phcaen.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 32/57 Related 2132
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 262.50 KB (268800 bytes)
Compile time: 2017-01-13 08:57:19
MD5: afb3725ae341fb58c03d9ec3368c5762
SHA1: 01ad4a088019692f34a34860faf482d43f250325
SHA256: dab93537f58cd24b5d4343ae58fb550195754d6ae1cc2c8739b75cfd3d59e168
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2017-01-13 16:21:02
Last submission: 2017-01-13 16:21:02
Filename detected: - phcaen.exe (1)
URL file hosting
hXXp://cdn.che.moe/phcaen.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2017-01-13 14:46:12 [32/57] VirusTotal
PE Sections 1 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0x40564 263680 aa81ca85ad0a099022e86d6be0681328 b6a3559eb81bc39900cc446808c32247df62add5
.rsrc 0x44000 0x1000 4096 6c6a9eaf3b695fef6094cc263ca65fe3 fb3abd5e552342067918bf86509e715e0e79a312
.reloc 0x46000 0xc 512 29255a602fde3571f71aede028fb2e06 ee4c0abc2b15078ab07a018487360848923b6e74
PE Resources
Name Offset Size Language Sublanguage Data
RT_VERSION 0x440a0 852 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_MANIFEST 0x443f4 2850 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: 2013-2017
Assembly Version: 1.4.1.0
InternalName: Client.exe
FileVersion: 1.4.1.0
CompanyName: NanoCore.io
LegalTrademarks:
Comments: NanoCore Remote Administration
ProductName: NanoCore
ProductVersion: 1.4.1.0
FileDescription: NanoCore
Translation: 0x0000 0x04b0
OriginalFilename: Client.exe
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: Binary
Data.bin
FIle type: Library
ntdll.dll
mscoree.dll
DNSAPI.dll
KERNEL32.dll
ADVAPI32.dll
IP Found
No IP detected
URL(s)
http://www.w3.org/2001/XMLSchema-instance
Assembly Version
Label2.Text
94W
VarFileInfo
94P
9&+
1.4.1.0
=&>)C*
NanoCore
InternalName
5,9
#Yu
9,?
VS_VERSION_INFO
e,>
StringFileInfo
Translation
LegalTrademarks
95Y
Client.exe
FileVersion
NotifyIcon1.Icon
U,=
91E
LegalCopyright
5%'
000004b0
&%32
Comments
FileDescription
NanoCore Remote Administration
OriginalFilename
$this.Icon
NanoCore.io
CompanyName
2013-2017
5+3
ProductName
A,9
9!!
ProductVersion
}uia80
YZa8
-D7q
5a%
po"a+
FindResourceEx
Int32
p\O'
set_Cancel
5O
s0<a8[
`%
G58
Z NMzua8
SocketError
,7 i
de8
<TZ
ResolveEventHandler
?_b`
,D t
DateTime
f o,
Z ^
ItX
,= &
get_Controls
J[
Z =4'
Version
jo[
VZ O
$%& =
;a8+
Z o(
VZ 4
VZ 2
PtrToStructure
z w
M38
+(+d f
Marshal
WYa8
ToolStripItem
c XZ |x
Dequeue
Sy%&8W
|%q%&+
ProcessStartInfo
jKZa8S
fF%+
RuntimeFieldHandle
J%B
=3U+
ConfusedByAttribute
Y z
]a8`
Y a
<M
(v
EndInvoke
defaultValue
]a8s
BQWQ
IClientApp
ugO6(
za8p
P=-V
6%&8v
KF%&
]a8+
VF2l$
EnableVisualStyles
za8R
za8V
QZa8
n
Increment
rEa8"
IClientNetwork
set_MinimizeBox
iK/Z =;
}X%& 7
AssemblyCompanyAttribute
6f'
Wxa8y
e(d
remove_Click
@a%
qZ ga
Format
Qq z~
-; Wj
Z C.
Pr}a%
zrZ -
y =
Z 15
GetDetails
NtSetInformationProcess
AppDomain
7Z - "
tbt(Za8
bZa+
CompareString
V?Za8
GetUnderlyingType
get_CurrentDomain
-0
get_Height
`E8#
Eo,Z l|v
}%%&+
C L,
Da%
8Vf
EntryExists
Za8
Z P>-La8
OpenSubKey
n vu#%a%
GetObjectValue
OA}
cEZa8
TextWriter
set_LingerState
`Z G0SPa8<
ta%
UAv
7!a%
RebuildHostCache
`Z hv{
AqZ &
9zV%+
UInt16
Path
set_Text
w(kcZ L y>a8P
=@B
K"
9a8;
v`ni
ZMa8_
:J!l
=Za+
#Blob
Control
u%(-
E(>
wa%
x4*Z s
#JZ
ToUInt32
^\1
"%(-
#k6 F
qxq
+a8H
Type
Z ~z
Z PxC
^E
BaseCommand
):28
%&8%
A third party is requesting access to remotely control this system, if this was not initialized by the system administrator, please click Decline. Please contact support@nanocore.io for more information. 0=
add_HelpButtonClicked
Kill
HelpKeywordAttribute
(:9 k
Join
_9Z
%&8!
