Static | ZeroBOX

PE Compile Time

2025-01-19 06:28:01

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00013534 0x00013600 6.14037238309
.rsrc 0x00016000 0x000216fa 0x00021800 4.67001717846
.reloc 0x00038000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00036ccc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00036ccc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00036ccc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00036ccc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00036ccc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00036ccc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00036ccc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00036ccc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00036ccc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00036ccc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00036ccc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00036ccc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x00037134 0x000000ae LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x000371e4 0x0000032c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x00037510 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
3j%(H
v4.0.30319
#Strings
yeg7rarZN5oNglC3iC0IIVPp90
Wg8FNeEkSDpsXqRH6ZkdbGDmp7Hwc4kuj9LYbzIIhqoXFcj9jVNm4dhDg88xzna7DoyvyvKFtu9SlWlFMV138n1LrTbOXCti3I0
cOtzo8UlULkKceIqfAYlsDGOM0
DrbhVrgmu1tWX10pUrEE2rutO0
31Pym5C2I2SST2gnPk0uNnWSV0
wHjUwHMEiiiBQeH1MF1jMB0FzoRK3KMIVuN6Uq9e1eJ2fqzVflX7UBLAQp9pXhMWr0
0xTGVlMzM1uXSoHG3PxEyOKznwpT7SZakvVuXj4VqxEWF58DM6MElMqxRXkogCoPbzasyge2NgXkHHjs0
vjFtSpUuECK7g9zs6t3rpIElv0
t93BDgIPCky4u3GpiS2dF4tCghNA6kw3FEIwXRxiZ7vGkTPdAckLDSxxrOW1SkYxdN7beWdUSvsWDR251
vw3bNSMRpmbv3xgkrQh5eRC3E1
DkYx9IaJhhZzw8Jefgumat5fHaVebNf3YaYhf5xF9CkKpm0H1
hUTAKyaSGvF90zMHF7QzAa49W1
_Closure$__1
IEnumerable`1
ThreadSafeObjectProvider`1
List`1
BxBtYeEJ2oZkehwaL2ompwGyBB4x2PDG9ngIezm4aNrNtfm32UZPbpBBCDZaeVNJe1
hKNIszy7M42h12Q2YbittlyBl1
Microsoft.Win32
UInt32
ReadInt32
ToInt32
IOBEIEnTCa2SBl9KA8aOxlsa52
lzeQGXbBu0MNQq0G1UnjLsupF2
nLlMIheLw1O8z433QccveRJkHjQRgSoAtoT3GOGL3tCyQFEnCA2WZk5n58TBovSkW2
EEwPbBkjMlgkumOKXBpJIgWr7QmpUcoFOKkItj9J06bYOzJ7OioFOfSykoNWHKmRFgPpTUOYfqNsIbjlzmGmoEGzoYTFRBhAFY2
Func`2
9ZOKZPnd3Ff12jw2nEgZ0z4QjF9LdlQUyZKMjuLIxBKnMupg2
lVUHyfD3NnlDhSPQ430P3LwiYfwODV81NzMSHt322vXcOUji2
N8sHFfeBXrnAWZqmYssuu1TsARsjP8D0xIpSM5tKo7x34kiNNAnLVnBYe7gUbEuCssKbIZTgPBDxB2tl2
aO4H8kDKDlqQWlOiL3ViWJ39s2
BHi8SFKmY6cUZOEYVFgcr1ngA8fEKWCaUzFs7Hl3m5O9PI0UDg6Vxv72nLO63YaV03
4hwHhHzZewaAzQQ5usmmpfD943
XE5jFijqZ8QrsaORTYUz9qhhlNWqZ8Z7nmwz87qRLlKp20WLuo9kxHgeT3
UInt64
47Z99hNWpo6NobyVrCpdFiGqRFTzV7AM9dMGubWFQePoV7IZBGQzmDdMg5f3cQjS58KU48I7h2kqTwjS4
rML34hQggZ5VOssct5yno2Svi0rqiLWAAF5UmS4PzRmKfwkAhM3d54HB4s4MHqhrVIRkm5RLjL8RZCsRUAc4
FFj4qZlkzbALV55GTgIvNAgUi4
qciYdpVJkpbmLLy55IX3TgR4R4OykXnOjsFyGPSxXclUjB1uun4gYPDK6Jh29uNxr4
QpQQltTGo0n7IEgSw3KcaxXsEVXf0vz1CVRYIt7iyx5p15T75
VP4QWrCd7Z2QMHwxYAj8Qg3z85
hblZG94JiPmOo43GSSqaTLdUseN9BDfNfrIfWOF4e0OZlRwGdTJURUDJopR8XeXuWIJJzWWUXYVO8nhD5
pq7zzXwAvGPjZV6d1AEFA96Q7ksnXAmowls7KriJryQGUaGQwURmUqj7Gx0y2mw6SI4A0L1XeFc9LpnxvQSEggUDOEdAJiBShG5
aDrPUaoz9XU4b2xSSbLt6qaOT5
ZjFox861JHRrl80Hi9CI8BgMvL1xH88418HMQCL5NHdT4b97X8OKnsASUTssZOZ9BREs08hf0nu8wIpmGUivwsZI0VFOh8PB7U5
WAYOuyy2XCzRauo9HfzYTSa2IIEl4dbwL23kDEPmQ0pFsCVustYFaI4nEo4ZdhNSEmomZwxgbhkvo1Om5
TcW9MJuGtU9YnFNwIAyaIidajYEvTkxdq28TPa6g1SddOUEp5
f2mAm1HmHAmBsfi3qLJ3LmdhN7rhLHVopl6AKh8JrFZrmahFwWxLmDAZqT5YcD6LsOeIQVVIztDRlwUy5
Wh3ywiHOLwRwjUj54UBUHY6d6ysx1Wa19zPFh6NujejV8aTXLKArUWtxQVWBO5cNoBPoN3IBDbbSTTKoAGI5xMDRCpGTtAKeoI6
wmffLp5LUaVUwMszXnJW1611OojsvAFwQsrDY41Sc2IaWk3b7qpEgUycuuPxYhQfUdlbygQKxSZhSMDO6
DZznVXdXa2oTh433vm4zPxSp4AccskFHnSgMsbGBYUxlvOUvMOecCPZj09NbVBCFX6
7ux7b4VnHiVcOQJ8k95YIu3tq6
hi5ijF93L7FbS13nQ95kDdqgbWxQRK1PQxyZgTAVsNH5qcDEgnRpQziJoxd2KOGJqhWIK76u1cWc0wGD8qv6
UOVsrmsOZxV4WKPlbosQTxS4b3y2xinsYE4d5yYqrlXf31oYygLUgWrLgsUsaAZG1tHTnIFLX3VVzxU27
6FCw17Y0Nu8p8Oxjkbm7wUbUIZhtB5wP7ZOILIiUkR0r1ZkLlCZqDuFibI5qXvT8oxCangotAxusSqNjSN97
UYugbxoRJLEtLJP5YOQoIU7zD7
5KHgTVfZ14GiEAoMoAse1TaVwF1Lfbpv3lcJS9DMVPbcIwjE7
XEvjkx4Me02cC1aEXuQ7yZfFJE9MXp84cbhefEjl0vmdGNr23qPKfHOg1fg6yFyUR7
bLqmPxB4XgDTPK7tuAwrOipoS7
Rqq7qxwnyTMD4UBnOTMSSnLpqbbyunpirbQLCAGb23SWPT2qwIQ4g5yR0rcUPCLLbJKhjBrEWm50gasZ6pS7
UZcIc5T75SgEjOZiDg84bsYMnFeP2gttMkMdRTNUJThgzVNGh9TYR6ow5aUnDm6CzYSIOECoKrQ8HUoV7
rCFw74e8qcpAhoLy9ozzWXuNHCwSFNMg3CrbqkTRpWw5Zw7FEk1wOz0ojjx2kZC3W7
fSkZn0aFI94WsxCfbMMyn9Gmc7
0ueInkJz4nq8ryd8DRROp61Ol7JWs3DCrrhFgjuJByExWGWMBXhObYutHIEV8jtDGZxe9pTrPEy37sTf7
7GV84jcryTXPh4QtNNHVVqI0QttQ3gdNNKiI70bgzKZwHlii6pQNZWoeCa2uPUEarLFOjayzunppQffn7
eveE2XSmCdWplGrfE0nFftps28
b8glqwtiFu8ug1F4vl1aHMvK1qEmvg7shkpkMQSdOjOrKlm2CrgBNKEc6Na6mkybrZtFsksFmOZT6vv38
z3OtvnoVfveVfTuh2jwbmA13eTre8XylPF9lnkL5wtRMuNGR0oWfjd4l6QTUUchWB8
get_UTF8
oZW4ulsONMaqcDGt6Qdu7E1QAGvHSNukMtgpwPwxDJyn0wxa09T6ADKDNxW1d6uuK8
dhQKrGrA0O7rD1zPpT8OFf2FejdqjqFQ6JTRWvuUnFc30on08NvBguc1S8
_Lambda$__8
weE1zRe6dlhGEL60mlNavxrTmzGry9G54l3ykHwOypmbzMEf8
t5HVIcQ1Zl3Ak4XoRC5eCuPEh8
Jmx7WIpI2xWWYIR9LSrKIfE7e1pp6En7yQYf8DVIL0YmVHdDPrAJ16slPDCz6Qd6F9
vMoKxvwenby9BlDhaiDgCLhJQ9
u7n5tqxliuH672BPtXSyLoe0R9
fJlagLycrZLyLO4Ww5FzCcOoHd3CWeKlvwKB7F7RnR40s3QnDDVaPIIhp4QzeRTnlFBhE9p5ObxkDpEV9
SQnYMhy0fWqNyKnBCkD419Wuc9
K63Im3leG5IY6xouzVglqQNmto0H08uOoNLppcb5Q2oo3NTK432nkObOwmnWqwJlp9
<Module>
y0LJRi4WaEFaInXoAZ2stdjY0A
ujtZCFv6L0TDzjCvG58wcOxt6A
pz0PlG4MvkiYi3qQUa1ckSP80IPsYTClUBRVcBZ7zC7vBfwf3QQwJxXKANhgJVSTIA
Ow1RzqTDNo9HnUfy40xPGi68MA
r7qhhlax3fYdrNkijZofy4CZrQNXawK62VU9i3s8yQ5nZr6GUExdtug5P8G7B1ulGuaIBq9tETa4uN3hA
mJU7adoD0IeQ8yX0krdPazYukA
capGetDriverDescriptionA
capCreateCaptureWindowA
vE5WM3qUFkARglglemYOfUUHI2FWbRjfA3JfGfmscOpvXRi4B
ebUm83V2BplxcJdViPb1s8JqAS39fXUHgk9UpaZhUCOH0ZsBrBbxhid5TrWvUt07bJvoWFcCzo3ZcxJAUmAB
IPsNwhSEF27OEdBJkocJ6OXNEB
1klqcutNcMU6c8ZshkqoPBNcur6OnRF0BUTer3GN5gVM3gkq8sPU7UxSTMC8gwxt1mo8OwdR1EJVkQOJB
WviDmCDuFyCs78RZxZBmS4gJNB
