UCCounting.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 0/56 Related 2012
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 338.02 KB (346128 bytes)
Compile time: 2015-05-14 07:55:40
MD5: 9cdcc960d70796918cb31145f74707fd
SHA1: 99b7fe5a6b9d663522e98f76ebabb6ed8e82e673
SHA256: a7d969a8c52a55bdf3bd0eb14082f238f7047a55583fa1cefe8cb204d2b4482a
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 5 import resource debug relocation security
First submission: 2016-10-06 13:24:05
Last submission: 2016-10-06 13:24:05
Filename detected: - UCCounting.exe (1)
URL file hosting
hXXp://liu.lge.com/LGUpdateCenter/Update/VITA/0009/data/UCCounting.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2016-10-05 23:07:43 [0/56] VirusTotal
PE Sections 1 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0xbb84 48128 a7a0675a7fd929103024a6ad4881567b a67d8ee4fb47547180d2c6fc25272469ca80d792
.rsrc 0xe000 0x46920 289280 9305841442afac73a1395de961624166 6eb26618d1ab03bb475dd4420cc87aab4d419658
.reloc 0x56000 0xc 512 af901b0de5b52aa641f485b80c44db5c 7bb95930e4fd461e6580f253868023524396e0fd
PE Resources
Name Offset Size Language Sublanguage Data
RT_ICON 0x52328 9640 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_GROUP_ICON 0x548d0 76 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_VERSION 0xe1a8 704 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: Copyright \xa9 2013
Assembly Version: 1.0.0.0
InternalName: UCCounting.exe
FileVersion: 1.0.0.0
FileDescription: UCCounting
OriginalFilename: UCCounting.exe
Translation: 0x0000 0x04b0
ProductVersion: 1.0.0.0
ProductName: UCCounting
XOR
No XOR informations found in this file.
Signature
MD5: 6613c4a26196c6d3c4883d6ccdd7574d
SHA1: a303e0d7d6ce06d1194843795514d0f6e5d46800
Block Size: 7696
Virtual Address: 338432
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: Data
\INFO\server.dat
FIle type: XML
\Users\Counting.xml
\Temp.xml
System.Xml
FIle type: Library
mscoree.dll
ADVAPI32.dll
IP Found
No IP detected
URL(s)
http://ts-ocsp.ws.symantec.com07
https://www.verisign.com/cps0
http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
https://d.symcb.com/cps0%
http://sf.symcb.com/sf.crt0
http://crl.thawte.com/ThawteTimestampingCA.crl0
http://ocsp.verisign.com0
https://www.verisign.com/rpa
http://
http://ocsp.thawte.com0
http://sf.symcb.com/sf.crl0f
http://crl.verisign.com/pca3-g5.crl04
https://www.verisign.com/rpa0
http://logo.verisign.com/vslogo.gif0
http://logo.verisign.com/vslogo.gif04
http://sf.symcd.com0&
http://liu.lge.com
https://d.symcb.com/rpa0
http://ts-aia.ws.symantec.com/tss-ca-g2.cer0<
code
lgsiu
XP64
installed
InternalName
notice
HKEY_USERS\.DEFAULT\Software\LGE\LG Update Center\Parameters\DirPath
REG_QWORD
dword
Translation
root/system/info
root/notice/item[@id='
W95
SELECT * FROM Win32_OperatingSystem
string
msg=
CHK
W98
\Users\Counting.xml
CHS
CHT
***
bit
FIN
root/install[item = 0]/item
LegalCopyright
name
W10
HKEY_CLASSES_ROOT
<<<Obsolete>>
W81
REG_SZ
VarFileInfo
REG_BINARY
DEU
UCCounting.exe
Version
W2000
UCCountin
cnt
PTG
projectname
HUN
Copyright
1.0.0.0
version
/counting/LUCCountingSetDB.aspx
expandstring
{0:X4}
