Static | ZeroBOX

PE Compile Time

2025-01-24 12:29:53

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00011874 0x00011a00 5.93730154304
.rsrc 0x00014000 0x000004b6 0x00000600 3.67804319923
.reloc 0x00016000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x000140a0 0x0000022c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000142cc 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
3b%(H
v4.0.30319
#Strings
sH8rW8BtH0
PaFBsbhItTbZmAtyvwZWCkp8eXAwGq96xQlue9sJeDvyLFDnTAH3brWPMTsOKo08dKWf6fessCxJSmtDXL0
DhsGYtUTBHxOiPuHRBS0
NxyaJsc3l0
X1PoUvuht0
IMDbj31wA69nYB1blBz5l5mRo3C0pdt7CcW61
mlzttWMzB1
PEi1Xzbjohbaui7xp2qcOeiIAcqn42HbekyMQvMT4Y01mNaSoK3hIKbq89HIvOctJsI1
SBeqweskQeub7IwtMoT8bDMkZdKqT6rk3UJvTwsfO8X450xrGcUpd2g8tI1XFctmKzWGwyz2jMYN5n4E9N1
MYuCYdxpEikNPKdpUDU1
hdU6B2A4V1
Iq86pWhrO74rUJaOppuYiav9L5hOQkI9jP6AjNtzlhbBrtN0udLdmFlVbBQBNPQQXfX1
_Closure$__1
IEnumerable`1
ThreadSafeObjectProvider`1
List`1
2HzXX8Fn1BHLq82GMhk1
N6Uz29xUl1
GH7kkCII8vwcg9LIzF12
Microsoft.Win32
UInt32
ReadInt32
ToInt32
5x5I5kOZG533pLveH1XEQoDk0UsYWOlsAXkmAwEDnpFsAmJabzKfgaqcXmXApR4fOgOnzUaZVNno62E1YN2
ONsD3M76Q2
kWU0BpuKi4B8wAmCbeP3AJiCt4WnvCG4hp5kEmtVifEzd1AxVcSDcDeKuIHXa1LbjZ59rn3H77tjV2
36nSG7uYY2
Func`2
FFvIiAZQe2
KHryqpNAKtV8SLhB2U8vU0QyYZkJ5bmh6s8dmJiPNkSvlpMbslSapBEniVnRJFLw0N9ygJrEaRUcv2
fWZ0jGJF73
OIBOhUkJK3
eTk5uahQdSBUEN08oMZccUBRiXS6f1REcCLi3
0rLWrrZz5pMbFqFHkVZIznpWezX6hvurfQoUsff1o3
mUiWqrav1IhFHGxh2dOPXBvCyWp9LUOvP6dx3
RIUyZ1Ujba5R1oPJLly0nGASLRGQEe5hzaWnxHLiBE8fs1D5CB77QSmR282ybnOrhL14
UInt64
5yWjY5Th7KeyyHdvYoqlxIVXtpsJtMguhTaR087bBD2pW3DxUYH172pfPC7ykO5NjapvvsFFUjVgH4
YAtDTEhTf1PXflcRqpIS5wpngmyADvl74uXi1JNywmkM3IRNnu9IpnRXA2M24oQJzN1cWY3254tsI4
UJqonavYLgzKrRgs2mO4
iXRb6uu1tU0FcEyq31Cory8a99TgxFjlsnlU4
VbpW8O4sbc5s4JIERn23C5Z2d8LAbSkk36UprW3VMDpTAABbwmliSW4
GqvyGAoMgyNfbUxFYvwvw7ATIISyBk9VpdTg4
HgLE15w1p4
RBSsmlbB25
l3XJasrD25
IP30DnYyg1WMBn2rBHQhKhrDuEntAl3dmj1mvvVLRMEqbLAQvopyuWu4NACISDn9lAiWTkRViE8XYEkeO19PAP8az66uV65
ZngiY9rhHSGZaHfifNv11NRS9Du4fOiGuswx6kWZ7lT6HrCwTeR7wxt9rjdjodEDrVe6t1Din72XB5
BBloSvAiQ5
6UlSfXEzxYmz4sGghqDks3EvwmIrt2GOvLFR5
ychuZEm0sH2VhpK1sec5
AI5SlmHAg5
TwLpYA9Om5
YTuuhNd1V6
HQ61ssuFlackBAg0GnZ6
mimKqOVzJZyurFfzVIdp8iUUKRvejS6j57qCiA9Fqko7CrP4TFqTF8mLbAYnNhVaBUq1NwD4zrzYgewFRfpzLect3GKcha6
pIOlRX5riK2zF0JErhJLcOWe9gsfaPw2YidcKeZx3nFp9p5PkAF1IXP4PvMoDYHlF2u8zHVRfMhEiqnpJ1lg8jYeuXVWZn6
2B14dM4Qq6
nzMlL5s5pzqKk7P6HYiDqXxzSuwFUG8lxK9NJAXgq8yAuhigs6MHQ2Hj25JCiffefXCRii271srGs1aIrSk7HFIbhvXTUC7
qkYDVVczXaJOMK0BTOpkQnCqjbsIznk6Fnvl9B6bAordBRS810pH2E7
HFeT88jEq7
Qg7yJ6Dst7
crPJYQBXf5hRPiUagotzt0UOhMs5yZC4S22hJkfMKD40JQ9f7QC9oQaiTj0JLE3zmf9Sv7
kqQQ3Pou34jQQ2MZuLRlBQ6KNL6Cmd93XXnYp0eTBEHwyDkmi3YEXbe31hzrSHOKG3GzG3C0qJG108
qiTIEnOTB8
get_UTF8
OPo6wqzkKXV75wqjMUg4XBivCryD3RdbQLcF8
okXrWnJn6PxV4RDHWOA8WCHwySGPRHsLJ7Vfl7qZltxxA16ozCbngN8
FnvpYvXPOBQAqdBP5miN93P808kegOBPYEZR8
IlYaqoTSS8
3BmgChoUZfQKPNqH9vf532G7IZ8SiIWyy9ZU8
7vNUd9XFhWRKBkuoGmGoFF1PCgDs0NAY0zkvQHNPwJrFw2PcNHmetym78WEHU7aOycCxUytyHc0uV8
_Lambda$__8
ORKlLQjba8
eEJfe2dRd8
ezRaW5Zned8Nj7IfYDC6FBPnjg94h3PQzFed8
bKlp6OZMlh3LT87YqqLvbyRO4ffLQnhp9JXj8
D2gTut8Yp8
GnrdQ74trUhO4vusQ6xlrVcWCm0B98t73mFt8
5uDieP095245hzYI1rRtChEdZeh9qwAOHn9z8
eLXpb16n79
t0VvVF1tI9
ngyemHgUmanuRP5b5SIYFnei1dEfAjL7gZrrCoToAONTTnw4q0hyTS9
mQbN5QnBvaHOO3XQUuhiv673MjlcBDmFIfb3P148n9
FbwEek3ou9
nFbFX1aAz9
<Module>
cikFj55hTrI3D6zVayGvlKMTB7tR6fWPJxuIgABv2A
YwLAdQOJ7A
3dwPx08VUylO5WJ28QFdcAzlEvQFU6h6NcWBrI0TBA
DmztkVUxRA
pFjrRsHAYA
6jaoBXNITduc38YCNgFJoY0gFu8iLheGPU4lKWufofXlevKDzW4ac5thla7gvifp20Z0iA
capGetDriverDescriptionA
MIlu8ykVVXYPw0V9tdqA
capCreateCaptureWindowA
pA3Of5PC9okot2CIsvhBYEzEXV7zW6RbiAPHLa2nWPXmASuqAy9BOKdIcodMgcT90PBmhYpBV53CbR5bEvxfP9ZSlYzfkLB
xKuEGT5TgB
Y9coUiPnGUl3xkqyKwQ7OsUNoUpM3WYCTN2qB
ColWX8F0vB
2ev9srK5riOn7JkpXV0C
KxfCak6wfyQBoSfFxITlh9Ke3CltzJwkZiG3C
ZZe7o2XkIC
Ws8IcjEESC
rSaJIVIlw8KA3j6PtvttzXrhZgkfdzsqKgcTWjopR43WGHpsRHmCNXC
h8gJxs95GekwOmXnGaq4MQVYt8pjMrE8ezv6H8JnXrJVRABKaDl3y6PtwF9xXivOFSzkX0IjEG6y90Rsfvrj18JurCU7eZC
AFw0NzXE1jvAand6rUjcM7nHl7DKLdfapZTvsnqzlC
MYDcO8iCqC
FmA7dfgONK54YiaXLflzdYobQfND5iWrNH59D
s4vIOpIQDD
ES_SYSTEM_REQUIRED
ES_DISPLAY_REQUIRED
geBJXweagVnKKbUkzJID
1VASlueYv7uxlyq50rLD
EXH2TEeo1HfKr37kpaDVPSMlKrA3YRrlZEYC8lYhTD
EyaOmYVriK5orAZn1PWD
8P27OteCbD
rylQi18dAr8Rn0YNU3lEEWbXoZhJXCkyLz0mD
Vg9weMFPoD
7J0NQpIG38Lk8nYzk1B8GApCKQ9A4Hnw39LwCwbdxD