PwVhbVqNKmc4jZPDwSRRzJSjSB
edLxt4oXiVEEtXxmmfGX1bYzNtI9aizWynArHQLAp9jhQ7iS1yVdyPV4k6AQZFhXkfH7l0r8CgomOzSVB
F6WFWKONwCt8P0Ld8Rr0EWMniRG1Z6o7CzkqMJuVGUDpuuBfA4vtKLIwzRVo0nQG6XVDN1qMpztbAF6aB
LYks6DjHlDquy6j4HhY0Q3LniB
rqmHCbcmf2xTxLXgDAsd2S7sujrFjI5gRgR2dBMLmq3OeICDJgh8PgoIMIC7BjOE1URrHRJZlTwtW10RXjlGkYOjNXVCqG6PajB
PSAi2k8vc31KwMXUqlE11jpNJnMcw1bDONSxJvUqDlCsm4WzhqKcMbjGBCMznHXysB
NKm6rN2DGuhxKxeFi195QxjXyB
lgRubZHpP1aGIG10jDPysiIQGtIonYSBOKBTuCNVrTlQ8MGwK3D1j52YsT2vEZcaDNm79TruZ5MHQYqcmhSb9rdE72aTxYUuuyB
J9CDhbFz2w1pRWXnipAfqAo9rs9BAyTWMlqfbmKRTGWnXmmmuWZGuns6Snqm7EwUBC
TIbCbmOtCYFSXgy1MdmtaZfSCC
HwEEfjemcJ3tAvv4ih5mB0gyE44T0Spr1W7YYmlclMnmcN4ENNUFvj1eJDpAq54MHC
bldCpPa6lrsJxr7HC2HJ2I9ujAGYXKpSUijc7shCFe0Iy4DVC
qOMhY3c0RXigcigefmvf4ndRdC
UksrpMZjzSRnWFaNmW4WIBLLERUB0KdueihsbpFH7kOP7YZGM2cE5sgVD5cQIuRBkC
h0HJ0ptNkhvWCSKiiwIgEGeKoC
ES_SYSTEM_REQUIRED
ES_DISPLAY_REQUIRED
JEoT4VCWvNlALNEbq3emEpP5q0tkTtveMhRxCS0zTRFiPTdzrNI0qXP2PHbeOUHlgD
ZeAkmgL4J47gApaDvucTEdnmbwTd8p6XrmU77QvO0ydeDv5R15a3cJ3tYEOOCZEMEDynPIWep6BdGPzHj0I5HdrkztFpXjPp7hD
A3UrIYuXG9aAWIrgINpujEHSlD
inNfZ3TGbTbW83KqMWlvJSmeONmzulTln5btlZAx03S29Vd7YzUbGP1UMOiqsUmW6eBOVOoDPbz6f9arD
jGUm73pYzAaYLzQNN9hwHrmcZW1JcTqRDErbyqzyYuez47a4tk9yKFSL7pGjyKJfElWiGohxL4wLocrNYeuD
IZ9z74IlsPVD2VYcn6L19ao2xD
T4ygAdtJ8k0X45R7DDZ7GVcJ3E
ZYNTev90xEf4atMi8XGwcVFOLrdPy6hXdxfntsswbJGWrAuAP3XruD52JbgwEvpvkvZHYeCXuy4w8gJ5E
P4OwYYMkMYfpb3eWCPDNrtsP3qW5DYRlt6n9FCzWSluqpBgFE
1l64qHayt2lVcE62OkgjmKS8HE
S1Z1eOQ3FWMt4tn9TZUzovjc5v5jJanxLbUW91b0e1hSlqvU1cY5uISi7atzfSSa6aDh63XiliT7reEKE
jMVHau1A6tQSx8Wu8DkbEgHMME
EXECUTION_STATE
QPhxiZoL5RmIlp5iXZKzQMKaVE
ChEmU3st7Jg8gieIsYFiDRXecE
UBiPuQcCp0bZG5yhGI9JMjBrfE
1vRWtr0HD04eh7HKCIuAy2q4jE
xkaKlqMtUnKzt5gcs4g6mw7oEyQIBpzQxZmxCASukM0JnSwut3F46Cp4EWVc2XjzVyvb94U0jjdlZ1W2pACT4A7OLVGfP5bdmuE
iPNWojoO0QHPysnnH5QlOJeQLQtmmFmtmvHeVVLYJ9Yy63HDpKGpQQ5iX4VnPSh07F
pcZIhib3tX15HdgPuwPj0gw1cF
X5W2TYa5QTpkiNX18G7bTWxYeF
MZzdrINKQ0JJOpEVD0oTHfBLfF
Se1mHYdRzfiYF77pLZxwNLI6kjdDyVpfIsQf2DHr8MZPpeZrF
zD6LviLOOZu0zQTrkAT0CRmsL4Ugm1xdTMgb6Z0QNg4g39NtF
2DdIKGNMjI6WYckvA9QkE4PeHaAtF0ygo1NVjolSO0sRVYtuF
EfOL2UQOX8bn3IiWTEGUaTnXRGUFmHN5DKwoK85wCGWyAFmlLtfu5dIg5kNd2ek3AdaNt4tdDl9foqiR7LafXjZdriqEcVCfu0G
YfmDL69aFh4BqfugKFoV98DN3G
d9IO7gn9vO6HzJnP1Dwxr1AMvcrMi3BKmzD2DUUgdo6x5LEmJgF5i1doJ9Z8hvqrGnwyIYbtzQpJhrbhmw3G
Zx0uhV5c8mGwvDvAz1zc9pjfiRHxYEDaRYIShGWHijCMbssCiHvjV3eiiuLyPbriW2joP8w7y1IlMaN4G
oMMCaXZPfySt58Ygj6dxqERTtmTh2Lgx5nrfH2fIHCQHsk4nPEEIZNZcinpd7KExwQtpI69O46JvbxZNbUuv9IvPpDqr5s5ZBAG
uMPPyCMuq5D1DQs6yb5f3jcVFG
mCCsZfBmTJ1WLGlGEJG1j9mLVV1ktt28g8KDdrlyq2QQjpeTHu06XubsdpsmIZOxRhSs31MqJAR4cOfGG
dNH7U2MMiVR54qSuQwUgY8CaMG
ElqEEPBzAcplsqiMmijk8gs4pWAX3z7FNG146guPf7dpei6h1BOAIVez4DJTMthDFmwnSS8QcTuc2VvQG
2Pqz9I9mg7SBV6FMvVGopScGcay3Fxg4hBPfgfjiOCzxliGiEy526LQ8S4lHoTzDDB8rduXhDyVyjpbsQoWG
mTg1c5ZHtpp1rt5aEs9swlaw6wZC7FPJZyxEuNVjqrasim9m4YUI1rTuLxecBhHP2fnxwXv0NxAvix92GK684Aar1xdiqnPcCYG
Ug6LuDcgo7IuN9GabUGK1xPKyG
xoRV6zsTVOY760DHtwPYcHjPX8oKcrjSR591vnm0ChjixBAOGSHyDHu1pEZKRabgzG
EcfZivcFMjS6gpNHj5EEk9C48H
WZ9bj6zTEqeNRm17MEv6BRIrKH
BDmjxl6oZYkXMxyZ2xIgJzEsYMee8w74bAJvE205CDSwfLnXn2NG8EYVd9A1PxPHHCFjUGyMJME49XheH
qn4HlamYZ0RTsMNIPyDZ8Y0usH
4f0nsy1ZqcbNkJTUw1ljd7nFZNWH00LUulfH3Mz9qolQcZowK5vLUPMfgdUBiDEq69OXEc5Z1ptMNc2lloBI
get_ASCII
GkdWXnM6Uojm8sViCvGwzM2TRnL0C0lVRmQntGr5EdRdPF6WIVqbcMFc8n0vx1QkcsH2es0kwWuA7JA0RSJI
cGpZD9DntMs70aohWnkf7kVlpKKW3uMxXNxtlKRfZQns1iMaOtGFhHLlfrtcXRiXECDojr49inJroZdKI
B5pfUafFlRe5Fc5db3LreXiVOI
wOpURvLG8B9zVZJZqKQ5pv8lNiZ1vzEhrvs78Ii7pGs4d74bIQoQPh0Pvlv8Wziag7L4g96BqtiPu1wXI
Zs77j7QgfoA5Vigg92Sz4CKVvRbeNJqrSo7R2VTU7jB6bvKhnPou8Fgz1WPwYeoZOVoJ5kNrjYXXMT1dI
c9ioJchzg9bCYgLTwF9t9jxACK2yg3kQ9okekUMJvnbl8QCLsUmLgE7roTns3UWIIG6ReA5E4nSZaI3fI
q5s4W9hTfUpKH2yAkFD67k1jwkyoiHdKAPjQONguX2MkywurWtU0CwUZQgm5DbNk9iYAXJC4cK3LZSOOJ
np2khn5hIc5DZXAORdFdMXPkUJ
QAAs9UB0pn8a4IQvfdl3zne1ZJ
sNdKyKfUQL2xQiv0k8ft78ReH5POjMVxYqQOvHFD63ePLv5VKp8VO3NAv2cU2Wb6hJ
AJNCB8WJt9XxEcQMDYMdPrJRiOLVFCC9dWQGDMINmguQXcrcJx8epJnJAToJAaOAABzCRRlsxVPFdTXsF3buxXKi3Yntx0E4rjJ
EKKsIRGG0GUEWpKVpipTEecXsJ
xoTVlADsYW0D3CWlaubT3tdkwJ
H930Ykcvv6hjLXnBEQFVXdi9xJ
E70lVSO8B27s1xK70vTtUfw4Wa9dAXE5l9EvyQINUGTv7aXFPbqothcowcBr4uU7U2vmbT8BH2LydX35K
OGuSnY65XAW520mMxPc7MDYTjnUKlFuE0yWQtn9LoNxPRqwra77xnoHDA02KLWfDFWHuTrSOENaBEU3Q33YkYuPBC9NPDDJWDHK
zlCFWSbDL4XKMFNkSLkusJx9OK
Ciwai9hH3Tr1EppQSndnRUO6f1prRT7DfHIUvWO8B1tFd2pYuHYLJR6m9tF3ubLgoyUMP6SzQIOSFo9FlRsPoXVYcxyOvOyXjSK
9NRBaRZt5m0cs4heRapLyppOZT9i2I9bunPNdPN7n9K4tEMAxsnb8TIHcIYHIo1PgK
tqRzKC9tDvIhUAZcR7yURLxO8ZEHozxbRyDUw1qTTxFsQIoBj6pARSH5kt1ZkHhVp0xOnQfyKBQoTOiCwTW2W8RuMtxc6LxE8iK
6RDIHDWWyZnVvSZkuM0f1sdAuYvszoRXGO4lZKwpgjPCFGP3yEJ2pqPTQgW9LqadnK
R3SQ9wXGs2FXd0JJXBdMfMgXnL8ccXWkalcXRaUL9g7bFvpWsv1yR38jyKajidd1C8BH6XJU9KWbNe2WaUNlxDUA8zsn9lIX8oK
vedUx9iW9Wy9FXmuvBYC5ozXwK
OPzxRSjtyEtJpgeTGHiv4M71zK
8tzzwIEoeC05gG49uloMSzQJ2L
X8865IBrrjftvV5uwiK7EkCcERsqPQ0HuaylqUrIIYccxWLw7lONRoswYwSCHab0yCwMlfto1axmGQwmR0H6ixqK1dN6zX7A73L
JFlPpw7ZMLTlxinAGXinFl82R8i7bSRezddedjH14osuvBdPe25nMXXsuy7V0q2s3L
bGY25dLwuVK2JtNrV2waU6qhEL
Tr27Zi0Rz0NVxOGXmW7hYymOKL
H4b9nFVk2wrs37Lc2N7QrNNxeibyGXMe44d8e7jJdff5E4pcONtYz0gWVZHY02eHNL
Y5FivdgPGV0ShjNnp6VUTNPYF9JM6a9vc32I5ZvqcxTRN9QM60B2fR6iO03HlSiWPL
ErTccUz9chVj3B0vXKuss2jFU44fljVKO9pNVtHtEXmH9LV1wrfhW53xQqVtEtr4vZEDYoCVEaH5DtIWL
rHXg0sKeCMBQnEwxXklxHNK0hL
ektBUf5LWyWra70662E3s81vCy8qWQw9Gt9klrRURmEuXgL66lRu1hX8zYGYAAdJjL
xRnNP2Ua4rsQ69uYMSuOTzWejE1so2BJdHI0DHmLUHC3rpQ09OsMgn5AScKsnnvQ3GLDtllvcaGNEs4kL
M8Zj3ZLLPwLNbkuhefL2bLaBLCFsbJpanELtifumprBgqOZs7i2QBIOSVIsFguHAkfMSLONh2ccT7GQkL
cc1jALhOe0Oc8FwnjCWQ5WBKv7wJ9E0xTYXMCbsqK3I1PHUAy13qleHek37MZN0XNpHw3OGAKHKIgot6OpP1nkMm2AcVIyuFNmL
m4cWH648G2OVPTQjRbsSJwfhDM
qvMbN5JMwgswkvHpyJCNFivLJM
pQTK0TMoldUKHhX9yIhYaeDUt18zkYN5CSRNayIMgabx2UNOM
UyhEt8UvLu0rP3Ni8T3Jwrx9SM
3WjqDheG5f0v5SOv4z0eL6LIPE9kMZMNnzm3w9kDG4A5oupu61cVrfFeZoexFccbAatQpGCzuLT1ht56zWbM
4SS0CYEvEVA0UlpXSKrU9n4kn4jQSfW1f4L5xaQQaRLabpa1055Hm7lMvgu4zIB6O0TZVJcmb344HdOcM