# R%&8
e%&8
%bX
%&8=
fp2;
A}>-
k~%+
SC=q%&8b
get_ExecutablePath
Char
r(%+
ExceptionData
t U_
$1%+
].a8I
*^E*
X {}O
get_Name
GetValue
e"Z
ZJ?
Disconnect
BeginInvoke
E
HashAlgorithm
get_X
get_Y
set_CreateNoWindow
ca8P
c
,< !
,k 8|
J XT
GZa+
rZ u`
+$(A
\B%&+
&Pa8Z
target
;a8
i+T ?
Data
3
2
9B@ (
SecurityIdentifier
!
Z lJ
System.IO
/A
<Ta8q
CB
rzZ #
3W89
hq
DialogResult
ToBinary
$a84
Q%(-
.text
List`1
"^E"
aZa8
Ga%
GetString
Ysa
WindowsPrincipal
Z @v
|a8<
GetObject
(Na8
t Z
H#Za8t
GetDirectoryName
Convert
_a8c
xZa+
wVa+
Button
:Za8
MulticastDelegate
ov
za%
S$a8X
get_AddressFamily
blNb
:Za+
GetHostAddresses
System.Reflection
4System.Web.Services.Protocols.SoapHttpClientProtocol
c?[4
%& i!
PerformLayout
G{|T
Client
_a8W
&+T
Monitor
`&;>
op_Subtraction
/U&@
get_Variables
Wa%
Y z/
=a8|
eZ !
CreateDirectory
%(-
PluginCommand
PipeClosed
StreamWriter
g=Z
\iZ
TPN
d%(-
=a8Y
wZa86
!Z _
) m+Ra%
V%&8
V]%+
WaitForExit
eZ w
aj%+
System.Net
0oa8_
Conversions
` K2
`.rsrc
PvY
-&4
Wh-.v@
IconData
~ o`9
YZgZ
aza+
IzU4
,ua%
ThreadStaticAttribute
GetHostEntry
U%& ?
c}%+
4 /
NotifyIcon
,W 8_
?'?a8
v>_
\a+
:`Z
Shutdown
6Mk{Z
zZZ
zY /X
#=Kh
$Z dfh.a+
u}Va8%
5n]%&
7:v
[%&8
~!Z \
>PWa8?
add_ThreadException
gZ xe
2Z pp=
jX
zZ _
,K
X~ a8
6Z "
ca%
{aKlZ =
HP
lpa8
height
m.8\
-F g
CommonAcl
>a+
f4m%
Z EQT
#|a8
~ (
U<ZG d
C$\%+
W'a+
Z mM
s7vh80
N a8
UInt64
'a%
FormClosingEventHandler
'a%
K9aZa8t
mLa8S
>%&
$I66-0
j5
GetBytes
lDa8
Process
ReadAllBytes
0zsP
:>pa8b
Icon
*)w%&84
%&8o
S
%&8i
%&8h
%&8k
&
%&8e
%&8f
Write
|fM
x2G%&
%&8u
L
4qa+
%&8s
%&8I
v
get_Assembly
JZa+
%&8F
IPEndPoint
%&8B
%&8]
%&8\
KZ #F
+%(<
%&8X
%&8U
j
k
%&8P
%&8S
%&8-
%&8/
& o
%&8$
%&8'
%&8&
.a8#
%&8#
.a8?
%&8<
%&8?
Int16
%&89
%&8;
%&85
ZZa8*
qa! Z
Invoke
+%(b
Button1
get_Now
!
0(Z
ta%
IClientNameObjectCollection
Console
MaxValue
5Q<X
Z r
W`?
uTg
!Ag
+ [
>Z 1
b _
GetVersionInfo
Pe%
STAThreadAttribute
A3Za8@
ClientSettingChanged
>Z W
u%&81
+ I#
op_Equality
System.Globalization
$1bef2b2b-d58b-4886-8c09-5eca03031196
ymZ 2
,a8%

IconSize
n]Ba+
,a82
#:a8
Z 7
FileVersionInfo
yh9Z
X X
qZ F
System
eaa+
nZa8
Application
Z obnoa+
&eq@
TransformBlock
0[iZ h
BuildingHostCache
Z %W
|kQZ
Z )LK
?a8l
u]aB
%& ,5
!oL48
Z [SWja+
CreateInstance
MlVD%&8
\Za+
!%&
Z N0
=N\
SxS
#_WZa8
7Z $B
#Strings
Z %)
System.Collections
NS|<@#Q
KL?
