XWorm-6.5-Source/.vs/XWorm/CopilotIndices/17.14.995.13737/SemanticSymbols.db

SQLite format 3@  �W

.fê
ø¸èÇ–&„
ý
‡Ý\Æ>ºÒ¸K%%
[tablesqlite_stat1sqlite_stat1;CREATE TABLE sqlite_stat1(tbl,idx,stat)�J+‚[triggerTrgSymbolInsertSymbolCREATE TRIGGER TrgSymbolInsert AFTER INSERT ON Symbol
BEGIN
    INSERT INTO SymbolCompletion(rowid, UnqualifiedName) 
    VALUES (new.Id, new.UnqualifiedName);
END�e
+ƒtriggerTrgSymbolDeleteSymbolCREATE TRIGGER TrgSymbolDelete AFTER DELETE ON Symbol
BEGIN
    INSERT INTO SymbolCompletion(SymbolCompletion, rowid, UnqualifiedName)
    VALUES ('delete', old.Id, old.UnqualifiedName);
END�
;;
�tableSymbolCompletion_configSymbolCompletion_configCREATE TABLE 'SymbolCompletion_config'(k PRIMARY KEY, v) WITHOUT ROWID�==
�tableSymbolCompletion_docsizeSymbolCompletion_docsizeCREATE TABLE 'SymbolCompletion_docsize'(id INTEGER PRIMARY KEY, sz BLOB)�
55
�ItableSymbolCompletion_idxSymbolCompletion_idx
CREATE TABLE 'SymbolCompletion_idx'(segid, term, pgno, PRIMARY KEY(segid, term)) WITHOUT ROWID	77
�tableSymbolCompletion_dataSymbolCompletion_data	CREATE TABLE 'SymbolCompletion_data'(id INTEGER PRIMARY KEY, block BLOB)ƒ'--†tableSymbolCompletionSymbolCompletionCREATE VIRTUAL TABLE 'SymbolCompletion' USING fts5(
    'UnqualifiedName',
    content = '', -- Creates a contentless table  to save database space: https://www.sqlite.org/fts5.html#external_content_and_contentless_tables
    tokenize = "trigram" -- Built-in tokenizer that allows FTS5 to support more general substring matching: https://www.sqlite.org/fts5.html#tokenizers
)t?
�indexIX_Symbol_UnqualifiedNameSymbolCREATE INDEX 'IX_Symbol_UnqualifiedName' ON 'Symbol' ('UnqualifiedName')�5
�GindexIX_Symbol_DocumentIdSymbolCREATE INDEX 'IX_Symbol_DocumentId' ON 'Symbol' ('DocumentId', 'ExtentStart', 'ExtentLength')…
ŠtableSymbolSymbolCREATE TABLE 'Symbol' (
    'Id' INTEGER PRIMARY KEY AUTOINCREMENT,
    'DocumentId' INTEGER,
    'FullyQualifiedName' VARCHAR(500) NOT NULL,
    'UnqualifiedName' VARCHAR(500) COLLATE NOCASE NOT NULL,
    'CommentStart' INTEGER NOT NULL,
    'CommentLength' INTEGER NOT NULL,
    'NameStart' INTEGER NOT NULL,
    'NameLength' INTEGER NOT NULL,
    'BodyStart' INTEGER NOT NULL,
    'BodyLength' INTEGER NOT NULL,
    'ExtentStart' INTEGER NOT NULL,
    'ExtentLength' INTEGER NOT NULL,
    'SymbolKind' INTEGER NOT NULL,
    'MethodSignature' VARCHAR(500),
    FOREIGN KEY(DocumentId) REFERENCES Document(Id) ON DELETE CASCADE
)n5
�indexIX_Document_FilePathDocumentCREATE UNIQUE INDEX 'IX_Document_FilePath' ON 'Document' ('FilePath')P++
Ytablesqlite_sequencesqlite_sequenceCREATE TABLE sqlite_sequence(name,seq)�\

ƒtableDocumentDocumentCREATE TABLE 'Document' (
    'Id' INTEGER PRIMARY KEY AUTOINCREMENT,
    'FilePath' VARCHAR(500) NOT NULL COLLATE NOCASE,
    'LastWriteTimeUtc' INTEGER NOT NULL,
    UNIQUE(FilePath)
)/C
indexsqlite_autoindex_Document_1DocumentÙ=ûößðêäÙ
!Äe°O
ò
®
W
	´	p	ǃ!Ãt#ÎwÅ‚+á Iò�3Ó•X
ø
¦
P
»vC1�	C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Networking\Client.vbC0�	C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Networking\Class8.vbN/�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chromium\Chromium\Chromium.vbT.�+C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\OpenApp\Chrome.csP-�#C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\Chrome.cs^,�?C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\cHistory.cs;+{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Chat.vb<*}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Resources\Chat^)�?C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\cCookies.cs[(�9C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\cBrowserUtils.cs`'�CC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\cBookmarks.csU&�-C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\cBCrypt.csU%�-C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\cAesGcm.cs?$�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Builder.vbH#�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\BSOD.vbU"�-C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\BrsType.csA!�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\BrsInfo.vbU �-C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\BrsInfo.csY�5C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\BrowserType.csU�-C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Browser.csS�)C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\OpenApp\Brave.csO�!C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\Brave.csM�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\Botkiller.vb\�;C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Edge\Bookmarks.cs`�CC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\Bookmarks.csB�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\Bookmark.vbV�/C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Bookmark.csO�!C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\BlankScreen.vbB�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Resources\Binder.vbL�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chromium\Chromium\BCrypt.vbS�)C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Plugin\BCrypt.csU�-C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Banking.csB�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\AutoFill.vb[�9C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Edge\Autofill.cs_�AC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\Autofill.csV�/C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\AutoFill.cs[
�9C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\Properties\AssemblyInfo.cs]�=C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Properties\AssemblyInfo.cs[�9C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\Properties\AssemblyInfo.csa
�EC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\Properties\AssemblyInfo.cs]	�=C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HBrowser\HBrowser\Properties\AssemblyInfo.csC�	C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\ApplicationEvents.vb8uC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\App.configC�	C:\Users\byt3d4sh\Desktop\XWorm SRC\XClient\XClient\App.configL�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chromium\Chromium\AesGcm.vb:yC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\ACT.vbM�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chromium\Chromium\Account.vb<}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\About.vb@
�C:\Users\byt3d4sh\De†Kz!�t�P�&T+Å
>�
¥
>W
÷NÐì
	6�
r¿
jß–<æNo\_;Þ¸ý%i0
ìƒúÅ„ì¨À	†À
Àœ¤C�	
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Networking\Client.vb1C�	
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Networking\Class8.vb0N�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chromium\Chromium\Chromium.vb/T�+
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\OpenApp\Chrome.cs.P�#
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\Chrome.cs-^�?
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\cHistory.cs,;{
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Chat.vb+<}
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Resources\Chat*^�?
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\cCookies.cs)[�9
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\cBrowserUtils.cs(`�C
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\cBookmarks.cs'U�-
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\cBCrypt.cs&U�-
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\cAesGcm.cs%?�

C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Builder.vb$H�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\BSOD.vb#U�-
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\BrsType.cs"A�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\BrsInfo.vb!U�-
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\BrsInfo.cs Y�5
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\BrowserType.csU�-
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Browser.csS�)
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\OpenApp\Brave.csO�!
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\Brave.csM�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\Botkiller.vb\�;
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Edge\Bookmarks.cs`�C
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\Bookmarks.csB�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\Bookmark.vbV�/
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Bookmark.csO�!
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\BlankScreen.vbB�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Resources\Binder.vbL�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chromium\Chromium\BCrypt.vbS�)
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Plugin\BCrypt.csU�-
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Banking.csB�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\AutoFill.vb[�9
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Edge\Autofill.cs_�A
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\Autofill.csV�/
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\AutoFill.cs[�9
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\Properties\AssemblyInfo.cs
]�=
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Properties\AssemblyInfo.cs[�9
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\Properties\AssemblyInfo.csa�E
C:\Users\byt3b�G
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\CreditCards.cs@M�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\Botkiller.vb[�7C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\VB.NET Compiler\VB.NET Compiler\Plugin.vbÒ i�U
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\InternetExplorer\cPasswords.cs=‰E�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HRDP\HRDP\Plugin.vbº<}
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Hos<{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Hash.vb@l�YC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\Plugin\HandleVNC\NativeMethodsVNC.cs™
äñä
r¿
jß–<æNo\_;Þ¸ý%i0
ìƒúÅ„ì¨À	†À
Àœ¤C�	
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Networking\Client.vb1C�	
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Networking\Class8.vb0N�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chromium\Chromium\Chromium.vb/T�+
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\OpenApp\Chrome.cs.P�#
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\Chrome.cs-^�?
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\cHistory.cs,;{
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Chat.vb+<}
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Resources\Chat*^�?
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\cCookies.cs)[�9
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\cBrowserUtils.cs(`�C
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\cBookmarks.cs'U�-
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\cBCrypt.cs&U�-
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\cAesGcm.cs%?�

C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Builder.vb$H�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\BSOD.vb#U�-
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\BrsType.cs"A�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\BrsInfo.vb!U�-
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\BrsInfo.cs Y�5
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\BrowserType.csU�-
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Browser.csS�)
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\OpenApp\Brave.csO�!
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\Brave.csM�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\Botkiller.vb\�;
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Edge\Bookmarks.cs`�C
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\Bookmarks.csB�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\Bookmark.vbV�/
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Bookmark.csO�!
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\BlankScreen.vbB�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Resources\Binder.vbL�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chromium\Chromium\BCrypt.vbS�)
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Plugin\BCrypt.csU�-
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Banking.csB�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\AutoFill.vb[�9
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Edge\Autofill.cs_�A
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\Autofill.csV�/
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\AutoFill.cs[�9
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\Properties\AssemblyInfo.cs
]�=
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Properties\AssemblyInfo.cs[�9
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\Properties\AssemblyInfo.csa�E
C:\Users\byt3b�G
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\CreditCards.cs@M�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\Botkiller.vb[�7C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\VB.NET Compiler\VB.NET Compiler\Plugin.vbÒi�U
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\InternetExplorer\cPasswords.cs=‰E�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HRDP\HRDP\Plugin.vbº<}
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Hos<{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Hash.vb@
l�YC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\Plugin\HandleVNC\NativeMethodsVNC.cs™Š*bfNH~�„lBx<60´®¨*ÀÞúÒrº¢œ–ÌÆT`ZTœúú*g„
ä
n
;
Ù©

œ�	KeysLParam(ushort, byte, bool, bool, bool)�)
uA


uaHB.Handle.HandleClipboard.CreateLParamFor_WM_KEYDOWNCreateLParamFor_WM_KEYDOWN«l–í	CreateLParamFor_WM_KEYDOWN(ushort, byte, bool, bool)�(
q=


eaHB.Handle.HandleClipboard.CreateLParamFor_WM_KEYUPCreateLParamFor_WM_KEYUPÀq«ß	CreateLParamFor_WM_KEYUP(ushort, byte, bool)M'
K

'aHB.Handle.HandleClipboard.PastePaste
Ù
ò­
ÆÙ	Paste(string)q&
W#

_aHB.Handle.HandleClipboard.PostMessagePostMessage
y
¬	PostMessage(IntPtr, uint, IntPtr, IntPtr)C%
?+
aHB.Handle.HandleClipboardHandleClipboardî
¬áÎ.$


aHB.HandleHB.HandleÏ	ÚØÅí
R#
A

3^GetWindowsHidden.ClearListClearList+S	+mÝ+@

	ClearList(int, int)`"
E#

G^GetWindowsHidden.WindowCloseWindowClose*m*–¥*Zá	WindowClose(IntPtr, int, int)U!
E#


3^GetWindowsHidden.WindowCheckWindowCheck)ã)þW)Ð…	WindowCheck(IntPtr)b 
G%


I^GetWindowsHidden.ResizeWondowResizeWondow)5)_l)"©	ResizeWondow(IntPtr, int, int)g
C!

Y^GetWindowsHidden.MoveWindowMoveWindow(
(VÇ(
	MoveWindow(IntPtr, int, int, int, int)V
E#

3^GetWindowsHidden.ScanWindowsScanWindows&‡&£
X&t
‡	ScanWindows(string)l
I'

W^GetWindowsHidden.RetrunBrowserRetrunBrowserÁ
c¬Ã	RetrunBrowser(string, string, string)o
O-

Q^GetWindowsHidden.GetHandleBrowserGetHandleBrowserVŽCd	GetHandleBrowser(string, int, int)r
S1

O^GetWindowsHidden.InitializingWindowInitializingWindowAý
ñM	InitializingWindow(int, int, int)V
I'

+^GetWindowsHidden.GetListWindowGetListWindow}
�]j‚	GetListWindow()I
M+



^GetWindowsHidden.IsWindowActivedIsWindowActivedHX
418
?


^GetWindowsHidden.SyncLockSyncLockø7>
E#


^GetWindowsHidden.ListBrowserListBrowserÒ·<o
S#

_^GetWindowsHidden.User32.PostMessagePostMessagem	¥	PostMessage(IntPtr, uint, IntPtr, IntPtr)h
W'


K^GetWindowsHidden.User32.SetWindowLongSetWindowLongÍ
—l	SetWindowLong(IntPtr, int, int)~
U%

y^GetWindowsHidden.User32.SetWindowPosSetWindowPos4½Ô	SetWindowPos(IntPtr, IntPtr, int, int, int, int, uint)Z
Q!


;^GetWindowsHidden.User32.ShowWindowShowWindow‘
Z]	ShowWindow(IntPtr, int)c
W'


A^GetWindowsHidden.User32.GetWindowLongGetWindowLong-
÷]	GetWindowLong(IntPtr, int)^
Q!

A^GetWindowsHidden.User32.FindWindowFindWindow½
o‚	FindWindow(string, string)d
[+


;^GetWindowsHidden.User32.IsWindowVisibleIsWindowVisibleLê	IsWindowVisible(IntPtr)h
W'


K^GetWindowsHidden.User32.GetWindowRectGetWindowRectº
�c	GetWindowRect(IntPtr, ref RECT)j
c3


7^GetWindowsHidden.User32.GetForegroundWindowGetForegroundWindowe,O	GetForegroundWindow()I

W'


^GetWindowsHidden.User32.IsCloseHandelIsCloseHandel
$E
S#


^GetWindowsHidden.User32.CloseHandelCloseHandelëÚ"O
]-


^GetWindowsHidden.User32.WS_EX_TOOLWINDOWWS_EX_TOOLWINDOW½¬(E

S#


^GetWindowsHidden.User32.GWL_EXSTYLEGWL_EXSTYLE”ƒ#=	
K


^GetWindowsHidden.User32.SW_SHOWSW_SHOWq`=
K


^GetWindowsHidden.User32.SW_HIDESW_HIDEN=@
S


^GetWindowsHidden.User32.RECT.bottombottom+ >
Q


^GetWindowsHidden.User32.RECT.rightright:
M


^GetWindowsHidden.User32.RECT.toptop
ý
ò<
O


^GetWindoww�rd�N\�!PŽufŽ3Œ#‹_Q•a4–3M–"‹<U�XR’olŽ@jŒD/�Ø‹5hŒhZ”Yi”"�“jt�GB� p�uu“,?‘q•1o•r’Bä�6‘\�y�L
�s’©˜SÞÌ		üïâÕɼ¯¢–‰|obUH</"ûîâÖɼõéÞÓȽ²§œ‘†{peZOC8-!
ÿôéÝÑŹ­¡•‰}qeYMA5)
û
ð
å
Ú
Ï
Ä
¹
­
¡
•
Š

s
g
[
O
C
7
+

seXK>
ùíáÕÉ½±¥™��ui]QE8,øìßÒƺ®¢–‰}qeYM@3&
ÿ
ò
å
Ø
Ì
¿
²
¦
š
Ž
‚
v
j
^
Q
D
7
*


	ö	è	Ú	Í	À	³	¦	™	Œ		q® “†yl_RE8+öéÜϵ§š�€seXK>1$
ýðãÖɼ¯¢•ˆ{naTG:- ùìßÒŸ«ž‘„wj]OA3%
üïáÓƹ«ž�ƒvh[NA4'ýðâÔƹ«���
‡
0

‡


‡


‡Û×

‡¼
ø

ñ*Õ
ú

ñ'Öú

ñ&¹


ñ$U_

ñ$L

ñ"Î
1


ñ!Ä


ñ µ



ñ Ke


ñ
E
	
ñL°

ñD


ñŽ}

ñl

ñ¤t

ñGX

ñB

ñ÷


ñ¦Y

ñLUÿ
ñ¼‹þ
ñ;|ý
ñ˜žü
ñ@Sû
ñ¼ú
ñ¯ù
ñ¬
Wø
ñ3t÷
ñ>
ðö
ñÊ
oõ
ñg^ô
ñ
î
tó
ñÛ
ò
ñ²
$ñ
ñ
ÿ®ð
ñ
Ñ)ï
ñ
¡+î
ñ
m/í
ñ
;-ì
ñ	óCë
ñ	Ïê
ñ	£'é
ñ	m1è
ñ	9/ç
ñ	,æ
ñ×,å
ñ§+ä
ñr0ã
ñ>/â
ñ+á
ñÜ-à
ñŒKß
ñ8OÞ
ñÝ
ññ%Ü
ñÏÛ
ñ±Ú
ñ�Ù
ñqØ
ñS×
ñ3Ö
ñÕ
ñõÔ
ñÜÓ
ñ»Ò
ñœÑ
ñ}Ð
ñdÏ
ñKÎ
ñ6Í
ñ!Ì
ñË
ñçÊ
ñÈÉ
ñ´È
ñ’Ç
ñsÆ
ñVÅ
ñ:Ä
ñÃ
ñóšÂ
ñÕÁ
ñ¯ À
ñ˜¿
ñv¾
ñ]½
ñE¼
ñ%É»
ñ
º
ñé¹
ñɸ
ñ­·
ñ‹¶
ñkµ
ñN´
ñ2³
ñ²
ñ
÷±
ñ
á°
ñ
·
i¯
ñ
$+®®
T	+‰­
T4ò¬

T­«

T1vª
T
�¥©
Tß�¨
TÅò§
L/Ȧ
Lcǥ
LÓˆ¤

LN£
L
¥¡¢
L
�¡
Lì
 
C°�Ÿ
C“½ž
4
2C�

4¶wœ
4–â›
-Êš
-d±™

-? ˜
-®‰—
-(€–
-
~¢•
-Ýœ”
-Ä
#“
¡’
l’‘
ѕ�
?Œ�

ˆ¯Ž
۪�
Ã	äŒ
íf
‹
í
ñlŠ
í
ˆc‰
í
kˆ
í
S‡
í
=†
í
&…
í

x„
íî
sƒ
íÁ²‚
®R‚‹�
®Oë‹€

®Ozg

®Of~
®L­O}
®J!€|
®GÖ?{
®G$¦z

®Fñ!y

®FÄ!x

®F’&w

®F_'v

®F,'u

®Eð0t

®E«;s
®DÓÊr
®CýÌq

®Cw|p
®C@Ôo
® `"Ín
® 2#m
®l
®qšk
®§¼j
®n
-i
®:	(h
®#g

®Î3f

®¨e

®t*d

®Sc

®"'b
®ð:a

®È`

®¥_

®‚^

®^]

®:\
®Ü[
®

ìZ

®ƒ|Y
®õ„X
®Ø*W
®½R\V
˜×6U

˜hjT
˜®µS

˜“R

˜}Q

˜gP

˜CO

˜&N

˜M

˜
íL

˜
ÙK

˜
¾J

˜
¤I

˜
�H

˜
tG

˜
^F

˜
EE

˜
$D
˜æ
ÃC
˜ÆJB

dÁÇA

d§@

dš
v?

dÀÕ>

d
|
?=

d	0
B<

dç
D;

d°
2:

dw
49



dj8



d�c7

dó¥6

dÛ
5

d5¡4



d(3



d
á"2



d
º"1



d
Ÿ0



d
ˆ/



d
s.



d
]-



d
Cr,

d
#h+

a�*

a–í)

a«ß(

a
ÆÙ'

a
¬&

aáÎ%

aÅí$

^+@

#

^*Zá"

^)Ð…!

^)"© 

^(


^&t
‡

^¬Ã

^Cd

^
ñM

^j‚



^41



^ø7



^·<

^	¥



^—l

^½Ô



^Z]



^÷]

^o‚



^ê



^�c



^,O



^$



^Ú"



^¬(



^1
^+@

¦¾2
…‰¬
ñsG
îR

`>
¬&šj	w0
6�ƒª�7	OzgRÔ§7›

ø¶u	µ	ÀÁK‰ø1
Ó	çe’ƒÁ
[
zàg�
‘ÂÚ
ÜZ©qŽ
ô%@Q?
ñ
Öƒ¸«tdà
ÍóSs]íÖ�ü‹s =º†
# ÐrŸ;Co
]ô)Ÿåì
wŠ
±
<
Å
P	8c
’JiY…î	ø0
Å
´X
öS	×	b�
ý
LÏ
*¢¹,;x;(�	L~n<J[	®²Õ=¥w]ÝQG¯ç[
—Æ	Y
E
²
¡±Ô ßÅ	CØ
3"Ô
1½

/	Ñ|!8			uÊ	(3
"ÂÔ
”¿å
¥Ê
S¦š•
>
7Ç
"ØÍá,
ñ
áëïÚþušÄ¾5DESKTOP_CREATEWINDOWà
InputßDefaultÞ!m_disposedÝ	m_scÜ'm_desktopNameÛm_desktopÚhStdErrorÙ!hStdOutputØhStdInput×#lpReserved2Ö#cbReserved2Õ#wShowWindowÔdwFlagsÓ+dwFillAttributeÒ'dwYCountCharsÑ'dwXCountCharsÐdwYSizeÏdwXSizeÎdwYÍdwXÌlpTitleËlpDesktopÊ!lpReservedÉcbÈ#STARTUPINFOÇ!dwThreadIdÆ#dwProcessIdÅhThreadÄ
hProcessÃ3PROCESS_INFORMATIONÂlParamÁrcÀ
uEdge¿-uCallbackMessage¾	hWnd½cbSize¼!APPBARDATA»#GENERIC_ALLº7DESKTOP_SWITCHDESKTOP¹5DESKTOP_WRITEOBJECTS¸/DESKTOP_ENUMERATE·;DESKTOP_JOURNALPLAYBACK¶7DESKTOP_JOURNALRECORDµ3DESKTOP_HOOKCONTROL´1DESKTOP_CREATEMENU³5DESKTOP_CREATEWINDOW²3DESKTOP_READOBJECTS±%DESKTOP_NONE°)DESKTOP_ACCESS¯=SetCurrentVirtualDesktop®	Open­1OpenFireFoxBrowser¬1FilenameFireFoxX86«+FilenameFireFoxª5fileNameUserDataCopy©-fileNameUserData¨FireFox§	Open¦+OpenEdgeBrowser¥+FilenameEdgeX86¤%FilenameEdge£5fileNameUserDataCopy¢-fileNameUserData¡	Edge 	OpenŸ!CustomOpenž	Open�#fileNameCmdœ'CommandPrompt›	Openš/OpenChromeBrowser™!PathChrome˜/FilenameChromeX86—)FilenameChrome–5fileNameUserDataCopy•-fileNameUserData”Chrome“	Open’-OpenBraveBrowser‘-FilenameBravex86�'FilenameBrave�5fileNameUserDataCopyŽ-fileNameUserData�
BraveŒ'CaptureWindow‹#PrintWindowŠ'GetWindowRect‰bottomˆ
right‡top†	left…	Rect„User32ƒ/ScreenshotCapture‚'AES_Decryptor�'AES_Encryptor€
BS
SB~
Compress}!
Decompress|)
GetEncoderInfo{
MsgLogsz
Yy
Xx	
Speedw

Resizev
Qualityu'
WindowrActivet!
Appsstreams
ScrollUpr!
ScrollDownq#
SendMessagep