N0dIaGWmmrSIREfEt0WazgPttTh3FPIgJs6pE3lD70JOyEJU8LCmyNseuqbVXdG1IaaHtGM9Uuy7XYehM
8dXOwVDlVkXh65Mon8DmJs13Z9Tggks83G6jfhj59WYNsB7NsJqgJbarHErUG2ilBN
6XHaTML2NrhRi5akL9ZQ73C4LN
ZsV8XKpOFiJjUdPRaAR17JAFUN
9nFWuLG643ik7oSpselvKWgYdiuGlFKiS5spPY3qMHbdYHQ4ifdqp5kq6zS14EMU90h5bOE4I0VLaukkN
cI07tvv1uOvHzeL1yPWPQOaWkQjIGPPPkuOB9y0f5YuTVa3XZov4V0rmeFWaHozydQF93clWtHSWiLsWCA5H1BVv8nwFOFlnMmN
Sfr6wi8WUIgIs8pUrmv7DHwl0yIce2lWGnHKw3MUUfTuDXIDUuDBnbKnY3wbHYU1CVxQ4QUv8jbAYAUikdqN
527a5iMP5iutbXV8yuuDWilSCOYkSbBVxApkZUTuptQaxQHgoYlsj0V6S6RS2bIP3O
LASTINPUTINFO
n2yJ0D6SAMYkbkjmDpZCWRJ9HgbSFixiBauPdGMumEGshxDd2Bc2mSixaq5HKidF9uoro51xP2lAdUd52hHO
System.IO
IiJl9ym1hTIUrjBwmShzuh1owlodIv7GEgfMsKSxo64THdEi4hbW5Fx31AcTJEUglccoHYsMBiZN9JNOO
T4FhWC9PZfhwmpZIXuUzfVXWRO
hFmEXiVom6g4v4eh4i0FhGKYABRe1HibAVhpOnyUIgsn2WiRO
APQV17d0xiwzCfu6zrN8hw1L0dfNVP6lVeKvMDv1gA5BzipFsEFLgpECM6EwwkHXvSfSPErJjYLXGd53rt4gRKN3UNHwKMXR5ZO
RvHoaDetvqPVfvsyqPjQyv6mmO
x3TJcw8BnJF76PbSVC7kQ2CFvO
dox4cRmyllDeK8ZDoJdFL36XFUYRl9RGZ9cU3fvaH7Am8Eg4f7Ljwj6mgX539G3tmmTuAbeD05BZ6NYXtHrkgxwp5QdfxVvog3P
x1ECPo8YbdZDoWvdaNqmTzOGYj21hyJDYiqzkFWMWcohE40TipmMEmtMvo14npPbDdbDb02NvbPn0Inzf38P
efATqRW0zpNi5GPkQcoYcqt6223uAWeDpWaqpb4WCOzSSCu2Vnae9e9yJFoRThgG9P
DmRUwsFJDTV1N7lZIkitWJnhNP
L7QSgqDKJpxH8qBxY1FM0GzRh5O7BcLEPpAmoxQqqcSfa0SQP
pBu4FoD6j6EfsKq2EwS58qMQHg788z5jyqstHumhnrNbgaXSP
1yfkMwuNxT8HuOXmE5Mmqtr4hP
HbopNHS8z1wZDjdwXh9dlFDIjOq8aC1GTrlu1UabgHDBRewhkJX02ZdEgGoU7d7ghP
zs0cCr1GvUHZR2D9K06lO9GBoP
r4g4f9P2UKnjbq2dovx4K6C9tP
DdGa9Cw0Ik4Z8M1WlXAD4pQQBDLTMe18OPaTPeHurfef52UzP
S7G1nowIbcUcLkRVtaY8dukM4Q
2qMxtjkoSmXJhjTgrpQnQyirZXYx7DhcaGE6LoQs7y30nTyDx4F9y9bKqNlX2cHDGc1gEqEp9ThP5L2pTp7Q
Dp5sTMtpDOxNaA73ALoG8CLyd3B658yUluiD2CFrVGiBVHs9Q
kylL0qeLs46m6JsT2o3Q1ix8KQ
CjpSwpMDyea2hAf4kUb9inUxcQ
QfkewgDt70SwiQZ1SUGcV2v5dQ
BrW2KoF0WNkEueZ8CNxI556ueQ
F3nTtAEipHbR7b56kdiXu4z5h0uPchzfdFFwBnlMAgU7aXAhQ
Lkc7862Cpbr2xsYvhRflIYm3hcQcWG7ZkXZytQ9LX3Po9FOiQ
9z1imeUkoXwG4lGIlkmuVOrX6ipsOnLLosgi1hjSWoFVQv8i5lIeTQ2HCBGClao2ftqLMwE5K6fifXMxH5MxnCBZeWaOFiyGgiQ
iyk9WPE2AFNuRbzQ2i6nsiyG9RwfAhmCxrgwbKuyf2wlhqEpy4MpkZ4RqPrnKKpd1ypgQatsILKrPLIQshnQ
rTe4jK8DP6ovUXnFZqMROko4pQ
Jkb7lUdmxDyPbX7PBzDZ5n7qJu13Q6rZvxjTIQbpDkkFTAL8R
ltuKLudozcoks69GH88lkEkeYYWgyTbifQsnpAsscniaWI6ANIM67CrPgx17Op1P7dBlcdo6u39ZVXrGR
ZxGjNAOqrRz4WY0XLgrwRpLeHto4BYByxtUm19ikLiy8SI27MukltvKwScodBXvGFxPXhfDbYqCjF2BMR
cS2NFSPqtSfwQNDghTWVkOE2rR
eZo0acMXC3s7I3URFugkDrbjCS
ES_CONTINUOUS
gO99iqAZREQPCjMvMTJVh8oSqni3WSqNM7clYUCqdZ1AeMZMu3hnICxMs2n2TN5PdxKpdIWPmmv4cnUJT
6YNIW0wCWNrajJcbmVnv8pQrOT
exIhSuSbLoOaDRvRrm58ASJxD8IXihsxDvty5yuMNWlVFHmLcmBFOj73X1uT3QrMRT
hTvH4vQitZJ1ZQwoUNCjokSJTT
d0i2djVgAItL8Va8kq0MRqL2eWCljxDTTVCJOGEOuPBs89PrKxDOKxtkHWCsfA6TO8kzyA5R8swaJ4uWSaIeHGKgkjWMBUML0oT
N2ZdDhjJpn7O2CfZ8Ew2QorrwLkSgpdivOgphejOQG7cFOdrRYoACfZDOBoXIv8inof5G197M8NMIiOsT
LoBihfZO6MllrQwbrXTmBS41tT
cjEjdztVpb7ybsuot9TCXj8OpVN81iD5gi6y0YZgxwrLE2Hke9BnBw4AvvgGi97EIjc6BUyutnBxmJHfEjJXmKQzc5f0o3SWyvT
gT951R1QSWmfUM4wDi5ukOXVMTDU3JPvgVFjBWsOFMqOq4wsp32IsAS8RwclZ1JxxT
4MjMTWNjnGCaeKO6ncWsdgQ4fvqGsMhe2qApcDA9uEkL6osSheUOf4HcQ0THelnc0U
mZDUyMbGrgYiPTRvDdoiG1xYeW5F1dzXxEzbLkn5Y45EvLJuua5I7SawRsj9tdj9hJcVaXG54stsBhPxuC7U
QzPvfg3Ovt12mDxDOTvlmKKSU0vmGboaarwWCqurmjtLdHpZqkKXijVw7I0vcS0IPmoZZHGUDk2IgkqCU
HTuQeukciRbX99oBB8RQUdz8hF6ykN9kHjT9ryHhwMmo9969ThKKFAxmI5qEqs6eqckC1dxJW7w1f69EU
rphudYZosv0arOKVdF8ec0HrEU
3tg4kC5YD4dxSjkjUnc27VmiNU
vV4aB2QuvkEsW28tqlVmm61o4mE14FRkpGrXzdVIcIwA3fdL0HbvKHW69SKe61shdU
fdVeCyliPUZrKJPPSEdmqdHTzh7ygXVJ4zw6Vp0sgf9lfRkZZlZQs2Ko4PvtpyfR5nV4xmDtCrGSDaAJSJzxwnJ6vwEoKDMu4kU
sE03HUT0fTUTiFPw5IZXHWjtywEdIbnxnHc9L38HJIMXgAVthiTntC7LQbAso991vU
yg4EXQNTgOnQ7noijqX6d3ROIDSPzymth1Qpfk0qkrD3hB54gblU0TevKByqeMSO0wW3JrxwGpzce8pgS3X2IHAYOAZyT1Cnv4V
WrekBRhugDNwL1C8jOU4AMsipj7WJhxglUW9xIlvHdDGtPI6V
nitxRfmfJY2T1OTKXHCuK5b2PV
l9bYsVldQI78MKtfMDdyG9juXV
E36tmzJ6Bi9lBsv6D96olvfBbV
qNKA4U7QjKiT6XhBS2ATmhYwfEwvi0gZQshWbbfEjuuC4qeBGOSWUns87L1AEyeNIyHbwk4mw9c6LACdV
2nLV6VykJSRc4B2ipW5dJ6Ao8SnNkZPLRKq9YJmwk79Ds5wQrChWhNBBQ7ixuZJromFVdk2Xh93sem6OoolV
NJow61l3ZRfzTZUeznJcZRWzmV
mIoZMEzXechrzZJaCXQOnhup9W
90JYH6wdqqxtqQBcMdQKBzwjKW
aqSE871LLJ9n5hk7iixGTe3N7sHk47zadXqp6PvYtenYW61NW
CjmZQP2WEMZhtQLh1mqr73Xg7DBqznLv10fVBqNP4ZF03kxgvnnFo0Wy8lzDP1GzXDn0Qt3f8ZXd7jfUW
OWuiL4W6ZJsAsSy0zXPkz1GQ43IC858zKMURQK99JDj4H83tLXoVCFyFl6U55vuzgCCTgOpVBov69IpziFSw8TaUYCeTgJm96kW
6ddOTO86oHGTid1iniPLUn5JlW
mRUcgKwnA1lh1NZyEAldxrhuwW
eEWa4bM7nVuzPBPatXs3hQBwNdjaBhnNsqcKTYi9PzBzdXs3wTMdfYLqYAbvTW8rJQx2N8qkM9LrbgdxW
3GQnPSruXyGRLehNQvFbmYUvHX
HwimeSQA7PFQfhHQzGOe6JftZBUTHMcJxPmGdpulcqQ2uAiQUhmeRw0GSyhXhXcsovZj1YZ30Aav4esJX
JDkXyC3MVBo9aUmDJaQTWXDhPX
2koF7iMZ7RJC5knOBtz0TgcUkC6idUIBahAZFm6VNrIVkNdjkSwSRizJ9TMVBSzIUEf3Oc3FG0P9NOCbX
IcMz0mdspuHwKG30LYBZXOPYJtQSU03QLS8fsE0kyAIex5tz3iJ5Khc3aD5IwGKdWmV3ic2hPzevylQjX
acsr2TZT6oxcbSt1fZmuL3br98oJkJFSpM0nBJGdKMRG9J0QuyIuLFyuElkoRGiJlX
4Sixck5cCWAlDsEImQO8P0iUWyb23wHW5CYWFhjEF7CQAe9PVQutzscy8Bv8Y3pknX
XTDgq34DO3NeQmppRldpz14hwqHgFlXlqFrs36BR12I7Ysgv4Uwl96E5kRgCnb56xX
tFbMP0Rbf6frpVHoY4V6rk7w1WPbRLbP0eH1JtuxXX5zpSpY6Hg544nfYZbNh3wTMh8oT4ZwPsUfsL8dUz0Y
B0cNZEcLeOhz2rvLf0rM6PQLQW5s5LmNwOKSvyTsBAfTXQuHuG58cmIaKGQz9Awv3Y
FIZKoAvwiUmCN19yKo7f7gbyeXhp6fZ3zhUDtO0xJH4B7WIWm8vTf2G9X3lYL4eqS2SjriVrwhTvZtKM62zsABdQfDAiA6huUNY
6Fpfl1LYSyBml0eyWNzb3Pn4C0SaNeWR0cftvzwBZ0bcy0aQY
CmVL26LF99yG5Chi9Vh4ieSYhY
0ShGWEGsFz1MxaoCx4bDSCjjkY
aGBguNBYGlzvdsEN2QA6j2UgpPoa8OLhYTvfNC1Kg4YVeiqKHx6HrCYpiJgmavnFmY
De60H3gKJXhoDLLi79Lfhsr5h8LsM5NnJ6vVP6cfGpi9CEP1DFqSSvO7pY
7bwWF19oKSpOkC8XvN0Uyhc7YtkEfvq86sC1mEkfvcLIv1Nrm11Tj0GcPiUKNKba134e1G06bNnfFkPCCDComtdgWZyKOOHqjrY
ZlzTMeDAXnXXdIrEPMABjh0CYJK2Af0YLJCvBbvU7NebXbmyY
02ELACUsLYjcFq2JhZ9MRiTm5Gcf1e28KHcQvAaMwzwWUpIPLG8OWoxFyWZxpYQWUZ
sjgphWWE2WeCUABNn9aAxAZ3mZ
0DwKmIEuTAfsj0pFzcOm0iNfnZ
eRnybKgh9oIl1zoO5M70azUtxUfEb1h6Vw89NdLqv73RRanQ5Y6cQYqcpAzLX6kAW4VLQ1DidHj8vW7rZ
owEw8vSSlNomMSqy6o5WhZXGtZ
Dispose__Instance__
Create__Instance__
value__
