Static | ZeroBOX

PE Compile Time

2024-06-24 13:54:51

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000141a4 0x00014200 6.0091618545
.rsrc 0x00018000 0x00029946 0x00029a00 7.089974034
.reloc 0x00042000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0004104c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0004104c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0004104c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0004104c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0004104c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0004104c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x000414b4 0x0000005a LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x00041510 0x0000024c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x0004175c 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
3j%(H
v4.0.30319
#Strings
CYPY]YsYhY
XzyFbLX6bFiL1gAELW8vUIR0
poEPV9lLWJZ2LYxhCa1iQVvo5E8ao9WEDmy5rhFoi0
7yLoiNOQQTkGiM8kp9AFVzm0
81kMXH3oLQVtGlTDfPmVkqsVJY3TYAO0zvzQJaC8ocUzdi8dvwKYTPwJkqv9HzwXQwOWLNmWPf6hF4VdraMZbX7mqxs0
qbQ5YwYpV938egIvl7Iwgtyl2e6Q1Z654T8S8suCDhfAKqLumRACtcmqA7c5v9OWiiVI4VlNsghBQ5sZzqBnO9fuD861
Ff7qrg5qReRydB7q7I4C26XqwrTxHgmtPUKdRLX8wT0ELm3uB1M66rFc3z273KghU6LUubYa4zu9UHXv6378fnvlTOY1WYa3QC1
hWEYOgcyASwEhCw5GLY9tDAP5Y31dKc0IbTwrRFED1
4Qh645kOynpJBkK1ai9QL7K1
5OIGXBOAFYoKpgh6aJQsQT4g2bSX8WWjUbAxkfWEncHXTnlS1
_Closure$__1
IEnumerable`1
ThreadSafeObjectProvider`1
List`1
454HEKD9uu46U8ZZNAnSQXo1
Gz8zEqjuahp9DtoQtmpSz0s1dAcWl4a3kQMuI5Hpu1
Microsoft.Win32
UInt32
ReadInt32
ToInt32
ZpzDhPtHcCzWKQTF8UHVFzC2
xaBN8RS2spYan4s49ZZ9oRp4lit4MT1egYvdSLMwF2
eBzDvZyK6wln8EiyhWanMvwJxwQ5JHY051wf2OllWOgRd3ardWttNZ4aweYhUXE81V63zJksG2
v5vOJr5O39ufJlO6OXOlrgqJJWSfSxBWsbcnHZjmL2
Func`2
UuJWLNBd6Mjp4f3bZ49Qa02ixAlzRxh99tAmf6TSfrlgCpye2
kjv4EmQDW0nCdZn0m8KcUFGffB95zVYb0qDYoRhhWhA5ZnOj2
XClient2
o4OqUEfz97M4r1M8n87WQU5OBqh0DD4Ng2mEbTxu43
qibPT5cLtoqpWY4QsX9N5H9H6k6wx4KzdZT9Uz6OMfQPEyyXoujKTtN6dBOM9sZgVBbBlkCeC3
b2fMr6hSJn4xNNP1CdWkxb8rs5qtdrCNixsHbtsL370FncW71w6x0ISMeghrwW2mgQQ3mizzQ9BycyjxB2UGsqR6c1L3
DnBxPE0MLLmWZxLdCV7pp7GqG7rBLdcpdABsWpZf1HHxczCg7v69B0ZH1FSlRlo8zvNZnHbDQUDW3
x7ryrIdu8Hk0RYGoMi9aCm6m2PQF4R4xgStFJsorRLFbUvqW3
WzK5Mm2acFADCE6o8hcBS5dcS4D8LlHwXJfzj8ZS2DWLsPwwFdJxOVKAoY3
18J6689sIe6nyBliAikCbSb3
UInt64
VvFJceMBY5Y72IR3IfURI3NBvQ0mKGgepR6iBrgBjKTFyhz6zcmEgHpN1dVNcSp3Yvw7MPwGC1J7q2eKsc8jghv58JJZzHZq4B4
b5tus040a9zxiClVnYQQ92E4
NL8rUGWz4XkpcyHoLr4avhlKHuz7EVaCybFUPUwqxZhpObNazKiuYNQDGkMPCUHpyShYwF9GnjOJtHdpP4
GE0ilYRobQXg6LKxZp5et74A1DoWwMrdtOHrDE4bd8FjtRxP4
jF5iJoexmjUdZyoO8bP5MuY4
jpAAyNujJd86G1gUvmMxE0i7ri3QJUZs7MVmEbGfEA9qYyAjViZPfBcy2PXPaKMgD44K9JBcuUReEXF7c4
MINiDvAZR6tO5tMisFQyCef4
AwV1F9btkuIsMUUGWM0JYmVjHDeuGHMHxHsFzQuRm4
xE1IZ6Jr6urwfJ05XDlLZcBLNnmqonttZbYWjp6on4
yQc3lj7YL9P2efo7MBHBGPSgeQkDBKK2byDx4duMrJdZklAKM9gX77zHc2xF1f3y2rkzyBedlcm1KPjdSbSo9M44a0JAjOYYQq4
vDEJBlYLYu17KlD3Uu7RRAFiHJhjHualcoBJVqA3M5mIi3Ks4
y7W7DyttQS2ka3YXMq7qAiLNQ1NBsVm3pTKxaU9vP92cxtiu4
e3Y0hDJGSHsLQ2OjciZQb4zCbNf3g4IAuHNRjOEa65
e0N4Ib2yydSJEhoRguukpTlzDJwStRvld5biYvEtG5
2pLFEu918YLlgCGWL3XghHrwNw7I4FLASiunpKRQlzwDaOH7BNY67MPf8Y5
93jJc5m6hbX0aKvUl2eWL8YVRLYbSRBLZd2yZaa8oa5OtI1EXKCscM7cTa5
4VmpH3yNFzdwPbHUiiSUKwhue0klBBSoHGHdvZnfuSN85Nvc5
ywDGKDZyo6KeJlCOsR1c3UjgRfrycdbJEA7i2s4V2tYasLGp6DRouq0mRtYAvkm0ixi6YxSWGuAKs0KfHgUwGY4WUMh5
Z8ro8rnapH2DuwRKoghOK5n5
z9MfwWJAyEwFV8SmbANjYcYbWAwU3AVXNQy92v1Xh1yvp09jIZe6pke1Zdq2ED9pRoQUPVHsp5
2xJ3MAUE3cmalcAbwXaiH77ZhnyZT5d3PhvfJ9SYswyc18IXUML1DFUPT35pSH5KofB1UTHaiietI3eI96
GUTTf4hjtUwIY8BBfjuxkGD6
Fl3IT4NYYm3IXY9aNRB48SD6
Q3Lu1HObRNVbIrlRefTovgG5RKtbDD4eQ8z3ksPW9pUxLtvO6
5y2qgR3qCyYbe7cEeEQ5U4H20TILHTfKa8oUxZvB9nL5AGufc7gCrW6xVGggXXJ9wlvRzS4tfiOW4qThS1u5Pys4QxiMoah14R6
7tUSWKgFrlvGflJQISpn5DQLdc2M4jUE33btJtFSL8H0d9LZs9ftwo2xGHC6owL23kP1QW0Tg6niAUSVc6
0XvRFzwRU9HGf3QMuvqgSTmnbAorAsVy5g2Evfv2f6
KQqitFe8de2B2h68Lp4tTghRAOmNZapNH0AQDy84uzFU2YZL4YQCUWQ624abhNtkSRTFsjYaWJIn6
APtmZnhIiBxqpGAwivy2EfRYeyjHsrY8dbbJ6D9JoTNf1LN9C60zpejywx6
EplCkSYdIKpnywdCX4v895g5YN8Rln00q86560iL3Hy1oCFb3RvaOADVYRkiuXPMZDDLN3Xt47
hIWvxo1csWLFKXMRMQ0BK73pm6xGwwDsoOEvpRdjd8EePhLDh0uE4PZCtwJ8bmp2fp5ZpHvX67
KtQ5GuP7ngzJ9qMfuPnGr73yuCa5bkJxmExXzOcB6rVqBBEnwHr013P0JOxOVG43FD9G9r0r0YTLcazcGP7xaPUzzXI7
6tuKr1TxM7oRKlkdMUwxaCzWXrC5vYmssir5xHfzGAO3OpJuQSamN54cFL4VRQkaFefYuoKrI7
9eVB5zu41VNsIhCK6SBBKCkWCv7rPyHt01QcDCv4P7
NUrrwO5gdwwPmmnVTfcH1hgUchjXBeKDmkKjqjjxR7
ChQuRdwfluCWac8Y1dOsJAcmKRZcYgkZoF9y78uDz1gJYjvzgJ5wQD5sNT7
y1bvLJg0CwjO65bsKYFkEqTIRZuPerO4aCjia4HDe1IQd3NZ7
Xq9ahEBVP41hztbXvqW3BCwM4rgwXijTbg3QsZezK9musPd4cqdB9qmM2Qez0926RD7opJDGVYvkHDh7c7
3kWeBz5Xxn9LaK0TwfzcAwSHMIMPIhd9IeyCcZIbeZI0RkRjiL392P7rsywEIXv6YFOYODt4WZ4e7
CuXzQoEX2kcCp1mYOCJQp952F7OxP2nat8aoXCjEe7
Yb4N0xQagPOguNO82zYyVD1ipdF6v4prgnDSo1R6nQtCBQIXG96Sjqh4cEJZnwNQgzKhLuRVpyHl1vDHe7
S4yfSo6VJlYzL4nmcWY8xrjI535VJCrBPGs2pOmEIt4TvkdTvWPZP3hGlh7
EP6lQXM5RSNODkvGwrZ7Tm2jBbbBvcpaim3Qma6Tk7
6APgyXPgWT1DgqgOTlt6v408
Do9RpyZyDeEJ9XLHRdM3mr1aXgunHw4AiGCgEAGTCUA6VhAVvJTz5S4Dw1b1IcUMaBbEpWsQ48
get_UTF8
hZzKL0tW8VkRHCiUGxhQ30heuVa4kxR12tOjvygfI8
Zdgc4SIAgRMfsB0aLwf5b0InsnLw8WZOFzDWK27XxcqXlK5MmXYskNK8KeMWH7YN9sv9pkfcrg6FXTELR9eTPBKfbnN8
JsbNil9brL2YfJVxmgNDqaRXn13BVOvC0nXs7jHDT8
_Lambda$__8
Z7zoCbynN5Z8emNyItBdbkGJFzoxLGSlHlCi3JPV9lqAlj6d8
fJseWpj7vy4ca88lOQg6s4f8
sOcVc0srd5PnWzzOuBmYYLplbpuAGtvTu2RTuYzOsjxMbxak8
Ad7hWcpXcI0DxzYz7q0KLwR8xKXCDBUjNDkyeTemDuJRQMxn8
b4cg7ZLczf5nU43FtpSJeM1xjw7DXZoz6ti3Vs82wciKdWK6Ve7UUDa5wXzxLOICDBaXDIF9Epx2Oceow8
Yob3ZwWouKbLcgtKfnPWnvWFT72x5mFBUN6oyMZhFwTZD2DF9
iX3nm22KhvsW6Bu2cwhGwHdOSuBXdiMXkmPf4c8hjs8oMnzZTEcWOeJa1K4sFFOQkNUEbvPiF9
JrqVRwEU75hi2INuzOMkQ8O9