YNP5r3pI5iqcSWKjmZI0txNZwfBo9Cf9G5XZjoAmyY4qZemUd0WEyIpmzATMhZ4DFiOlR6BbiaylRcklcMFSJ4E
66K5olFh7E
DddSrftuJE
vRVNa1p4Pw6WyYSMb0S0ECiCZ4h6rOYsp88ZoQO1HkY1V4yqbY40Ed7frsTky1SO2zLE
j9bQnE72HKOQXLhHwXGOaBiQRyvr7qSDcJ8QJWQ2US9Ik1gJnY3eRUI2rUsPFPBVFGK9mB2zDh4jME
EXECUTION_STATE
xF34oWkvfE
lC17dGV8DwtVar0c5rLIdMa5MiGxC0htCtyhFvgg5Bj8VQhWwozZxWyi2FrTjJJhary9DEtQDrdgLFXolbrenqxfiyPtzqE
juJYLwGZsE
dDhzComp6F
42dES0BrDF
twiCKgmU8KWNPOUQur8F2NTeAWg4nQbzBhBCR5rQEF
TSd2fzwa5BQfTqQsPhOF
472kksvsLgF7JuJRw5PF
o1xiYLq6M4ZvJZNvhKErZReTtmNzP6tL8lLhX9KANltjYA73n2BnMXF
lNyFv3o7hEOuIMZdLfYdsZtmIAVfmcEcJmJ5gdXSiF
jLIx6K7eJXl0n9iiNU0G
hsWbFA6J2G
M3xKyKsUK2uTJEwflF0cSmDogTNSbgAtyG8Kjkft5MjUhJwP3zdPowYRES0UDkhPI7vXq6gjoWzRIITfXykTi6n0G4COKCG
D3imo3JZDG
CcsXBdwDIAIWWvplVYGZF6KycGMCepYs6nuMz8CYGMaijDmoWkGDvOG
FGMbSjEYbG
cAREqI1aREJXOndgRabG
ZMd2UN9o2H
qLne2GPsDH
tI4wZu8p2ajYNwyrljKToNStqlQy0oQ4xPOTH
8FFrD2ApUH
5vNCkB2IVH
BMeaRT2paHcBlQrUvr1LBordCEaSTgoifP1RC2FZqHH8N44wZtWJX8FNyueHcC3JhWjBbH
b4wXtoYYiH
g94vFhjwWlkUqlZOFVcZt1efBpwWUmOf68aX0u8tppfxXax7tekwIprY54PYuc1ry64Vi8YoHtml1I
G7hGTSy3I1mq4fqacM5I
2YRSysTRbezZPe5HUG8I
NLg9Rsz2FI
8UVNgRzyHI
get_ASCII
fq9kd0l3bLYhms5kjxG7ryRLmSaSZLhHsXccP4bZpt5f2XWMMrt5uOIofW4wKlgJhdII
NYbJ2BEXDDX5njrszEwiYOyzuXYWb4JTKLtTI
rsHCR7rPXI
kupe4YXQYI
XUpJuYCxCRwo595RmEaI
TfLMc3DYkd9g7C4CUWbI
1FdTNiUCuoNyZwZqGKDDEt4qu2vogS5GUtTvudRMovk4jLeXxpqqDztHu8TNYU73sTdI
P7ULbUAB2a0zWTgvCfS2Q5zQmB18pTl7lQpuI
VKIzS3c4XOWj9o0rskhYrL765kQ8SLrTwce5JjvbETckv9vxAd8nTKo3joACLlkN68KJ
8ScPPX3t6IPAPXQtT3Slm4CYmDGd0gMkk8hjJOeT7YbEND8iwQFYgXR7AYItvmlEyJQJ
JZSDw2vYZvzwt4JGlUcYktJbTN2lpCFSZl3RJ
C2wAqCE8MMZgDLyPa9YzjeIEJC9tq7flHoOAwmGABy7FroxV1GhWvg9ZnyH4QFlQCBCeTM02UIzRucKsr9p1J5ci2Ni55SJ
r7Z8Lvl11laaJPwAQZVJ
i0W1a92J7wXFJoh6etHYqsChUeViHOOFXzoaJ
130lkumSxFV4O3kDs8l6QVSDPQ1lpaMGBkmdJ
7lMNKHttgJ
JMQ0JOeTvA6MppN5Fd76dIACHcnJwBEBdRYNc2r0Wac2WuoF0ZWjsKBfoft6PeA7UMOR12DtkSjZou7zpjJ
cRTUv4EP3K
1EpQKt1yfhqKWf7RoU3K
G7ltEFUZGK
WVUUakBkMK
rf7ORUlfPK
NBUV1h0XgK
qzNj4Yw1b5xaS9Pn58jK
mIliMSPMwlGNRwCSak09aG8lv1PO1TE4YeDsK
TLsKCyI3FHWqYzTrbi72xuxpAHNuBIg0O6jij0GIR66sdTOWumDcY0KXXCBZNWVsK67L
ngsQocjNz6GTCU1DnGnOTaySIN0P9qHiKIZ4EEwde9cbfyejjcfTN7L
gS3nGpgnKPrTwFqQ8UHueynX5kcYfAqCwLGB07ii7L
uytv58i28L
KtB5cOXw9L
sA1qj6YhvA7Tj5JhViD2GuXgn1I4OcL4CICDkoOuRdTcYWnNdQRjn4EQg27707RZ73PBVLc7mbx6lenQ4RT15YhNxwHWFUL
q7BgblS7z4KEAvHmkLdL
8d6BP8SCRiy2IBVw9sk18AMspIbUz7SHpnWrL
F7FoHQ7UwaMUyBI5tjV3pXd91bgd6P9H4yNGiyubcaEw4PXmdvf8OLMGhoGM11vxdK3g2qYUE6ikuL
KdxXTGygA58nvbjeDxCGdRWYPpv6N2CxGEcWsmLO1M
XdEssMaidZhTPwGBxW2yKGRThP1M
GI8y52cI7M
odOqR9NEPYksZswaBWPjoOxAsTpf00E5N4j3L48NQhM1feSItCAmZ7M
Y9z2WnDSBM
qXNf9Itny1cQSqxPU1YacL3BDf0q1psJum030GCXWeUF70auysTOgFM
ipcfWT3UUM
ueNmcOYbWM
v0LU9EIRHI3jGfgSxuqsbTlAkHsNTVbXMzCPdV3lK5iEyflnRRTwgccM9KkTkbrNMMZM
oBsamzSvvY6dTNp54z76gqJmMLlct6Rv0c6oM
0ccRYXV31ghZZZETggazxS2n1mj1dnzGJYjDPEgUbOHlNBKnpAgkSF5eUry1Bvj9FWjiqM
fdmzBxg1n5pNRS94SADtJO0RlJ9IwBiSxi25HneZ9t3VhQJmptKl7drbKGwAjuc2zoPN
jsQDC8Ijmijrniq5qH5Cn3TNiwuJvJ4IZsgbbpIkSULxZINm7DkBgIl6rwLT1YqRpQOqNXeeToN1LBnIzn5KpnTtWMZgcbN
qjwBgpEljN
5UmDuBKioN
Js29rCVpvN
w5VxgKtKEDa3kK0mGjfEFzJLulb6ABTZun0Fu8YE0O
KQJ2TFQrfv1hDpMx5uvSyftZdtMULLULhvf0O
vv2AKZHButiHwbZSCv1O
qsTkJxc71h2VgLm323BdD9sxTT7S7dODPVE0N4lIgPM2r3vRwWbR8BO
LASTINPUTINFO
System.IO
LYks76gQ0Q3pKUD70UIO
Ik5xKDk2NO
ZewQraXJs0pXI2vbs56jsBE9knJiDF1POsyYpYPs0nlcrkw4ecx9ZQ9VY5ToovpwxrTFfrRFLdEzQO
CxlsjuGmcqZFgzaq87SO
TqzFF7XtTO
hWDW2j7aWO
og6eQNKNRSdBPkW9ysSl7kbm8ZgPOH35optHIHTokPAMHLKUrA4PjpUv5SxrXA4eSybO
lEMBNL20zU30Fk6kniLZDXK9T5wAdjnpTWepnhwbnZfyIL4X77R4ZZYkmhQtUu9Jf3m1L9hJYCyimO
IG0gD4sxoO
q8aSWdToK1SwontRtIbFjcoe94N1F5s4eEb1P
ViAMKrzgwjS0qPzwsSEi1XBK8K2o9PbYiKL1AXhF142YibQ9iGK9a5K6n6Jf4T9zW1rouewOG0ZV3P
IxmGUjHgaImpcVMz073HxMX9RSDUK03fZCttTz76RxTw62PAzKjm4eFpWiiV8ksrzYMJfU6I5xWP4P
ronHENUhHP
8hgk8mDaHQlKcnYlhAbYjaGIXFcp2VUGZwUHrmb5gNMaPv6E4zWBmmJW5TihPqPS7BWJrDiY0QzWVP
NlG2CcD9cP
bsn8iHN33Q
EceIEu36CQ
96qzaq8ezvLzzR8v4MPwvJD4cXmv6eLAx1kAVaKiexKTkinqgJ8K1qm4qMwwMSb4ViRsvxbIdyK1ojh0P73rC55CBV5sHLQ
IXGVfte9RQ
AWfa1SDvpFaTwohDTRUx2XJs2tyIXhl8dFaiNeK8YQ
ArPxBhC6YDIfX9L1vHEyeD8D8wkZCsHzlGHRgzFRl22vg1s4bobY9fQ
LlqymlhCchBNkRBx5LZWp85AQpQzIRAYgsjD3xxa63ULIDI1Swcj3jZEdRr1cla9czQWkQ
6QJtWlMpXQHBRPyujzkHfKINJwo87UDsmbWEUE8Z0XNwVGl2poLJMVWzDw7iRrsKAGPESmUPOORtqQ
hiTWSYXaBLe8arzkEqPGCv48upWoPdPzJ4Rbk5VRoZT0aZxejAQGFUYRSAz5qXiEt7wQ
wL6ms2Fe7R
