Sample details: 4451fc1ccdfa5134c5cb191366951972 --

Hashes
MD5: 4451fc1ccdfa5134c5cb191366951972
SHA1: f142eb0e9eeb590288b032783fde577bc9e8e550
SHA256: dd4541908a6662418b076233e53d00afc8d13c648140651fd8cb51d00ddeffc1
SSDEEP: 24576:OJAHEpcn3v2K5o7pQCiL7AQPNMAuHXIzPVm:Y0/5od2vDPdu3Ig
Details
File Type: PE32
Added: 2018-06-23 03:20:57
Yara Hits
CuckooSandbox/vmdetect | YRP/Safeguard_103_Simonzh | YRP/Safengine_Shielden_v2160 | YRP/IsPE32 | YRP/IsNET_EXE | YRP/IsWindowsGUI | YRP/IsPacked | YRP/HasDebugData | YRP/maldoc_find_kernel32_base_method_1 | YRP/maldoc_getEIP_method_1 | YRP/domain | YRP/IP | YRP/url | YRP/contentis_base64 | YRP/VirtualPC_Detection | YRP/Dropper_Strings | YRP/DebuggerCheck__RemoteAPI | YRP/DebuggerHiding__Thread | YRP/ThreadControl__Context | YRP/vmdetect | YRP/anti_dbg | YRP/keylogger | YRP/cred_local | YRP/win_registry | YRP/win_files_operation | YRP/win_hook | YRP/Advapi_Hash_API | YRP/MD5_Constants | YRP/RijnDael_AES | YRP/Str_Win32_Wininet_Library | YRP/CAP_HookExKeylogger |
Strings
		!This program cannot be run in DOS mode.
.sedata
.idata
.sedata
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
!This program cannot be run in DOS mode.
`.sdata
@.reloc
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
l#ffffff
l#ffffff
v2.0.50727
#Strings
.	2	7	K
.	2	7	
<Module>
mscorlib
Microsoft.VisualBasic
MyApplication
Server.My
MyComputer
MyProject
MyForms
MyWebServices
ThreadSafeObjectProvider`1
SocketClient
Server
ConnectedEventHandler
DisconnectedEventHandler
DataEventHandler
njLogger
KBDLLHOOKSTRUCT
KBDLLHOOKSTRUCTFlags
KBDLLHookProc
firefox5
Chrome
SQLiteHandler
CIE7Passwords
CREDENTIAL
SHITEMID
TSECItem
DLLFunctionDelegate
DLLFunctionDelegate2
DLLFunctionDelegate3
DLLFunctionDelegate4
DLLFunctionDelegate5
SQLiteBase5
CryptProtectPromptFlags
CRYPTPROTECT_PROMPTSTRUCT
DATA_BLOB
record_header_field
table_entry
sqlite_master_entry
SYSTEMTIME
INTERNET_CACHE_ENTRY_INFO
StringIndexHeader
StringIndexEntry
CRED_TYPE
CREDENTIAL_ATTRIBUTE
SQLiteDataTypes
Module1
ResourceReader
Resources
Server.My.Resources
MySettings
MySettingsProperty
Microsoft.VisualBasic.ApplicationServices
WindowsFormsApplicationBase
.cctor
__ENCAddToList
System.Collections.Generic
List`1
System
WeakReference
__ENCList
OnCreateMainForm
Microsoft.VisualBasic.Devices
Computer
Object
get_Computer
m_ComputerObjectProvider
get_Application
m_AppObjectProvider
get_User
m_UserObjectProvider
get_Forms
m_MyFormsObjectProvider
get_WebServices
m_MyWebServicesObjectProvider
Application
WebServices
get_Form1
m_Form1
set_Form1
Create__Instance__
System.Windows.Forms
Instance
Dispose__Instance__
instance
System.Collections
Hashtable
m_FormBeingCreated
Equals
GetHashCode
GetType
ToString
get_GetInstance
m_ThreadStaticValue
GetInstance
System.Net.Sockets
TcpClient
add_Connected
ConnectedEvent
remove_Connected
add_Disconnected
DisconnectedEvent
remove_Disconnected
add_Data
DataEvent
remove_Data
IsBuzy
Statconnected
Connect
DisConnect
Connected
Disconnected
MulticastDelegate
TargetObject
TargetMethod
IAsyncResult
AsyncCallback
BeginInvoke
DelegateCallback
DelegateAsyncState
EndInvoke
DelegateAsyncResult
Invoke
isRunning
MaxLength
System.IO
StreamWriter
Stream
LogsPath
DeleteLogs
LastAV
LastAS
lastKey
System.Text
StringBuilder
ToUnicodeEx
wVirtKey
wScanCode
lpKeyState
pwszBuff
cchBuff
wFlags
GetKeyboardState
MapVirtualKey
uMapType
SetWindowsHookEx
idHook
HookProc
hInstance
wParam
CallNextHookEx
lParam
UnhookWindowsHookEx
GetWindowThreadProcessId
lpdwProcessID
user32.dll
GetKeyboardLayout
dwLayout
user32
GetForegroundWindow
Isdown
VKCodeToUnicode
VKCode
WH_KEYBOARD_LL
HC_ACTION
WM_SYSKEYDOWN
WM_SYSKEYUP
KBDLLHookProcDelegate
HHookID
WM_KEYDOWN
WM_KEYUP
KeyboardProc
ValueType
vkCode
scanCode
dwExtraInfo
value__
LLKHF_EXTENDED
LLKHF_INJECTED
LLKHF_ALTDOWN
LLKHF_UP
CredEnumerateW
filter
pCredentials
GetVolumeInformation
lpRootPathName
lpVolumeNameBuffer
nVolumeNameSize
lpVolumeSerialNumber
lpMaximumComponentLength
lpFileSystemFlags
lpFileSystemNameBuffer
nFileSystemNameSize
kernel32
GetVolumeInformationA
paltalk
opera_salt
key_size
DOutput
GetOpera
decrypt2_method
encrypt_data
GetFire
LoadLibrary
dllFilePath
GetProcAddress
hModule
procName
NSS_Init
configdir
PK11_GetInternalKeySlot
PK11_Authenticate
loadCerts
NSSBase64_DecodeBuffer
arenaOpt
outItemOpt
PK11SDR_Decrypt
result
signon
Gchrome
CryptUnprotectData
pDataIn
szDataDescr
pOptionalEntropy
pvReserved
pPromptStruct
dwFlags
pDataOut
Decrypt
db_bytes
page_size
encoding
master_table_entries
SQLDataTypeSize
table_entries
field_names
ToBigEndian16Bit
ToBigEndian32Bit
ToBigEndian64Bit
startIndex
endIndex
ConvertToInteger
ReadMasterTable
Offset
ReadTableFromOffset
ReadTable
TableName
GetRowCount
GetValue
row_num
GetTableNames
baseName
ERROR_CACHE_FIND_FAIL
ERROR_CACHE_FIND_SUCCESS
MAX_PATH
MAX_CACHE_ENTRY_INFO_SIZE
NORMAL_CACHE_ENTRY
URLHISTORY_CACHE_ENTRY
FindFirstUrlCacheEntry
lpszUrlSearchPattern
lpFirstCacheEntryInfo
lpdwFirstCacheEntryInfoBufferSize
wininet.dll
FindFirstUrlCacheEntryA
FindNextUrlCacheEntry
FindNextUrlCacheEntryA
FindCloseUrlCache
hEnumHandle
lstrlenA
lpString
kernel32.dll
lstrcpyA
RetVal
PROV_RSA_FULL
ALG_CLASS_HASH
ALG_TYPE_ANY
ALG_SID_SHA
CALG_SHA
AT_SIGNATURE
CryptAcquireContext
phProv
pszContainer
pszProvider
dwProvType
advapi32.dll
CryptAcquireContextA
CryptCreateHash
phHash
CryptHashData
pbData
dwDataLen
HP_HASHVAL
CryptGetHashParam
dwParam
pdwDataLen
CryptSignHash
