Sample details: 921377f7f8a4b1fd7172a9e29d7e5251 --

Hashes
MD5: 921377f7f8a4b1fd7172a9e29d7e5251
SHA1: 53983b0a9708a01d6ccdd9b4ae8718cd424c263e
SHA256: efabda35228232da7833fdf137b7220a4f1c3464c07fc5581412c8a7f70106af
SSDEEP: 768:AQHz1RzrGmrGGLfpChP2Gi9bXx9kmXYHo6Hi+I5AH9xgE/vfiGdge63XlyQebbLq:AITLfoWsmXYI6HceiGge638M
Details
File Type: PE32
Yara Hits
YRP/url | YRP/contentis_base64 | YRP/domain | YRP/IP | YRP/Str_Win32_Winsock2_Library | YRP/IsPE32 | YRP/IsNET_EXE | YRP/IsConsole | YRP/HasDebugData | YRP/HasRichSignature | YRP/Big_Numbers1 | YRP/anti_dbg | YRP/inject_thread | YRP/network_dns |
Source
http://builds.antiaim.ru/dropper.exe
http://builds.antiaim.ru/dropper.exe
Strings
		!This program cannot be run in DOS mode.
`.rdata
@.data
@.reloc
XXFaR	
XXFaR	
u"h8#A
JJ csm
0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz
string too long
Unknown exception
bad allocation
bad array new length
v4.0.30319
#Strings
<Module>
mainForm
loader
$ArrayType$$$BY0BC@$$CBD
<CppImplementationDetails>
$ArrayType$$$BY0BA@$$CBD
$ArrayType$$$BY04$$CBD
basic_string<char,std::char_traits<char>,std::allocator<char> >
integer_sequence<unsigned int,0,1,2,3,4,5,6,7,8>
integer_sequence<unsigned int,0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31>
<lambda_6f04b3841c6ace20ee4fd1b3dbc592d0>
std.?push_back@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@$$FQAEXD@Z.__l2
<lambda_88acb98cb1d3e807ff08d7ebe077788e>
std.?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@$$FQAEAAV12@QBDI@Z.__l2
<lambda_4c04651f1675f62dd3603168f157397a>
std.?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@$$FQAEAAV12@QBDI@Z.__l2
exception
XorString<3,0>
XorCompileTime
XorString<42,1>
XorString<16,2>
XorString<10,3>
XorString<12,4>
XorString<12,5>
XorString<8,6>
XorString<25,7>
XorString<35,8>
XorString<11,9>
XorString<15,10>
XorString<32,11>
XorString<9,12>
XorString<32,13>
XorString<19,14>
basic_stringstream<char,std::char_traits<char>,std::allocator<char> >
basic_stringbuf<char,std::char_traits<char>,std::allocator<char> >
fpos<_Mbstatet>
basic_iostream<char,std::char_traits<char> >
basic_ostream<char,std::char_traits<char> >
basic_streambuf<char,std::char_traits<char> >
basic_ios<char,std::char_traits<char> >
_String_alloc<std::_String_base_types<char,std::allocator<char> > >
_String_val<std::_Simple_types<char> >
_s__RTTIClassHierarchyDescriptor
_s__RTTIBaseClassDescriptor2
$_TypeDescriptor$_extraBytes_72
$ArrayType$$$BY01Q6AXXZ
_s__RTTICompleteObjectLocator
$_TypeDescriptor$_extraBytes_20
$ArrayType$$$BY0BA@Q6AXXZ
$_s__RTTIBaseClassArray$_extraBytes_12
$_s__RTTIBaseClassArray$_extraBytes_16
hostent
$ArrayType$$$BY01$$CBH
_SECURITY_ATTRIBUTES
_STARTUPINFOA
_PROCESS_INFORMATION
$_TypeDescriptor$_extraBytes_69
$_s__RTTIBaseClassArray$_extraBytes_8
$ArrayType$$$BY02Q6AXXZ
$_TypeDescriptor$_extraBytes_19
_MEMORYSTATUSEX
HINSTANCE__
$_TypeDescriptor$_extraBytes_51
$_TypeDescriptor$_extraBytes_52
$_s__RTTIBaseClassArray$_extraBytes_4
$ArrayType$$$BY0BAE@D
__std_exception_data
$_TypeDescriptor$_extraBytes_50
$_TypeDescriptor$_extraBytes_46
$_s__RTTIBaseClassArray$_extraBytes_36
$_s__RTTIBaseClassArray$_extraBytes_40
$ArrayType$$$BY0DP@$$CBD