7kHxpWM5UJzhW901FtXnBYq7D5VWt9VvPkdfTa5ECI14yJhmH7nkkSlcl2WYMU8KcrKZ0ncRMwtQInseUw4lAnvKaUZwO8R
ZhWmppgDYHO8tedtUyLeDEykrzoP5Z0JKQxZenqMER
L6bdnZbul9ag5eUMyDGzBWNz31yyDeImBkcLR
E0gRfGGxLR
TEceWz1ROR
zhUdj9GMPR
X8HYr4ssRR
aim9TT3KUR
RohMbnqZjR
CeTHCkSl6NjhF9Gu0N0JRuGAk8bZLYOgBzyqdGeZelUDmcVtbFy28MUS6MoFFxwL5C3xrDFP3LiQZWWfZgVLveefEmmB4sR
atW49FOZLEshOcqG33m4YY6dG1AQ4BEeVDZs3m4tAS
8pgUdIQ5LS2qDtXQ2lYhZce5PAnjRailMhhTb9soWvjjZZ4oxWYtIaVBx0Dc80JwrCcfLZkeTyOqgMv4MvZaHga8PmRS
ES_CONTINUOUS
a1n91wxaU8PaAAgCyQdxDB7yleegu4KUlJroS
UvMTFLNogIJNT5vhDk6aS3ZqEn8PllU5TxaqS
6WJqU8WlUlSkq6LUiLyS
XxusKbGL1T
7OL8Wdl3ET
yNpzoWWsQT
eZc1QCFO7ASjmWBTNpfZYI9xpdqj2Gnw2uQvXkbxzAYMokrzXmErRST
LT8Kqv7HrT
IiKJHXwDzT
xQDt824nzXk9ZunTVo1U
ggaEom0u8yF8g8EdiniMqakxrffeFtm1ISePMeGTwDteeDnODAIZg64DROJHg1C0VPk8CX6qcE5WJU
UwUZExlNNU
CGZl5i5xQU
EZggRSS92sw8HWIuOsoU
j8PVCcKApU
LynjJSgar0D9PuePyGxU
BvOyUWbYrJvGqDTxKHPOqGtIIBSmv2La5t4TNJ4Z6V
Si2kSyGV2FbPwdTFxfEuGAqtPLdnjYq24rKz1csIGV
EpfTEtBvQV
RIaUt7D5NsYDjwLtQwmFZ9Ed4hZjQQnVzI4ZQ0ANXV
7uqcXA4cXV
kjVkwxenM9vxDnARtlrfYgly52Mf4IXpwxj99AkpDjUb2qvMPzzQ1IyI7cYuI3GuWuaV
9lIYkH3yiV
4OBJ8dSf2TF814Z1ypzjLqIlR2o8FKuTp06J9WJgFvQoua1hNeIej67v8h8nc6zhIkExCuUqMGJDlV
EcQVtABVFgsyTbZ6br5F2QFQQhhGAJTvwHtoij4IlV
XM4fj9OCqqcH1WvKoCtxjeIjl1sQ6MirvPbEiZp4x9roVFV9Bodrw2W
p35LlUXJLX3Z7LXkaF91jFWppipCzSzV0pe4W
r084CcgLZKuMBegXJxHq7DrbPARYeMihyis7w4DkLQKj0rDDTn0gaLW
UoBDnI1KojsOiY0aEwSW
AxiMfrIoZbnLJmRquPpdYO2EKW3csC0MmYJZEkk0MuODZxkRbANK0RHs5ynTEKzCXYTW
C2xGpZGgoo1FlPzEUrBpk5lnXpEABZVLSNnolpzVQHDuGIX29y87I3SqfVg8H8Ksm8UybW
Euf9zFo8eW
g7nnYxdhfW
584rcRkZjW
o9V082loKm1y91z0y8lW
IDN1VwSHIungfP4p4U7hqsZCAKYRL6vkg1NBcceDjTbFts22pmBu6GoAJB96r4a8nPBYYKmVey8txfNYnMkXQ2Yh1anz0rW
YCrbTaoZTSwI5oaLumWYYNs6kwj7peDUfkajXwvgCIlqxZ27tvMfil9iu04jUBeKj1QIrRhk4lnnwW
ewTZxasX2X
GBSPIvYy2X
fPeZso9ZK0BPp3YeNpIX
fYsTWTTl8FjOZT5LddhAFJDdIcmwVPRYiHMLjWdtLiBzX1XT8QM5IAu49kCyci3DM1AHxYmDNwJ0zZclsIgpGWKj193QYTX
VYdNrQcgUcjdRaX6QX2Cv6FkvkXxWfLQuTdfWirxSwC1U7W8sRNyUZX
R0y8SILFaX
wt7qa1V5bX
b9ePEF6lhX
nVchQJPaQeWm9MXbsdXL1zpdKyCe57CPyuCxuEZmjX
lNwBAIYWnX
LHbljmw2lrhnGMU7ScEOHC0HXloKZVOBQ7IwX
e6CVeoYEmz51pgMYWHcSeyxWS4gWeCmTNzcSPRWZbho7bIbANUxQCyX
7pOltKMG4pFq8P7lw24Y
BuZ8HSzPFY
Ee9yDT6MNY
7eaaexnZdpV31nOfuLOYVOp8sLIv6J88U5OR4Ic4hED6DqGHnt1pmNY
f4oIsgO5PY
Ke8iFBibdahru3aC762krZg2uP6fZxFRqRuQT8UCSY
VFhCafNb4AOnNbPkDCgrqrhp0bYuwTFDfFHNtxDrXUqbEQo7emf0WX6dd5CObUXMyECrK3xBVKlSlJyybXyHmVzvkiMO6nY
tEBZxSnyDzf0vrrK0iGgnccYVkg2lIvcPDb9Z
zgMCImq6dZ
f93QvyF6WkYEolk7VpRHDiUSvUfZWSk2okat5Zac329NMCEATluh8fZ
unWze6RI4wLvEwgBVSprJw9SeO81ZwHbxSCYG011u6Ag5mognYKNfkF4EkPXCGjxDr4o2VKGBbdFi3sCGfZ
MGSwcm2imZ
3GLPdGiFL16MqgnxYDG14vmeDHYLjXeyMgxbQnurUCzAK2ejZnYMyCi2uwfZzGTJUYCurZ
Dispose__Instance__
Create__Instance__
value__
qbqivPSluRCB5ZYfd7foikDk4TVoNqsXFHd4a
rVF5wdfXEBpyUou3WGUF8kAs023KsPD2IObNZdJUGkLEh3Z2xT3nB5a
mYU39Ysi5a
7c5LbkMo0BbBXgx2JaQcVjVats1KO6gl4ce3Rysojn5EzxvRzEMzk6QZeq0fL6hk00nu0Zsf9pPTwI3feL0wQZNxySrDD6a
L2DIIxvrR7RpqZNGxZvLOmXCbjLpGSpKUbmMog61azisckg3NOVQ71p1AkuCTIzadPhD7a
2XpxXaM6gjxfNMVTdyzvlpdDLBUJqtmJromAa
iLMlfgaaGa
1M1dX2LZopmIxPmDp06zJR0Yq8w8tdwFmPExVTLplQqAPnWUWuXiWunWCdo8RKuPdrbB0CaZ4M7ka9a9st4ID2U963NMmGa
JRVdeOQmPa
l0cgL7H6Ya
S6KG5g5Bia
TTKYfzZi2N9BmxnHMyia
ProjectData
phlmkM8qmUoa8XwjBI31l6iTqpGi8NgdZnJrOkfWULGfIG6rZam4muFEUBEMjdJV7ne1cV3nOfCzaDEsRfGNk5xXBBeU71b
lvq0ry3t0Ql7yfa3hgjMxow2U8jvqPD4PT8YPmLC2b
7XyTgHhO1odWfQIBvPjuv0F9fyZe4aqAplM4b
Xwu1cDaX7b
GiXfhC95Rb
Q043ul7SzfuCVn4lZdVoGauwH7knj8enHsJHgvI580qFCfjMZ78LgSb
wnbxu5k3Zb
e0L7ePdyH2uCSHl5Ihcb
mscorlib
BJfxluhNSv7VD9jKtrvq7DuOVt5ks5NWVqZjLpGzjb
NLMBBh6Vnb
uVNhGB7SeKAAXfpTKqUjhMRdmj3ExxWLNmn1snd2P4JRa8yMaFlQO5c
pzrqYObIA762b0khQU6AcbZRWyNtFfbxj4BCpkUml0GwcsBnjqiauzqu6xiKgBtXwd6c
82oikbT938A1WuTyjtcqOeeiPZdkHCYhJ3zmkNPBJc
MoLmCcBu8Z9TdDpAeA2RoztIKGgZXuQGy3b05L8gKc
Z46vp9CjjGzxUOjnAJAu1KCFondjLboM2xUr91FFB3d5KRnAANsVXu8KYZC3b1xQA2Qc
0Up0KF2MQc
oDMWBU86zqKvOkm4G9CkAdTuRyzNoQoVlzNRc
tNLDcLqUgvNpPMIC2sac
aoQ6bKaayZalXlLQYzEg7XIkq0YJ0VCM3Kf6MMV0J2GRqYzVxsXJqXFybmXvCyc8XTC1UFe5KPFscc
LjeV3g8PJdaQu18jdHdc
System.Collections.Generic
Microsoft.VisualBasic
0TWCVfXGAVXrI1jdje89N9ymNUd6FnWgZuyic
LowLevelKeyboardProc
m59qsrthCVo0MiRchouu0U7C6FSlUpcBA2jZxdf0UD85y9XjVInstqc
R16cqD7m5d
GetWindowThreadProcessId
GetProcessById
dMrfDkHOBmSiQtr7cXogEjYXOwK90qxeFOwNd
1hrosQ8FOd
Hx9txfofSd
Thread
0XgxcBNKdd
8YojlOtVed
RijndaelManaged
get_Elapsed
bBEelc6Uld
EndSend
BeginSend
Append
