tLCUmpuArRXRY3swB7mguj3kOqGpF1fUYBVm0MTkUDn6d1HGQbxKvxY5SxGzqqo05TrTDkEEa1VVcZejUAJPVFtw
fWcs3mYg4xLeA2bY0JBmGm7b3l84bfLfB1Lil8SJs6t9YI60cRKYrfw9ZUieDc8Xb8t9XJBahGi3aDz8wd2L15JE
kI8v2wgAjVUMVhiSRVr3C0lBSOkPI3x10ZHKl99s1Dc3IS60bdBphGcY3jyqhdoHcsz5EIO9Yh2B9A0VtnE1bCja
JeYriTe0YiwIRvtdNDpvKmVhd6RongSUHy9EVaorKv07GfYtCxBVhdJcsCwBv8hcZH17PWRrek7r17Ck6E8MFVEe
Fhk9UfrPV9My6bgOEYoP5FXjtfdQr8cJJJkM2T1fCbtePeS1nu0TYK3qN2GT3A6oIn1sNl4KHyvTsOdcstpIp2Ms
tVyeDsdTw9l8mrKAu8eUeLeu47FgoNjLgkll9MdK5nOqPtb7uNTFpJnMWynpbxw6nopppaoCRtmvksuq8VDuGa4o
lwx7Vm47viDJysxUVDeSgXu39Z2U6c68dwg2ubCZgGulQXAucqkqRHwmicn6bE3k5jkz0PeP8ozMoDi0yaVkDBCo
DiE20XwPwMXcwikeEyQIJjNOPatMrJWwEQplM7OXkG0UWspIGJcpe5WnizImcrNpB9sztTJ1sQv24ZIwm6MMZFmh
Q4M8vN8cE62SrFSHWHJuPD2voFp3mIXNHN8hG7cgWpPM3ct5sFjIJLQMUxWufRpFmFK9KR5nF7ot4ntemogHgCqm
wkyIsuatpWooUBkEnbtpkZuyU0NEZy3ze39lri2vbkCZNUqqTEm35S4xsuo7VfjkGlDrUIYlEOpCGoAQz0cv4Xan
Q2szcSs4ekL0rmhvLe6Z4fnacC2j1fFoRiGLYcK0q2mSYLr1flaRlaPtDvhOpaM44kHKmL40SnIipMfY7b8XVLGK
3xACytxYCJuQ4rUVecHXdYuvgRIbVsaWLQjPxUD5JD19hGWH2qt2m0IIQVqgbhbH4eDKMc8gVQCPHcXXspq71pUB
aSS0r3SMnR88OxCPo4dts8sKCdhe6r1mzpdvKmlEYKDfHxbSx8i76Fpfbt2RWROF7pE9oBEaMTjDztKqgkUaRWyf
jNaiaAPr3jZB9jOhzdF7LFIgd4jhNKBGvBPxrwdJxJc6guZgsiqNyklYlr8jmTHGHIR5rHDRlp2exkA2nIpMEMzR
OybvETMvKTNQMsgoPgsoNUYe1wgVdBEswovrExJKuuz6PHiWgI3Sp0B46q18r3t4dMxUfkZjk9DuBsCs5RJlh3NR
GDsnDVuEPeG6dxzulk9Hf6Cccd75ilxSkvtTI0OoVsbAOJI4HrZFkr2PkKC1TYiJF2yBTJAcwiBVz6vsuPDu2akW
uninstall
update
Urlopen
Urlhide
PCShutdown
shutdown.exe /f /s /t 0
PCRestart
shutdown.exe /f /r /t 0
PCLogoff
shutdown.exe -L
RunShell
StartDDos
StopDDos
StartReport
StopReport
\drivers\etc\hosts
Shosts
HostsMSG
Modified successfully!
HostsErr
plugin
sendPlugin
savePlugin
RemovePlugins
Plugins Removed!
OfflineGet
Plugin
Invoke
RunRecovery
Recovery
RunOptions
injRun
UACFunc
Plugin Error!