Af%&
`Za82
GS%+
!~a+
,N p
Environment
RegQueryValueEx
{jv Za8p
n\a8
CKZ N
get_FileVersion
%j 5v
Z |{
Z <#
tQHZ
M&
,r
/Z j-
"*%+
A4a87
width
fmZa+
7a%
<Z >
Z/Ta
?Z b.
EndSend
\)U*
Decimal
Va8z
a Fa
EventArgs
Va8j
VmZ
wZ p
,@ 1Mz
get_Position
wZ t
IEnumerator
GetType
bJ.Z R
)]8i
add_AssemblyResolve
+2
=qZ
wZ n
* 2
CLa%
-ta+
f[a8l
a8Y
rBZa+
Activator
T\%+
WZ Y
+B
SaZ !q:
System.Drawing.Icon
ControlFlags
* t
* u
My.Forms
Double
ReadBoolean
(i0^
x=Z }
pua8
MoveNext
,< C
AddMinutes
ClientUninstalling
set_Location
?8a84
Color
rj KZ "
]kZ
* _
InsertAce
-J c
MD5CryptoServiceProvider
E%&8c
+~O%+
DSZ qW
|a+
L
\}5cZ
O%&8
]%Za8m
0a8T
get_UTF8
O%&+
get_Width
tZa8
ToBase64String
ContainsKey
#BE$8{
set_WindowStyle
SocketAsyncEventArgs
j
aa%
get_CurrentDirectory
$t"a8E
| a+
O!-v%&8r
88
'6_Z
Socket
Z +`WKa8
get_BinaryLength
CancelEventHandler
7l%+
P8]Z
,` &a
-'4^
f.A
BitConverter
UnhandledExceptionEventArgs
j'{
System.ComponentModel.Design
]! Z
gZ vE&a8`
mjZ .
Label
e>~Z Wi
|?Z
ntdll.dll
U%(-
port
Form
get_ExitCode
y02
]A.2
[Za+
Math
O%(-
-%&8
Client.exe
HostDetails
"a8O
Delegate
,a%
6[/
5=Z
ze&
ParameterInfo
'Za+
ToByteArray
Q$o 5v
_b
w>Z
M%%+
mh-Z
set_Verb
Ej,a+
MsgBoxStyle
f?&'Z t
Ta%
h:Qb
+8(K
j
Enum
T=}P
DebuggerDisplayAttribute
W%(-
MethodBase
gP%&
Restart
GetTypes
set_Name
;69
C0/h&
2013-2017
Va8P
Interaction
1a%
AceFlags
F%&8
get_Length
ProtocolType
;]
GetResourceString
DESCryptoServiceProvider
7~%&
VAS +
2|^-
Contains
NanoCore.io
ResumeLayout
t?a8w
pipeName
Intern
Tvp%+
Z f8W
ValueType
System.CodeDom.Compiler
6#%+
GuidAttribute
"_a+
fSystem.Drawing.Icon, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
8a%
SetCompatibleTextRenderingDefault
f xK
X <
\Ea8
ToLower
Z }k
Z c n
tZ @
>a%
_ ca%
get_Port
get_Count
data
tZ M
Trim
GetTempFileName
G$K@+
<?xml version="1.0" encoding="utf-8"?> <asmv1:assembly manifestVersion="1.0" xmlns="urn:schemas-microsoft-com:asm.v1" xmlns:asmv1="urn:schemas-microsoft-com:asm.v1" xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <!-- UAC Manifest Options If you want to change the Windows User Account Control level replace the requestedExecutionLevel node with one of the following. <requestedExecutionLevel level="asInvoker" uiAccess="false" /> <requestedExecutionLevel level="requireAdministrator" uiAccess="false" /> <requestedExecutionLevel level="highestAvailable" uiAccess="false" /> Specifying requestedExecutionLevel node will disable file and registry virtualization. If you want to utilize File and Registry Virtualization for backward compatibility then delete the requestedExecutionLevel node. --> <requestedExecutionLevel level="asInvoker" uiAccess="false" /> </requestedPrivileges> </security> </trustInfo> <compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"> <application> <!-- A list of all Windows versions that this application is designed to work with. Windows will automatically select the most compatible environment.--> <!-- If your application is designed to work with Windows Vista, uncomment the following supportedOS node--> <!--<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS>--> <!-- If your application is designed to work with Windows 7, uncomment the following supportedOS node--> <!--<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>--> <!-- If your application is designed to work with Windows 8, uncomment the following supportedOS node--> <!--<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS>--> <!-- If your application is designed to work with Windows 8.1, uncomment the following supportedOS node--> <!--<supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"/>--> </application> </compatibility> <!-- Enable themes for Windows common controls and dialogs (Windows XP and later) --> <!-- <dependency> <dependentAssembly> <assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*" /> </dependentAssembly> </dependency>--> </asmv1:assembly>
ButtonBase
,* R4
/]\:
SocketException
Y-*8P
27Use
lI@Za8f
\
MHZ s
v ?