root/error
TRK
ENG
\Temp.xml
qword
yyyy-MM-dd HH:mm:ss
CSY
key
English
POST
2013
\Temp.enc
ProductName
NOR
Windows
root/update/module[@id='
root/install/item[@id='
message
\enum\
bitleader
application/x-www-form-urlencoded
HKEY_PERFORMANCE_DATA
priority
start
000A
type
FRA
HKEY_CURRENT_CONFIG
0000
0001
ELL
VS_VERSION_INFO
SELECT * FROM Win32_ComputerSystem
0009
root/update[module='0']/module
HKEY_LOCAL_MACHINE
HEB
downloadcount
Assembly Version
userlanguage
BRZ
installtrycount
value
ITA
error
RUS
noticecount
PLK
classid
0012
\INFO\server.dat
HKEY_USERS
download
UCCounting
KOR
liu2
REG_MULTI_SZ
installtry
0409
DAN
liu
\LG Software\LG Update Center
StringFileInfo
root/notice[item = 0]/item
DCB00C01-570F-4A9B-8D69-199FDBA5723B
installedcount
SVE
FileVersion
&cnt=
000004b0
multistring
ProductVersion
FileDescription
date
ESN
http://liu.lge.com
binery
OriginalFilename
HKEY_DYN_DATA
HKEY_CURRENT_USER
0416
ARA
REG_DWORD
model
UCCounting.Properties.Resources
uninstall
code
bExist
GetBuffer
$dcb00d01-570f-4a9b-8d69-199fdba5723b*NETWORKLIST.INetworkConnectionEvents_Event
0V0(
LANG_AFRIKAANS
DateTime
get_UTF8
csEncrypt
+e
ERROR_REGISTRY_RECOVERED
LANG_ESN_COL
nLength
Int32
LANG_ICELANDIC
#http://logo.verisign.com/vslogo.gif0
Object
TypeIdentifierAttribute
strDestFileName
ERROR_BAD_NETPATH
ZSystem.Object, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
mscorlib
LANG_FINNISH
KEY_QUERY_VALUE
System.Runtime.Serialization.Json
LANG_YIDDISH
ERROR_CANREAD
PadRight
ComVisibleAttribute
>mn< n
set_ContentType
set_save
set_notice
get_os
get_projectname
LANG_KANNADA
ManagementObject
System.Runtime.InteropServices
3System.Resources.Tools.StronglyTypedResourceBuilder
cchName
StringToArray
LayoutKind
ERROR_FILE_NOT_FOUND
LANG_CHI_SIM
<save>k__BackingField
op_Inequality
array
+? r
Substring
WOW64_64Key
LANG_GREEK
Guid
get_notice
"W*o
$DCB0000B-570F-4A9B-8D69-199FDBA5723B
+&~b
LANG_GEORGIAN
LANG_ROMANIAN
REG_EXPAND_SZ
WriteObject
ERROR_INSUFFICIENT_BUFFER
ManagementBaseObject
LANG_PORTUGUESE
+Symantec Time Stamping Services Signer - G40
RegQueryValueExW
CryptoStream
OSRegEnumKey
index
TextReader
http://sf.symcd.com0&
CultureInfo
DecryptFile
#W A
Copyright
LANG_AZERI
get_DocumentElement
1.0.0.0
version
ERROR_REGISTRY_CORRUPT
LANG_KAZAK
RuntimeTypeHandle
System.Core
#http://logo.verisign.com/vslogo.gif04
args
OpenedExistingKey
AllAccess
222~
EncryptFile
http://sf.symcb.com/sf.crl0f
KEY_WOW64_32KEY
getOSPlatform
0r0^1 0
LANG_DUTCH
.cctor
SelectSingleNode
get_result
Stream
K
iJXO`
ArrayToString
get_model
strSourceString
get_Unicode
INetworkCostManager
(0&0$
RegOption
options
Append
ClassesRoot
RegDeleteKeyA
RSDS
RuntimeFieldHandle
LANG_CROATIAN
+http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
op_Equality
get_EnglishName
WOW64_Res
get_bit
---a
---c
LastIndexOf
<userlanguage>k__BackingField
Enum
NETWORKLIST
SECURITY_ATTRIBUTES
KEY_WOW64_64KEY
XmlElement
lpftLastWriteTime
.http://crl.thawte.com/ThawteTimestampingCA.crl0
`F~T
3130
" i
StreamReader
Registry
AssemblyDescriptionAttribute
LANG_ARABIC
Default
%VeriSign Class 3 Code Signing 2010 CA0
sy
SpecialFolder
get_priority
<classid>k__BackingField