dwKeySpec
sDescription
pbSignature
pdwSigLen
CryptSignHashA
CryptDestroyHash
CryptReleaseContext
READ_CONTROL
STANDARD_RIGHTS_READ
KEY_QUERY_VALUE
KEY_ENUMERATE_SUB_KEYS
KEY_NOTIFY
SYNCHRONIZE
STANDARD_RIGHTS_WRITE
KEY_SET_VALUE
KEY_CREATE_SUB_KEY
KEY_READ
KEY_WRITE
HKEY_CURRENT_USER
RegOpenKeyEx
lpSubKey
ulOptions
samDesired
phkResult
RegOpenKeyExA
RegQueryValueEx
lpValueName
lpReserved
lpType
lpData
lpcbData
RegQueryValueExA
RegDeleteValue
RegDeleteValueA
LocalFree
RegCloseKey
ppszDataDescr
crypt32.dll
CredEnumerate
lpszFilter
lFlags
pCount
lppCredentials
CredDelete
lpwstrTargetName
dwType
CredDeleteW
CredFree
pBuffer
SysAllocString
pOlechar
oleaut32.dll
GetStrFromPtrA
CheckSum
GetSHA1Hash
ProcessIEPass
strURL
strHash
dataOut
AddPasswdInfo
strRess
CopyString
Refresh
TargetName
Comment
LastWritten
CredentialBlobSize
CredentialBlob
Persist
AttributeCount
Attributes
TargetAlias
UserName
SECItemType
SECItemData
SECItemLen
HeapAlloc
GetProcessHeap
lstrlen
sqlite3_open
fileName
database
sqlite3_close
sqlite3_exec
callback
arguments
sqlite3_errmsg
sqlite3_prepare_v2
length
statement
sqlite3_step
sqlite3_column_count
sqlite3_column_name
columnNumber
sqlite3_column_type
sqlite3_column_int
sqlite3_column_double
sqlite3_column_text
sqlite3_column_blob
sqlite3_column_table_name
sqlite3_finalize
handle
SQL_OK
SQL_ROW
SQL_DONE
OpenDatabase
CloseDatabase
ArrayList
GetTables
ExecuteNonQuery
System.Data
DataTable
ExecuteQuery
ReadFirstRow
ReadNextRow
StringToPointer
PointerToString
GetPointerLenght
CRYPTPROTECT_PROMPT_ON_UNPROTECT
CRYPTPROTECT_PROMPT_ON_PROTECT
cbSize
dwPromptFlags
hwndApp
szPrompt
cbData
row_id
content
item_type
item_name
astable_name
root_num
sql_statement
wMonth
wDayOfWeek
wMinute
wSecond
wMilliseconds
dwStructSize
lpszSourceUrlName
lpszLocalFileName
CacheEntryType
dwUseCount
dwHitRate
dwSizeLow
dwSizeHigh
System.Runtime.InteropServices
FILETIME
LastModifiedTime
ExpireTime
LastAccessTime
LastSyncTime
lpHeaderInfo
dwHeaderInfoSize
lpszFileExtension
dwExemptDelta
dwWICK
dwEntriesCount
dwUnkId
dwDataOffset
ftInsertDateTime
dwDataSize
GENERIC
DOMAIN_PASSWORD
DOMAIN_CERTIFICATE
DOMAIN_VISIBLE_PASSWORD
MAXIMUM
lpstrKeyword
dwValueSize
lpbValue
lpstrTargetName
lpstrComment
ftLastWritten
dwCredentialBlobSize
lpbCredentialBlob
dwPersist
dwAttributeCount
lpAttributes
lpstrTargetAlias
lpUserName
System.Drawing
Bitmap
System.Drawing.Imaging
ImageCodecInfo
GetEncoderInfo
Dispose
disposing
System.ComponentModel
IContainer
components
InitializeComponent
_Timer1
get_Timer1
set_Timer1
WithEventsValue
TextBox
_TextBox1
get_TextBox1
set_TextBox1
culture
country
Microsoft.Win32
RegistryKey
regKey
FormClosedEventArgs
Form1_FormClosed
sender
FormClosingEventArgs
Form1_FormClosing
EventArgs
Form1_Load
Timer1_Tick
Timer1
TextBox1
mouse_event
cButtons
System.Diagnostics
Process
GetProcesses
getanti
FindResource
aiVBMOTufgOf
lpName
sViZvxJrXrJE
moduleName
GetModuleHandleA
SizeofResource
hResInfo
LoadResource
ElTJKkhFGSM
hHgkiIkSITDW
resourceid
System.Resources
ResourceManager
resourceMan
System.Globalization
CultureInfo
resourceCulture
get_ResourceManager
get_Culture
set_Culture
Culture
System.Configuration
ApplicationSettingsBase
defaultInstance
addedHandler
addedHandlerLockObject
AutoSaveSettings
get_Default
Default
get_Settings
Settings
FormClosedEventHandler
add_FormClosed
FormClosingEventHandler
add_FormClosing
EventHandler
add_Load
get_CurrentCulture
get_EnglishName
String
IndexOf
LastIndexOf
Substring
Encoding
get_UTF8
get_ExecutablePath
GetString
Microsoft.VisualBasic.CompilerServices
Conversions
ToInteger
System.Threading
Monitor
get_Count
get_Capacity
get_Item
get_IsAlive
set_Item
RemoveRange
set_Capacity
System.Runtime.CompilerServices
RuntimeHelpers
GetObjectValue
IDisposable
Container
Control
SuspendLayout
set_Enabled
set_Interval
set_Location
set_Name
set_Size
set_TabIndex
set_Visible
ContainerControl
set_AutoScaleDimensions
AutoScaleMode
set_AutoScaleMode
set_ClientSize
ControlCollection
get_Controls
FormBorderStyle
set_FormBorderStyle
set_Text
ResumeLayout
PerformLayout
remove_Tick
add_Tick
FileInfo
ProjectData
ClearProjectError
get_StartupPath
GetFileName
Concat
ServerComputer
Microsoft.VisualBasic.MyServices
FileSystemProxy
get_FileSystem
SpecialDirectoriesProxy
get_SpecialDirectories
get_Programs
CopyTo
Registry
LocalMachine
OpenSubKey
SetValue
set_ShowInTaskbar
Exception
SetProjectError
CreateProjectError
MemoryStream
Rectangle
Strings
CompareMethod
Operators
CompareString
Environment
get_MachineName
get_UserName
ComputerInfo
get_Info
get_OSFullName
ConcatenateObject
NewLateBinding
LateCall
GetTempPath
Convert
FromBase64String
WriteAllBytes
Thread
Network
get_Network
DownloadFile
DeleteValue
FileSystem
EndApp
Interaction
MsgBoxResult
MsgBoxStyle
MsgBox
Screen
get_PrimaryScreen
get_Bounds
get_Size
get_Width
get_Height
get_Length
ToArray
Cursor
set_Position
StreamReader
System.Net
HttpWebRequest
WebRequest
Create
WebResponse
GetResponse
GetResponseStream
ReadToEnd
TextReader
get_Text
DesignerGeneratedAttribute
DebuggerNonUserCodeAttribute
DebuggerStepThroughAttribute
AccessedThroughPropertyAttribute
get_UseCompatibleTextRendering
SetCompatibleTextRenderingDefault
AuthenticationMode
set_IsSingleInstance
set_EnableVisualStyles
set_SaveMySettingsOnExit
ShutdownMode
set_ShutdownStyle
set_MainForm
EditorBrowsableAttribute
EditorBrowsableState
System.CodeDom.Compiler
GeneratedCodeAttribute
DebuggerHiddenAttribute