ModuleLoadException
<CrtImplementationDetails>
ModuleLoadExceptionHandlerException
ModuleUninitializer
__scrt_native_startup_state
TriBool
Progress
IUnknown
LanguageSupport
gcroot<System::String ^>
__s_GUID
$ArrayType$$$BY0A@P6AHXZ
ICLRRuntimeHost
ICorRuntimeHost
$ArrayType$$$BY00Q6MPBXXZ
$ArrayType$$$BY0A@P6AXXZ
_EXCEPTION_POINTERS
ThisModule
KERNEL32.dll
mscorlib
System.ComponentModel.Composition
System.ComponentModel.DataAnnotations
System.Data
System
System.Drawing.Design
System.Drawing
System.Net
System.Windows.Forms.DataVisualization.Design
System.Windows.Forms.DataVisualization
System.Windows.Forms
CallConvStdcall
System.Runtime.CompilerServices
CallConvCdecl
CallConvThiscall
IsConst
UnsafeValueTypeAttribute
NativeCppClassAttribute
ValueType
IsSignUnspecifiedByte
IsLong
TextBox
Button
ComboBox
IContainer
System.ComponentModel
EventArgs
IsUdtReturn
FormClosingEventArgs
KeyPressEventArgs
HandleProcessCorruptedStateExceptionsAttribute
System.Runtime.ExceptionServices
String
DecoratedNameAttribute
IsImplicitlyDereferenced
CLSCompliantAttribute
IDisposable
WebClient
Encoding
System.Text
SystemColors
FontStyle
GraphicsUnit
StringSplitOptions
EventHandler
Container
System.IO
DialogResult
FormBorderStyle
FormClosingEventHandler
TextBoxBase
ContentAlignment
ObjectCollection
ComboBoxStyle
Control
ControlCollection
KeyPressEventHandler
ContainerControl
AutoScaleMode
ScrollBars
ButtonBase
ListControl
MessageBox
Environment
SecurityAction
System.Security.Permissions
SecurityPermissionAttribute
AssemblyAttributesGoHereSM
Marshal
System.Runtime.InteropServices
TargetFrameworkAttribute
System.Runtime.Versioning
AssemblyAttributesGoHere
Exception
SerializationInfo
System.Runtime.Serialization
StreamingContext
SecurityCriticalAttribute
System.Security
Object
System.Collections
SecuritySafeCriticalAttribute
PrePrepareMethodAttribute
System.Runtime.ConstrainedExecution
AppDomain
DebuggerStepThroughAttribute
System.Diagnostics
ReliabilityContractAttribute
Consistency
Interlocked
System.Threading
Monitor
RuntimeEnvironment
GCHandle
RuntimeHelpers
Delegate
IntPtr
RuntimeTypeHandle
IEnumerator
SecurityRulesAttribute
SecurityRuleSet
OutOfMemoryException
IsBoxed
FixedAddressValueTypeAttribute
SuppressUnmanagedCodeSecurityAttribute
ModuleHandle
RuntimeMethodHandle
Module
System.Reflection
std.exception.{dtor}
std.exception.__vecDelDtor
std._Allocate
_Count
_Try_aligned_allocation
std._Deallocate
std.basic_stringstream<char,std::char_traits<char>,std::allocator<char> >.__vbaseDtor
std.basic_string<char,std::char_traits<char>,std::allocator<char> >.c_str
std.basic_string<char,std::char_traits<char>,std::allocator<char> >.{dtor}
std.basic_string<char,std::char_traits<char>,std::allocator<char> >.{ctor}
_Right
std.basic_stringstream<char,std::char_traits<char>,std::allocator<char> >.{dtor}
std.basic_stringstream<char,std::char_traits<char>,std::allocator<char> >.{ctor}
std.basic_stringbuf<char,std::char_traits<char>,std::allocator<char> >.seekpos
std.basic_stringbuf<char,std::char_traits<char>,std::allocator<char> >.seekoff
_Which
std.basic_stringbuf<char,std::char_traits<char>,std::allocator<char> >.underflow