360716235959Z0
cbData
LANG_TAMIL
KEY_SET_VALUE
INetworkConnectionEvents
sI
get_Length
RegistryValueKind
LANG_THAI
LANG_TURKISH
XmlNode
Name projectname
GetTypeFromCLSID
System.Collections
NonVolatile
install
KEY_CREATE_LINK
121018000000Z
LANG_CZECH
InterfaceTypeAttribute
AssemblyCompanyAttribute
reserved
LANG_CATALAN
GGG_
+` v
Contains
get_Is64BitOperatingSystem
KEY_WOW64_RES
KEY_ENUMERATE_SUB_KEYS
IsConnectedToInternet
OperatingSystem
lpcbSecurityDescriptor
AppendChild
CreateAttribute
Format
ValueType
System.ComponentModel
System.CodeDom.Compiler
PerformanceData
GuidAttribute
RegDeleteKey
111
get_LegalKeySizes
lpValueName
LocalMachine
HttpWebResponse
>"hcS
Enumerable
VeriSign Trust Network1:08
ToLower
Name uninstall
sClass
GetValueNames
0L0#
System.Threading
<uninstall>k__BackingField
ERROR_INVALID_PARAMETER
DataContractAttribute
get_Count
LANG_FRENCH
HKEY_DYN_DATA
System.Security.Cryptography
Reserved
6 y
LANG_NEUTRAL
hkey
Thawte Timestamping CA0
mscoree.dll
!This program cannot be run in DOS mode. $
PADPADP
AssemblyCultureAttribute
GetRegDwordValue
REG_DWORD
Sub_Result_Install
ManagementObjectCollection
File
INetworkListManagerEvents_Event
Thawte1
subKey
uninstall
OpenSubKey
g0e0*
set_uninstall
Dispose
GetValueKind
$13b3dd98-1bbf-4d22-b134-0cadc11218cc
http:// 0
.NET Framework 4.5
FromBase64String
KEY_CREATE_SUB_KEY
INetworkListManagerEvents
lpType
ComImportAttribute
AssemblyTrademarkAttribute
get_Current
OpenRead
%NETWORKLIST.INetworkCostManagerEvents%NETWORKLIST.INetworkCostManagerEvents
Path
ENCRYPT_IV
ERROR_INVALID_HANDLE
Execute
TimeStamp-2048-20
<projectname>k__BackingField
+&
_VtblGap1_4
get_Version
get_save
$NETWORKLIST.INetworkConnectionEvents$NETWORKLIST.INetworkConnectionEvents
Sub_Update
LANG_ASSAMESE
https://d.symcb.com/cps0%
201230235959Z0^1 0
lpcSubKeys
ToLowerInvariant
#Blob
Environment
<version>k__BackingField
name
KEY_READ6464
RegOpenKey
getModel
$J0_b
set_message
Parse
ArrayToStringArray
HKEY_CLASSES_ROOT
NETWORKLIST.INetworkEvents
+
XmlAttribute
Microsoft.Win32
<bit>k__BackingField
ArrayList
ToUInt32
Move
set_projectname
get_ENCRYPT_KEY
set_priority
"Q q
get_Minor
ReadToEnd
dwType
BSJB
LANG_ESTONIAN
+8
resourceCulture
get_Attributes
lpSubKey
CurrentConfig
i0g0e
$DCB00009-570F-4A9B-8D69-199FDBA5723B
iValue
****
1M ;++
ICryptoTransform
LANG_SINDHI
$$$H
LANG_HUNGARIAN
2Terms of use at https://www.verisign.com/rpa (c)101.0,
Western Cape1
INetworkCostManagerEvents
set_Culture
get_ResourceManager
AssemblyTitleAttribute
MethodImplAttribute
get_Major
Name userlanguage
strCode
Delete
IntPtr
$$method0x6000022-1
/$T*
444U
lpdwDisposition
INetworkListManager
set_model
Char
lpSecurityDescriptor
DataContractJsonSerializer
sI
$$method0x6000021-1
$$method0x6000021-2
LANG_GUJARATI
System.Linq
set_id
&J@<
4!bS_0
set_userlanguage
hKey
LANG_RUSSIAN
$DCB00007-570F-4A9B-8D69-199FDBA5723B
SettingsBase
GetValue
RemoveAll
https://www.verisign.com/rpa0
Program
Volatile
ToUpper
bInheritHandle
LANG_CHINESE
message
SXC?
iSubKey
'Symantec Time Stamping Services CA - G20
EncryptString
UCCounting
get_SkipSize
RegResult
get_uninstall
system
LANG_URDU
priority
lpcbMaxValueLen
lpReserved
r.