STAThreadAttribute
StandardModuleAttribute
HideModuleNameAttribute
System.ComponentModel.Design
HelpKeywordAttribute
ArgumentException
System.Reflection
TargetInvocationException
get_IsDisposed
RuntimeTypeHandle
GetTypeFromHandle
ContainsKey
GetResourceString
InvalidOperationException
Activator
CreateInstance
get_InnerException
get_Message
Remove
Component
MyGroupCollectionAttribute
ThreadStaticAttribute
ComVisibleAttribute
CompilerGeneratedAttribute
Delegate
Combine
Socket
get_Client
get_Connected
ThreadStart
SocketFlags
SelectMode
get_Available
Receive
Contains
LateIndexGet
LateGet
Boolean
IntPtr
ReadAllText
AppendText
set_AutoFlush
Assembly
GetExecutingAssembly
Module
GetModules
Marshal
GetHINSTANCE
ToInt32
op_Explicit
Delete
GetProcessById
get_MainWindowTitle
DateTime
get_Clock
get_LocalTime
get_Day
get_Month
get_Year
TextWriter
WriteAllText
Keyboard
get_Keyboard
get_ShiftKeyDown
get_CapsLock
ToUpper
ToLower
op_Equality
PtrToStructure
DllImportAttribute
User32.dll
MarshalAsAttribute
UnmanagedType
OutAttribute
StructLayoutAttribute
LayoutKind
FlagsAttribute
SpecialFolder
GetFolderPath
CurrentUser
GetSubKeyNames
ReadIntPtr
PtrToStringBSTR
Environ
Conversion
ToCharArray
Information
UBound
get_Chars
ToDouble
IEnumerator
Replace
Exists
ReadAllLines
GetEnumerator
get_Current
StringType
MidStmtStr
MoveNext
ReadAllBytes
AddObject
StartsWith
System.Security.Cryptography
ICryptoTransform
MD5CryptoServiceProvider
TripleDESCryptoServiceProvider
Initialize
HashAlgorithm
ComputeHash
SymmetricAlgorithm
CipherMode
set_Mode
PaddingMode
set_Padding
TripleDES
set_Key
set_IV
CreateDecryptor
TransformFinalBlock
get_Unicode
DataRow
GetEnvironmentVariable
Directory
GetDirectories
GetFiles
System.Text.RegularExpressions
IsMatch
DataRowCollection
get_Rows
GetDelegateForFunctionPointer
UnmanagedFunctionPointerAttribute
CallingConvention
op_Inequality
get_ItemArray
DataColumnCollection
get_Columns
DataColumn
Double
GetBytes
WriteByte
mozsqlite3
GCHandle
GCHandleType
AddrOfPinnedObject
Crypt32.dll
BitConverter
ToInt64
Decimal
ToUInt16
CopyArray
Compare
Subtract
ToUInt64
get_BigEndianUnicode
Multiply
CompareTo
OpenMode
OpenAccess
OpenShare
FileOpen
FileGet
FileClose
PtrToStringAnsi
ReadByte
PtrToStringUni
AllocHGlobal
StringToHGlobalUni
FreeHGlobal
RegexOptions
WriteInt32
IsNullOrEmpty
MatchCollection
Matches
GroupCollection
get_Groups
Capture
get_Value
WriteInt16
Format
set_Width
set_Height
Graphics
FromImage
System.Drawing.Drawing2D
CompositingQuality
set_CompositingQuality
CopyPixelOperation
CopyFromScreen
Cursors
get_Position
GetThumbnailImageAbort
GetThumbnailImage
ToBase64String
GetImageEncoders
get_MimeType
EncoderParameters
Enumerator
IEnumerable`1
AddRange
PixelFormat
get_PixelFormat
ImageFormat
get_Jpeg
DrawImage
EncoderParameter
get_Param
Encoder
Quality
get_ProcessName
get_Id
ReferenceEquals
get_Assembly
SettingsBase
Synchronized
get_SaveMySettingsOnExit
ObjectFlowControl
CheckForSyncLockOnValueType
ShutdownEventHandler
add_Shutdown
Server.Resources.resources
Server.Form1.resources
DebuggableAttribute
DebuggingModes
CompilationRelaxationsAttribute
RuntimeCompatibilityAttribute
AssemblyFileVersionAttribute
GuidAttribute
AssemblyTrademarkAttribute
AssemblyCopyrightAttribute
AssemblyProductAttribute
AssemblyCompanyAttribute
AssemblyDescriptionAttribute
AssemblyTitleAttribute
Server.exe
TextBox1
Timer1
MyTemplate
8.0.0.0
My.Application
My.WebServices
My.Computer
My.User
My.Forms
System.Windows.Forms.Form
Create__Instance__
Dispose__Instance__
My.MyProject.Forms
4System.Web.Services.Protocols.SoapHttpClientProtocol
Create__Instance__
Dispose__Instance__
3System.Resources.Tools.StronglyTypedResourceBuilder
4.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
10.0.0.0
My.Settings
WrapNonExceptionThrows
1.0.0.0
$8c0a0be4-c2d9-43fd-8362-d331a08ed069
Copyright 
  2012
	A7m3d-Rat
_CorExeMain
mscoree.dll
C:\Users\TOSHIBA\Desktop\r\Server\Server\obj\x86\Debug\Server.pdb
wwwwww
wwwwww
wwwwww
wwwwww
wwwwwwwwwwwwww
wwwwwwwwwwwwww
wwwwwwwwwwwwww
wwwwwwwwwwwwww
wwwwwwwwwwwwww
wwwwwwwwwwwwww
wwwwwwwwwwwwww
wwwwwwwwwwwwww
<?xml version="1.0" encoding="utf-8"?>
<asmv1:assembly manifestVersion="1.0" xmlns="urn:schemas-microsoft-com:asm.v1" xmlns:asmv1="urn:schemas-microsoft-com:asm.v1" xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
  <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
    <security>
      <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
        <!-- UAC Manifest Options
            If you want to change the Windows User Account Control level replace the 
            requestedExecutionLevel node with one of the following.
        <requestedExecutionLevel  level="asInvoker" uiAccess="false" />
        <requestedExecutionLevel  level="requireAdministrator" uiAccess="false" />
        <requestedExecutionLevel  level="highestAvailable" uiAccess="false" />
            Specifying requestedExecutionLevel node will disable file and registry virtualization.
            If you want to utilize File and Registry Virtualization for backward 
            compatibility then delete the requestedExecutionLevel node.
        -->
        <requestedExecutionLevel level="asInvoker" uiAccess="false" />
      </requestedPrivileges>
    </security>
  </trustInfo>
  <compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
    <application>
      <!-- A list of all Windows versions that this application is designed to work with. 