RegistryValueKind
set_Method
CompareMethod
TargetMethod
5lMLDtJp1eYRpNs4zpIGUHEwqoPq46Tm7P87FqxBRG17UT9E3iMfmzd
XzWwLRtg7e
Zh1vWyC4h5OF7UPdJVtoomo6stlSrID1weYoKzNu8e
G0VktcmJxWPeTUlJY6pJFcrVWd0fGDjfhW8Fe
kREahu2NiHmltTFr2DYR4g2rwXdp0CbjDCjxWeu3He
xo58fXZ7hT1r8VtXOsH8aHNFsjYwtAsTAIIcu0QCTlZP4P7kIRC1RcskGl87LYJ1KiQe
7Ph5zrwyebDnbBF8GNghS7Zo3mHg4md4G6fe87Q4wZbtLm75ZKOMUBiEj5rXdIuGQKXp88VXxuRcTe
Tijwun3iRore2b5cud3cl76x6oRewsDdU7Mex0PR5OhdAyJ7JwIUVce
Replace
IsNullOrWhiteSpace
CreateInstance
get_GetInstance
instance
GetHashCode
set_Mode
FileMode
EnterDebugMode
CompressionMode
CipherMode
SelectMode
FromImage
DrawImage
get_Message
V76GeKbDje
EndInvoke
BeginInvoke
IEnumerable
IDisposable
Double
get_Handle
GetModuleHandle
RuntimeTypeHandle
GetTypeFromHandle
EventWaitHandle
Rectangle
DownloadFile
IsInRole
WindowsBuiltInRole
get_MainWindowTitle
get_MainModule
ProcessModule
AppWinStyle
set_WindowStyle
ProcessWindowStyle
get_Name
get_FileName
set_FileName
GetTempFileName
GetFileName
get_ModuleName
get_MachineName
get_OSFullName
get_FullName
get_UserName
get_ProcessName
CheckHostName
DateTime
get_LastWriteTime
dwTime
WaitOne
WriteLine
get_NewLine
Combine
ChangeType
UriHostNameType
CheckForSyncLockOnValueType
SecurityProtocolType
GetType
SocketType
System.Core
MethodBase
ApplicationBase
HttpWebResponse
GetResponse
Dispose
Create
MulticastDelegate
DelegateAsyncState
GetKeyboardState
EditorBrowsableState
SetThreadExecutionState
GetKeyState
Delete
ThreadStaticAttribute
STAThreadAttribute
CompilerGeneratedAttribute
GuidAttribute
HelpKeywordAttribute
GeneratedCodeAttribute
EditorBrowsableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
StandardModuleAttribute
HideModuleNameAttribute
DebuggerStepThroughAttribute
AssemblyTrademarkAttribute
DebuggerHiddenAttribute
AssemblyFileVersionAttribute
MyGroupCollectionAttribute
AssemblyDescriptionAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
DebuggerDisplayAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
set_UseShellExecute
WriteByte
m_ThreadStaticValue
DeleteValue
GetObjectValue
GetValue
SetValue
set_Expect100Continue
EndReceive
BeginReceive
Remove
cbSize
get_TotalSize
set_SendBufferSize
set_ReceiveBufferSize
ovczio87Gf
SizeOf
XvgcYT7iKeJcwUjgIDLptdUQgPztvJrj1BzCNtQbY1RlQ4jrQZGFSi6dMBNeGXuhi3OpRftAdC5B8ivnOPf
efV2o6ZUyf
4UAvv7W2zf
qRtwH6iWZ62mphj4vlOcBMDjU9F3DY3nYaFzf
5FmerJjh1g
zPY5eaQV4vlu3enKi66JSwZqm35vWYMMpMPuI6qU4tti4ZW8yKie9qKtIAQw9NKDIt2CIg
zH1PJ5LYBd97iH1RPSnIoIwsjnrO0zyAjriIg
Xb2LiIB4Ng
B0WsQY1TTnuvDbmysDPLNu8J0NBlEDiid90IzvmOwVXZ1U2yugQrhAKXrWws0H5D502eYg
get_Jpeg
MOzl0tVTpJFYTK4frqZYDZu2xmN6OFHFHTzuNYLLPOvudvt3ZEKLveg
6GI77nMyq6cfiR2DbIsL9v48uzVGq6X5EE3iFQQBH6nMgfhYQoXHIj72otk6MFfshCig
fR7niP0eImiZw8OcvVjg
System.Threading
add_SessionEnding
NewLateBinding
Encoding
System.Drawing.Imaging
FromBase64String
ToBase64String
DownloadString
CompareString
ToString
GetString
Substring
System.Drawing
ToLong
set_ErrorDialog
DMPNOHPoysrnbagPnp9ZUYV9CP9n1xqHc5JwUioBvg
awGyCBwY9h
X8mgegjeBh
0zX9tpPxJU148CXrYDRh
JNEm4gl9Yh
Stopwatch
ComputeHash
get_ExecutablePath
GetTempPath
get_StartupPath
GetFolderPath
get_Width
get_Length
EndsWith
StartsWith
IP7Qe40JPi
TwkYoMoGkhtA0KFNU8lAq44cmlxAiM10IFWBeSexJzKUW7qoBAWCRkze5FABfcecJZjdQA4ETg8Uoi
FV8bza5NpTBCtus2E8aa0yL7OAMkvAQ5NsStSAvcCjR68sh9Przj7CbdeuncMipKSPvi
Vqa6PHqeT3gpUeIwDg5KxUIq7hnYhsrOX8caA9qeZ2IJx9888S9A9cyPIuRAOLmaBlDj
7ofvked093T4EjuDbxWvMpSAdBHaUGTWom6LINSXFXQgcFYLwLfxQJj
WaTfMlvBlj
GqFNeN1UoJKhPMnfRAWmIgOnocRkO3wcjtMCStFV4hu6ofCdiIvxLaCMzdET0ITWeuqj
ITA1DVsegZTUoc0IYKlGOY1hAwPcIp0SAgwrj
vFUHJuyILlXCRa6iGqsMbQuGF4W9Kgg0jTu1k
C5b7xXNXo2SQcK1sb9JlpFGChnoiiN2pkS6lB53DxsQjVnEZXaltzaArUDJMJjpchZx6ssYAk
or7sVDUElt9ePYXMUEOk
GqJHvy0fQ5j866eIVUe4vlfUcUlv3T0rAIo74i3CRYU71Ia4nWL1jSk
XlRK0Gb7JQLpop2MI7YRZP1LuszxC2Gno7mZk
CjF8YpWoak
PpVcrMqwN9w4WAtVIEIw3Hh61YKZkMyofH3ck
get_ServicePack
AsyncCallback
DelegateCallback
TimerCallback
RegistryKeyPermissionCheck
TransformFinalBlock
VUYHMdr2pZvJeq2DLzek
ktVJD0yVdVg8Pp6kfDok
uVyD5UwHH4SEFvCEsVnaPef0O9BrIX2P1gjuO5EYqZ7J6mpPV8uiS8N0OQOMDvTeaSrk
ZMoj7Q67wk
FLZ58sTErK5C096SJCzncmUiiGZs6knPeZgZfB8XLZf0ku6u1ey6SGacV21TjfmqUyAE90VhqxpG7atCATU2MySNdhrOWHl
RtlSetProcessIsCritical
Marshal
System.Security.Principal
WindowsPrincipal
ConditionalCompareObjectEqual
lO80jIxVbl
System.ComponentModel
oWB3g4Qbgl
9ET8R18QbTo9A4qNtSP7MteEs2tVsajWsTtn1Rg2ENcKiXLB5w0Xd8kdwQkfgRvOWcLukl