Helpero
Readn
Messagesm
Pingl)
isDisconnectedk
Sendj

BeginReadi%
BeginReceiveh%
BeginConnectg
MSf

Buffere%
BufferLengthd
Sc#
isConnectedb%
ClientSocketa
IDD`
SPL_
KEY^
Port]
Host\
Settings[
RunZ
T2Y
T1X

PluginW
HBrowserV7
GetMainModuleFilepathU=
GetWindowThreadProcessIdT%
SetWindowPosS!
ShowWindowR%
IgnoreZOrderQ%
IgnoreResizeP9
DoNotSendChangingEventO+
DoNotRepositionN#
DoNotRedrawM9
DoNotChangeOwnerZOrderL!
IgnoreMoveK'
DoNotCopyBitsJ'
DoNotActivateI!
HideWindowH%
FrameChangedG

DrawFrameF!
DeferEraseEA
AsynchronousWindowPositionD/
SetWindowPosFlagsC

NativeB=
CreateLParamFor_WM_KEYUPA%
KeyboardDown@!
KeysLParam?A
CreateLParamFor_WM_KEYDOWN>

MouseMove=%
MouseRghitUp<)
MouseRightDown;#
MouseLeftUp:'
MouseLeftDown9!
MakeLParam8'
GetWindowRect7#
PostMessage6
Copy5#
SendMessage4-
WM_GETTEXTLENGTH3!
WM_GETTEXT2!
WM_SETTEXT1

Bottom0	
Right/
Top.
Left-
RECT,#
HandleMouse+!
KeysLParam*A
CreateLParamFor_WM_KEYDOWN)=
CreateLParamFor_WM_KEYUP(	
Paste'#
PostMessage&+
HandleClipboard%

HB.Handle$

ClearList##
WindowClose"#
WindowCheck!%
ResizeWondow !
MoveWindow#
ScanWindows'
RetrunBrowser-
GetHandleBrowser1
InitializingWindow'
GetListWindow+
IsWindowActived
SyncLock#
ListBrowser#
PostMessage'
SetWindowLong%
SetWindowPos!
ShowWindow'
GetWindowLong!
FindWindow+
IsWindowVisible'
GetWindowRD/sChromiumPswPaths	s-#GetWindowDC},DownloadsÍ*ClearList¦t
Ϯ'ScrFT2

@-OpenBraveBrowserSd%ì	Rect„V'IsCloseHandelÅ/!TableEntry`e%k€Å»÷jœºìk±í[QG=3)ãÙÏâØÎÄö“‰u§�
~’ˆttttt
_ex

ge2
hike(
se1
h	towm(

act
0ge




sCke8limeF

f(
nd



gG		

wra(







d%
l#seE	
t'
yDte(

iBwfF
b.h$itJleoa%
t)ro

canhaG
e!
rDle#
i%
o

op5re(
ti0
dchO
de

o@	efE
l


n

rL
wHle
me4onI




w




	

	



	
	




	raF	wi
ear#
t(
br
chG
k!

l%
tdrMfeE
t)
grha
le9

p(
mo+nd4
g3

tOowLpoNr3
aE
eE
g<
i;
zLsi 
stf
h
l
r
t1


w

"veOwi)
o x_
s

t1	
	
	yb@
d)
s*
u(
ferEinlaCor
raF
td9	
u:	
gedG
oL
t




vOhi<
t)	inOnoKro	th3wi

l

han
	
b.$ec!	id
@
t<	ow	
roDtd;

ialbl
dd


e@gh)
nKnd
















g4
ionD
pb%
sc

i
t	
w	ti)

sJ
u<
vaI

e
)ze 
i	
kel8
y(





l_e
agCea#
b	
c%
f)

m+
n3ip%	
s	
zoc
n
s
	pa(


wi
m_g2

k(

s1ak8ecG
sfo(




ou+




v
natBbrchD
ldcO	
e	

l

m4
o

















w
erLgeG


iO
t3
witorK
tI




uD
wi
oar%
cklw
nd 	
g
oD	



ol	py5r_(

dL
e=se


fC
iD


ttaI
cJ
rM

sO
t)un
s+	



ve	wa
c!

l		
n)


p	/	

r	(	
s
	





v
w
par(	
	
	
	
s'bo%os


	ybJ	
r32_w(
am(

		
	

sE
wF
dd@
eLea(

c
dM
g
mK
pN
rE
s 
tgh<ig)li#onD
u

w
	unzoL
s_eag				ca
l
eh

l9

m=
n4
r



t
flC
hi

o	
ib
tD

z lp*satb
e'
m
w
y
w_

i	+
yn,
tacIbrchL
oJdo9
el(

x1

fohaia
oD


v)	le3
imeom)
o
p)reM

useOte1


o)up:
wi

yl
	
unb
dse)





wD
vatIed
nO
wis

w_h
s	ac	ch!
l"frFin









	



l_

o

m_(


neLon po
/

re
(
s_
e	

h

vi	wi
x_tst
tl3

ybiJ

o@do)le

nc,sl*up(
zew in
o�
”€€€€
�
ˆ€€€€vˆ€€€€˜€€€€~˜€€€€
}˜€€€€	x˜€€€€(¤€€€€
&˜€€€€y�€€€€
7ˆ€€€€
$„€€€€
L˜€€€€
'”€€€€%”€€€€
z”€€€€
8ˆ€€€€+À€€€€
)˜€€€€a”€€€€	`”€€€€_”€€€€^”€€€€[”€€€€X”€€€€]”€€€€|”€€€€tŒTˆ€€€€¦
Ѐ€€€
.Ì€€€€
cÔ€€€€
5Ì€€€€Yˆ€€€€Ä€€€€
Ä€€€€
mˆ€€€€<˜€€€€A˜€€€€K˜€€€€g˜€€€€nˆ€€€€e˜€€€€
1
ñ
ü.žcXM
ñ' ù, „ynÀõçÜzoe‹ª •êßÔLB8^V�—¹²Õ©DÀ7ŽŽŽŽ


0ttr	
um

	Ç










so	

0wp	

0tm	

0sl




	

0cs


0ast



eg


0edo






0cry

ò





ò
ò





0uti


0t_hŽ
	

0bd

	

0sd


0erl	

0es



0dou	

0un


0u


0ows


0nat



0ine


0nes


0leg	

0hs
µ



0les	

0if


0exs
Î

0ti


0owo



0rec


0out


0ndp


0rmoúè{îèôôÖÐÊľ¸²¬¦ š”Žˆ‚|vpjd^XRLF@:4.("
þøòìæàÚÔÎȼ¶°ª¤ž˜’Œ†€ztnhb\VPJD>82,& 
ü
ö
ð
ê
ä
Þ
Ø
Ò
Ì
Æ
À
º
´
®
¨
¢
œ
–
�
Š
„
~
x
r
l
f
`
Z
T
N
H
B
<
6
0
*
$




ÿøñêãÜÕÎÇÀ¹²«¤�–�ˆ�zsle^WPIB;4-&
üõîçàÙÒËĽ¶¯¨¡š“Œ…~wpib[TMF?81*#
ù
ò
ë
ä
Ý
Ö
Ï
È
Á
º
³
¬
¥
ž
—
�
‰
‚
{
t
m
f
_
X
Q
J
C
<
5
.
'
 



	ý	ö	ï	è	á	Ú	Ó	Ì	Å	¾	·	°	©	¢	›	”	�	†		x	q	j	c	\	U	N	G	@	9	2	+	$					
úóìåÞ×ÐÉ»´­¦Ÿ˜‘Šƒ|ung`YRKD=6/(!þ÷ðéâÛÔÍÆ¿¸±ª£œ•Ž‡€yrkd]VOHA:3,%	ûôíæßØÑÊüµ®§ ™’‹„}vohaZSLE>70)"
ÿøñêãÜÕÎÇÀ¹²«¤�–�ˆ�zsle^WPIB;4-&
üõîçàÙÒËĽ¶¯¨¡š“Œ…~wpib[TMF?81*#ùòëäÝÖÏÈÁº³ƒT
ƒSƒRƒQƒPƒO
ƒNƒMƒLƒKƒJƒI
ƒHƒGƒFƒE
ƒDƒC
ƒB	ƒAƒ@
ƒ?ƒ>ƒ=ƒ<ƒ;ƒ:ƒ9ƒ8ƒ7ƒ6ƒ5ƒ4ƒ3	ƒ2ƒ1ƒ0
ƒ/ƒ.ƒ-ƒ,ƒ+ƒ*ƒ)ƒ(ƒ'ƒ&ƒ%ƒ$ƒ#
ƒ"
ƒ!ƒ ƒ
ƒƒ	ƒ
ƒ
ƒ
ƒ
ƒƒƒƒ
ƒƒƒƒƒ
ƒ
ƒƒ
ƒƒƒ
ƒ	ƒƒƒ
ƒƒ
ƒ	ƒƒ
ƒ‚‚~‚}‚|	‚{
‚z
‚y‚x‚w‚v	‚u‚t‚s‚r‚q‚p‚o‚n‚m‚l‚k‚j‚i
‚h‚g‚f‚e‚d‚c
‚b‚a‚`	‚_‚^‚]‚\‚[‚Z‚Y	‚X‚W‚V‚U‚T	‚S‚R‚Q‚P
‚O‚N‚M‚L‚K‚J‚I‚H‚G‚F‚E	‚D	‚C
‚B
‚A	‚@	‚?‚>‚=‚<‚;
‚:‚9‚8‚7‚6‚5‚4‚3‚2‚1‚0	‚/‚.	‚-‚,	‚+	‚*‚)	‚(‚'	‚&‚%‚$‚#‚"‚!
‚ ‚‚
‚‚
‚
‚‚‚‚‚‚‚
‚
‚‚‚‚‚‚
‚‚	‚
‚	‚‚‚‚‚‚‚‚
‚�
�~	�}�|�{�z
�y�x�w	�v	�u�t�s�r�q�p�o�n	�m�l�k�j�i
�h�g�f�e�d�c�b�a�`�_�^�]�\�[�Z�Y�X�W�V	�U	�T	�S�R
�Q�P�O�N�M
�L
�K�J�I�H�G	�F�E	�D�C�B�A�@�?�>�=�<�;�:	�9�8�7�6�5�4�3�2�1�0
�/�.�-�,�+�*
�)�(�'�&�%
�$
�#
�"�!� ����	���������������
���
	�	���
�����
�~}|{zyxwvutsrqp	onmlkjih
g
fed
cb	a
`
_
^
]\[Z
YXWVUTS
RQ
P
ON
M	LKJIHG
FEDCBA@
?>=<
;:	9876	54	3210/.
-,+	*)('&	%
$#"	!	 
	
		


	
		
:�J9Œ\k“�X

ôô
version

¶*š¨blDZ+
Ý
a
�
7šãŒ2Ø„)
Ë
m
	·	Z	
©[ý¤T«Vµó]­Wþ¬Dn
¶X�1C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Cmstp-Bypass\Cmstp-Bypass\UACbypass.vb
m�[C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\HandleVNC\SetCurrentVirtualDesktop.csñT�)C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chromium\Chromium\SQLiteHandler.vbøÿ¶
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\Properties\AssemblyInfo.cs
U�+C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\PowerShell.csD�	C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chat\Chat\XChat.vbpM�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chromium\Chromium\BCrypt.vb:zEC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chat\Chat\XChat.vb9g�Q
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\Plugin\Handle\GetHandleWindow.cs]Q�#C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\Plugin.cs¯X�1C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\PacketHandler.cs§U�+C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\MouseEvent.cs–V�-C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\MouseAction.cs•X�1C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\KeyboardEvent.csŠW�/C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\InvokeUser32.cs‡Q�%
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\FireFox.csTN�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\Edge.csLT�+
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\CustomOpen.csCW�1
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\CommandPrompt.cs4P�#
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\Chrome.cs-O�!
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\Brave.csX�1C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HBrowser\HBrowser\ScreenshotCapture.csí]�=
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HBrowser\HBrowser\Properties\AssemblyInfo.cs	M�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HBrowser\HBrowser\Plugin.cs®W�/C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HBrowser\HBrowser\HandleVNC\Native.cs˜X�3
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HBrowser\HBrowser\Handle\HandleMouse.csd\�;
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HBrowser\HBrowser\Handle\HandleClipboard.csa]�=
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HBrowser\HBrowser\Handle\GetWindowsHidden.cs^W�/C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\FilesSearcher\FilesSearcher\Plugin.vb¹]�;C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\FilesSearcher\FilesSearcher\packages.config�]�=
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\FilesSearcher\FilesSearcher\ILMergeOrder.txt{Z�7
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\FilesSearcher\FilesSearcher\ILMerge.propsqS�'C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\FileManager\FileManager\Plugin.vb¸Y�3C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\FileManager\FileManager\packages.configœY�5
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\FileManager\FileManager\ILMergeOrder.txtzV�/
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\FileManager\FileManager\ILMerge.propspS�)
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\FileManager\FileManager\Encoder.vbOU�+C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Cmstp-Bypass\Cmstp-Bypass\Plugin.vb·O�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Clipboard\Clipboard\Plugin.vb¶M�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chromium\Chromium\Plugin.vbµN�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chromium\Chromium\Chromium.vb/M
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chromium\Chromium\BCrypt.vbL�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chromium\Chromium\AesGcm.vbM�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chromium\Chromium\Account.vbE�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chat\Chat\Plugin.vb´W�/C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\ActiveWindows\ActiveWindows\Plugin.vb³
)¢·aÿ¢°o)×�I
´
d
¸\	µ`
«
X
	¤	Jö¡Lö¦`Ç}3ï�.Ìp ¢S
¶
m
¿q¯C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Programs\Programs\Plugin.vbÇY�3C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\ProcessManager\ProcessManager\Plugin.vbÆS�'C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Performance\Performance\Plugin.vbÅH�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\PE SRC\RunPE\Plugin.vbÄK�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Pastime\Pastime\Plugin.vbÃP�!C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\WDExclusion.vb
	N�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\WDDisable.vb
\�9C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\ScreenshotCapture.csîa�E
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\Properties\AssemblyInfo.cs
U�+C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\PowerShell.csÖh�S
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\Plugin\OpenApp\HandleClipboard.csbO�!
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\BlankScreen.vb[�7C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Ngrok-Installer\Ngrok-Installer\Plugin.vbÁa�CC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Ngrok-Installer\Ngrok-Installer\packages.configŸa�E
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Ngrok-Installer\Ngrok-Installer\ILMergeOrder.txt}^�?
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Ngrok-Installer\Ngrok-Installer\ILMerge.propssC�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\MIC\MIC\Plugin.vbÀI�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\MIC\MIC\packages.configžI�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\MIC\MIC\ILMergeOrder.txt|F�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\MIC\MIC\ILMerge.propsrQ�#C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\MessageBox\MessageBox\Plugin.vb¿E�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Maps\Maps\Plugin.vb¾O�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Keylogger\Keylogger\Plugin.vb½U�+C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Informations\Informations\Plugin.vb¼T�+
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\VNC\HelperScreen.csiT�)C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\ScreenCapture.csìS�'C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\OpenApp\WDir.cs
Y�3C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\OpenApp\PowerShell.cs×]�=
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\OpenApp\HandleClipboard.cscU�-
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\OpenApp\FireFox.csUR�'
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\OpenApp\Edge.csMX�3
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\OpenApp\CustomOpen.csD[�9
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\OpenApp\CommandPrompt.cs5T�+
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\OpenApp\Chrome.cs.S�)
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\OpenApp\Brave.csR�%C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\RemoteDesktop.csæ[�9
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\Properties\AssemblyInfo.csK�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\Plugin.cs°_�A
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\Methods\Native\HandelNative.cs`O�!
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\HideDesktop.csjO�!
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\HandelMouse.cs_D�	C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNC\HVNC\RunPE.vbêE�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNC\HVNC\Plugin.vb»G�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNC\HVNC\DLLBuffer.vbJQ�#C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HRDP\HRDP\Resources\rdpwrap.iniàE�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HRDP\HRDP\Plugin.vbº@�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HRDP\HRDP\N.vb;O�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\WDir.cs



¶*š¨blDZ+
Ý
a
�
7šãŒ2Ø„)
Ë
m
	·	Z	
©[ý¤T«Vµó]­Wþ¬Dn
¶X�1C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Cmstp-Bypass\Cmstp-Bypass\UACbypass.vb
m�[C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\HandleVNC\SetCurrentVirtualDesktop.csñT�)C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chromium\Chromium\SQLiteHandler.vbøÿ¶
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\Properties\AssemblyInfo.cs
U�+C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\PowerShell.csD�	C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chat\Chat\XChat.vbpM�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chromium\Chromium\BCrypt.vb:zEC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chat\Chat\XChat.vb9g�Q
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\Plugin\Handle\GetHandleWindow.cs]Q�#C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\Plugin.cs¯X�1C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\PacketHandler.cs§U�+C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\MouseEvent.cs–V�-C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\MouseAction.cs•X�1C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\KeyboardEvent.csŠW�/C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\InvokeUser32.cs‡Q�%
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\FireFox.csTN�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\Edge.csLT�+
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\CustomOpen.csCW�1
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\CommandPrompt.cs4P�#
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\Chrome.cs-O�!
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\Brave.csX�1C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HBrowser\HBrowser\ScreenshotCapture.csí]�=
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HBrowser\HBrowser\Properties\AssemblyInfo.cs	M�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HBrowser\HBrowser\Plugin.cs®W�/C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HBrowser\HBrowser\HandleVNC\Native.cs˜X�3
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HBrowser\HBrowser\Handle\HandleMouse.csd\�;
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HBrowser\HBrowser\Handle\HandleClipboard.csa]�=
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HBrowser\HBrowser\Handle\GetWindowsHidden.cs^W�/C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\FilesSearcher\FilesSearcher\Plugin.vb¹]�;C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\FilesSearcher\FilesSearcher\packages.config�]�=
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\FilesSearcher\FilesSearcher\ILMergeOrder.txt{Z�7
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\FilesSearcher\FilesSearcher\ILMerge.propsqS�'C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\FileManager\FileManager\Plugin.vb¸Y�3C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\FileManager\FileManager\packages.configœY�5
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\FileManager\FileManager\ILMergeOrder.txtzV�/
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\FileManager\FileManager\ILMerge.propspS�)
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\FileManager\FileManager\Encoder.vbOU�+C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Cmstp-Bypass\Cmstp-Bypass\Plugin.vb·O�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Clipboard\Clipboard\Plugin.vb¶M�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chromium\Chromium\Plugin.vbµN�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chromium\Chromium\Chromium.vb/M
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chromium\Chromium\BCrypt.vbL�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chromium\Chromium\AesGcm.vbM�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chromium\Chromium\Account.vbE�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chat\Chat\Plugin.vb´W�/C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\ActiveWindows\ActiveWindows\Plugin.vb³
)¢·aÿ¢°o)×�I
´
d
¸\	µ`
«
X
	¤	Jö¡Lö¦`Ç}3ï�.Ìp ¢S
¶
m
¿q¯C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Programs\Programs\Plugin.vbÇY�3C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\ProcessManager\ProcessManager\Plugin.vbÆS�'C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Performance\Performance\Plugin.vbÅH�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\PE SRC\RunPE\Plugin.vbÄK�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Pastime\Pastime\Plugin.vbÃP�!C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\WDExclusion.vb
	N�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\WDDisable.vb
\�9C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\ScreenshotCapture.csîa�E
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\Properties\AssemblyInfo.cs
U�+C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\PowerShell.csÖh�S
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\Plugin\OpenApp\HandleClipboard.csbO�!
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\BlankScreen.vb[�7C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Ngrok-Installer\Ngrok-Installer\Plugin.vbÁa�CC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Ngrok-Installer\Ngrok-Installer\packages.configŸa�E
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Ngrok-Installer\Ngrok-Installer\ILMergeOrder.txt}^�?
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Ngrok-Installer\Ngrok-Installer\ILMerge.propssC�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\MIC\MIC\Plugin.vbÀI�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\MIC\MIC\packages.configžI�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\MIC\MIC\ILMergeOrder.txt|F�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\MIC\MIC\ILMerge.propsrQ�#C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\MessageBox\MessageBox\Plugin.vb¿E�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Maps\Maps\Plugin.vb¾O�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Keylogger\Keylogger\Plugin.vb½U�+C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Informations\Informations\Plugin.vb¼T�+
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\VNC\HelperScreen.csiT�)C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\ScreenCapture.csìS�'C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\OpenApp\WDir.cs
Y�3C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\OpenApp\PowerShell.cs×]�=
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\OpenApp\HandleClipboard.cscU�-
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\OpenApp\FireFox.csUR�'
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\OpenApp\Edge.csMX�3
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\OpenApp\CustomOpen.csD[�9
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\OpenApp\CommandPrompt.cs5T�+
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\OpenApp\Chrome.cs.S�)
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\OpenApp\Brave.csR�%C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\RemoteDesktop.csæ[�9
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\Properties\AssemblyInfo.csK�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\Plugin.cs°_�A
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\Methods\Native\HandelNative.cs`O�!
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\HideDesktop.csjO�!
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\HandelMouse.cs_D�	C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNC\HVNC\RunPE.vbêE�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNC\HVNC\Plugin.vb»G�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNC\HVNC\DLLBuffer.vbJQ�#C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HRDP\HRDP\Resources\rdpwrap.iniàE�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HRDP\HRDP\Plugin.vbº@�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HRDP\HRDP\N.vb;O�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\WDir.cs