std.basic_stringbuf<char,std::char_traits<char>,std::allocator<char> >.pbackfail
std.basic_stringbuf<char,std::char_traits<char>,std::allocator<char> >.overflow
std.basic_stringbuf<char,std::char_traits<char>,std::allocator<char> >.{dtor}
std._String_alloc<std::_String_base_types<char,std::allocator<char> > >.{dtor}
std.basic_stringstream<char,std::char_traits<char>,std::allocator<char> >.__vecDelDtor
std.basic_stringbuf<char,std::char_traits<char>,std::allocator<char> >.__vecDelDtor
std._String_val<std::_Simple_types<char> >._Bxty.{dtor}
std.basic_string<char,std::char_traits<char>,std::allocator<char> >._Tidy_deallocate
std.basic_string<char,std::char_traits<char>,std::allocator<char> >.max_size
std.basic_string<char,std::char_traits<char>,std::allocator<char> >.push_back
std.basic_string<char,std::char_traits<char>,std::allocator<char> >.assign
std.basic_string<char,std::char_traits<char>,std::allocator<char> >.append
std.basic_string<char,std::char_traits<char>,std::allocator<char> >._Construct_lv_contents
std.basic_stringbuf<char,std::char_traits<char>,std::allocator<char> >._Tidy
std.basic_stringbuf<char,std::char_traits<char>,std::allocator<char> >.str
std.basic_stringbuf<char,std::char_traits<char>,std::allocator<char> >.{ctor}
std.basic_stringbuf<char,std::char_traits<char>,std::allocator<char> >._Getstate
std.basic_string<char,std::char_traits<char>,std::allocator<char> >._Reallocate_grow_by<class <lambda_6f04b3841c6ace20ee4fd1b3dbc592d0>,char>
_Size_increase
<_Args_0>
std.basic_string<char,std::char_traits<char>,std::allocator<char> >._Reallocate_for<class <lambda_88acb98cb1d3e807ff08d7ebe077788e>,char const *>
_New_size
std.basic_string<char,std::char_traits<char>,std::allocator<char> >._Reallocate_grow_by<class <lambda_4c04651f1675f62dd3603168f157397a>,char const *,unsigned int>
<_Args_1>
std.basic_string<char,std::char_traits<char>,std::allocator<char> >._Xlen
std.basic_string<char,std::char_traits<char>,std::allocator<char> >._Calculate_growth
_Requested
??_E?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@$$F$4PPPPPPPM@A@AEPAXI@Z
<CrtImplementationDetails>.ThrowNestedModuleLoadException
innerException
nestedException
<CrtImplementationDetails>.ThrowModuleLoadException
errorMessage
<CrtImplementationDetails>.RegisterModuleUninitializer
handler
<CrtImplementationDetails>.FromGUID
__get_default_appdomain
__release_appdomain
<CrtImplementationDetails>.GetDefaultDomain
<CrtImplementationDetails>.DoCallBackInDefaultDomain
function
cookie
__scrt_is_safe_for_managed_code
<CrtImplementationDetails>.DefaultDomain.DoNothing
<CrtImplementationDetails>.DefaultDomain.HasPerProcess
<CrtImplementationDetails>.DefaultDomain.HasNative
<CrtImplementationDetails>.DefaultDomain.NeedsInitialization
<CrtImplementationDetails>.DefaultDomain.NeedsUninitialization
<CrtImplementationDetails>.DefaultDomain.Initialize
<CrtImplementationDetails>.LanguageSupport.InitializeVtables
<CrtImplementationDetails>.LanguageSupport.InitializeDefaultAppDomain
<CrtImplementationDetails>.LanguageSupport.InitializeNative
<CrtImplementationDetails>.LanguageSupport.InitializePerProcess
<CrtImplementationDetails>.LanguageSupport.InitializePerAppDomain
