MalScore
3.5/100

LXX.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 52/67 Related 2252
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 349.00 KB (357376 bytes)
Compile time: 2017-12-25 12:09:17
MD5: 4ff11e5ea3b715e21908bb1eacccf27c
SHA1: 4f7c5a15b8f52259027c84445eb7ff27e6f2ca3e
SHA256: 713a6bb4a9caa633172340c2a765e209d4974e7d30a5e25095b853e08bb68eb6
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2017-12-31 16:03:05
Last submission: 2017-12-31 16:03:05
Filename detected: - LXX.exe (1)
URL file hosting
hXXp://hdhjeuehujwghqjejfejd.club/LXX.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2017-12-29 08:54:41 [52/67] VirusTotal
PE Sections 1 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0x566e4 354304 a7ee2ada90d18d20e7532b4a6d0179d4 43437205299ce62d4e58290f15305065576ef315
.rsrc 0x5a000 0x800 2048 ef563e9cf0ae4ee43a2bd30422daf865 ed9f5685cb91316ec4be7a505824509449bbfc9e
.reloc 0x5c000 0xc 512 811116fe3c423063aceddbe2da91a644 b62c981c4107125fec774040a347f70b5e96fe5c
PE Resources
Name Offset Size Language Sublanguage Data
RT_VERSION 0x5a0a0 580 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_MANIFEST 0x5a2e8 1144 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright:
Assembly Version: 1.3.0.0
InternalName: Client.exe
FileVersion: 1.3.0.0
FileDescription:
Translation: 0x0000 0x04b0
OriginalFilename: Client.exe
ProductVersion: 1.3.0.0
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: XML
{0}\FileZilla\recentservers.xml
{0}\FileZilla\sitemanager.xml
System.Xml
FIle type: Library
\msvcp120.dll
\msvcr120.dll
\mozglue.dll
\msvcp100.dll
\nss3.dll
\msvcr100.dll
USER32.dll
KERNEL32.dll
ntdll.dll
IPHLPAPI.DLL
mscoree.dll
MSVCRT.dll
GDI32.dll
SHELL32.dll
SHLWAPI.dll
ole32.dll
ADVAPI32.dll
OLEAUT32.dll
IP Found
No IP detected
URL(s)
http://ip-api.com/json/
http://
http://api.ipify.org/
file:///
http://schemas.microsoft.com/SMI/2005/WindowsSettings
http://freegeoip.net/xml/
String too long
Pig6+iUq8l51eJXVNrL6IGHvsjRoqp0b7xL6mF8Wwkh35OuzwwIAE9BUzj/CPdxl5nc1be05xeaI1Hr8HUsflQ==
SsBvjeaY8oTsAo7Jt/Q925xE2Qr4OHH+2FHkeOb69ZT/JJr8+YEyjebmSNv4N+OGdPBSlOIoJxPbF+YKuRTdBg==
cu7YRDyHZhBOrId/Hz2j28fz/oUpXxqleR56Q9vcMGDva/37ejC70f6oAaKEHxOJ59Rd5FqALqq8cwxO85WL4oC0jPO1e1i28BobClvUa5Y=
uXtZ71Edlb+wrXJI9f4GLkrF7hSg+7gQVfJYmgFbjU4oJ9pKIaFEvFvozx9OGoeoFSnVbhJjffYECfp/Wm+yUg==
DrqdtK3xDh6wLP6ttf325dume666b54cCKntlBD687J78zLjOnzAZ/vfz7+jhtWahL24R5AoZd7o+0j4DEsI0g==
9tM99qbIF5p7hAgNEM44dyDNMjEuWINjxIEIY1abaVyJ+EJ58Te5Cr0Hs9KwY4TVO5n1VUQBkPpJw0EopZX0CQ==
lq7KAlCIOwfPJrPKMUR90KmQe5Wht4R2DDo8/OEuKtuDG9zOQ2sHD0vzXkBaZqexXz2aDeKAcuwlOqIh0mVuRA==
+3J3ACyWA1AsK7JnVaECYIqy6KxViYgm2oZ4EMMLuknBq1iffjx4LZw8OQiPjs8gm6tiktbUltjpdMDTe8GJXg==
b2W94QOgcVLLHy+CzhPFSI19Pw3BkUswTVBhXqpqISz5yAjRQUI9iL1jo/U9GuuvrjGItYjyzxYYxtb7CLnEm6ncZw2BpzaTssUDOlXYyEo=
kml
Unknown
MM-dd-yyyy
videoStreamConfig
The video source does not support configuration property page.
InternalName
Screen-saver
GetTypeID
Host
Response//CountryCode
Failed creating device enumerator
{0:X2}
Yandex\YandexBrowser\User Data\Default\Cookies
SELECT * FROM Win32_BaseBoard
StreamCodec can not be null.
{0}>> Session unexpectedly closed{0}
no bytes transferred
Uninstallation failed: {0}
fam
DeletePath Path too long
catalonia
Failed creating device object for moniker
RenamePath Path too long
http://ip-api.com/json/
Video source is not specified.
can't load DLL
GetUninitializedObject
Processor (CPU)
cookies
g~g
SELECT * FROM FirewallProduct
Opera Software\Opera Stable\Cookies
pm}
Renamed directory
PK11SDR_Decrypt
Response//City
Execution failed!
no pe file
<p class="h">[
The value must be between 0 and 255.
{0}\FileZilla\recentservers.xml
TypeSerializers have to implement IDynamicTypeSerializer or IStaticTypeSerializer
Client.exe
:Zone.Identifier
\msvcp120.dll
path
does not exist in:
Serialize
Firefox does not have any profiles, has it ever been launched?
Pig6+iUq8l51eJXVNrL6IGHvsjRoqp0b7xL6mF8Wwkh35OuzwwIAE9BUzj/CPdxl5nc1be05xeaI1Hr8HUsflQ==
.exe
expires_utc
Uptime
secure
Yandex\YandexBrowser\User Data\Default\Login Data
FileDescription
SELECT * FROM AntivirusProduct
schtasks
GetDirectory Path too long
SsBvjeaY8oTsAo7Jt/Q925xE2Qr4OHH+2FHkeOb69ZT/JJr8+YEyjebmSNv4N+OGdPBSlOIoJxPbF+YKuRTdBg==
+ {0}
[InternetShortcut]
Firefox does not have any logins.json file
.bat
H!I$L2Q3T>Z?[AaDgIiKkMmOpQqS}[~]
<p class="h">[Enter]</p><br>
Opera
N/A
Adding to startup failed.
New Key #{0}
SELECT Caption FROM Win32_OperatingSystem
logins.json
No Firefox profiles could be found
Renamed file
Cannot change value: Error writing to the registry
Process already elevated.
Host Name
LastBootUpTime
stream
Chrome
gzg
$1:$2:$3:$4:$5:$6
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce
{0} ({1}) [{2}, {3}]
IconIndex=0
>> New Session created
information
The registry:
LastWin32Error
No devices of the category
File does not exist
host_key
FileVersion
RenamePath Failed
URL=file:///
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A
k~k
Failed creating filter graph
Return
OriginalFilename
No Firefox logins.json was found
\firefox.exe
origin_url
GetDirectory No permission
password_value
Input can not be empty.
NSS_Init
Alt
HostName
Software\Microsoft\Internet Explorer\IntelliForms\Storage2
</b>]</p><br>
DeletePath Failed
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Path is too long
grabber_video
Cannot rename value: Error writing to the registry
Failed creating sample grabber
Local Disk
Unable to write to File Stream
runas
imj
cu7YRDyHZhBOrId/Hz2j28fz/oUpXxqleR56Q9vcMGDva/37ejC70f6oAaKEHxOJ59Rd5FqALqq8cwxO85WL4oC0jPO1e1i28BobClvUa5Y=
Uninstalling... bye ;(
wales
Updating...
Removable Drive
DeletePath I/O error
Select * From Win32_ComputerSystem
moz_cookies
libPath
&gt;
Control
name
Unable to open root registry key, you do not have the needed permissions.
http://freegeoip.net/xml/
PID: {0}
HKEY_CLASSES_ROOT
last_access_utc
Domain Name
cmd
Download failed!
Only on 64-bit systems supported
System Drive
Video Card (GPU)
{0}||{1}
/s /t 0
RenamePath Path not found
Deleted directory
Username
rmdir /q /s "
izi
GetDirectory Directory not found
PortNumber
BlockNumber bigger than MaxBlocks
uXtZ71Edlb+wrXJI9f4GLkrF7hSg+7gQVfJYmgFbjU4oJ9pKIaFEvFvozx9OGoeoFSnVbhJjffYECfp/Wm+yUg==
GetDrives No drives
mmn
Install string was null or empty
Could not create update batch file.
Getting Autostart Items failed: {0}
isSecure
Pass
ProductVersion
ISP
dd.MM.yyyy HH:mm
<meta http-equiv='Content-Type' content='text/html; charset=utf-8' />Log created on
Bitmap width/height are not equal to previous bitmap
WinSCP
/k START "" "
\msvcr120.dll
negative length
Cannot create key: Error writing to the registry
priority
Unable to retrieve video device capabilities. This video device requires a larger VideoStreamConfigCaps structure.
User
HKEY_USERS
HKEY_CURRENT_CONFIG
VS_VERSION_INFO
{0} [{1}, {2}]
SOFTWARE\Wow6432Node\Mozilla\Mozilla Firefox
HH:mm
GetTypeFromHandle
root\SecurityCenter2
Deleted file
Domain: {1}{0}Cookie Name: {2}{0}Value: {3}{0}Path: {4}{0}Expired: {5}{0}HttpOnly: {6}{0}Secure: {7}
Must have access to Write in the Stream
host
Main
i~i
scotland
&apos;
Execution failed: {0}
Could not read cookie table
Getting uptime failed
Software\Microsoft\Windows\CurrentVersion\Run
Name
Cannot delete value: Error writing to the registry
Admin
Directory not found
Action failed: {0}
You do not have write access to registry:
<br><br>
displayName