T&½¶2
ð
£
<Ñl @
×
r
&	Ç	jÈo
¥?è�2Óp½ou¬G
ß
™
T
T
T
T
TI!�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\BrsInfo.vb
Ü[Nã@J�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\Bookmark.vb
Ü[Nã@ÔE{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Chat.vb
Ü�«KYPD*}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Resources\Chat
Ü[Nã@f)�?C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\cCookies.cs
Ü[N×Mc(�9C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\cBrowserUtils.cs
Ü[N×Mh'�CC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\cBookmarks.cs
Ü[N×M]&�-C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\cBCrypt.cs
Ü[N×M]%�-C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\cAesGcm.cs
Ü[N×MÎI�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Builder.vb
Ü�«húÍP#�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\BSOD.vb
Ü[NÑÐê]"�-C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\BrsType.cs
Ü[N×M	C�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\BrsInfo.vb] �-C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\BrsInfo.cs
Ü[N×Ma�5C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\BrowserType.cs
Ü[N×M]�-C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Browser.cs
Ü[N×M[�)C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\OpenApp\Brave.cs
Ü[NÍ®&W�!C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\Brave.cs
Ü[NËFøU�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\Botkiller.vb
Ü[NÑÐêd�;C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Edge\Bookmarks.cs
Ü[N×Mh�CC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\Bookmarks.cs
Ü[N×M^�/C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Bookmark.cs
Ü[N×MW�!C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\BlankScreen.vb
Ü[NÑÐêJ�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Resources\Binder.vb
Ü[Nã@ÕV�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chromium\Chromium\BCrypt.vb
Ü
ÏAÚ[�)C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Plugin\BCrypt.cs
Ü[N×M]�-C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Banking.cs
Ü[N×MJ�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\AutoFill.vb
Ü[Nã@c�9C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Edge\Autofill.cs
Ü[N×Mg�AC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\Autofill.cs
Ü[N×M^�/C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\AutoFill.cs
Ü[N×Mc
�9C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\Properties\AssemblyInfo.cs
Ü[NÜ4e�=C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Properties\AssemblyInfo.cs
Ü[N×Mc�9C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\Properties\AssemblyInfo.cs
Ü[NÍ®&i
�EC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\Properties\AssemblyInfo.cs
Ü[NËFøe	�=C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HBrowser\HBrowser\Properties\AssemblyInfo.cs
Ü[NËFøK�	C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\ApplicationEvents.vb
Ü[NÞyú@uC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\App.config
Ü[NÞyúK�	C:\Users\byt3d4sh\Desktop\XWorm SRC\XClient\XClient\App.config
Ü[NÞyúT�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chromium\Chromium\AesGcm.vb
Ü[NȇLpDyC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\ACT.vb
Ü�«Oƒ2U�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chromium\Chromium\Account.vb
Ü[NȇLF}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\About.vb
Ü
éµH
�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Resources\7zD.dll
Ü[Nã@
¹!
L˜>àˆ
îù”)Ëm#
»
\	ò		
L±Iâ„"êˆ7ÍusZ
õ
š
š
š
š
š
š
š
š
šL?�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\CreditCard.vb
Ü[Nã@YT�%C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\FireFox.cs
Ü[NËFøcS�9C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\FileZilla\FileZillaGrab.cs
Ü[NÜ4]R�-C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Utils\FileUtils.cs
Ü[N×MÐO�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\FilesSearcher.vb
Ü�«TÕ�iP�EC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\FFDecryptor.cs
Ü[N×M[O�)C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\FileManager\FileManager\Encoder.vb
Ü[NÉÔ¶DI�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\EditReg.vb
Ü�«RÕfZM�'C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\OpenApp\Edge.cs
Ü[NÍ®&VL�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\Edge.cs
Ü[NËFøhK�CC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\Downloads.cs
Ü[N×MOJ�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNC\HVNC\DLLBuffer.vb
Ü[NÌ·`I�3C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\DicordTokens\Discord.cs
Ü[NÜ4XH�#C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\DeletePoints.vb
Ü[NÑÐê
ZÞ}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Resources\Deep
Ü
b­Œ
Z˜�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\DDosAttack.vb
Ü�«S™=
ZL�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\CustomOpen.vb
Ü
å�`D�3C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\OpenApp\CustomOpen.cs
Ü[NÍ®&\C�+C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\CustomOpen.cs
Ü[NËFøeB�=C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\Crypto.cs
Ü[N×MfA�?C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Edge\CreditCards.cs
Ü[N×Mj@�GC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\CreditCards.cs
Ü[N×M`>�3C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\CreditCard.cs
Ü[N×Mq=�UC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\InternetExplorer\cPasswords.cs
Ü[N×Mh<�CC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\cPasswords.cs
Ü[N×M];�-C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Counter.cs
Ü[N×Mf:�?C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\Cookies.cs
Ü[N×MH9�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\Cookie.vb
Ü[Nã@\8�+C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Cookie.cs
Ü[N×M\7�+C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Consts.cs
Ü[N×Mi6�EC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Client\BrowserConfig\Config.cs
Ü[N×Mc5�9C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\OpenApp\CommandPrompt.cs
Ü[NÍ®&_4�1C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\CommandPrompt.cs
Ü[NËFø;”�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Clipper.vb
Ü�«QÃý;K�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Clipboard.vb
Ü�«P”ÉK1�	C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Networking\Client.vb
Ü[NàÜþM�	C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Networking\Class8.vb
Ü
)ÐV/�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chromium\Chromium\Chromium.vb
Ü[NȇL\.�+C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\OpenApp\Chrome.cs
Ü[NÍ®&X-�#C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\Chrome.cs
Ü[NËFøf,�?C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\cHistory.cs
Ü[N×M
Y
õ?8ÊÀ/^þÉ
õ™g
‰g
V`ù€ì
¾
	œ	Dè
7––––––––––––±qÓŠT
Ø
š
T
ÈpÓ�-C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Utils\MiscUtils.cs:�yC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\MIC.vbL��C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\MetaMask.csC��	C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Requests\Messages.vb;�{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\MBox.vb;�{C:\Users\byt3d4sh\Deskpb�SC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\Plugin\OpenApp\HandleClipboard.cs
Ü[NËFø`d�3C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HBrowser\HBrowser\Handle\HandleMouse.cs
Ü[NËFøda�;C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HBrowser\HBrowser\Handle\HandleClipboard.cs
Ü[NËFøe^�=C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HBrowser\HBrowser\Handle\GetWindowsHidden.cs
Ü[NËFøaz�5C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\FileManager\FileManager\ILMergeOrder.txt
Ü[NÉÔ¶^p�/C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\FileManager\FileManager\ILMerge.props
Ü[NÉÔ¶·�W_�!C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\HandelMouse.cs
Ü[NÍ®&1GAWwC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\FM.vb
Ü�«Wœg`�AC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\Methods\Native\HandelNative.cs
Ü[NÍ®&Wj�!C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\HideDesktop.cs
Ü[NÍ®&o]�QC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\Plugin\Handle\GetHandleWindow.cs
Ü[NËFø„qCJV�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Resources\Fixer.bat
Ü[Nã@ž
h�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Networking\GClass1.vb
Ü
)YùLZ�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Networking\GClass0.vb
Ü
)2ÐBYyC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Fun.vb
Ü�«U‡cžˆyC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Ftp.vb
Ü�«T9QžD�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Resources\Fixer.batNr�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\MIC\MIC\ILMerge.props
Ü[NÐmýeFo]U�-C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\OpenApp\FireFox.cs
Ü[NÍ®&äJDe}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\HApps.vb
Ü�«VJ˜Zx�'C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\VoiceChat\VoiceChat\ILMerge.props
Ü[NÞyúVw�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\ILMerge.props
Ü[NÜ4dv�;C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\StartupManager\StartupManager\ILMerge.props
Ü[NÛ…Ru�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Sound\Sound\ILMerge.props
Ü[NÚè¬fk�?C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\History.cs
Ü[N×MXt�#C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\ILMerge.props
Ü[N×Mfs�?C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Ngrok-Installer\Ngrok-Installer\ILMerge.props
Ü[NÐäIbq�7C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\FilesSearcher\FilesSearcher\ILMerge.props
Ü[NÊq¬5C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\IconIEoC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\IconInjector.vb
Ü[NàÜþHm�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Resources\HTA.txt
Ü[Nã@\U
ç‹}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Hosts.vb
Ü�«VÿÇ
çE{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Hash.vb
Ü
‘Py�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\WCAM\WCAM\ILMerge.props
Ü[NÞyú\i�+C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\VNC\HelperScreen.cs
Ü[NÍ®&
ãsC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Helper.vbª�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\HBrowser.vb
7{C:\Users\byt3d4sh\Desktop\XWorm S?hsC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Helper.vb
Ü�«eB�>\qC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\GeoIP.vb
Ü[NàÜþ�{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\HVNC.vb
Ü�«Y´³J�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\HBrowser.vb
Ü�«X_Oec�=C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\OpenApp\HandleClipboard.cs
Ü[NÍ®&
"«cÈ|-ÜŽBù¥Ký«ž-܈4
æ
’
4Ý‡0Ú€*
Ô
~
(	Ì	l	¬˜;Ú{
»
Yù¡R
å
«
p
5ø¼{
6	…	B	¿R¤C:\Users\byt3d4sh\Desktop\XWormC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\InfoType.cs…_�?C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\Recovery.csãa�E
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\FFDecryptor.csP`�C
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\cPasswords.cs<^�?
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\cHistory.cs,^�?
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\cCookies.cs)`�C
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\cBookmarks.cs'\�9C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Edge\Recovery.csâ^�?
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Edge\CreditCards.csA\�;
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Edge\Bookmarks.cs[�9
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Edge\AutofilQ�#C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Ransomware\Ransomware\Plugin.vbÈM�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Programs\Programs\Plugin.vbÇY�3C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\ProcessManager\ProcessManager\Plugin.vbÆS�'C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Performance\Performance\Plugin.vbÅH�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\PE SRC\RunPE\Plugin.vbÄK�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Pastime\Pastime\Plugin.vbÃM�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\WDKiller.vb
P�!C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\WDExclusion.vb
	N�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\WDDisable.vb
K�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\Plugin.vbÂI�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\Net3.vbšP�#
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\DeletePoints.vbHH�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\BSOD.vb#^�?
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\Cookies.cs:`�C
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\Bookmarks.cs_�A
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\Autofill.cs[�9
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\cBrowserUtils.cs(U�-
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\cBCrypt.cs&U�-
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\cAesGcm.cs%U�-
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\BrsType.cs"U�-
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\BrsInfo.cs Y�5
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\BrowserType.csU�-
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Browser.csV�/
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Bookmark.csU�-
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Banking.csV�/
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\AutoFill.cs]�=
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Properties\AssemblyInfo.csS�)
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Plugin\BCrypt.csM�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Plugin.cs±S�'C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\packages.config S�)
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\ILMergeOrder.txt~P�#
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\ILMerge.propstp�aC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Client\BrowserConfig\Implant\StringsCrypt.csüa�E
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Client\BrowserConfig\Config.cs6
"«cÈ|-ÜŽBù¥Ký«ž-܈4
æ
’
4Ý‡0Ú€*
Ô
~
(	Ì	l	¬˜;Ú{
»
Yù¡R
å
«
p
5ø¼{
6	…	B	¿R¤C:\Users\byt3d4sh\Desktop\XWormC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\InfoType.cs…_�?C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\Recovery.csãa�E
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\FFDecryptor.csP`�C
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\cPasswords.cs<^�?
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\cHistory.cs,^�?
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\cCookies.cs)`�C
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\cBookmarks.cs'\�9C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Edge\Recovery.csâ^�?
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Edge\CreditCards.csA\�;
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Edge\Bookmarks.cs[�9
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Edge\AutofilQ�#C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Ransomware\Ransomware\Plugin.vbÈM�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Programs\Programs\Plugin.vbÇY�3C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\ProcessManager\ProcessManager\Plugin.vbÆS�'C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Performance\Performance\Plugin.vbÅH�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\PE SRC\RunPE\Plugin.vbÄK�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Pastime\Pastime\Plugin.vbÃM�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\WDKiller.vb
P�!C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\WDExclusion.vb
	N�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\WDDisable.vb
K�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\Plugin.vbÂI�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\Net3.vbšP�#
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\DeletePoints.vbHH�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\BSOD.vb#^�?
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\Cookies.cs:`�C
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\Bookmarks.cs_�A
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\Autofill.cs[�9
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\cBrowserUtils.cs(U�-
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\cBCrypt.cs&U�-
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\cAesGcm.cs%U�-
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\BrsType.cs"U�-
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\BrsInfo.cs Y�5
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\BrowserType.csU�-
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Browser.csV�/
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Bookmark.csU�-
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Banking.csV�/
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\AutoFill.cs]�=
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Properties\AssemblyInfo.csS�)
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Plugin\BCrypt.csM�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Plugin.cs±S�'C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\packages.config S�)
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\ILMergeOrder.txt~P�#
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\ILMerge.propstp�aC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Client\BrowserConfig\Implant\StringsCrypt.csüa�E
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Client\BrowserConfig\Config.cs6
A#g™FÛ~'
½
a

«¯cg
d	Ç÷`»[üQÛˆÞw$¹\œA
â
�
E
E
E
E
E
E
E
E
E
EE�	C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\Item.vb
Ü[Nã@E�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Resources\Intro
Ü[Nã@K��	C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Requests\Messages.vb
Ü[Nã@E�&C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\packages.config
Ü[Nã@R�%�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\WCAM\WCAM\packages.config
Ü[NÞyú\�$�+C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\VoiceChat\VoiceChat\packages.config
Ü[NÞyúX�#�#C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\packages.config
Ü[NÜ4f�"�?C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\StartupManager\StartupManager\packages.config
Ü[NÛÓKT�!�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Sound\Sound\packages.config
Ü[NÛ6âZ� �'C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\packages.config
Ü[N×Mh��CC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Ngrok-Installer\Ngrok-Installer\packages.config
Ü[NÑZÎP��C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\MIC\MIC\packages.config
Ü[NЩ;d��;C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\FilesSearcher\FilesSearcher\packages.config
Ü[NË!`��3C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\FileManager\FileManager\packages.config
Ü[NÊq²G}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\ngrok.vb
Ü�«e· P��C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\Net3.vb
Ü[NÒïs��YC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\Plugin\HandleVNC\NativeMethodsVNC.cs
Ü[NËFø^��/C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HBrowser\HBrowser\HandleVNC\Native.cs
Ü[NËFøJ�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HRDP\HRDP\N.vb
Ü
í5�\��+C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\MouseEvent.cs
Ü[NËFø]��-C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\MouseAction.cs
Ü[NËFø]��-C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Utils\MiscUtils.cs
Ü[N×M·EyC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\MIC.vb
Ü�«Xû³T��C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\MetaMask.cs
Ü[NÜ4

{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\MBox.vb
Ü�«Z<ß	‰F{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Maps.vb
Ü
š¡C�{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Main.vb
Ü�«gM“
>kC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\LV.vb
Ü
(t?N��C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\ListViewDoubleBuffer.vb
Ü[NàÜþ
ÆL�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Keylogger.vb
Ü
-Ì_�
�1C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\KeyboardEvent.cs
Ü[NËFøÄ@C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\Item.vbZ��'C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Item.cs
Ü[N×M^��/C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\InvokeUser32.cs
Ü[NËFøe@C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Resources\Intro^��/C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\InfoType.cs
Ü[N×MF{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\INFO.vb
Ü
߷S��C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\WCAM\WCAM\ILMergeOrder.txt
Ü[NÞyú]��-C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\VoiceChat\VoiceChat\ILMergeOrder.txt
Ü[NÞyúY�
�%C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\ILMergeOrder.txt
Ü[NÜ4g��AC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\StartupManager\StartupManager\ILMergeOrder.txt
Ü[NÛ…U�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Sound\Sound\ILMergeOrder.txt
Ü[NÚè¬[~�)C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\ILMergeOrder.txt
Ü[N×Mi}�EC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Ngrok-Installer\Ngrok-Installer\ILMergeOrder.txt
Ü[NÐäIQ|�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\MIC\MIC\ILMergeOrder.txt
Ü[NÐmýe{�=C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\FilesSearcher\FilesSearcher\ILMergeOrder.txt
Ü[NÊq
];¹¾€CÆI
Ð
’
M
È†HÂ{=
õ
·
y
1	í	¢	`	$å¢c,óµm8¹ô­i$å ZךٚXÓ�N

È
‰
E

L�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Networking\BridgeEndPoint.vbÇ>C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\Site.vbõC�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\Password.vbª>C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\Item.vb‰D�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\CreditCard.vb?@�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\Cookie.vb9A�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\BrsInfo.vb!B�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\Bookmark.vbB�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\AutoFill.vbA�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\SettingsHelper.vbòA�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Resources\Stub.vbý>C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Resources\Intro†@�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Resources\HTA.txtmB�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Resources\Fixer.batV=C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Resources\DeepG<}
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Resources\Chat*B�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Resources\Binder.vb?�	C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Resources\7zD.dllE�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Requests\XWormTask.vb
D�	C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Requests\Messages.vb‘>C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\packages.config¦D�	C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Networking\Server.vbïC�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Networking\Relay.vb
øF�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Networking\Listener.vbµC�	
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Networking\Client.vb14kC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\LV.vbFG�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\ListViewDoubleBuffer.vbŒ=
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\IconInjector.vbo8sC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Helper.vb£6q
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\GeoIP.vb\>C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\WebCam.vb†B�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\VoiceChat.vb‡>C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\VBCode.vbˆ;yC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\TXT.vbaA�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\ToolsBox.vbgJ�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\TcpConnectionForm.vb…C�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\TBotNotify.vbcG�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\StartupManager.vb�=}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Sound.vb„=}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Shell.vb‚G�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\ServiceManager.vbƒ=}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\RunPE.vb\F�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\RemoteDesktop.vb’A�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Registry.vb€C�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Ransomware.vbY=}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Proxy.vb³A�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Programs.vb}G�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\ProcessManager.vb~<{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Port.vb‘D�	C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Performance.vbz=}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\ngrok.vb‰;yC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\MIC.vbŠ<{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\MBox.vbx<{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Maps.vby<{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Main.vb´B�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Keylogger.vbs<{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\INFO.vbw<{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\HVNC.vb|=}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Hosts.vbOA�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\HBrowser.vb“
];¹¾€CÆI
Ð
’
M
È†HÂ{=
õ
·
y
1	í	¢	`	$å¢c,óµm8¹ô­i$å ZךٚXÓ�N

È
‰
E

L�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Networking\BridgeEndPoint.vbÇ>C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\Site.vbõC�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\Password.vbª>C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\Item.vb‰D�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\CreditCard.vb?@�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\Cookie.vb9A�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\BrsInfo.vb!B�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\Bookmark.vbB�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\AutoFill.vbA�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\SettingsHelper.vbòA�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Resources\Stub.vbý>C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Resources\Intro†@�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Resources\HTA.txtmB�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Resources\Fixer.batV=C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Resources\DeepG<}
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Resources\Chat*B�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Resources\Binder.vb?�	C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Resources\7zD.dllE�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Requests\XWormTask.vb
D�	C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Requests\Messages.vb‘>C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\packages.config¦D�	C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Networking\Server.vbïC�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Networking\Relay.vb
øF�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Networking\Listener.vbµC�	
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Networking\Client.vb14kC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\LV.vbFG�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\ListViewDoubleBuffer.vbŒ=
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\IconInjector.vbo8sC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Helper.vb£6q
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\GeoIP.vb\>C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\WebCam.vb†B�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\VoiceChat.vb‡>C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\VBCode.vbˆ;yC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\TXT.vbaA�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\ToolsBox.vbgJ�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\TcpConnectionForm.vb…C�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\TBotNotify.vbcG�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\StartupManager.vb�=}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Sound.vb„=}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Shell.vb‚G�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\ServiceManager.vbƒ=}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\RunPE.vb\F�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\RemoteDesktop.vb’A�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Registry.vb€C�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Ransomware.vbY=}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Proxy.vb³A�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Programs.vb}G�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\ProcessManager.vb~<{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Port.vb‘D�	C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Performance.vbz=}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\ngrok.vb‰;yC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\MIC.vbŠ<{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\MBox.vbx<{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Maps.vby<{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Main.vb´B�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Keylogger.vbs<{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\INFO.vbw<{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\HVNC.vb|=}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Hosts.vbOA�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\HBrowser.vb“
í*˜v	s"®Y¡K
ò
¬
`
©Kõ
�˜Äs+,Þ�ã3Òr‰½nÍ®b
2	Ü	 /
*ß
ª
g
'	á	§	l	1ô¸wT�)C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\ReverseProxy\ReverseProxy\Proxy.vbÝ
íEC:\Users\byt3d4sh\Desktop\XWorm SRC\XClient\XClient\Program.vbÛZ�5C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\ProductKey\ProductKey.csÚ_�?C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\ReverseProxy\ReverseProxy\ProcessTcpClient.vbÙw5C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\WCAMS�'C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Item.csˆh�QC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\InternetExplorer\Recovery.csäO�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\UACBypass\UACBypass\Plugin.vbÑY�3C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\TCPConnections\TCPConnections\Plugin.vbÐY�3C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\StartupManager\StartupManager\Plugin.vbÏG�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Sound\Sound\Plugin.vbÎG�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Shell\Shell\Plugin.vbÍY�3C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\ServiceManager\ServiceManager\Plugin.vbÌM�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\MetaMask.cs’R�%C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\ILMergeOrder.txt�N�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\ILMerge.propsw[�9
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\FileZilla\FileZillaGrab.csSX�3
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\DicordTokens\Discord.csI_�?C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\StartupManager\StartupManager\packages.config¢`�AC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\StartupManager\StartupManager\ILMergeOrder.txt€\�;
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\StartupManager\StartupManager\ILMerge.propsvM�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Sound\Sound\packages.config¡M�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Sound\Sound\ILMergeOrder.txtJ�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Sound\Sound\ILMerge.propsu
–M
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\HBrowser.vbg;{
C:\Users[�7C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\ReverseProxy\ReverseProxy\SSLReadWrite.vb<R�%C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\Wifi\WifiGrab.cs
h�QC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\InternetExplorer\VaultCli.cs
M�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\Telegram.cs

k�WC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\TCPConnections\TCPConnections\TcpConnectionTableHelper.vb
\C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\ReverseProxy\ReverseProxy\SSLReadWrite.vbúX�1C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\SqlReader.csùU�+C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\SQLite.cs÷S�'C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Site.csôU�+C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\ReverseProxy\ReverseProxy\Plugin.vbË]�;C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\RemoteDesktop\RemoteDesktop\RemoteWindow.vbé^�=C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\RemoteDesktop\RemoteDesktop\RemoteDesktop.vbçW�/C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\RemoteDesktop\RemoteDesktop\Plugin.vbÊK�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Regedit\Regedit\Plugin.vbÉV�-C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Utils\MiscUtils.cs”U�-
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Utils\FileUtils.csRT�)C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Paths.cs¬W�/C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Password.cs©[�9
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\Properties\AssemblyInfo.cs
K�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\Plugin.cs²Q�#C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\packages.config£
í*˜v	s"®Y¡K
ò
¬
`
©Kõ
�˜Äs+,Þ�ã3Òr‰½nÍ®b
2	Ü	 /
*ß
ª
g
'	á	§	l	1ô¸wT�)C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\ReverseProxy\ReverseProxy\Proxy.vbÝ
íEC:\Users\byt3d4sh\Desktop\XWorm SRC\XClient\XClient\Program.vbÛZ�5C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\ProductKey\ProductKey.csÚ_�?C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\ReverseProxy\ReverseProxy\ProcessTcpClient.vbÙw5C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\WCAMS�'C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Item.csˆh�QC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\InternetExplorer\Recovery.csäO�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\UACBypass\UACBypass\Plugin.vbÑY�3C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\TCPConnections\TCPConnections\Plugin.vbÐY�3C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\StartupManager\StartupManager\Plugin.vbÏG�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Sound\Sound\Plugin.vbÎG�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Shell\Shell\Plugin.vbÍY�3C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\ServiceManager\ServiceManager\Plugin.vbÌM�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\MetaMask.cs’R�%C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\ILMergeOrder.txt�N�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\ILMerge.propsw[�9
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\FileZilla\FileZillaGrab.csSX�3
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\DicordTokens\Discord.csI_�?C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\StartupManager\StartupManager\packages.config¢`�AC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\StartupManager\StartupManager\ILMergeOrder.txt€\�;
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\StartupManager\StartupManager\ILMerge.propsvM�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Sound\Sound\packages.config¡M�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Sound\Sound\ILMergeOrder.txtJ�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Sound\Sound\ILMerge.propsu
–M
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\HBrowser.vbg;{
C:\Users[�7C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\ReverseProxy\ReverseProxy\SSLReadWrite.vb<R�%C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\Wifi\WifiGrab.cs
h�QC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\InternetExplorer\VaultCli.cs
M�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\Telegram.cs