ToLower
Open [
-ExecutionPolicy Bypass -File "
rqNioNn51ey1GGo2wfLt5b7onsmN4m2bYzeOPRTmTW4QPaalAsd0ClnyPk9sYEglIGvsJR3nPPaWo5FkfjajO1eu
VtGl3oqBKEPPD4j3yDEYAHyLSKaEWIT01B0ZUlJ0m8kbEpUEJh3ioIxXvRVOjDCv8mFVXOsZEq8oT2YHrsKdnO4i
mcg2rmpiZdxf77LYIpK3Y9As4aPAchNLUHJ09tj0GFZeBDEuFBCMlMdRmsAkJcplS7qAMKbtU
PjaBNyjg6E6FYZKMQyq9vbejtQeE2ifqYGxFdjWRPL0rwAx6pssWnZ4SrTh4p85ejKRNzGcno
4sA7H3VoXqSRb0Wek2IdD3FbUSWZacTbzRkCOvMPiFkzRj5OoRrBLOqDo0Xs5C68BFa2bClei
TLTUp0lIqkDUwUYhPd71dWruqtJ1cYHZ3JQKCYfJjbB80eBEAYjvq8ybJwSIK9KJNiOBwhx8d
GFFxu6xHncV7Cd7pe9JBtDYSwwNpwlgc9Jc1iyK0gRhxOfWon2wxJEgWOcNuPSxKHQe4B96j9
FhejhIXXeBqGL84N6h7bsqN6O8j9W7DhCBR58rxr7Wxp0oZb2dtsJdAABkHXNvLSCE1tHneNL
4HLnd0GJEqJbrnPzCBbfoO5BYZMJZ99Waztum8r78nYveOa0a9ft2GH9Jgbac0NQusQSM8twg
vg55siRUqC62Ljozvw71MWFaCdaCK4odUS2mR4CWRtBaKdDBKSutPWGMaI3hpAmq9nkq0C5GU
FwD5Dq2yvhqnJDkWQdDEWdWFLa4Yp4UKFcShgOHMeGXMWz1lZ2u9hlTg3NXwsncBLl0PqFhWC
xBdrs00MNEd7GfgdZeeuzHsmDq6XdVvW4iT2PbdyBrOhyyq0HT8B4wfwsocknGugxRrC2EX3Y
SCILnk6ysGHHfmz1SVoH3uSFgvhYbsMbB7iw00AEFC3AEkQro3ks9DIKQWV4YbKOptngtSQdI
TnztP1g79iCDqLwvfpB1hwoHGvEDATbCc5DIG89fc4xpWK64JBUY4ckcZww9m5Wsce7gJx5F2
kID0WHx7ityyanbwC6Tpj6vGldY9FSvGwNNmTFPPzjQpiNTuwPdnKTlP3UGzPVeINqOVPGW7R
POST / HTTP/1.1
Host:
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
User-Agent:
Content-length: 5235
schtasks
/delete /f /tn "
@echo off
timeout 3 > NUL
" /f /q
aylUHeOw84LSUkwhQFCoDfeiPdQMY9Oj2ebCrtiBsvqpVeOLPvaVyGc3QU3FLiRC4hR3A1VJo
nHgjeyOda9vlndvZTwF2gvWdZkRzg9R2H0ZohNFEVJ5fmbHe7n99RFvbxkN4oSBmLq53tGt1G
ToUpper
[SPACE]
Return
[ENTER]
Escape
LControlKey
[CTRL]
RControlKey
RShiftKey
[Shift]
LShiftKey
[Back]
Capital
[CAPSLOCK: OFF]
[CAPSLOCK: ON]
MainWindowTitle
ProcessName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i9nUDqfpZBYoh4N
5tPqyvurp2aGbi8
4E8ThSiztLM5RuO
yeb2jnxtV87TVUo
aoKZZ4BvSp1dFBg
ly0NNmvA7SfWPim
r31R4om4224Ws0x
H92GyNVM4Ue5mGC
DummuteCBWeFxjd
xWXxtzKYDw5a4jr
PqOtrms1DSwLATX
1lAJSM4QNkliO1r
ueMw9G34JYv5lbk
s3ipuXNnuyIIf7R
Software\
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0
Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
abcdefghijklmnopqrstuvwxyz
Err HWID
ToArray
YjPPD7PfQfMvLnU
9G79v05lPyQrMOZ
qeBGaEdsVudwgt2
36jXQR25TGYL47z
H2k41XJWuIPdDk5
X1BKi1BSCq1k67U
55Jmu8u2RtFlVtf
G5qHwo1yYlTnE4c
bGIpHqjl7NWdgtJ
80nxdqbIfpZuzXm