Downloading file...
Could not add value
DrqdtK3xDh6wLP6ttf325dume666b54cCKntlBD687J78zLjOnzAZ/vfz7+jhtWahL24R5AoZd7o+0j4DEsI0g==
desktop.ini
SELECT * FROM Win32_BIOS
PK11_GetInternalKeySlot
Type {0} contains generic parameters
File not found
Mono.Runtime
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run
{0} {1} Bit
move /y "
00:00:00:00:00:00
Memory (RAM)
PublicKeyFile
{0}x{1}
WAN IP Address
&nbsp;
Translation
Failed creating capture graph builder
Deserialize
NSSBase64_DecodeBuffer
The video source does not support camera control.
GetDrives No permission
Opera Software\Opera Stable\Login Data
Unable to read from File Stream
Network Drive
&#35;
RenamePath No permission
PC Name
Adding Autostart Item failed: {0}
Could not remove value
Response//CountryName
Access denied
9tM99qbIF5p7hAgNEM44dyDNMjEuWINjxIEIY1abaVyJ+EJ58Te5Cr0Hs9KwY4TVO5n1VUQBkPpJw0EopZX0CQ==
Not a valid SQLite 3 Database File
GET
SELECT * FROM Win32_DisplayConfiguration
(.{2})(.{2})(.{2})(.{2})(.{2})(.{2})
43=<><?<@<A<B<C<D<E<F<G<a`cbdbebgfihkjmlporqsqtquqvqwq|{}{
Showed Messagebox
m~m
logins
Could not create uninstall-batch file
({0}:{1})
key
TotalPhysicalMemory
Firefox
lq7KAlCIOwfPJrPKMUR90KmQe5Wht4R2DDo8/OEuKtuDG9zOQ2sHD0vzXkBaZqexXz2aDeKAcuwlOqIh0mVuRA==
Could not open root registry keys, you may not have the needed permission
Escape
Firefox Application Data folder does not exist!
UserName
Guest
Google\Chrome\User Data\Default\Cookies
ping -n 10 localhost > nul
has_expired
username_value
chcp
shutdown
kzk
table
SELECT * FROM Win32_Processor
Failed creating device object for moniker.
Mozilla/5.0 (Windows NT 6.3; rv:48.0) Gecko/20100101 Firefox/48.0
chcp 65001
DeletePath Path not found
ControlKey
1.3.0.0
WritePrimitive
del /a /q /f "
@echo off
\mozglue.dll
/create /tn "
ABCDEF
MAC Address
No serializer for {0}
value
Process could not be started!
User: {0}{3}Pass: {1}{3}Host: {2}
<p class="h">[Esc]</p>
Response//IP
^.*(?=Windows)
Menu
pzp
\Mozilla\Firefox\Profiles
canceled
OnDeserialization
GetDrives I/O error
$E$
encrypted_value
PixelFormat is not equal to previous Bitmap
start "" "
, try running client as administrator
\msvcp100.dll
<p class="h">[{0}
Cannot serialize {0}: ISerializable not supported
Response//RegionName
Firefox is not installed, or the install path could not be located
http
<style>.h { color: 0000ff; display: inline; }</style>
000004b0
<p class="h"><br><br>[<b>
mzm
echo DONT CLOSE THIS WINDOW!
HKEY_CURRENT_USER
DeletePath No permission
grabber_snapshot
The value:
Crossbar configuration is not supported by currently running video source.
Port
Auto-vacuum capable database is not supported
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789
-
System Directory
No executable file
+3J3ACyWA1AsK7JnVaECYIqy6KxViYgm2oZ4EMMLuknBq1iffjx4LZw8OQiPjs8gm6tiktbUltjpdMDTe8GJXg==
FriendlyName
ReadPrimitive
Downloaded File!
gmh
Executed File!
source
GbRVMTVUhbliN8Yyp+UDZw==
C# version only supports level 1 and 3
The video source must be running in order to display crossbar property page.
GetDirectory I/O error
" /f
SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
GetDirectory File not found
UNIQUE
xClient.Properties.Resources
Unknown OS
No installs of firefox recorded in its key.
Multi-dim arrays not supported: {0}
Yandex
httponly
Time Zone
session unexpectedly closed
b2W94QOgcVLLHy+CzhPFSI19Pw3BkUswTVBhXqpqISz5yAjRQUI9iL1jo/U9GuuvrjGItYjyzxYYxtb7CLnEm6ncZw2BpzaTssUDOlXYyEo=
VarFileInfo
Visited Website
uRNSsTqAq88mlYSta8qr
SELECT * FROM Win32_OperatingSystem WHERE Primary='true'
root\SecurityCenter
LegalCopyright
Cannot create value: Error writing to the registry
http://
exit
Shift
SQLite format 3
{0}\FileZilla\sitemanager.xml
.url
New Value #{0}
expiry
Cannot delete key: Error writing to the registry
&amp;
SOFTWARE\Mozilla\Mozilla Firefox
cookies.sqlite
Caption
RenamePath I/O error
/r /t 0
Canceled
" "
\nss3.dll
[PRIVATE KEY LOCATION: "{0}"]
Firefox does not have any cookie file
/delete /tn "
file:
User refused the elevation request.
Type {0} is not marked as Serializable
Unsupported format found.
Antivirus
england
DISPLAY
PK11_Authenticate
Removing Autostart Item failed: {0}
This video device does not report capabilities.
&lt;
Update failed: {0}
Key can not be empty.
Manufacturer
IconFile=
Cannot rename key: Error writing to the registry
Install Directory
HKEY_LOCAL_MACHINE
]</p>
{0}d : {1}h : {2}m : {3}s
Assembly Version
Firewall
nXY
({0}:{1}:{2})
InternetExplorer
p~p
Response//TimeZone
europeanunion
invalid header
" /sc ONLOGON /tr "
image/jpeg
SerialNumber
{0} MB
LAN IP Address
GetDirectory Failed
SOFTWARE\\Martin Prikryl\\WinSCP 2\\Sessions
&quot;
{0}{4}{1}{4}{2}{4}{3}
" & EXIT
Description
http://api.ipify.org/
\msvcr100.dll
" /rl HIGHEST /f
Unknown type {0}
StringFileInfo
35.0.0
Password
Google\Chrome\User Data\Default\Login Data
Country
FileZilla
Invalid rootkey, could not be found.
Win
persistent
rxy
4`^
serializer
get_Days
OnKeyPress
pPages
DateTime
allowEscAbort
?M+a
ByteBuffer
filterMoniker
lMsg
get_IsRunning
get_Isp
GetExtendedTcpTable
PNG
CipherMode
OnDown
A&ry
<current>5__18
set_Type
Host
crossbar
System.Runtime.Serialization.Json
GetWebcam
TargetFrameworkAttribute
get_ChildNodes
set_NewKeyName
, r*
ITypeSerializer
?_b`
stopCookie
param0
, r?
ValueName
<OperatingSystem>k__BackingField
p* *
, r6
UnverifiableCodeAttribute
lParam2
<RedirectOutputs>b__3
lParam1
hSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPADi
set_Capacity
ArrayList
firefoxPath
Substring
<Index>k__BackingField
}r^@
, ra
=9=J=j=y=
keyPath
SetValueSafe
GetEvent
set_RemoteAdresses
CopyCaptureFile
+5 uP
get_IsByRef
WriteObject
ProxyClients
procName
Version
formattedKeyValue
X r (
get_Clicks
CryptoStream
<HandleGetStartupItems>b__1f
<CurrentBlock>k__BackingField
<HandleGetStartupItems>b__1d
<HandleGetStartupItems>b__1e
<HandleGetStartupItems>b__1b
<HandleGetStartupItems>b__1c
AllocCoTaskMem
LockBits
GetStreamCaps
set_ParentPath
pbKeyState
FramesReceived
KeyPath
DoShowMessageBox
algid
MouseUpExt
Int32
SetNotifyWindow
p9
DoPathRename
PtrToStructure
ReverseProxyConnect
set_Webcams
path
set_Isp
Marshal
textbuffer
Dequeue
GenerateIV
Serialize
keepAliveInterval
ManagementDateTimeConverter
procedure
get_encryptedPassword
encType
REGISTRY_VALUE_CREATE_ERROR
user32.dll
ProcessStartInfo
Dloo
op_Explicit
RuntimeFieldHandle
GetReaderMethodInfo
E!E>E^E
System.Security
xClient.Core.Packets.ClientPackets
get_Tag
GetILGenerator
- r13
get_VistaOrHigher
remove_MouseUpExt
get_ErrorMsg
Jm3x
(e
SuppressFinalize
GCHandleType
SystemInfos
<FromRawDataGlobal>d__f
receivePin
EndInvoke
WriteVarint64
OnUpExt
type
callbck
sourceObject
FilterInfo
IsDisposed
SetFormat
valueName
SetNotifyFlags
StringHelper
SystemParametersInfo
<Files>k__BackingField
imageindex
DefineLabel
set_encryptedPassword
EnableVisualStyles
EndOfStreamException
Text
CryptGetHashParam
set_IsNonChar
DeserializerSwitchMethodInfo
*rJ>
System.Collections.Generic.IEnumerator<System.String>.Current
locker
Abort
Win32Exception
3 ({
m
GenerateReaderMethod
InterfaceTypeAttribute
<Target>k__BackingField
set_StartInfo
get_States
IsRunning
,5(
imageQuality
&+J
get_KeyCode
set_ExpiresUTC
GetStaticMethods
__result
set_StandardOutputEncoding
ReverseProxyConnectResponse
<Webcams>k__BackingField
set_IsMouseKeyUp
&+Q
,nr
GetKeyListener
Urn?
GetPressEventArgs
Passwords
set_Connected
Format
country
HostName
dataList
XpOrHigher
actualPoint