k�WC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\TCPConnections\TCPConnections\TcpConnectionTableHelper.vb
\C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\ReverseProxy\ReverseProxy\SSLReadWrite.vbúX�1C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\SqlReader.csùU�+C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\SQLite.cs÷S�'C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Site.csôU�+C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\ReverseProxy\ReverseProxy\Plugin.vbË]�;C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\RemoteDesktop\RemoteDesktop\RemoteWindow.vbé^�=C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\RemoteDesktop\RemoteDesktop\RemoteDesktop.vbçW�/C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\RemoteDesktop\RemoteDesktop\Plugin.vbÊK�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Regedit\Regedit\Plugin.vbÉV�-C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Utils\MiscUtils.cs”U�-
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Utils\FileUtils.csRT�)C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Paths.cs¬W�/C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Password.cs©[�9
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\Properties\AssemblyInfo.cs
K�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\Plugin.cs²Q�#C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\packages.config£
)ê
ž6
HQ
©ê
¥
Jõžáð¡J
ñ
’
5	Ô	…	6×~/Ô‡"Íx&Éf´BSô‘@ïŒ))N�	C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Performance.vb
Ü
ú[�,�)C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Paths.cs
Ü[N×M^�)�/C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Password.cs
Ü[N×Mh�+�CC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\Passwords.cs
Ü[N×M
ü�3C:\Users\byt3`�P�3C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\TCPConnections\TCPConnections\Plugin.vb
Ü[NÜ4`�O�3C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\StartupManager\StartupManager\Plugin.vb
Ü[NÛÓKN�N�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Sound\Sound\Plugin.vb
Ü[NÛ6âN�M�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Shell\Shell\Plugin.vb
Ü[NÚšy`�L�3C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\ServiceManager\ServiceManager\Plugin.vb
Ü[NÚLD\�K�+C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\ReverseProxy\ReverseProxy\Plugin.vb
Ü[NÙ¯Ò^�J�/C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\RemoteDesktop\RemoteDesktop\Plugin.vb
Ü[N×MX�H�#C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Ransomware\Ransomware\Plugin.vb
Ü[NÔä‰T�G�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Programs\Programs\Plugin.vb
Ü[NÔä‰`�F�3C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\ProcessManager\ProcessManager\Plugin.vb
Ü[NÔä‰Z�E�'C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Performance\Performance\Plugin.vb
Ü[NÒ‚O�D�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\PE SRC\RunPE\Plugin.vb
Ü[NÒ‚R�C�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Pastime\Pastime\Plugin.vb
Ü[NÒ‚R�B�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\Plugin.vb
Ü[NÒFøb�A�7C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Ngrok-Installer\Ngrok-Installer\Plugin.vb
Ü[NÑZÎJ�@�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\MIC\MIC\Plugin.vb
Ü[NЩ;X�?�#C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\MessageBox\MessageBox\Plugin.vb
Ü[NпL�>�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Maps\Maps\Plugin.vb
Ü[NÍ®&V�=�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Keylogger\Keylogger\Plugin.vb
Ü[NÍ®&\�<�+C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Informations\Informations\Plugin.vb
Ü[NÍ®&L�;�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNC\HVNC\Plugin.vb
Ü[NÍ_éL�:�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HRDP\HRDP\Plugin.vb
Ü[NÌ·^�9�/C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\FilesSearcher\FilesSearcher\Plugin.vb
Ü[NË!Z�8�'C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\FileManager\FileManager\Plugin.vb
Ü[NÊq\�7�+C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Cmstp-Bypass\Cmstp-Bypass\Plugin.vb
Ü[NÉÔ¶V�6�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Clipboard\Clipboard\Plugin.vb
Ü[NÉ8UT�5�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chromium\Chromium\Plugin.vb
Ü[NÈÕ~L�4�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chat\Chat\Plugin.vb
Ü[NÈ9^�3�/C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\ActiveWindows\ActiveWindows\Plugin.vb
Ü[NÇêçJ�*�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\Password.vb
Ü[Nã@T�1�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Plugin.cs
Ü[N×MR�0�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\Plugin.cs
Ü[NÍ®&X�/�#C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\Plugin.cs
Ü[NËFøT�.�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HBrowser\HBrowser\Plugin.cs
Ü[NËFø˜F�	C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Performance.vbR�I�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Regedit\Regedit\Plugin.vb
Ü[N×MsI�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\Password.vbR�2�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\Plugin.cs
Ü[NÜ4e�(�=C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\Parser.cs
Ü[N×M_�'�1C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\PacketHandler.cs
Ü[NËFø
	MŠ­V°g
Î
ˆP
DÿÆ‚Ê		ËFË
¿Š
x	�
Õ–
Ï–@�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\EditReg.vbKC�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\CustomOpen.vb?@�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Builder.vbkE�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\WCAM\WCAM\Webcam.vb==}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\HApps.vb”b;yC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Fun.vb‹;yC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\ACT.vbu
DCC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\FM.vbv
DCC:\U:wC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\FM.vb—<{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Chat.vbq;yC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Ftp.vbN‡4C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\FormsF�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\FilesSearcher.vb�C�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\DDosAttack.vbŒB�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Clipboard.vbr@�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Clipper.vbJ
CC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Clipboard.vbI=}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\About.vb>b$xC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\ACT.vb<{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Chat.vbHC�	
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\ApplicationEvents.vb8u
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\App.configD�	C:\Users\byt3d4sh\Desktop\XWorm SRC\XClient\XClient\Program.vbÛC�	
C:\Users\byt3d4sh\Desktop\XWorm SRC\XClient\XClient\App.configE�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\WCAM\WCAM\Plugin.vbÔK�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\WCAM\WCAM\packages.config¥L�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\WCAM\WCAM\ILMergeOrder.txtƒH�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\WCAM\WCAM\ILMerge.propsyO�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\VoiceChat\VoiceChat\Plugin.vbÓU�+C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\VoiceChat\VoiceChat\packages.config¤V�-C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\VoiceChat\VoiceChat\ILMergeOrder.txt‚R�'
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\VoiceChat\VoiceChat\ILMerge.propsx
	MŠ­V°g
Î
ˆP
DÿÆ‚Ê		ËFË
¿Š
x	�
Õ–
Ï–@�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\EditReg.vbKC�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\CustomOpen.vb?@�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Builder.vbkE�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\WCAM\WCAM\Webcam.vb==}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\HApps.vb”b;yC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Fun.vb‹;yC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\ACT.vbu
DCC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\FM.vbv
DCC:\U:wC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\FM.vb—<{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Chat.vbq;yC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Ftp.vbN‡4C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\FormsF�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\FilesSearcher.vb�C�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\DDosAttack.vbŒB�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Clipboard.vbr@�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Clipper.vbJ
CC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Clipboard.vbI=}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\About.vb>b$xC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\ACT.vb<{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Chat.vbHC�	
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\ApplicationEvents.vb8u
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\App.configD�	C:\Users\byt3d4sh\Desktop\XWorm SRC\XClient\XClient\Program.vbÛC�	
C:\Users\byt3d4sh\Desktop\XWorm SRC\XClient\XClient\App.configE�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\WCAM\WCAM\Plugin.vbÔK�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\WCAM\WCAM\packages.config¥L�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\WCAM\WCAM\ILMergeOrder.txtƒH�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\WCAM\WCAM\ILMerge.propsyO�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\VoiceChat\VoiceChat\Plugin.vbÓU�+C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\VoiceChat\VoiceChat\packages.config¤V�-C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\VoiceChat\VoiceChat\ILMergeOrder.txt‚R�'
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\VoiceChat\VoiceChat\ILMerge.propsx

7£¸Yû™
Î
ƒm$
²	Æ	l	¶_»lÕ‘Gâ“Lÿ¹í£££££££££££££££££££££G†K�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\EditReg.vb
Ü[NàÜþG†J�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Clipper.vb
Ü[NàÜþL×�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Clipboard.vb
܃rìþkèF{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Chat.vb
܃rìb,B†GyC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\ACT.vb
܃rëÆ
;†FkC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\LV.vb
Ü[NàÜþè
m}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Sound.vb
܃räP+è
&�	C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Performance.vb
܃rÝ„èØ{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Maps.vb
܃rÚŽŽè’�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Keylogger.vb
܃rÙVC†A{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\INFO.vb
܃rÖÜËC†@{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Hash.vb
Ü[NàÜþJ†?�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\CustomOpen.vb
Ü[NàÜþD†>}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\About.vb
Ü[NàÜþL†=�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\WCAM\WCAM\Webcam.vb
Ü[NÞyúb†<�7C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\ReverseProxy\ReverseProxy\SSLReadWrite.vb
Ü[NÙ¯ÒG†;�
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HRDP\HRDP\N.vb
Ü[NËFøT†:�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chromium\Chromium\BCrypt.vb
Ü[NȇL"í�	C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chat\Chat\XChat.vb
܃rÄ¥,M†8�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Networking\Listener.vb
܃rÁik"O�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Networking\GClass0.vb
܃jÀe<Jƒx�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Networking\Relay.vb
Ü[NàÜþJ�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Builder.vb
܃2ÿ]L‚�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Requests\XWormTask.vb
Ü[Nã@Y‚�%C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\Wifi\WifiGrab.cs
Ü[NÜ4
HC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\WebCam.vb
Ü�«c»×T‚�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\WDKiller.vb
Ü[NÒFøZ‚�'C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\OpenApp\WDir.cs
Ü[NÍ®&V‚
�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\WDir.cs
Ü[NËFøW‚	�!C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\WDExclusion.vb
Ü[NÒFøU‚�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Options\Options\WDDisable.vb
Ü[NÒFø†”�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\VoiceChat.vb
Ü�«açE‚C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\VBCode.vb
Ü�«bƒWo‚�QC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\InternetExplorer\VaultCli.cs
Ü[N×M_‚�1C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Cmstp-Bypass\Cmstp-Bypass\UACbypass.vb
Ü[NÉÔ¶â�yC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\TXT.vb
Ü�«aqéH‚�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\ToolsBox.vb
Ü�«c²T‚
�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\Telegram.cs
Ü[NÜ4r‚�WC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\TCPConnections\TCPConnections\TcpConnectionTableHelper.vb
Ü[NÜ4H¡�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\TcpConnectionForm.vb
Ü�«`9zJ�~�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\TBotNotify.vb
Ü�«`Õ¿H�}�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Resources\Stub.vb
Ü[Nã@w�|�aC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Client\BrowserConfig\Implant\StringsCrypt.cs
Ü[N×MQ�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\StartupManager.vb
Ü�«_Ä:_�y�1C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\SqlReader.cs
Ü[N×M[�x�)C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chromium\Chromium\SQLiteHandler.vb
Ü[NÈÕ~\�w�+C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\SQLite.cs
Ü[N×ME�uC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Stealer\Site.vb
Ü[Nã@
X¢Aâƒ!
À
k
Àg®O
ò
‘
2	Ó	r	°XW�/C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\InfoType.cs…_�?C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\Recovery.csãa�E
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\FFDecryptor.csP`�C
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\cPasswords.cs<^�?
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\cHistory.cs,^�?
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\cCookies.cs)`�C
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\cBookmarks.cs'\�9C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Edge\Recovery.csâ^�?
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Edge\CreditCards.csA\�;
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Edge\Bookmarks.cs[�9
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Edge\Autofill.csX�3
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\CreditCard.cs>U�-
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Counter.cs;T�+
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Cookie.cs8T�+
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Consts.cs7`�AC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\Recovery.csáa�CC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\Passwords.cs«^�=C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\Parser.cs¨^�?
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\History.csk`�C
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\Downloads.csK]�=
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\Crypto.csB
X¢Aâƒ!
À
k
Àg®O
ò
‘
2	Ó	r	°XW�/C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\InfoType.cs…_�?C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\Recovery.csãa�E
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\FFDecryptor.csP`�C
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\cPasswords.cs<^�?
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\cHistory.cs,^�?
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\cCookies.cs)`�C
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\cBookmarks.cs'\�9C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Edge\Recovery.csâ^�?
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Edge\CreditCards.csA\�;
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Edge\Bookmarks.cs[�9
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Edge\Autofill.csX�3
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\CreditCard.cs>U�-
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Counter.cs;T�+
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Cookie.cs8T�+
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Consts.cs7`�AC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\Recovery.csáa�CC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\Passwords.cs«^�=C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\Parser.cs¨^�?
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\History.csk`�C
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\Downloads.csK]�=
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\Crypto.csB

Ñ
rÒƒ*
r
'
Lèû	.ÌŸ6Äpæëdž²R'
ñ
µ
µ
µ
µ
µ
µ
µ
µ
µ
µ
µ
bU�'C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Site.cs
b?}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Shell.vbS�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\SettingsHelper.vb�[C:\Users\�V�+C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\PowerShell.cs
Ü[NËFø“}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Shell.vb
Ü�«_(vbJ�	C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Networking\Server.vbK�j�	C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNC\HVNC\RunPE.vb
Ü[NÍ_éc�n�9C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\ScreenshotCapture.cs
Ü[NËFøn�)L�T�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\WCAM\WCAM\Plugin.vb
Ü[NÞyú }}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\FormsD�k}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\RunPE.vb
Ü�«]S­d�i�;C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\RemoteDesktop\RemoteDesktop\RemoteWindow.vb
Ü[N×MK�o�	C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Networking\Server.vb
Ü[NàÜþNF{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Port.vb
Ü‚4e�g�=C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\RemoteDesktop\RemoteDesktop\RemoteDesktop.vb
Ü[N×Mov�C:\Users\byt3d4sh\Desktop\XWorm SRCH�e�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Registry.vb
Ü�«^‹Õo�d�QC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\InternetExplorer\Recovery.cs
Ü[N×Mf�c�?C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Firefox\Recovery.cs
Ü[N×Mc�b�9C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Edge\Recovery.cs
Ü[N×Mg�a�AC:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Chromium\Recovery.cs
Ü[N×MIŒ�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Ransomware.vbD�^}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Proxy.vb
Ü�«\;$K�[�	C:\Users\byt3d4sh\Desktop\XWorm SRC\XClient\XClient\Program.vb
Ü[NÞyú	�‰�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\PrograH�\�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Programs.vb
Ü�«ZÛ V�Q�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\UACBypass\UACBypass\Plugin.vb
Ü[NÜ4.cs[�]�)C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\ReverseProxy\ReverseProxy\Proxy.vb
Ü[NÙ¯Ò.vb
Š˜�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\ProcessManager.N�X�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\ProcessManager.vb
Ü�«[wâ`�W�3C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\OpenApp\PowerShell.cs
Ü[NÍ®&<g{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Port.vb
b�C:\Users\byt3d4sh\Desktop\XWorm SH�r�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\SettingsHelper.vb
Ü[Nã@î�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\ServiceManager.vb
Ü�«i—M�h�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\RemoteDesktop.vb
Ü�«]ï-M�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Ransomware.vb
Ü�«\°bV�S�C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\VoiceChat\VoiceChat\Plugin.vb
Ü[NÞyúb�R�7C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\VB.NET Compiler\VB.NET Compiler\Plugin.vb
Ü[NÜ4a�Z�5C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Stealer\Stealer\ProductKey\ProductKey.cs
Ü[NÜ4f�Y�?C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\ReverseProxy\ReverseProxy\ProcessTcpClient.vb
Ü[NÙ¯ÒZ�t�'C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Recovery\Recovery\Stealer\Site.cs
Ü[N×M[�l�)C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\S\ScreenCapture.cs
Ü[NÍ®&Y�f�%C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HVNCMemory\HVNC\RemoteDesktop.cs
Ü[NÍ®&X�`�#C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HRDP\HRDP\Resources\rdpwrap.ini
Ü[NÌ·t�q�[C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HiddenApps\HiddenApps\HandleVNC\SetCurrentVirtualDesktop.cs
Ü[NËFø_�m�1C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\HBrowser\HBrowser\ScreenshotCapture.cs
Ü[NËFø
SÇ*÷Ä�r6
í
¹
€
:

Ù�*ž(
»
m	ú	Ò	¡	*€%¼_*ÇÇÇÇÇÇÇÇÇÇÇÇÇÇ
8
8
8
°
°
°
°
°
°@
9


dHandleMouse.RECT.RightRight
“
ˆ
5


dHandleMouse.RECT.TopTop
~
sÜ
7


dHandleMouse.RECT.LeftLeft
h
]ª
-



dHandleMouse.RECTRECT
Q
X]
ç
XS!


UñSetCurrentVirtualDesktop.SetCurrentSetCurrent
Al
ÿ®	SetCurrent(SetCurrentVirtualDesktop)çèY'



ñSetCurrentVirtualDesktop.DesktopHandleDesktopHandle
ß
í
Ñ)ç—U#



ñSetCurrentVirtualDesktop.DesktopNameDesktopName
¯
»
¡+çJe


ñSetCurrentVirtualDesktop.STARTUPINFO.dwFlagsdwFlagsçŠo=
>
F�#?



Stealer.InternetExp`‹<
�	!


Plugin.BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO.cbAuthDatacbAuthData
¹

®`‹;
�	!


Plugin.BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO.pbAuthDatapbAuthData
œ

ˆ4‹#
;


Stealer.AutoFill.sValuesValue“…0‹"
9




Stealer.AutoFill.sNamesNameyk0‹!
-







Stealer.AutoFillAutoFill(Tf8GW&‹ 






StealerStealer$}�
®¯K'

7
Recovery.WifiGrab.GetProfileKeyGetProfileKey	
	=
ú	
6	GetProfileKey(string)®NG#

'
Recovery.WifiGrab.GetProfilesGetProfilesøèÝ	GetProfiles()®
ù?

+
Recovery.WifiGrab.ExecuteExecute.O„º	Execute(string)®
ªA

;
Recovery.WifiGrab.RecoveryRecovery

LÃ


	Recovery(StringBuilder)®
Q/

Recovery.WifiGrabWifiGrabæô
Jà
^®



RecoveryRecoveryÏÙ
hÅ
|
®és/

�%
Stealer.InternetExplorer.VaultCli.VaultGetItem_WIN7VaultGetItem_WIN7
	³ô	VaultGetItem_WIN7(IntPtr, ref Guid, IntPtr, IntPtr, IntPtr, int, ref IntPtr);s/

�5
Stealer.InternetExplorer.VaultCli.VauZ‹:
�


Plugin.BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO.cbNoncecbNonce
y
nZ‹9
�


Plugin.BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO.pbNoncepbNonce
_
Kf‹8
�'


Plugin.BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO.dwInfoVersiondwInfoVersion
6

*X‹7
�



Plugin.BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO.cbSizecbSize

�&‹6
�Og


Plugin.BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO_VERSIONBCRYPT_AUTHENTICATED_CIPHER_MODE_INFO_VERSION×-ÅEt‹5
sW

Plugin.BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFOBCRYPT_AUTHENTICATED_CIPHER_MODE_INFO–%¿ˆR.‹4
'




Plugin.BCryptBCryptNzƒ¸mÎ%‹3





PluginPluginBJô8
p‹2
U5

EStealer.Banking.DetectCreditCardTypeDetectCreditCardTypeIpé4
%	DetectCreditCardType(string)K‹1
=


-Stealer.Banking.ScanDataScanData¤¾p‘�	ScanData(string)j‹0
Q1

AStealer.Banking.DetectPornServicesDetectPornServices
F
j
!
2
Y	DetectPornServices(string)s‹/
W7

GStealer.Banking.DetectBankingServicesDetectBankingServicesÕü
0Á
k	DetectBankingServices(string)�‹.
eE

UStealer.Banking.DetectCryptocurrencyServicesDetectCryptocurrencyServices
b
�
+
N
m	DetectCryptocurrencyServices(string)c‹-
C#

OStealer.Banking.AppendValueAppendValueOù@	AppendValue(string, List<string>)F‹,
K+

Stealer.Banking.CreditCardTypesCreditCardTypesïÆ<1‹+
+
Stealer.BankingBanking·Áœ¡¼*‹*


StealerStealer”�ÅŠØ
C‹)
?

#Stealer.Edge.Autofill.GetGet¬Äm�¢	Get(string)6‹(
7


Stealer.Edge.AutofillAutofillŠ«iÌ1‹'
%%




Stealer.EdgeStealer.EdgeWeÕMí
F‹&
G


#Stealer.Chromium.Autofill.GetGet—¯,za	Get(string)9‹%
?



Stealer.Chromium.AutofillAutofilljujT‹9‹$
--




Stealer.ChromiumStealer.Chromium>P”4°

RQ+



DLL.S.OpenApp.WDir.SystemDirectorySystemDirectory¾©U
1



DLL.S.OpenApp.WDirWDir”žgŽwÓ''




DLL.S.OpenAppDLL.S.OpenAppx
‡�nš
›C+




bozman.WDir.SystemDirectorySystemDirectory¾©UV#




bozman.WDirWDir”žg‡~*





bozmanbozmanx€ˆnš

Õ#ú‘9Òk¸[ó­o\ö‰7”æ˜,
Õ
Ž
%Õ…B߆+
Ò
Œ
N
	¡	2ú®HBDbO#
ÆO#


®HBrowser.ClientSocket.isConnectedisConnected5"'=a7%
®HBrowser.ClientSocketClientSocketð:0`7


®HBrowser.Settings.IDDIDDÝÈ7


®HBro§
|q?

IñSetCurrentVirtualDesktop.CollectProcessAndChildrenCollectProcessAndChildren*è+

Â*Õ
ú	CollectProcessAndChildren(int)k‚Y'

CñSetCurrentVirtualDesktop.CreateProcessCreateProcess'â
(Â'Öú	CreateProcess(string, bool)s‚Y'

SñSetCurrentVirtualDesktop.CreateProcessCreateProcess&Ì
'É&¹
	CreateProcess(string, string, bool)§Y'
æE+


üStringsCrypt.Ar_‹_
_'



+Plugin.BCrypt.SafeKeyHandle.ReleaseHandleReleaseHandle‹
Ÿ2s^	ReleaseHandle()v‹G
�O


Plugin.BCrypt.AuthModeFlags.BCRYPT_AUTH_MODE_CHAIN_CALLS_FLAGBCRYPT_AUTH_MODE_CHAIN_CALLS_FLAG!%é


N‹L
s


Plugin.BCrypt.BCryptOpenAlgorithmProviderFlags.NoneNone

O‹J
u


Plugin.BCrypt.BCryptCloseAlgorithmProviderFlags.NoneNone¹¹j‹I
kO



Plugin.BCrypt.BCryptCloseAlgorithmProviderFlagsBCryptCloseAlgorithmProviderFlagsŽ!³wOv‹H
�O


Plugin.BCrypt.AuthModeFlags.BCRYPT_AUTH_MODE_IN_PROGRESS_FLAGBCRYPT_AUTH_MODE_IN_PROGRESS_FLAGG!G%;‹F
M


Plugin.BCrypt.AuthModeFlags.NoneNoneC‹E
C'


Plugin.BCrypt.AuthModeFlagsAuthModeFlags÷
ià‘e‹D
�


Plugin.BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO.CreateCreateÕâó¡
4	Create()Z‹C
�


Plugin.BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO.dwFlagsdwFlags’}X‹B
�



Plugin.BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO.cbDatacbDataocU‹A



Plugin.BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO.cbAADcbAADVKd‹@
�
%


Plugin.BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO.cbMacContextcbMacContext7,d‹?
�
%


Plugin.BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO.pbMacContextpbMacContext!U‹>



Plugin.BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO.cbTagcbTag
÷
ìU‹=



Plugin.BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO.pbTagpbTag
ß
ËI
�	!


Plugin.BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO.cl‹^
_'


CPlugin.BCrypt.SafeKeyHandle.SafeKeyHandleSafeKeyHandleÙ
B*Òš	SafeKeyHandle(IntPtr, bool)_‹]
_'



+Plugin.BCrypt.SafeKeyHandle.SafeKeyHandleSafeKeyHandle…
Ä~M	SafeKeyHandle()H‹\
W



Plugin.BCrypt.SafeKeyHandle.IsInvalidIsInvalidT	^?8;‹[
M


Plugin.BCrypt.SafeKeyHandle.NullNullø@C‹Z
C'
Plugin.BCrypt.SafeKeyHandleSafeKeyHandleÔ
ò
äÇV‹Y
m+


Plugin.BCrypt.BCryptEncryptFlags.BCRYPT_PAD_OAEPBCRYPT_PAD_OAEP©©X‹X
o-


Plugin.BCrypt.BCryptEncryptFlags.BCRYPT_PAD_PKCS1BCRYPT_PAD_PKCS1��V‹W
m+


Plugin.BCrypt.BCryptEncryptFlags.BCRYPT_PAD_NONEBCRYPT_PAD_NONEvv`‹V
w5


Plugin.BCrypt.BCryptEncryptFlags.BCRYPT_BLOCK_PADDINGBCRYPT_BLOCK_PADDINGXX@‹U
W


Plugin.BCrypt.BCryptEncryptFlags.NoneNoneJJM‹T
M1


Plugin.BCrypt.BCryptEncryptFlagsBCryptEncryptFlags.D}ªM‹S
q


Plugin.BCrypt.BCryptGenerateSymmetricKeyFlags.NoneNonef‹R
gK



Plugin.BCrypt.BCryptGenerateSymmetricKeyFlagsBCryptGenerateSymmetricKeyFlagsÛþÄMD‹Q
_


Plugin.BCrypt.BCryptSetPropertyFlags.NoneNoneµµT‹P
U9



Plugin.BCrypt.BCryptSetPropertyFlagsBCryptSetPropertyFlags•¯‰5i‹O
�
/


Plugin.BCrypt.BCryptOpenAlgorithmProviderFlags.BCRYPT_MULTI_FLAGBCRYPT_MULTI_FLAGffy‹N
�?