uVBJySvDp6iA1Vr
59TKL8bVPldsRTm
sDIS1hvywPeztDL
TpmUWu27fs9Bt9K
KUbcCPFVjRJJbDh
wCWSqSlS8bxsnVc
JVsaC40SdGO1yQ7
G96tByYNg0f5rTx
XOzT9nE83vEagFF
Wso4j0wuKmfHmJ5
2As9cM2MQTEkMCv
SPshg3yzjkfT2Ja
OlMjY28jpSz6BW3
kMikPxAYVcC6QF4
p8mWmMHFTmZOmxM
dxtNGp9Ds74YiWc
24jmq78dCK4m0sn
8uNFqmeBLDv1g66
abcdefghijklmnopqrstuvwxyz
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
FileDescription
FileVersion
1.0.0.0
InternalName
Slovakia.exe
LegalCopyright
OriginalFilename
Slovakia.exe
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
Antivirus Signature
Bkav W32.AIDetectMalware.CS
Lionic Trojan.Win32.XWorm.m!c
Elastic malicious (high confidence)
Cynet Clean
CMC Clean
CAT-QuickHeal Trojan.GenericFC.S29961068
Skyhigh BehavesLike.Win32.Trojan.dh
ALYac Gen:Variant.Jalapeno.640
Cylance Unsafe
Sangfor Trojan.Win32.Save.a
K7AntiVirus Trojan ( 005aa5f01 )
BitDefender Gen:Variant.Jalapeno.640
K7GW Trojan ( 005aa5f01 )
Cybereason malicious.0e2398
BitDefenderTheta AI:Packer.24A8A3451F
VirIT Trojan.Win32.MSIL_Heur.B
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of MSIL/Agent.DWN
APEX Malicious
Paloalto generic.ml
ClamAV Win.Packed.njRAT-10002074-1
Alibaba Backdoor:MSIL/AsyncRAT.59f4bb78
NANO-Antivirus Clean
ViRobot Trojan.Win.Z.Jalapeno.247808.R
MicroWorld-eScan Gen:Variant.Jalapeno.640
Tencent Trojan.MSIL.Agent.16000605
TACHYON Clean
Sophos Troj/RAT-FJ
F-Secure Trojan.TR/Spy.Gen
DrWeb BackDoor.BladabindiNET.30
VIPRE Gen:Variant.Jalapeno.640
McAfeeD Real Protect-LS!EE1FFA80E239
Trapmine malicious.moderate.ml.score
FireEye Generic.mg.ee1ffa80e2398a0f
Emsisoft Gen:Variant.Jalapeno.640 (B)
SentinelOne Static AI - Malicious PE
Jiangmin Clean
Webroot Clean
Avira TR/Spy.Gen
Antiy-AVL Clean
Kingsoft MSIL.Backdoor.XWorm.gen
Gridinsoft Ransom.Win32.Bladabindi.sa
Xcitium Clean
Arcabit Trojan.Jalapeno.640
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Backdoor.MSIL.XWorm.gen
Google Detected
AhnLab-V3 Trojan/Win.AntiVm.C5374869
Acronis Clean
MAX malware (ai score=88)
Malwarebytes Backdoor.XWorm
Zoner Clean
TrendMicro-HouseCall Clean
Rising Trojan.AntiVM!1.CF63 (CLASSIC)
Yandex Clean
Ikarus Win32.Outbreak
MaxSecure Clean
Fortinet MSIL/Bladabindi.SSNY!tr
CrowdStrike win/malicious_confidence_100% (W)
alibabacloud Rat:Win/AsyncRAT.Stub
No IRMA results available.