ICollection`1
GetLastWin32Error
m_PreviousPosition
Enumerable
subkeyFullPath
&+
description
AppDomain
EncoderParameter
GetDecoder
set_timeLastUsed
GetNumberOfCapabilities
ToDateTime
get_ParentPath
GetUnderlyingType
szUserName
get_Bounds
CopyValue
get_Height
7E7Q7}7
get_OEMCodePage
&+*
FromStream
get_Assembly
set_RedirectStandardOutput
GenerateDynamicSerializerStub
GetConstructor
&+6
<URL>k__BackingField
OpenSubKey
get_ItemOf
MouseEventHandler
processId
WheelScrolled
Newarr
TextWriter
get_Application
FromBase64String
pDefault
IsWellFormedUriString
AssemblyTrademarkAttribute
OpenAccess
ToByte
ReverseProxyDisconnect
_decodedBitmap
get_BigEndianUnicode
-#(c
get_TotalMinutes
Path
set_Text
CallNextHookEx
remove_MouseDown
mouse_event
UTF8Encoding
set_usernameField
TValue
get_NewKeyName
o-
Ldarg_2
Ldarg_0
#Blob
set_LastLocated
ppenum
IMoniker
pszCanonicalized
DoClientUninstall
get_Year
lcid
timeout
DoUploadFile
PlayingFinished
RedirectStandardOutput
Authenticated
DecodeData
AssemblyFileVersionAttribute
BindingFlags
#)#9#
set_OperatingSystem
IDictionary
Type
add_ApplicationExit
Username
LocationCompleted
get_ValueName
GetCaps
<Image>k__BackingField
IEnumerable
DecodeZigZag64
<SetLastDirectorySeen>k__BackingField
get_TotalSeconds
reader
Yo0
triggeredAt
DeriveBytes
Join
/rh>
GetReaderPrimitive
<Webcam>k__BackingField
FreeEventParams
set_Hidden
EnumSerializer
MouseMove
<RedirectOutputs>b__4
_HSa
)rD>
GenerateDynamic
set_Webcam
CreateDC
get_ExecutablePath
Char
SafeHandle
SetLogFile
get_Expired
urlHash
ProcessModule
dwAdviseCookie
set_id
user
RestoreDefaultHandling
Handled
(j
get_OldValueName
get_InnerList
MouseUp
get_Name
CreateDelegate
set_PID
Handles
GetChangeRegistryValueResponse
bScan
<ID>k__BackingField
AForge.Video.DirectShow.Internals
7"7G<
<FromRawDataApp>d__0
payload
get_KeyChar
System.IDisposable.Dispose
HashAlgorithm
get_X
get_Y
DeleteDC
inStr
add_MouseClick
set_Is64Bit
memcmp
add_MouseDown
ReceiveConnection
UrlCanonicalize
Search
UnicastIPAddressInformation
j A
get_RunningOnMono
HardwareId
compressor
set_Processname
target
nCode
LogDirectory
VideoResolution
GetRenameRegistryKeyResponse
EnumUrls
idHook
DoVisitWebsite
OpenWritableSubKeySafe
titles
sX
get_OffsetToStringData
GetParameters
mimeType
<>3__type
<Command>k__BackingField
OpenReadonlySubKeySafe
DialogResult
ToBinary
ToDouble
inherit
get_nextId
,.
ReferenceEquals
set_NewPath
.text
List`1
encryptedPassword
set_DesiredSnapshotSize
GetString
set_Proxy
Clone
WindowsPrincipal
Component
lpvReserved
XmlReader
GetObject
GetFolderPath
?9@j@v@(A0A
Ldc_I4_0
Ldc_I4_1
<>m__Finally19
GetDirectoryName
add_MouseDownExt
set_KeyName
get_Values
ToList
Convert
object
set_Timezone
System.Configuration
FlushFinalBlock
DoProcessKill
get_AddressFamily
get_Monitor
SetCameraProperty
GetPhysicalAddress
add_VideoSourceError
+rP>
0rn>
AvailableCrossbarVideoInputs
m_byteBuffer
GetRenameRegistryValueResponse
<HandleGetStartupItems>b__1a
FlagsAttribute
ConnectionMediaType
SkipVerification
Single
ToBase64String
get_HostName
Reconnect
DefineParameter
EndConnect
OpenMode
Monitor
SetSyncSource
op_Subtraction
<FileName>k__BackingField
lpPageClsID
lpFileTime1
lpFileTime2
set_FileCount
set_URL
get_RemotePath
AddToStartupFailed
CreateDirectory
rgelt
EightPointOneOrHigher
rv=
NrD?
StreamWriter
- rd
Free
encryptedUsername
EncodeZigZag32
- rz
set_Target
pocsUrl
GatewayIPAddressInformation
r#4
&rc+
WaitForExit
stop
dataPath
get_Username
ToAscii
lEventCode
DriveType
System.Net
ComInterfaceType
$3C374A42-BAE4-11CF-BF7D-00AA006946EE
loadCerts
- r#
needToSimulateTrigger
`.rsrc
LastAccessUTC
cFilters
4.0.0.0
IsNameOrValueNull
m_encoder
System.Collections.IEnumerator.Current
CreateDecryptor
s_typeSerializers
get_Default
CanRoute
get_Procedure
KeyDown
Priority
set_formSubmitURL
kernel32.dll
DoPathDelete
result
ImageIndex
GetHostEntry
Enumerator
DriveDisplayName
videoCapabilities
filename
authKey
DeleteValue
RegistryHive
get_Filename
events
set_Length
parentWindowForPropertyPage
pCapsFlags
REGISTRY_VALUE_RENAME_ERROR
get_Exiting
set_IsBackground
Flush
FileTime
get_VideoCapabilities
punkISFolder
get_TickCount
xClient.Core.MouseKeyHook.Implementation
- rI2
OpenBaseKey
jYl#
DataMemberAttribute
MessageboxButton
GetEncoderInfo
ElapsedEventHandler
ConnectDirect
jYo#
MonitorIndex
nXSrc
get_PCName
set_RedirectStandardError
,}s
GetCurrentThreadId
- r,1
Regex
mssK
<>c__DisplayClass8
get_Connected
PlatformID
inLen
get_Authenticated
isConnected
height
OnKeyUp
set_SerializerSwitchMethodInfo
altGr
GetIPGlobalProperties
MouseEventArgs
streamTime
set_Client
mouseInfo
code
GetRootKey
<DeserializerSwitchMethodInfo>k__BackingField
SetOneShot
"r >
get_IsReady
Keylogger
WebRequest
enumMoniker
SafeHandleZeroOrMinusOneIsInvalid
IEnumMoniker
GetProcAddress
wstrURL
AddHistoryEntry
GetWebcamResponse
<>4__this
IYUV
get_ParameterType
EncryptedData
+- r
GetBytes
?ca*
CopyArray
set_Secure
Process
dwThreadId
ProcessUp
ReadAllBytes
xClient.Core.Utilities
get_FilterCollection
EventHandler
property
LocalPorts
tEXtSoftware
ry
lParam
StringComparer
gR*
crossbarVideoInputs
ConnectionId
Write
dwLayout
i- r76
ImageFormat
get_Processes
ExceptionCtorInfo
|rX@
ProcessMove
OrderBy
set_CrossbarVideoInput
,%r.0
virtualKeyCode
BYTEBUFFERLEN
Ldloc
Stop
IPEndPoint
DoDeleteRegistryKey
System.Xml
UInt16
<KeyDown>k__BackingField
plii
System.Management
ExpiresUTC
set_KeySize
OnMoveExt
uParam
XmlDocument
driveDisplayName
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges> <requestedExecutionLevel level="asInvoker" uiAccess="false" /> </requestedPrivileges> </security> </trustInfo> <compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"> <application> <!-- Windows Vista --> <supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/> <!-- Windows 7 --> <supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/> <!-- Windows 8 --> <supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/> <!-- Windows 8.1 --> <supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"/> <!-- Windows 10 --> <supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"/> </application> </compatibility> <asmv3:application xmlns:asmv3="urn:schemas-microsoft-com:asm.v3" > <asmv3:windowsSettings xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings"> <dpiAware>true</dpiAware> </asmv3:windowsSettings> </asmv3:application> </assembly>
set_AccountType
- s"
action
EndPoint
System.Timers
set_Folders
lpszDriver
get_Text
IHDR
System.IO
WrapNonExceptionThrows
get_Now
get_LocalPort
obtype
client
get_InstallPath
remoteports
-
<GetFieldInfos>b__0
<GetFieldInfos>b__1
set_Match
StartupItems
GetKeyloggerLogsResponse
get_StartupItems
CreateSubKeySafe
DoWebcamStop
ReadPrimitive
isMouseKeyDown
Ldnull
<RunHidden>k__BackingField
get_AvailableCrossbarVideoInputs
pinDirection
Wrz?
NewSegment
get_usernameField
pdwDataLen
RenameSubKeySafe
targetServer
System.Globalization
GetVersionInfo
set_Source
Reset
ApplicationContext
STAThreadAttribute
get_IsKeyDown
s_primitives
set_Tag
snapshotMode
System.Runtime.Versioning
, rX:
Action`1
VistaOrHigher
get_ProvideSnapshots
MarkLabel
Br_S
localport
<IsConnected>k__BackingField
hwnd
<Data>k__BackingField
REGISTRY_KEY_RENAME_ERROR
eventArgs
SetCallback
FileVersionInfo
REGISTRY_VALUE_CHANGE_ERROR
nYDest
inputPinIndex
set_XpOrHigher
AddMatch
System
EventArgs
Application
System.Collections.IComparer.Compare
DoMouseEvent
runhidden
Name
m_KeyListenerCache
ParameterAttributes
CountryCode