      Windows will automatically select the most compatible environment.-->
      <!-- If your application is designed to work with Windows Vista, uncomment the following supportedOS node-->
      <!--<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS>-->
      <!-- If your application is designed to work with Windows 7, uncomment the following supportedOS node-->
      <!--<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>-->
      <!-- If your application is designed to work with Windows 8, uncomment the following supportedOS node-->
      <!--<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS>-->
    </application>
  </compatibility>
  <!-- Enable themes for Windows common controls and dialogs (Windows XP and later) -->
  <!-- <dependency>
    <dependentAssembly>
      <assemblyIdentity
          type="win32"
          name="Microsoft.Windows.Common-Controls"
          version="6.0.0.0"
          processorArchitecture="*"
          publicKeyToken="6595b64144ccf1df"
          language="*"
        />
    </dependentAssembly>
  </dependency>-->
</asmv1:assembly>
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Windows.Forms.ImageListStreamer, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089Bj
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
*,.%_l
26;GAFW
BPaO4F[=CNw
9K`I->Rm
 7C;I[
WSystem.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
&System.Windows.Forms.ImageListStreamer
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
*,.%_l
26;GAFW
BPaO4F[=CNw
9K`I->Rm
 7C;I[
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
l#ffffff
l#ffffff
v2.0.50727
#Strings
<Module>
mscorlib
Microsoft.VisualBasic
MyApplication
Cleint.My
MyComputer
MyProject
MyForms
MyWebServices
ThreadSafeObjectProvider`1
Cleint
SocketServer
DataEventHandler
DisConnectedEventHandler
ConnectedEventHandler
Module1
ResourceWriter
Resources
Cleint.My.Resources
MySettings
MySettingsProperty
Microsoft.VisualBasic.ApplicationServices
WindowsFormsApplicationBase
.cctor
__ENCAddToList
System.Collections.Generic
List`1
System
WeakReference
__ENCList
OnCreateMainForm
Microsoft.VisualBasic.Devices
Computer
Object
get_Computer
m_ComputerObjectProvider
get_Application
m_AppObjectProvider
get_User
m_UserObjectProvider
get_Forms
m_MyFormsObjectProvider
get_WebServices
m_MyWebServicesObjectProvider
Application
WebServices
get_Cap
get_Form1
get_Form2
get_Form3
get_Form5
get_Form6
m_Form1
m_Form2
m_Form3
m_Form5
m_Form6
set_Cap
set_Form1
set_Form2
set_Form3
set_Form5
set_Form6
Create__Instance__
System.Windows.Forms
Instance
Dispose__Instance__
instance
System.Collections
Hashtable
m_FormBeingCreated
Equals
GetHashCode
GetType
ToString
get_GetInstance
m_ThreadStaticValue
GetInstance
Dispose
disposing
System.ComponentModel
IContainer
components
InitializeComponent
_Timer1
get_Timer1
set_Timer1
WithEventsValue
_Panel1
get_Panel1
set_Panel1
ComboBox
get_C2
set_C2
get_C1
set_C1
NumericUpDown
CheckBox
_CheckBox2
get_CheckBox2
set_CheckBox2
_CheckBox1
get_CheckBox1
set_CheckBox1
Button
_Button1
get_Button1
set_Button1
_Panel2
get_Panel2
set_Panel2
PictureBox
get_P1
set_P1
System.Drawing
EventArgs
Form2_Load
sender
PktToImage
Timer1_Tick
Button1_Click_1
P1_Click
MouseEventArgs
P1_MouseDown
P1_MouseMove
P1_MouseUp
PaintEventArgs
Panel1_Paint
Timer1
Panel1
CheckBox2
CheckBox1
Button1
Panel2
System.Net.Sockets
TcpListener
Socket
add_Data
DataEvent
remove_Data
add_DisConnected
DisConnectedEvent
remove_DisConnected
add_Connected
ConnectedEvent
remove_Connected
NEWSKT
Online
Disconnect
DisConnected
Connected
MulticastDelegate
TargetObject
TargetMethod
IAsyncResult
AsyncCallback
BeginInvoke
DelegateCallback
DelegateAsyncState
EndInvoke
DelegateAsyncResult
Invoke
ListView
get_l1
set_l1
ColumnHeader
_ColumnHeader1
get_ColumnHeader1
set_ColumnHeader1
_ColumnHeader2
get_ColumnHeader2
set_ColumnHeader2
_ColumnHeader3
get_ColumnHeader3
set_ColumnHeader3
_ColumnHeader4
get_ColumnHeader4
set_ColumnHeader4
_ColumnHeader5
get_ColumnHeader5
set_ColumnHeader5
_ColumnHeader6
get_ColumnHeader6
set_ColumnHeader6
ImageList
_ImageList1
get_ImageList1
set_ImageList1
StatusStrip
_StatusStrip1
get_StatusStrip1
set_StatusStrip1
ToolStripStatusLabel
_ToolStripStatusLabel1
get_ToolStripStatusLabel1
set_ToolStripStatusLabel1
_ToolStripStatusLabel2
get_ToolStripStatusLabel2
set_ToolStripStatusLabel2
_ToolStripStatusLabel3
get_ToolStripStatusLabel3
set_ToolStripStatusLabel3
ContextMenuStrip
_ContextMenuStrip1
get_ContextMenuStrip1
set_ContextMenuStrip1
ToolStripMenuItem
_CaptureScreenToolStripMenuItem
get_CaptureScreenToolStripMenuItem
set_CaptureScreenToolStripMenuItem
_ContextMenuStrip2
get_ContextMenuStrip2
set_ContextMenuStrip2
_ShowAppToolStripMenuItem
get_ShowAppToolStripMenuItem
set_ShowAppToolStripMenuItem
_AboutToolStripMenuItem
get_AboutToolStripMenuItem
set_AboutToolStripMenuItem
ToolStripSeparator
_ToolStripMenuItem1
get_ToolStripMenuItem1
set_ToolStripMenuItem1
_ExitToolStripMenuItem
get_ExitToolStripMenuItem
set_ExitToolStripMenuItem
NotifyIcon
_NotifyIcon1
get_NotifyIcon1
set_NotifyIcon1
_RunFileToolStripMenuItem
get_RunFileToolStripMenuItem
set_RunFileToolStripMenuItem
_FromURLToolStripMenuItem
get_FromURLToolStripMenuItem
set_FromURLToolStripMenuItem
_FromDiskToolStripMenuItem
get_FromDiskToolStripMenuItem
set_FromDiskToolStripMenuItem
_ToolStripMenuItem2
get_ToolStripMenuItem2
set_ToolStripMenuItem2
_ToolStripStatusLabel4
get_ToolStripStatusLabel4
set_ToolStripStatusLabel4
_ServerToolStripMenuItem
get_ServerToolStripMenuItem
set_ServerToolStripMenuItem
_EndToolStripMenuItem
get_EndToolStripMenuItem
set_EndToolStripMenuItem
_UninstalServerToolStripMenuItem
get_UninstalServerToolStripMenuItem
set_UninstalServerToolStripMenuItem
_ToolStripMenuItem3
get_ToolStripMenuItem3
set_ToolStripMenuItem3
_RenameVictimToolStripMenuItem
get_RenameVictimToolStripMenuItem
set_RenameVictimToolStripMenuItem
_KeyloggerToolStripMenuItem
get_KeyloggerToolStripMenuItem
set_KeyloggerToolStripMenuItem
_GetPasswordsToolStripMenuItem
get_GetPasswordsToolStripMenuItem
set_GetPasswordsToolStripMenuItem
ToolStripProgressBar
_ToolStripProgressBar1