Yj2MDboqSXxcqAZL2M0GSRYh6uVTWijrsjBch3Tr8lBoIAwmY9izorPSmpXcLRhWIpUHQ7dPhvOtzyq2QxjMTxzMiOsQEEoR6Ba
lElZYM6LkSlmXp5vCskWfxq1btPZXy9Yp8aNUyGywyh1sO2rIKIaLIzEnjCqCfVJgE8ehLb8UaSadSQLa
0IblF72YHPJMdQQ3lHt4Ns7kFQwuiFB6wrVYzAx5iqkB9p0Bhog9GisObLSUteoMjKelC7yXTDBbb7L7VaMa
ZIHrQBxrwbc8cbMN49FsDs6EVa
SHksOTG0sQy3l9bqnIDuC2oDla
FmambrWKOyjtNAOmCaeoenOXra
ProjectData
oANDBL4czLnXQ8j8nz3GUrNK1INFksN7BsbsTRdE1DFGxhEwsAscTEN9VG16vRunpguJQLfH1WHWERWH47xa
KkTgOFskiieZEoBlcLb68iF3bXkswpH5mZ5b6qnkJp5rMGZCMOMZuhY6mAVDPRtDvKCFbYaYqnDtTc70b
poMGI1JGp9sj0YkQ4rtBXdefEb
ed6DGWk6zxAxKewR2LcLZxdixE3dUToFCDCgND5WjRtVYu4jPH1ZCouUG1zEDi8YMXMCJ3JQlVmDkmrWb
XjSHhytnWooNiKlQDAEq7qWYTDOOm2E2CJkfon0AYFkGcAQP9oUePusLcamCzAHEofg6PUfMQSrR9zS0mAZb
jXRuHkfmZqeKqbE03eRZhCrOAZODqUE5sMhP7vgq2xcvlni9hbsgxfyL1PlTfc6VuTYDDJkG1CS62NeZb
mscorlib
IUpCdfG0tjOSzcLX3sJ4P5QUCoOJnS9h48XsbjBUCknR6qNaODP4FXJkSzSF7Xz3pvtovE67RSC0v1mnb
XN9hVWvFHKuv7xRTja3GZLKF0c
feBlguAFbDbAKq0b5F7FgC1K9c
hyoMnf3TxS9Y0iX1MK2ZM2ZEVqj5wKVULy5ekB7SXGOd2htXc1SibEcUTtKPeyJpxZcfsxI5vgU1r3Bdc
System.Collections.Generic
Microsoft.VisualBasic
BNlvHpidxXEq2SbIA1mNGAPuy6vxxjwsdzid1GnmqHzgIRTf7AqxR3hMhIgvHBxnZCD4orNxr99GL2ejc
gABtTaD11n63hRkmRt9V18dylc
LowLevelKeyboardProc
eXLcyOXrfHMJ3pYa79QvNoKu7pPMQZGZVempElwMEsAYieN4W6tDmfTOAN09njVxmKFp4CqmQ9iTFS0pxRDNAb1JlIWjTOAaPrc
iFPJ6e3XqNnzdVkZf2EiN1Z6cTUHdcCfiBwYzph3Y4sFgSkDsXKwuZmnX3ZGRTqN6d
GetWindowThreadProcessId
GetProcessById
BPTf1FVo6lWaxoyDW0wGmKYWy5K42rxs86y1cmqheCIXT55Rd
GDH5Wg0mFRkG8MiSfG80qKA9tXrUhnEBeSfSQIDyhUpEhE17pzh6k3jAVd
Thread
RijndaelManaged
get_Elapsed
WckvVEmtm2eul6MuyAX7xBw4ld
EndSend
BeginSend
Append
RegistryValueKind
set_Method
CompareMethod
TargetMethod
tfZZ7nsdzdkuWm2c3SdjiqZ1Te
imLglWLBEE3dGwrYWekRoJ0lZe
Replace
IsNullOrWhiteSpace
CreateInstance
get_GetInstance
instance
GetHashCode
set_Mode
FileMode
EnterDebugMode
CompressionMode
CipherMode
SelectMode
FromImage
DrawImage
get_Message
r4PmqfrQmBY5zW1eIoL3YOOphe
EndInvoke
BeginInvoke
IEnumerable
IDisposable
Double
get_Handle
GetModuleHandle
RuntimeTypeHandle
GetTypeFromHandle
EventWaitHandle
Rectangle
DownloadFile
IsInRole
WindowsBuiltInRole
get_MainWindowTitle
get_MainModule
ProcessModule
AppWinStyle
set_WindowStyle
ProcessWindowStyle
get_Name
get_FileName
set_FileName
GetTempFileName
GetFileName
get_ModuleName
get_MachineName
get_OSFullName
get_FullName
get_UserName
get_ProcessName
CheckHostName
DateTime
get_LastWriteTime
dwTime
WaitOne
WriteLine
get_NewLine
Combine
RSn1OHqJUJSDWt7jbdqbvExgpe
ChangeType
UriHostNameType
CheckForSyncLockOnValueType
SecurityProtocolType
GetType
SocketType
1rHYEjnHHVnyqGhPYULuPCcmAXT2FlILv1rnF7s6ye0ZeGn6EiADKYYV3NsHuFRqqe
rgWhRja4YwlpsBmkBmG2XkOWzBJCMLcLjx9MLS2PtseLX8zCLk9kd8pubR310BiRre
System.Core
MethodBase
ApplicationBase
HttpWebResponse
GetResponse
Dispose
Create
MulticastDelegate
DelegateAsyncState
GetKeyboardState
EditorBrowsableState
SetThreadExecutionState
GetKeyState
Delete
ThreadStaticAttribute
STAThreadAttribute
CompilerGeneratedAttribute
GuidAttribute
HelpKeywordAttribute
GeneratedCodeAttribute
EditorBrowsableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
StandardModuleAttribute
HideModuleNameAttribute
DebuggerStepThroughAttribute
AssemblyTrademarkAttribute
DebuggerHiddenAttribute
AssemblyFileVersionAttribute
MyGroupCollectionAttribute
AssemblyDescriptionAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
DebuggerDisplayAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
set_UseShellExecute
WriteByte
m_ThreadStaticValue
DeleteValue
GetObjectValue
GetValue
SetValue
set_Expect100Continue
EndReceive
BeginReceive
Remove
XClient.exe
cbSize
get_TotalSize
set_SendBufferSize
set_ReceiveBufferSize
utrzYzmbYDgVSLSzbyIWXUY93f
iiN4DzaUbWadUmS3cWEO2uy65f
NHysbVKkMm6dOU1YhTWOYi3hwcp06IEz7qxT1CSbbw4pDm8nbL8jUFByyX3OfUhl5f
SizeOf
lb4MP7AaUqVRCeXg6xpm3rb0GJndLgziQb0IJEY6dZRYvTnoSrZMFF105mlfPN74IaY5QxdM90R9IhxUw9nz8OQeS33GqEfVLQf
PJYNpjAOtGoi389R00mZRtmcRf
8hxdg2Wd2KXKSSJdXht9SOdZTf
5N2v7h7s3Ib0bTPeqthYf9f8MS5m8FAj9yx2twMFkw5CQVDsf2eFdiPub6smvU6e8zYJiIYizNOabMgcf
Q3IzBAzbWErr8NhbNbUKtQRqGOzS8FSvVbIJS7bby0J7DXzWkcBHTLr90nr4ujqEbQIdZ5q9mVDVyLSsf
1pVmwH8yATNxqaDzhlpFnS3bGg
LPDLkjhuUTtTiZKfiY0mucM5Hg
el8SUOcg6UdCzHHTAivHnyQzEf62VT7QAVdUgMTqRmXjgvqiJE0XjGkfy9Xa2Q9PU6ZLzGvPQpHq7eIOg
tAb4RfmmU1Eb1BkgzB5bKUjVUg
3OFY1cwPttcu9T7njM4JsSK6eg
get_Jpeg
ZDwm0NQmefeRxFcrkbKd3Tezfg
oWnhnkgdxcjYjLSvcrkBWtKwttlRKepuMIKk73oV2MEHJJWm8kcqBxB9PdWLXLrBJnfYVG1FNmaLJgjhg
System.Threading
add_SessionEnding
NewLateBinding
Encoding
System.Drawing.Imaging
FromBase64String
ToBase64String
DownloadString
CompareString
ToString
GetString
Substring
System.Drawing
ToLong
set_ErrorDialog
UZU6ec5zhGvT4sabkoqW9EuCrg
jLJR2tMykn2FE11p85cCC6H0bqDotI69NEcHFBwECYGeTpET2tXACg0CshvhfLMe7h
i32vUplCVwJe0Y1xtNMVYmYWJpcqU864SmRXmyo901bGYWxVHubNlYmVggPsLqjRiDnNZhPoj6z1wtVLh
NkMtffZAXPhBsM1i6B13dMRvevtA1tvAt4DGyL7QvU1kKJUPh
Stopwatch
v46rqg4wv1o6VwyLZAINVjABSSiNsttyDOrEDd093cR64tt9Gv7giSOg8p0P2sd4w8Qde8OZogxoaOcuoPX9x8IIYL7h3qhGTih
nFOT5nvabW3TTFkbuhmPzx6vnh
svBFMeay6zQIdAFdcesqssglMqF1fUIsLBjtt88MqIj9UgoeEKmD2j0zph
5JYL2ujI8jHPTLi2rfLbTAsCrh
ComputeHash
get_ExecutablePath
GetTempPath
get_StartupPath
GetFolderPath
get_Width
get_Length
EndsWith
StartsWith
DU63WZY7sTytXuQmFxaddBSnjia1hzdfohfPxsTPGdo5mVwBG0JeZBDa5RwFgwdHuh
YTpz1BB6YfuOGid4o2GKVycPOpTzTwwU9QnAcT8l6bFvNm8v74xcgu4s65GIn9sbzh
8465K80J3AA6rvrRvR1aYUIV5i
aWSq3nDjX7horNihCvOHyJZ57i
MPIC3cPhuI0qPyO8XNacdos7tcwJyzVMuuK1UKPfiijehqtrPTWU6dk9ZReIKfII1YDmwzWsTZbnZgIHLw9i
y3BIOdpsr2QVntmoqDHZCQrvl1bRvskAeEztUnt1tpZ3aFhEcpVKnI0ftcW0bqrQMi
sGe6xoxMTOTa6vFjCeoCyUxqOi
SZ1emYVUHw00SJmPOAiR5g23iZ0QOAZ5PGnZ7J8rB1aDAxhCWvBRjtkjngG2kQMpai
1cYvhrakf3I80VZ44WsRmOa9vNpOycSeg8g5aX3HpJWL3ALB7UVIpBosZRpg9ER6ei
IB2WFf6iHCOQA3wsdGVUAi3wpi
kE0bP5Sc0YSZpXkopz1A2e8YCztPaivm6dDzoqFq45VMMXIbL7SOvoCK5JrzXVQVqi
s6u4nMUq7TaM3UMFmtY4zQsv78vFlokme7Yk7SmnYoNKW3azxkdV9nu8jGOw1cfAti
8DkYdmxAX2q7c9595oQ231cNPiGYwgRGpxP82c3rZLL0CqOu2zod1uNowCcgUJ2yxi