Dq9torPh4SvKl57cIr1rTVYpzl6NFDgFdyF7UUMytWjNWcDX41TzC3gzcTfE2ljRiGpdNrmfDlTO9
Gvambo9TApX1x57B0am15TPfQLKnehtpQDajnyGLgnQJhTEWkBkrWE3cdB9Ay3jKMZY8AYfBnILmPpyVP9
V9pXJPwFMoemg2G2Eka78HYaFUPgkhA4qahWfld1U9
GGZqKXisGP7o1ib9esNXedfrnRjMsuNNKimGIl0QV9
ypJ6dnTZJlqC8rRpYcsWEYwcASdhCjDFPKxXPsYa9yFDzTGq9
k6OOrgDZoyMGMQbe7C0wo0ECmCGRzXDlSV4fbwhPq9
<Module>
vHmaopLyS8yIwi2i4ctOUWKFC7tdfm0yEpCdmRZd0v6JbgmVsTmL1MBhiDb452vJpN5xy42f9A
uHVEf0GxdqILj9mylIkzd0FA
sH0PgPubuEJS2SVi0QY3LYsmQqChhbyeZbEPdE7Z30uSofDWA
ouizm40AZ0RA7j1fLD5u0w1GZTdPITmfLGW6Lc7XXA
zvrdGUzXtn5pMY1FfWxTUvpOO7zP4ntIQbQZxSC0iA
capGetDriverDescriptionA
5MYh9xINHkfTT5PXaXfnPlrXDn7Ymi0rs8ddLHvZDr2CxYJwA
capCreateCaptureWindowA
W8bvqYNilsUJcCLD60lY73YYWgI50mklLDpeWdsSBhEe9SkpQiI22aLQF36d9SMq5Y4jAQSjNCSOCwmmyA
ZfZU1lqDGjgnya4PpG52CBhlEwNCCNAhvIi05kvJmMP1iGHHB
oTT0WG41Y2nbOdRoVEkGm5Pvhj3chwPmbATSWqt3dKk5bXCKB
nwtcUqa509Zi2hFtSYR8eBjRWfwdxCxzAajspZtiZB
Drjig1voeJY5jAXlNX6Csxm97gsxlgwWqeWrqF15pHFbyvxr5PEP1R9KrKcxhrpsnfqs127bZMPeB
RQZw7dEocHhGAotyI6EaYwV9fGZZGDXeU9mKJiPdyF2MY7MkB
tMPl8DX1bLq2lDfzs7A6Dvio9A3lCOvflhDXKpfUbRhWLws3C698LmXCpoobBhxC2TklDfUVFyCtGHt46FvHOwQpuvEC
vYRVXtCPTX8wb9Vdx63eDzTC
WAXpZBNyow0zEPv8M0DU40Kxh2wbjMICMKVOsdcZh8UcVIB5wEN8gUQRKXC
kIuoPk55CacVhWXwwgep8V16Rv7GWE8ru88Nr1QEgbuYkDbnhsm79mksgYC
O9m8C9Xa9XyJRjsv77QbyILVnM95P2wIADcDVXSPRopEjGx3cni11al1N1L0r7VTkt2ohrHpBvwgC
p4xmkN65afoA1MIeRrgkCXtYyBxNXNqn7wxnXWwqarSbO8sQNJM4mAaddP8QYCtUR7lRqbc6oC
l8KxsVWgyW9FqDmI3tAcyX54jLZVEwR4BOr2l2W8MSIWyODuC
j6JFNvsbZHWNq4Vkyj7v5RAQ9RFDwajpd4hGRzauy8NL1NHzfQhG0T06sND4hziyQuL9jI1WzC
JG4vPvBToskjHsRT7lUGluZ7oZlmOWFJcM0eFu0K6DEDA6W1oPaQU4KVUG3qyZVOSzw4glr50D
Rd2ROhusaw5KjQYHRfRagZzinIW7Xg3Q9d9vl382OciDEvBVeOHp9I8CGr7dHqdRpHaoUJrhaiQUwOevH7pNHDQEObAD
ES_SYSTEM_REQUIRED
ES_DISPLAY_REQUIRED
3MDpPBboS6e9Z4XwHLBvVzbD
3Ewhs33pets8o2y0nzmKIpcD
9rhiMausY9JhNq8Z4PHafhdNWlKjwQW92NX34kKC4YCaTaUeD
sDZeHZrAOPC4w7GqrYAiXTEXxBz9d0XgZE1lWDffSo6RlfzfD
WIJLLHyjCZZP5yZAp53AXoT85ggafoTxqtBXTvF0ZowThxm89AGSYbZZrpJuihkWoULVqCY2iD
PvVJTlu1AiYeL8Z51UG5yBadhB45FPJjnmGdUwh4ZPYB4aOr4eyvKKlUwbJ1LHyk8H0Suwm0oD
oyRoVDkojaNmhMnuxkdGlCYh3BUsKNmktX9UDJRHjSKDpDsSpoq1sgqtxtD
8H3oCmjwLYiQbYzv2c5jYuvV3wfxooBTvOy0AmExYsDQ31uxD
i7z5vJSAGZH3WZ28uWQPxu7oOVpvN3DV6O55MgGi4lFNG3twojLwUEwmJ0DkvZl3TgtdtqMEKC89E
dwm3VYTx7SC89lFPjzFrRO41Uva7nhv3DaBYNKButss8JpGDXCqoiCMEdCE
6T0VPi9c6yHQt4ECj5l2nKPxMDj7O7GgDbN6dRZTKdlqsP1LE
EXECUTION_STATE
U31ykt7ZEROAadxkEw90FoqV9cpZMRHV6SdpJufzeesiJ3nptjF5XDIMdWE
0gXhMH43CEB8n9blFgJyu7nzWA83jKhSs3ZkuexaP6vFdADhoodlEeFcfqBvsCx1SwDOCsftNg7ndIL61F
s7cE1775EQ1LBTgsqQhifRRDp6Rzex6oOvKv6oDM1zL8AeJ6F
f0uDJylhEgtG4aJrPu2p1tSCWBcPKtwMoq2PouG55pRl5Lt7F
eT0vekwbGqgvQIlyXxDShj2BE0ailir1IYvCTpGicE60jG5NF
Gzlw2au105BVharGHtJHvnIt0zgD04RwVLYAZm2LOEA0UNbSF
hvRZFoOMHnMEEXnFpwJwofzUBM3lPcpJc5RDsGcf4Vm5BISRLbm8VpwsCC4fG7nK3IMXSzlxXF
hqvxK8rlhTUOkNW3QtLKeheEPh3I2L5sIwCXHhrupyUheir8dT2lZlbhPYWqCWBseaCPkl8uDvrnF
fCs5oZVVnttDXIxGMzXZzk1wkCnUTXqvLa2oc7gjp7bAxEPzDaLvjK6xKDwuRWKqkCuv37HexnVpNrcNQawYMQ45gipF
uZZObxxXApYg8YTNta1U1TrOod2IFWeKYlSXEG5TfSxmy0ZxF
ahPo6etGL1rVTDFN59pCvvl2VpsDaaVfpThkiU5e9slm5k00G
5NXDl4IHClsJB8ABBKhCS8Nzw6caybrfuCVwqhtg5G
LFkjRIfBM9RGTFZnE5QTq3Q3U7TjnVdsrP9sqmKQ7G
YZbyTACDtVC7AxDAfqYHqh1b47XwBoTVqPjVQJGfdrLHxo1ANZdA6UeTaHG
3TE7C6oFw7v77TuR1iP0oO7vLhII15rSXIJdjjEsqJdlIsPOG
Y7RvOfOhiCK2DVJTaP9d4zhrorb9ouaFWpwW4pbOgaDStdoOG
C7VKbhuKdqxLebAFKcFhCkzl7DnrqI1BffBYEoW67NTiusdvOYPCnbVPkpG
3AcMCsNXoFnqHq3qfkWXtzhnM18pLyfGu1AC42DO2H
hqMtHUsOGY8GhBKUsRSePSy0MZPUYfbYZXTaZvgnGOiBNzP2H
vGARJV0OPzHlc9AS8Wg9H0Wy3fUKQo7ORgMBK7u0XBcdWT1AH
CMoJ2DSfVXR80P4QMpSF7B5EG4hGxIIprVfDSEpxAH
NXgwebfR4FrbQ51GMjXYY4OH
rTe4PP6ZwbWZSip7b00hNLEO5v4xs8In1vLTAtPFGurTGNnPH
OMNgClWW8F82O9EWLkp0rtcH
mDKR3oq5Pjhl6MzGylXc52840iXzLLfeuNBwxjzv217JRbIiYMcQm3PScfpHkBIb06aYHwgoYVqF5VTrfH
6Y4EuO3fSfmy2oDuPm7fpxfqFxOzpfScKlpKak8EkH
U4Uinurg1Ka5NFLInqlfeirH
EC5KnKXQPcgx8qOOHqQPORAMt0SeQHNBdLKiEidy4TgwcoF0I
JSe9eWwZfm9le2JGfOXBr1Qqm4iUgq3BZOJ0srPZWqSxZDzVahmCvxK46lGNh4SL9olKfoKUMBb1suJZ3I
get_ASCII
XbCiNtGVAMeRSulWBt74nmkELTOagdzh2qI6ficZCtqOVAtlI
UCfID2254WRZl91hDML6v0FJ
XjUJTmleFbJuSgEiVN0BaPPt7JH32jUFv4Qk4Wu4IJ
t53IyEG45emXbJnU10OkFLXJ
u0MvIeWDjQvVhFYNIy8Z21lmyGXpntIjWwR0Q8HvBXoPieffJ
oQWmpgcEH9XO0E13LZfhuelJ
kt3EdH8eCKksJH41x1wVI3MTYRYSCNEdn506eM7mShbvpT96Y9NKCANhN0LT6pceoFKZQ4BWdwpBK
zItYEOgUTPEubUJQqyJcml3EJFnm3C5ty7saSLWR8c7S1gZLK
Tk6JWKTSucRvh7axjeLN36GdlGESmlj9hpX2HzGBuRxQ9k6JerNV3EGvv0N4dLKA2hzQdybUFu1SK
DoxMzgpy2a4dpKKRUMZ69noK
TEzWhE0wWEGpImF2wr3epR1L
vxzOO8R0G99aMlAQlTQ2U0Vh3SOBfpT3FiKdoZxZykEqR0A8L
k9FD4hFFIfMrOsiPRJ4Cs6ZlbNdT43B6buo4QbPVmAyRg8UBXgZ9DajwnhUaG2duiTaht6syNv44S3l6BL
iOCZT6RIbVaUkJuTUzznQfvbvqn6bmGNhJ5F0f2VGL
AF1Gk1auaNT23MWx3x7sO3cttDKRumMzW66nFaA8JrqCdJMXlF1eUSXJaeIEpUcBuOSzMwJFVL
3L6dJDSL9x6tKCAAlcMWn2ZL
yRrLl1lmeDzVgOPaHVl3rKlL
f5kgpYbh26xQiVgiJ2yzwH4PEXr9LOKemt0P6iWgHL063ykoL
yFGn0QJAzwnuqkAPKNaOuJ6kFdepfX9ppfxr0blPsOadVCCHM
VEaL0LDejmRBCE6SY7iTbmNM
i2kZRztitdP7oI4YSjYw2xSGaVwJjhwp4AHr4IyZrAVNoLlIgYJRVAQb01yfMQniapnAT8OM6fryD8pb7SejMhIuh8QM
mG9X2vQDCSRA1ZwpmnuYUoab0jTWvB0SxUaDlv0l6ntsV8sR1PFk4AuwQqqNGuNk199mxBIqbM
WW0HWvJAMBwsSspHyznlecwM
oxZ6FOcj0kXC0JUQsa8dWJjsFGZX725pok3uRtnW6L6uCYLTcVNcFkuGxtqtCGiKCIF78urI8L2xM
bIswl3vkISN0EBcuFeL5eMjurHWZfbawsqNuBxEGrahBrW4DuOyY6JbXvI86FY9FGjq4lB07yM
fsQz34Er2lOK4co4Ad6wnJ1N
SIp7NGNgMZaTXQcCsqHb6oOimfd1iPbSCngQmysONfDjvIT3N
5m4IJ9feDyeAzGgdN6WIzDJwqAy8fiQEzvzdwdro5N
xMMFqmjsRUl1NDpmI50MK2OIHOtvffdnRgSdjZq8vfpzyy8pNroYZ9QA273EcXm7T5uZ4AHD6N
afl2wpcESUYeKF6cYp9WLQDN
NpGBjkStWafbOVQwAnvPbfy8PZmhRuoLoto9TWzqzRs6dkuNQoxbAXSH7T9FspEHdW2OioXlljXEN
XYVVng1C03caVTGjvTSUYw6cmUG4m1ydTPKw6XRacjDF0In36asMfgWn2EkPgNDBnBICmuXnqgZabAKxvZxyUb4IqMWOx1MCYFN