dQZ
}ZbwZ 8
4la%
4JZ
Bc F
NanoCore.ClientPluginHost
SIza+
u+Z j
HK%+
UInt32
ToInt32
Ssi
Na%
fZ
get_Version
set_CurrentDirectory
(~?
ToString
LJ
Z K
name
Utils
kT%&
h%&8
CZ | :
cF5a+
TryParse
ReadString
9>Nh(
Z L^%
add_UnhandledException
{Za+
ClearProjectError
)UZ
03@
QF P
Z 5a
M8
2yZ w
^Ta8'
,b .n
DebuggerHiddenAttribute
Xd1Z
get_UserName
set_TopMost

ICryptoTransform
<vZa8D
LeaveDebugMode
z
]EaN8
% J
PipeCreated
AssemblyTitleAttribute
i_ZZ
S
ShowDialog
rAa8b
xZa8O
Z 1%
z0Z

3
System.Security.Cryptography
Create__Instance__
Ea%
ConstructorInfo
mw83
Start
Combine
message
4%&8
size
m a%
%^E%
&Za+
L`Z
add_Shown
set_AutoFlush
S z
params
UjZ tt
<fa8N
Z ;h
RegistryKey
I"%+
GetFolderPath
ThreadExceptionEventArgs
<fa8=
ConnectAsync
Yla+
Int64
RCa
,7 D%
.ctor
mscoree.dll
Container
S|a%
!This program cannot be run in DOS mode. $
CommonAce
11.0.0.0
Z )<
Tn{Z
$uZ
Y<Z
NanoCore
DelegateCallback
2 $Z jsd
*t\
7Z z
hA++
9@U
r8 %&
k3 a%
Za+
]q}Z
dL ~
get_LastOperation
ToolStripMenuItem
ko! `
>)
Y3> *
compress
W>B/f4tSiy"7W7h#h\]|ReLf#-.resources
mNa%
OU
Z w|
mNa
/Pj?B
+ 1j
$I116-0
get_SocketError
add_Opening
Array
WrapNonExceptionThrows
Z )P
Z V;
RvZ Bxc
m%&8j
TransformFinalBlock
@.reloc
%%o
Z `"
O rg
CompareExchange
MsgBoxResult
Z+l
Z |
LZ d
get_ParameterType
WriteAllText
SpecialFolder
Byte
get_Chars
QB^a
Hd8c
]5
m)
Dispose
Xma8~
DwW8
get_ExceptionObject
Zero
V$Z
yZ w3la+
Ha%
FileCommand
Da8^
RegOpenKeyEx
mGa8f
aC a8
LZ ?
Attribute
<Za8
gna+
tgQ
FromBase64String
WZ <
U L8Z
|Z v
Z A;E
Y%(-
Z C;r
}vZ
AddHostEntry
gZ #
-N
OAk88
%a%
get_Location
1Z 7<
x1ea8X
x'%+
EZ \
AssemblyTrademarkAttribute
8a8c
Directory
6 D%+
set_TabIndex
>Kf>
4a8
,l (
8a8H
Aa+
&?a8
get_FullName
ConsoleApplicationBase
ReadUInt32
9&c3
get_Item
ReadUInt64
q%&8
Za8^
Za8\
FileStream
*%&+
Za8
Za8V
Za8U
Za8T
RuntimeCompatibilityAttribute
6B4+
Za8N
Za8M
Za8L
*%&8
Za8A
Za8@
Za8G
Dmg
Za8z
Za8y
Za8x
Assembly
Za8r
Za8q
Za8p
DelegateAsyncState
Za8v
Za8u
ClientPlugin
Za8j
Za8i
l`Z BI{
Za8l
get_ModifierKeys
GraphicsUnit
Za8a
Uninstall
Za8e
ya%
`Za+
)V%&
FromArgb
,f L=u
System.Drawing.Size
SocketAsyncOperation
Ka%
zb
SuspendLayout
+
Za8:
Za89
+7+h T
Za8?