SetUserStatus
<CountryCode>k__BackingField
iuuu
System.Reflection.Emit
get_SourceObject
monitorIndex
GetSubtypes
ApplicationException
remove_MouseMove
Win32NT
periodTime
SuppressUnmanagedCodeSecurityAttribute
interfaceID
CreateInstance
ToUInt64
GetCurrentBuffer
get_RootKeyName
add_MouseMove
Stloc_S
ExitThread
Property
nextId
MethodBase
#Strings
remoteport
9%qF&
SnapshotResolution
Image
ThrowExceptionForHR
GetWindowText
<Handle>k__BackingField
&rs
isInputPin
get_Address
cchBuff
Enter
Environment
get_ExpiresUTC
ShouldOperationContinue
ReverseProxyData
set_MaxBlocks
BUFFER_SIZE
get_Minutes
RenderEx
<FilesSize>k__BackingField
row_num
RenameRegistryValue
Matches
*Vs
set_RegionName
GetEventArgs
width
set_Data
sizeDecompressed
@8ARA
CS$<>8__locals4
Decimal
set_EightOrHigher
<GenerateTypeData>b__7
QueryFilterInfo
QueryAccept
BufferCB
get_Persistent
WParam
LocalPort
get_Position
System.Diagnostics
GetUrlHistory
IEnumerator
baseName
GetType
MouseListener
PathType
dwParam
SetFiltergraph
SHGetFileInfo
get_MonikerString
. r6.
lpszOutput
GetClassID
BeginFlush
IsEmpty
Trh?
1rt>
get_GUID
ThreadStaticAttribute
s$
ProvideSnapshots
hWnd
$36B73882-C2C8-11CF-8B46-00805F6CEF60
set_AllowAutoRedirect
get_HasExited
ParentPath
RenderFile
timezone
IpAddress
set_CurrentBlock
isFileHidden
Rfc2898DeriveBytes
RemotePort
Handle
Description
JoinFilterGraph
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
<Name>k__BackingField
get_AddToStartupFailed
pszUrl
get_Win32NT
' (J(Q(Y(k(
hwndOwner
<>1__state
GetSupportedTypes
ParameterModifier
set_States
set_UserAgent
Double
RemoveAt
2,353s3|3
GetMonitorsResponse
get_As
set_IsConnected
set_DriveDisplayName
physicalType
uFlags
ImageQuality
set_Persistent
crossbarVideoInput
sM
get_SnapshotCapabilities
WriteVarint32
get_BaseStream
get_DomainName
NewFrame
serializer
Title
RegSeekerMatch
PaddingMode
Adobe ImageReadyq
get_UTF8
framesReceived
CompareTo
get_Width
ContainsKey
set_WindowStyle
Peek
IsKeyUp
SetMediaType
graph
cypherText
get_encryptedUsername
CreateRegistryValue
set_Expired
rt"
get_HasSubKeys
IsNonChar
PhysicalAddress
set_RootDirectory
szInput
set_LocationCompleted
Socket
filePath
get_URL
DoShutdownAction
rf/
ManagementObject
CopyTo
Func`2
outItemOpt
needToDisplayCrossBarPropertyPage
Where
txts
dwReserved
Secure
level
get_NewValueName
*2~
Processname
IEnumerator`1
cacheVideoCapabilities
UnhandledExceptionEventArgs
get_AbsoluteUri
*2r
GetDisplayName
currentblock
_encoderParams
set_FilesSize
Label
get_City
rawData
get_Handled
ntdll.dll
rP"
GetTypeFromCLSID
TrimEnd
port
get_encType
get_Second
TextReader
SetLastDirectorySeen
set_LastAccessUTC
get_Passwords
OldKeyName
TableName
ProcessDown
set_HostName
get_Decoder
pMax
FileSystem
System.Core
get_HardwareId
Client.exe
baseTime
runGraph
r-7
xFi o
<LocalAddress>k__BackingField
get_RegionName
IOControl
Delegate
<GetSubtypes>d__0
<ConnectionId>k__BackingField
handle
Webcams
ParameterInfo
FromImage
IDeserializationCallback
Newobj
get_Timestamp
z {
get_Unicode
Seek
<CheckBlock>k__BackingField
IBindCtx
r?4
_readLock
set_Verb
AssemblyCompanyAttribute
pinsFetched
jYiE
$56A868A9-0AD4-11CE-B03A-0020AF0BA770
<Titles>k__BackingField
InitializeArray
<Resolution>k__BackingField
LocalVariableInfo
get_Bmp
LastIndexOf
ReleaseComObject
<OldValueName>k__BackingField
p o[
get_Day
set_Name
CryptReleaseContext
Default
InvokeKeyPress
cbSizeFileInfo
MouseMoveExt
set_Path
Round
Time
Push
UrlString
<chars>5__17
OnWheel
get_Length
GetDesktopResponse
hEvent
hModule
ProtocolType
CancelDefaultHandling
BJC:D
GetDrives
System.Collections
values
RenameValueSafe
GetCurrentSample
<Version>k__BackingField
stream
pszPath
GetSystemInfo
Contains
get_DesiredFrameSize
sample
keyName
LastVisited
SendAndFlushBuffer
get_Processname
MAX_PACKET_SIZE
IKeyboardMouseEvents
cPages
-J+Z
$56A86895-0AD4-11CE-B03A-0020AF0BA770
FormatSize
ValueType
System.CodeDom.Compiler
GuidAttribute
FileGet
pressedKeys
pins
LocalAddresses
CollectionBase
ReadVarint64
get_CustomMessage
ToLower
information
VideoCaptureDevice
Rr\?
NetworkInterface
set_RunHidden
<Caption>k__BackingField
get_Port
DataContractAttribute
-6r?
get_Count
(r>>
j1~
CreateRegistryKey
M!]!f!
DoStartupItemAdd
<virtualKeyCode>5__13
ErrorMsg
HMACSHA256
pVar
j1Q
FormatPtr
IsError
$!%d%
m_MouseListenerCache
FileTimeToSystemTime
nXDest
GetValueKind
lpKeyState
keyboardStateNative
DisplayPropertyPage
QueryId
get_Button
DoLoadRegistryKey
vids
get_GeoInfo
GetFormattedKeyValues
rx0
get_KeyDown
GetRange
<Encoding>k__BackingField
monitor
<RemotePath>k__BackingField
Compress
KeyName
. r"#
get_Match
_encodedHeight
UInt32
ToInt32
+9
_ BY
get_CharBuffer
FindFilterByName
matches
get_Version
ConnectedTo
fileName
Is64Bit
- ~
get_LongLength
ToString
JFA
get_timesUsed
set_Timeout
ILGenerator
m_decoder
name
keybd_event
iphlpapi.dll
Utils
Parse
TryParse
pinIn
get_SubKeyCount
get_Webcams
outputPinCount
DeleteHistoryEntry
_encodedWidth
add_UnhandledException
, r s
Split
MajorType
newValueName
Save
Ldelema
tblClass
set_Lat
Hr ?
MouseDoubleClick
,rV>
Y(T
DebuggerHiddenAttribute
KeyUp
get_UserName
get_FilesSize
Connected
Unadvise
ICryptoTransform
BitBlt
2rz>
_imageProcessLock
set_Host
Throw
<Initialize>b__2
prF%
Use ToUnicodeEx instead
OnDownExt
args
AssemblyTitleAttribute
GetDeleteRegistryKeyResponse
pinInfo
xClient.Core.NetSerializer.TypeSerializers
CryptAcquireContext
GetState
provideSnapshots
oldKeyName
GetKeyboardLayout
_jpgCompression
set_InstallPath
add_NewFrame
<ErrorMsg>k__BackingField
formSubmitURL
get_Caption
GetPasswords
set_CheckBlock
wScanCode
System.Security.Cryptography
'r8>
MemberInfo
ConstructorInfo
LastUserStatus
o0
get_IsMouseDown
SettingsBase
AddSeconds
o*
Start
Combine
RootDirectory
message
get_version
size
city
systeminfos
set_VideoResolution
ControlStream
set_FileName
System.Collections.IEnumerable.GetEnumerator
set_Command
<Monitor>k__BackingField
get_CurrentDomain
Data
p*r4/
remove_KeyPress
set_LocalAddress
RegistryKey
set_Caption
OnNewFrame
ColletCrossbarVideoInputs
get_LocalPorts
Enabled
Client
Int64
Send
TextInfo
set_disabledHosts
nPin
{
localaddresses
<RootKeyName>k__BackingField
_index
scan0
set_Passwords
.ctor
<NewKeyName>k__BackingField
<isKeyReleased>5__5
remove_NewFrame
Constrained
MessageboxIcon
browser
files
mscoree.dll
f{9D]r
bindContext
get_SystemInfos
ManualResetEvent
* +>+N.e.
cObjects
hotKeyDelegate
<RemotePort>k__BackingField
get_IsAbstract
Call
set_Status
get_AddressPreferredLifetime
ReconnectEx
hProv
ZjX(%
Invoke
datapath
<virtualKeyCode>5__6
<wParam>5__1
set_Method
newKeyName
get_PinCounts
get_PathType
<>3__data
v4.0.30319
GetRootKeys
DrawImage
SetMode
rFi
AdvisePeriodic
buffer
set_NewValueName
set_Version
<GenerateTypeData>b__6
HookResult
Caption
DoDeleteRegistryValue
get_IsClass
p*rP/
<WinSCPDecrypt>b__1
isKeyDown
AddUrl
).NETFramework,Version=v4.0,Profile=Client
CloseDesktop
set_Quality
PixelFormat
get_RootKey
get_MessageLoop
jYl#
MkParseDisplayName
DoDownloadAndExecute
remove_MouseClick
<lParam>5__2
get_Matches
@.reloc
ToDictionary
Width
get_ExitCode
CompareExchange
@[(q
<NewValueName>k__BackingField
slot
set_As
enumPins
newName
set_RootKeyName
get_Capacity
GetProcessesByName
set_encType
NetworkInterfaceType
WriteAllText
SpecialFolder
Byte
get_Chars
<>3__key
<keyboardHookStruct>5__12
Load
CryptoStreamMode
MoveNext
GetMonitors
cPins
Conversions
DataProtectionScope
SetOutputFileName
System.Collections.Generic.IEnumerator<System.String>.get_Current