qTX7XMSkMZuLRtPCMK17kWSbJRVNdcpsu323GsRES1BFY5mrJBo2cDMPtjz4uDHR2GaBSmfmydzetKjGLN
FfXvZ8OSVCKYo4pyoJUoZNpfpHt11Ec2tpd0EqW9LrLgrb0QN
yOa6e6Iy5Tq8EzFlFuTAVGhN
N0wQbC9eQAv3fhjcYaftHjsN
m16GPKxT3KyVmxpCqOygBtsN
JQ7rgSxSuqyoedK6oyfEy6BgkbsU4fzXHGwtKUTNfklT1fExN
XcU8cy2mVfFtnuc7rJwiXSZRrYHFniYEIS262KTX10MgJ40DO
VyZXGXKOHVDMuWTK27TDfmDO
LASTINPUTINFO
System.IO
ijhDvyTjMWSdFhcSZe4NuGKO
mrXtlUaVOccX9vyzmoVBxx5wd4BNjuaYPWYLaPn0B6FhtwKdO
DzWvplGUn2rIWXEDPO9GrZgO
ikDMlIyeraS0OQy6cZnWClkO
QgfU0cQaiWFNinV1vY0d3E2P
YUseQm8B3NfrZW0D5bpeH8Nomu2QAoEhbbDoOwMqpfQ9dRM6P
K8dlw8r6boMLW5tHefluHAje64sAVoNJAMG3TDDzCP
MRjmyS3ieZ62Pd75O8rjMAcxUI8LhZuBbr7xGcuzCP
CM7fHDDDcADbiIo25hqaT7MP
hZwLA8L7eHorVQHCsCNAnbO4yfljvktdols235plRP
5HaJoh3gKKmhZn0ixSzgMqlm3KjfhwkP7EIk98IPDQttAMPrn72LpxVJ2MVa3V2INjA4sokWI4uOhZaw9fWFtQptOzXP
ZestCbL6fS46jFJRugaqmDoP
ZV6sggEhEhSPIZ0Bi8haI3pP
hVbhy4a2N2WAjpJAEfQghH9MSeiHKuWumjpsEMzuwP
gWLfiVNsvcp6mq0KcHwGcLSmviJDO5LzAqIGQeFhcMwk1a6WcobaEEQ7sGbvnkFYj3m7Kb6Z1jqBQ
pbj2Y0xqadEDf6OgPb8PgPEQ
TcyIYxDZ00ZncfMgGNuonuHR
09rcJTDnILbfDRLRamcQObYR
iqMOJQEgZHlxbRfoSdAmJ2m12h4uu6VinXZHExbzYR
qd0KWpXoqpew3vxSCwviTb5p9UPQoZYKnkSMNG8BE6m5DA8z7DrKMIb9hz4TyNcgnOoJAaPOaR
q7TorTPGo6tyUXEwJhW1qBczdoobngjFTP36fhl929VB2DJo5X0fevZdlCCS4repm306qUtGvuGSDSlwrR
jDbsBMYn6dvXa5lyW3d6kzN9jk30n5EhOAy3LuY5s13UqbeT18WmgeMwniQ3VZdn6nyvD4tjv3b1S
naIYeyVaa4aiMG1ryD2JNDXYb64MCWRx8Q4YEoNlEO3jQ6Fr4SOJQdqazUVQrume90VDsuuL5Ca3S
0cvDrO7ztQCFz98MKPaCQcKX2G164ZAgDKhQKuxfr5So1KKyZYOEKMWMtSBdadgKnUhyqdFX5S
AsI4wgK955bxkNOjh3g7if3jOsj7JxjoDGDwI8dcueBGFu9qIecVBXsIcoLJe9eC2IvH1fgosBOBS
JDZbQK0TJg4jHKjB76eAP4dNxrhDJjYqXIjKaY7XbuO424jDS
xDdAdFnYNeXEy9fLX4Gv0LpcA5GGd7w1LWDbAuVjxAUFbdNarxwhH14K8N1tix0dLCYIVeMN0fSEzk9iSq3P1XOLV9KS
slZ1Xp0ZmI3WndpcLD1BQ7xq98go2XHYUQ79o1RzszoswF0dtCBK2YrCcRUoPJdSplxpOhp6PS
WLyYViTTvKAt6NbiRm5vtFl6wSCcYn32tsnr4CEGUS
ES_CONTINUOUS
rkUnP1o0X8m74STTxQw0qapJRXT0pnwQUhHDlUMd7dCrsaDWS
4UPQKvHd7rIwPXMfROp972esC3NpQbzDa3akL7Y5fS
wRvsBs9oTB61GyTpia4q0Re1Av0BWGAnXioHYScSRZsw8JaVlZNWTN2Tq0QOH338TvEPb1php8mmBRBXAI6H2hiqWhoIPwX0YgS
38KvBClR4vZCbLVmxYB26KqS
gnuvaZlX31RkyOWE6D72EGsLjSMlMuHUkySHseofgmBq472RoqqWquQJQufsXgrS
5RqVV9CYGkfMe35YPnknewcT
ACdGqxC7WZBgaoox4BSpSAmT
gbGjiFj2nJzDuPftMCZHFNhsRMJNFupg69zRmafAczhPt0L2U
YXNXs9ee8q4T2KARM1vW4Dx8j359i7eDFcjkTIvZ9U
qk1H4YfhYfAdpijlP3lOhfZ2BtxSyAJ7fbUIMNPS6oftiBU
8byInYmnRXawWvSpdEqy1qmWrwojaDUnClIBgIZMEZJ08FIDU
kCGZnJOrsYEApsjAfJQakPsBX2TqBovB6jGFAh6MpFtYUiS2IC5JKjBSKlHJ7Xiy2aI9pN8zon03ULKOoBHwYL4pMzIU
CTlIDZ6CWfh1eCl4QbQCAWKR1rekOd6deavPWsH0OpA0UE4T8PvOZHJ1UXCLilQO22dF6pLDov7vDk5DKU
GguA0lWK7DThGqlhqhPaU0WF6D4jIhWGlqO9oaNKUM7cf9vzlox1Zwba90u4x6vo0Cfp8xhS8Lb4AM1aPU
cGTAs07QMYnpe5Ld4uLABpzAJT6bg57JEgsSRh0lJKvGQo2bU
7xub1TrukbNWhb2U37Qah0EtHKwY3Blvx9eH2flSYn5GltaDbjMddxUCLdU
8ER0ED3VvbfAtKhU1DYFj9yU
X5ZktRZrOPtxFYU0rVf640m8MYUx4eFWPbO110MS1V
7jpTgyaXIgxV1ppotdc2ihtf4d9UENwtZxohaPYZtFT1q5Bbb9nRjgyQIHXX1C1DT0dgfk7aUPvZ5ypZJV
N4Yr8GHbmwS5LysuxuXdmWPs9prONYty1sMaqEgmXwRwJl5mz6lQHHZzmDkTmGRxLwki1xnq5FkojTCmLV
ADjjfmiEpGjhy7DvpD7R64dV
tVzScDiEJNz9LFgsd7lLiYdV
kN7hCtj04164utsQq67xLdsQLGI46Xr0LaDyOmx1J6LNGZ8himnQrC8pfL5qihqv9cbvWX3IfV
FSMmshijao2wf1HlEIZtcrXZKCcNqcZPfczvdVbJMxWWRlMbQZWHj794mqwVI2lJN5lnTPAp1eolV
WmbwCpiDrDSxKxoAF3TXLZCZ1MZ4B4Jr9ebuSYAJBuHrDX7t4Ma0rpytArV
td76iIJc36nC9CzSUoX5utphnhJ1jzTMiqVpJat7n4hQn5IsV
BFhZ30JOKwtcncCPH5MPhF6EkMPtvaSmaSVIJcJoFWmbFGxyYqeF4dZSzN8TCe6gT973IPZh0EltPcdHxV
2lPhgMoYCchVZC4GLHMNAbYTe8OUy70ulE3D6wvAxXPB7nO0W
0N756OkQBTx22wwh8urXy4EMDF5Pvy9pXZx8bp1gUQ9Ucpt9W
Re0AI0RpD1TPheoL2qbkUlCShAJ3EZKtVYo6UANJy4JdfhUQW
HFHfTgLiuvZYy0r7Y3aQu4UW
glaUiWpppOmSTjkrCVIhV6ma1ZJ0F1zMY0miNxHDhZy7xULzf9FsbAOcWyHjoYB3InLiLNZBaYRVW
0BNcYqrZ5MtKDirMuCvuJ8ZW
lOqedMakqO16GoV27wdmCIZeKBvHbxYlj2kSPyibCX1k6P8aW
l7Px8jNBQDWZ3B4tPPkXbuFW7Gaxtxeodhsw813i5ldTLA4dW
pDwXyqvvOaX0Djb4VdDWjXBlDAKyvH0cTBjZ1axZKrWB2IN92PjQ0TJ8wKTQMpjuI7GJgBJYdW
779F61F7hnUUoKapqAeR8MojIvqJGHtwXBslHGOq5X
lLg0I8jf7W1IX9oOM9mDnXpetNE0kb2Sdkfc0yIEAX
tuAghrRbnBvpLVHcvphtvsyP44u8JqCycHkzqbheEX
KnDohKBVfLWWrTQeXQbTt3IX
bl2r0w3512PqS8QDePLZ7nZQ5AhzW7DvBfaKCdZOWoZmKkSIgJ23PhgpYZW16Tz0RNlVqm4VnRdvQnRhIX
XFzvvPWXAU3j32KKKXqjp6Y8U1L26MFY76RS8MWCx6IYlq0BvJQGq4NNdtgKggfEtIJCcbGmVSTSzTQH0gWvaJVAimyeBvfMlLX
e9b70xi5junADQ6SfR2p3cBbUveCLw27TAXRwUUMnrlgiQxIBYNkCpD5vTX
LhaZSeFDNcMx2ujy8uOALL0bk2MLhCwKbGvyJiVrVX
mAsluzWPuaUIURarTEQ54UDjEfUJJasATt443YiDtMb27wx23k0KGdV63sgjimjXVGUOoAazsyS1A2Y2EuKFOoWq0ZjX
CT1hnuiagZ1HTTZbZzzh58LwNgjY6JtufZulL4WGtX
i9kA5FyA1pWaklWLKh3AVMSg4HyF2AkBExDnjv0KQKjB4PZuX
nnIpi73MmJ7SILKNQULtfyRquW54sUeyWjmPnxEMxPqlVSiUs4Gkd8ub8BHyBKNRr1gnrbx9yX
S6ied7XwFVg4D8ynpseonmzX
ZyjjrKggQpt90gCPXDXXiHAOB4q674EOJFQsV6Tn2EqpX7weRFHmAoULaSk5NDe17h26BiWxSmL5QxOwuE5Ywg1Nav5Y
MQZwPbfmKOd2gTkCBl3CfSz1SH6k5EqmEpIJgkk983AiXvXn8Km0jsmPNBOzpFw7qbBPkJFovtHKpLPsLgTA5jrY2n4gWDLdwAY
9lfWo9a5YJYidlNTfNA6ei2vc3Al0vyiaDZ35FuRD0WM1RwaicV7mqMK4ptkjk4tw5lvUAvQMY
pPEW42qyrns4el4eimDXgzSu7SBsi1wEtRdXCKOfjtE2IHHNY
e1XqA2eAJVWHV6Y48eDLxgqIAauFd2IfSbUT4EOlhmZUWe8xBHcVqFNzUtFK3iVszfKXqByMOY
TjHLZNuGwshDglYWkf67NvkavhOq1tytUmiQY4PiSY
xPI5VYsvTTa1hJi657Sldgq1XS6V9Jw8TkzPzKsJvI4IGwzfspRkXGYDKEFDuG3L3mXYDitiTeoDZshKYY
yCofwAxQsHGiVb5IH4LzrKy2zQqKnNIVpBmewyu7tpbaGOMQ0PTnDFkuhSw4MJjURILYzp0XeY
kYgSgtqsL500E82a8tVGFw5aOKluZ5VMsNYcaYEZn35xWbI9Z
6ejn9hPFWWB1Pg0H1YVKtWCZ
x1Px81shj7qdppotLKgxSsCZ
owXXicTHzFdkyRqc9xcwYnYuG2zPMzNgTKckfbOyIZ
DEFPAELDiiePshWqXyrVsoqOXIvtpBTW6bYwKUyBFUZoDgELZ
n5v66kcN3bTKiljbWExpSELpsZzML9rXdba9T9hqe3cHZmDRZ
ZTv3plPVIanvKuCRprsbCyuSVgRobQ7cE6r0C9BhfZ
eoslcxppjbjXcdmYib0NyUjZ
iLgJTb55xBPC8Vx02C9KtC3cNlfQkbZgMz0DsPPq0DHjQANcwLjS3R7QCoZ
IO90bsD5xjTBvyx4QOi1tc5H0ntsNe9Mf1sb2N0tsBuAJ1Ci4dZVJOqAxZ1TdyJAvATZycGuB3HtZ