}E@r
+6~`
lpcbData
"/~b
get_IsConnectedToInternet
Trim
HKEY_USERS
HKEY_CURRENT_CONFIG
CcjRK
201229235959Z0b1 0
GetFolderPath
+http://ts-aia.ws.symantec.com/tss-ca-g2.cer0<
set_ContentLength
OutAttribute
http://ocsp.thawte.com0
ToBase64String
IEnumerable`1
$dcb00d01-570f-4a9b-8d69-199fdba5723b+NETWORKLIST.INetworkListManagerEvents_Event
get_LCID
get_ASCII
AssemblyConfigurationAttribute
/"4
set_error
y3+.{
!:@n?"U
LANG_HINDI
.ctor
LANG_CHI_SING
Version
GetTypeFromHandle
LANG_LITHUANIAN
FileAttributes
+ ~e
DllImportAttribute
RegSAM
GetEnumerator
z%V0
SymmetricAlgorithm
EditorBrowsableState
Exception
11.0.0.0
LG Electronics Inc.1
Mutex
get_Now
~U
LANG_BULGARIAN
KEY_NOTIFY
Main
LANG_ORIYA
.text
List`1
LANG_KOREAN
Users
lpcbMaxClassLen
<model>k__BackingField
set_Method
DecryptString
GetDirectoryName
get_install
v4.0.30319
resourceMan
XmlNodeList
ERROR_CANTOKEY
RegQueryInfoKeyW
LANG_POLISH
System.Configuration
35Hq
FlushFinalBlock
System.Runtime.Serialization
Enumerator
<message>k__BackingField
LANG_SWEDISH
sType
System.Reflection
Convert
LG Electronics Inc.0
get_NewLine
Sub_Result_Update
ERROR_BADKEY
LANG_BELARUSIAN
get_MinSize
Boolean
Int64
Array
GetRegMultiStringValue
$$method0x6000020-1
LANG_UKRAINIAN
<notice>k__BackingField
ENCRYPT_KEY
VeriSign, Inc.1
INetworkEvents
@.reloc
KEY_ALL6432
140730000000Z
999[
Resources
z;T0S
LANG_MANIPURI
sSetValue
EFAn
Durbanville1
LANG_INDONESIAN
CompilationRelaxationsAttribute
SetAttributeNode
$$method0x600001d-1
advapi32.dll
#http://crl.verisign.com/pca3-g5.crl04
Byte
userlanguage
https://d.symcb.com/rpa0
lpData
CryptoStreamMode
MemoryStream
ERROR_MORE_DATA
XmlNamedNodeMap
ERROR_ACCESS_DENIED
CreatedNewKey
RegistryHive
System.Runtime.CompilerServices
lpcValues
HttpWebRequest
d:\LG Update Center\LGUpdateCenter\Window\UCCounting\obj\Debug\UCCounting.pdb
http://sf.symcb.com/sf.crt0
System.Net
0W='
} ,~'
ComInterfaceType
image/gif0!0
UnmanagedType
STANDARD_RIGHTS_READ
ManagementObjectSearcher
System.Diagnostics
`.rsrc
RegOpenKeyEx
4.0.0.0
y $ ( / 4 = F O
get_InnerText
CreateElement
RegEnumKeyA
clsSystemInfo
CreateDecryptor
smI[m
get_Default
LANG_SLOVENIAN
BackupRestore
Create
REG_BINARY
strSourceFileName
<PrivateImplementationDetails>{983CB4DB-CC97-49A0-B3E3-10751D20EA66}
ERROR_TRANSFER_TOO_LONG
result
<update>k__BackingField
GetRequestStream
lpClass
WaitOne
ERROR_LOCK_FAILED
KEY_ALL_ACCESS
1(c) 2006 VeriSign, Inc. - For authorized use only1E0C
phkResult
LANG_SERBIAN
r$
lpcbValueName
<os>k__BackingField
0^1 0
LANG_MACEDONIAN
ERROR_CANWRITE
%VeriSign Class 3 Code Signing 2010 CA
MethodImplOptions
System.Windows.Forms
$DCB00004-570F-4A9B-8D69-199FDBA5723B
notice
LANG_UZBEK
Settings
'Symantec Time Stamping Services CA - G2
UIntPtr
LANG_TELUGU
$$method0x600001a-1
<result>k__BackingField
<id>k__BackingField
Idm
get_StartupPath
$$method0x600001c-1
$$method0x6000094-1
IDisposable
(?