get_ToolStripProgressBar1
set_ToolStripProgressBar1
_PasswordsToolStripMenuItem
get_PasswordsToolStripMenuItem
set_PasswordsToolStripMenuItem
_ExitToolStripMenuItem1
get_ExitToolStripMenuItem1
set_ExitToolStripMenuItem1
closeForm
FormClosedEventArgs
Form1_FormClosed
FormClosingEventArgs
Form1_FormClosing
Form1_Load
connected
disconnected
ToolStripStatusLabel1_Click
ToolStripStatusLabel3_Click
CaptureScreenToolStripMenuItem_Click
EndToolStripMenuItem_Click
ExitToolStripMenuItem_Click
ShowAppToolStripMenuItem_Click
Form1_Resize
PasswordsToolStripMenuItem_Click
FromDiskToolStripMenuItem_Click
FromURLToolStripMenuItem_Click
NotifyIcon1_MouseDoubleClick
UninstalServerToolStripMenuItem_Click
AboutToolStripMenuItem_Click
RenameVictimToolStripMenuItem_Click
ToolStripStatusLabel2_Click
ToolStripStatusLabel4_Click
ShutdownToolStripMenuItem_Click
RestartToolStripMenuItem_Click
LogOffToolStripMenuItem_Click
GetPasswordsToolStripMenuItem_Click
KeyloggerToolStripMenuItem_Click
GetClipboardToolStripMenuItem_Click
ExitToolStripMenuItem1_Click
PasswordsToolStripMenuItem_Click_1
ColumnHeader1
ColumnHeader2
ColumnHeader3
ColumnHeader4
ColumnHeader5
ColumnHeader6
ImageList1
StatusStrip1
ToolStripStatusLabel1
ToolStripStatusLabel2
ToolStripStatusLabel3
ContextMenuStrip1
CaptureScreenToolStripMenuItem
ContextMenuStrip2
ShowAppToolStripMenuItem
AboutToolStripMenuItem
ToolStripMenuItem1
ExitToolStripMenuItem
NotifyIcon1
RunFileToolStripMenuItem
FromURLToolStripMenuItem
FromDiskToolStripMenuItem
ToolStripMenuItem2
ToolStripStatusLabel4
ServerToolStripMenuItem
EndToolStripMenuItem
UninstalServerToolStripMenuItem
ToolStripMenuItem3
RenameVictimToolStripMenuItem
KeyloggerToolStripMenuItem
GetPasswordsToolStripMenuItem
ToolStripProgressBar1
PasswordsToolStripMenuItem
ExitToolStripMenuItem1
_Label1
get_Label1
set_Label1
_Panel3
get_Panel3
set_Panel3
TextBox
_TextBox2
get_TextBox2
set_TextBox2
_Label2
get_Label2
set_Label2
_TextBox3
get_TextBox3
set_TextBox3
_TextBox4
get_TextBox4
set_TextBox4
_Label3
get_Label3
set_Label3
_Label4
get_Label4
set_Label4
Label1
Panel3
TextBox2
Label2
TextBox3
TextBox4
Label3
Label4
_TextBox1
get_TextBox1
set_TextBox1
WebBrowser
_WebBrowser1
get_WebBrowser1
set_WebBrowser1
Button1_Click
TextBox1
WebBrowser1
GetCountryNumber
queryCountry
UpdateResource
hUpdate
lpType
lpName
wLanguage
lpData
cbData
BeginUpdateResource
pFileName
bDeleteExistingResources
EndUpdateResource
fDiscard
WriteResource
filename
System.Resources
ResourceManager
resourceMan
System.Globalization
CultureInfo
resourceCulture
get_ResourceManager
get_Culture
set_Culture
get_Server
Culture
Server
System.Configuration
ApplicationSettingsBase
defaultInstance
addedHandler
addedHandlerLockObject
AutoSaveSettings
get_Default
Default
get_Settings
Settings
FormClosedEventHandler
add_FormClosed
FormClosingEventHandler
add_FormClosing
EventHandler
add_Load
Control
add_Resize
System.Threading
Monitor
get_Count
get_Capacity
get_Item
get_IsAlive
set_Item
RemoveRange
set_Capacity
System.Runtime.CompilerServices
RuntimeHelpers
GetObjectValue
IDisposable
ComponentResourceManager
ToolStripItem
Container
RuntimeTypeHandle
GetTypeFromHandle
SuspendLayout
ColumnHeaderCollection
get_Columns
AddRange
set_ContextMenuStrip
DockStyle
set_Dock
set_FullRowSelect
set_GridLines
set_Location
set_Name
set_Size
set_SmallImageList
set_TabIndex
set_UseCompatibleStateImageBehavior
set_View
set_Text
set_Width
ToolStrip
ToolStripItemCollection
get_Items
ToolStripDropDownItem
get_DropDownItems
GetObject
ImageListStreamer
set_ImageStream
get_Transparent
set_TransparentColor
ImageCollection
get_Images
SetKeyName
FontStyle
GraphicsUnit
set_Font
FromArgb
set_ForeColor
ToolStripLabel
set_IsLink
set_LinkColor
get_Black
ToolStripControlHost
set_Interval
set_Icon
set_Visible
ContainerControl
set_AutoScaleDimensions
AutoScaleMode
set_AutoScaleMode
set_ClientSize
ControlCollection
get_Controls
FormStartPosition
set_StartPosition
ResumeLayout
PerformLayout
remove_Click
add_Click
remove_Tick
add_Tick
MouseEventHandler
remove_MouseDoubleClick
add_MouseDoubleClick
Microsoft.VisualBasic.CompilerServices
ProjectData
EndApp
set_CheckForIllegalCrossThreadCalls
Exception
ListViewItemCollection
ListViewItem
Remove
set_Value
SetProjectError
ClearProjectError
Strings
CompareMethod
Operators
CompareString
ListViewSubItemCollection
get_SubItems
ListViewSubItem
Conversions
set_ToolTipText
FormWindowState
get_WindowState
String
Concat
set_BalloonTipText
ShowBalloonTip
FormCollection
get_OpenForms
get_InvokeRequired
Delegate
ToInteger
get_Length
ButtonBase
get_Text
get_SelectedIndex
Decimal
get_Value
NewLateBinding
LateIndexGet
Interaction
InputBox
set_Enabled
MsgBoxResult
MsgBoxStyle
MsgBox
IEnumerator
SelectedListViewItemCollection
get_SelectedItems
GetEnumerator
get_Current
get_ToolTipText
MoveNext
set_WindowState
ToolTipIcon
set_BalloonTipIcon
System.IO
FileInfo
OpenFileDialog
CommonDialog
DialogResult
ShowDialog
FileDialog
get_FileName
get_Name
ReadAllBytes
Convert
ToBase64String
DesignerGeneratedAttribute
AccessedThroughPropertyAttribute
System.Diagnostics
DebuggerStepThroughAttribute
DebuggerNonUserCodeAttribute
get_UseCompatibleTextRendering
SetCompatibleTextRenderingDefault
AuthenticationMode
set_IsSingleInstance
set_EnableVisualStyles
set_SaveMySettingsOnExit
ShutdownMode
set_ShutdownStyle
set_MainForm
EditorBrowsableAttribute
EditorBrowsableState
System.CodeDom.Compiler
GeneratedCodeAttribute
DebuggerHiddenAttribute
STAThreadAttribute
StandardModuleAttribute
HideModuleNameAttribute
System.ComponentModel.Design
HelpKeywordAttribute
ArgumentException
System.Reflection
TargetInvocationException
get_IsDisposed
ContainsKey
GetResourceString
InvalidOperationException
Activator
CreateInstance
get_InnerException
get_Message
Component
MyGroupCollectionAttribute
ThreadStaticAttribute
System.Runtime.InteropServices
ComVisibleAttribute
CompilerGeneratedAttribute
ISupportInitialize
BeginInit
ListControl
set_FormattingEnabled
UpDownBase
HorizontalAlignment
set_TextAlign
set_AutoSize
set_Checked
CheckState
set_CheckState
set_UseVisualStyleBackColor
PictureBoxSizeMode