Plugin.BCrypt.BCryptOpenAlgorithmProviderFlags.BCRYPT_HASH_REUSABLE_FLAGBCRYPT_HASH_REUSABLE_FLAG@@ }‹M
�!C


Plugin.BCrypt.BCryptOpenAlgorithmProviderFlags.BCRYPT_ALG_HANDLE_HMAC_FLAGBCRYPT_ALG_HANDLE_HMAC_FLAGi‹K
iM


Plugin.BCrypt.BCryptOpenAlgorithmProviderFlagsBCryptOpenAlgorithmProviderFlagsã |Ì·
Ðõ÷õA³³³ÆÆÆÆÆÆÆÆÆÆÆ0€€€
»v
´�€€€¾
g
ru‚q
�Rseˆw
‰m
i‚u
�R
o‚Z
�%un‚q
�RypŠ}
†{
sŠ
‡&zoL
ƒ+
Ž
s_d‚'
�ab‚'
W
ŽC�
g‚A



7

ŽX		
	o		
n„R
Œ>
v‚o





�B


b_‚?


�
c_‚+




�


o‚*
�
r‚=












Ž
U

@		
	

uŠ|
†{ea‚T
�%
d‚`

�^

ŒfH
e‚^



 
Ž~
M

m‚
�
nO
�u
,
�

�d:
pˆx
‰m
r‚
†d
�V
†`	�7
tC

�o

!



j

�^$	

w‚#
�flC
ƒ+
Ž

hoR
�E

Q
}
�4Rib‚z
�R
dT
ƒ+
Ž
n‚u
�R
tD


�J




�U


�9	
	
Y


zP
ƒ+
Ž

kt‚l


	



�P













Œ&





�
	
	lpƒ	
�Rmo‚`
�%op„U
Œ>
r‚Z
�%	pa‚$
ˆ*
†p�/
i‚o




�P


o„Y

Œ6	sa‚A



7

�O
Œ>K
o
c‚
�R
iT
ƒ+
Ž
wˆ}
�
J

†Y�Ct_‘

c‚t
�R
e‚u
…~


�
H

<
†DV
m‚A

7

ŽXo
o‚-
†G
�
‡ 
r„b
Œ>
s„[


Œ=

y‚%
�urŠL
ˆ
sŠM
ˆvnƒh
Ž7w_‚/
�
iD
‚6
u
Ž

&
oˆ}
�
J

†Y�CynD
ƒ+
Ž
s‚*
K
ŽO�zoƒ

�R
t_aŠ}
†{
iŠ}
†{
s‘

xƒ
�R
yƒ
�RacI
ƒ+
Ž
m‹
†kbo‚:




�

ca‚4
�
hL
ƒ+
Ž
l‚&
�
oJ
‚*
�

Žde„^
Œ>
o‚U

�#eaˆs


�
H

<
†Dr
cˆz
‰m
d„M

Œ/
fƒj
Ž7
lƒ


�Q

m‚I


+
‡S
‡

]
o‚l
�R

p„L


Œ7
r‚u
�R
s‚
†^
ˆ<
�1
fo‚N
/
Žkgh_Š}
†{
a‚f
�R
m‚0
�
oƒh
Ž7

rT
ƒ+
ŽilŠ|
†{
oD


�J





 

�


i
Œ>

+		




tˆz
‰m
vB

‚&

i

Ž	
	la‚r

�P
e‚5
†E
ˆU�
maU
�D

�R
�3V
e‚A


2

ŽXj
i‚

�	oc‚L
�
fŠ
‡&
m‚:




/
�
�L

N
n‚















�	
	
	
	
	
	

	
	
p‚7




0



	



p
`













Œ






	0

O
	



r‚-
6
†

�
‡ A]pr„R
Œ>ra‚$
�
eM


ƒ*


Ž


i‚6
‚,
Œ>0sc‚o

Ž�?
eO
ƒ+
Žte‚
�	
iˆz
‰m
o‚


























/
�
�/




		





N
r‚$
�up‚V

�#wiC



�n


0


	

j



Œ}
_*


	yl‚%
�
pŠ
I
†]E
ubl‚Y
�%it‚I


�
leU
ƒ+
Žm_‘
d‚w
�Rnd‚N
/
Žkg
n‚q
�RrlŠL
ˆ
s‚Z
�%se‚
	

1






 
‡—�•^












	
























K€€€
”HŒ0_dbŠg
fiŠh

maŠk
paŠi
sqŠf
taŠl

ablŠ`








deŠ]

mŠq

tŠp

geŠi
leŠ[

uŠn
meŠc

stŠb
	

taŠf

eŠe

yŠf

benŠg
leŠ`








ytŠh

codŠg

nŠa


rŠ]

uŠo
vlŠu

datŠf
beŠg
erŠ]
heŠ]
inŠg
maŠq
naŠj
taŠp


eadŠ]






lŠ[
byŠh
coŠ]
enŠ`



frŠp
ldŠ]


maŠb

eŠe

nŠc
ncŠg

tŠ`








reŠb

fŠ]

tŠk


siŠf

trŠo

vŠn

ffsŠp
ieŠ]



lŠh
roŠp
seŠp

gesŠi

tŠn


vlŠt

heaŠ]

ielŠ]



sŠk


leŠh
ngŠg
soŠv
teŠ\





zeŠ^



ldaŠf

nŠj
ebŠh

eŠ`




fŠp

rŠ[
itŠ\


onŠs
stŠe
ueŠn

masŠb
	

enŠe

sŠj
naŠc
ofŠp

namŠc

coŠg
teŠa

rŠ`

	


umŠd
veŠs

oddŠv

iŠg
ffŠp
moŠp
ngŠs

tŠa

vŠs
otŠd
rdŠ]
tnŠd
ulŠs

nŠo
wcŠo

pagŠi
esŠf

qldŠf

iŠ\



sŠe

rdhŠ]
eaŠp





cŠ]

nŠb
fiŠ]
ieŠk


omŠp

oŠd

wŠo
taŠk


tŠs

setŠp
izŠ^


odŠv
qlŠ\





taŠe

eŠ[

	


tab
b�$–:










	





























€€€
ƒLJ
�–L
	



































�„€€€€
‚v0cto–5
dir–5
ect–5md–5
ire–5	
mdi–5
ory–5
rec–5

ste–5ys–5
tem–5or–5

yst–5									'P–@

	







‹åD

""ŸV”€€€€
¿00t_h‡.
i‡Ll
kˆ#
lˆ0
m‡/
oˆ'
p‡7

V

s†W
xƒ
yƒa_ˆ/
bˆd
cIE
‚K‚		
g‡
j	

l‡iT

mˆD
n…S
r�GƒWZm
t�{‚u�‚5
u‡{
Lba‡V
m‡y

o‚:

†
r
y†sca��2�VƒI
e
=
hLm
	
	
‚�
	
	
‚~
l‚&‚‚ft
oJ‚*�
ƒ|
Q
r‡U$
H
u�.B‚pdaƒD…%
e�Y



‚RR�5at
i�WƒW
o9
�}�P
�ea‡M	
5

bˆN
c†�Q

r


db
	
��$
	
� v
	
O7
	
}
fƒj�
hˆM
l(
‚F
|

‚
'
‚A
m�31e

+�!Q",DH
n{‚1‚[�-�
o�8
*
�

‚
3

p�x
‚;ƒe
r‚u‚}��q
+
s‚
„X?�/

tˆD
w�2.ƒ%/
x1

„;v	j=


|


f8ˆl
_…>











l…=�w�-	
o‚@/U�%ge‡2rh_‡'
$f


a‚J]t�E
c�
d‡
|

e‡
}
i‡w
Q
kˆm
m‚0„u

A,

oƒa
|
rTp:�1	No
sˆ#
tˆg
u†u
w„vi_‡/
aƒK‚}
c‡
}
lˆC
mˆ>
n[�!�‚D�%
oD

t9


 	S=

i)ƒp
t�K‚h
n‚;�
v)	+�{5'
	F
)

ƒQ
ke†t�4
ila‚r
e3�j�~
n‚;�

iƒHmaU�D�R„k
e‚2^!‚
i‚o8…r
aˆo

c‚L…	
dƒ`„d
f…
‚N
L
	G
k†v	
m)X�

/`#:I
�,
n‚	
	
	
	
	
	

	
	†W
o
p)X(




















	






	
	



+

0
	


2




##







	











	









?


D
Orn
r�
�,6[
W
�D
J
#-
Re
'

s‚„jpa„"„#
h‰!
o‡W�4
r�k‚9
‚,

B1
#	
s‡s

t„;�H	
u�XƒWra‚$
eM
%‚;J

i�R
04‚,

/
P
xA
o�41ƒ%,‚y
uˆ<sc‚oƒg
eOƒ+ƒ6t
oa‚;‚D�%
tˆ_
y„g�te1

�h	ƒT
h‚‚n
i[‚;‚D�%�{
o)X�




		





/`#:I	�4

p‰
r�R	Rƒ	
t„Dua�.X�)
nˆi
p:
���P
t"
r�	‚&Y	�q
;

s�|†=
tˆlvi�.Xwi


5
�80
	O



H
�E

‚
o‰&
y_�lƒ
f‡0
l
	‚ƒ)	
p†o
d	
ualu9X�)‚=bl‚Yca�>
cˆ,	
tˆ#<Hed�?
r„|ffd
‚:
‚C
�#
giW‚;‚D^Git‚I
leUƒ+‚g

l„|‚?
t�^,
ƒB
�c
m_†Y
d�z}�z�`
e�7*ƒ%3
hƒD
wƒ`nb
d‚@/U�%
iˆD
n‚qƒ

pˆi
t�P
ƒV
ƒnob„+
i�jpi�GƒW
l‰$re�	‚&Y	�q;
‚L
l…‚\
n�5
1
ƒ$
*

r�.B‚p‚_
s‚Zs_ˆ9
a‡.
e)




F












S	1

 .
?






6B











=












t�…
wDƒ+td�}		
e�RƒW�$
fˆl
h‡	


#


&'0$P#?3&((
/
"
=2
)
 ;&‚]H1
&
b$!�

&�=


""ŸV˜€€€€¿0<0tmaˆk
…1
e


ƒ+
!

‚
ˆG�#
oŠ/
na�q
uŠdoaˆo
…1

c‡U
ƒY
dƒ`
„d
„-‚
f…
‚N




L


G
l�f
P
	P‚.

kŽ*	
m
)
n
‚-

y
I

�
>
‡CCP0
V
n‰

„-
o
�
p
)
ƒ



Q



#























	






















�


O

r
n
��{u�

9













	









1

r„2
‚2
�
e

E



h 


`ui
	

t
�
s†l
†?4
uŠs	pa„"
„#
„-‚@
h‰!
„0
o‡W
�4
‚%‚
r„
M



‚,

B
1
#
‚3
1

K1
�	6c4

s‡s


„(

t„;
‹
u…/
Šwri„g

/
‚	

‚NO

fƒt

/

o…

,
‚
y
‚0w�ƒ,
u
ˆ
<
ƒm�D�
yŠ`	sc†X

e‡0

t
ƒ}�Z
tˆ_
…1
v�d
y„g
Šwtd‹
e1




Šd…O


h„n
Šw
o
)
ƒ


m
I

�>

„ƒ7=P0	V
p‰
„-;
r…)
„s†	
t„D
‹unˆi
…1
p:

ƒl

t
"

‰s
["3

r�t
sˆ9
„)�	
tˆl
…1vaŠnwi








ƒ





8

H





�N



‚
…1Q
/
t

o‰&
„0
y_…
Šw
eŠ,				
f‡0
„ 
l

…D

‰=	�8	
p†o
d




‚0

FW	�
LG	
ublŠ
m�tccˆ,
„)	
tˆ#
<
H
�j
	
�9�9er„|
Šwgi†4
_
ƒz&…&idŠƒble†g


†>

l„|
‚?

„„
oŠs
t…L
�c
‚_
	






�	
„t
m_†Y

bŽ
d„q
�`
‰�
e…
3
…
	
	ƒ‚#3
hƒD

Š
pŠQ	
wƒ`
‹nb
�
d
ƒD
�%
…„^#]
iˆD
„-
pˆi
…1
r‹
sŠ
t…'


ƒn
�

‚W‚X
ob„+
‹pi…
Šw
l‰$
„0w
rcŠ!
ƒ%
e‰
„-
l…
‚\
‚p�‚‚
n…


*


ŠK
*

r„v
‚_
ƒY„?s_ˆ9
„)
a‡.
„ 
e
)









P











‚#
K












6
B


























=











„�+






�





a
1













"






B

















t�
…
ˆ
ta‹

e…)

�$
ƒ:�
‚‚
fˆl
…1
h‡





	



$
<











�j
E8



	


$E








iˆC
‚9�t
�Z
o†d
j




L


G
l�f
P	*&
p…/
Šw
val„7
ƒ



�@
�Z5
/�_#


�`
uŠ
	






brˆg
…1e_ˆ6
„)
b�
„z
…q		
d
ƒB
�E



ƒy
„0�!%{		
	
h„:

‹
i„;
‹
m„E
‹
n„{
B
























Š)	B












r‡

}
#
�
3


h	
(�#�
8&
w
ƒD
‹#
x�
…

…j

ic†j






h




ƒW

�y


	2

	



d‡)




A
-



ƒ
J-

s
ƒD

‚q
ˆ 


�g
maˆh
…1nc†M
Š*pn‰
„0
w_h
ƒN




‹


s	
�ac
ƒB
‹	%	
l‰ 
„0
r„f
Šwch!
ƒF
‹!
l"
�
oŠodc†S
eb†f
‚C
ƒ|4
x„t


Šv
fi…)
Šw
l…*
�y
}
‚
�	�ƒX
r„!
‹ha„9
‹
e…H


Šv
id„A
‹
f‰&
�u‚;
n






























ƒ



























1






8


















	

�









B
}

‚


r�‚







	












	









	+




t…
3
ƒ2
…1	�a3l_

…D








‰;�8




o

„S

]
‰K

G

]
p…K







Šn


m_(









ƒC





‚


ˆz
�





aˆ%
„)
e„i
Šw
iˆ$
„)ndƒD





	
�2
?

ƒ
…1M

	�
?
l…
ƒq
,
„0_�Kon 
ƒE
‹"
r‡b
*

:5
	�^G
D

-



9
(
z

<	<




#


‚
f8
8.&

KK<-	

	
‚U%I


6

zzîB8
Å
s|\€€
(
0vnc�wD€€€
‹R“0_li†Y
sc†W

ase†T

ble†P
ot†^

cre†N
	



del†U

s†Q
ow†O










eas†T
ct†O

dc†T


en†N
	


ft†[
le†T



p†N
nu†Q
rs†N
sk†Q
te†U

s†X

t†V

w†O


get†O



ht†]

hel†N

ibl†P
gh†]
nd†O










t†R
si†P

t†W


w†P

kto†Q

lea†T

f†[

t†U
is†W

pe†N

m_l†Y
de†Q

ndo†O









tw†R
um†Q


opw†Q

tt†^
wd†S

r†O

s†Q

v†P

per†N
ri†R
wi†Q


rec†O


e†N
	



l†T
ig†]

n†R
sc†N

scr†N
	


ed†T
ib†P
kt†Q
t_†W
wi†P

t_s†W
ed†U
om†^

p†Q


sc†X
to†V

wi†O




um_†Y

d†Q

vis†P
nc†M

wdc†S
in†O









re†O
vi†P
					
	


	
U€€€
ƒ<Â0_ke�vwm¬€€€
‚L�0des�{ow�{
enu�{sk�{
ind�{
kto�{	
mde�{
ndo�{um�{
opw�{ws�{
pwi�{
skt�{
top�{

umd�{
win�{
											Œ€€€
‚s0ble�z
dow�z
ibl�z
nd�zsi�z
w�z
ndo�z
owv�z
sib�zwi�z
vis�z

win�zvi�z									–~”€€€€®
é
‡

	


$<







0utiˆC

o†dj
L	G
p�XƒW
t‚






val„7(‚]�@
tIƒ+brˆge_ˆ6
a‚o
b�	„z	
c‚Z
d�0		
	‚�E		
	ƒy
h‚s�G
i„;
lˆy
mƒ35]
nO‚

 o�
	B












p†r
r‚q

ƒ{(}#H

w‚,�
x�
…

ic†j


	h


d‡)
A-

r�.X�)
s
‚j
Z

‚q
maˆhncƒ08�m+Mok‚pn‰sc‚>
w_hƒN


s	‚&ac	ƒB	
l‰ 
r„fch!ƒF
l"‚&
m‚dc†S

i„‚+eb†f‚C
r„
‚4
x„t
fi�RƒW
l�SƒW�y}
rF�}
�$0ha„9
e‚#
ƒ%
id„A
f‰&
n









	






 

	'".


	
"



0








	








	
8





	0J	





B}
t�9*ƒ%3ƒ2	l_
‚ƒ)




o

‚c


�o

]
p…K


m_(


�Z








0
|

‚

a‚/…v
e„i
iˆ$nd�=‚

	�2?ƒ
eLƒ+
l…ƒq,on ƒE
rƒ

ƒd
pc
.p_…



l‚2

o
/


�o
B
`





e

r�Eƒ1
&ƒErat‚@
e
(
R
�y
Q
	
5

‚&
	

i�8
*
�

‚
3
ƒ




s_‚
d…z
e	
9;
„_	
	�2W$

h

�SƒW
t�{�e�te„y

hT
r‚9
�vi	‚j	Z		‚q	wi?��,A<!`	xc�PƒW
s�NƒWyc�QƒW
s�OƒW
x86�
„f		_lƒ
tauˆbr�,…

u‚.co�PƒWdo…Fim‚,
s�t
‚f
leˆ%pi‰	
l…x
o‚si�NƒW
t
…DtiˆD
l3

o„2up…Gwi„Ax8�+…
y_c�lƒ
dˆ/
lƒ…ba�62ƒ%+
iJ
ƒ+

o@‚
3�"co�QƒWdeˆn
o)�s 7}‚fl‡0
u„|ha‡:

e„Bke‡Fyle

‚ƒ)

o†gmm‡2nc,ƒpe†od


t�


‚=


‚7


u










	








	
	
2
















	
	




sc‚*
e‡U
i�OƒW�=

l*‚J} ‚
t‚u�!Q�Hte†sup(‚F} ‚
zalˆed‚/
h„=
l†n
w ƒEin
ƒK
ma„ooƒ
�
rLƒ&�prˆc6	"
"
M#


‚V`&
 
(#(;$



�b


‡üÚ
‡g
j€€
�
90cov–9
eco–9ry–9
ove–9
rec–9
ver–9				‚¨€€€€
„4÷0cov‹

ut‹

eco‹


u‹
ke‹
ry‹

tp‹


xe‹

fig‹

l‹



get‹


ra‹

ifi‹
gr‹
le‹



key‹

lek‹

s‹

ofi‹


ve‹


pro‹



rab‹
ec‹

of‹



tpr‹



ute‹

ver‹


wif‹

xec‹


		
	
	
		

� €€€€
‚v0cto–8
dir–8
ect–8md–8
ire–8	
mdi–8
ory–8
rec–8

ste–8ys–8
tem–8or–8

yst–8									�<¤€€€€
š|0_el–)it–)wi–1

ael–*gs–&lf–!
me–!st–%te–/



o–$ul–)






t–$
boz„
’
cat–$ee–"	he–*lo–-ou–'re–!to„

den–!if–%
r„


’ly–!wf–&
p–'
ect„
de–!el–"
it–0le–"




m_–)


a–*
d„

e–"








s–0nd–!
t–!	





u–/

v–,	ra–/

t–'
sc–'
o–"ti–1
va–-
fie–%
la–&re–.
i–!
get–1

hem–*
n–$
ial–!ca–$
de–#ed–%
n–!
s–'fi–%	n7–2
8–1re„
te–)




y–#
lag–&
s–%em–"



	fr–!os–-t_–)
c–-
e–/

f–.
g–1

o–,
s–/yn–!
m_e–)
w–1


ae–*
n„
’di„
en–"




r–/


od–%
nam–!dl–!ti–!



s–(um–/
va–,

odi–%pe–'
re–$
y„
se–-	un–'
r–"zm„
’
pau–$en–,
r–'
id–#pr–(re–"
o–'
sz–!
rat–/
ce–"ec„

d–!
e–.
l–$
s–"ie–!op–'
ti–'	
y–(
sch–*
o–'
ev–-
ou–"te„

m–%ys„
zc–!
t_i–)cl–-ei–0
m„
’	


n–/

v–/fr–.ge–1
he–$ia–!
c–$	
d–*
e–'

t–#	
	mo–%op–,
r„
’
ye–#		
p–+
ult–)





me–/	
	nt–'rc–"th–$
vau–)






wdi„
’fl–&in–1
pr–'
yel–#

na–!pe–+st„

zcr–!ma„
’		 	

				

	


			

		


!!	œ€€€€
<0dir–7
wdi–7	�|˜€€€€
›|¨ˆE


H

[J�=g
K

0wp_…






Št



aŠQ

o
ƒP
8
e
‰


L

r„v
&
ƒE
�P
ƒW�[
&re
(
ƒ
	
D
‚/
ˆ 
	


�<



i…
3
ƒ










„(




ƒ

3
s_
�
e



t



„_
	

	
�2


W
$

�c�*[�


B	

h

…*
‰Y
�
tƒ`
�
Škte„y
Šw

h…
Šwvi
ƒD

‚q
ˆ 			�g	wi
„
`


‰kG	xc…'
Šw
s…%
Šwyc…(
Šw
s…&
Šw
x86�




„f
	

	
…H��_t
�auˆ
„)br�,
…

ˆ'co…'
Šwdo…F
Šwec‹
leˆ%
„)pi‰	
„-
lŠ	
mŽ
yŽsi…%
Šw
t

…D
‰?�8tiˆD
„-z
l3
�5

o„2
‹up…G
Šwwi„A
‹x8�+
…
ˆ 
y_c…
Šw
dˆ/

„$
lˆ#
„)ba…

+
ŠL+
o@
ƒm
‹�8co…(
Šwdb�
eˆn
…1
i‹
o)

ƒG

‚
ˆz�eaŽ
lŠ,



fl‡0

„
u„|
Šwha‡:



„

e„B
‹ke‡F
y
ƒ'�le

…D

‰=
�8

o†g

†<mm‡2

„naŠ*
c
ƒB
‹%pe†o
d




‚0
F
W
�LG

t†l
(








































	
2























































‚1







	








	
D
















	
	A4





	
rpŽ)se‡U
ƒY
i…&
�=
†?
‚{
l*

ƒG
 
‚
ˆ|�
t„g
ŠwteŠOup(

ƒC
 
‚
ˆ|�
zalˆ

„crŠ*eh„=
‹
l†n
†?
w 
ƒE
‹"ilŽM
n
ƒK
‹

oo„
‹
r…
Šwprˆc
…15&/
`


2

	


 

=‚P 
!