Exists
Za8<
E Ba%
@m
$%(-
Za8*
*Za8-
Za8"
Za8%
I4yg
7ra+
Ut4Z
* '
AEo
a%
_+
@4U
VQa8;
KeyValuePair`2
',#a8
Uqos
Resize
)Sa%
L.a8L
IContainer
AppendLine
^iZ t
$uY
My.WebServices
j2a%
W>B/f4tSiy"7W7h#h]|ReLf#-
r#hz?
GetCustomAttributes
oke
IPHostEntry
%Hub8y
ReadBlockData
Z CP7
RegCloseKey
& 45N
X b)
IClientDataHost
+_ (
Z p(p
Z )s!
X #
f ~J
set_AutoSize
G}e@Od
Change
X 6
:^E:
ToLongDateString
=^E=
lL
T(W
:]1(
8w<i
set_MaximizeBox
X ,
S%(-
+ m
@Za+
$g%+
/%&8
Show
+n
tw
GetExecutingAssembly
Y
A%&87
S,Za8t
4 Za8
dnsapi.dll
get_AsyncState
VEf
E;%+
>I%+
Copy
get_IsEnum
Z Wz
,S
ReadByte
Lkq
,) 0
MessageBoxOptions
:a8>
iZa8-
ReadBytes
:a8.
Ya%
j=Z
Interlocked
,? vn
GetCurrent
ZIRa8A
SendToServer
set_MinimumSize
AssemblyCopyrightAttribute
h;%&8+
_a%
D!P
f[Z
!
\5Z
&FZa8u
ClosePipe
qHa
$2|(

i!a+
ProjectData
Operators
y B
E18,
~%&8n
jH0a8
! n
DeleteFile
FileShare
8Za+
`
ReadInt64
)
LingerOption
set_MaximumSize
fa%
fa%
J
X
gGW
IndexOf
v
A
~IZ
set_ForeColor
FileOptions
ConfuserEx v1.0.0
R
-N 5v
p) Z
_bY*
hjB
{%(-
%&
Aa8z
Read
Z 9p
(Qx8x
Z q(
Z 9g
Z K:
value__
HJe~
O&:Z
pcZa8
get_Value
HE&
; y?rka%
> Z
2Za+
faZ
Aa88
3&%+
"Y%+
_]AD}
o.V6%&8
)nt
AddRange
2Za8
-; a
Za%
Decrement
fva8
l4a+
SocketType
y
M1a+
DiscretionaryAcl
A %&8
ica+
get_Items
bZ c
CancelEventArgs
ConnectionFailed
.cctor
AsyncCallback
Label1
Label2
Label3
mscorlib
_bj2
fSystem.Drawing.Icon, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aBj
FileMode
hZa+
PluginUninstalling
%- &
.QZ
Z Ns0
3}'hW
DEy(
H%&8
WindowsIdentity
3bsT
@`X
pZ )"
set_DialogResult
p/%&
d4Za+
AllocConsole
VariableChanged
@NZ
h%&8r
nzZ
Guid
hm1Za+
`_Za8
^Ka8k
I_e
#^E#
;\%+
c$Z
GetManifestResourceStream
DhtY
LogClientMessage
Za8+
rZ +
F~>g:
3"Z
$Za+
Z J5
>a8W
ciZ
BeginSend
z%(-
+C
Z j|'
RuntimeTypeHandle

v1_
+A(9
>a82
HZa+
Y_Y
It ~
sender
ToInt64
.ca8
ka8?
1)4&(
,x L
Size
#a8
eZa8
set_ShowInTaskbar
Rfc2898DeriveBytes
mHg!}J
0a8h
,i $
C <.
nW.
%X%&
NotifyIcon1
Z ^F
<:
ij({
TtMa+
NewGuid
get_ClientSettings
AssemblyDescriptionAttribute
G-
IntPtr
UZ d
,<
#a8y
'x[%&8r
#a8F
IClientNetworkHost
MessageBox
-7
s=:
exZ
#a8_
Z HC
eDc
+8(D
ReadInt16
zB%+
|Fof:
;%&
e%&
ReadLine
C W+
6G~Z
Z bW+
ValidateSource
RcData
jZ
+% G
-0?{
>%& m
ConnectionStateChanged
Vc7%&8
Ea8n
;%& Y
jZ d
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
Z D Gva8
<3Z
A%&+
NanoCore.ClientPlugin
Ea8
E3
w~
S%& R
CopyKeyToolStripMenuItem
get_Message
bX 0
pLa+
System.IO.Compression
jZ T
File
IsInRole
ba89
SocketFlags
GenericSecurityDescriptor
`p
Z ,7
w
o:vZ
Z J(-
GetHashCode
{V"
ToolStrip
/qa+
:Z R
GetCurrentProcess
U
fa8b
$IR116-3
soy8
c%&8Q
?a%&
Random
D
G
VZa8;
ThreadExceptionEventHandler
Z ,2
.U _q
>
%cZa8-
set_ClientSize
/G%+
[v0+
%o8
get_Key
>3W
Z *7*
>Z UV
S.a8H
ozHZ
.hu.