Dispose__Instance__
Create__Instance__
value__
8YeEgoNH7uwLaJayBRIT7YJVcSYkml9M6DsPuTuKMKrLbTr7a
K0jgcSeBVTR6pKj1rXlKvI9a
xp7Yqep6KBkU67EwEtgy4lZqXju5SsN3ZVUiJaAiT9qC99lFWWL5t4dRNEa
hIuKVF2e2HJNJEBt9gJLmxl6TwOtBuuRwNj1aW1kDRRxszgd5F4eDSgVFc2VDyVql9raLtiWIa
k2BBL3RXGyIzguRlh7Z7rFAeUFOdX2zOlvlnZNuLPQPXGdSx1oQHGsDzMSKBPAUQj8X3wst0NXJ6RjgFRMbF5i5NcGKa
aQ6kmGiiZwJEbBHCKDM4beba
pfC2q7PjvBwnv5pQKAy3ZykQ7Gb8v3hrOPddBsZdda
EncOcO5H13pOll0en9TIC5ja
ProjectData
Ygu3yn9R4xk8Kq6r4DOaz8boOheC4jRexkJMZei2d3Euh1rYhqVHTx8HHSkZYmv2doWBT2t55xLhiZBLwa
pR1e2gFruTuxIer6IoqRo6DNJTZAImG0cTyyMiFkOyKl35PJb
RBYrAIrfxUqKsTORleaK29TwZitS2tHptPvibhDSDzQvBHeLb
Wu25kIZgvixd7P9bITlVLF5BAs62glmh7dTvetnyIvfpiGHRb
0VTPTAAZHQ5Hv5CmdlhH4D9mpX2TOHXaLFKrOjLWSzIR6kdeb
LT1JwH8XlBtR5URkdmbBpSnihq201eR240vpgMKYjMQyBWxfb
mscorlib
567HtQYzLZw4TEEcNexpYfLF2Qvg1DwxywrKyJ3hWvwkwaK8DMPJNT0H1Zc
GUtRzwq9wlQjTGAfMvcHul1n8CKSCg4xOIRhSukQdc
65fYN1kuTRrm0IdbgcSFEHNDJp3LvNN9BJB8p32DushDOXOjF6SdyV5Q5nxgyplo161OQb8V9xmhc
System.Collections.Generic
Microsoft.VisualBasic
RHysLM1f3jY9qG1YU7e2Sjlc
obfnabHJJPFH1zQa5rdSryY1Oe8hQl7NLLKzmAA4nc
LowLevelKeyboardProc
lsUkodgJ4jFCEDwdZ5MeNuMWNF14FvMOiUyfyi9xxyKx9myoc
zqPpVlQDyJ2qiJ7Ja9UrulAd
YsqrwUcZXirUSxkQasMSC9Hd
GetWindowThreadProcessId
GetProcessById
TNdeIX00zSGkftsGc6nCqnTd
Thread
RijndaelManaged
get_Elapsed
2r3AUjcQwNuynRQ2Oxs4HYNSapmmddRrOln0XAdjgd
EndSend
BeginSend
Append
RegistryValueKind
set_Method
CompareMethod
TargetMethod
7ioYIUrsmyrv05XN5nbgJRGg56Egk0rwBMTUAMUTqd
hT6NWKJTlnFVy7tLnc45KRWW2hh5AHZNsCYWaAEwR9tfCDuOkL2OcJ9y07UPUEmcVBlvkvcKzd
cKKdYdkKDSLyfbYCPxb9yuZkHEPHzn6dsRxDYUO2KdpVsWJGkLYVtO8aND4V3zJaHP20rZY23e
ohHBVkAa8GD7HRaMKLeStOCm0kDg30hKTW5DtTBFf2Hb9onCe
DHVFKoOMggLrNdHEooTePnJe
iW5fbaXzw44OeBRc5WooJOMe
kTgtwGVyf3qJo2eBC7kudjN5uqnwGNb5z7bjJol3KQ92nXDPI5WsE2mxZTe
zzSY7ATe7aAL1EfdmPmXrcsyRNdzP6XFGZAXTyjcTe3I5A2WnMdEAvoxSS26Y11SRAhnInBwH3GOJVAObe
Replace
IsNullOrWhiteSpace
CreateInstance
get_GetInstance
instance
GetHashCode
set_Mode
FileMode
EnterDebugMode
CompressionMode
CipherMode
SelectMode
FromImage
DrawImage
get_Message
EndInvoke
BeginInvoke
IEnumerable
IDisposable
Double
get_Handle
GetModuleHandle
RuntimeTypeHandle
GetTypeFromHandle
EventWaitHandle
Rectangle
DownloadFile
IsInRole
WindowsBuiltInRole
get_MainWindowTitle
get_MainModule
ProcessModule
AppWinStyle
set_WindowStyle
ProcessWindowStyle
get_Name
get_FileName
set_FileName
GetTempFileName
GetFileName
get_ModuleName
get_MachineName
get_OSFullName
get_FullName
get_UserName
get_ProcessName
CheckHostName
DateTime
get_LastWriteTime
dwTime
WaitOne
WriteLine
get_NewLine
Combine
ChangeType
UriHostNameType
CheckForSyncLockOnValueType
SecurityProtocolType
GetType
SocketType
System.Core
MethodBase
ApplicationBase
HttpWebResponse
GetResponse
Dispose
Create
MulticastDelegate
DelegateAsyncState
GetKeyboardState
EditorBrowsableState
SetThreadExecutionState
GetKeyState
Delete
ThreadStaticAttribute
STAThreadAttribute
CompilerGeneratedAttribute
GuidAttribute
HelpKeywordAttribute
GeneratedCodeAttribute
EditorBrowsableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
StandardModuleAttribute
HideModuleNameAttribute
DebuggerStepThroughAttribute
AssemblyTrademarkAttribute
DebuggerHiddenAttribute
AssemblyFileVersionAttribute
MyGroupCollectionAttribute
AssemblyDescriptionAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
DebuggerDisplayAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
set_UseShellExecute
WriteByte
m_ThreadStaticValue
DeleteValue
GetObjectValue
GetValue
SetValue
set_Expect100Continue
EndReceive
BeginReceive
Remove
3QZ1LBzAArWLRkVVUz6mnMquPYLUYKn4GYbrAKtUcklgkVJ30QGo1CX24LNa1wYppmv7jf5e9CQwe
XClient2.exe
cbSize
get_TotalSize
set_SendBufferSize
set_ReceiveBufferSize
jhIN9Gr0H32wmgTMKkHG9HWKxayzIXkKDZAXSAED4f
R3MoUhyzDyXMt4yMKkPtme8f
h3ZytlbkW7fMjM0knOhfeWVuNxYmOTjOsoqldxhAJ5hFn5RFf
XtzmDQXYQKBQjaVKBq5alhDJhOo0D7ERihF43ndAgDhKKwB1t2Lzv107Wwgs2pMNS68Mq0KbJf
SizeOf
R2BBII9Sfji5wz6egIqGpVIezFH1WaURnGh4xTfdPqFqvievNOcyce0FaSGmNQwU7PvWCM2uZV5WoPQqmlFeGGZH7BPf
Yesiwcw5CCqfifG3hwdbtlwBXnKUdGD674KqDZFCnvnsDi0gf
qrgbuH1PNe2rdIgMZvhYkXnf
uN6l14YT2b5Z6hcmfNVHH1sf
FA8xXDrVsEl9g2CjaP1eOq1g
E2QYcO34j6CRvcaXOlVeliAfcMhVILM1WDz4X6jLLg
ZZoQQNt4lFu2SmlAGZ857Z5Z0vvDkNIMmkQk5tdGJYnu8nkSg
QjCGg713AoBrpi1I4w7L3PPIezu5mT4uXsPCWB81eZEV8EVr19xaHwBl9IuwkqzdW3PrKKjbbg
get_Jpeg
mdB1rsAcApF0uAIQCITcIJfg
1vbPVCRqQjPteFMImI4COzmg
System.Threading
add_SessionEnding
NewLateBinding
Encoding
System.Drawing.Imaging
FromBase64String
ToBase64String
DownloadString
CompareString
ToString
GetString
Substring
System.Drawing
ToLong
set_ErrorDialog
ShNrBU816qOacOmRI4rMW3tOgMmtYEvdY50l3EZL47B2fCTAYPcJLALkODgpibt3e1lEWz63rg
jOXNfaGlS1briv3Vxb9TdIEzDTTELNqGxXqys121Lh
dAFaDHbMhINOtjSPxoXGnFWtb6p5YtxlOXLug2zJLh
JZVvRn9eFPMSdok3NqoPlgVh
Stopwatch
mrEe6CGPvCJ4awE355DjmFAIymDRByHWO9RPpFYgdnc91znfh
PX1rl54iu1jVtgIUYBrpAQlh
1BYeyVHXFENnhZnlZ99NsauGql46uIdfDgK1woamhtiTNvqlJRdR8mGUFMf0L7DElMCZwU6jxVNsh
ComputeHash
get_ExecutablePath
GetTempPath
get_StartupPath
GetFolderPath
get_Width
get_Length
EndsWith
StartsWith
aZcIL2v4gJ7OgqXLiFnV1k4FpoRbltNXr8kZLEsNiNmwbnKN6fyv9RizYhofTuKPMrDQdIHa1ZvFcF9Vn9Rk8PCThYzHgb9Wn4i
fYOuP42GswK5jhlQLKpJbVuXah536m74wtH82ciz5i
iwIzLeYIlFt343odUKVZbBFi
Vsc372qPaXYtG2hN54vYjWjI52BwsrXtCbXNgW25MeD8CtObctbvie7uuVi
4lu4g5l8C80pWETjRzjWbThmcQDstH8QINDwfnY0ci
A7UMHDlNaU4fasvT8CpGm6VDNuj5q55DCaeG9iT8BsDlueGQQtcBpgc83jxfdpb1oAMliiSNji
QSj6YP7mPtX7aTHyW9mU81eBunH6nm4Na7Q3dzBtsuZ64yH40X9xj3ELCoi
cy0ukYQNoTAlSvLZlOwg0RyCBG4ACAESZjlvaYYOUUQ7DhT6YAA2qh4anQnzaFIt2LPUXQVRoRfH9m2Hwi
TaYGZeuUA7Cnsy2nqUFFni3ycKtcQH9IZNaGtqsrxi