""
<GGGGGGGGGGŸV˜€€€€¿0^ˆE


H
jJ�=g	
K"
�z0ast'
ƒ/
-
‚4
‚1

�3
)		ƒV
�]
yˆn
…1ta�












‚
‚

=











j



6
@












�k
0
	
	6


=	
	

H
&








�h
bˆJ
„-
cˆ9




„

e(




ƒC





F






+






\






+

#
E
�:


!P


'+'E
E	Ph
-



+


 



h�
‡1



�C


F�T	
/^

i„d



)
ƒp
„-‚%
	)
oŠ#

pˆE
„-
t…)
„s†
uˆ9
„)
yŠf	ulŠ
	







t†d
1





	



$




















G
l
E$
	
	
		
	$"
	
			

	*&ve�





„y





ƒ
‚Q



�Pwa„f
Šwxaˆ
„)
lˆ%
„)
t„2
‹
yb…

+
ŠL+
b.h$
�(_mˆ/
„)aa‡!
}
ƒ#�
c…

+
ŠL+
n†k
g

ƒU�{4

s�\

u‡


|


ƒ"
�
be†n


†>
,


ca†f
‚C
ƒ|4
r‡








































B












































‚<7
















K

















da‡"
}
F


‚\��N
elˆ)


„(

nŠg
r†n


†>
,


'je…

(

‚v
„)
ƒ%(laˆ)


„(

c„+
‹

e
ƒD

�

�g
^
‚hJ


 5‚�M�
o‡6
y

0
‚r	��8ma‡


Y


"


ƒ"
b
"

i�tno‡


|


ƒ"
�
oa%

ƒA
,
‚
‰�
o‡[

d


G
h
�]]

Q
t
)
ƒ

y
I

�F
ˆ	P0VpaŒm

ra�





ƒ	
�p





…f







‚?e
e…,
Šw
o



t



„_
	

	
�2


W
$

�c�*[�



B

s‡r

„saˆ
„)
i‡
}
L
‚W��T
o…>
Šwta‡


|


ƒ"
�
ut…)
„s†
va�gytŠO
c_a…<
Šw
f‡-
„ ad„
Š-c
eˆ
„)
l‡'
�
ƒ�
m†f
‚C
ƒ|4
n
‡:
ƒYƒp
r‡S


e



=
‚X	i

K;
t‡


v


‚

}
‚
ba‡

x

ƒ�

cˆ
„)
d‡"
}
F
‚]��N
lˆ*
„)
m‡ 
}
ƒ#�
n‡
}
ƒ#�
oŒl
r…,
ƒ
„-ƒ3
s‡
z

L
‚W��T
t‡
}
ƒ#�ce…
#
‚{
„)
ƒ0#
o‡


|


ƒ"
�
9ec�[

eŠ+		
s„f











�9






h




U
‚m

�%T



2





�z


ha…'


�
�



ƒ�		�‚!



d…
3
ŠD3
e!
ƒF
†8	

„E!
i�
r�







„z





�S

P





�aS
M
%\








,
F


ip‡


}

ƒ
�
s„z
Šw
tŽ@


k_‡6
„ 
aŠ%	
e‡2

„
oŠRla…
Šw
e#
�
i%
ƒ\
*

�r
3


ƒ%ƒ
‚z
o





ƒ8
V



9
‚:

t
‚�}‚


 md�
…
†z

odŠg,‚H
m�
ƒN
�3
„s‚‚E
n„>
L
,
�)
@


l



g
�]L
u
X‚3,
o‡c



Q



/

h‚

U
4
p5
Y




ƒ


�O
	

	
„ga��s
�
r…
+
ƒn
�8‚xR�\+
u…'


ƒn
�
‚W‚X

v‰H
3


�

ƒ
&pa�ire(




ƒ
>





F




+


�



	



>
/






(
 



=



]$wF
($
(	#

	"?Q
-


+


$


	
o„.


‹

y†l
(








































	
2























































‚1






	








	
D
















4>
�>
�!8 

/�6

‚!
F$!2+9
`


.+


w,_

	.G?6C#0�D
©½
‡ÙÈK¯ãêœ<mI
š=+
ã
Ðò
ö̹§•Íx][7=(
è
Ù
Æ
³
¥
—
‰
{
l
_
R
=
(

áº“lP%úÏœ‚gM.
î
Æ
¬
Œ
m
V
8

	ë	Ö	Á	«	—	z	]	;	òß̶ �uU0ãÂœ|eI
ò¿!ò0Ñ%´¦—ˆyjZ-!	ýñåÙÍ9thÁ¶«ž‘wfYL	,D4B®¼€àέ “ßG
¬J7m,!
ôèÜÐñŸ’…uS[@4(ùîàº
‡
¿��ui]QB'CheckDisposed
¸%AccessRights
œ'CaptureWindow
V#CheckIntptr
'AES_Decryptor	Ò'AES_Decryptor	£'AES_Encryptor	¢BS	¡!Appsstream	•BeginRead	‹%BeginReceive	ŠBuffer	³t¦Chrome�Chrome†Chrome*CHROME
cHistoryƒ5ChildWindowFromPointçdCBuffer	å'CheckDisposed—!APPBARDATA
nd

cCookies
cbTagD
cbTag¾cbSizecbSize=cbSize·cbSize
ocbSalt:'cBrowserUtilsp#cbReserved2#?	cbRescb
{!cBookmarkslcbNonce@cbNonceº%cbMacContextF%cbMacContextÀcbLabelScbDatacbDataHcbDataÂcBCrypt7!cbAuthDataB!cbAuthData¼
cbAADG
cbAADÁcbEcbÈ'CaptureWindow
DBoolean
ýnbottom
]bottom
S%BufferLength	²±Capture
AcAesGcm/ByteArray%BufferLength	†%BufferLength
%BufferLength	ä%BeginConnect	µBuffer	‡Buffer
BeginRead	éBS	ÐBS
A
ôBS	õBrsType)BrsInfo#BrowserType5BrowserPathToAppName BrowserBrowser
Braveÿ
Brave÷bozman3Bottom	=bottom	$BottomˆBottomeBottomBottomÚbottomŠbottommBottomgbottom
Llb'CaptureWindow
`AppEndBOOKMARKSªBookmarksÌBookmarksõBookmarksò
Bookmarkî
bight	#%BeginConnect	ç%BeginReceive	¶_pageSize
ÙBeginRead	·%BeginConnect	‰%BeginConnect
%BeginReceive	è!Appsstream	Á
¢9BCryptSetPropertyFlagsÐ/BCryptSetPropertyéABCryptSetAlgorithmPropertyf%MBCryptOpenAlgorithmProviderFlagsË CBCryptOpenAlgorithmProviderc CBCryptOpenAlgorithmProviderè+BCryptImportKeyg/BCryptGetPropertye$KBCryptGenerateSymmetricKeyFlagsÒABCryptGenerateSymmetricKeyê1BCryptEncryptFlagsÔ'BCryptEncrypti-BCryptDestroyKeyh-BCryptDestroyKeyæ'BCryptDecryptj'BCryptDecryptë&OBCryptCloseAlgorithmProviderFlagsÉ!EBCryptCloseAlgorithmProviderd!EBCryptCloseAlgorithmProviderç;BCRYPT_PSS_PADDING_INFO;;BCRYPT_PSS_PADDING_INFO8)BCRYPT_PAD_PSSV-BCRYPT_PAD_PKCS1Ø+BCRYPT_PAD_OAEPW+BCRYPT_PAD_OAEPÙ+BCRYPT_PAD_NONE×5BCRYPT_OBJECT_LENGTHY=BCRYPT_OAEP_PADDING_INFOT=BCRYPT_OAEP_PADDING_INFOP/BCRYPT_MULTI_FLAGÏ?BCRYPT_KEY_LENGTHS_STRUCTLABCRYPT_KEY_DATA_BLOB_MAGICX5BCRYPT_KEY_DATA_BLOB]'QBCRYPT_INIT_AUTH_MODE_INFO_VERSIONaABCRYPT_INIT_AUTH_MODE_INFOøABCRYPT_INIT_AUTH_MODE_INFOì?BCRYPT_HASH_REUSABLE_FLAGÎ5BCRYPT_CHAINING_MODE\7BCRYPT_CHAIN_MODE_GCMZ5BCRYPT_BLOCK_PADDINGÖ2gBCRYPT_AUTHENTICATED_CIPHER_MODE_INFO_VERSION¶*WBCRYPT_AUTHENTICATED_CIPHER_MODE_INFOJ*WBCRYPT_AUTHENTICATED_CIPHER_MODE_INFO<*WBCRYPT_AUTHENTICATED_CIPHER_MODE_INFOµ9BCRYPT_AUTH_TAG_LENGTH[&OBCRYPT_AUTH_MODE_IN_PROGRESS_FLAGÈ&OBCRYPT_AUTH_MODE_CHAIN_CALLS_FLAG`&OBCRYPT_AUTH_MODE_CHAIN_CALLS_FLAGÇ CBCRYPT_ALG_HANDLE_HMAC_FLAGÍ5BCRYPT_AES_ALGORITHM^BCrypt´+BankingServicesÞ+BankingServicesªBanking«Autorun£AUTOFILLS«
AutoFillÉ
Autofill¨
Autofill¥
AutoFill¡'AuthModeFlagsÅ'AuthenticatorAttributeAAsynchronousWindowPosition	&AAsynchronousWindowPosition	
+ArchivePassword
ë
AppStart!_fileBytes
Ø#AppendValue­…AppEnd'appdata	vvAPPBARDATA»%AntiAnalysis¢%AnonApiToken
ï'AES_Encryptor
'AES_Encryptor	÷'CaptureThread	Ä'AES_Decryptor
'AES_Decryptor	ø'AES_Encryptor	Ñ%ActiveHandelÊAction	%AccessRights#cbReserved2
ˆéa_aó&A'_tableEntrieslp_sqlData'_tableEntries
Ü3_masterTableEntries
Û#_fieldNames
Ú#_dbEncoding
×-_sqlDataTypeSize
Ö
Þà–L
Ã
ZÞ€
Þ€€€
¿0¬0_dbŠg
ŠpfiŠh

ŠnmaŠk
ŠppaŠi
ŠpsqŠf
ŠptaŠl
Šp
ablŠ`









 
Š7




deŠ]

ŠU

mŠq
Šp
tŠp


ŠggeŠi
ŠpleŠV



Š2
t†s
Žy
uŠn
ŠpmeŠc

ŠR
	
s‹
nd†w
ŽK
+
o†v
Žypi†v
Žyrc†r
Žyss†r
Žy

tŠb
	

Ša		ta†w
ƒo
0
Š@
e†w
ƒn
Š^

h‹

yŠf
Šp	ul•=	
benŠg
ŠpleŠ`









 
Š7


yt†s
ƒu
Šp
ces‹
Š(
	


hi†r
ŽP&odŠg
Šp
l•E
n†y
ƒh

Š^	
p‹

rŠ]
Šp
uŠZ

Š[re•C

y†q




Žq	
to‹

p•Eut‹
vlŠu
Šp
dat†w
ƒo
0
Š@beŠg
Špch•Bec†x


Žx

f•=
rŠ]

ŠU
s•<



heŠ]
ŠpinŠg
Šp	
r‹
li•A
maŠq
ŠpnaŠj
Špom†w
Žy
re•BtaŠp


Šg
eadŠ]








ŠT	



lŠV



Š2
t•C
byŠh
ŠpcoŠ]
Šp
r†x


Žx

t‹
Š-
u‹
enŠ`



Šd

fa•=
rŠp
Šp
gr‹

ldŠ]


Šc

e‹

maŠb
Šp
eŠe
Šp	
nŠc
ŠpncŠg
Šp
d•=

e†w
Žy
i•?

tŠ`








Šd


pa†r
„'
ŠR
r•C
ra†w
Žy
eŠb
Šp
fŠ]
Šp
tŠk


Šh
siŠf

Šm

k•<



s‹

Š(	





td•<
p•A
rŠo
Šp
t‹



vŠn
Špxe‹

fau•=fsŠp
ŠpieŠ]


Šc

g†y
Žy
lŠh
ŠproŠp
ŠpseŠp
Šp
gen†w
Žy
sŠi
Šp
tŠn


'


Š%
it†u
Žyra‹

sc†q
ŽyvlŠt
Šp
heaŠ]
Špil•B
v†r
Žyub†u
Žy
icoŠZ
Špdl•AelŠ]


Šc

sŠk


Šo
ld•B
eŠh
Šp
l•Bng†q
ƒv
Šp

p•?
on‹
re‹
soŠv
Šp
t•AteŠW






ŠZ


h†u
Žy
lŠY
Šp
o†v
Žyve†r
ŽyzeŠ^


Še
ken†v
Žy
y†t
Žyil•Bto•<

	

ldaŠf
Šp
nŠj
Šp
r•BebŠh
Šp
c•E
eŠ`



Šd

fŠp
Šp	
g‹


p‹

rŠV



Š2is•A
tŠ\


Š_le•E
p•BonŠs
Šppr•BreŠx
ŠpstŠe
Šptb†s
Žy
d•=ueŠn
Šp
masŠb
	

Ša	da†w
ŽyenŠe
Šp

sŠj
Šp
naŠc
ŠpofŠp
Špse‹

namŠc

ŠR
p†v
ŽycoŠg
Špdc•B
e•=

o†w
Žyer†w
Žyfi†y
Žygs†q
Žyin•?
on†v
Žypu•?
teŠa
Šp
rŠ`

	


Šd	
	umŠd
ŠpveŠs
Šp
oce‹
Š(





ddŠv
Šp
iŠg
ŠpffŠp
Špke†v
Žy
ll•Emd†w
Žy
oŠp
Šp
na†v
Žy
f†y
Žy

gŠs
Šp

s‹

tŠa
Šp
vŠs
ŠpotŠd
Šppe•=



n•<

y‹
rd†r
ƒk
Šp
y‹
tnŠd
ŠpulŠs
Šp

nŠZ

Š[	wcŠo
Šp
pagŠi
Šp
s†r
Žy	
t‹
en•=



sŠf
Špit†v
Žyna•<ro‹
Š(



	tc†y
Žy
k†t
Žyut•?
yd‹

qldŠf
Šp
iŠ\


Š_
rŠx
Šp
sŠe
Šp
ram‹


n†w
Žy

t†w
Žych†r
ŽydhŠ]
ŠpeaŠp







ŠJ




cŠ]
;
Š5
nŠb
Š`

fiŠ]
Šp
ieŠk


Šo

n†q
Žyoc‹
Š(

	
	


mŠp
Šp
oŠd
Šp
wŠo
ŠptaŠk

Šj
tŠs
Špyp†q




Žq


sal†s
Žy
n•Bcr†q
Žyes‹

tŠp
Šp
x‹
id•A
o‹

tŠW
Šp
zŠ^


Šekt•<



odŠv
ŠpqlŠ\






ŠT
sa•B
e‹

i‹
Š*

w†r
ŽytaŠe
ŠuÀ€€€€
�nf0eke–>tp–>
fil–>
get–>
ile–>	
key–>
lek–>

ofi–>
pro–>
rof–>
tpr–>									b¼€€€€
�HU0etp–=
fil–=
get–=
ile–=	
les–=

ofi–=
pro–=
rof–=
tpr–=								8¸€€€€
v00cut–<
ecu–<xe–<
ute–<
xec–<			C´€€€€
�
90cov–;
eco–;ry–;
ove–;
rec–;
ver–;				C°€€€€
�
90fig–:
gra–:
ifi–:gr–:
rab–:
wif–:				C¬€€€€
�
90cov–9
eco–9ry–9
ove–9
rec–9
ver–9				‚¨€€€€
„4÷0cov‹

ut‹

eco‹


u‹
ke‹
ry‹

tp‹


xe‹

fig‹

l‹



get‹


ra‹

ifi‹
gr‹
le‹



key‹

lek‹

s‹

ofi‹


ve‹


pro‹



rab‹
ec‹

of‹



tpr‹



ute‹

ver‹


wif‹

xec‹


		
	
	
		


·
}îÜʸ¢�„yn\J8'æÇ´¡“…wi]QE8,
™ 
ù
ï
Ü
Ñ
Æ
¹
©
™
�
�
u
i
U
B
/

	öÖ¶–vV6úܾ ‚o\I6#
ý
à
Ð
¿
®
�
ˆ
{	h
o
[
G
)


	ñ
�	ã	Í	½	­	�	ƒ	v	�
}	V	B	2	%		÷çÓ¿§�w_E+÷àɲ›‚iP7ýàè�rWE3!ïÖ½¤‰nS8êж£�n]F+ïÒ¶œ„s`H;.!ñÞÒ¿¬�taN=,
æ
Ê
¾
­'DecryptConfig
òCvl
å)ConvertToULong
ã#DoubleClickþDouble9DoNotSendChangingEvent	19DoNotSendChangingEvent	+DoNotReposition	0+DoNotReposition	#DoNotRedraw	/#DoNotRedraw	'DoNotCopyBits	,'DoNotCopyBits	9DoNotChangeOwnerZOrder	.9DoNotChangeOwnerZOrder	'DoNotActivate	+'DoNotActivate	domainµ'DLL.S.OpenApp6-Disposed_BooleanŸDispose
·Dispose
¶DisposeKDiscord'DiscordÕ1DisableScreensaver	P'disabledHostsí#DetectTitle	g1DetectPornServices°5DetectedPornServicesã9DetectedCryptoServicesâ;DetectedBankingServicesá!EDetectCryptocurrencyServices®5DetectCreditCardType²7DetectBankingServices¯/DesktopScreenshotØ#DesktopProc
ª#DesktopProc›#DesktopName
¡'DesktopHandle
¢'DesktopHandle”5DESKTOP_WRITEOBJECTS
•5DESKTOP_WRITEOBJECTS
k5DESKTOP_WRITEOBJECTS	>5DESKTOP_WRITEOBJECTS15DESKTOP_WRITEOBJECTSþ7DESKTOP_SWITCHDESKTOP
–7DESKTOP_SWITCHDESKTOP
l7DESKTOP_SWITCHDESKTOP27DESKTOP_SWITCHDESKTOPÿ3DESKTOP_READOBJECTS
™3DESKTOP_READOBJECTS
d3DESKTOP_READOBJECTS	?3DESKTOP_READOBJECTS*3DESKTOP_READOBJECTS%DESKTOP_NONE
c%DESKTOP_NONE)%Desktop_namež7DESKTOP_JOURNALRECORD
š7DESKTOP_JOURNALRECORD
h7DESKTOP_JOURNALRECORD.7DESKTOP_JOURNALRECORD;DESKTOP_JOURNALPLAYBACK
›;DESKTOP_JOURNALPLAYBACK
i;DESKTOP_JOURNALPLAYBACK/;DESKTOP_JOURNALPLAYBACK3DESKTOP_HOOKCONTROL
˜3DESKTOP_HOOKCONTROL
g3DESKTOP_HOOKCONTROL-3DESKTOP_HOOKCONTROL
/DESKTOP_ENUMERATE
”/DESKTOP_ENUMERATE
j/DESKTOP_ENUMERATE0/DESKTOP_ENUMERATEý5DESKTOP_CREATEWINDOW
“5DESKTOP_CREATEWINDOW
e5DESKTOP_CREATEWINDOW+5DESKTOP_CREATEWINDOWü1DESKTOP_CREATEMENU
—1DESKTOP_CREATEMENU
f1DESKTOP_CREATEMENU,1DESKTOP_CREATEMENU)DESKTOP_ACCESS
b)DESKTOP_ACCESS(!DeleteFileé
DeleteDC!DeferErase	'!DeferErase	Default
‘!DecyrptKey))DecryptWithKey%DecryptToken*
cryptKey
íDecryptHDecrypt0Decrypt
ñ!Decompress	ñ!Decompress	Í!Decompress	ž-DecodeProductKey
.
DataBlob!CustomOpen$!CustomOpen!1CryptUnprotectData=CryptprotectPromptstruct)CryptoServicesß)CryptoServices«CryptoCREDITS¬+CreditCardTypes¬#CreditCards#CreditCards	#CreditCardsÈ!CreditCard;CreateTempDuplicateFileK'CreateProcess
Ä'CreateProcess
Ã'CreateProcess
«'CreateProcess‘'CreateProcess�'CreateProcessŠ'CreateProcessá=CreateLParamFor_WM_KEYUP	Y=CreateLParamFor_WM_KEYUPv=CreateLParamFor_WM_KEYUP]=CreateLParamFor_WM_KEYUPV=CreateLParamFor_WM_KEYUPP=CreateLParamFor_WM_KEYUP´ACreateLParamFor_WM_KEYDOWN	ZACreateLParamFor_WM_KEYDOWNsACreateLParamFor_WM_KEYDOWN^ACreateLParamFor_WM_KEYDOWNWACreateLParamFor_WM_KEYDOWNQACreateLParamFor_WM_KEYDOWN³'CreateDesktop
¬'CreateDesktop
¥'CreateDesktopŽ'CreateDesktop‹'CreateDesktopâ)CreatedDesktop	ÀCreate
¦Create•CreateCreateÄ!cPasswords!cPasswordséCounterÆ
CopyYÐ
CopyXÏ'CopyDirectory
÷	CopyjCOOKIES¨CookiesÊCookiesÃCookie´ContexÎContent
ÑConsts±ConfigžConcat5
Compress
#
Compress	ò
Compress	Î
Compress	Ÿ'CommandPrompt›'CommandPrompt—?CollectProcessAndChildren
Å?CollectProcessAndChildren�#CloseWindowÀ#CloseHandelÆ#CloseHandel�%CloseDesktop
²%CloseDesktop	M%CloseDesktopæ
Close
º
Close˜
Clone
´'ClipperModule§-ClipperAddresses¨%ClientSocket
%ClientSocket	á%ClientSocket	¯%ClientSocket	ƒ
[ÆñßÐÁ¬—pcVI_Š8%ìÝ̲¡�lH.
ù
æ
Ù
Ì
Ã
º
§
”
‡
z
i
_
U
K
A
3

øæÔ¼¤ŒrXEr, ôãÕ¯™ƒo[D-
ù
ç
Ò
½
¨
“
{
c
K
3

	ñ	Û	Å	¯	™	ƒ	i	O	5		
çͳ¤‘�qaQA/õèÝɵ£�zfSA/!	øçÞÕÌú±¨Ÿ–�„{ri`WE3#üæ͹¥”ƒo[G.üã͸¢“€m^C(ôàÌ*¯’aJ9*ïáÈ»©—yl^O@'GetProfileKey>/dwPropertiesCount'-GetProcessIDList
ÁGetWindowïGetWindowz
GetValue
ÞGetUTF8=GetUserObjectInformation
¯%GetTopWindow€%GetTopWindowyGetText	ð3GetTelegramSessions
ö
GetTdata
õ-GetSystemMetrics	ú-GetSystemMetricsÞGetSValueäGetScreen‚#GetRowCount
ß#GetProperty48Ge#GetProfiles=Execute<'GetProductKey
-;GetProcessWindowStation
®;GetProcessWindowStationç)GetProcAddress©)GetProcAddressFGetParent²'GetMenuItemIDä%GetMasterKey7GetMainModuleFilepath	77GetMainModuleFilepath	GetLValueæ'GetListWindow�'GetListWindow~GetIValueå-GetHistoryDBPath„+GetHandleWindow_-GetHandleBrowserŸ3GetForegroundWindow	O3GetForegroundWindowî3GetForegroundWindow‘3GetForegroundWindown)GetEncoderInfo
@)GetEncoderInfo	¿)GetEncoderInfo	�#GetDesktops
©#GetDesktopsœ)GetDesktopName
¼)GetDesktopName
»3GetCurrentHwProfileí-GetCookiesDBPath€GetBValueç1GetBookmarksDBPathm!GetAllInfo%GET_Y_LPARAM	b%GET_X_LPARAM	aGet	pGet	hGet¤Get-Get
Get
Get
GetÿGetÄGet…Get�GetnGetöGetóGet©Get¦#GENERIC_ALL
m#GENERIC_ALL31GenerateRandomData
ð
FTPHostsÑ%FrameChanged	)%FrameChanged	'formSubmitURLô)FormatPasswordr'FormatHistoryv-FormatCreditCards%FormatCookiet)FormatBookmarkw)FormatAutoFillu
flags°FireFoxWFireFoxOFirefox+FIREFOX'FindWindowEx2ì%FindWindowExë!FindWindowá!FindWindowê!FindWindow¨!FindWindow”!FindWindowq'FileZillaGrabMFileUtilsJ5fileNameUserDataCopy\5fileNameUserDataCopyQ5fileNameUserDataCopy;5fileNameUserDataCopy05fileNameUserDataCopy”5fileNameUserDataCopyˆ5fileNameUserDataCopy5fileNameUserDataCopyù-fileNameUserData[-fileNameUserDataP-fileNameUserData:-fileNameUserData/-fileNameUserData“-fileNameUserData‡-fileNameUserData-fileNameUserDataø1fileNamePowerShell
*1fileNamePowerShell
%1FilenameFireFoxX86^1FilenameFireFoxX86S+FilenameFireFox]+FilenameFireFoxR+FilenameEdgeX86=+FilenameEdgeX862%FilenameEdge<%FilenameEdge1#fileNameCmd�#fileNameCmd˜/FilenameChromeX86–/FilenameChromeX86Š)FilenameChrome•)FilenameChrome‰-FilenameBravex86-FilenameBravex86û'FilenameBrave'FilenameBraveú
FFLoginsê#FFDecryptor?)expirationDate¶Exists
¨Exists
§ExistsšExists™>
Execute�'ERROR_SUCCESSU5EnumWindowsTopToDown|5EnumHwndsPrintMethod}1EnumHwndsPrintData`1EnumDesktopWindows	I1EnumDesktopWindows{%EnumDesktops
­%EnumDesktopsèencTypeú/encryptedUsername÷/encryptedPasswordø
EdgePath	u	Edge6	Edge.	Edge-	EDGE#EasyDecryptdwYSize
‚dwYSize'dwYCountChars
„'dwYCountCharsdwY
€dwYdwXSize
�dwXSize'dwXCountChars
ƒ'dwXCountCharsdwX
dwX!dwThreadId
y!dwThreadId}
dwProp/dwPropertiesCountdwFlags'dwPromptFlags#dwProcessId
x#dwProcessId#dwMinLengthM5DwmEnableCompositionà#dwMaxLengthNDWLP_USERD)DWLP_MSGRESULTC%DWLP_DLGPROCB'dwInfoVersion>'dwInfoVersion¸#dwIncrementOdwFlags
†dwFlags!dwFlagsIdwFlagsÃ
dwFlags:dwFlags&+dwFillAttribute
…+dwFillAttribute DrawFrame	(DrawFrame	%DPAPIDecryptDownloads,