fxwN5vZJ7dGdpDzUki6uBnkP5uBXBNZ8glzZku5jgtTA1JpmYe5SnAqElB6cmFxbBj
Al6UdOvUUhzQ7uYK2ICFBvy9UPYFkv8dk5I2nnH65pizCjH58XM3DAz1RBMoj8tEIqZ2jTi4DrpKqvj182Fj
W5sqgxDCb02IwQpssKqLV7RTuYfFyHlxxxoeWflbukUqoLcrv2KyBHYjZHMHfZVmJj
kzDgsCO7CsR8S0FWEMPUMT5pMMU6PdUJ25jWmoZM02Z8QwYRVkeLGcVzKZpzERYFvj
oC5HZea5Tb3FhmMBZq09ljxqyj
O9sfbCADSwXlQHCRPA0Vo7FD0JHeZ09I4VAkMkH7IBS0f1KJVV50Fi4qyvZ3Hbb3UaJ8adKMfo1CwRvPvw4k
VZHcuJQ1UiFMlBTlevZQY26r5wEKJV0dNisEHmNKTkXFF7bGbaRmrC0ENGiSDZCa9k
wqpY6XuvNHBTCOJ8asEqCtYskFCZX0Oet9OG3MGddaIJdQlNYGSAlAUQ0tPM8W4zpip03fjqP7K53TyEk
TsPLWvBRM46D7xWTkNnBQposUJkW7fkH4vihZg3MRJVVBmkg5aiwh4XE5bRls7XSJk
io1jZs2ooybwEPgYMc4iGenVCaKuKCdPvP0ZMyHvss9yN7wfYQrMoXExrJqxtLiuOctkQLdzPgmqZ9PKtHMMQrmxuDZe7tMYnRk
mOd8GsQl9PiaIF8ckhITrvnNVlGl0EpqZdVm0EbqpluqIF1Sk
jDeHmK7LbIPrxmw0rPwfy6SbFHnrWuIFicHTNCgJab6d83Xr2US1sskiQt74wWx4Zk
get_ServicePack
AsyncCallback
DelegateCallback
TimerCallback
RegistryKeyPermissionCheck
TransformFinalBlock
EGCwSCZttZEuWjZIQCwZIzcWejV7y1g5E18aDka7VmzRGV95aPiTLQ4dHk27ybDzqlTIQAn9mDMPB6L6SCek
3vTNCDKa9Ud6mJJAeUwEzmE8hk
0DanbWxlh2xaUKEWPQuaOb8IIHubxNglNomcRpMSzIp5ic6kk
WuE7ZWR6Lu0ADcxns58goYA0pk
no2hWAQoWLU1Dhh9s7UuV2jS655Mcu7VmvW76w8TUsu9uZ5R9g3vgxqRb4XoNsaLtk
N9VzQURbDFMxr0A6MN2IHP8HCKWlNp8f17cziek1CgW4Fizyk
QGkDLQna6qvfI1hb9Oq67Xtc0l
OFZ0YbofwGuexYNA7xlvhCybLXpHfJ3AcafEIjbKenikrSPaM1wKgQYJ65lAXHYy5l
wR2G0E90V8x1fZE5g8pJbva8dgtjJxvX9qpVEtJZwp4vqb45QKLkjZXJfn2kIAkQ80iL0klePe8u1dmDl
yRn73jMqaO40QNgl6E3KHpLMIl
RtlSetProcessIsCritical
Marshal
System.Security.Principal
WindowsPrincipal
ConditionalCompareObjectEqual
UENcbvzdGPrEaMu6RaFhzmYvah6DZZ5iZ9q42KKiQ8WJ6eJfRuLOzYfTGBWNxKIoreILQgTJYeJxjW7dl
ySYQNvSFVrcPFOAsxeD5AF5ael
System.ComponentModel
LateCall
kernel32.dll
avicap32.dll
user32.dll
SHCore.dll
NTdll.dll
set_SecurityProtocol
ObjectFlowControl
N8hZJJBcWmz3Sp1d0oE8NBNFAm
1k6TaFOKdKYLBLio7PrEEl4IBm
NW9UIaOONgIkRv5DiknwLArXGm
CFW3t7gGt3fBOejt8kDIs3DCkeY7N9ayr9VsF77zDHtRI3FXDlQlrhAOgN0bC8B7Qm
h9Vp8IQoIYhR6iQB1xEBCiIfJyzKcyNZwIdAFsYhDo8tnCzd62Q92wuShKZEk9AtpJmk9Iawb5JLOP9BCr1Y1Hzb6PJSCTJJMQm
zUvGkLOrYZloJtEAmerTcUmoOmgYS0eFaQa1WJyMddmbfvbwFn5WljQKo3llxSxCev8AAzQ7eOpSXAiZm
FileStream
GZipStream
MemoryStream
lParam
wParam
get_Item
get_Is64BitOperatingSystem
SymmetricAlgorithm
HashAlgorithm
Random
ICryptoTransform
oNBACdXHXjRKDZiNmoq5IsimRZ3g5TVtm1YFyv9KpA3QFojptSiz5WjI46j8PagQihJvq2R1TKVrJ6B36XLn
nKNczFrRiKK7NxEdOXtQsAci6RBjhYHJOtJlWzmUqPO0NshDKmwVxOYaQhL4fnp9LYehJXWHSFce9xrNn
VJS0DaiXnW4uXck3oX5scNHwTn
ToBoolean
op_GreaterThan
TimeSpan
CopyFromScreen
get_PrimaryScreen
DuiMY52Zs3tLfQSQrc9IRxmgphtC5IUCB1I5d7sbqM9u3wlz0CS3CUjzVkjCM5xbKcACJYRLuWONkTxfn
System.ComponentModel.Design
hdkgfMXuAJBI4m73pvwr8TW1hn
AppDomain
get_CurrentDomain
GetFileNameWithoutExtension
get_OSVersion
Conversion
System.IO.Compression
Application
CopyPixelOperation
Interaction
System.Reflection
ManagementObjectCollection
Exception
Environ
n63L6T6ml3GJ2crDUIboZimQsn
qJyQyT63odzk3dAOHTbKiJyJPWPFHvdF6gKByKBF2YPdXLP1IvfyJuAX5Dz5Rzip8ZVdF0HD5RqQdMCwn
SocketShutdown
411KyEdg8zK5I004DNsJ1ngp6y7bH97jjQyYLNINJ92arQvV46Ru1KKqCttkak6nAo
3CED9BePisWtN2M0dPksT6vuLq8pFaf008xhNWfXx7u5KlTHMDpZSCzTvJMPCauF1lWPnDCmtGPru96Bo
agfgGqLuVK55dN8bWayUpd6XUo
kREGJyW6u1UQG8UWEo7NuFTugEkGNjOdLCbfXIYfBa3L93lA3nV2lOdZLlPeQnzSG3DKXOMjuyzgwJ7Yo
get_Info
MethodInfo
FileInfo
DriveInfo
FileSystemInfo
MemberInfo
ParameterInfo
ComputerInfo
ProcessStartInfo
GetLastInputInfo
DirectoryInfo
SICMOXhT4CLt5oHVSK9JGjmZT7iMLsd0ZjJ8KSMWzGc9SxNHZdemP7vS3oePVDspio
xbP5fHpmUhGgnsgHpvgrVuznno
dRZdjp6PWGwyj6H5lRC5OKcJ6IcqD2aqyrlBlMGM5cvzQ84nZTndgwY71LsR36cxnhSfA1gVRASMZ4ICf8uo
uVQZcxSkNPaRnRWDWmIR7RxaiAImLUOD7CEMo028s5z9nOSDWTulBYBAyMOm8udFwo
rXxrLGd7Ocgu7kegK3SVFl1ajlK77lotpJsbCPnNpPdOxUYYCtDfsx8OF4gvps091bElUYIcKX09snn0p
gK5lZX8k4vDDCoV0PUCQh1dzbg5x6dAJRB5OMyCmfxVy4bgECs3ckd3wys3Q8Mlp3p
b8cZ3O3Ombr1C5sYBrdNwAkH4p
cfPlyBjk188rBmU8tQgX1NXMqi9WCYvOso3Y1lIHnmjKsP3ZrHdGEsP2a5ZcHgBy4p
XLn900Bf16Lx2w79gNpB12qa9p
cEtfXu1moAq12POwR2C9YVBAXX5tLKmBmVs9dMPb7K4pYW90UzskUVZxE9sHu5FzCgYOJQTWrU63N3iVERKedPFRT91xqfsBlMp
imFS2PU3LrGC22ehRFjXkmoHknwyrOEmjGQRJMLQCGki5kDjuG8MJQxSszYCdvglRp
VUApq1HxX330QgW3zciSe3WlSp
Bitmap
8eRQ1qKlTpCmGW1drTCdFKPdL73Hv43qQAeuR8BaMuJ3iPoyB8xcSYjAUbVd4g0ehp
Np0KeNgFAyfjFosudKRLuXoLqp
7Cis1VxXam0ftb9C7DJIlFMckSpXarp
pzyyOo3ivxQSFUjaUXMKnV62vp
pmnH7jfogJ3LH85AcawqoMJpcQBiDrWYSQg8ktftnFXKu77wp
IdIMnWSG5ZYuo4NaebXCHQUY2q
YIrvsvUm2nyEPq7aAUnzcRxs2q
4l0CzIMLPBMMVeV6tRl9avLm6q
pyA5MMNM2i7JZ13dsTddD44UdyHdcng9L1Ajkfa7DzhgVXPk06Nw5SXFpixFV8X3gzIwV69iHFzto5iAq
1UUdwupduxwviBQ4QYTK9OOy8aYXMgwoeSbG76uTcuFs0mWv3iL8xf4OmqTqfmKmsTl97KUJb7C8fXNi9ueiFlCBkNJkS5lVADq
CLLxxYkSZpNkulR16SVVsyIKPirToPrzRORZamDMfOuT0rsXq
System.Linq
VDVJveY8zOm4DhIlw3tkPvNfqq
aZ9uHQPrpgU5vUT5nY9C1JXd2mx61ZZSIlrdsORYkeVVhzw2oYZU7NczLmflxcO6JJkqBgsXqENpcC3y0Puq
p1oH5aQW1KiUswhmzNkk56xh7VhUnXuOci8DmtsKiOGtZgUj8XJM28rn46tR6PcA6r
Mz2jKML9s6IyR1edfXoShmCP9r
f7lcN9E8g1aLWmzhbKJLsv3JE7sj0SqiTu6XhmpZguI84j2JY5lFSOse6hJ78cACqRDFXjySkLc97PYQniszgH4lTUxCDxwtWAr
I1lKcKkkzkzfUdbjU8qbzGPX01Vsv0QD3zIWb1N2zuJHwiP3TxQjIgaK3Xq6tiDjJTnwvNk724zxdLCPjLSr
t04Yvb7joIvB3aD1y54QiUrjWikNb01hsDKLMOgcuATJLlX3qPN6qg8qwmnmtkM9Xr
c9Tsgu9KRcK5lXiSyD5gEsnIhT0CFd5JvY5ZEDyRD3fJtIL2lIODM7WWGJG8Nw9OXr
hV2TuIWUjEDWrdrQ1pNqM47h9J5sa2KguhDCcHpCyHPO58LgaNLDvEgC5GB1ObuTEOtTvClB2y9jTD0cr
1bZvmSJQKi1k8aWBUQW0LKZjdr
Vf0auZ5V7T9u0nmH4EHMMdTcifNTIDLT8UpEd3mRHRiWR1B3K8mMOaHvMnn6CYsWer
MD5CryptoServiceProvider
StringBuilder
SpecialFolder
ServicePointManager
ToUInteger
ToInteger
ManagementObjectSearcher
SessionEndingEventHandler
System.CodeDom.Compiler
ToUpper
get_CurrentUser
StreamWriter
TextWriter
BitConverter
ServerComputer
ToLower
nsttXqvvGLNLzazaAbBq3akOor
ClearProjectError
SetProjectError
IEnumerator
ManagementObjectEnumerator
GetEnumerator
Activator
.cctor
Monitor
CreateDecryptor
CreateEncryptor
J6tKpPuBbBJup61C7xaShFE5sr
IntPtr
SBewe2kUopJVA2hhSj3B1vPZur