<CrtImplementationDetails>.LanguageSupport.InitializeUninitializer
<CrtImplementationDetails>.LanguageSupport._Initialize
<CrtImplementationDetails>.LanguageSupport.UninitializeAppDomain
<CrtImplementationDetails>.LanguageSupport._UninitializeDefaultDomain
<CrtImplementationDetails>.LanguageSupport.UninitializeDefaultDomain
<CrtImplementationDetails>.LanguageSupport.DomainUnload
<CrtImplementationDetails>.LanguageSupport.Cleanup
<CrtImplementationDetails>.LanguageSupport.{ctor}
<CrtImplementationDetails>.LanguageSupport.{dtor}
<CrtImplementationDetails>.LanguageSupport.Initialize
.cctor
gcroot<System::String ^>..P$AAVString@System@@
gcroot<System::String ^>.=
gcroot<System::String ^>.{dtor}
gcroot<System::String ^>.{ctor}
___CxxCallUnwindDtor
__ehvec_dtor
destructor
?A0xa6760371.ArrayUnwindFilter
pExPtrs
__ArrayUnwind
<CrtImplementationDetails>.AtExitLock._handle
<CrtImplementationDetails>.AtExitLock._lock_Construct
<CrtImplementationDetails>.AtExitLock._lock_Set
<CrtImplementationDetails>.AtExitLock._lock_Get
<CrtImplementationDetails>.AtExitLock._lock_Destruct
<CrtImplementationDetails>.AtExitLock.IsInitialized
<CrtImplementationDetails>.AtExitLock.AddRef
<CrtImplementationDetails>.AtExitLock.RemoveRef
?A0x0d1e8ffe.__alloc_global_lock
?A0x0d1e8ffe.__dealloc_global_lock
_exit_callback
_initatexit_m
_initatexit_app_domain
_app_exit_callback
DecodePointer
EncodePointer
_initterm_e
pfbegin
_initterm
<CrtImplementationDetails>.ThisModule.Handle
_initterm_m
<CrtImplementationDetails>.ThisModule.ResolveMethod<void const * __clrcall(void)>
methodToken
_mainCRTStartup
std.basic_iostream<char,std::char_traits<char> >.{dtor}
std.basic_ostream<char,std::char_traits<char> >.<<
std.basic_streambuf<char,std::char_traits<char> >.{dtor}
std.basic_ios<char,std::char_traits<char> >.{dtor}
std.basic_iostream<char,std::char_traits<char> >.{ctor}
std.basic_streambuf<char,std::char_traits<char> >._Pninc
std.basic_streambuf<char,std::char_traits<char> >.setp
std.basic_streambuf<char,std::char_traits<char> >.pbump
std.basic_streambuf<char,std::char_traits<char> >.epptr
std.basic_streambuf<char,std::char_traits<char> >.setg
std.basic_streambuf<char,std::char_traits<char> >.gbump
std.basic_streambuf<char,std::char_traits<char> >.egptr
std.basic_streambuf<char,std::char_traits<char> >.pptr
std.basic_streambuf<char,std::char_traits<char> >.pbase
std.basic_streambuf<char,std::char_traits<char> >.gptr
std.basic_streambuf<char,std::char_traits<char> >.eback
std.basic_ios<char,std::char_traits<char> >.{ctor}
std.basic_streambuf<char,std::char_traits<char> >.{ctor}
_invalid_parameter_noinfo_noreturn
gethostbyname
CreateProcessA
CreateRemoteThread
GlobalMemoryStatusEx
__CxxQueryExceptionSize
VirtualAllocEx
GetProcAddress
FreeConsole
__CxxDetectRethrow
__CxxUnregisterExceptionObject
CloseHandle
__CxxExceptionFilter
GetTempPathA
delete
OpenProcess
GetModuleHandleA
__std_exception_copy
GetVolumeInformationA
std._Xlength_error
std._Xbad_alloc
__CxxRegisterExceptionObject
memmove
WriteProcessMemory
delete[]
__std_exception_destroy
_getFiberPtrId
_cexit
__security_init_cookie
__FrameUnwindFilter
terminate
??_C@_0BC@EOODALEL@Unknown?5exception?$AA@
??_C@_04HLONOPDM@?4dll?$AA@