Fa%
DisableProtection
K%&
get_CurrentCulture
at+o`
da%
!a8o
SetProjectError
dataLength
BSJB
j}Z
}%&+
C(/a+
My.User
)[ya8w
\bS
;^E;
)Za+
boU
u Z >w`
set_HelpButton
@8Z
RemoveValue
Clear
e
None
p%(-
xZ YvA
z~1
5oJZ
Z qo
=.Z a
Delete
p?Z
MQa8
6} :
n&a8
Microsoft.Win32
$= <
Z e4: a8W
X%&
`cZ
?'a+
Z Up
j3=
=}
Z &E)
cGv}n
Z6%&8C
InvalidOperationException
Z g<
W.%+
InitializeArray
YZ z
RijndaelManaged
set_WorkingDirectory
YZ k
FileInfo
clzX%+
L&TZ
LogClientException
Z U3
pa%
add_Click
Z U-
UnhandledException
IsLoopback
BlockCopy
TimeSpan
_cX*
kUXZ
GetBinaryForm
IdMY
m%& g+.GZa8
GetConstructors
,A ^
x5F^%+
Ma%
Ka8Y
i3x }
ToolStripDropDown
cg2
@lZ
set_Visible
Sa%
set_Key
)"1
Z [k
Mutex
QueueUserWorkItem
Boolean
hOa%
t7Z
nZ B
M(%+
=VT
OBka8
k WX
<,Za8>
6+a8
&a%
vxgu%+
Mv'%+
T+p
StringComparison
75a+
(W1Z
CompilationRelaxationsAttribute
ReadUInt16
8
Hashtable
9$a8S
Ra8e
" xf%&
S ]Z O
ResolveEventArgs
da8M
%& $-
a8j
V) m=
OsZ
amV9D
F-%&
ja%
+K(K
vu#%a%
QD/%&8j
ThreadPool
H]Z ,">
z:
O-%Z D Q
<%&
AI`,
6sG:tBn\&6NqDbuV:1 kT4j\+^!.resources
u)a+
[0a+
C
HideModuleNameAttribute
Z vC
4Za8S
cSH
Z .R~
Microsoft.VisualBasic
^E
,= W
Z%(-
88%&8L
9J
Z v*
y]Z L:ha8
WriteAllBytes
E.%
wM=(
EnterDebugMode
F %+
ContextMenuStrip1
1fZ
GetParameters
$^I+
qRQ
ZQa%
set_UseShellExecute
oZ vp
?ra%
=Z {
address
Fa8k
^tSZ l
Y8&
Rectangle
-p
,@
Enqueue
rWZ
` q1
,$a%
nNa8
Concat
i Z
'hA
StringBuilder
-a%
Data.bin
LV.a8|
ReadDecimal
ValidateBlock
.'a+
l
IPAddress
"Z H
* a%
ReadDouble
O2C
;<R`
nQlN
CompilerGeneratedAttribute
IClientReadOnlyNameObjectCollection
uH%+
+P x
GfZa+
Z j=
get_AddressList
RZ u
Da%
Z X[
ol`JZ
Da%
+-"a8u
PlG
OU1a8o
AssemblyFileVersionAttribute
~`v%&
Transmission
System.Text
Z X9
'[qZ E8
C g)
;fa%
WriteBlockData
9 M p
MessageBoxDefaultButton
System.Resources
r&W
h$T
$IR67-2
#Fa+
Z M-C
IClientData
i\e
h+=a8
DdZa+
FormClosingEventArgs
{NC%&
kLa8;
Z NI
-;
Z ~J-?a+
,Z -
Component
GetElementType
LockResource
9IZ
f!jw=
Z 2A!<a8
Z yG
DQ8U
tjJ9
;.Za8
xXi
bP
,k O.
/( f3+
Initialize
27>
GetAddressBytes
:G%+
a+a8|
get_DiscretionaryAcl
{>{B 7
Button2
ha8O
DGZ
RawAcl
DelegateAsyncResult
,o D
hL#%+
GetBlockHash
u@
BinaryReader
)/a+
Na%&8m
Font
RyZ *V
My.MyProject.Forms
Q %
( 2
FromBinary
VC=*
oa8i
,9 `
8}
String
1#:G
?CK
_CorExeMain
Dq
i"K$F
Z "M
,= cq
QSystem.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
awO%
SearchOption
aZ g
{D
9ha8
OperatingSystem
Z 4^ (a+
5FD%&8
RZa87
X%&+
Timer
get_TotalMilliseconds
L*8'
DebuggingModes
P%&+
Z
F=Z
>Ca8
}=?a8
Mga8p
Ia8n
Microsoft.VisualBasic.CompilerServices
ToArray
qBA<?