66S7kB15q48S8a7m4P9j2j6x8VHrIoDkr4hEghuU55f4EjC09diBIj0aiiqQN5SpwcSK6n6fNjikoxLKs
IDqRejOhHSFNX3ZoZj0Eanuq9zdYmJbPP9tfi8y4SqH8n2frLJFXfqaj9HQOZcAqRs
BdC4tTexHdq3TWAkc4hInvrDLirb1GWV4jTlAkczxJ61oB6dMguxHDBb4R8D28TgTs
LHTOvVjRH6sm59gui1F4uEGwbXTQcfvxotbZBXfJzazZOGMtCJOts8Od3bBw53d7ZDl2TZj24YxgJc7tHje2ELloKLEy5j4EuYs
Graphics
System.Diagnostics
FromSeconds
get_Bounds
GetMethods
Microsoft.VisualBasic.Devices
MyWebServices
Microsoft.VisualBasic.ApplicationServices
System.Runtime.InteropServices
Microsoft.VisualBasic.CompilerServices
System.Runtime.CompilerServices
Microsoft.VisualBasic.MyServices
ExpandEnvironmentVariables
GetTypes
GetProcesses
GetHostAddresses
ReadAllBytes
WriteAllBytes
GetBytes
SocketFlags
Strings
SessionEndingEventArgs
Equals
System.Windows.Forms
Contains
Conversions
System.Collections
get_Chars
RuntimeHelpers
GetParameters
Operators
GetCurrentProcess
SetProcessDpiAwareness
IPAddress
System.Net.Sockets
set_Arguments
SystemEvents
Exists
DlsuwxYfPPiA0F9uAXV5ybg6Dt
kiixJYZwlpjgWwivwy3ZlFfFDt
wmLBunIe86pl80TljhJiBsp4Ft
b0sCe149kEBBMx8LTeBMMODlbRKCxjr2jmtE8dFNUVSuGrSBmiJuveBOUFDi2hArq7LoGK8o2o8l04DdkiCQajpmd8tst8pcnTt
7IlqTiAexwEQxon79WkB8zo8lxvp9jhlZNNUSy1c50l1XyvYt
609g10j05IPmiP7JzSBGEIh61lwuKjb6bfhtOhYdYfCw9uUrHAOEY89f8vKtG8E3IQJKlpN7RwoiPj3pDaat
Concat
ImageFormat
PixelFormat
ManagementBaseObject
CreateObject
ConcatenateObject
SubtractObject
TargetObject
ManagementObject
Collect
Connect
set_AllowAutoRedirect
LateGet
LateIndexGet
System.Net
Socket
get_Height
gy3nY4hKeqN7nE5RGJ0Kh85h1sGiKGjcNikod9aaVTXKfGKNZkDuQPxg2FvORK3zjx2epPegdvwgvx6it
op_Explicit
set_DefaultConnectionLimit
GraphicsUnit
WaitForExit
IAsyncResult
DelegateAsyncResult
ToUpperInvariant
set_UserAgent
XClient
WebClient
System.Management
Environment
get_Current
GetCurrent
CheckRemoteDebuggerPresent
ManualResetEvent
get_EntryPoint
get_TickCount
get_ProcessorCount
GetPathRoot
oFASdBqKegWBrJxTL2LHbXYqi5azqumnXPaEDIK03vewkVB4HvtRMXFtyRqCvE5GGYWJW2D3DmMgRryqt
ParameterizedThreadStart
Restart
Convert
$VB$Local_Port
FailFast
HttpWebRequest
$VB$Local_Host
set_Timeout
GetKeyboardLayout
MoveNext
System.Text
ReadAllText
WriteAllText
GetWindowText
35cwmxN8d8fxEVzox9kEPUWq22fmdz2YHJx2Ti4TifOAG35tR6A5z6LkkcOJme9fnTCP7NqIBIusR5KeGZp4Z0h0BRlDz8M7jxt
n6DBhUkggGlOwfjQ9EfN4MLCyt
0L7m9wHmDDsms0dZk12i0c6lBOEbb4Vp5haTWjrKiz5xAxV35W7GxOdz6GpnFRrdAu
DRi5jipnq5CBUNiNPpBhv6MJHu
HClMMVa0d3RMt0aDaXLUv9ndJu
aQYaNg6baAyHraFjRIwvdgMUMu
UVki4qDuyJiNZEkRUAkrHsMOPu
VpyRsfajf0zUiQzhhibYsEmrP6J1Pe7jIs1U7Q2lkMFkyf1IMzaLgigMcWBnuiSUPu
JWJiZlUk0ehG08VCvkRQXsFnWu
5inv2K5GbKU5sf2esDUaWI6QP2rYbB211AL5BkR7j1vp3f8z13AU3faxZDRjnBiPXu
c6RqDNfCbxo7pR1iTzafLdp8Yu
fK6TD3kMDChRoNHIEuVZnr6vS4MSKCFE8Vb21EIct0nPAaxs2UJi42xEdjBEFvlLSBko0xt8L3LPv9kgFTRY6JplavHOzEjPyru
a3ptXmiowpmHO45nowdsG1j5dI0PDzXpYlmmMN6n7di5DcsZ6Snksn1WdiWG6vaKxAITv9p4tDe3gSvtu
GppMu9lUWwiY4hqQcKZXs0SGkvNnc377qvIRq1q6ApVz9jAU3bcbiFDievcGt4Nz9pFovtH5SLTrGUfcSd5VTylFr3QIGdZtKBv
cpdwHbq0GD8QhZGGXhHOkAsSvW7hQjZEATMjAVrt8iHYLfPnWXoFj6klaFQCq3QPE3ddttTicF9RioCMyOkTMz86P2zoPU5vBDv
auGfxselVLyeKeNNpWmdWLqHSv
7i4ClEq9DzVVdJrWpq4qLvPHzF02ZmcBOsy29zAi7qrqXM4yr0TCc2mtZfm6pFHZdZk0DFbtZpL3LxfTv
lEPnPQ49B7QbMczXgab6cFdpS9zN2nB4XDZj4TznXd02csrVv
J8YQ7xlt4jRUtfzfeLvgBeFX5AEvBoBSuD0lefFF1NgUpEP1moQIhkdKeFcfBO5qtVxf6gijBbHe7eYev
1x2iR3FsX8EaZnwKOQRwlndhhv
smwoU62uazsKCEizrHBVcCRAjv
Ogf7gVt0qrFblyMkUrxUyXMDcCZp85dvb5mIPxsLZMSsX9aUrBuVIFMM3Ud3Mlrxzv
Ck60FCiQhvzYEaJ9amr8K8qjOkLtxqYNUBqHMShgBqIqXtHRuVR99zzVgXKO04kzykwfJSIZxFyl32KMaXc8erWf1k7ZKPIYLBw
MXA348drgWdJIRXffA5rcuHvOw
YpdNL9PHVPROo9JsnP5QVl7CclhN3gj72Lv1LAS6xic6LmQigvqDtUownc2hSNQzXw
9rKsmHSB5XKsT1yb2ZkEilfLaw
gEZiXKsvppICMF5MN1XVVyGGhw
caNNCIQrIbH8Nypy9SixzZQWOZgJR96szgkMSV1j61VKt8Y2vmoQaSXFdoGK3xcReMV1WGzwdaaOynIiw
fHwUjwI3wKIpQOAStDB95L1tmw
GetForegroundWindow
set_CreateNoWindow
6PKU9B7nPmd4Ct5J9IDEpPuzHkLlvXiyXCp0KNkbP9PleflracMA7YvaMitEeLJbp4v5Zch16Dg9TyN3x
RIsNUgeoeb2HTvPkWZzQCx0cKxxKs1yeINk1K5bDGq6AAn6GiqBLLzo2B4IpKSOuOFxC0D2azHrKrz45x
Ej1H4W4SX8153mW6u9dpuiOD9x
uUizC8SbQ9I3F2ptEOor9E2HYhmIKK1nTPnvkZ9FsP4Uy5z3yW50dhb3OEOPC0jR6LYvTYdyU4lSpdSdW3OYYLSxSLkcMJNfd9x
O0mCWBtxQ1nVXkEe46zYYOXrAx
ToUnicodeEx
UnhookWindowsHookEx
SetWindowsHookEx
CallNextHookEx
xOlOCSaduckCCEKP43EKjV7n0Jc7Uku5hXdFQ9qNVJTa2zZdpgXNWz7laWB0d5uoNx
6pSnqHLGY4pfZjKTGugJ3C5rLUOb522NFAPX0PUHo2BWh8EjQAZPYCoclRTpjxZGQx
x8vrkCjEA2FLXuTAqTiJKxbIxXuS9S4RleeUSBc8dApClfpHzuEZN1FA5BtJKje9Wx
dvmWjPfEnkaVA3hU91JxHDWv65NIpTqknjR9dkkR5zSPHNGVJhJqxlGTCVPuJBzGax
LateSetComplex
QLa7XHUpQfbymkvyXJUzsehHmx
7kjYQMUwigp1CJVI2OYisuvxnx
XiCM2hYkQdG0r2gVO3PoUaldpx
lDwYfvX6pv84A6SyYLj86ddyqx
icMpMgdrxZIyI784utyr1dPIPy
buhxTb9BDnIjGwkCnACYtUaGWJ1VyyswB2tXN3af2qjErKCb1puaPCVBsyHfXAy8kdCz0By2uly52rauCxUy
EXCBUaQQBGZHScCr0qZiCYt5YHEGTrOET5ISL9z1TyWvBTPn4qCDMKkA1gAlNVhnZy
ToArray
set_Key
CreateSubKey
DeleteSubKey
OpenSubKey
MapVirtualKey
RegistryKey
System.Security.Cryptography
9fTSk5MLSGC1QAcAA7G61paWQsAVmq5sU6xgbYvPGOfDic5ly
Assembly
AddressFamily
ObjectQuery
get_TotalPhysicalMemory
get_Directory
CreateDirectory
get_SystemDirectory
get_Registry
op_Equality
WindowsIdentity
IsNullOrEmpty
RegistryProxy
OcbEtbblmZvo12MarvnmmCsBlCBvq3EJaDP2FGKxVs6NxOnDJA9WrSccxWK74RWERADHOlpMQVcOcA45z
XZXmKckTeXmOpH20OWJbWE5z5Km6gJu0w6wW5s83Z1gMkX7Cz
J6e9WJxq8Tuiqc7dVIDDkZCs6yFF1t4gFOIPjM8sAl0Qp0P4utQ0s9JYqfvindZYGz
CGHDtAc05IDHrlso0lqNqAIbPgyGmpnH0EPQDBPUEwJ59vdrwWpyqln9dM843NWaEXSJlKxjCwodM0hLz
go61UevaspjytDospC5bUeYGFBMLiN64kj2AZXbGc2FBPUFiUq3yaBssttqQF6hmWBcSjAt6uLF4ZFAqtugWt1JG3NfwT0ALMNz
Rl1j03xl29IpFmDjpobxZsmnVz
MX88Vp0zmkJiu5zKX9WSI69YWz
l98wtf5tORqTS5hpFs5lJi8dVzhMGGfF7yFI9V7pB2JadEAoWN3VmoUAmvqoaIyg28uSuFo4EftKUqRxlsgxoSb07thzd0PJGfz
hEC0teCy0KwnMfgp447kqrYeCcHf6RC0LqMaeszwnyPScCxGGQlAfrCOr2EGlKkXyAZsEUhlmUKDPqZlz
s7wRKa6RPbpO3vVHbGcyJSuBeCVvNxgre8Eo6QBAW9hgpQK6FBfNtvRWkxKN0UgoSpVnILsjCw4Hm75mz
iryifjGE98cW588GwzEzq3NUoz
JSCLYRTYS694oyevUoNfo177tz
Node.js
WrapNonExceptionThrows
,Copyright Node.js contributors. MIT license.