set_SizeMode
set_TabStop
EndInit
PaintEventHandler
remove_Paint
add_Paint
remove_MouseUp
remove_MouseMove
remove_MouseDown
add_MouseUp
add_MouseMove
add_MouseDown
ObjectCollection
get_Width
get_Height
Bitmap
set_Image
set_SelectedIndex
Graphics
MemoryStream
Rectangle
Stream
FromStream
get_Image
GetThumbnailImageAbort
GetThumbnailImage
FromImage
System.Drawing.Imaging
PixelFormat
get_PixelFormat
DrawImage
get_Checked
get_Red
DrawRectangle
op_Explicit
set_Height
op_Equality
MouseButtons
get_Button
op_Inequality
_Lambda$__1
Thread
ThreadStart
ToArray
SocketFlags
Combine
Contains
Pending
AcceptSocket
set_ReceiveBufferSize
set_SendBufferSize
set_ReceiveTimeout
set_SendTimeout
ParameterizedThreadStart
SelectMode
get_Available
get_Connected
Receive
LateGet
System.Net
EndPoint
get_RemoteEndPoint
TextBoxBase
set_BackColor
get_White
FormBorderStyle
set_FormBorderStyle
SaveFileDialog
set_Filter
WriteAllBytes
MessageBox
MessageBoxButtons
MessageBoxIcon
set_MinimumSize
WebRequest
Create
WebResponse
GetResponse
set_Multiline
ScrollBars
set_ScrollBars
set_WordWrap
System.Text
Encoding
GetBytes
GetString
ToDouble
GCHandle
GCHandleType
AddrOfPinnedObject
get_UTF8
ToUInt32
DllImportAttribute
kernel32.dll
MarshalAsAttribute
UnmanagedType
ReferenceEquals
Assembly
get_Assembly
SettingsBase
Synchronized
get_SaveMySettingsOnExit
ObjectFlowControl
CheckForSyncLockOnValueType
ShutdownEventHandler
add_Shutdown
Cleint.Resources.resources
Cleint.Cap.resources
Cleint.Form5.resources
Cleint.Form2.resources
Cleint.Form1.resources
Cleint.Form6.resources
Cleint.Form3.resources
DebuggableAttribute
DebuggingModes
CompilationRelaxationsAttribute
RuntimeCompatibilityAttribute
AssemblyFileVersionAttribute
GuidAttribute
AssemblyTrademarkAttribute
AssemblyCopyrightAttribute
AssemblyProductAttribute
AssemblyCompanyAttribute
AssemblyDescriptionAttribute
AssemblyTitleAttribute
Cleint.exe
ToolStripMenuItem3
UninstalServerToolStripMenuItem
EndToolStripMenuItem
ServerToolStripMenuItem
ToolStripStatusLabel4
ToolStripMenuItem2
FromDiskToolStripMenuItem
FromURLToolStripMenuItem
RunFileToolStripMenuItem
NotifyIcon1
ExitToolStripMenuItem
ToolStripMenuItem1
AboutToolStripMenuItem
ShowAppToolStripMenuItem
ContextMenuStrip2
CaptureScreenToolStripMenuItem
ContextMenuStrip1
Timer1
ToolStripStatusLabel3
ToolStripStatusLabel2
ToolStripStatusLabel1
StatusStrip1
ImageList1
ColumnHeader6
ColumnHeader5
ColumnHeader4
ColumnHeader3
ColumnHeader2
ColumnHeader1
ExitToolStripMenuItem1
PasswordsToolStripMenuItem
ToolStripProgressBar1
GetPasswordsToolStripMenuItem
KeyloggerToolStripMenuItem
RenameVictimToolStripMenuItem
MyTemplate
8.0.0.0
My.Application
My.Computer
My.User
My.WebServices
My.Forms
System.Windows.Forms.Form
Create__Instance__
Dispose__Instance__
My.MyProject.Forms
4System.Web.Services.Protocols.SoapHttpClientProtocol
Create__Instance__
Dispose__Instance__
	CheckBox1
	CheckBox2
Panel2
Button1
Panel1
Label4
Label3
TextBox4
TextBox3
Label2
TextBox2
Panel3
Label1
TextBox1
WebBrowser1
3System.Resources.Tools.StronglyTypedResourceBuilder
4.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
10.0.0.0
My.Settings
WrapNonExceptionThrows
1.0.0.0
$7a12a574-59a8-4dca-817d-dfadc4e6c1d4
Copyright 
  2012
Cleint
/C[L?3
'FU>W9
1!#a}Vt
'3{1W0
91a`eZ
8@|mjl
2*fQx\
1%ge}`t
j-S77AE
v1,"b}Pt
i(I?):
2" jxW
?=m]o-
1%wX}Rt
'408W3
y8-(Ljf
os	iP*E
10"k`hy&
!1!1Uf^c
5$pCYa
;L$,wv)L$,
03*E_f
-q+$pAW
sk;%zP&6=0
u03*EU
M}YF$p
1}`i?O?
M5E5(^
Z5J,#^
$/K,# 
@8V:L-<
54/*1m
3)t?Ff
1vJ4$p
~903*E
c^cy)H
;VcE2-<
_o6A^c
~3V]m<L
^"wPQ\'7
03*Ehm
~'rfmto3
)qpsjS
nyXvTUft8
#^5tla
2-<+9Xc
(go}<j!J,?VB
.Mb>K=^P
P.5m]!
@-#pw-
+6 ep@K
#3kD4xm1
o*`9Sd
L*,<Ng
,03*El0
Irm|O$C
DyeD#p
GetModuleHandleA
GetProcessHeap
HeapCreate
ntdll.dll
RtlAllocateHeap
LoadLibraryExA
CreateFileW
GetFileSize
ReadFile
CloseHandle
VirtualProtect
GetTickCount
GetProcAddress
RtlFreeHeap
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DbgBreakPoint
DbgUserBreakPoint
DbgUiRemoteBreakin
kernel32.dll
NtQueryInformationThread
NtSetInformationThread
user32.dll
advapi32.dll
hid.dll
iphlpapi.dll
VirtualAlloc
VirtualFree
SetThreadAffinityMask
GetCurrentThread
ExitProcess
GetSystemDefaultLangID
GetSystemTime
SystemTimeToFileTime
WriteFile
GlobalAlloc
GlobalLock
GlobalUnlock
GetCurrentThreadId
GetExitCodeThread
OpenThread
TerminateThread
SuspendThread
MultiByteToWideChar
WideCharToMultiByte
IsWow64Process
GetStartupInfoW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CheckRemoteDebuggerPresent
CreateThread
ResumeThread
GetThreadContext
SetThreadContext
mscoree.dll
mscorwks.dll
mscorsvr.dll
KernelBase.dll
mscoreei.dll
clr.dll
diasymreader.dll
SECheckProtection
SEGetAppStatus
SESetAppStatus
SEGetLicenseUserInfoW
SEGetLicenseTrialInfo
SEGetNumExecUsed
SEGetNumExecLeft
SESetNumExecUsed
SEGetExecTimeUsed
SEGetExecTimeLeft
SESetExecTime
SEGetTotalExecTimeUsed
SEGetTotalExecTimeLeft
SESetTotalExecTime
SEGetNumDaysUsed
SEGetNumDaysLeft
SECheckHardwareID
SECheckExpDate
SECheckExecTime
SECheckTotalExecTime
SECheckCountryID
SEGetHardwareIDW
SECheckLicenseFileW
SEGetLicenseHash
SENotifyLicenseBanned
SEResetTrial
SEGetProtectionDate
SEAddMemoryGuard
SEDelMemoryGuard
CreateFileMappingW
MapViewOfFile
MapViewOfFileEx
UnmapViewOfFile
LoadLibraryExW
LoadLibraryA
=j&&LZ66lA??~
}{))R>
f""D~**T
V22dN::t
o%%Jr..\$
&&Lj66lZ??~A
99rKJJ
==zGdd
""Df**T~
;22dV::tN
$$Hl\\
C77nYmm
%%Jo..\r
55j_WW
&Lj&6lZ6?~A?
~=zG=d
"Df"*T~*
2dV2:tN:
x%Jo%.\r.
a5j_5W
ggV}++
Lj&&lZ66~A??
bS11*?
Xt,,4.
RRvM;;
MMfU33
PPxD<<%
Bc!! 0
~~zG==
Df""T~**;
dV22tN::
xxJo%%\r..8$
pp|B>>q
aaj_55
UUPx((
cccc||||wwww{{{{
kkkkoooo
gggg++++
YYYYGGGG
&&&&6666????
uuuu				
nnnnZZZZ
RRRR;;;;
[[[[jjjj
9999JJJJLLLLXXXX
CCCCMMMM3333
PPPP<<<<
~~~~====dddd]]]]
ssss````
""""****
2222::::
$$$$\\\\
7777mmmm
llllVVVV
eeeezzzz
xxxx%%%%....
pppp>>>>
ffffHHHH
aaaa5555WWWW
UUUU((((
BBBBhhhhAAAA
='9-6d
_jbF~T
11#?*0
,4$8_@
t\lHBW
QPeA~S
>4$8,@
p\lHtW
+HpXhE
T[$:.6
RRRR				jjjj
00006666
CCCCDDDD
TTTT{{{{
####====
ffff((((
vvvv[[[[
IIIImmmm
%%%%rrrr
]]]]eeee
llllppppHHHHPPPP
FFFFWWWW
kkkk::::
AAAAOOOOgggg
tttt""""
nnnnGGGG
VVVV>>>>KKKK
yyyy    
YYYY''''
____````QQQQ
;;;;MMMM
ccccUUUU!!!!