EditorBrowsableAttribute
add_Completed
get_InvokeRequired
& l
RT%+
ParamArrayAttribute
Keys
-(a8[
-? .aV1 5p
User
get_BuilderSettings
sa8O
DnsQuery_A
q`a+
Details
vZ U
0R4a+
vZ S
sa8&
set_WindowState
C _*
Load
,A
&a8b
S}Z
4Z 5
get_Day
hSa+
/oJa8,
"FZa8
System.Drawing
ReadAllText
q% %+
>Za8
CurrentUser
vZ c
}Z $t
ga%
w G4
9xZ
mRJ5 ?
?BZ
Dictionary`2
GetFileNameWithoutExtension
L a8s
ToCharArray
ArgumentException
zZa+
-a8G
2 7Z .
get_OSVersion
Dispose__Instance__
DebuggableAttribute
Single
Z e<
n3Z
)gZa8u
Z e2
AddressFamily
-G
DirectoryInfo
,M%& p
Z dA2
uQa8
RuntimeHelpers
kZ k
CheckForSyncLockOnValueType
MyGroupCollectionAttribute
~Z C
SetText
OZ F
^E
WellKnownSidType
RawSecurityDescriptor
Object
0; %+
T~)a%
Registry
g%&8
ComVisibleAttribute
set_UseVisualStyleBackColor
System.Diagnostics
R'a%
gf%Y8f
get_IsArray
$'a%
+ d
_]RZ EM
W ]e6.a%
cZa8
W_
dZ G
sY9(
Z =k
sZ 3
.M
EditorBrowsableState
j2
Next
tZ !~
CultureInfo
ia%
u:
} T
+)BW
O$%a+
Oa8T
H3Wa+
l*q<
W1<Z
6P"
|A]O%&+
Z? %&8u
IS%&+
#?C
Stream
{;Z
X 1h
Oa8|
2G%+
(PHe
1@a8
ControlCollection
System.Windows.Forms.Form
JZ /<
IsNullOrEmpty
t1~.(
s'
ba
E
=9~+
Exit
2%&8V
Z tc
Z tZ
$8a8y

b` (
%;RG
qa8q
NZ P
sl
b%(-
HostData
`~;u
@Z T
C9%&8(
NmCf%&
9Oa8
.z r
BeginReceive
^0>"
=a%
dQZsZ
`
XZ Lk
hHZ 7
vZ xm
iO;WZa8h
DZ /
1.4.1.0
ExceptionHash
PZa8>
e&%+
g:Z h%
Na8U
SK)
WaitCallback
WindowsBuiltInRole
MemoryStream
:_ |
Y^Z qq
gZa+
{Qa+
System.ComponentModel
ua8m
ua8q
KjP`%+
hqa+
5Gq%+
System.Threading
MessageBoxIcon
SetThreadExecutionState
DZ @
Z ZVg4a+
UnhandledExceptionEventHandler
oa%
GetHostName
GetEntries
Th2%
8va8O
1 q.