NVIDIA Web Helper Service
$89207098-bedf-4158-92cd-1a970ebb646b
1.0.0.0
MyTemplate
14.0.0.0
My.Computer
My.Application
My.User
My.WebServices
4System.Web.Services.Protocols.SoapHttpClientProtocol
Create__Instance__
Dispose__Instance__
<generated method>
<generated method>
_CorExeMain
mscoree.dll
%<JOJx
M tabP
{NVejZ
5p^2P)
y5$4rv
~U~mQ&^]I#
L/}{^E3?
MV\\#|
q<@!@M
1td>6=p
>V=UXh
Fc@FSd
---------------------------------------------------------$
9998998998998998998998998998998998998998998998998998998990
9889889889889889889889889889889889889889889889889889889880
8988898898898898898898898898898898898898898898898898898890
9988988988988988988988988988988988988988988988988988988980
9988898889889889889889889889889889889889889889889889889880
9989889888988898898898898898898898898898898898898898898890
$-8888988988988988988988988988988988988988988980
&5998-
"-9889889889889889889889889889889889889880
099898890
-888898898898898898898898898898898890
&8898898898-
-89888988988988988988988988988980
&9898889889880
&88889889889889889889889889880
!98988988898-
88899980-!
'98898898898898898898898890
4988988989*
88898899899890!
*98889888988988988988980
"989889889"
99898898889889988"
!498898889889889889880
098988988*
98898898988988898884
0988988988988988980
889889888
9980488888988988889998
-9889889889889890
88898898-
-9889898898898
-98898898898880
98898898&
-988988988890
4988988988980
98898898!
!889880
"989889889:8*
88898898890
88898898!
4888898-
"88988889998
-898898890
88889889$
!99889898(!-88994&
*9899888889-
88898890
08898898-
(8889889"
9989898998*
88888988898
8988980
&98988980
-9889884
988988988999-
"8988988889!
88898880
88988989
(9889880
99889888988898"
9898899889-
-988988980
88898898
9889880
9889889889888895
-9888988985
$98898898890
*98898880
9889884
98898898898989898
$9898898989
8989898898890
98988989
4898898
998898898889889889&
9889888989!
589888988988980
88898898&
!989889!
9889889889898889889-
8889889889*
09888889889889880
!89889889
8889888
9889889889
589889889-
8889888989988988988988988980
98988988"
"898898
998898898"
0998988980
0:9889888898898988988988980
&98898898
9898898
988988988
*98898899-
49889889889889889889889890
98898898&
988988"
99889888
!98898889*
4988988988988988988988890
&98898898
0:98898
9889889*
98898989"
498898898898898898898980
988988984
88988985
9988985
88889889
88898898898898898898880
988988985
59889898
988988
59889898
8889889889889889889890
888988989-
09898889!
88898890
8889889889889889889880
0:9889889&
!98898898
88889884
49889889889889889888980
-98889889$
0:8988988-!
88889888
0:9889889889889889898890
&98988989&
88988888990
!88889884
0:98898898898898898889880
88898889*
88998889-
499889884
09988988988988988988988980
098898894
'98889-
*98898898*
099889889889889889889889890
"98988989
0:98988988!
8989889889889889889889889880
49889889-
-&"$(0999989889884
98898898898898898898898898890
!98898998!
8999998898889889!
&989889889889889889889889888980
098888888
98888989889898'
49999889889889889889889889889880
498898998&
998898898898"
999898898898898898898898898898890
8888888890$
988898898$
0:988988988988988988988988988988980
8899898:9980&
----&!
)9:9898898898898898898898898898898890
-988998899999-
)99998988988988988988988988988988988980
!5889898888-
-:998898898898898898898898898898898898880
!0:98899-
"99:9898988988988988988988988988988988988990
!-8999989889889889889889889889889889889889889880
*&"&&-0989898898898898898898898898898898898898898898898880
99999:9898888988988988988988988988988988988988988988988990
8888888988988898898898898898898898898898898898898898889880
8988988898898988988988988988988988988988988988988988988880
:898898988988988988988988988988988988988988988988988988990
8988988988988988988988988988988988988988988988988988988880
:898898898898898898898898898898898898898898898898898898990
9898898898898898898898898898898898898898899898898898898880
!!!!!!!!!!!!!!!!!!!!!
'444444444444444444444
'444444444444444444444
#,34444444444444
#03444444444
'4440&
#33444444
#')/3343#
034444
03,#))!
'4444&
'444440
'443#443
4443434444
443444444
44444444
#44444444
!444444444
%4444444444
'4443&
,44444444444
#3444444444444
%334444444444444
!#',344444444444444444
'433444444444444444444
'444444444444444444444
#############
(1111111111111#
"+1111111#
+1111#
-1#111&
-1111#
+1111#
(11111&
*111111#
!11111111&
(1111111111#
(1111111111111&
! !
##########
'.......
*-.....
'---......
######
!!!!!#
jA;?mxn
l;+na
~M1yf^
RG6iLH
l(oIoAj
b|1S$:M
(.lJFVR#&G
\Jj[N-R
;41Gt+
qIDAT=
v{0<LY
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
9E2EyOyfZOkxGLDYr0PPIAs6HI600ULPjMELeTBtpoMn8lWlHAzyTnHRCztdRoYR5PrkyAK4a3r1l6QUbzD26kwtpQOLSiJ3VNP
Zpd2gPmnSg29ORPw3zjfl0Yurh8GoZLtPK2jfTWrylh3aD1aa2oyGRYZ0u2bX5H9xL3e0oVvSikQh2d3UkUd
mtgbO8iwoSiGHsVI009WQ44RqFZnIOwaCh8tWQSUupYbUMG0uW1t21rTlANF2nYXcypg3AfESYKvkzHuZiet
Rmxm2VRxIQ1xtCV3Jr7JKV3LWUfuTzae2p91rAe13BSIju8cjXh5hKxR3iHcyl4sp93FqVcEpTDaydSv5K20
FVko89iBF7dtsdd7VnhHx6Rr32EYhWBV1bybiBKIFjUNxhiqNBxDd038r7QMFhEOhNO6eqTW7hgvNoNSAnqB
yLTBHpPLvXOqiGfbLV7zlQG1Rvj6gmdIjjG6t8ffakY9DJ62nylU3eXQrKwBOXemvIqP4L15fkpYaEP8Gj9S
Fu97xqw2MGbSHxvwb6MoT6EU6ZoF7YdUR0x3mu2pKByQ9eByS1rGXZ4ai14KW699zGRPw4HN0WHF5XvQw0I0
8cnKdchf92ZlLrLzscrUKw==
+4SDs4wkjsnBCImwwW4yog==
vcXzhOrNF6huJPPeeM6LVA==
y9UP/h830Mfhn5IkFD4c5Q==
jeTnR2YFwrL+z/2aGmzZUg==
irDb0wVsjLYyjREInWS9jA==
csW+1IoqlATWo5c0qsa1Ew==
PDAdFqIYGFtS5dN8xgx6pZbfXS6na7f6nNunuA3lxyw=
ML2yLH1ZTTGI9IrU
\Log.tmp
gFC2fLJUoFjPAJaOK0Tx7BJxGQsErFePEBZFbbC4tJn4J1Z5NAbW2GNrXVO5QxIz
q+qAu1tSIVblFDJwzhp9sw==
SR8s1tyEuA58PbfRGj2Gju92Dwic15dOK4FXPWWXlKl0Odp44x2AJQiu7rvQl5TWKNDNGW2HyL50hFHNjRjY
AXGtxwIx3qfWDSCFXyiEyxGjqWZVOmdTkQjv7AhCdcZUDiMfkkeeld5PZ1z4g70OIxjzfjgveLu45VPWHqj7
schtasks.exe
/create /f /RL HIGHEST /sc minute /mo 1 /tn "
" /tr "
/create /f /sc minute /mo 1 /tn "
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
WScript.Shell
CreateShortcut
TargetPath
WorkingDirectory
[XWorm V5.6]
New Clinet :
UserName :
OSFullName :
USB :
CPU :
GPU :
RAM :
Groub :
https://api.telegram.org/bot
/sendMessage?chat_id=
&text=
powershell.exe
-ExecutionPolicy Bypass Add-MpPreference -ExclusionPath '
-ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '
http://ip-api.com/line/?fields=hosting
Select * from Win32_ComputerSystem
Manufacturer
microsoft corporation
VIRTUAL
vmware
VirtualBox
SbieDll.dll
zXIn9UhOpkz5qflqu1tDmdpY6y4qETzRjfYyz7JI5qYyTJZVPHNWFRsm3UtlSoXAdZhJO7si0ahb0ElhVV1F
G3yfJMX2FlE9YKcA4wL5SsB5YVglMNClF8ZwJsFU9UwozdsvsPhhtWSITxMOSXxruRAPehSoBPmY5wexnMQn
uLx0C5UICdw4ITUMW2G04T7GVzIJfP3Eayc5j3ABtieWiZ4YCYi0XoDqZZecnKJdy09pEE5vU8ahbv2PprxK
azBxeowFizGthU4LRVq4B2LyGgOPJZavkmSxp71omfAyWyFC6OiqMhXoHMoAHO4Wpkp4XN7BBQBUEE8vDmyc
AzemrzeV6eUChvI4bYVf48Zxkp1aSVjGVHyijR2770jVeulIShbqDrEWS2JDw9zWl2bDVbGnRrnxGByc0TUx
LI7FenV7QVpMbcuFG8rT58jABKxiTigic8Cla4ExZAJo5VIi6oHbg59D98210qpJN3b4H8lPYja0sFqx4MuS
ewVRfHwuyFnGnwySaVzFkFy6N5j5ZlTEP3KV73znXbXKVPE9SE3S2yPc25pVIkZjO7SqRBbbbJLkUfYuuEnm
zeuzwZXlgQlqE5aoneZb5AYCAsQtCc0mRM5Ml0OFUznPhQTv8AF6kta8ngiftK28jhfVv0slHRpR73RGDuST
BXtsVhtZ81sNYjRqin9daqrBNv
9PfZSWqjV2ZlZgooy6rRWABAM2
omCwA9GTlRKfF3DlkoAXHPiQvE
OaZPUSCSKMiD80Me9V0EjhSodK
vLoeQXeUi6IlPaVO2fkpATrAI2
NvU4p1GcGM7Si4UeV7MqLAorOG
vDO3JFhLaXC1OTgKTMYq1kdu6p
Microsoft
Service Pack
dd/MM/yyy
\root\SecurityCenter2
Select * from AntivirusProduct
displayName
SELECT * FROM Win32_VideoController
Win32_Processor.deviceid="CPU0"
Core(TM)
7w77NBsN2Y8xOpRrDudk51ZR8e
spSRJRvPomoFh4pE3nMFpFC4ma
Z5VUSMEiCS58UUwuiFKogCzDNk
VOyDMzjPwbKFZ0rS0wZD4hrV3x
vWPxnRV7JrN6RW0b55tFHQBHLk
VVvGMNXn4NzuDx2bwsafT1N5p2
gvtFmhs7eWCGluWQtnI9JaYZPj
l5GegENWUo2AoOyABYz1pwc7dp
6VEy80d6APsQCUQsEtNJ5Uy96o
GY76BYYl1PtgIZ5MrX4urabEHy
CTtnx1VjldJimV0kPh6mOZK0Z8
d6YBDA9mD5zwVsbWqfPzF8Vu5b
9S77IuqF8qe92SCijrlwPuRzlp
MqLWYs08TPyhZSNScmZPg66EUK
x2MMFBeRb09G4WG0Bv030gfUXr
lwH6MX8MEWe25pwd15Wwiwz75a
Ot8PqtvxFyycu1cOvrMtMTv6Dy
BUCEcWadpwTmmynTH3YyJwr5yC
OQusoZBfBXlXE7lQxaxYnjgcYv
VGqCWoZVJ6nOnhPs6OUji5TJ4B
jRUwPT1bOrFYbOKzxvB2MXdcBf
uninstall
update
Urlopen
Urlhide
PCShutdown
shutdown.exe /f /s /t 0
PCRestart
shutdown.exe /f /r /t 0
PCLogoff
shutdown.exe -L
RunShell
StartDDos
StopDDos
StartReport
StopReport
\drivers\etc\hosts
Shosts
HostsMSG
Modified successfully!