get_LastError
GetCreateRegistryKeyResponse
unkPtr
set_SnapshotResolution
DeleteRegistryValue
get_Output
<ImageIndex>k__BackingField
DynamicMethod
DoDownloadFileCancel
MakeGenericMethod
iavs
macAddress
playList
filters
System.Collections.Generic.IEnumerable<System.String>.GetEnumerator
rootKeyName
set_IsKeyUp
set_NeedsInstanceParameter
set_Win32NT
<genArgs>5__1
<KeyPath>k__BackingField
/!/1/>/
MessageBox
LastError
InvokeKeyDown
Finalize
System.Drawing
get_Location
&rt
System.Collections.Generic.IEnumerable<System.Type>.GetEnumerator
<LocalAddresses>k__BackingField
IsMouseKeyDown
FileClose
InvalidDataException
maxblocks
Target
parent
logins
SetTcpEntry
NewValueName
, r
get_Number
Directory
subkeycount
FrameworkDisplayName
! !"!y!
set_HardwareId
region
scanCode
xClient.Core.Compression
FreeHGlobal
get_LocalAddresses
MakeArrayType
get_Item
GetGenReader
set_Application
InternalsVisibleToAttribute
get_Block
fuState
FileStream
WriterMethodInfo
get_VideoResolution
$3C374A40-BAE4-11CF-BF7D-00AA006946EE
RuntimeCompatibilityAttribute
msvcrt.dll
get_FieldType
set_CreateNoWindow
Assembly
X(@
GetFiltergraph
i- r
Srb?
1.3.0.0
Unsubscribe
, r
Subtract
CreateFilter
FieldAttributes
OnUp
OldValueName
set_Country
lpwTransKey
remove_MouseDownExt
get_Path
Action
get_EightPointOneOrHigher
hidden
get_SnapshotResolution
GetEventHandle
<IsDisposed>k__BackingField
Synchronized
$!$:$@$Y$f$
WindowsIdentity
get_IsConnected
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
set_IsError
AllocCapFile
Open
GetHdc
RegistrySeeker
Size
PostMessage
hookId
$B196B28B-BAB4-101A-B69C-00AA00341D07
lValue
WindowsBuiltInRole
get_IsSealed
get_IsMouseKeyUp
ChangeRegistryValue
Activator
SortFileTimeAscendingHelper
remove_PlayingFinished
CryptHashData
Hidden
$29840822-5B84-11D0-BD3B-00A0C911CE86
QueryPinInfo
<Action>k__BackingField
InstallPath
hDesktop
hostname
get_DriveType
i}#
hMod
<>m__Finallya
get_Type
sourceKey
pbData
_pressedKeys
!Xo#
status
remoteadresses
get_CodePage
m}o
get_Lat
Clear
set_MessageboxIcon
targetStream
m_Procedure
riid
DoRenameRegistryValue
GetProcesses
<>m__Finally4
unixTime
<>m__Finally8
set_version
get_IsKeyUp
$93E5A4E0-2D50-11d2-ABFA-00A0C9C6E38D
IPHostEntry
get_CrossbarVideoInput
GetMouseListener
Callvirt
set_Files
DoCreateRegistryKey
get_InstalledUICulture
HEADER_SIZE
get_BaseAddress
FileOpen
passwordField
Ldflda
<MessageboxIcon>k__BackingField
uMapType
op_GreaterThanOrEqual
set_Height
xClient.Core.Packets.ServerPackets
GetPathRoot
SetAuthenticationSuccess
param
get_BytesReceived
InvalidCastException
MouseClick
RootKey
Ldarg_1
IPAddress
WebClient
IsModifierKey
set_Browser
get_MonitorIndex
add_MouseDoubleClick
get_DriveDisplayName
RemotePorts
_logFileBuffer
ExtensionAttribute
ResourceManager
Show
m_typeIDMap
filessize
<DownloadURL>k__BackingField
get_Description
UnsafeStreamCodec
GetResponse
set_Handled
get_Lon
GetPasswordsResponse
lNoNotifyFlags
DisplayCrossbarPropertyPage
get_Files
dwRop
IsGenerated
GetDirectories
hotkeys
ArgumentException
videoResolution
z(,
set_DeserializerSwitchMethodInfo
.NET Framework 4 Client Profile
"XZ
snapshotResolution
ReadByte
$6A2E0670-28E4-11D0-A18c-00A0C9118956
System.Resources
MessageBoxOptions
set_LocalPorts
set_ImageIndex
set_Priority
dwFlags
get_MaxBlocks
IComparable
Interlocked
AllocHGlobal
GetCurrent
hostsManager
+ uO
<Region>k__BackingField
<scanCode>5__14
AssemblyCopyrightAttribute
-< (<
Mr>?
Message
<ch>5__16
GetImageEncoders
set_Y
add_KeyPress
setLastDirectorySeen
set_OldKeyName
image
BitmapData
get_HttpOnly
outputPin
fWriteHistory
desiredAccess
startIndex
streamConfig
GCHandle
inStream
0A[i +
dwDataLen
defaultValue
HttpWebResponse
start
<chars>5__8
DeleteFile
ri3
pcchCanonicalized
outputPinIndex
FileNotFoundException
Ldlen
Persistent
12.0.0.0
KeyPressEventArgs
pEvCode
CryptDestroyHash
IndexOf
ElapsedEventArgs
IList
ManagementObjectEnumerator
GetProcessesResponse
Close
ur.@
ObjectDisposedException
s_emptyByteArray
Space
~?bu_
get_UnicastAddresses
SortFileTimeAscending
QueryVendorInfo
{rR@
file
Predicate`1
GetGenericTypeDefinition
apPin
get_FramesReceived
DoRenameRegistryKey
moniker
X {
Read
GetSubKeyNames
AdviseTime
+ -
httpRealm
$AFA0DC11-C313-11D0-831A-00C04FD5AE38
Password
Ldarga_S
set_nextId
get_SetLastDirectorySeen
Country
get_Value
lpbKeyState
<Output>k__BackingField
set_IsMouseKeyDown
set_Arguments
SetCursorPos
parentPath
HasMoved
set_Interval
get_EightOrHigher
KeyPress
get_id
TKey
AddRange
,j(c
gAMA
resolution
EventFacade
SetCurrentCrossbarInput
SocketType
get_RemotePorts
Compression
wVirtKey
GetConnectedMediaType
frameRate
filetime
SampleSize
ProcessKey
rootTypes
GenerateDynamicDeserializerStub
Ceiling
DoChangeRegistryValue
.cctor
AsyncCallback
FileSystemInfo
get_OldKeyName
mscorlib
GetArrayRank
FileMode
$56A8689F-0AD4-11CE-B03A-0020AF0BA770
YUYV
RegistryValueKind
RegionName
<NeedsInstanceParameter>k__BackingField
get_TypeMap
DoUploadAndExecute
set_Action
connectionId
lpvParam
GetMethod
containerType
IOException
DeserializerSwitch
set_KeyDown
System.Collections.IEnumerator.Reset
newpath
SourceObject
<GetFormattedKeyValues>d__5
list
FileName
Kernel32.dll
Kill
<>2__current
Guid
lpSTATURL
pErrorLog
$56A868B1-0AD4-11CE-B03A-0020AF0BA770
ProcessWheel
RemoteAdresses
Disconnect
pwszBuff
sync
ipVersion
](6
rate
ManagementBaseObject
pass
<Processname>k__BackingField
3l4x4
UnicastIPAddressInformationCollection
codecBuffer
screenNumber
System.Reflection
clock
set_ValueName
operatingsystem
version
RuntimeTypeHandle
PrP?
method
BytesReceived
<k>5__6
get_LastAccessUTC
IOControlCode
Helpers
profilePath
get_IpAddress
set_MessageboxButton
UInt64
search
sender
ToInt64
GetMethods
<ValueName>k__BackingField
Ldtoken
vendorInfo
wFlags
Primitives
Ldfld
CurrentBlock
Append
get_Kind
ContainsKeyChar
isKeyUp
<IsError>k__BackingField
OnDoubleClick
RegistryView
rawHosts
op_Equality
Instance
get_Priority
cButtons
Tailcall
Encoder
ToUnicodeEx
X j
rp<
countrycode
get_DesiredSnapshotSize
keyChar
listSize
MapVirtualKeyEx
set_Padding
j_ea*
StreamReader
get_LastUserStatus
AssemblyDescriptionAttribute
IsModifierKeysSet
<>l__initialThreadId
<Filename>k__BackingField
Folders
GetResponseStream
rb/
set_Output
Browser
get_DeserializerSwitchMethodInfo
dwExtraInfo
keyData
CopyKey
Height
<Id>k__BackingField
set_RootKey
pocsTitle
GetCreateRegistryValueResponse
- r
monikerString
<PathType>k__BackingField
actualFrameRate
processname
REGISTRY_VALUE_DELETE_ERROR
j/ r
GetMaxAvailableFrameRate
filter
set_timeCreated
CompareFileTime
set_HttpOnly
Expires
DataContractJsonSerializer
get_hostname
set_SevenOrHigher
Expired
get_IsGenerated
UnlockBits
RemoteAddress
lpFileName
Flags
startTime
Emit
downloadurl
OpCodes
DirectoryNotFoundException
get_Message
!This program cannot be run in DOS mode. $
System.Collections.Generic.IEnumerator<System.Type>.get_Current
TypeMap
; </<;<e<
callback
UriKind
File
CurrentPath
SocketFlags
,- t^
ZX
InvokeKeyUp
ppmk
Dispose
Grabber
c i
get_PID
EncodeZigZag64
!""4":"y"
GetHashCode
<ParentPath>k__BackingField
ProcessWindowStyle
xClient.Core.ReverseProxy.Packets
GetCurrentProcess
messageboxbutton
get_RemotePort
+jX(
TrimStart
lpszDevice
Binder
set_RunningOnMono
get_Hidden
timestamp
VideoCapabilities
pinIndex
Z
System.ComponentModel
GetValue
$56a86897-0ad4-11ce-b03a-0020af0ba770
set_Handle
<scanCode>5__7
get_Key
<CustomMessage>k__BackingField
ToPointer
xr@@
System.Runtime.InteropServices.ComTypes
get_Millisecond
milliSecsTimeout