o"a%
ToolStripItemCollection
Z h:
ComponentResourceManager
DeleteValue
*G
Buffer
get_Current
k2Z U
OpenRead
VNp
\xQ
Ja89
EventHandler`1
nFjZ
Ba%
$= %&
get_UtcNow
set_ContextMenuStrip

X
+ o-
SetKernelObjectSecurity
get_RemoteEndPoint
)KOD
get_IsDisposed
h3%+
/i/k
'#C
F%+
,nvxZ
set_IV
`+wZ
'Ua8I
Microsoft.VisualBasic.ApplicationServices
'Z 7
[z
Ja8|
ab3a+
+;%&
?+`(
<Z 5
FP8*
yYn
\a%
jIZ M*
XI +
Empty
get_StackTrace
AceQualifier
<fI4
get_Major
BhZ
PipeExists
jl
KT@
Point
get_BaseType
My.Computer
+,Z
_-%&8M
ContextMenuStrip
g/a%
v2.0.50727
SetLength
Z Su
BbZ
$a8
set_Item
CreateDecryptor
ToUpper
C1T
Z g
_Q
KZ V
EZa8
&(/
<__a%
ESP
?J7
Exception
:sZ
TJC
?Za+
R/Z
get_ASCII
-C nX
Z JI4
add_FormClosing
kernel32.dll
a*\b
set_Size
@nzX%&
GetTypeFromHandle
IAsyncResult
<M-F(
set_BlockSize
get_Connected
;ha8
GetEnumerator
SymmetricAlgorithm
y%&+
<generated method>
%&
MessageBoxButtons
EndPoint
{a8x
;\ ]
~%(-
da
ClientInvokeDelegate
gKY
Z }Zw
[Z U
connected
Enter
Enumerator
HUa8&
GetInterfaces
FileAccess
&o}
c8%+
++
set_Position
BU3p
get_LocalEndPoint
T$rk
System.Runtime.InteropServices
6BCuZ &
Pa87
~a%
3(8Q
yha%
GenericAce
D^
0Na+
Hra8
CreatePipe
$S%&
iu%
21^(
ReadInt32
remove_Opening
Z {#
advapi32.dll
Z iT
Z {)
^E
LZ 29
S{%&
2#%&
System.Runtime.CompilerServices
"@
XW?Z
IClientAppHost
E`Z
3a8W
SByte
qD N
o!&a8
ResourceManager
1%&8
%o5

TimerCallback
Pa8R
k1Z
Z {h
Queue`1
t6Z )
gLg
Z ?v~Pa+
)4a8
FormWindowState
$IR66-1
g%(-
va85
RestoreProtection
f%M
Z
state
set_Font
h4
UIntPtr
Intel USB Controller
Close
get_StartupPath
IDisposable
6sG:tBn&6NqDbuV:1 kT4j+^!
Z1a8'
System.Security.Principal
D%&8c
CopyAbuseDataToolStripMenuItem
{~[a8{
#a8j
SZ m
Z _O
ReadChar
U] &$
g";%&
MsgBox
StandardModuleAttribute
^E
Xy6#
Z 6 z9a+
CompressionMode
3Z h
My.Application
KeepAlive
Da+
AssemblyProductAttribute
3aa8
vJ
Equals
]Za8
%Gha+
&.a+
~|
<Module>
$I67-0
(TZ
IjZ
jG{
##EZ
$%&8`
i5OE%&
Z\Za8
}_~Za8$
ComputeHash
{%&+
value
,B
V7%& EF
`\iZ
,S !)
5wa%
StartsWith
55Z yY
' a8[
EndReceive
site
BinaryWriter
_b`
DeflateStream
vfH
get_Exists
)fZ 3
SizeofResource
<2hC
CreateEncryptor
nchO
ProcessWindowStyle
PV
TB%+
Computer
VZ =>
#GUID
$MbF
sZ ,K
XJyZa+
get_Exception
8Z >
ya8m
System.Net.Sockets
UR;U
ANrS
A]Z J
$Z s
mKF%&
^}a8
ToInteger
)94eZ
fFh
h ^z>
vZH:
GI+f
77Z
GetFiles
?$M3
OU{"Z =z
La%
\X%&82
"}%+
")pC
^cY&Z !
q [
EventHandler
,> k
Thread
Collect
Microsoft.VisualBasic.Devices
MyTemplate
w%&+
,> O
SetValue
SO%&8
Encoding
.6Z
1Z ^`
1a8x
Z xFB
j,Ga+

ReadPacket
,\a8s
/a%&
xa8o
} Z )9
LoadResource
ObjectFlowControl
QO%&
Clipboard
`4Z
MM F
EpxZ
7T.0'
OB
3pZ /
p/?(
9+T2%&
s!>
[a8E
ReadSByte
Z nk
*p8x
}Z !r
IClientUIHost
c.Va8o
get_Size
host
;Z xG
tMB
JZa8'
G=8#
AccessedThroughPropertyAttribute
Replace
set_Icon
U{
LocalMachine
^<]SZ
ta8.
hostName
get_MachineName
za%
TargetInvocationException
ConnectDone
%&
D3L C
8Za8v
Z \
;{W
,v,Za8E
DZ ,D
&uxa8
j"N%Z )
System.Collections.Generic
get_Hash
s|IZ
,; GUP
Compare
V Z
Z/Z h0
System.Windows.Forms
198o
LZa+
*pa%
pZa8
%&
] #
IClientLoggingHost
WriteLine
System.Security.AccessControl
C D-
Z vuX
%& %
%& /
$ G` ya%
B%(-
get_InnerException
FontStyle
Sleep
+4 %+
GeneratedCodeAttribute
%& 8
%& B
ziv
Remove
%& H
Z wJg
ReadSingle
%& [
%& d
%& a
(
%& h
set_RemoteEndPoint
%& s

#infosec #automation

TheSystem Itself @ 2017-01-13 16:21:02