LUhjylXbcaAVrIDsPc59V33j
3bkqm3luCcVpigHsgUwht66OZ0kltsTKaapeYLrH7j
IIXxLOmRkF3Ha8PC46KrSIAfhP5ESD0zTjRJ5341KXufTaMoDdwfrXWV9kOwXgVDqbzDvxPdEW0Nj
DWK3NOEL86CduxOt6PAspkNJSVn6dwdjTEalCxTViLQtjeJdj
txGs5hlzNO5TPjqyxbbbLtKaoaNZaUgIA6Xec0HUW2dX130fj
5rsHYoevmkrRJupLIFnbGjhj
GxHXqObL1Rm9QfgGIFxqDDpVigeYoubrFzRt6CUTBk
QoKnmos0Gw6j5a6cllkuKiaiJ47rN9N3gMSWqiNbCk
iklAsngdmTLHZsTs4rB206MNG2pPjD6AViSf5qpuih9GozfPk
lvnKiJArFS3Icr2XMTl9pATk
l3OE7gI00PIeybrprnjPBthnSinm5LrDiH0SqugtFN0hzIOi1JMx70z4DWDnWR9nZEB4GZjYWk
get_ServicePack
AsyncCallback
DelegateCallback
TimerCallback
RegistryKeyPermissionCheck
TransformFinalBlock
VH49nmAPk5RRE8bBeF4v9Zos3mTSixCWCk8yiM1JGyCViGYlCPaoTg28xzAIerbcvb7D74LXEfS35eENW6LuN9JWaXdk
y1bC94o4b97FdcJO14dfLNfRXgdPfiHI0z7wte24xuxRjK9ek
zWxEhzFd3afsCUSQ65YmLVQvOIe14VjQooDRNw30bPZyT325UEVdr1Al75Mg5nmq7Qu1vsyxMUNjk
c7zOeypfVJULnGluYxWh8us2Fc7uC4q0XNCSg3uvvl5fdETok
3xTlXsN9odcOumHLkyZtpjPMCGUTV4V4buybPSwpiR05gMAqk
fzZqmBcE1wyfoD1uF2EL5vfRXK7NqHNW9e57Foe3MwJGym3kA4MITmtFeZ8jku5LjricuNx4TxMtk
wpPIM9aHBMXLERYQheSRhd7l
LsKXfCP7jftCSzoHOAq7A8r7zRJCl35Y79G1sK0zii3CTTj5zjEl4kqW2CKItTwvr00gwuxqgbrtXXHzH979HcqXB8Ml
IKVTfTQ5L94SJAmSipaH4lQFjw6yPT7MR6P59Yuwijc2yicBbSxTftzVOzqDjI3p8s6HbEbaTl
RtlSetProcessIsCritical
Marshal
System.Security.Principal
WindowsPrincipal
ConditionalCompareObjectEqual
System.ComponentModel
LateCall
kernel32.dll
avicap32.dll
user32.dll
SHCore.dll
NTdll.dll
set_SecurityProtocol
ObjectFlowControl
WgmbMlhjL8JvcrBeHSRUFtVWL4InvnniMdv749WOQ8VK2h9c0DIBhFpbQaCMYMNXltpVk5ULlA4QhDiJzl
8ZA5YCMJZtcPkiHbuuIQMoYOAVeUv2HFHn4zGdIH4m
8cJu6m5IlzsGM83Cq6vE0EBUgdfJ0FaXdFr7KPoSJXJiSe1MPyQFw4YW9kN0e8hK9Mt33LpPiINAm
UkoUyOeiUusyphdNicvgOUMm
FileStream
GZipStream
MemoryStream
lParam
wParam
get_Item
get_Is64BitOperatingSystem
AcovUBEHnfq221hrIwyKoXWKJf5dFQb5JaiPVxAShm
SymmetricAlgorithm
HashAlgorithm
0Xdk1tprszo8GircfOiuVnk7uQLsuZ0oIc4mxT66YEt3TYGhorTeqSVG8z6s2D2FSyjXmjlGN3Cim
Random
ICryptoTransform
pY52VZgHNyuUCfa0t0gyuh2Pv0Dd2dcOusnT8Ivr8RrbofnF79J2PU4FZKeFLYVS0ctL7NvXJSX45TOf1AmNqY3gAnum
ogVMFkfmFCleVJ0dy7ZGg21MQpRPPJKvYa0Zbhmwbp1VOnl4n
mAxJfZe3sditChe2baD2ge7o2D99ZLO4rGAiSR8CpIuhH6JBBWafawy6oZhs9yNtxBGyfr18Bn
l7eShPpxZjHs5zQEGn5fFwEn
8GvteZcL97VGfAFWuXPmjs8S5jtSM17FbmF8rFZHLn
HYTvQbScZVPEz1eqffBQIFIz145WhsAhjcrxvJeOx4yBHOesxMMdDauCwm1sU1KfJX1V6vQoxEKTn
a9HHGN5WNDR5UnVN9hbBAQ9oyKt5i3H9kzldHvAUU3Cp7P9Xn
7DNAc2EFSyA8c9exc7LiIBSAesNd9d2ljskXtvEPan
ToBoolean
op_GreaterThan
TimeSpan
CopyFromScreen
get_PrimaryScreen
sgLxMPrcbsne4rEVYupJBvpkvkfZit0qwcJXLF7culY6K9zaYKcQo2gzncdVnu6WIGlcHfQDikGfn
System.ComponentModel.Design
6GAN8KmwkIsRVuxtrl9ZlRCSbtrZU0Ihpbggfs1IsAkMhqUin
AppDomain
get_CurrentDomain
iHAZjl8ezEO8z1wQOxz1T5FUf3BYGnyx3hh9qJXr65zQqCpjn
GetFileNameWithoutExtension
get_OSVersion
Conversion
System.IO.Compression
Application
CopyPixelOperation
Interaction
System.Reflection
ManagementObjectCollection
Exception
Environ
SocketShutdown
d2mGvoGsrmUsCFgNEFIPHA4o
t4js4hJ5WGx3F3MkFTNWOLfoSmro7dKQ9kc1eXsImcNbkSG4o
RfN6wFuQXHM7eSKC6BedJ8lFunrks0ESFDoBKpWi49rEgzQ9o
wJkLVnYNCW4tz9GJA3BFttP6PniNlM4NPyW5mkHH8hunwm4At3INckarxItotz0RF89B9SBiDo
K4dX1YnFg0pd5LpRzrFXflUPRNiNIXh28bAgOvB3Ho
get_Info
MethodInfo
FileInfo
DriveInfo
FileSystemInfo
MemberInfo
ParameterInfo
ComputerInfo
ProcessStartInfo
GetLastInputInfo
DirectoryInfo
OM9MkMxWUIiisqOk5oj4y3jo
aESJ5ynLAB1U2pvqxuGvBCy0pNjDbLCNCNtJCJIH0hFrilWxeuIA4WSkCRiN9Jq0kLSkXFHNTZjKJvULpo
v22MSPuBGVQDQnQaQVgBfLto
6XXJ0sKV0AEusFtcLMYgE5Mllzw0lnuMyTAhsbnelhX74btYQpOeXJR2uBMoBNjZJTH8z5tl9p
jclFBT7W8Z8hMYs1szznx4SiPSDTC740NFhyvhjdAnvCq4eSayOfS1ZokmcITfMjV7iwEH6tBp
az5M41YCdRG20awgqkor3EtJDE1he3t6OSl6dCnXOp
Zl9OOE68bHUeYrJTvI8BJHymNf10PsQjw2rOdzj1vzWSY78Qp
sC7RinilkL5BeaJ85eip9sYp
Bitmap
sUAdIXUtfkHUAFeCiyu1QuEztgy2Vumo9oYXso0naaByFZccix2IJbaTIsp
iIbFjmkK3RsqvmwsEEzTb7bUmfTeUUEmCSLIoB1YQVvKHXp8KIamK7753Sawl5reu0MJ468BCfpOgWNbsp
Oof1sDYaLt14E03cgsg9EDvp
7b9T75zsBtsU3YeizHzf3LpGJ5uud4YMJS51FvezmcNoSzYcShjZ8utt6TYqPUQlxR3CIMUpyUhiI2PVk392KHpVlMvp
bWwJ75zMKaSmU6X1JgIbtzWLjbJpsrNRFX1a6TmbcYbiH1Qvp
ggUzVbu6o2l9GVqf4CBdmZ6q
PiLlHXChPvdApJO3JAfWbMCD54d1v9SmX6QeXu8k7q
0mQuxqpImc2tao6IwPnQmkkmKWrSOTuVgSeZkXbF4BvW1xtFq
Y32SlhamHNThO1IeAuZ40t5BQNkz5mgYTAX82tuMaZ29jk2Iq
Ev6OaJoO37rv5OzJfqAvfCsEMAGdsPDbC4xNEjLEoV7qWjVMq
kzh8IZoPJNfl0OxMv5De2EOq
a5sFBdD5hrWtJWlwafPKjeQq
M1hjlgeB4AZ6EB6QHRiNGdM3lOnNOMXKpOI2gyyfaxWqqFJTq
lFAZCahtCPqK6EvQDQv0QZMuvFJFjpYmQG0cTpIfUmouw8vqjtCbX7AyA5n6XT1lYyQJMFb1mP8zbYhQXq
lLXtP3wMG49BJ7jML9JxeOYW0yiu1rJpDLDLdULvhWcdCZdIkupVTP8LF5MgPlpFPJsJebmWUB2QRepgzBZKDGOjQjXq
System.Linq
VkTyAWy1isQOsGnDxEdEgIGPQ1FD8hD1h3mTERfNdVpPTultq
pqgua0o2tKInBYDGWIVlDQJwokTOwag6K9Si2cDBtyMHDjFNy69HFiEhVe7pKDc73VIsICLvW77Fr
dygAeHlotOdMAyt9LrLWvkriPIh2wUvcn0emJtSYrPcERyN7aU6FXEdUH5WLi6RAPw2c3ZBjLr
KFeX24bQsaFS9zfM4wOaH1Tr
H38v9tB0CDUXP81qjJmiSdSWQPLutat158o9BCdeSeuvC7uB1Ja1acV6MoEbwKmAKS1yvZUQj7SVr
63tdwwIzkZjvoDpYJRfOAS6ANhYc8SU5yNgSvh0Vdr
MD5CryptoServiceProvider
StringBuilder
SpecialFolder
ServicePointManager
ToUInteger
ToInteger
ManagementObjectSearcher
SessionEndingEventHandler
System.CodeDom.Compiler
ToUpper
get_CurrentUser
StreamWriter
TextWriter
BitConverter
ServerComputer
ToLower
ClearProjectError
SetProjectError
IEnumerator
ManagementObjectEnumerator
GetEnumerator
Activator
.cctor
Monitor
CreateDecryptor
CreateEncryptor
IntPtr
Ns23f8UZ6WTHy10sR6DS9MtSkW5vzuQ3CkEcmy7nCx9Sl7fu1WdZIs0scdmN1UnR2Vccu9wbXqQur
u2nu28hBy8btO1Z1YJEUZ9UGSXuun6lb9aGFXcQnO73lRLQwr
vrZfTm9KY1rgovCpAcKbTn43MEKnO3aRaQdHD52V07Afe0vlX8m1NJnJ8xAaMPYAxmcgMFHQYpdU2zI4Hs
AMlGyOWJcV5uzZ62X57FxEM55CS0kk4x3VeRWJ8kRN2SEk6TCTgwaTOkpD6WpJU0oxjilapAswSSs
gHlkIig0g5mHrNaubM40pBUs