Microsoft.Win32
get_KeyName
get_FileCount
GetAuthentication
ImageCodecInfo
controlFlags
stopEvent
<KeyName>k__BackingField
get_Ordinal
<RootDirectory>k__BackingField
ContainsSubKey
BSJB
get_Scan0
GenerateWriterMethod
_readStreamLock
get_MainModule
.rb>
SubType
_ea*
set_Exiting
anyKeyInTheExclusiveOrSet
op_Inequality
get_Browser
IPAddressInformation
get_Stride
set_PCName
BitConverter
ToLocalTime
reason
SeekOrigin
keyVal
xClient.Core.MouseKeyHook
Strings
Block
Delete
PCName
IntPtr
thread
<flags>5__3
Ir&?
qG:8
caption
ParameterBuilder
phProv
Screen
add_PlayingFinished
webcams
<NewPath>k__BackingField
<Port>k__BackingField
Hostname
number
gdi32.dll
+-
KeyEventHandler
DoStartupItemRemove
_encodeBuffer
get_Param
get_Timezone
GetWebcams
GetSyncSource
_ignoreSpecialKeys
System.Linq
AMMediaType
set_City
Offset
System.Collections.Generic.IEnumerable<xClient.Core.MouseKeyHook.KeyPressEventArgsExt>.GetEnumerator
FixedSizeSamples
KeyListener
GenerateTypeData
wMsg
set_SystemInfos
IDictionary`2
*b~*
Callback
<DriveDisplayName>k__BackingField
set_WorkingDirectory
get_FileName
FileInfo
InvalidOperationException
AssemblyConfigurationAttribute
kind
JpgCompression
poszFilter
pathtype
xClient.Core.Registry
pchEaten
states
IsMouseDown
set_LocalPort
BlockCopy
get_IsGenericType
TimeSpan
OpenShare
pSteppingDelta
<Folders>k__BackingField
Current
Mutex
,6~)
-8~
SizeOf
States
M uQ
output
- rP
UnhookWindowsHookEx
pszProvider
FrameRate
set_hostname
messageboxicon
phHash
folders
<.cctor>b__0
<RemoteAdresses>k__BackingField
prB/
r8:
set_Key
(l
fileSinkFilter
UnescapeDataString
endIndex
get_NewLine
EndFlush
MouseButtons
clear
ptr2
SetWindowsHookEx
ISerializable
Subscribe
<Passwords>k__BackingField
Boolean
add_MouseWheel
SetFilter
i- rp#
userTypeSerializers
set_VistaOrHigher
set_ErrorMsg
<Key>k__BackingField
MethodInfo
Port
hFile
REGISTRY_KEY_CREATE_ERROR
StringComparison
writer
m_serializerSwitch
CompilationRelaxationsAttribute
CreateSession
nY2
* 0
,
<Country>k__BackingField
OpenDesktop
ppUnk
get_Is64BitOperatingSystem
MouseWheel
MemoryStream
set_Index
Value
HotKeysActivated
pceltFetched
disabledHosts
HttpWebRequest
X +>
AddSourceFilterForMoniker
get_MessageboxButton
r}3
Multiply
DoClientReconnect
Random
bytes
, ~
get_StandardError
ThreadPool
set_KeyPath
CreateMouseListener
add_Elapsed
add_KeyUp
SetSuspendState
p r+
Create
SetStatusFileManager
$C6E13380-30AC-11D0-A18C-00A0C9118956
oldFileName
get_MimeType
<Quality>k__BackingField
configdir
ExecuteCommand
tr(@
HostKey
set_MonikerString
set_CurrentPath
GetWriterMethodInfo
f_}]
HasSubKeys
IEND
get_Region
Kind
Microsoft.VisualBasic
B3ByB
$C6E13340-30AC-11d0-A18C-00A0C9118956
CHARBUFFERLEN
startCookie
$56A86891-0AD4-11CE-B03A-0020AF0BA770
filterInfo
isError
ThreadStart
m_charBuffer
Ldelem
context
SetResolution
set_UseShellExecute
set_IsKeyDown
Clicked
STATURLEnumerator
point
set_RemotePorts
<serializedType>5__2
cY10
*:~
DeclareLocal
bufferThem
bytesReceived
GetAllNetworkInterfaces
IsConnected
NeedsInstanceParameter
get_Handle
get_IsInvalid
cZjX}
V:>zp3
Concat
<Matches>k__BackingField
usernameField
StringBuilder
get_Data
&~R
set_Monitor
addQuotes
Switch
set_HasSubKeys
Stream
IWebProxy
(
p*rB/
add_KeyDown
auds
<>7__wrapc
<Path>k__BackingField
wr:@
_encodedFormat
GetKeyloggerLogs
)
DoDownloadFile
CompilerGeneratedAttribute
City
<MonikerString>k__BackingField
Main
get_IsValueType
get_RegFilterCollection
WorkerThread
NewKeyName
get_AddressList
get_timeCreated
-)r
set_Username
Unbox_Any
oneShot
&r2>
DownloadFile
MakeByRefType
OpCode
set_guid
SecurityException
Copy
ReadStream
get_IV
get_Serializer
get_EnumUrls
streamConfigCaps
timeCreated
GetTempPath
System.Text
GetName
get_ByteBuffer
Exiting
Item
get_ID
<PCName>k__BackingField
Lr8?
get_Command
System.Collections.Generic.IEnumerator<System.Type>.Current
MessageBoxDefaultButton
keyf
IsExcludedKey
BeginConnect
RegistryEditor
,& o
get_Ip
get_Id
flags
RedirectOutputs
Quality
<Y>k__BackingField
get_Delta
FromTicks
DictionarySerializer
GetElementType
%r,>
ManagementObjectSearcher
firstCharRead
DoShellExecute
Stopwatch
Files
nXi
_mEvents
$0579154A-2B53-4994-B0D0-E773148EFF85
datetime
set_LastError
source
EndOfStream
readBytes
input
localports
appendText
&(Y
m_userTypeSerializers
SignalToStop
enumerator
format
get_CurrentManagedThreadId
m_typeMap
SetStatus
LocalBuilder
get_Action
+' u_
GetDownUpEventArgs
GetDesktop
get_HostKey
GetDirectory
ArraySerializer
bj`m
get_LocalIndex
filterName
hS*"
(Y
get_ConnectionId
CheckIfCrossbarAvailable
dwFileAttributes
FieldInfo
<>7__wrap1a
WaitHandle
ro
get_FileVersion
SystemException
inputPinCount
FromBinary
minValue
videoInput
$6B652FFF-11FE-4FCE-92AD-0266B5D7C78F
oldName
sizeCompressed
set_Region
EventWaitHandle
TryGetValue
String
ImageLockMode
GetCurrentActualFrameRate
ExplorerUrlHistory
_CorExeMain
DebuggerNonUserCodeAttribute
IComparer`1
DeleteUrl
EncoderParameters
SetKeepAliveEx
Filename
AddUrlAndNotify
chars
get_Secure
_timerFlush
StopWhenReady
nGP
KeyValuePair`2
LParam
QueueUserWorkItem
IPInterfaceProperties
get_CurrentPath
Command
set_timesUsed
GetExtension
GetTimestamp
<field>5__2
set_Processes
get_LastLocated
rootDirectory
get_Hours
_read
IPGlobalProperties
GetPixelFormatSize
<OldKeyName>k__BackingField
Microsoft.VisualBasic.CompilerServices
Timezone
<HasSubKeys>k__BackingField
block
ToArray
Enum
DoCreateRegistryValue
pdwAdviseCookie
EditorBrowsableAttribute
DateTimeKind
cacheSnapshotCapabilities
RemoveFilter
<fields>5__1
AppendFormat
xClient.Properties.Resources.resources
FindAll
System.Collections.Generic.IEnumerator<xClient.Core.MouseKeyHook.KeyPressEventArgsExt>.get_Current
get_Encoding
Keys
set_Attributes
localAddress
get_CurrentBlock
XmlElement
scanArea
DoClientDisconnect
get_IsSerializable
SerializerSwitchMethodInfo
get_DriveFormat
set_StandardErrorEncoding
EnumPins
compressible
?C?Z?{?
get_LocalAddress
EnumMediaTypes
LocalAddress
delta
get_IsGenericMethod
Resolution
isMouseDown
needToDisplayPropertyPage
IStaticTypeSerializer
2No longer supported. Use AverageFrameRate instead.
_prc
DesiredSnapshotSize
vKey
CreateBindCtx
GetEncoder
<lParam>5__11
shell32.dll
get_FullName
set_passwordField
Count
FirstOrDefault
BeginSeeking
get_timePasswordChanged
Processes
resolutionToSet
isMouseKeyUp
Dictionary`2
GetFileNameWithoutExtension
BeginInvoke
ToCharArray
remove_KeyUp
ptr1
@ @E@R@
get_OSVersion