RegDeleteValueW
2oNW
EnumerateSubKeys
&0$0"
Exists
RegSetValueExW
dwOptions
p (_
121221000000Z
$DCB00000-570F-4A9B-8D69-199FDBA5723B
get_error
UCCounting.Properties.Resources.resources
http://ts-ocsp.ws.symantec.com07
get_Item
LANG_TATAR
CreateSubKey
LANG_ALBANIAN
$dcb00d01-570f-4a9b-8d69-199fdba5723b NETWORKLIST.INetworkEvents_Event
PlatformID
Set_RegStringValue
SelectNodes
a;EQ
set_result
RuntimeCompatibilityAttribute
%r_
200207235959Z0
) n
/PwC6
AssemblyProductAttribute
Assembly
LANG_GERMAN
ERROR_BAD_PATHNAME
WebRequest
get_version
Symantec Corporation100.
IsConnected
Marshal
ErH
LANG_MARATHI
sKeyPath
$$method0x600001e-1
<Module>
}+Pz
Concat
SAlgorithm
DataMemberAttribute
StringBuilder
ReferenceEquals
$DCB00001-570F-4A9B-8D69-199FDBA5723B
<system>k__BackingField
get_Chars
get_id
LANG_CHI_MAC
csRegistry
GetBytes
TargetFrameworkAttribute
LANG_KASHMIRI
^ooo
Synchronized
%r+
KeySizes
value
UInt32
%r=
Culture
ReadAllBytes
$0"0
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
+
[0Y0W0U
error
2013
set_update
LANG_DANISH
CompilerGeneratedAttribute
LANG_MALAY
http://ocsp.verisign.com0
.=8
9bbb
e m
MSG_JSON_Result
Write
lpcbClass
$dcb00d01-570f-4a9b-8d69-199fdba5723b+NETWORKLIST.INetworkCostManagerEvents_Event
LANG_ARMENIAN
LANG_KONKANI
LANG_NEPALI
KEY_READ6432
RegOpenKeyA
REG_MULTI_SZ
RegCreateKeyEx
get_Assembly
$DCB00008-570F-4A9B-8D69-199FDBA5723B
CreateEncryptor
100208000000Z
get_CurrentUICulture
get_ENCRYPT_IV
RegDeleteValue
0U=#
LANG_NORWEGIAN
LANG_CHI_TRA
LANG_POR_STD
System.Management
Directory
#GUID
<error>k__BackingField
LANG_LATVIAN
AssemblyFileVersionAttribute
System.Text
B=e6
defaultInstance
GET_Registry
LANG_SANSKRIT
G8J-l
System.Resources
RegQueryInfoKey
HKEY_CURRENT_USER
Set_RegDwordValue
System.IO
WrapNonExceptionThrows
set_version
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
IPropertyBag
+/~a
model
XmlAttributeCollection
Sub_Notice
MSG_JSON
StructLayoutAttribute
NetworkListManager
RegistryKey
<name>k__BackingField
SYNCHRONIZE
ApplicationSettingsBase
>0 0
RegCloseKey
$$method0x600002d-1
sName
g p3
CreateRegName
$$method0x600001b-1
FileStream
DispIdAttribute
O =W
LANG_FAEROESE
LANG_SPANISH
save
STAThreadAttribute
XmlDocument
get_userlanguage
set_bit
GetResponseStream
ERROR_KEY_DELETED
hKeyHand
SetValue
System.Runtime.Versioning
LANG_MALAYALAM
INetworkEvents_Event
TimeStamp-2048-10
\8kM.p
System.Globalization
XmlObjectSerializer
-0+0)
set_os
RegEnumValue
ResourceManager
Encoding
__StaticArrayInitTypeSize=16
Sub_Error
get_name
lpcbMaxValueNameLen
GetResponse
Sub_Result_Notice
WaitHandle
SetAttributes
AssemblyVersionAttribute
Sub_Install
ERROR_REGISTRY_IO_FALED