NOTV7m7XxJin5dNvG9UaC9R3uCdfO1MNFSjEoeoTLcexwgfNWTLRxFx8iQuZm67qFRAG4uSgPqZBVy5acs
Graphics
System.Diagnostics
FromSeconds
get_Bounds
GetMethods
Microsoft.VisualBasic.Devices
MyWebServices
Microsoft.VisualBasic.ApplicationServices
System.Runtime.InteropServices
Microsoft.VisualBasic.CompilerServices
System.Runtime.CompilerServices
Microsoft.VisualBasic.MyServices
ExpandEnvironmentVariables
GetTypes
GetProcesses
GetHostAddresses
ReadAllBytes
WriteAllBytes
GetBytes
Z0VZbJ2BsW6yNNzHoeBjqoJcphpukMlulRHt4u64fs
SocketFlags
Strings
SessionEndingEventArgs
Equals
System.Windows.Forms
Contains
Conversions
System.Collections
get_Chars
RuntimeHelpers
GetParameters
Operators
GetCurrentProcess
SetProcessDpiAwareness
IPAddress
h4MXkkgTNIAUFoqmR6ewICQcQBbTDEUv9jMKz8murYyO1I7jBJDp5xSkPlmVrzIUc6TW93IOfRSwvkw2xDBGoOwqVhss
System.Net.Sockets
set_Arguments
SystemEvents
Exists
K09ZIs2w0kJqaZS5VYxBRm4t
YxQLn57T2WKbCa0T5qnrxViRuTnlBJN8KZtBKvdJgcOoDrVRRpiyCFqRH5pAUP8NVWPV9bPfzItFt
giC2E0Z0KZdgluYk79K8gmhPNQ7i782uyVu1L88UeCKXyl8Ht
rK06cquqjBS01owOlrTsD4lOsSZ9WNFNpfmtnoe7Qt
IzPwRhNVOWvXEIy1yYnh1WckmT2xGUR0CZVuDcQVv5Oiipjlkzq2pG3pEkLm9KPkVg4kgVta2xbYSqSEODzfvSzQRTRt
ICZ3QUJlZNprRJLDW3oqJb49GCPBqn3RXzjVeN6qVt
Concat
ImageFormat
PixelFormat
ManagementBaseObject
CreateObject
ConcatenateObject
SubtractObject
TargetObject
ManagementObject
Collect
Connect
set_AllowAutoRedirect
LateGet
LateIndexGet
System.Net
Socket
KidgqzZlbIhH4kjhyqFgch62vJFiyPTXIGiUS23TsxgnWv6LuURy2BE1TTECD6zRrkgl0r7mgt
get_Height
op_Explicit
set_DefaultConnectionLimit
GraphicsUnit
WaitForExit
lKxen6BQ1TbgyNNRR6DS92meDqW5KZggFBttyRC0jt
IAsyncResult
DelegateAsyncResult
ToUpperInvariant
set_UserAgent
WebClient
System.Management
Environment
get_Current
GetCurrent
CheckRemoteDebuggerPresent
ManualResetEvent
get_EntryPoint
get_TickCount
get_ProcessorCount
GetPathRoot
ParameterizedThreadStart
Restart
Convert
$VB$Local_Port
FailFast
HttpWebRequest
$VB$Local_Host
set_Timeout
GetKeyboardLayout
MoveNext
System.Text
ReadAllText
WriteAllText
GetWindowText
bzFHnrrICatpwmxs0V6h8jQIekhtKAD3QbkTq0giAvRkJWn7u
scMS5M5rkOL8lgVpNbNrDlipnwlQhL18bwpxOMTU8u
qCM04jyXgv4Q1zzlo5CqIc3MEVUu6GENheyld68iR0ZlFlsD3kpPA8DUDaslWlfVdHZFacxadraDu
K1mBlHONoQP8ie8z2MgYXyjA08u2oQHtxPbQxQDjDq5m1P2Ju
jejjc83fz5DnIB25VcT4VK2EJk9rIqzuLbP6H6iwv0bgu91rI14e5MjxIG9wisgjiBaf4u4uVUjnu
HrseXMAel9TiTtKcGqo8gdAmAs7IsytjvGHWCeCcxwsQ38Zqgj410KdXZAOUSNV7cVsvTJkI1v
LM6gIIjIzl3Gbe5pEo2lnNaGWB1iCTZV9e5XxqJsoDYVW5V4v
qlFUxiixJKHr44KoIELkJC9v
MKAaHFXm19dJQ6Fpv2EkSZ1zfcNWPeWYXhS803j1fCogR6DFv
wwpOWmj9DT8rbqbxjCrreaLv
NCiHhPWG0y4XqYSg0hXIbXbv
UOuYL5J1bsPdDi9IhEJFBvSoC9WTGGXQDTt3emJ0Fd2SMWcev
TXSpOryFsvSmHDKEaiqu4ftyqxeRxDcgJHfyeJhTazgkg6jfv
eP589tR8UQuTWH52cDF9nFCr0PWPEYfa4EBITbxeUUIQyoq6e8Pyy4tPutIQQMmv
Wgg1P410R9dRftX4jw1EUQmv
y3HyJbYytrgg20hW19dyxY9BWCyv3tB1Z97NKksDrv
7iGqvKpaDwkJCjv72l7aZSJQAfWD9rKQdZfFj9QGvv
pfS1urSlz5QRNma6jWIElmoCE1yvjd260jOv5wUSogmPRu3QkwkG3g1NFzv
LNswOZS2xA6Y7Sl6HzWPdm4w
A8Pg6pPvkiohcgCE51x3suuRorpN3JvOF2SpDsFMkOSR2p0fLphCr7k2YYJKMxXjxowBdQOtHw
rf6L3zNV38dC1sz6iIJA9ExC0efkezFnajf8ibnZ5RAClAJXw
IqN7tQZJIkQkYiaZw2UHPvjOLNplGGA3bfFKpFVEdw
GetForegroundWindow
set_CreateNoWindow
8AqZFP2jFZ5H71XPSaEzeFww
rk1hpq4lABc3ZS0zmUR8M7TYKKAMGfhXHLv9k4Dxyw
kTtQf2NFiGThbAs4gqfZLq3x
ToUnicodeEx
UnhookWindowsHookEx
SetWindowsHookEx
CallNextHookEx
fR4EH9IM7qfqxAAlfMBbOZHx
Dlqz2iWLlZ3kkPngIFGEFfHx
ebzR5dOQL72J85S9xGsqmulDRAkLpCX4muQCNS89QbtJtNhulPOJNX1YUB901FcPQAdvd8kcr4LKx
2j5EamDGlyYo0SxYznGpy1Px
gsaRYlIenqNIqN8W2qxKREqvtNItKozHG1rQvoKmm3Ys6j9Tx
LucW0Sb2FKEPVafH5s4dixWx
LateSetComplex
vGgJc58FKMoLTm4zArYWOczuI1uBjVobIVAXXxajnx
tkjXAik945RSTsiwO575OHpx
Gk3Hc47IdV1Dl0qVb2clEktx
EDL1k407z8ahgelYRxcKgawiNkZBseSUKMbacIGJ0Z6RZ3G7CAivo0B8a1dMJPomhTsJAZ1D9Bs3y
e9oSgEaTvYTiR3162YOIrgnhhIayV71WDwZ7ZOVqYSGdteXRonOPPxFRCsgF9RoYxVGsIPo1TBST2U1c4y
NjGgUM3rBBkkUyq0aYYyw8xFdpNXSIAQngJrLJzJRYAWkQf4y
8f1U1ANh0zcIJNMKZU57IfQy
iueWwp6h4exKZww0pDPMGR92Dvk1YLRdevNjgAH6pCSqfaYWp8XH5XVIZUikESNwCAdXo3Vu6c9NBbV5X0Mu6Y32YsTy
ToArray
set_Key
CreateSubKey
DeleteSubKey
OpenSubKey
MapVirtualKey
RegistryKey
deb3AHKvHxSplfDSorqGEJ5sGCLwpUGuBk3JnGehYAfjijFtwkpM3dK8suhUW7sqthaul92rKi5qNGqsey
wKkUcDWBtwLaf26W9jNBntNftrH5NJc8zm8bBdgLZYiJ5bpfy
System.Security.Cryptography
Assembly
AddressFamily
bq5XHKv67JtDvqx5DAyTLbYGtlSlaaW6yPqaNuGajHn8N5qmy
ObjectQuery
get_TotalPhysicalMemory
get_Directory
CreateDirectory
get_SystemDirectory
get_Registry
RokoC53pYN29pFBhgR0gef6G1M2sfxsn6zkvFYRnTEIEnDtsy
op_Equality
WindowsIdentity
IsNullOrEmpty
RegistryProxy
8cfo7fef7HefMjfJgEY47i2l1y7waYpPmcckDO8X5z
nfkWBjTv121lZIyg4wr8ufWjtdaWOGDcrNjILSj47z
mxxX3UhF17Irim1cVUqTWWjAYuC9MM8ruZk9mF636a7rmJBBz
ipC5CC5q96lgpmJ3K04BiuFz
me2PfE87Je4Y3OFMJvMJMWhKqdFWHw6dvQNmnk7fa7lgGmhJleQDiiQfLq8MsVRq9SYPxwb4dz
hAdDCLURN4BRduS5JixXkJsytf5Ix5gEOHyhNBeKBEnsUv2ez
qwGiXNvFSMVuWXnGDfdbxTcdE2g654aM6Bb5UoFmuWzTHAyvCqYd5NGMFQzwKb4CCTtKYysmHrhFz2ylPekgamBLnuhz
jtKG8y5UJ4wFWu2pYQ0IWzFS9XRyof3Abcti3NInk08PmiJiz
YoChMuGSCK3IAeoHar3BtUgQ4SqcLoqxGptmqnQx8HrohrHqLBWkXXB5Y1MvVQIyObl9ziYslz
hwZl0GBSvwSwwIXDScnVaSeMtFix36o2ksKGBj3fOKFKaz6sz
WrapNonExceptionThrows
$acce362d-50c7-4d70-960b-fbea02662518
1.0.0.0
MyTemplate
14.0.0.0
My.Computer
My.Application
My.User
My.WebServices
4System.Web.Services.Protocols.SoapHttpClientProtocol
Create__Instance__
Dispose__Instance__
<generated method>
<generated method>
_CorExeMain
mscoree.dll
C]58W-
j#*=R9b
$DL1Za
QA$!)"1
R h$I*
>q{?1U
dqBT_
EC6IRP Q_
0jH]O5
gZ$\v(
ykK;isQ
CHBTK4BT
wy'sdg`J
J53~"K2
hIjTfmb}
W~S9i}
"AijKj
stX5E3
U!Ah'B]
:jG524#G
}.*:;L
-}%Vb~
(Ums?CQ&c
d.hQ7D)
")3G(a
yrr4c&
\PP"Bj-)A
&(umKA#C
uG(\%)/
IsaQg8
}P&m.e
ag<o3U
]r^L%!