LateCall
kernel32.dll
avicap32.dll
user32.dll
SHCore.dll
NTdll.dll
set_SecurityProtocol
ObjectFlowControl
pjzYhDw0wl
8qMGB4Z6EEJ2cer8CHGRGGjBfsMGLsE7YWY4LIIyb0B2TYvHXRrpv5cL1WN0okLTut4m
4oOSKwRrLm
HYt11gN1JA5XRQDmA0am
CjuFbuKrt6tGLRcQdzgoOMK5Mc95SkJKzwqEVHvcam
FileStream
GZipStream
MemoryStream
lParam
wParam
FBLeJSFDZXPiqvkHxHLbb0tMtDojXv880UT8od2VuPrcKNfJkQCuc5HHkomc9VWZocDKRRKYanf7bm
get_Item
get_Is64BitOperatingSystem
SymmetricAlgorithm
HashAlgorithm
ptmyOc8qwvAy3tG4J7779JCnyVHWxOKkjq2ZCw8siHC7xwoXst7XBwb8MYJAMfG1Q8mNkm
Wld1qG9Bom
Random
jelyOnXaBnp6ZX1kaj1EgB3qY2J2n6LbaXlhfEvVnWtjNLAjXyaIoS3FsodycmjDNnXcDfvtk6Ofrm
ICryptoTransform
pd6u1pYt8RJwLMrUOwzm
IqDV5UYK7skP3AcQks6n
axNsvAVrPn
004Qo4SgRAuWznLFtqUBlIXuzlqiNRE5JZJSn
ToBoolean
op_GreaterThan
TimeSpan
RxIvv9fxGqd6vLLAsGWVoBFwQau2UivXySWZAx9f9mmtnjftvSADynyRVaqK7NEge02rS0SAQMNibn
CopyFromScreen
get_PrimaryScreen
System.ComponentModel.Design
AppDomain
get_CurrentDomain
GetFileNameWithoutExtension
get_OSVersion
Conversion
System.IO.Compression
Application
CopyPixelOperation
Interaction
System.Reflection
ManagementObjectCollection
Exception
Environ
SocketShutdown
jYMY4gFs5o
rnrvlJCkQo
VwrBC5HRUAUWPjmsrlXo
D6cZGFo8BL9zDm87AQrqhZqPKNxOueQQ3XESDKpF2EaiQlEZkbY9Hbo
p1r6VcSrikOBFl17eZbo
get_Info
MethodInfo
FileInfo
DriveInfo
FileSystemInfo
MemberInfo
ParameterInfo
ComputerInfo
ProcessStartInfo
GetLastInputInfo
DirectoryInfo
3Pmj0OHv5o0YnK0yqbm9lOAX5v5tEjPmSQI62frIho
xwP7Fk3tjo
W9Po53wozKpkUukrX7pu7VHmUuwKjFoP2TFrh1jHuo
kDOYeq48RD6cORIDxSiWRpSbTgVSaBfgOjSKzV0Y6qCUJW5C5vmC7vo
klGH5f6q8Yl3RKWon48p
8FLsb2u6ap
Bitmap
NLtXpTUA32680Lg9TsdPGzrk0Xa8MrOGHEogDjFgcp
RRqVn53U7dwGQodA3fpKk9Dksm0uRLswIMrYVC6s03u3w8fJbemax6H0EyC1mdhIk8OcQ9MNV4D0EzroKNLlb72K9L27dmp
WIvBuIGiq4c1SEAOo3Bxf47f3m0TZWz6GwtfxogXDrdwNvXwB2LhyPgYiaCxFZQGNdz4y5mb7tTf0n11jQsQGKs4RXXejnp
U5qBAsWTJKcR26SgvBsp
8PtvX4Jcyp
ZIz0x7px7q
byf7U745HhMig9YYLhV7NAEIQltpbD4CZ80lH0ao8d0fMbUNr9RVu8q
lb5u7YmVc39bS2ZHfINq
LJkyWxcuOWTIhZQqisZtd63ozuvJXrWvgScz1XBL7gRE882weYs4ROq
YNyalFAAuI3GCbBcA0uk3zcMsD9ruZC9IUlLtLaFXq
9ykMDRtYXq
zZVvkSuhaq
ykyQQLgfu89DltoVISmqH0dbcFJI1IdUAds6bibtWelGIRzNmnmqYcq
jSAqWxQjjN8cKk4sJmfq
PUhL7VIQnq
System.Linq
GmMMx7P3EEJBNUdb558TCtiwF6WNRbJoSKmkqcfNrq
k8RebJLCA9GQyyeR1Hl5WPPpDAOiQCSDGfs0cG0fBvjpne4PF6Ux5sQ7XWajwOE2lmTA3hAPNH8HfOSIfjkKGoHzd8smItq
34uYGhEqxq
q3BODSI42r
doNCdzJEuJfw8z97dkLA0sFuo2kHtdn8FwWDiFLl7qtdHiwsHs2oSaOScHmHiq9HdpIr
vIcEG0xYWr
tQHU88zg3UheUdViH8fdkjMx0MXGJlGj6oTXr
MD5CryptoServiceProvider
StringBuilder
SpecialFolder
ServicePointManager
ToUInteger
ToInteger
ManagementObjectSearcher
SessionEndingEventHandler
System.CodeDom.Compiler
ToUpper
get_CurrentUser
StreamWriter
TextWriter
BitConverter
ServerComputer
ToLower
sNAU96SCdBoDOcXbfdFChQvAcwT6w93DaViFkzjaJdJawCuHVKhY8Fl66Tqlamc0fNqakNQy6qBUtldeGVzo0VgyklXfHgr
ClearProjectError
SetProjectError
IEnumerator
ManagementObjectEnumerator
GetEnumerator
Activator
.cctor
Monitor
CreateDecryptor
CreateEncryptor
IntPtr
QXFdOJhYTMm2e6IZU8VBznEGNr7o47nwundUsVtQ0s
fvb8Zhzsab0LLGY1IDyQJMcVgihjUHxMtLN14Cj52s
bKC84IL1OTsacFhIziuLUhqKXWpLxFhw0AaiYL77fMcSRZf6jV9Gnu745gHQl3MzDw2s
ylgMETmr3s
SFNkcFFi20npxqgnYXCpmZJzBk27J3KMBDbfLi0DKYprSpx8JRnVkBs
VHzpZnM2fvQRKpFbvSiE2fuhnaV1poQbdb6qjlL35nNxl0N3XQdS5VRXLI8Ub7oijmZedxbbE291Hs
JTGYrlNcPs
vMbgBAQdWs
Graphics
System.Diagnostics
FromSeconds
get_Bounds
GetMethods
Microsoft.VisualBasic.Devices
MyWebServices
Microsoft.VisualBasic.ApplicationServices
System.Runtime.InteropServices
Microsoft.VisualBasic.CompilerServices
System.Runtime.CompilerServices
Microsoft.VisualBasic.MyServices
ExpandEnvironmentVariables
GetTypes
GetProcesses
GetHostAddresses
ReadAllBytes
WriteAllBytes
GetBytes
SocketFlags
Strings
SessionEndingEventArgs
Equals
System.Windows.Forms
Contains
Conversions
System.Collections
get_Chars
RuntimeHelpers
GetParameters
Operators
GetCurrentProcess
SetProcessDpiAwareness
IPAddress
System.Net.Sockets
set_Arguments
SystemEvents
Exists
9YEoBxaaaQ5F1XydHEoCRZkivZuXI7WMXJZ7aEVudhsBMvNgw8dBW1QscYm1wLKRQFhbt8nr94DG6t
jUqunqsnns3ASr6LOb0rBpJevCnV8VplngEvlgqjUQ1brZ03tjfmmGt
a8GboDU4Nt
Sdd3444O5FT1Mz3HFbXLD53vGMSWYoxh8vGe8CMN4owx0NxaYsP6l5x3eVbO0AlNCRl1MHyareIutn2xQWz2UyB2EiLqcPt
khlN7weIJDFY5cJPVJbIcl1IFKLTUEtenFH54hbFsxRxmvaqmaJ0zRt
Voy7LpodVt
Concat
ImageFormat
PixelFormat
AddObject
ManagementBaseObject
CreateObject