??_C@_0BA@JFNIOLAK@string?5too?5long?$AA@
??_R3?$basic_istream@DU?$char_traits@D@std@@@std@@8
??_R3?$basic_iostream@DU?$char_traits@D@std@@@std@@8
??_R0?AV?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@8
??_R4exception@std@@6B@
??_R1A@?0A@EA@?$basic_istream@DU?$char_traits@D@std@@@std@@8
??_R0?AV?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@8
??_R0?AVios_base@std@@@8
??_R2?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@8
??_R0?AV?$basic_iostream@DU?$char_traits@D@std@@@std@@@8
??_R17A@3EA@?$_Iosb@H@std@@8
??_R1A@?0A@EA@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@8
??_R1A@?0A@EA@exception@std@@8
??_R1A@?0A@EA@?$basic_streambuf@DU?$char_traits@D@std@@@std@@8
??_8?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B?$basic_ostream@DU?$char_traits@D@std@@@1@@
??_R2?$basic_istream@DU?$char_traits@D@std@@@std@@8
??_R0?AV?$_Iosb@H@std@@@8
??_R0?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@@8
??_R3?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@8
??_R2exception@std@@8
??_R2?$basic_ostream@DU?$char_traits@D@std@@@std@@8
??_R3?$basic_ios@DU?$char_traits@D@std@@@std@@8
??_7?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??_7exception@std@@6B@
??_R1BA@?0A@EA@?$basic_ostream@DU?$char_traits@D@std@@@std@@8
??_R0?AV?$basic_istream@DU?$char_traits@D@std@@@std@@@8
??_R1A@?0A@EA@ios_base@std@@8
??_R3exception@std@@8
??_R1A@?0A@EA@?$basic_ostream@DU?$char_traits@D@std@@@std@@8
?stringLength@?1??genRandom@mainForm@loader@@A$AAMDXZ@4HA
??_R0?AV?$basic_ios@DU?$char_traits@D@std@@@std@@@8
??_7?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??_R2?$basic_streambuf@DU?$char_traits@D@std@@@std@@8
??_R1A@?0A@EA@?$_Iosb@H@std@@8
??_R1A@?0A@EA@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@8
??_R2?$basic_iostream@DU?$char_traits@D@std@@@std@@8
??_R2?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@8
??_R4?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??_R4?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??_R1A@A@3FA@?$basic_ios@DU?$char_traits@D@std@@@std@@8
??_R0?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@@8
??_R2ios_base@std@@8
??_R3?$basic_ostream@DU?$char_traits@D@std@@@std@@8
??_R1A@?0A@EA@?$basic_iostream@DU?$char_traits@D@std@@@std@@8
??_8?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B?$basic_istream@DU?$char_traits@D@std@@@1@@
??_R3ios_base@std@@8
??_R3?$basic_streambuf@DU?$char_traits@D@std@@@std@@8
??_R3?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@8
??_R2?$_Iosb@H@std@@8
??_R1A@A@3EA@ios_base@std@@8
??_R1A@?0A@EA@?$basic_ios@DU?$char_traits@D@std@@@std@@8
?alphanum@?1??genRandom@mainForm@loader@@A$AAMDXZ@4QBDB
??_R3?$_Iosb@H@std@@8
??_R0?AVexception@std@@@8
??_R17?0A@EA@?$_Iosb@H@std@@8
??_R2?$basic_ios@DU?$char_traits@D@std@@@std@@8
_GUID_cb2f6723_ab3a_11d2_9c40_00c04fa30a3e
_GUID_cb2f6722_ab3a_11d2_9c40_00c04fa30a3e
_GUID_90f1a06c_7712_4762_86b5_7a5eba6bdb02
_GUID_90f1a06e_7712_4762_86b5_7a5eba6bdb02
?Uninitialized@CurrentDomain@<CrtImplementationDetails>@@$$Q2HA
?InitializedPerAppDomain@CurrentDomain@<CrtImplementationDetails>@@$$Q2W4Progress@2@A
?Entered@DefaultDomain@<CrtImplementationDetails>@@2_NA