DVfAij-
/;t;,U
Ys9/SJq
#5]TbR
&D&*L413
8x)'OG
g|sLU9
j}=c@\qY
oo-u]?q
2vWH]G
{*Ibg:
yTj1Ee
1n@nP2
5.m_`k
;N=*V,w
HT$&.>
VWWWUVefee
#K4[W`)}7
fov`?!
DFK:oR
9}pL<z
{S^nNU9(
@bK{rn
#|i%t}d
&%_o)@
]JN\l<
^'big%
/JEZvF
|/*|CZ^
P.SAoW
ZqT/X45
LoG7d_)`
X6"[MAu
nA0Y,>
X|gl<(
&0_6^>
@xcAxj
%0j)w0
\.ftSe
}0XUw.-
,@v_C5
)nu3sp
=\'EF0
4VDqrrTZd
W|z$[q
Xwi*:J
Tvtk0M6
MG+4a]
h<zCfo9
uR$ft(
ktRx$K
2]T^91
ipS\2
M~g"We
b2Sj:
CB&;!{8^:6
o?8Yz6
$x7F*o
Q^=r8U
z`3dbT.
p[\ao{I
@Nr>qD
t%J>d8>
%O$$v/
yxDFdU
Sj7)2"
Qo'5xO"
}`Ta4
d#coF,
:*{wT\
H/'#_G
bpLHQLr
+k!ztYH^
a# 4a%#
t)(m~.-
r*'=}.-
p)'Vz-,
r*(%|-+7
x8*td<3
H!fs@ W
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
OaY3fcKIFuwElQ17iFziiCD2
hmyNogjl7x4KZYmnLwCNcqpKBDp8kJsqKyuwUqrorF7NKMD7O6IMRLwNDOqrE8KFaDsQJv6zswMIND3nhnCGchPKHhpeXy6vMz8
hn8wGMyNZDePoDWiAaaLlqZkyqG332n8IeTzSicq0Ff5g2IdvKoD0wkYIXkzUBfAIMNz0F2U9osKcFMuRvjhDUjQKlm8w3Z8UWW
7CHaZomS60huKxk0ZQWyTCvRK02zxNykgZImfYQL3yYRNyBCmtOj8s4navo7c8XUrPKaMNGIr2gNSxZxyZ7kA2Y7YZZ93cPdG0f
jrwvWat8r04QrNDfFc2Em8ou6le97FkJtf4OeEHbJLXAwrJqKZFAbDjXothbUWk0sDQjZQU3hPulkuoSzKjtKreiEq4BF5oBzWs
E3BSXQu1oTwPoYbCDMn76opVjoLincVA3yPUZbBg9U
sMNvXRPqMsQWbJPqa4xqSFJh1TvPN9vkyDJ2KqxRPM
OtrxwnuryJa+rjObGypYZQ==
SJCKjujmA0Zq2w+FMZ2p5A==
Lb3jPAgUXZVU1aLO/rmOUA==
5/WzkIPtAs86jdqI99tHeg==
hD0Xkw0L3mb280STlaLE3g==
BpFZ4nH9gWQj+ZFiyQD31A==
z+ZLw2DDVqsKDAwxwcJpKg==
5HpeFDtkH2DrrPucifYWqg==
yjz25OZFN1rYZwsG
\Log.tmp
oeY8pofXs3ik4x75kNOpvwx1EIysd2b1YwiaD41Nve
wuU0VHVuY5Lw9Wu6X1ffz40JegiZWFBK6wjGqANy1w
schtasks.exe
/create /f /RL HIGHEST /sc minute /mo 1 /tn "
" /tr "
/create /f /sc minute /mo 1 /tn "
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
WScript.Shell
CreateShortcut
TargetPath
WorkingDirectory
powershell.exe
-ExecutionPolicy Bypass Add-MpPreference -ExclusionPath '
-ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '
http://ip-api.com/line/?fields=hosting
Select * from Win32_ComputerSystem
Manufacturer
microsoft corporation
VIRTUAL
vmware
VirtualBox
SbieDll.dll
mQC92uLPKn0yJg4u2ybbxcyaZI2pSgwQG0lg3jSUsf
63YTuIj731f0kwToC70bKR1qVLzQN59jnc40lOQU0j
LCTAVAP3myHVZqwewqETxLMNb3YhVc9GOHaDgJIQE1
ECuvJGnDWmgEzVwDLQnZXiRqkZ8LPCaEmiyEoyvHRu
bZGbljeYri6F3ijYVtFWQhk3fRtlC9EiTWHFYDMX26
REHFevZ9dWOZIMv51SkEb6MHqJ26q0xmafeAxiGkNC
Fkgt2Co0LFzRDT8fE7Gvu1sjhDxKHjNaNEexar2tj2
3n1Ln4CWCZeJ6ZrgPXtILdPlUsr1BIegJ4F7VQwVqf
hse5eXo7h5SNQHPDNqEJ6aWMxeClwSJClCYTnbkm4U
XxW9Bsn1ds1IZbWBQChtLRUZMfbftzMeNjsC4eld6T
8MVAmWlCSmusEcBQu3qdNGJBbekaxyef2QpTnLfSLW
sw8VjYo5GULdJu9bZEEe7As5lyKGfZuuYUU69KscKR
eSvzu2aJSSfPuvG4i5XGv7hvX1vWvPs6e00v7pKLOK
lPLf72L1Zvaewx2Q1dwoaRtyaILGCeVpFAW3TzSMf5
Microsoft
Service Pack
dd/MM/yyy
\root\SecurityCenter2
Select * from AntivirusProduct
displayName
SELECT * FROM Win32_VideoController
Win32_Processor.deviceid="CPU0"
Core(TM)
7TbyJTmRjEO4cAv0uEWTg0z247YOKwGLA6ZPKJ7mZx
amieXUnETG31tW337L0vqexmm32u0IukHIgLB4jquZ
WJfzU7IUY3yZbyb5OFD1fJmkjI797kxoECMTxqHF2Y
5sLUgoN5W4DiMFiqj4evy7pWywrGxFSwWz4ohImPES
33dGQ5Y8XQfYSaSRVo2n8URl1eTsHkOyeZFlOtxrDY
ji9LflGpBvDxHuSuva1pvmFgXRknpuXJrccEFZH31C
9K2GRdTW5MeUVdKz4dofdzz6PdY9ONtzUfCZVThcop
lTwt4VuxYYQydOqiqYejCVYBGRLdX0kQISANyd2CWJ
VoPTQdPmoF8JpRTNANQeWFyya3KrUwhotCR2ueOElC
2ZrDqcOFuG9Ex4m3hMYzsLzUwANjc74UOs28iECmPQ
ZUzxI2M8G1g3lO7aKulFoTikgBqbghJmsnWVH2DYio
GfX8RACTgp7CTDFLUG09mkuZDRq0fjJojAkVYwJdDW
YjvQZcMwuQtSapiFHNuWYopL2pOd6Ihee7e6WQhF5X
L592r9cLcG5dj1HbEHNCVdjlFvEk5tSq70H6q7JCms
X1mEYQslP8466iMwBR2lu2pl3EKO2fF68tT42lEKqm
L14jLRLlPOKCwUKspzLJw7OxNMi89lrg5AHDIOvCxA
BTyxpQS9kwgZgn4nD6x1hqk9z97QVpSa4GoQa1gV2d
XI22cxTOFqDNpQQTomNw8ogmuBCBfof2UChqM7KRSR
OgHr0S8sSbHSsbuHbrXq4uypo5BF6CQxfU1ZiKljNL
dGlEEzl9B86S2rOJ4pp8LtFUO8xGaBRIklS1flXDIo
JVRHrAgLtspftoW2hYr0a9sOJvrRlpfWZcAuGt62x0
uninstall
update
Urlopen
Urlhide
PCShutdown
shutdown.exe /f /s /t 0
PCRestart
shutdown.exe /f /r /t 0
PCLogoff
shutdown.exe -L
RunShell
StartDDos
StopDDos
StartReport
StopReport
\drivers\etc\hosts
Shosts
HostsMSG
Modified successfully!
HostsErr
plugin
sendPlugin
savePlugin
RemovePlugins
Plugins Removed!
OfflineGet
Plugin
Invoke
RunRecovery
Recovery
RunOptions
injRun
UACFunc
Plugin Error!