ConcatenateObject
SubtractObject
TargetObject
ManagementObject
Collect
Connect
set_AllowAutoRedirect
lxSs10r42hEDGZrVMOdt
LateGet
LateIndexGet
System.Net
Socket
6VGCiaFcVYFys4nh6exJhVz8ErktIU87hGTQv9gUdvHHcPwDeJgeYgt
KrXqyx7ogt
bRsqjuGBi8WwR1wJSzIqojnbHI8RgqzXZevvqV2C5jRgAmNEMOfaWovTx8C0eDonlqagkDqKXIsZ5vYXpUEqUgnFbHTS7ht
get_Height
op_Explicit
set_DefaultConnectionLimit
GraphicsUnit
WaitForExit
IAsyncResult
DelegateAsyncResult
ToUpperInvariant
set_UserAgent
WebClient
System.Management
Environment
get_Current
GetCurrent
CheckRemoteDebuggerPresent
ManualResetEvent
get_EntryPoint
get_TickCount
get_ProcessorCount
GetPathRoot
ParameterizedThreadStart
Restart
Convert
$VB$Local_Port
FailFast
HttpWebRequest
$VB$Local_Host
skVYpVAXtt
set_Timeout
GetKeyboardLayout
MoveNext
System.Text
ReadAllText
WriteAllText
GetWindowText
6S5EshaWYu
OnfptmBDdOvUnIglAIlu
ir4UHiaGeruYVFh3Crm6i2lDvzoUrXYC20FkDaTjDiswFEwC9dXIUmu
eClDnlpe0v
QDASLeD88v
qM0IIecddjFuyoA1ZCzPjG3dzMN0HGG1Kr00aojE1GvqYug86quON4BHDO2Wo7pa5FA6s7gMIaadEv
MysdwSEQYK9YCL0mDmqCaKbKpTHynzErhXIIv
PU5Pf4w3Mv
A09AK6zVPo7NdCeN6TwZfry2LMJ5LwzvZeerUJX0pTTE0UHdKmW0wdl461cox7c32juUiCi6l3NHVv
Pz0bbqsukujickcGOeWv
E8jZmMiDG4ZNY5arQtWBpNPuDYhjltu66hMeEPpMD73s4vgiYdZSX939403XepU4IX1DmYevklwRxJnFnZdhrLGiKiKS2av
L3SJoX6n3lred6GsqLb495bfwreeyWRv87NkHYWdqtNORpU0HOApY1rh0UUu8XJLdiCkhzQ9fixxhv
rORpxHMff2p22p7mDVrF0w6dYTNFqc7SHlaNMZkzeqVEFo7W3rxCzkkHhjiY0w56Y0iv
ZE7n2lyktHqaaXJayl5Ri0npXwVy1tMMJnnkv
Tq2efTfhUEEHVFoeTbtoIMoWAiyYw3IcvZ5sv
1Tz6pqxnV9hmDB8GFJzv
CQ0owack2w
48hwtHHv8w
Vm8MOELRqbIx2VkAitGw
8fzD5sXmMw
h4yjAxPQTw
g1nra9zigw
GetForegroundWindow
set_CreateNoWindow
EwFA6Zwh3x
L18MiLMZ4x
ToUnicodeEx
UnhookWindowsHookEx
SetWindowsHookEx
CallNextHookEx
xJZjN28huJydwLIrK0OscY6CS1JS4QPRyoTXcuZ06pbrsNt2b4y7FTx
g1PQVD03Ux
LateSetComplex
iAw6M211p9BWXFUMw2CGFITs9VOBIz7ZyQ7fuKETj1kQ0tjVstAOMzTpXAK8z7t64FMVY2HiJn6WdfgW0YP4QJFdP96s9kx
SgjzRcIlLGRcAGhQxVK9dHLNmsbQ6ff3JPlxx
9rRUvfx0PFeADXStixyx
p69lDV2gGlNYLjZRgDJj35CyMvtGEKYbOPCWxOkkVmsBUzw0HK6tL4eAPcqTlh5TLtkIox5YXU31GP7H6pyTnzx
Vy2UKbnXe73BIP6YlV7spylwdrI3I26vbk5DhVZBflj6kn6YNO4qxtNRmf12q1ZfdNwr1y
BLlLwFfa5y
uCOgWzwR6y
UdUc1vnUIy
ToArray
set_Key
CreateSubKey
DeleteSubKey
OpenSubKey
MapVirtualKey
RegistryKey
System.Security.Cryptography
Assembly
AddressFamily
ObjectQuery
get_TotalPhysicalMemory
get_Directory
CreateDirectory
get_SystemDirectory
get_Registry
op_Equality
WindowsIdentity
IsNullOrEmpty
RegistryProxy
OgNxBP391ykLFC2t0WSxoZU1VKkwl1RbJq4UyaqufG75lYEonK8wZ4z
MaWKsDCFAz
xOHnp6UEfs2vNRzsfFEz
tb84Jb3LIz
l9e6cAypCxHG7C47U8Vgqp8VyhLF2tgJ6EwglHtHnOvk7mQknhhazrIEPrHD8HVueZMz
jp7Vio97Nz
DVebNMj9Zz
tWtI1jXXiFfO5l4T5R6VuY7pAR5WN3EFjXacz
i5agj1J3jz
WrapNonExceptionThrows
$720cc8e2-75dd-4212-9ba4-ede180da7d16
1.0.0.0
MyTemplate
14.0.0.0
My.Computer
My.Application
My.User
My.WebServices
4System.Web.Services.Protocols.SoapHttpClientProtocol
Create__Instance__
Dispose__Instance__
<generated method>
<generated method>
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
NXyDEudeZbtKO4RegXF1zL6lCmcTKXM0iucXjzqxQx
CIyeV8OOeYCLH6PCWoqAU4OAnKp8fC6psT1zZU3CPsPwyrEYUunqYKtxP7o1lfiDLWSxxrGMJsGebH
wviabH3JdgCYpZzuqGF2iWTygnXI8uVk0pt1m8IDiY51XUbVW2TfcF9rM5WrnzDO2MgPZMK1xGkW80
xyK3n5EO2CeLXpvWBKlGC9zSp7ZlBTEi0C406irV85IyrRMDvHAtwUc7ufqtil8hPOHhgYJ82YhUHt
K8MzhU0dcWfVoDLsfQsLmauVDcnZyrKy0EbTkwZHUK8FrXOoOSE76OrlCeAypXz0pltBYz5oxwVLMB
asxIK959htLYFyOrsrvU7f3bifIiCH1mkUnBQsTKwwHIncPfPVlFB5uXboXAoe2FeCYjz7M5WqExEG
7HcyL6RFnFkynM4C7kn6L414BqUTlk2WR3BubMDxhteERfQoC8PmFFci8IlAYsQB3Kqk9qzobMQJ5c
HwF4kyn0U1y2w8CtdH2NrQ==
lqvnDwzEhDc2WMpCMaQFlA==
RG7ip2eGds0uOVNB/bGP8Q==
fbqkhombTvrEStaCBw0Q9A==
QVVWiPmBixmUE0KBBoEGkw==
dKVo+OWvrbrDVmMl1wKJ1Q==
GVOFb0zbx4rzDWbgUosZSg==
t8mNCpNxhj3FW921EgkQqVdsOgEjnoRDk64iWWgv0EU=
tdsIHFAKgwDQ8kKX
\Log.tmp
SEvXtFTc8hOpiv7v6x8gkDV5vOyodEMGDfckyShxJ6WR2vePspfuCnefttmEO11potc9TMrhXLhV4Q
zdP4Uqa4IVE0WCm5EL7hc9FRnpCPPkGmFuTz2d6LYWiVaU4fuphVwgj5pLf38iDfazR6jarldxfd3u
schtasks.exe
/create /f /RL HIGHEST /sc minute /mo 1 /tn "
" /tr "
/create /f /sc minute /mo 1 /tn "
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
WScript.Shell
CreateShortcut
TargetPath
WorkingDirectory
powershell.exe
-ExecutionPolicy Bypass Add-MpPreference -ExclusionPath '
-ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '
http://ip-api.com/line/?fields=hosting
Select * from Win32_ComputerSystem