?hasNative@DefaultDomain@<CrtImplementationDetails>@@0W4TriBool@2@A
?InitializedPerProcess@DefaultDomain@<CrtImplementationDetails>@@2_NA
?Count@AllDomains@<CrtImplementationDetails>@@2HA
?Initialized@CurrentDomain@<CrtImplementationDetails>@@$$Q2HA
?InitializedNative@CurrentDomain@<CrtImplementationDetails>@@$$Q2W4Progress@2@A
?InitializedNativeFromCCTOR@DefaultDomain@<CrtImplementationDetails>@@2_NA
?IsDefaultDomain@CurrentDomain@<CrtImplementationDetails>@@$$Q2_NA
?InitializedVtables@CurrentDomain@<CrtImplementationDetails>@@$$Q2W4Progress@2@A
?InitializedNative@DefaultDomain@<CrtImplementationDetails>@@2_NA
?InitializedPerProcess@CurrentDomain@<CrtImplementationDetails>@@$$Q2W4Progress@2@A
?hasPerProcess@DefaultDomain@<CrtImplementationDetails>@@0W4TriBool@2@A
__xc_mp_z
__xi_vt_z
__xc_ma_a
__xc_ma_z
__xi_vt_a
__xc_mp_a
__unep@?DoNothing@DefaultDomain@<CrtImplementationDetails>@@$$FCGJPAX@Z
__unep@?_UninitializeDefaultDomain@LanguageSupport@<CrtImplementationDetails>@@$$FCGJPAX@Z
?A0x0d1e8ffe.__onexitbegin_m
?A0x0d1e8ffe.__exit_list_size
__onexitend_app_domain
?_lock@AtExitLock@<CrtImplementationDetails>@@$$Q0PAXA
?_ref_count@AtExitLock@<CrtImplementationDetails>@@$$Q0HA
?A0x0d1e8ffe.__onexitend_m
__exit_list_size_app_domain
__onexitbegin_app_domain
??_7type_info@@6B@
__imp_std._BADOFF
__xi_z
__scrt_current_native_startup_state
__scrt_native_startup_lock
__xc_a
__xi_a
__scrt_native_dllmain_reason
__xc_z
~mainForm
InitializeComponent
mainForm_Load
sender
memeinject
genRandom
random_string
length
button1_Click
mainForm_FormClosing
comboBox1_SelectedIndexChanged
timer1_Tick
SendMsg
textBox3_KeyPress
button2_Click
Dispose
isActivated
textBox2
label4
button2
textBox3
timer1
textBox1
label1
button1
label2
comboBox1
label3
components
<MarshalCopy>
<MarshalDestroy>
context
message
Nested
get_NestedException
set_NestedException
__set_formal
ToString
GetObjectData
formatString
<backing_store>NestedException
NestedException
AddHandler
SingletonDomainUnload
source
arguments
_ModuleUninitializer
value__
get_UTF8
get_DarkRed
get_WindowFrame
op_Equality
op_Inequality
Contains
Replace
Concat
Delete
Exists
ShowDialog
set_BackColor
set_FormBorderStyle
set_ClientSize
add_FormClosing
add_Load
AppendText
set_ReadOnly
set_AutoSize
set_TextAlign
set_Text
FindStringExact
get_Items
get_SelectedIndex
set_SelectedIndex
set_DropDownStyle
add_SelectedIndexChanged
PerformLayout
ResumeLayout
SuspendLayout
get_Controls
set_Enabled
set_Font
set_ForeColor
set_Location
set_Name
set_Size
set_TabIndex
add_Click
add_KeyPress
set_AutoScaleDimensions
set_AutoScaleMode
get_KeyChar
set_Handled
set_Interval
add_Tick
set_Multiline
set_ScrollBars
get_Text
set_UseVisualStyleBackColor
set_FormattingEnabled
DownloadFile
DownloadString
set_Encoding
GetExceptionPointers
GetExceptionCode
Increment
Decrement
Exchange
CompareExchange
GetRuntimeInterfaceAsIntPtr
op_Explicit
get_Target
set_Target
ThrowExceptionForHR
GetHRForException
GetObjectForIUnknown
PrepareDelegate
PrepareConstrainedRegions
AddValue
GetValue
KeepAlive
Format
ToPointer
Invoke
GetType
get_Message
get_InnerException
IsDefaultAppDomain
get_CurrentDomain
get_Id
add_ProcessExit
add_DomainUnload
GetTypeFromHandle