""ŸVÌ€€€€
¿0¬0_dbŠg
ŠpfiŠh

ŠnmaŠk
ŠppaŠi
ŠpsqŠf
ŠptaŠl
Šp
ablŠ`









 
Š7




deŠ]

ŠU

mŠq
Šp
tŠp


ŠggeŠi
ŠpleŠV



Š2
t†s
Žy
uŠn
ŠpmeŠc

ŠR
	
s‹
nd†w
ŽK
+
o†v
Žypi†v
Žyrc†r
Žyss†r
Žy

tŠb
	

Ša		ta†w
ƒo
0
Š@
e†w
ƒn
Š^

h‹

yŠf
Šp	ul•=	
benŠg
ŠpleŠ`









 
Š7


yt†s
ƒu
Šp
ces‹
Š(
	


hi†r
ŽP&odŠg
Šp
l•E
n†y
ƒh

Š^	
p‹

rŠ]
Šp
uŠZ

Š[re•C

y†q




Žq	
to‹

p•Eut‹
vlŠu
Šp
dat†w
ƒo
0
Š@beŠg
Špch•Bec†x


Žx

f•=
rŠ]

ŠU
s•<



heŠ]
ŠpinŠg
Šp	
r‹
li•A
maŠq
ŠpnaŠj
Špom†w
Žy
re•BtaŠp


Šg
eadŠ]








ŠT	



lŠV



Š2
t•C
byŠh
ŠpcoŠ]
Šp
r†x


Žx

t‹
Š-
u‹
enŠ`



Šd

fa•=
rŠp
Šp
gr‹

ldŠ]


Šc

e‹

maŠb
Šp
eŠe
Šp	
nŠc
ŠpncŠg
Šp
d•=

e†w
Žy
i•?

tŠ`








Šd


pa†r
„'
ŠR
r•C
ra†w
Žy
eŠb
Šp
fŠ]
Šp
tŠk


Šh
siŠf

Šm

k•<



s‹

Š(	





td•<
p•A
rŠo
Šp
t‹



vŠn
Špxe‹

fau•=fsŠp
ŠpieŠ]


Šc

g†y
Žy
lŠh
ŠproŠp
ŠpseŠp
Šp
gen†w
Žy
sŠi
Šp
tŠn


'


Š%
it†u
Žyra‹

sc†q
ŽyvlŠt
Šp
heaŠ]
Špil•B
v†r
Žyub†u
Žy
icoŠZ
Špdl•AelŠ]


Šc

sŠk


Šo
ld•B
eŠh
Šp
l•Bng†q
ƒv
Šp

p•?
on‹
re‹
soŠv
Šp
t•AteŠW






ŠZ


h†u
Žy
lŠY
Šp
o†v
Žyve†r
ŽyzeŠ^


Še
ken†v
Žy
y†t
Žyil•Bto•<

	

ldaŠf
Šp
nŠj
Šp
r•BebŠh
Šp
c•E
eŠ`



Šd

fŠp
Šp	
g‹


p‹

rŠV



Š2is•A
tŠ\


Š_le•E
p•BonŠs
Šppr•BreŠx
ŠpstŠe
Šptb†s
Žy
d•=ueŠn
Šp
masŠb
	

Ša	da†w
ŽyenŠe
Šp

sŠj
Šp
naŠc
ŠpofŠp
Špse‹

namŠc

ŠR
p†v
ŽycoŠg
Špdc•B
e•=

o†w
Žyer†w
Žyfi†y
Žygs†q
Žyin•?
on†v
Žypu•?
teŠa
Šp
rŠ`

	


Šd	
	umŠd
ŠpveŠs
Šp
oce‹
Š(





ddŠv
Šp
iŠg
ŠpffŠp
Špke†v
Žy
ll•Emd†w
Žy
oŠp
Šp
na†v
Žy
f†y
Žy

gŠs
Šp

s‹

tŠa
Šp
vŠs
ŠpotŠd
Šppe•=



n•<

y‹
rd†r
ƒk
Šp
y‹
tnŠd
ŠpulŠs
Šp

nŠZ

Š[	wcŠo
Šp
pagŠi
Šp
s†r
Žy	
t‹
en•=



sŠf
Špit†v
Žyna•<ro‹
Š(



	tc†y
Žy
k†t
Žyut•?
yd‹

qldŠf
Šp
iŠ\


Š_
rŠx
Šp
sŠe
Šp
ram‹


n†w
Žy

t†w
Žych†r
ŽydhŠ]
ŠpeaŠp







ŠJ




cŠ]
;
Š5
nŠb
Š`

fiŠ]
Šp
ieŠk


Šo

n†q
Žyoc‹
Š(

	
	


mŠp
Šp
oŠd
Šp
wŠo
ŠptaŠk

Šj
tŠs
Špyp†q




Žq


sal†s
Žy
n•Bcr†q
Žyes‹

tŠp
Šp
x‹
id•A
o‹

tŠW
Šp
zŠ^


Šekt•<



odŠv
ŠpqlŠ\






ŠT
sa•B
e‹

i‹
Š*

w†r
ŽytaŠe
Šp
eŠV


	



Š2
	
iŠY
Šp
r†q
ŽyurŠX
Špwo†r
Žy
tabŠ`









 
Š7	



tŠe


Šo
by†s
Žyco†y
Žyda‹

e•<

eaŠV



Š2
l‹


mŠb



Šm

nŠa
Šp
p•C

r†w
ƒk
	

Ša		
s†s
ƒu
Šp	hu†u
ŽyitŠY
Špke†t
ŽyleŠY
ŠpnuŠd
Špok†v
Žy	
p•<	




r‹

uŠs
Šp	pr•Ari†q
ƒz


Šo


oŠo
Šp
yŠ`

Šn	td‹

e‹

oŠs
ŠpvaŠn
ŠpypŠ_

Ši
,




+
%


	




#




	


	



























%







$

(

,






-vC‡M
”
I
àWï~
µ
T	ë	vû‡	ŒË�Öœ_ï¦|:ð²n9ÞªyB
Ú
™
g
Ávsd‰z
_de‰z	H�
K)


.S.OpenApp.Chrome.FilenameChromeFilenameChrome
Þ
ÿ€T�
W5


.S.OpenApp.Chrome.fileNameUserDataCopyfileNameUserDataCopy

U
6¢L�
O-


.S.OpenApp.Chrome.fileNameUserDatafileNameUserData	R	’	sœ/�
3



.S.OpenApp.Chrome.PCPCö	8	5>�
7


.S.OpenApp.Chrome.OpenOpen"E~ˆhk…	Open()e�
Q/


3.S.OpenApp.Chrome.OpenChromeBrowserOpenChromeBrowser
E
_
v¦
LÐ	OpenChromeBrowser()4�
-

.S.OpenApp.ChromeChromeÇõþæ,.�


.S.OpenAppS.OpenApp¸	ÃR®g
1�

#

-Chrome.OpenOpen-6®Ê	Open()X�
=/

3-Chrome.OpenChromeBrowserOpenChromeBrowserw�ˆd±	OpenChromeBrowser()2�
/!


-Chrome.PathChromePathChromeT
? A�

=/

-Chrome.FilenameChromeX86FilenameChromeX86Í®‰;�	
7)

-Chrome.FilenameChromeFilenameChromeG(€G�
C5

-Chrome.fileNameUserDataCopyfileNameUserDataCopy
�
~¢?�
;-

-Chrome.fileNameUserDatafileNameUserDataüÝœ'�

-ChromeChromeÑÙ
Ä
#F�
E

#,Stealer.Firefox.cHistory.GetGets‡*ZW	Get(string)m�
_-

=,Stealer.Firefox.cHistory.GetHistoryDBPathGetHistoryDBPath³Ô
€�
·	GetHistoryDBPath(string):�
=

,Stealer.Firefox.cHistorycHistory�˜~77�
++




,Stealer.FirefoxStealer.Firefoxiz@_[
F�

E

#)Stealer.Firefox.cCookies.GetGeteyYJˆ	Get(string)m�
_-

=)Stealer.Firefox.cCookies.GetCookiesDBPathGetCookiesDBPath¡Â
‚‹
¹	GetCookiesDBPath(string)9Œ
=


)Stealer.Firefox.cCookiescCookies{†Peq7Œ~
++




)Stealer.FirefoxStealer.FirefoxPaxF“
�Œ}
Y-

o(Stealer.cBrowserUtils.WriteCreditCardsWriteCreditCardsP‘�=ä	WriteCreditCards(List<CreditCard>, StringBuilder)zŒ|
U)


g(Stealer.cBrowserUtils.WritePasswordsWritePasswords
Š
Îi
wÀ	WritePasswords(List<Password>, StringBuilder){Œ{
U)

g(Stealer.cBrowserUtils.WriteBookmarksWriteBookmarks	�	Ô�	}ô	WriteBookmarks(List<Bookmark>, StringBuilder)qŒz
Q%

[(Stealer.cBrowserUtils.WriteHistoryWriteHistory¯댜Û	WriteHistory(List<Site>, StringBuilder)xŒy
S'

e(Stealer.cBrowserUtils.WriteAutoFillWriteAutoFillÆ
‘³ã	WriteAutoFill(List<AutoFill>, StringBuilder)rŒx
Q%


_(Stealer.cBrowserUtils.WriteCookiesWriteCookiesFgõ¸	WriteCookies(List<Cookie>, StringBuilder)fŒw
U)

=(Stealer.cBrowserUtils.FormatBookmarkFormatBookmark4»ø÷	FormatBookmark(Bookmark)^Œv
S'


3(Stealer.cBrowserUtils.FormatHistoryFormatHistory\
yyF¬	FormatHistory(Site)eŒu
U)


=(Stealer.cBrowserUtils.FormatAutoFillFormatAutoFillÒôL¼„	FormatAutoFill(AutoFill)^Œt
Q%

5(Stealer.cBrowserUtils.FormatCookieFormatCookieñ¥ÛÛ	FormatCookie(Cookie)nŒs
Y-

E(Stealer.cBrowserUtils.FormatCreditCardFormatCreditCard×ýØÁ
	FormatCreditCard(CreditCard)eŒr
U)


=(Stealer.cBrowserUtils.FormatPasswordFormatPassword<»	FormatPassword(Password)�Œq
g;

W(Stealer.cBrowserUtils.UnixTimeStampToDateTimeUnixTimeStampToDateTime¹

ù¢
X	UnixTimeStampToDateTime(double, bool)<Œp
7'

(Stealer.cBrowserUtilscBrowserUtils�
�ˆw®'Œo





(StealerStealerjsµ`È
HŒn
I

#'Stealer.Firefox.cBookmarks.GetGet{�(^Y	Get(string)uŒm
g1

A'Stealer.Firefox.cBookmarks.GetBookmarksDBPathGetBookmarksDBPathµØ
€Ÿ
¹	GetBookmarksDBPath(string)>Œl
A!

'Stealer.Firefox.cBookmarkscBookmarks�
š!~=7Œk
++




'Stealer.FirefoxStealer.FirefoxizD__
�8Œj
G'

�w&Stealer.cBCrypt.BCryptDecryptBCryptDecryptx
?ÿ	BCryptDecrypt(IntPtr, byte[], int, ref BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO, byte[], int, byte[], int, ref int, int)�9Œi
G'

�y&Stealer.cBCrypt.BCryptEncryptBCryptEncryptr
;þ	BCryptEncrypt(IntPtr, byte[], int, ref BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO, byte[], int, byte[], int, ref int, uint)
X

T
LA6*úîáÔǺ­ “†yl`TóçÛÏ÷«Ÿ“‡{ocWK>1%

õèÜÐĸ¬ ”ˆ{ocWK?2&

õ
è
Ü
Ð
Ä
·
«
Ÿ
’
…
x
k
^
Q
E
:
/
$

ýðãÖÉ¼¯¢•ˆ{naTG;.!úíáÕɽ±¥™�€sfZOD9."

ÿ
ô
è
Ü
Ð
Ä
¸
¬
 
”
ˆ
|
p
d
Y
N
B
6
*


	ö	é	Ü	Ï	Ã	·	«	Ÿ	“	†	y	m	a	U	I	=	1	%		
	
õéÝÐöªž’…ymaUI=1%

õéÝÑŹ­ ”‡zmaTGúîà:."ûîáÔǺ­ “†yÔÈ»®¢–‰|l_RE8,øëÞÒŸ«ž‘…xl_RpcF:."
þòæÙÌ+ üðäØÌÀ´¨œ�„wk_TC'__Ë

mδ

8³
4
%²
‘�±

2
Y°
Á
k¯

N
m®
@­
Æ<¬
¡¼«
ŠØª
�¢©

į

Mí§

za¦

T‹¥

4°¤

…£



k¢



GW¡

� 
6S;
6‰õž

5iw�
,ZW…
,�
·„

,~7ƒ

,_[‚
)Jˆ�
)‹
¹€

)eq

)F“~
'Ÿ
¹m

'~=l

'__kÆ
6
™1d
4
6
Y;c
(
6
'-b

6ê8a

6«:`
6‰õ_÷
5iw
5
+
5ª:
5ru÷4
2C�

4¶wœ
4–â›÷.ƒ‰
^.
ÿ€
Q.
6¢
62
V©
6Ï
^¨

6“7§

6S;¦

6C¥

6
Ï7¤

6
™1£

6
Y;¢

6
'-¡

6ê8 

6«:Ÿ
5
+œ
5ª:›

5ruš
4
2C™

4¶w˜
4–â—
.ƒ‰–
.
ÿ€•
.
6¢”
.	sœ“

.	5’
.k…‘
.
L�
.æ,�
.®gŽ
-�
-d±Œ

-? ‹
-®‰Š
-(€‰
-
~¢ˆ
-Ýœ‡
-Ä
#†
(=ä}
(
wÀ|
(	}ô{
(œÛz
(³ãy
(õ¸x
(ø÷w
(F¬v
(¼„u
(ÛÛt
(Á
s
(»r
(¢
Xq

(w®p

(`Èo
'^Yn
&?ÿj
&;þi

&àUh
&Õ
g
&éæf
&Íe

&�sd
&
¯èc

&
fCb

&
Ba

&×A`

&|U_

&;;^

&òC]

&¨D\

&[G[

&
HZ

&
ÃDY

&
`]X

&
3'W

&
&V

&	Ü%U

&	WzT

&	=S

&	 R

&Ü=Q
&¬
*P

&ŠO

&lN

&NM
&‰L
&™
yK
&BPJ

&(I

&H

&öG

&×F

&µE

&�D

&‚C

&eB

&EA

&+@

&?

&
î>

&
Õ=
&
Š�<
&þ�;

&å:

&¡=9

&r
8

&Oó7

&8
6
%S
¿5
%
I4
%
k“3
%ró2
%rú1
%¦Æ0
%ˆŽ/

%qª.

"Â"-

"ž,



"p(+



"D&*

"(À)

"Ú(

 
ÜJ'

 
ÜJ&

 
ŒH%

 
ŒH$

 
?E#

 
?E"

 û<!

 û< 

 ±B

 ±B



 gB



 gB

 K
á

 4
ý

‡



~



r



g



FG

�

´
u�
ƒ
ì

W&

8


Ü7


¨.



p2


28

î>


Ð	
²
›,
y•

çŒ

¯
	@ª

ä5
\a


KÂ
æ,ÿ
®gþ
¡ý
l’ü
Ñ•û
?Μ

ˆ¯ù
Ûªø
Ã	ä÷
Ýnö
¶™õ
š¸ô
Ènó
¡™ò
�¾ñ



r"ð



L ï



(pî

Β
ï
Hì
å
ë
±
.ê

�
é
ˆ
è
�åç

|æ


¦jå
	ÿ ä

	¥Sã

	f8â

	Lá
Ü9à

s^ß
ÒšÞ

~MÝ

?8Ü

ø@Û
ÇÚ

©Ù

�Ø

v×

XÖ

JÕ
ªÔ

Ó

ÄMÒ

µÑ

‰5Ð

fÏ

@ Î

Í


Ì
Ì·Ë

¹Ê

wOÉ

G%È

%Ç

Æ
à‘Å
¡
4Ä

}Ã

cÂ

KÁ

,À

!¿


ì¾


˽


®¼


ˆ»


nº


K¹


*¸


·

ÅE¶
ˆRµ
gûAqeYL?3(úïã×Ë¿³§›�ƒwk_SF[:/#ôèÜÐĸ¬ ”ˆ|pdXL@4(øìàÔȼ¯¢•þñåÙÍÁ´¨œ�„xl`TH<0$󬟉}rg[OC7+
ù
ì
ß
Ó
Ç
»
¯
¢
–
Š
~
r
e
X
K
>
1
$

ýñä×yl_REË¿³¦™Œ€sfYL?2%ÿóæçÛÏ÷«Ÿ“†ylN“†8+ÙÌ¿³§š�€sfYM@3'
ö
ê
Þ
Ò
Æ
º
®
¡
•
‰
}
q
e
Y
M
A
4
(


	ø	ì	ß	Ó	Ç	»	®	¡	”	‡	z	m	`	S	F	9	-	!			ýñåÙÍÁµ©�‘„xl_SF:."ûîáÔÄAàÓƹ
^)Ð…¤
P
c
n
^)Ð…¤
P
c
nI

;4`Å~
P³ªH
P�G
P`ªF

Pÿ[E

PÞD

P½C

PœB

P~A

P^z@

P}X?

P^|>
<M		ÿ

<#þ

<ë-ý

<¾&ü

<’%û

<k ú

<D ù

<-ø

<Ü-÷

<¬)ö

<|)õ

<L)ô

< %ó

<
úò

<
Ï$ñ

<
¬ð
<
‹¼ï

<
` î

<
.+í

<
'ì

<Ù ë
<¹Ìê
<˜Âé

<yæè

;¾É

;–"È



;p Ç

;KFÆ
:˜ÅÄ

:sîÃ

:42Â

8
ò!Á

8
¿+À

8
¿+¿

8
˜!¾

8
r ½

8
>,¼

8
>,»

8
 º

8ò ¹

8Ê"¸

8¢"·



8r*¶



8J"µ

8(
ï´

8³



7CW²



7(v±

7�°
6
|ÿ¯
6ò…®

6Ã*­

6^`¬
6
D«¹“6�ƒª
62
V©
6Ï
^¨

6“7§

6S;¦

6C¥

6
Ï7¤

6
™1£

6
Y;¢

6
'-¡

6ê8
^+@

¦
^*Zá¥
SÀ
gN
Sœ
”M
S�
²L
IL$*
Iõ
K)
I
_Š(
I
C6'
I
(T&
R™
=K

R{
^J
=
Zs

=
4œ
_ J
™+
_ª
T*
_Ç
—)
_`(
_
A	Ž'
_z
{&

_
Çg%±_	»À$¤_•Ú#—
_Ì}"‹
_WQ!_›˜ r
_*Mf
_ŒzZ
_ñuN_%¨A_\¥4_¨�'_
³Ñ_ö™
_¹1C
^)"©£
ƒ
^(
¢
^&t
‡¡
^¬Ã 
^CdŸ
^
ñMž
^j‚�

^41œ

^ø7›

^·<š
^	¥™

^—l˜
^½Ô—

^Z]–

^÷]•
^o‚”

^ê“

^�c’

^,O‘

^$�

^Ú"�

^¬(Ž

^ƒ#�

^`Œ

^=‹

^ Š

^‰

^
òˆ

^
Û‡

^
¿x†
^
£…
^
€*Í„
]>
aƒ
]èQ‚
]!�
]JÒ€
]/

]
µu~
]	
˜}
]´
_|

]2}{

]ÓZz

]|Ry
]ëŒx

]µ1w

]z6v

]9<u

]!t

]í!s

]Ç!r
]<‚q

]·p

]Nco

]ùOn

]Üm

]Äl

]®k

]—j

]{xi
]_ch

]
ûg

]
äf

]
Ïe

]
¹d

]
Ÿrc

]
~b

]
fa

]
>\`
]
ˆ_

U—^

Uv]
U
Q¥\
U��[

U15Z
UÂHY
U
M&X
Uæ4W
U®oV
T	+‰U
T4òT

T­S

T1vR
T
�¥Q
T�P
TÅòO
Mhˆ=

M
å<
M
¡;
M	Y�:

Mý59
Mrd8
M
JÙ7
Mæ6
M®I5
L/È4
LcÇ3
LÓˆ2

LN1
L
¥¡0
L
�/
Lì
.

K{ƒ-

KT®,

K4Ñ+
D
^%
DªÌ$

Dr#
C°�"
C“½!
B6ß 
BäL
Bòì
BÜ
BS·
Bèe
B¿
#

B†3

BT,

B4

B
B
¶˜

B
”

B
w

B
W

B
>
BÉç
B¥t
B…—
A¤


A{?

A_`

@}G


@Tt	

@4—

>Ì!

>¡%



>w$



>N#

>(É

>å
;õ˜ç
;¦
Iæ
;’å

;‹}ä

;@Eã

;óGâ

;¥Há

;w(à

;G*ß

;+Þ

;ì$Ý

;¿'Ü

;�)Û

;c'Ú

;1,Ù

;þ-Ø

;Ò&×

;¤(Ö

;{#Õ

;T!Ô

;-!Ó

;$Ò

;
ÞÑ

;
ºÐ

;
—Ï

;
wÎ

;
Q Í

;
+ Ì

;
Ë

;ãÊ
l
ç
_RE8+úíáÕÈ»¯¢•ˆ{naTG:-!üðäØÌÀ´¨œ�„xl`TH<0$ÿóç	*			ùíàÓƹ­¡•ˆ|obUI=1$
ýðäØ˾²¦šŽ‚vj^RF:."
þòæÙÍÁµ©œ�„xl_SG;/#ÿóçÛÎôèÜÐĸ«Ÿ“‡{ocWK?3'öêÞÒƺ®¢–Š}qeYMA5)
ø
ë
Þ
Ñ
Ä
·
ª
�
�
ƒ
v
i
\
O
B
5
(



ôèÜÐÄ¸¬ ”‡zmaUH;.!úíàÓƺ®¡”ˆ|pdWJ>1%


ô
ç
Ú
Í
À
³
¦
™
Œ

s
g
Z
M
@
3
'


	ô	è	Ü	Ð	Ä	¸	¬	 Áµ©�‘…yl	6	6þðãÕǺ­ “†yl_REή
`¡΢
§ï.
p
§¹1
o
§” 
n
§c,
m
§//
l
§
k
§
ý
j
§
è
i
§
Ò
h
§
¸r
g
§
@-î
f
™_9

_1ãÚ

_1«Ù

_1uØ

_1>×
_1öÖ

_0ÀÕ

_0…Ô

_0BÓ

_0Ò

_/ÅÑ

_/‰Ð

_/MÏ

_/Î

_.Å#Í

_.€!Ì

_.7%Ë

_-ñ"Ê

_-«"É

_-e"È

_-&Ç

_,Ö"Æ

_,�$Å

_,I#Ä

_,"Ã
_+ÈÂ

_*§kÁ

_*4nÀ
_)‰¦¿
_(ܨ¾
_&^w½
_"/ã¼
_ J
™»
_ª
Tº
_Ç
—¹
_`¸
_
A	Ž·
_z
{¶

_
Çgµ
_	»À´
_•Ú³

_Ì}²

_WQ±
_›˜°

_*M¯

_Œz®

_ñu­
_%¨¬
_\¥«
_¨�ª
_
³Ñ©
_ö™¨
_¹1C§	6

…‰¬

…{	«

…m	ª

…`©

…T¨

…F	§

…(l¦
…ˆ¥

`;!