Manufacturer
microsoft corporation
VIRTUAL
vmware
VirtualBox
SbieDll.dll
tQ1ninPGRqMld40TItoVz5m5KHUUr32yHOfYp2QmhttHECRGdDsE1BWXOwBJ9JwgKZWc9rNgYEfke2
fSuzb3vGay9I7saZJK1kD1Pnfig76fLyD9U6uBLpl9KpatBLSPZHgcjyWXet6SZJ7H8NTHXsgT6rqI
0RnkEw1216YQpAXEYD4MIF5Lk6y6Vu7g8oTq6VFgwM9BPZ06Wvb3bTQ48dcvSrsbBBeXRcoankH70d
7aGyR5CLXc650w79X69d7Hz1Kb1eDfrmXT1ffUiyJVY0CGofwmpQrulo6fOfcYCv5DMIKaZFn2kxAA
iXneBxb611INfahoZSKsbRV20w8ZPzMlijM0ek4LNVQxmPl1WVyoewIONmCUUPkw1z4yjtpZtDloEg
L6KUSYHx0DeraeDnSFtPhiDgLkOkAiaOKF5xNoYmGJTIQSmk93iBwyFg2bXIqtEzT3g6MPHygtneMM
2F4uZrwI4e0KRHVId6JLX9qy6VDEAo8qQofXL1hHIb2VYGEnTA5UUwn4FFy3dWZNz8fXxO6oAkdrGm
aAo34hNou56SRwpiV1WKMCCQejziThYZyBCVc58kV8sUqQ34V1wMSRpYoEjWLwdnEMg68ZNhqQExKt
psAfvx7jsrYoaRRzyXfL
xFss109Pd2YBrhI5JuF4
HWc3jgQ9Na4ldQhaR2PH
U2dIqwZmaFLvMig2L1NH
NJ5drox49QQ6Yq0MkT7X
pasxofw0LcDw7gH4Dj9I
Microsoft
Service Pack
dd/MM/yyy
\root\SecurityCenter2
Select * from AntivirusProduct
displayName
SELECT * FROM Win32_VideoController
Win32_Processor.deviceid="CPU0"
Core(TM)
OlPnlFWB7EWEu7uvBPDs
9F9yW91DTvjSh2nymZ7g
7VIpRYZJlc29vjJlrUoP
7KmKZ2ebU7ad1vlVYi2o
l0Bx7ObY4yZqtTp1kCQE
W3daSYYK5JSXBxg0SJVn
YwVZtt8mitH5Sg6jXwJl
tqjEuqfg3GnoTTdkmg3r
OlTKZKfMxykciPVZzi6u
zHAUIHvLzt33suvcGOy3
7ddrp5CMMHM860dkDWx3
0M4i96cXSbwziAoN6Opi
riHtJfA2mGKFMrthKMZ2
zZNZgbPzOKuGqaGRaXxJ
gcmTC2sMHNJ7q0BiZKgP
EasoVTraCXeDgQUUvHgu
w9EKXjthPe7NLVmOXwPp
q2uleDYLx0xldHa0nNgE
Qq1oKvqXTfps06DMbdwy
E5AStUY4YomgS4gp4bZI
uyHIDBcod2tbujgFHMMs
uninstall
update
Urlopen
Urlhide
PCShutdown
shutdown.exe /f /s /t 0
PCRestart
shutdown.exe /f /r /t 0
PCLogoff
shutdown.exe -L
RunShell
StartDDos
StopDDos
StartReport
StopReport
\drivers\etc\hosts
Shosts
HostsMSG
Modified successfully!
HostsErr
plugin
sendPlugin
savePlugin
RemovePlugins
Plugins Removed!
OfflineGet
Plugin
Invoke
RunRecovery
Recovery
RunOptions
injRun
UACFunc
ngrok+
Plugin Error!
ToLower
Open [
-ExecutionPolicy Bypass -File "
eKaWB51Q7s5wmAU5KIaL
Rc2L9QkdUgAcmGdHGS5V
77JwklLXnCog2ANd3gy1
kUOwgURFakqN0hCHGMBKfUeNnnSPK2FCDJ52g3zjQfXRz0xi0ir0oeLSia4BMxYAf5BCWmRN0b9nzD6qJGiyV0PgLihwjAk
3wx6VHvLZL5KORYGHIqigQr0QuO6VspVcoLORjgevsiqRlBXkvcZ2TypxelAIaasI9AdqSE1S7n8smZm6Nsw6xHjGNfvama
KFjqhvavM6Uv40CNVVbDOlhamOiMmOF6vlZqJM5z0cwcXy1YXtb6TsB7kP7DEDHMjJvnspMIIsyWssFgQnv4lnO4TZqU1Yz
mUKAXHf4akyuDcBJXNfCn2PiC76qgHYGs32wrgv9ssIxHyRthqZkuaqCEyMnoFdADoVTqtqH3lxDIpEUq72vAsTLJYpSa2f
PMZQDeSTE1GNXOYaUoUaBjppVmZu4QZaFt3dqSC3ZamG7J12k2tJfV9Fi2GT0dr4Vcz5TeVQ34VDXAvpYn85lW5sUD2yInj
Cb3Lh56x4GTDbNjZ4WcyJDfLaITguO96ZhqDrJSskV00R5aYUVqyQ5UxGlCaq6IENHvFBNWRXJ9rD4EiNmBYTnAm6Z4Oxae
XUbYTcTDALptgKG30caB3PxQ0JS2Yg4k9ONyBKKlVxpjv4IpJXxnddQwpzk8jbywGbxNhpyDBMkKidJLA8qa5vC4kF4BnQm
uh8fLMdRbS3QM8RONs1jl9cA24zzt335PTDgFQXOhbm469QtDDZhAeCRUPQhusGyjVkdKXLTt82FzHMnhdZd2qq0mfqKWLZ
7APEYXvAhPUsMgnaUAvqlfjuInIdZlkQwlP2DpRBrjGxiUHzpXBJ9JxPh1EpOw72FZB40AZpRueuUHKY2a6MNr3952OHlIk
vCcCLkkUzjD096pcTgWes9TdoBRVNAchLUvI3iI94jbt9TOxMpfzk9mTSUy7CcgcWtTPQPq2yqkpqzhRu7YYwk3ijzTDf2R
06AgxM0yguDyMS0wyujvg6jjz80mJA3oXEQSUzL8izFMONa1mnDJPwyzAht2kUywaENczSfVlB35Nk1rdrfwotq6QzadMOi
QFQhFeBJWAunM8gykzc8LsvzkZimh4o0g1QJqm2BC8ou20P88pmyyIbbhaRb4C1BQiiGWpfupPIkBByFdd7W0TCv4BBVfUx
xzmx06MFwUcDS3HSdzwtBgvNEj781iDogHVUVbL3xIZpDx1DNy4EsG6EaQqShzHD9Gg3MyDjxiDeSGtkMZcn2ysSrms3PEc
POST / HTTP/1.1
Host:
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
User-Agent:
Content-length: 5235
schtasks
/delete /f /tn "
@echo off
timeout 3 > NUL
" /f /q
VQ3KCpFDdNxFHKoxzl67YK9yRjnVyfGsMXn5RaVUDpyojhcQ4By8QrLRxNzoe1PAMXEmpo357FtyX005vAlH06OEWWNuLu9
m87ntws0G01XRFh4sgKWORwh8QuVOpHThZu2r
ToUpper
[SPACE]
Return
[ENTER]
Escape
LControlKey
[CTRL]
RControlKey
RShiftKey
[Shift]
LShiftKey
[Back]
Capital
[CAPSLOCK: OFF]
[CAPSLOCK: ON]
MainWindowTitle
ProcessName
BSkAHjKxlTmavIyyCOtrugTWHwhvcE6h0f2Jg
KHy5MIPyp9OuUsZJwkiN4A8qpSVOKJPMGyPBo
afHknjnK0ITV10yB1CfHs479Xbba2pMPclYnq
cyuOgqQ3RToWC1uF4s97MJrfUbAhucgnUdEEQ
wf8ihs2WE724YtX5q4GuKUd4yZ4rdO6RC4chN
72rGSPfZGcOWYAImupumKqp3xoOu5qpl9Ljmo
WYW1NAdsX1zh0pbYZK0QxrespzqVmlVGhsQlT
cJNzdjJ0kCTNSVYHDtbnmAI3GmqTGpgRoIFwP
Uvq07tgjsPr1rFPi4BzRostFAHmcxdMPZrD7Z
LIN5KaJDbw12qHBcOCuelIqRpRouOO2Qx3s1n
IKRSOUa7VRSS9BUyxxYjkTEs80O9ADj9zUGV4
esBBr1BcYpU7k8sd0K4RnydYt3NDBppRS37wF
1giL1BMNHvnSab6rSH9tsqQnp9jkiINaug0oF
v622cmp52LOrwHyIEnWzWJpzc4PKRwho5Ydn8
X3jmbEUWr2FPF4dCbuFpXgI0VWxD0ZIwiiQeJ
vUCCBQMOarWSMRbonzJrBduYBLCOAz1AS1xRo
d7Mik7LJhnHcjmYuLYBgqC4tBnFatKsHvmx47