GetEnumerator
MoveNext
get_Current
FromIntPtr
ToIntPtr
AllocHGlobal
FreeHGlobal
ResolveMethodHandle
GetFunctionPointer
get_Module
get_ModuleHandle
dropper
dropper.exe
pb=odc
c%=OU3]
 )	 )	 )	
 )	 )	
SkipVerification
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
UnmanagedCode
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
C:\Users\nth\source\repos\dropper\Release\dropper.pdb
.text$mn
.idata$5
.00cfg
.CRT$XCA
.CRT$XCAA
.CRT$XCZ
.CRT$XIA
.CRT$XIAA
.CRT$XIAC
.CRT$XIZ
.CRT$XPA
.CRT$XPZ
.CRT$XTA
.CRT$XTZ
.CRTMA$XCA
.CRTMA$XCZ
.CRTMP$XCA
.CRTMP$XCZ
.CRTVT$XCA
.CRTVT$XCZ
.rdata
.rdata$ilfixup
.rdata$r
.rdata$sxdata
.rdata$zzzdbg
.rtc$IAA
.rtc$IZZ
.rtc$TAA
.rtc$TZZ
.xdata$x
.idata$2
.idata$3
.idata$4
.idata$6
.data$r
.rsrc$01
.rsrc$02
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_BADOFF@std@@3_JB
MSVCP140.dll
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memset
_except_handler4_common
VCRUNTIME140.dll
_seh_filter_exe
_set_app_type
__setusermatherr
_configure_narrow_argv
_initialize_narrow_environment
_get_initial_narrow_environment
_initterm
_initterm_e
_set_fmode
__p___argc
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_configthreadlocale
_set_new_mode
__p__commode
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_controlfp_s
terminate
api-ms-win-crt-runtime-l1-1-0.dll
api-ms-win-crt-math-l1-1-0.dll
api-ms-win-crt-stdio-l1-1-0.dll
api-ms-win-crt-locale-l1-1-0.dll
api-ms-win-crt-heap-l1-1-0.dll
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
KERNEL32.dll
OpenProcess
GetModuleHandleA
GetProcAddress
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
CloseHandle
GetTempPathA
CreateProcessA
GetVolumeInformationA
GlobalMemoryStatusEx
FreeConsole
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
WS2_32.dll
memmove
__CxxQueryExceptionSize
__CxxExceptionFilter
__CxxRegisterExceptionObject
__CxxDetectRethrow
__CxxUnregisterExceptionObject
__FrameUnwindFilter
_invalid_parameter_noinfo_noreturn
_callnewh
malloc
api-ms-win-crt-utility-l1-1-0.dll
_CorExeMain
mscoree.dll
.?AVexception@std@@
.?AV?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
.?AV?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$basic_iostream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_istream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
.?AVios_base@std@@
.?AV?$_Iosb@H@std@@
.?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@
.?AVtype_info@@
.?AVbad_alloc@std@@
.?AVbad_array_new_length@std@@
<?xml version='1.0' encoding='UTF-8' standalone='yes'?>
<assembly xmlns='urn:schemas-microsoft-com:asm.v1' manifestVersion='1.0'>
  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
    <security>
      <requestedPrivileges>
        <requestedExecutionLevel level='asInvoker' uiAccess='false' />
      </requestedPrivileges>
    </security>
  </trustInfo>
</assembly>
061<1B1H1N1T1Z1`1f1l1|1
2*2A2r2
6 666M6b6i6o6
7%7>7}7
8G8M8s8|8
96:?:D:j:o:
;(;6;Q;\;
<=<Q<X<
=!='=-=3=9=?=F=M=T=[=b=i=p=x=
0$0*00060<0B0H0N0T0Z0`0f0l0r0x0~0
1#1)1/151;1A1G1M1S1Y1
$5<5@5T5d5h5l5
6 6$6<6@6T6X6p6t6x6
7 7$7(7,7@7D7\7`7x7|7
8 8$8(8,80848H8X8\8l8p8
9 9(9@9
= =(=0=8=<=@=H=\=t=x=
0 0$0(0,0004080<0@0D0H0L0P0T0
1(2`2|2