GetLastInputInfo
get_Webcam
CanCallDirect
IUrlHistoryStg2
urlHistory
get_OperationalStatus
CallingConvention
set_ImageQuality
. @ Y ]
AddressFamily
Ldloc_S
get_IsEnum
<HandleGetStartupItems>b__21
CrossbarVideoInput
DirectoryInfo
_lastWindowTitle
hdcSrc
Output
add_MouseUpExt
dimensions
j j
RuntimeHelpers
<.ctor>b__1
<.ctor>b__0
<.ctor>b__2
FilesSize
set_encryptedUsername
r
get_Country
get_Platform
rO>
REGISTRY_KEY_DELETE_ERROR
pcname
FindInterface
get_DesiredFrameRate
set_CustomMessage
BaseListener
videoStreamConfig
<wasKeyDown>5__4
get_TextInfo
query
<Processes>k__BackingField
OleCreatePropertyFrame
- rC
,K(c
GetTypeID
Object
timerFlush_Elapsed
IDAT8O]
IsMouseKeyUp
@[l(*
{M
Procedure
get_LocationCompleted
<PID>k__BackingField
XmlNode
set_Lon
IOrderedEnumerable`1
GetFileName
Webcam
ComVisibleAttribute
3System.Resources.Tools.StronglyTypedResourceBuilder
Region
get_Hostname
Name countryCode
QueryUrl
get_Index
WaitForStop
get_IsArray
-jr?
Render
-(~
GenericSerializer
hive
GetTypeData
ObsoleteAttribute
SerializerSwitch
BeginReceive
Select
CustomMessage
Index
<States>k__BackingField
QrV?
KeyPressEventHandler
get_logins
EditorBrowsableState
get_Password
SnapshotCapabilities
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
RedirectStandardError
ContainsValue
index
CultureInfo
celt
-
get_Zip
<>7__wrap3
Stind_Ref
<>7__wrap7
- s1
GetStartupItems
Jr,?
GetConnectionsResponse
CodeGenContext
m_DoubleDown
set_EightPointOneOrHigher
get_Target
_staturl
RegValueData
SelectSingleNode
FindPin
nHeight
pTime
set_Block
KEEP_ALIVE_TIME
<>7__wrapb
DoAskElevate
rs3
GetDefault
EnumDesktopWindows
sRGB
IsNullOrEmpty
!U"^"
s(
DesiredFrameRate
set_LocalAddresses
System.Collections.IEnumerator.get_Current
Exit
Conv_I4
shlwapi.dll
s7
Status
set_Authenticated
z~)
destKey
3e+?
DeleteValueSafe
System.Text.RegularExpressions
BindToObject
rLC
DoDownloadFileResponse
genType
flushInterval
get_Minute
sort
MaxBlocks
<fuState>5__15
XmlTextReader
errorMsg
$56A86892-0AD4-11CE-B03A-0020AF0BA770
lInstanceData
<MaxBlocks>k__BackingField
z s
typeMap
GetMode
set_Description
CodeImage
AccountType
Frame
uAction
fCc%
snapshotCapabilities
OnClick
enumFilters
field
<SystemInfos>k__BackingField
add_MouseUp
<ch>5__9
reserved
SystemTimeToFileTime
GetCurrentCrossbarInput
uScanCode
wqww
+(~
WaitCallback
CreateClassEnumerator
OperatingSystem
set_Number
xClient.Core.MouseKeyHook.WinApi
<LocalPorts>k__BackingField
pinIndexRelated
set_StartupItems
mediaType
stepSize
EventHandler`1
remove_MouseMoveExt
OnMove
Alloc
get_IsInterface
set_Width
GetValueNames
Xsk
GetDrivesResponse
System.Threading
collection
RenameRegistryKey
get_Month
msTimeout
Vrt?
TypeData
get_ContainsGenericParameters
MessageBoxIcon
ppbc
UnhandledExceptionEventHandler
<>7__wrap1b
SampleCB
(
2-2U2l2
IsKeyDown
ObjectSerializer
DesiredFrameSize
GeoInfo
<RootKey>k__BackingField
set_X
GetForegroundWindow
set_Serializer
baseFilter
GetPinCapabilitiesAndConfigureSizeAndRate
ReaderMethodInfo
remove_KeyDown
set_Hostname
r|=
newFileName
get_NeedsInstanceParameter
set_FullName
Match
set_DesiredFrameRate
IComparer
EightOrHigher
yrF@
AddFilter
GetCameraProperty
Buffer
get_Current
set_Org
set_IpAddress
set_Resolution
set_ProvideSnapshots
i-)r
nMaxCount
ole32.dll
get_NetworkInterfaceType
Microsoft.Win32.SafeHandles
SetCompatibleTextRenderingDefault
wParam
get_disabledHosts
Execute
GetCameraPropertyRange
ppvOut
, r
AesCryptoServiceProvider
RenderStream
set_Ip
libPath
GetValueSafe
CreateKeyListener
get_AllScreens
GetGenWriter
set_Id
get_IsDisposed
KEEP_ALIVE_INTERVAL
XmlObjectSerializer
NotSupportedException
GetByteCount
set_IV
mode
\vZ"ZB!
set_ID
renderer
TypeID
m_Handle
System.Drawing.Imaging
get_XpOrHigher
+
+
Next
EndsWith
remove_VideoSourceError
get_SevenOrHigher
rootKey
(<
category
,8(
maxAvailableFrameRate
GetSystemInfoResponse
+#
Empty
dwProvType
get_Seconds
<AccountType>k__BackingField
IsAssignableFrom
set_Timestamp
GetWritableRegistryKey
get_Ticks
ArgumentNullException
maxValue
filtersFetched
get_Major
MakeGenericType
get_ImageQuality
+ r"#
xClient.Core.NetSerializer
Point
get_BaseType
sr"@
HotKeys
length
StructureToPtr
remotepath
_enumerator
RootKeyName
get_Is64Bit
m_SingleDown
<GetFormattedKeyValues>b__1
Pause
localPort
DeleteRegistryKey
hKey
set_ConnectionId
set_Item
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
HighlightSpecialKeys
ToUpper
quality
ReadToEnd
_inputWriter
data
OnKeyDown
<Hidden>k__BackingField
deviceMoniker
jo#
*s?
DoProcessStart
<Username>k__BackingField
Exception
set_IsMouseDown
get_Image
<IDs>k__BackingField
remove_MouseWheel
orKeySet
TenOrHigher
bufferLen
nWidth
IndexOutOfRangeException
GetKeyboardState
poctNotify
<RemotePorts>k__BackingField
& os
_encoderInfo
GetGenericArguments
OperationalStatus
Connect
WriteByte
GetTypeFromHandle
IAsyncResult
set_Value
set_BlockSize
remove_MouseUp
FileAttributes
set_TenOrHigher
Castclass
GetEnumerator
_imageQuality
SymmetricAlgorithm
ClearHistory
<MessageboxButton>k__BackingField
searchTerm
element
GetDelegateForFunctionPointer
MessageBoxButtons
NewPath
or @
Int16
1 r
get_Host
Xn?O
Ldind_Ref
<SerializerSwitchMethodInfo>k__BackingField
Graphics
DoShellExecuteResponse
set_httpRealm
GetKeyState
SetBufferSamples
XmlNodeList
~
get_DocumentElement
get_Titles
PrimitivesSerializer
connected
l
System.Runtime.Serialization
get_StandardOutput
& rzG
$C6E13370-30AC-11d0-A18C-00A0C9118956
pr4/
p*r(/
rM
remove_MouseDoubleClick
GetDirectoryResponse
~+
FileAccess
~)
Stack`1
GetProcessById
lpFileTime
DecodeZigZag32
get_ProcessName
set_Position
rW
get_LocalEndPoint
TemporalCompression
LoadLibrary
get_SerializerSwitchMethodInfo
*&r+
text
System.Runtime.InteropServices
0 r
Semaphore
unconnected
<City>k__BackingField
Math
UnmanagedFunctionPointerAttribute
keys
GetTime
buttons
numbytes
get_OperatingSystem
Decoder
advapi32.dll
o
Client.Tests
GetMonikerString
FormatType
j}c
Deserialize
get_RunHidden
System.Runtime.CompilerServices
FreeCoTaskMem
( &
CS$<>9__CachedAnonymousMethodDelegate2
CS$<>9__CachedAnonymousMethodDelegate3
CS$<>9__CachedAnonymousMethodDelegate4
CS$<>9__CachedAnonymousMethodDelegate5
CS$<>9__CachedAnonymousMethodDelegate6
CS$<>9__CachedAnonymousMethodDelegate8
GetWritePrimitive
memcpy
FormatterServices
B h[J
processes
timePasswordChanged
SByte
z&r
set_RedirectStandardInput
Move
<underlyingType>5__1
GetDeleteRegistryValueResponse
zs+