hx3O9WuzIt5sovQBLcwsZTGVPu0Su6atYIi9f
oA3hUBZY9dq9tr2khGCtoBiQ5A9QIqjnETBoR
imuvfJu6kTp8q1Tn89ULSrZgdxHBrlJASj5SM
PwE5UmL9Zw2k1nOoA0pAYTDNdlU3Usuk3qkbD
jkExD6kdMgVIuOv2t2SYRE2w0N3RxpkC5aecC
AaRiZe6MQqFeaTl6iiy6aIjTw0X3HF8TP2QrM
mLfp9lIh3QeGwT3Ru664tHwpTs9Og8YQ3uHzB
C2zxxE38WNm676bThyHpO0vIBZDaGeVaNPHYo
Software\
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0
Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
abcdefghijklmnopqrstuvwxyz
Err HWID
ToArray
wWTdnbwOma0zIMtOKGa8gdPgsUntZIBF5f3D8
KcNhBAgGo2tumgVRNuzFxLcUafe6ZAW2GA3QeCErMcliTb5GMYxx9OCkrVodmUi1UPSNzy
vP9ZyBpSCKMoxJECRHf1Z90Q5ox7qWOFg3U7u6tQViZv6h0wrjeCRAsQwFBPnr2wdzpdnV
kmXd9K0MQ3NEINlXmMkRAaeA92KXzLP3dvUjMc5h7MlFmgt74LWybDRUT7O0JEE5vcFUg1
i3cTpeAcPwS11EYylBsPGaoCWnbefejEJbd8uxiP9Cw0Jjf7GTvT3RHRsMoePyYE902zzn
IhxKL3UZYMAUfHBHS35iVr3QSaulDAKHElNGu9GfehwfhtRAtVIeETWrBXrjyIldAuiNYY
8JT0GHkRbvMzF0F0oOaK1cmRZuagKGkEcO5ZcmGYw4dFEXhYTRMLYK64Qa2JRo2JAS8BhU
deNcXeMWZWtjyFftwR0zssCrepBDlZStb66hx4uUffqH0OutUcYtXyL
2dswyQbrezECKbQTjaN31HsY2IhmDoLsFwVGbrQ3bkCdJqQ3udk5cuu
iPmsC4aRcrqGG74ECXQkQcBzIKOV1518JT0KEiONE7DQstyq2tuNTRx
W55NlJyf6r7aEL0Kawn3tpD4vm4iEGIVDNIe2W0I0P6RINjT90uLZUk
SgZFVUgtdR7rVwX8i3dT8u89tu26KOPyBw7buEzHRyZjb6k53MK7BuQ
4dFjCGiY75jlW584vJeOKB2Bsk60B3EMvcX6DSP5nXUcqOUWDpd2P9P
Np31LXMkWNQh5Dm5bf0n0ho1taX38SYr7zl9sPErpH0zbv1GO8sWbdw
DXOCn9GvS4dp0uaHhzjkN9xxqukL9SDoO7s6aSB16j8NnX4e4r6oqls
HCRVHaALxXafPjl7rJlGd7Wbe0xrJ5EY7VlarhA2Mu9Upl6EMDgw9yf
hauCWM10HByXCJATyRHMzAhJBdzAsgINp96EACPOcQhMT8t2WAz4DUc
4bg1G8nzfdirA5rdFmcF8gUoqc8QITXSyq86xoyIjFxzlPOvsKTcFkT
8AzpXT0FNsVh0kKVd0zZgwOto2o06vVAwl842GG9biT3xvEAUnBGYmP
rmHBlKkZaqcdlLzdIoLgnLuVZ4mb42RM6T9uLGDRlVce48BfgtAEu5L
pbnZe1Teh8ly9G5ONiQi0UULJiAX4lykYpWdmXxQQ0xOaN2W2zpN0Wq
DZb7P1S9z7y0RE34I5JD0NfsHIOQJMHfQCFkk0srmU3TvjNOR2tyRCX
DmlHC2TiiGsBBTiCuOW6NNv5A6N4HizXlIRYGuUIt7HvlpiorLbsIVR
CKfuNMuQctZwPVCGkcIaayDYJ1J8pv9niG6gw3AtKNDjIZcEVdVmMLh
p56XOHbyUeqlZp2ryWZDKU7oPOZ780ZXOhk4XSsIEqXjPfeZ62uHypf
9DJAiSKftupA2asRgMnnES2RSpmY4W1cKTBz8rcmVMO4P25YoJaSYQZ
Fjplo0NxisxiK3fj01BiBNJSmgpGiBctcIftbygJT6w5aXAt4D8L3oz
nCqujLUQxNTboREGP33Hc5wqSxUEMwKtTqqo3Mot43MCebj2b9iLiKKJvTnBVUB42tMEKypdC23Vc7GAVi0gvXZ
abcdefghijklmnopqrstuvwxyz
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
FileDescription
FileVersion
1.0.0.0
InternalName
LegalCopyright
OriginalFilename
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
Antivirus Signature
Bkav W32.AIDetectMalware.CS
Lionic Trojan.Win32.AsyncRAT.m!c
Elastic Windows.Generic.Threat
ClamAV Win.Packed.njRAT-10002074-1
CMC Clean
CAT-QuickHeal Worm.GenericFC.S32598663
Skyhigh BehavesLike.Win32.Trojan.lm
ALYac Gen:Variant.Jalapeno.640
Cylance Unsafe
Zillya Clean
Sangfor Trojan.Win32.Save.a
CrowdStrike win/malicious_confidence_100% (W)
Alibaba Backdoor:MSIL/AsyncRAT.37651e76
K7GW Trojan ( 005aa5f01 )
K7AntiVirus Trojan ( 005aa5f01 )
huorong Backdoor/MSIL.DDos.b
Baidu Clean
VirIT Trojan.Win32.MSIL_Heur.B
Paloalto Clean
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of MSIL/Agent.DWN
APEX Malicious
Avast Win32:RATX-gen [Trj]
Cynet Clean
Kaspersky HEUR:Backdoor.MSIL.XWorm.gen
BitDefender Gen:Variant.Jalapeno.640
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Gen:Variant.Jalapeno.640
Tencent Trojan.MSIL.Agent.16000605
Sophos Troj/RAT-FJ
F-Secure Trojan.TR/Spy.Gen
DrWeb BackDoor.BladabindiNET.30
VIPRE Gen:Variant.Jalapeno.640
TrendMicro Clean
McAfeeD Real Protect-LS!09534368A2AC
Trapmine malicious.high.ml.score
CTX exe.trojan.msil
Emsisoft Gen:Variant.Jalapeno.640 (B)
Ikarus Trojan-Dropper.MSIL.Agent
FireEye Generic.mg.09534368a2ac0766
Jiangmin Clean
Webroot W32.Trojan.Gen
Varist W32/MSIL_Agent.BUD.gen!Eldorado
Avira TR/Spy.Gen
Fortinet MSIL/Agent.ECL!tr
Antiy-AVL Clean
Kingsoft malware.kb.c.1000
Gridinsoft Ransom.Win32.Bladabindi.sa
Xcitium Clean
Arcabit Trojan.Jalapeno.640
SUPERAntiSpyware Clean
Microsoft Trojan:MSIL/AsyncRAT.R!MTB
Google Detected
AhnLab-V3 Backdoor/Win.AsyncRat.C5360693
Acronis Clean
McAfee Trojan-FVYT!09534368A2AC
TACHYON Clean
VBA32 Backdoor.MSIL.XWorm.gen
Malwarebytes Backdoor.XWorm.Generic
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Trojan.AntiVM!1.CF63 (CLASSIC)
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Trojan.Malware.300983.susgen
GData MSIL.Backdoor.XWormRAT.A
AVG Win32:RATX-gen [Trj]
DeepInstinct MALICIOUS
alibabacloud Rat:Win/AsyncRAT.Stub
No IRMA results available.