ToLower
Open [
-ExecutionPolicy Bypass -File "
KQsy5XJsJEr5acPAWxvLY6AUSQSeWx5CFfp64XAWJc
cFqy2c6lELm41xMvLirHSGu4bra1EP2kDVAgKWQu0U
CrsP4sm2TIW2dxiq7SA14URJ4fxiyTQxuVCQFTdMZW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 / HTTP/1.1
Host:
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
User-Agent:
Content-length: 5235
schtasks
/delete /f /tn "
@echo off
timeout 3 > NUL
" /f /q
N6v8GVfrFHc0vjbKFIBD4g03HCpafJzLOe7cnUZLtDWGXiajD0XJQzvEVzvfViQsD0pYMw9h1Z
LquII5HKruqzzowBKfnBGYTRnX7iShG1k595vmX0qthy9ETMhNfqYu20MYZyFa0qvoyfKNBuBY
ToUpper
[SPACE]
Return
[ENTER]
Escape
LControlKey
[CTRL]
RControlKey
RShiftKey
[Shift]
LShiftKey
[Back]
Capital
[CAPSLOCK: OFF]
[CAPSLOCK: ON]
MainWindowTitle
ProcessName
7FLNbmz63Mh5SWGIE8MdE6j4917rD68E2cfliNaXZScCs8v55ooGOQYeuVI49yYrOfgnsRtt7H
PVeDCCmPm2X6vSlDUkn559lh6pOUbw3MDx2xHcjTWlQ10HHo4kQGszJmVUXA5JGF4j09GwfNUQ
fQeVv18GmSlAn00FY1PWKV9jTxjQs67fm2mbL0kcl60mdmBszqAy14vYhqYpxpJD4zMCaLaofW
YXOnI9beiSdUCFF3LhRMZ2qxFH7FHmKE7Xkz0VBgDpmnBJnF9QYAbFNg27Ns0cQHihyaZsxcnp
1EL03MKz7wKU87a7ICxCxB9HxN1VZFFn9l7SsFhriSdRGinnC9MEJ0kZib2RqwbxdTMODPdwck
LszBNVUmVhLW9SZCH8xKFKNYmTDswL6ITFbxm60KzCx5dZpbZS89BJk13xgSdaRyrhLa6WCYsC
Jt8ld4WVICa3bPz8cup4tzxOiy3dLXokzLk3qmEYpjkodl8pjH3DKRCTh5cIbgsZRVBP9mknUV
6mIw9z9b05ZKxdEu965rr4amZGyfUXxra0hpwaSX08rB6VeQ3v0ha6Wb8xQgwoAvqITfyKbPO7
yJGrWfIcTCyR2BYIFKaM0XbnenXcAPa19IrEloUTRwlFKDsADwxwrOSaTEsmsv0uUkAMqAGdCd
wBBc2DKGsintnF4Mdcd5eRM1dpgPDn0UfrU37QXPPYGrxD8BiLVIuenZDaejNAAoIn3JpMtujF
7Oq70HRa9EZqrKuBsLcLH8bFU5A4pe97UTrIgOjM3XhgEFGUq5M26ElK7Ld
5CGYdExbmHFDgDq53mOl6B0YzKHuWvglfxeoP2cJqbxggWDYfaApImDp0xX
omJbpaMkHJGAUs1l9l04qDA0B1XAAEX1EHJza28DFeBkP97pk2eArbT72ck
EwBoUuqRLg4eT5467NZX0sOXWJsLKUe90kt0lJ5pwOJB4IZ3xHzwCzPvWon
ev90NEs9xOpog9Qvgh8oWQm9MP5g6IXaMe0fbFqTu3Q11gWwEoXLqpIPVqk
ZKJtPili8cNt5qVrRDKzj4Wbbl9g0NJvAbcLzHvrYZkLMl81p3NTjdT3kLA
NJuFgpYQu8ZLOUXQrlBSVSndwfs5zAtSUD2VwpGJSIWUFdcvmj8QcXShuIh
s7C43o9OUhdIBLgNCOtur2dJTpBxC2SkESVuXkpNfJBI90KhuVWuPQ0Fxn7
K1WgTPAoZ0S2IovLDkMuSwjQdQiWaIW7Cksd0vvbANK8Rt5s1MOSLyv9hls
amxFvZyga4koMJOh8LUtz0HwwckLw2qmZrN4ACuIhvLhVzpEKCYcuigscpw
QoukVBvxqEtFlkMev9gcy4jK0skZ8gJVN4ZpPoHTY3ypxmx8SLMB1YUzgmi
FUba9ZMV0RMQCYONEuc6aNJkLKzuhvoM6gGVJS9wSIU2yg55XJrQJdLEPlS
oN2TqWbj6fX4O6TLBWBBy1RTQkAZUzBNngj6Q8UjJh13QWpaHEhRo6f73MonJdLauoJdmHkAOosQ03FX7m0YgZxLD2X1
XWgITIaB3hypFSiswOwKHVaGiJZSeh2Z1rx3BmBlqIIa534g4S2mSfXQpxplKvnbpHYELFF54UgUwEEfMbTnDZlbfw87
K8HIsqXGIAmweTN5fSsG6VHAEtNh5HjpdU57wU2mkPtflsGYwDmOeviOJZ6tjuyR8PACMp8E8wTu6TpnrEXM1JQbffeE
Software\
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0
Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
abcdefghijklmnopqrstuvwxyz
Err HWID
ToArray
3O4iJIXUQODU0v0svu95ikZ4xMak2YBG81qzhmESRzMsfFj8XleAN6D5AjKplYFh5d2dMDjTT0kmwxgEtuTmkCCXbTm5
brj3e2QOemhC7ABsRMHmPI9PppWJ5qPTxWqs88wzVTzj6Kewa289vRR8FoPXCTycSNfP8JAXymdStvzue9RVBUgkTg9x
uTgsNoBH2Dx3VmRX0z6svLLKokwcx9gGVQlEv8DepJhglBDgqququbMwQSuBR6hXTStaBdcnUHTm8f3XylEWWG8g1uWm
a6zEiqtDaUku0Q0lAWhuhtqvxOasdXANaXuEqcHvYzYAVwQLUiHMJiIpMjuAmXIkz1Oo0QnzLpsk1RTmlHZcNlUMCn2K
KhV3y1swRZ7KNKuVwijQFvd2ivG5hczQuA1ndeKecqGQFjSSLVy1MWGECWhAw7VRjFJD54yZNVfVPVMRfTO81AMHnWMy
9pcBm33d3kCKpp45qHHKMw8yKfyDTmhice8TnlOZz3NSZVj6fg3L1WOmznzBYrLYEZP9sbqTdiUwU1vwqVtf6cCsyjdW
3H1aMRFP2w0LRPrNLMOzvQva54yWJtlxdqpedSGPpd6UaB9UjCPuCTgnfPfH4MrJPCDn9YVO8SkLFNyBAOriwJuJvaRG
u9MDDkmvsbChW1nZnFhAOdSd3AnfDXcEa39pmFpnObTYN4tD6ZD6JEFyHKikLEH9iiFBnmViy2VxRvy8SFgwvqeYIWyS
FqRMgFs2YtBfH1bO0vpPcjoworQhMHzPsYKoTRZq7phSzceIYhmMFYI6pSGL8DPjFHUeBigYHW6mEsvOBO4WfRKYZhmh
ugVtuE1jOkv8cZElfIE8z8tMQcN2gYvSLz9TAxp6zoUzpg2YsrfadDXbHFq0aV4hFNiU8bqbVaU06
FwZ7XzLq7QcFEok8XERn0qJL4LOSSoCbsY1orxdCn124nWsIV8E3yUhUz7P9krYbnV1Z1R27xVyg9
2elitI5q5euW6Vjf7DSx6ZY4d0pq3g2v5IwDSK7oEBWs7UgjACFldCCyD8bD4UsmxkCcSY8wSEwbA
w7v0sIwhzvbPT6zH383sWItpUSV7pZCuYpGhGW1CbBPeSADxcYvAX4pCsu9uMIk0qi6jsPbLByKoM
ohITD8bwHQhP7KnKwawz0a6q7ykal5CAwjf0ejXPDmMFd7i6cBKnbXj0WhuT9YUBJeNbhJM7SByRb
Kb6pK6YmJgTt8HoVDgz1r12ddyTd0w15mAbPkwOr6LmP5yWmalyE0b8ThWAEr9NfGjxFTTGNdgx6h
fXFSlTsJLDKllX2Vy8VRlDEwpFH5I3wnPX9gwTAXEguRMrlRieCkXA2j0PfNEyHwNGmdMoemtTJhT
RA1LwA0rgBfToygcRQ7LlyB4M7NuCqVrQcq9upHxr3xuvuH3J0Gq4xLT5JcGFsMyo84D4a3pmarQ9
P30zc2BV45rrfLE0DHOHe5DEZpRyLsOLktlGM7kFd3BZjJRzBZ3xDrjLpKOl5zC2weus13w9aDxbW
RReZqwlbbmsrKV6hcsNcUJMxReRZXVWIf0d8Qv9ivTbEgiOVmt9trQk5mccBZSYICWa0efmzAs6Th
ldVlcwhr37fbPi4DkAGklHUucqo8J0zP7zEylGK4UW2yaXVaxbuKFwa8jWthT7NlD4lc8vXb0hBgb
quh7dRgwnlkElWkERfiXtm3Ghz4eJlRZToFkS3f54VMHtFGn7nQeeCYgiOmkENI67lPAePdREYfXz
l3RlszKYZ4E51FQKupkQfDm3TKoJ4R3qmscixi1xUYby1PPZzIq5dVHqq4Qty8zKVEq4U2n1sNGJI
L7WEXjquy1zo3g8xwKmUnkt8cw5gAhGmcZt4OCsXZmPSmFkGELs4APTp7QF7CIALIkhixJl6Oyr3C
EDs779EDE1NyQe7U0PjNwvmobuqvfJf60vPoUR20hlaoHBXFom9v6REt67x0DFRSttuo5DxIsYDQX
T1EB2K2iNhu9SM5mzNtRKkMoAdlTlssw5XZPDuL7gsyyAgoYIKXXOhbLnZNJIrAPwKIkFRO0jYqty
IfTlAMGnTNytag3SzvkWBBsJyvIXMQfawWRyGXdGcfL7Ect06S22jKhwaMFcXcO8qosjmZNWLZUD0
ZmAO5ikQS7QFb2WH59sSQpm6CpcnK2fcHlyXZ4vM1epCUQNonKUIL3iaTdu5fypmWPTEbYQzV9tfF
8WUV97k1ZDntdPyNPssSXa1KpQFueve87D0ERzxiZQznZgZ2Cor2NSNjnCpS3sR2tbBzUtLqwnymr
abcdefghijklmnopqrstuvwxyz
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
FileDescription
FileVersion
1.0.0.0
InternalName
XClient2.exe
LegalCopyright
OriginalFilename
XClient2.exe
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
Antivirus Signature
Bkav W32.AIDetectMalware.CS
Lionic Trojan.Win32.XWorm.m!c
tehtris Clean
ClamAV Win.Packed.njRAT-10002074-1
CMC Clean
CAT-QuickHeal Trojan.GenericFC.S29961068
Skyhigh BehavesLike.Win32.Trojan.dh
ALYac Gen:Variant.Jalapeno.640
Cylance Unsafe
Zillya Trojan.Agent.Win32.3969742
Sangfor Suspicious.Win32.Save.a
K7AntiVirus Trojan ( 005aa5f01 )
Alibaba Backdoor:MSIL/AsyncRAT.69e32e01
K7GW Trojan ( 005aa5f01 )
Cybereason malicious.1ae8a7
Baidu Clean
VirIT Trojan.Win32.MSIL_Heur.B
Paloalto generic.ml
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 a variant of MSIL/Agent.DWN
APEX Malicious
Avast Win32:RATX-gen [Trj]
Cynet Clean
Kaspersky HEUR:Backdoor.MSIL.XWorm.gen
BitDefender Gen:Variant.Jalapeno.640
NANO-Antivirus Trojan.Win32.XWorm.koxtjn
ViRobot Trojan.Win.Z.Jalapeno.253952.C
MicroWorld-eScan Gen:Variant.Jalapeno.640
Tencent Trojan.MSIL.Agent.16000605
TACHYON Clean
Sophos Troj/RAT-FJ
F-Secure Trojan.TR/Spy.Gen
DrWeb BackDoor.BladabindiNET.30
VIPRE Gen:Variant.Jalapeno.640
TrendMicro Backdoor.Win32.XWORM.YXEFYZ
McAfeeD Real Protect-LS!7B20C6C1AE8A
Trapmine malicious.moderate.ml.score
FireEye Generic.mg.7b20c6c1ae8a7fb3
Emsisoft Gen:Variant.Jalapeno.640 (B)
SentinelOne Static AI - Malicious PE
GData MSIL.Trojan.PSE.VTQMFW
Jiangmin Clean
Webroot Clean
Varist W32/MSIL_Agent.BUD.gen!Eldorado
Avira TR/Spy.Gen
Antiy-AVL Clean
Kingsoft malware.kb.c.1000
Gridinsoft Ransom.Win32.Bladabindi.sa
Xcitium Clean
Arcabit Trojan.Jalapeno.640
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Backdoor.MSIL.XWorm.gen
Microsoft Trojan:MSIL/AsyncRAT.R!MTB
Google Detected
AhnLab-V3 Trojan/Win.AntiVm.C5374869
Acronis Clean
McAfee Trojan-FVYT!7B20C6C1AE8A
MAX malware (ai score=82)
VBA32 Backdoor.MSIL.XWorm.gen
Malwarebytes Backdoor.XWorm.Generic
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall Backdoor.Win32.XWORM.YXEFYZ
Rising Trojan.AntiVM!1.CF63 (CLASSIC)
Yandex Clean
Ikarus Trojan.MSIL.Agent
MaxSecure Trojan.Malware.300983.susgen
Fortinet MSIL/Bladabindi.SSNY!tr
BitDefenderTheta AI:Packer.830DDE371F
AVG Win32:RATX-gen [Trj]
DeepInstinct MALICIOUS
CrowdStrike win/malicious_confidence_100% (W)
alibabacloud Rat:Win/AsyncRAT.Stub
No IRMA results available.