WebResponse
LANG_BENGALI
System
UCCounting.exe
p r;
Application
set_install
LANG_PUNJABI
cTi%V
set_system
+/
80604
LANG_JAPANESE
get_system
ToUpperInvariant
String
1&0$
projectname
INetworkConnectionCostEvents_Event
_CorExeMain
DebuggerNonUserCodeAttribute
v`0XF
Y0W03
REG_QWORD
set_classid
ERROR_CALL_NOT_IMPLEMENTED
set_code
GetNamedItem
OpenLink
get_update
get_Value
KEY_READ
get_message
set_type
,&c3
System.Xml
DebuggingModes
InitializeArray
k;J0
#Strings
SET_RegKeyValue
LANG_POR_BRA
CreateRegKey
Sub_System
LANG_ITALIAN
RegEnumValueW
Replace
1 0
Zero
AssemblyCopyrightAttribute
strKey
<VeriSign Class 3 Public Primary Certification Authority - G50
%NETWORKLIST.INetworkListManagerEvents%NETWORKLIST.INetworkListManagerEvents
LANG_VIETNAMESE
DecryptStream
LANG_FARSI
ToArray
getUserLanguage
CreateInstance
sValue
EditorBrowsableAttribute
p (
MarshalAsAttribute
RegQueryValueEx
LANG_SWAHILI
get_type
WOW64_32Key
getLanguageCode
IEnumerator
+{r
VeriSignMPKI-2-80
Empty
LANG_ENGLISH
LANG_HEBREW
VeriSign Trust Network1;09
HKEY_PERFORMANCE_DATA
c 9D
REG_SZ
$$method0x600001f-1
$55272A00-42CB-11CE-8135-00AA004BB851
UCCounting.Properties
K0I0
ERROR_BADDB
LANG_BASQUE
(NETWORKLIST.INetworkConnectionCostEvents(NETWORKLIST.INetworkConnectionCostEvents
$$method0x6000019-1
samDesired
set_Value
<type>k__BackingField
fxww
= N [ b j q C
LANG_SLOVAK
ay [
HKEY_LOCAL_MACHINE
System.Collections.Generic
<install>k__BackingField
CoClassAttribute
ToString
ERROR_NOT_REGISTRY_FILE
\vnO^
Load
FindRegKey
r>
_0]0[
RegSetValueEx
IndexOf
type
ReadObject
StringArrayToArray
ReadAllText
ManagementObjectEnumerator
Notify
Close
Name
{]KV
CurrentUser
e/ $
Split
classid
061108000000Z
OpenWrite
Thawte Certification1
.NETFramework,Version=v4.5
GetRegStringValue
FlagsAttribute
get_classid
Dictionary`2
get_IsConnected
UCCounting
Z-.j
170927235959Z0
Activator
]jxdE
KEY_WRITE
lpSecurityAttributes
get_OSVersion
Save
INetworkConnectionEvents_Event
Read
Type
50301
DebuggableAttribute
INetworkConnectionCostEvents
GetLegalKey
FrameworkDisplayName
QueryValue
CreateLink
<priority>k__BackingField
<code>k__BackingField
KEY_ALL6464
ERROR_SUCCESS
GeneratedCodeAttribute
value__
get_Platform
>]#K
y@b%
lpszName
p r;
ComEventInterfaceAttribute
update
TryGetValue
lpcbMaxSubKeyLen
get_Culture
MoveNext
$dcb00d01-570f-4a9b-8d69-199fdba5723b.NETWORKLIST.INetworkConnectionCostEvents_Event
https://www.verisign.com/cps0*
set_Position
set_InnerText
RuntimeHelpers
set_name
b07x
LANG_CHI_HK
p ~U
INetworkCostManagerEvents_Event
ERROR_NO_MORE_ITEMS
get_code
150514062309Z0#
Symantec Corporation1402

#infosec #automation

TheSystem Itself @ 2016-10-06 13:24:05