6bad allocation
_except_handler3
MSVCRT.dll
GetInterfaceInfo
IPHLPAPI.DLL
??3@YAXPAX@Z
strncpy
wcsrchr
??2@YAPAXI@Z
strncat
_wcsicmp
_wcsnicmp
__dllonexit
_onexit
_initterm
malloc
_adjust_fdiv
GetMappedFileNameW
PSAPI.DLL
DeviceIoControl
DeleteCriticalSection
GetModuleFileNameW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetModuleHandleExA
LoadLibraryExW
MapViewOfFileEx
GetLogicalDriveStringsW
QueryDosDeviceW
KERNEL32.dll
wsprintfW
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
MessageBoxW
FindWindowA
GetDesktopWindow
GetClassNameA
GetWindow
USER32.dll
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
ADVAPI32.dll
SHGetFolderPathW
SHELL32.dll
6!`{TzRfQ
qps{^f
/6!`VWQ
3Ex=_Gx
CxF3Fx
5Jx<cFxk
/Jx$_IxU
Ex'ALx@fFx
^Gx) HxS
Lx<tFx6
Ix<DDx
ExV2Jx
Jx<oFxd
HxVrFx
Fx54Ex"
Lx6BFx
2GxvQGx
Kx<BHx
Fx;HGxT
ExJ.Hxf
IxY^Ex
Dx!"Jx
ExF Lx
Ix[$Gx
OJx=#Fx
ExuLHxc
Ex-FExm
XFx-hGx
Exp"Ex
ExfzFxb/Ex
ExK;Jx&
ExO0Gx"
cGxBZFx
ExX5Jx
Ixl5Fxo
#Fx,#Fx
strncpy
_onexit
wcsrchr
malloc
_initterm
ZfJx2f
MSVCRT.dll
??2@YAPAXI@Z
MSVCRT.dll
_except_handler3
IPHLPAPI.DLL
GetInterfaceInfo
??3@YAXPAX@Z
MSVCRT.dll
d$$--%
MSVCRT.dll
MSVCRT.dll
X-TAH*
MSVCRT.dll
__dllonexit
MSVCRT.dll
_adjust_fdiv
MSVCRT.dll
MSVCRT.dll
MSVCRT.dll
MSVCRT.dll
MSVCRT.dll
MSVCRT.dll
strncat
MSVCRT.dll
_wcsicmp
MSVCRT.dll
_wcsnicmp
MSVCRT.dll
MSVCRT.dll
__dllonexit
MSVCRT.dll
_initterm
PSAPI.DLL
GetMappedFileNameW
??2@YAPAXI@Z
PSAPI.DLL
GetMappedFileNameW
KERNEL32.dll
KERNEL32.dll
QueryDosDeviceW
GetLogicalDriveStringsW
MSVCRT.dll
_wcsnicmp
GetWindow
KERNEL32.dll
GetModuleFileNameW
KERNEL32.dll
UnmapViewOfFile
t#X-'l
USER32.dll
USER32.dll
GetClassNameA
MSVCRT.dll
USER32.dll
EmptyClipboard
USER32.dll
OpenClipboard
USER32.dll
SetClipboardData
CloseClipboard
USER32.dll
KERNEL32.dll
MapViewOfFileEx
MapViewOfFile
KERNEL32.dll
CreateFileMappingW
KERNEL32.dll
USER32.dll
wsprintfW
USER32.dll
MessageBoxW
strncat
wcsrchr
DeleteCriticalSection
KERNEL32.dll
KERNEL32.dll
GetModuleHandleExA
MSVCRT.dll
strncpy
MSVCRT.dll
KERNEL32.dll
LoadLibraryExW
ADVAPI32.dll
iL3&t\
ADVAPI32.dll
_wcsicmp
RegCreateKeyExA
ADVAPI32.dll
RegSetValueExA
wsprintfW
RegCloseKey
ADVAPI32.dll
RegDeleteKeyA
ADVAPI32.dll
RegQueryValueExA
DeviceIoControl
KERNEL32.dll
MSVCRT.dll
RegOpenKeyExA
USER32.dll
ADVAPI32.dll
USER32.dll
MessageBoxW
SHELL32.dll
SHGetFolderPathW
MSVCRT.dll
GetDesktopWindow
USER32.dll
USER32.dll
FindWindowA
FindWindowA
USER32.dll
USER32.dll
FindWindowA
USER32.dll
FindWindowA
&03*EW
A5-!p.D
?@fSfAfI
	Y:/6!f
QOfBt>u<Uf
~ImQ}i
8{KR.~n~
fKq*p(Y
\g@VDFV
"103*E
Cs1fWf
rm|8Vg
SVc)/6!``f
fIt&u$P
>103*E
B6'*BsV
d>N^&`
uv*w(+
nyXhuT
03*E&3
VVc2/6!`
f@r>s&
d$$f9E
d$$WfU
w03*E!
\G]]f_
[Srm|O
Wmms/6!`
oMcK~f;
Sc{rm|Of
^a(6GV
^(gg`%T
C/6!`@
@`dnsI
seIn|a
N_p'E]
K?L}V^
3wje)8
^Z%?v&
^5ju*@
~>/6!`
eGC8"1
wU'yOG
usw^-<
"]*X5"
S!irm|O
4uXYV$
2^7=i*P
H,WpO?
kVx1Rv
;CK)|SK
oD ee4mJ
!1tQZV
X[ss/n
D"'52"
&FA_9A
|yZymd
@@dO2UI
kfa&~y
)k~i/x
QIA}yn
N&8;lO
^PSWcfjj&e
f"ilOP
VYqIUX
.1|Tfi
V~;z't[
C@)8!_
@@aj9.
o7E]q1
03*EO\
!YV4Gb
x(IoV"
ey/cI"
:zW SV
&7m:LD
>\qpsj
&-W=Ly
X_#sIYc(
6rm|Oy=E
]Z!La-
]H,Wp0
y$iKVe
oD e ;{
0~L)lJi
@(>%j(KQ
+]8ww>
D,z7t1
V;=qqd
@z0&itg
jzfQVc
<	`N&R 
W ?k',
TejR R
AGNpQ 
?Y d|w&
-otQ q
!	Y "%
P GoblQ
1 $Q IJz
&6A>_(R 
P n*pqU
O %u"3;
f Q W*
KoW`wUV 
uW2ak`
[S_ u_
uZ>!q@
jl/!u'
uK \Ys
:aA"uK
Jj[q"u
Hl-h; 
-h;Z:xK
i/lB'hY
?W<&hN
)-%,hu
&h@^Z8p
6Hk#(p-h
<'h[SmiK[x
_04&hjy
rtRk+h
<c#{b,h
P]&hHD
4^z)kH'h
O&hw	OPU
#\k.'h
Cg|a f
#Zu<La
SW:RI@
niLtE.
HiL:Rg
mL1.hZ
.hLEkp
X,8iLl
.iL\BVDNZ
%b;5pL
jLW`;	
;Y)CS;8
>niLTR~
FF#rgL
11DX+hL
4qLoD@n
0hO;iL
niLtE.
NhLLCU
~9TiLY
IpLoobe
<lw0DD
$}>FI`
zP};*:
,D.5r%
@`cqc'u
Z >OFa
8iEMbi
-~`HK\
"eOb}|
n52F4*
l1Ll	G
v/LkF 
KWrdV\
BVu8'$
\lIeTc
103*E}
,Zi7`,
. 2&/1
M<OJu	
ibGJ{2
vgmUE3
sou]M;%
f|m,'N
XQ]R%5$G
@g}ezt
h326:1
f0}O\#
^	 /4"
biyiyJ
ZOrm|O
")O5f(
T/jLKY
 j7_wm
O^NfVf
<dI2-<
Tc/Y[*%
|29yi-
GuG^pqpsj
t9)I?|
F)/!<)>4
!!rk7)^J
9)QIkp
K(FK5)
;89x8)P
64)_%,
U9)ESG
nW5)~Y
|4[g;)a
5)2|Y(
9))?}#e>
6JY1J^
W;/5)R
Fy8)Bg#y(
]91Kl"<)"C
rZm)<)c&
	t-4)JJ
ul$5)C
"1r4)=+
0}oW4)c
zd#]w?5)^
5)ojNc
;uC5)i
'<)oobeF
fM9)!VVBz
O,5{N9)
w5)-tuN
e2-V4)
#'1[!P
UbD^~u{_
:nD|Vg
1C4+v"
TTc[03*E
'<L_x[
fTc?6!`
dtwbTc
L03*EK
22cF:F
t0wz&)-
ATcd c
BTc^,?
\/zK<VJ
q5qtx/
4Tc.%T
jqpsje
Nc:tm[
bi%p#Z
 E9l	~
HUs.jH
+d:JER
'nMf|w6,?
&Qi@hY
@148iJ
<hD03*E
svj&mpde
x)y'o3
JB6G'A
!Q+9MN
}7O!#p9
;b_PN:
3'|iz.