filterState
<MonitorIndex>k__BackingField
get_Encoder
,Ysi
ReadObject
(Z
frame
get_Resolution
set_Filename
outStream
packet
Source
oleaut32.dll
set_logins
<HostName>k__BackingField
get_IsNonChar
GetStartupItemsResponse
WaitOne
- sz
get_timeLastUsed
get_ImageIndex
newFilePath
add_MouseMoveExt
_encoding
state
timeLastUsed
get_Client
DeleteSubKeyTree
E,F>F\FlF2
psfi
GetAuthenticationResponse
.
pTcprow
Shell
GetWebcamsResponse
get_IsTerminating
ReadVarint32
IDisposable
<Message>k__BackingField
Exists
System.Security.Principal
get_RemoteAdresses
hSemaphore
set_LastUserStatus
Titles
set_DownloadURL
IDynamicTypeSerializer
GetFormat
graphBuilder
retInterface
Ldloca
CreateSubKey
PowerState
<Number>k__BackingField
set_Mode
_urlHistoryList
OpenRead
subscribe
<HandleGetDrives>b__18
ValueCollection
set_IDs
ClassID
uCode
AssemblyProductAttribute
rY4
Timestamp
<Type>k__BackingField
Equals
System.Net.NetworkInformation
set_Titles
json
<Value>k__BackingField
set_MonitorIndex
username
cacheCrossbarVideoInputs
WritePrimitive
set_Zip
zrL@
get_SystemDirectory
set_Message
DownloadURL
scrollDown
MulticastDelegate
MouseDown
lpString
pszContainer
ComputeHash
QueryInternalConnections
PathTooLongException
GetConnections
AForge.Video.DirectShow
Number
value
Bitmap
<LocalPort>k__BackingField
LastUpdated
-r\>
DriveInfo
m_deserializerSwitch
get_Hour
get_CanWrite
HttpOnly
get_Quality
4V5z5
Brtrue_S
webcam
StartsWith
UnauthorizedAccessException
custommessage
EndReceive
hHash
dwhkl
get_Org
get_UtcNow
set_IsDisposed
_b`
RunHidden
bufferSize
streamReader
AddSourceFilter
Sort
get_Exists
&~
IsInRole
CreateEncryptor
~rd@
SimulateTrigger
get_Status
r (
accounttype
ProtectedData
<Tag>k__BackingField
isCrossbarAvailable
#GUID
OrJ?
- rH
DVSD
set_Kind
DoEvents
arenaOpt
IsWindowVisible
remove_SnapshotFrame
<GetGenWriter>b__5
GetWindowThreadProcessId
get_KeyPath
$56a868c0-0ad4-11ce-b03a-0020af0ba770
System.Net.Sockets
- rm
imageSize
get_Source
DefaultMemberAttribute
$56A86893-0AD4-11CE-B03A-0020AF0BA770
VideoSourceError
command
$3C374A41-BAE4-11CF-BF7D-00AA006946EE
set_SetLastDirectorySeen
get_PixelFormat
lpfn
SnapshotFrame
get_IDs
ToUInt16
X +=
set_CountryCode
pMin
DoCloseConnection
ApplicationSettingsBase
CheckBlock
get_AccountType
Nullable`1
FileCount
set_Image
GetFiles
ArgumentOutOfRangeException
lplNoNotifyFlags
GetEncoding
get_CheckBlock
capabilities
Enqueue
dwOutBufLen
needToSetVideoInput
Timer
get_HasValue
get_GatewayAddresses
Thread
whichMethodToCallback
X +|
X +a
set_PathType
Release
X +h
Kr2?
NullReferenceException
SetDefaultSyncSource
SetValue
get_DownloadURL
keepAliveTime
Encoding
get_LogDirectory
sampleTime
pinOut
Ldloca_S
hosts
Name regionName
Skip
,@ r
GetFields
GetPages
SetAttributes
IEnumerable`1
SystemTime
WebResponse
QueryDirection
EnumFilters
valueKind
nYSrc
$55272A00-42CB-11CE-8135-00AA004BB851
set_timePasswordChanged
xClient.Core.Recovery.Browsers
BindToStorage
System.Collections.Generic.IEnumerator<xClient.Core.MouseKeyHook.KeyPressEventArgsExt>.Current
guid
propertyName
get_StandardInput
GetIPProperties
timesUsed
Rectangle
set_Matches
<HandleGetStartupItems>b__22
get_CrossbarPinInfo
<HandleGetStartupItems>b__20
AddrOfPinnedObject
,(~
GetFrameRateList
get_TenOrHigher
MonikerString
vr4@
host
DoClientUpdate
parentWindow
get_IsRoutedTo
set_DesiredFrameSize
ReleaseHandle
socket
extension
oldValueName
get_InnerXml
pinCategory
keyDown
Replace
<wParam>5__10
Zero
_pressedKeyChars
ReleaseHdc
z~
RemotePath
ManagementObjectCollection
<AddDefaultValue>b__0
get_IsMouseKeyDown
get_MachineName
add_SnapshotFrame
lpInitData
get_RootDirectory
<Kind>k__BackingField
set_GeoInfo
CryptCreateHash
TypeSerializer
GetNotifyFlags
get_MessageboxIcon
SevenOrHigher
DeleteSubKeyTreeSafe
get_OSSupportsIPv6
set_AddToStartupFailed
get_httpRealm
WriteFile
rhG
wincx
KeyEventArgs
FILETIME
get_Folders
get_formSubmitURL
GetTypeDataForCall
System.Collections.Generic
GatewayIPAddressInformationCollection
Serializer
<Match>k__BackingField
count
SHA256Managed
Compare
get_VolumeLabel
get_InnerText
pTcpTable
Queue`1
MouseDownExt
Culture
set_RemotePort
set_OldValueName
System.Windows.Forms
Unprotect
FullName
get_CountryCode
fileCount
get_guid
lpSystemTime
CharBuffer
<DisableScreensaver>b__0
OnSnapshotFrame
startupitems
WriteLine
DoKeyboardEvent
System.Drawing.Bitmap
set_HostKey
lEvCode
WaitForCompletion
typeID
<StartupItems>k__BackingField
get_IsError
<IsMouseDown>k__BackingField
s_stringHelper
<FileCount>k__BackingField
Array
GetFieldInfos
other
get_Attributes
GetRegistryKeysResponse
LoadXml
<X>k__BackingField
set_RemotePath
set_Password
clicks
GeneratedCodeAttribute
disposing
set_Port
GetDoubleClickTime
get_NewPath
Route
Remove
blockNumber
get_MainWindowTitle
RunningOnMono
&*V
get_passwordField
<Block>k__BackingField
LastLocated
firefoxProfilePath
<GetGenReader>b__7
set_Encoding
r(<
Sleep
uVirtKey
<Text>k__BackingField
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
2017-12-31 15:55:30 2017-12-31 15:55:30

2 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
2017-12-31 15:55:30 2017-12-31 15:55:30

6 Summary items with data

Files

C:\Users\Seven01\AppData\Local\Temp\TeamViewer6_Hooks.log

Read Files

Nothing to display

Write Files

C:\Users\Seven01\AppData\Local\Temp\TeamViewer6_Hooks.log

Delete Files

Nothing to display

Keys

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

Read Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

Write Keys

Nothing to display

Delete Keys

Nothing to display

Mutexes

Local\TeamViewer_LogMutex

Resolved APIs

kernel32.dll.InitializeCriticalSectionAndSpinCount

Execute Commands

Nothing to display

Started Services

Nothing to display

Created Services

Nothing to display

#infosec #automation

TheSystem Itself @ 2017-12-31 16:03:08