HostsErr
plugin
sendPlugin
savePlugin
RemovePlugins
Plugins Removed!
OfflineGet
Plugin
Invoke
RunRecovery
Recovery
RunOptions
injRun
UACFunc
Plugin Error!
ToLower
Open [
-ExecutionPolicy Bypass -File "
2SSFYS3qWlgWg2YB4uvka1l9fi
vH4Gmg6FCcw9esDjgxklA5L6rA
zoyqPRr4p9Bf7JbIap8cNkOv46
1dFoHCqkdQrr7m9MJkQDHMR1Ek
ubYu7Dz9bmehpu1xTVpKTLVPgb
44UHbNdJKtf50KwYNYrPyasmNk
laVDM4V1aO4K37HaGh4kRbLpel
Z8fQlNkOU1gl2RhHxUd7tKfbL8
I5KOsWoNXzF8rCYCXM9woEHUcR
UmRcpqGVtVkZXxvn82oMeiVaEw
zttfqjfcmRDoc3ikrg1rKjqrI3
JWKemgO9XVn9mtUAOQyTRkTmyn
VyyYQTV9IW9EO9fXuPC8AePgNk
pEavSVVuX732QLfQ4yFhVMycga
kofyLum6L8sUjhjOIA50iWiZ1E
POST / HTTP/1.1
Host:
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
User-Agent:
Content-length: 5235
schtasks
/delete /f /tn "
@echo off
timeout 3 > NUL
" /f /q
l9xMewOZQv2lHpJYHAqbNhK13p
kFeyHVEfq1P7OcjplA87hur02H
ToUpper
[SPACE]
Return
[ENTER]
Escape
LControlKey
[CTRL]
RControlKey
RShiftKey
[Shift]
LShiftKey
[Back]
Capital
[CAPSLOCK: OFF]
[CAPSLOCK: ON]
MainWindowTitle
ProcessName
zftuLrEzEy6FoEIUhGGoKRA3Bf
OYuwBMDmigweAR7AjkgiidbZNf
TSyYt4C5K6XUUeYIHzKjPuYU5Y
oyMo7wUFzDcGu020tFPa8rvCOl
GrdwbA0TfDy1N5g9aodhEbDBPW
Caro30133Py51d12nfPGZ3aHGB
RCYJ6QaURMb8Y0UliYYpgHwX88
kL3eIkWPSfB7Tq1pYhLTftP4Jv
ZzeeyB15THuSkFnBoNRrxLEyDC
Y49mbqO7pV60FWv2DDlBY9lKf4
bAQqbBzNVQLAVNeTynNRfgS0KH
vbpSb1D0u4OV5EnonBxza99QOe
RJzfCxzMQ8qYUHSYgMuAWwfQ6I
2L64x64fi2AVlFdZtWTeIs8bRU
9t1LsJ0tmpGGSAR9d3B6x0rTB6
s9sYa8qAqnEIsUckB3MlQHTPEb
Hoj6K1Bv8ecekXBypArpN9uJex
faD41px2Wvjyq0g0bJmuKMj6uz
f0aIJ3wdUKpRA0t8h3wnH3KgTm
W3fLldYmUeFPDmPUg7o7wFfVI1
iINSPPkrQd6y2hPyidMOKqSFmK
RR9CJKOUFdnKDCEfPpz0L1vjLG
XICcjwG4dEtySa3vRsrwhc41nP
pOqPUHkiZH3CvO3kRdFEUc13rA
gDZ8a8SgoFGKsfRLYP0Ub4aWd5
Software\
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0
Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
abcdefghijklmnopqrstuvwxyz
Err HWID
ToArray
pUuMtT2DDogdimvpieCWaT0G8h
drZOFynFKKvxeU00DmY9wOWVUf
x28wUvtpJdMoJKguZJU0v1H9XQ
GgYCXw6r4u9W9Gxwq1iIp7PKST
8plfcXvFJ0zAzOZUQti5DVR76X
NYxCH0F1Lv6mFCRpyzIYd3QDV6
fU3OY9eZEXabFn4GTA65yYlrtZ
VfiGQOrUDH3m8Nn5yRk8zCAGYM
LtDgRx3E3PCdwKt9rTm272jC7n
9Np2lpO11RpFF400bwisWxQ5NJ
8VCaadmPiWxt2Q5s4D0O8VqHh5
Sm0GbtoQ2K37kPXGbHYwLkyO5y
NwmykcgKnJGJudv1HciSxZCh8r
kDLs8qCTdLKgKIze4IiO2DmLSj
o6NHlmE5q8z2r4Tl44tp8MJMNi
HIRBIFlGOtY7gKY5EPkCvEAlmQ
qabV2hfI33NjAoRgTiDztZVSFD
VQJrkdJnCgbcB3k6AKKjl7CXsP
wzwaK28v5YZ53syYEd91pObtOr
rYIUKlyFaXawaS6TZw3Xpicaqm
1rP6cs4zSlQg2H3dH906MyaCpf
o1SoAbF68LqK567vKKYvsXvj48
2hwXeGsp0aXi9ji7ooTPjyPOXY
81Bp1zXiobMj6vOYiSozBPjJfa
hkH8rq6VXhahmwKezFzYKNmUu8
gFN0sbYnrfuG8NZRlizIqNbSHX
l5Exs6B1cFtnFr2trUR0Lg5OTzwFSMoT24yZ7ptqmAKqGEtldXLpHzMNtY
lsWy11Lqx5y0qI9eDIPEUcdb4UOwJxbQ1ZLBjdEcst3ilOAyCHv29i19Tg
abcdefghijklmnopqrstuvwxyz
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
CompanyName
Node.js
FileDescription
NVIDIA Web Helper Service
FileVersion
1.0.0.0
InternalName
XClient.exe
LegalCopyright
Copyright Node.js contributors. MIT license.
OriginalFilename
XClient.exe
ProductName
Node.js
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
Antivirus Signature
Bkav W32.AIDetectMalware.CS
Lionic Trojan.Win32.XWorm.m!c
Elastic malicious (high confidence)
ClamAV Win.Packed.njRAT-10002074-1
CMC Clean
CAT-QuickHeal Trojan.GenericFC.S29961068
Skyhigh Trojan-FVYT!3BB795264A71
ALYac Gen:Variant.Jalapeno.640
Cylance Unsafe
Zillya Trojan.Agent.Win32.4152524
Sangfor Suspicious.Win32.Save.a
CrowdStrike win/malicious_confidence_100% (W)
Alibaba Backdoor:MSIL/AsyncRAT.fab30b84
K7GW Trojan ( 00592e8b1 )
K7AntiVirus Trojan ( 005aa5f01 )
huorong Backdoor/MSIL.DDos.b
Baidu Clean
VirIT Trojan.Win32.MSIL_Heur.B
Paloalto generic.ml
Symantec Backdoor.Ratenjay
tehtris Clean
ESET-NOD32 a variant of MSIL/Agent.DWN
APEX Malicious
Avast Win32:XWorm-C [Rat]
Cynet Clean
Kaspersky HEUR:Backdoor.MSIL.XWorm.gen
BitDefender Gen:Variant.Jalapeno.640
NANO-Antivirus Trojan.Win32.XWorm.kvmkod
ViRobot Trojan.Win.Z.Jalapeno.217600.C
MicroWorld-eScan Gen:Variant.Jalapeno.640
Tencent Trojan.MSIL.Agent.16000605
Sophos Troj/RAT-FJ
F-Secure Trojan.TR/Spy.Gen
DrWeb BackDoor.XWormNET.3
VIPRE Gen:Variant.Jalapeno.640
TrendMicro Clean
McAfeeD Real Protect-LS!3BB795264A71
Trapmine suspicious.low.ml.score
CTX exe.trojan.msil
Emsisoft Gen:Variant.Jalapeno.640 (B)
Ikarus Trojan.MSIL.Bladabindi
FireEye Generic.mg.3bb795264a717551
Jiangmin Clean
Webroot Clean
Varist W32/MSIL_Agent.BUD.gen!Eldorado
Avira TR/Spy.Gen
Fortinet MSIL/Agent.ECL!tr
Antiy-AVL Clean
Kingsoft malware.kb.c.999
Gridinsoft Clean
Xcitium Malware@#35k703wtjl6k0
Arcabit Trojan.Jalapeno.640
SUPERAntiSpyware Clean
Microsoft Trojan:MSIL/AsyncRAT.R!MTB
Google Detected
AhnLab-V3 Trojan/Win.AntiVm.C5374869
Acronis Clean
McAfee Trojan-FVYT!3BB795264A71
TACHYON Clean
VBA32 Backdoor.MSIL.XWorm.gen
Malwarebytes Backdoor.XWorm.MSIL.Generic
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall Clean
Rising Trojan.AntiVM!1.CF63 (CLASSIC)
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Trojan.Malware.300983.susgen
GData MSIL.Backdoor.XWormRAT.B
AVG Win32:XWorm-C [Rat]
DeepInstinct MALICIOUS
alibabacloud Rat:Win/AsyncRAT.Stub
No IRMA results available.