6@EO,,?
%)1mOK:
*r,K289
!ZY }{/
'Q:\!z
uttr6!`
eiGN,K
z={%fI
J\!%zU
-G{m#!L
2-qo7[
SNcwrm|O
q'.$iD
W_03*E
PWc'`$-
{lDJ2"
e|i`U ,/
hx.5Nc
2NcNw^
Z![2-<
703*E@
/6!|`i+
y[x3x[
d	(ahx
RyO%09
R4k'L<
qBy`T)
b-OPGV
!C;JyI
l'zj>-
)+;BNPI
#*/6!`
2Jm{xZ
Cd/}[A
@@gO8Z0
%/6!`a
9IdTNc
6/6!`84
}LK[!u
sk2[G,
v0{jYA
I&fRfU
loR@D8
@`d!uf
7\wArm
	?M{0N
Om4jqgT,!
G$2Qn[
oVlt~f
8e|,#!
MBpE6$
k[K[d1
Eo|2K9
$Wq@*<
P0Q@e:
HQ;K[tf
T[]hFHO^iS^
^)@_5M
o14(z<3
mA;\!j,?
Qm4zoy
zU0<Xu
N^,v\c|
N^Gvec
~Srm|O
=0L<CR
enT#3KP
G^nrm|;\8
d$ j@j
EUJQ\c
d$ ;t8
t$<fQfU
8Hb5\c
&P>W|h
.944Pm
{R8?'J
w,3O}A+
AH|~BK
u03*E)W
2-U$4@
;tCSFo
T1YHNM!
O}"g,c
zepm59
d\xv'p
P@07?m1
jX?103
cs%1Z.u
nyXoM0
_#,'lBD
o/6!`]
z:	dt6
^) Mz c
G^6psj
$fKwzvx*
	vfVaK
uel8f*
rP@G+Y
:J[!csj
ozSi1t^
GN^gCT
t%_=/<L"w\c2
~R/6!h
P`0u\c
D=xn&#
Y8C[!a
vrm|O`
6YIlR5
F\c4%T
	H`ng[
$4Xe\c
dMi&fK
d~ZaHE
jc91yd
qpsj	]<
>3/Drm|O
dC1OGq
 }qUgpg
9u=?9W
{103*E
Qo>^-P
"L<&rX3
3mK=Z\cr6
};r',.
[*"NQ4
8103*!
FQ*@hK
\o%FlB
,h0*@va
8f	7>J
>a0@?2
rm|Or{
Q:+Z08
{agO?-
R>EvN+-
#/3:kC
%T{*U%^
rUm=v*
E/8AHxG
t1&2?n
^tG>[0
 cq.gQ
pGPe$[
EcByG7
vN4I7p
FC#W!X$l
VSOtT=
t}cb&Q
B\!'03*E`
B^ccx[
'sY4pS
AL%;|F
4'N9=$
|K[_P^c
/M9@qI
WuarpSz
R/6!`;!q
c|et^i
0<n]OD
jL}"B_
~q03*E{&
grBK.>
(/?"ELxz>w
2Y"h[6
rm|O`pd
-68HCEX.
w03*hM
k{)%Z.
]c\5$W
f=a\8n
]c"103*
6%[(	h
O03dp|
aBCx0@
kqpsjE
orU%(Y
L/%pPW_Z
\Jyp/}j
8wZ!aG
7(+vN?6
tg>=fTf
(MpkKd
$9_*[Vl
@\zNKn
s74'N9I
&rm|O]
[_#'**
_#\:$4?
L/2J8<
oG^'?hP
CfvFe^c
o[!(&Q
gjn*qt !
W`JQe4D
4'N<;r
@GW`<M
h(/c9P
j&1=@@
t$(fVf
y,x*ova
QA(En<
/6cBKY
^wFf3*
>Fqpsjf
q|K[B*
M1AC\6
@)_8Bu9
al%r}[K
}M	^ae
_!c|xOk	
+vvVh>
X U.7oA
fU ,)9
,o|2Kp
i~0hCY
,H%bdiP
gLaOW0
n:)+;B
|u:Y{p
s::hDIx
k)\|n:
NOx2q:
37!*q:
2_2yo:w
3}n:Y`
]Yp|u:Z
xZwC,w:m
vN8sYY
Bt u	\ $
IhFqpsj
'l;KSy,
u$)ywUhD
r'[Zo-
i~c	]oR
td_[oWs
 `o;)5
P93pS%
0:b/=qbo
Zo&?P8]
C12$\o:1PWe
ao; ;P
:)ddbo
`o`D)[
boEzOB
r,tU[o
z65vbo
6[<\o	
[=a:jN
*:ao,C
2hFZog
F/?GM%
3CQ!\c
2-<E#^
&?1N@]m
c|Lub$Gj
3i:y\Q
+j&Z8swUt
ZeCE	U
/wZkH=H
Wpw7)B4]Ol0
V<^^z Qh
EEyhjly
HMFy&1
|U;A9#
N'btmv
YB,qG7')
D"I'26
zQ/RUm
t- 0R{X
vLe.p-
JD\RMpz
tSpdrc
XAf0<1E"
h!oZ%*
&?P8>u
,qxW5X
J2B8{b
=Sa n[
1E1c!n;
ORFIay
4'NhSK
d@;c!i
+)Jc!RL
e/Dc!X%T
;tD]/-D
nc_|d@
\co3l0
b&r:Jfb9h
l|9W\c
`gs7p4
WgLQ?x
Zd]3kQc
H.	dE9
k;D*)f
&uy=144
cjy=DFQ
sVfq/W.
%'/}$Z3
VX{Y)~
qWyWA'
03K9-x
2W.'7j
rm|csk
1: YX3
d1n3k9
Ss]!m-=
@Z(ZaT
+J03*E2
{pli1b|
Q<{siE
rm|Oi+
&A(2n%sU2q
g+/~r6:=n
lwPfzqW
^NUup4
PY)9v0
FQ*@}K
ovaOVdT
+CEh(1j
ELT~B{
[dc5%n
md[7|?
	X\ {~*
l!1<8V.
z<??pa
 mAom_h
m9-c>ol
^sj&Vn
|T8&$P
qw_O='
{\*47#
J-}V[B
y^t?&K@
"%Q^Kb
*Hyw~UN
t6B^S[
VlsCJ"
Kd!H)H
:<>Nk(
y|(z&v
k\bJ:(
[!~6!`
5$WgK>
103*(	
x[^A/``
L\fE@x
$CLSk:
@xx<"Lvq
HKc;SJA
F>qpsj
;FHXcD
hoqO_U
-eu%0e
-xxXyX
	~k*xe
!G/6!`!,
s/Zlos
103*H-
^DKWGR
T.|@*:
TKh]QI
/(vkDxq&
-0a9<m=@@
sK^A%>
($E3@_
DJsSy#5D
TOVb&r
fii9<<
!$o?B%
5$W!sd gjj
-te!`cF
s.1k<#&
QDxrs(R
9$L[%T0*wP	o
C:\Users\TOSHIBA\Desktop\r\Cleint\Cleint\obj\x86\Debug\Cleint.pdb
103*Ea
Safengine Shielden v2.3.0.0
mscoree.dll
MSVCRT.dll
IPHLPAPI.DLL
PSAPI.DLL
KERNEL32.dll
USER32.dll
ADVAPI32.dll
SHELL32.dll
_CorExeMain
strncpy
GetInterfaceInfo
GetMappedFileNameW
GetModuleFileNameW
GetWindow
RegDeleteKeyA
SHGetFolderPathW
wwwwww
wwwwww
wwwwww
wwwwww
wwwwwwwwwwwwww
wwwwwwwwwwwwww
wwwwwwwwwwwwww
wwwwwwwwwwwwww
wwwwwwwwwwwwww
wwwwwwwwwwwwww
wwwwwwwwwwwwww
wwwwwwwwwwwwww
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
  <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
    <security>
      <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
        <requestedExecutionLevel level="asInvoker" uiAccess="false"/>
      </requestedPrivileges>
    </security>
  </trustInfo>
</assembly>