`÷ 

`µ

`s

`7

`û

`Ã

`‹

`L

`

`É

`’
`M‘

`

`Ì

`�

`M
`
'

`Ã

`‰

`Q


`
`Ú


`€4


`3'	

`é$

`¡"

`Y"

`
&

`·0

`c.

`+

`Á+


`q*

`/ÿ

`È.þ

`x*ý

`&,ü

`Ç9û

`u,ú

`.!ù
`s•ø
`5
÷

`¬cö

`)]õ
`q’ô
`Ÿ¬ó
`ø�ò
`K‡ñ
`
cÂð

`Êsï

`UOî

`Ñ^í
`ϓ
`
<­ë
`	‘…ê

`	hé
`QΏ

`ØSç

`]Uæ

`ÞYå
`1¥ä
`€‹ã
`«¯â
`
qá

`oà

`
ù`ß

`
glÞ

`ÐqÝ
`«)‰Ü

`o)ÈÛj‡Û×
\‡¼
ø
Nky»ufkTätZk4	sN
j"#c

j!Ï1b
s
j!Ža
g


ky»¤

kTä£

k4	¢

j"#¡

j!Ï1 

j!ŽŸ

j!Ož

j Ñ[�
jœ
j.Œ›
j$
¾š

jY™
j¤
�˜
j´¤—
j—
Ñ–
j-•

j„N”

jÀT“
j³�’
j™Ï‘
j® �
j
X�
j”
,Ž
j!
(�
jLŠŒ
j{®‹
jç
qŠ
j«!“‰

i
<ˆ

i
‡

iʆ

i‘…
iS
„

i~$ƒ
i™¿‚
i¼
��

iS€

i¨K

i&\~

i®R}
i€|
iÉ{

i
ŸTz

i

ly
iÈ�x
i—Ãw
dÁÇv
d§u
dš
vt
dÀÕs
d
|
?r
d	0
Bq
dç
Dp
d°
2o
dw
4n

djm

d�cl
dó¥k
dÛ
j
d5¡i

d(h

d
á"g

d
º"f

d
Ÿe

d
ˆd

d
sc

d
]b

d
Cra
d
#h`
cÃ
†_
cåØ^
cÊ]
c
Û4\
c
/¦[
c
BZ
cëeY
b§
vX
bÍÕW
b
ÇV
b
äU
b
:¥T
b
S
a�R
a–íQ
a«ßP
a
ÆÙO
a
¬N
aáÎM
aÅíL

`)ÉK

`)ŽJ

`)VI

`)H

`(åG

`(±F

`(xE

`(C
D

`(	C

`'ÑB
`'ŠXA

`'E@

`'?

`&Æ>

`&†=

`&E<

`&;

`%Æ:

`%„9

`%@8

`%
7

`$À6

`${5
`$"B4

`#å3

`#¡2

`#^1

`#0

`"Ú/

`"—.

`"W-

`",

`!×+

`!—*

`!^)
`!ø(

` Á'

` &

` >%

`û$

`¹#

`w"
0£®jŸ
¯
O¥ÞG
k	Â	ñÀ�TÔ‰RΦeá Iå°LÛ�7ï¤wC
Ï
‘
W
á£z
_de‰z	in‰x
aba‰,
b‰*



l‰\dd‰w;Œ
A!


Stealer.Browser.pBookmarkspBookmarks/
89Œ
?


Stealer.Browser.pAutoFillpAutoFill
ò	
Ü77Œ

=


Stealer.Browser.pHistorypHistory
º
¨.7Œ
=


Stealer.Browser.pCookiespCookies
„
p2;Œ
A!


Stealer.Browser.pPasswordspPasswords
H

28?Œ

E%


Stealer.Browser.pCreditCardspCreditCards
î>/Œ	
5


Stealer.Browser.typetypeÞÐ1Œ
+
Stealer.BrowserBrowserÁË÷²*Œ


StealerStealer¥®›,
HŒ
M-

S.OpenApp.Brave.FilenameBravex86FilenameBravex86˜y•EŒ
G'


S.OpenApp.Brave.FilenameBraveFilenameBrave
Æ
çŒSŒ
U5


S.OpenApp.Brave.fileNameUserDataCopyfileNameUserDataCopy	ð
0
¯KŒ
M-


S.OpenApp.Brave.fileNameUserDatafileNameUserData		_	@ª.Œ
1



S.OpenApp.Brave.PCPCÃ	ä5=Œ

5


S.OpenApp.Brave.OpenOpenEoyD\a	Open()aŒ
M-


1S.OpenApp.Brave.OpenBraveBrowserOpenBraveBrowser
E
^
t™
KÂ	OpenBraveBrowser()2‹
+

S.OpenApp.BraveBraveÇõýæ,.‹~


S.OpenAppS.OpenApp¸	ÃR®g
0‹}
!

Brave.OpenOpen…¡	Open()T‹|
9-

1Brave.OpenBraveBrowserOpenBraveBrowser”jl’	OpenBraveBrowser()>‹{
9-

Brave.FilenameBravex86FilenameBravex86ðÑ•8‹z
3'

Brave.FilenameBraveFilenameBrave^
?ŒF‹y
A5

Brave.fileNameUserDataCopyfileNameUserDataCopy
§
ˆ¯>‹x
9-

Brave.fileNameUserDatafileNameUserDataúÛª%‹w

BraveBraveÐ×	ÐÃ	äD‹v
A

#Stealer.Edge.Bookmarks.GetGetú
7Ýn	Get(string):‹u
9
Stealer.Edge.BookmarksBookmarksÌ	Øw¶™4‹t
%%

Stealer.EdgeStealer.Edge¤² š¸
H‹s
I

#Stealer.Chromium.Bookmarks.GetGetåÿ7Èn	Get(string)>‹r
A
Stealer.Chromium.BookmarksBookmarks·	Ãw¡™<‹q
--

Stealer.ChromiumStealer.Chromium‹�¢�¾
6‹p
;




Stealer.Bookmark.sTitlesTitle€‡
r"0‹o
7






Stealer.Bookmark.sUrlsUrlZ_
L .‹n
-





Stealer.BookmarkBookmark5GQ(p&‹m






StealerStealer$yŒ
�$‹l
]A

�Plugin.BCrypt.BCRYPT_INIT_AUTH_MODE_INFOBCRYPT_INIT_AUTH_MODE_INFO^Ùï
H	BCRYPT_INIT_AUTH_MODE_INFO(out BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO)�%‹k
C'

�UPlugin.BCrypt.BCryptDecryptBCryptDecrypt4
å
	BCryptDecrypt(SafeKeyHandle, byte*, int, void*, byte*, int, byte*, int, out int, BCryptEncryptFlags)�X‹j
]A

‚Plugin.BCrypt.BCryptGenerateSymmetricKeyBCryptGenerateSymmetricKeyù±
.	BCryptGenerateSymmetricKey(SafeAlgorithmHandle, out SafeKeyHandle, byte[], int, byte[], int, BCryptGenerateSymmetricKeyFlags)�‹i
K/

�!Plugin.BCrypt.BCryptSetPropertyBCryptSetProperty
�
	BCryptSetProperty(SafeHandle, string, string, int, BCryptSetPropertyFlags)�C‹h
_C

�YPlugin.BCrypt.BCryptOpenAlgorithmProviderBCryptOpenAlgorithmProvider

ˆ
	BCryptOpenAlgorithmProvider(out SafeAlgorithmHandle, string, string, BCryptOpenAlgorithmProviderFlags)�&‹g
aE

�Plugin.BCrypt.BCryptCloseAlgorithmProviderBCryptCloseAlgorithmProviderû�å	BCryptCloseAlgorithmProvider(IntPtr, BCryptCloseAlgorithmProviderFlags)]‹f
I-


=Plugin.BCrypt.BCryptDestroyKeyBCryptDestroyKeyy|	BCryptDestroyKey(IntPtr)e‹e
k'



+Plugin.BCrypt.SafeAlgorithmHandle.ReleaseHandleReleaseHandle
¾
Ò>
¦j	ReleaseHandle()�‹d
w3


OPlugin.BCrypt.SafeAlgorithmHandle.SafeAlgorithmHandleSafeAlgorithmHandle

u*	ÿ 	SafeAlgorithmHandle(IntPtr, bool)w‹c
w3



7Plugin.BCrypt.SafeAlgorithmHandle.SafeAlgorithmHandleSafeAlgorithmHandle	¬	ñ	¥S	SafeAlgorithmHandle()N‹b
c



Plugin.BCrypt.SafeAlgorithmHandle.IsInvalidIsInvalid	{		…	f8A‹a
Y


Plugin.BCrypt.SafeAlgorithmHandle.NullNull	>	LO‹`
O3
Plugin.BCrypt.SafeAlgorithmHandleSafeAlgorithmHandleé	
Ü9
$_¤:Ôr
´
4ÆXà|
»
K	Û	{	�/ÁI㈨BÓ{ö€‡
í
7‰_'–3





bozmanbozmanx€ˆnš
�*–2s/

�%
Stealer.InternetExplorer.VaultCli.VaultGetItem_WIN7VaultGetItem_WIN7
	³ô	VaultGetItem_WIN7(IntPtr, ref Guid, IntPtr, IntPtr, IntPtr, int, ref IntPtr)�2–1s/

�5
Stealer.InternetExplorer.VaultCli.VaultGetItem_WIN8VaultGetItem_WIN8ú¥
	VaultGetItem_WIN8(IntPtr, ref Guid, IntPtr, IntPtr, IntPtr, IntPtr, int, ref IntPtr)�–0w3

w
Stealer.InternetExplorer.VaultCli.VaultEnumerateItemsVaultEnumerateItems:�	VaultEnumerateItems(IntPtr, int, ref int, ref IntPtr)�–/y5

i
Stealer.InternetExplorer.VaultCli.VaultEnumerateVaultsVaultEnumerateVaults±yƒ	VaultEnumerateVaults(int, ref int, ref IntPtr)a–.c


7
Stealer.InternetExplorer.VaultCli.VaultFreeVaultFreeQ	Z	VaultFree(ref IntPtr)s–-o+


C
Stealer.InternetExplorer.VaultCli.VaultCloseVaultVaultCloseVaultë³`	VaultCloseVault(ref IntPtr)�
–,m)

a
Stealer.InternetExplorer.VaultCli.VaultOpenVaultVaultOpenVaulte-€	VaultOpenVault(ref Guid, uint, ref IntPtr)U–+



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_ELEMENT.TypeTypeî4l–*�+



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_ELEMENT.SchemaElementIdSchemaElementId×£Dc–)u1


Stealer.InternetExplorer.VaultCli.VAULT_ITEM_ELEMENTVAULT_ITEM_ELEMENT‡�ŠRÕm–(�/



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN7.pPropertyElementspPropertyElements5' m–'�/



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN7.dwPropertiesCountdwPropertiesCountX–&



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN7.dwFlagsdwFlagsóçc–%�	%



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN7.LastModifiedLastModifiedÓÆu–$�7



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN7.pAuthenticatorElementpAuthenticatorElement©›$k–#�-



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN7.pIdentityElementpIdentityElementƒuk–"�-



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN7.pResourceElementpResourceElement]O}–!�#?



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN7.pszCredentialFriendlyNamepszCredentialFriendlyName. ([– �




Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN7.SchemaIdSchemaId]–o+


Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN7VAULT_ITEM_WIN7ëþ
NÝ
om–�/



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN8.pPropertyElementspPropertyElementsÀ² m–�/



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN8.dwPropertiesCountdwPropertiesCount™�X–



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN8.dwFlagsdwFlags~rc–�	%



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN8.LastModifiedLastModified^Qa–�#



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN8.pPackageSidpPackageSid>0u–�7



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN8.pAuthenticatorElementpAuthenticatorElement$k–�-



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN8.pIdentityElementpIdentityElementíßk–�-



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN8.pResourceElementpResourceElementǹ}–�#?



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN8.pszCredentialFriendlyNamepszCredentialFriendlyName˜Š([–�




Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN8.SchemaIdSchemaIdzn]–o+


Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN8VAULT_ITEM_WIN8Uh
oG
�_–�




Stealer.InternetExplorer.VaultCli.VAULT_SCHEMA_ELEMENT_ID.AppEndAppEnd..c–�



Stealer.InternetExplorer.VaultCli.VAULT_SCHEMA_ELEMENT_ID.AppStartAppStartg–�!



Stealer.InternetExplorer.VaultCli.VAULT_SCHEMA_ELEMENT_ID.PackageSidPackageSid
Y–�



Stealer.InternetExplorer.VaultCli.VAULT_SCHEMA_ELEMENT_ID.TagTag
ù
ù
Ê
ìì;
¡ÊÀ€€
ºz
‡0.inŠ

‹l	
_elŠ


‹>idŠ
‹l
tŠ(



scŠ
‹ltyŠ
‹lwiŠ(





a_eŠ
‹l
bl•xckŠ%
	
‹celŠ>
geŠ%
	
‹c
sŠ0


idŠ)

leŠ

‹l
fŠ*

meŠ*


pŠ
‹l
s•vppŠ&


rrŠ

‹j
tŠ&
stŠ



‹Qta•u
eŠC



h•x
oŠ#



‹W
tŠ
‹lulŠ



	
















‹4

tŠ#



‹W
bleŠ
‹b
ooŠ
‹lutŠ
‹lytŠ
‹l
catŠ#



‹W
eeŠ+


s•xheŠ





‹M	kaŠ%
	
‹cliŠ
‹l
oŠA
op•w
uŠ1


reŠ*

teŠ
‹l
o•w
ut•x
darŠ
‹l

t•uefŠ
‹l
nŠ"


	

‹WifŠ/



nŠ
‹l	
r•wlyŠ*

ouŠ
‹lshŠ
‹l	wfŠ0



pŠ1



ealŠ

‹l
nŠ
‹l
rŠ
‹lctŠ
‹\	
u•xdaŠ
‹l	
eŠ*


iŠ
‹l
sŠ
‹lelŠ+

fiŠ
‹lgaŠ 
‹l
r•titŠD
leŠ

















‹6m_Š(







aŠ





‹M
eŠ

















‹=

sŠD
ndŠ'



tŠ
























‹=

uŠC



vŠ@
pa•xr.Š

‹l
aŠC



nŠ

‹l

tŠ1


	


scŠ1



iŠ%
	
‹c
oŠ!



‹W
s•v
tŠ
‹lteŠ

‹l
iŠE



t•u
vaŠA

xe•x	
pŠ

‹l
fieŠ/



nŠ
‹llaŠ0


reŠB

iŠ*


galŠ 
‹lesŠ%
	
‹c
tŠE


‹/
neŠ

‹jra•t	uiŠ
‹l
hemŠ





‹M

nŠ#



‹WorŠ


‹k

ialŠ*

buŠ
‹lcaŠ#



‹W	deŠ"



‹WedŠ/



nŠ*


sŠ1


fiŠ/


gnŠ

‹jllŠ 
‹lmeŠ
‹ln7Š3


8Š(


eŠ
‹l
gŠ
‹l
tŠ




‹d


on•vre•wteŠ(









yŠ"



‹W
kagŠ%
	
‹c
lagŠ0



sŠ



‹QeaŠ
‹l
gŠ 
‹T
mŠ

















‹=	
p•x
rŠ

‹lfrŠ*

leŠ 
‹lorŠ

‹l
sŠA
t_Š

	



‹>
cŠ
3
‹9
eŠC



fŠB

gŠE



oŠ@

sŠC
ynŠ*


m_eŠ=

wŠ(




a_Š
‹l
eŠ>

iŠ)

enŠ

















‹=
rŠC



sŠ
‹lodŠ/


se•v
namŠ*

deŠ
‹l
lŠ*

edŠ


‹g
tŠ

‹lsiŠ

‹jt_Š

‹\

eŠ

‹l
iŠ"











‹P

sŠ2


umŠC


vaŠ@

oce•xdiŠ/


leŠ
‹lns•volŠ
‹lpeŠ1


	




y•wreŠ

 

‹A
tŠ


‹k

y•wseŠA
teŠ
‹lubŠ
‹l
nŠ1



rŠ!



‹W
pacŠ%
	
‹c
t•x
uŠ-

enŠ'


rŠ1


	


idŠ,

loŠ

‹lpaŠ.

eŠ'

rŠ2



sŠ&
reŠ+


oŠ



	


‹<stŠ&

zŠ*

yd•w
r.iŠ

‹lam•t

tŠC



yŠ

‹j
ceŠ!



‹Wec•w
dŠ*


eŠB

lŠ-


rŠ

‹l
sŠ!



‹WibŠ
‹l
eŠ*


nŠ
‹lneŠ

‹loc•x
pŠ1


	



tŠ
‹lraŠ

‹jtiŠ1



yŠ2



schŠ





‹M
oŠ1


es•v

vŠA

x•xhoŠ


‹k

idŠ

	
‹[	
gŠ

‹j
o•vouŠ!



‹Wse•x
i•vtaŠ

‹`
eŠ

‹l
mŠ/



rŠ
‹lzcŠ*


t_eŠ
‹l
iŠ
	



‹N
sŠ
‹l
tŠ
‹lab•x
gŠ$
‹l
mŠ
‹l
rŠ&
clŠ
3
‹9da•ueaŠ


‹`
cŠ
‹l
dŠ
‹l
iŠD

l•t
mŠ(









nŠC



rŠ

‹l
vŠC

xŠ

‹lfrŠB
geŠE


heŠ#



‹WiaŠ*


cŠ#



‹W
dŠ>

eŠ1



mŠ
‹l
tŠ"






‹HmoŠ/


opŠ@

rŠ#



‹?riŠ

‹htd•u
e•v
rŠ
‹lyeŠ,




pŠ
0
‹<
ublŠ
‹lidŠ
‹lltŠ



	
















‹4
meŠC


ndŠ
‹l
sŠ

‹j
tŠ1


rcŠ!



‹Wta•x

eŠ
‹l
hŠ#



‹W
vauŠ



	
















‹4

wflŠ0


inŠ(




prŠ1



xec•x
plŠ

‹l
ydi•welŠ,



naŠ*

peŠ
0
‹<teŠ
‹l
zcrŠ*





		
	
)	
		
		



	
*#1
	


	


	

			
ʱ€€€
‚V”0ate–0
ul–0
eit–0ms–0nu–0ra–0
ite–0
lte–0
mer–0

num–0
rat–0
tei–0
m–0
n–0
ult–0me–0	
vau–0									�VÌ€€€€ƒ0Â0uloŠs
Šp
t•=
ntŠZ

Š[
rlŠX
Špta‹

d•?	
valŠn
Špep†r
Žy
rŠs
Šp
wcoŠo
Špor†r
Žy

xec‹

ydi‹
peŠ_

Ši
t†q




Žq
te†s
ƒu
Šp
6€€
d(0ble–
dou–
oub–
ubl–			
=²·~BÀ–c'
ï
µ
y
=
Ì�=ûµc
¹
y
9	õ	µ	m	)é¡_ã­o7ù·y;ÿÁy;ÿÇMã±w;Ã�E	
Ï
‘
)²ƒy_ƒ
abl‚~ck‚fc
w?


�)`t‘\?%

y‡InvokeUser32.SetWindowPosSetWindowPos‡<¨	SetWindowPos(IntPtr, IntPtr, int, int, int, int, uint)e‘[=#

_‡InvokeUser32.PostMessagePostMessageö’¥	PostMessage(IntPtr, uint, IntPtr, IntPtr);‘Z=#


‡InvokeUser32.SB_LINEDOWNSB_LINEDOWN}l!7‘Y9


‡InvokeUser32.SB_LINEUPSB_LINEUPY	H9‘X;!


‡InvokeUser32.WM_VSCROLLWM_VSCROLL2
!"9‘W;!


‡InvokeUser32.WM_HSCROLLWM_HSCROLL
ú"?‘VA'


‡InvokeUser32.HTBOTTOMRIGHTHTBOTTOMRIGHTâ
Ñ$=‘U?%


‡InvokeUser32.HTBOTTOMLEFTHTBOTTOMLEFTº©#5‘T7


‡InvokeUser32.HTBOTTOMHTBOTTOM–…9‘S;!


‡InvokeUser32.HTTOPRIGHTHTTOPRIGHTp
_!7‘R9


‡InvokeUser32.HTTOPLEFTHTTOPLEFTK	: /‘Q1


‡InvokeUser32.HTTOPHTTOP*3‘P5


‡InvokeUser32.HTRIGHTHTRIGHTö1‘O3


‡InvokeUser32.HTLEFTHTLEFTåÔ7‘N9


‡InvokeUser32.HTCAPTIONHTCAPTIONÁ	°9‘M;!


‡InvokeUser32.MK_RBUTTONMK_RBUTTONœ
‹ 9‘L;!


‡InvokeUser32.MK_LBUTTONMK_LBUTTONw
f 9‘K;!


‡InvokeUser32.WM_KEYDOWNWM_KEYDOWNP
?";‘J=#


‡InvokeUser32.MN_GETHMENUMN_GETHMENU(#E‘IG-


‡InvokeUser32.SW_SHOWMAXIMIZEDSW_SHOWMAXIMIZEDýì&;‘H=#


‡InvokeUser32.HTMAXBUTTONHTMAXBUTTON×Æ!9‘G;!


‡InvokeUser32.SC_RESTORESC_RESTORE®
�$;‘F=#


‡InvokeUser32.SC_MAXIMIZESC_MAXIMIZE„s%;‘E=#


‡InvokeUser32.SC_MINIMIZESC_MINIMIZEZI%?‘DA'


‡InvokeUser32.WM_SYSCOMMANDWM_SYSCOMMAND0
%;‘C=#


‡InvokeUser32.HTMINBUTTONHTMINBUTTON
ù!5‘B7


‡InvokeUser32.WM_CLOSEWM_CLOSEæÕ;‘A=#


‡InvokeUser32.WS_DISABLEDWS_DISABLED¸§)3‘@5


‡InvokeUser32.HTCLOSEHTCLOSE•„7‘?9


‡InvokeUser32.GWL_STYLEGWL_STYLEo	^!?‘>A'


‡InvokeUser32.HTTRANSPARENTHTTRANSPARENTF
5$?‘=A'


‡InvokeUser32.WM_MOUSEWHEELWM_MOUSEWHEEL
%E‘<G-


‡InvokeUser32.WM_RBUTTONDBLCLKWM_RBUTTONDBLCLKïÞ(=‘;?%


‡InvokeUser32.WM_RBUTTONUPWM_RBUTTONUPÆµ$A‘:C)


‡InvokeUser32.WM_RBUTTONDOWNWM_RBUTTONDOWN›Š&E‘9G-


‡InvokeUser32.WM_LBUTTONDBLCLKWM_LBUTTONDBLCLKn](=‘8?%


‡InvokeUser32.WM_LBUTTONUPWM_LBUTTONUPE4$A‘7C)


‡InvokeUser32.WM_LBUTTONDOWNWM_LBUTTONDOWN	&=‘6?%


‡InvokeUser32.WM_MOUSEMOVEWM_MOUSEMOVE
ñ
à$=‘5?%


‡InvokeUser32.WM_NCHITTESTWM_NCHITTEST
È
·$U‘4g-


‡InvokeUser32.WINDOWPLACEMENT.rcNormalPositionrcNormalPosition
�
Œ"O‘3a'


‡InvokeUser32.WINDOWPLACEMENT.ptMaxPositionptMaxPosition
x

kO‘2a'


‡InvokeUser32.WINDOWPLACEMENT.ptMinPositionptMinPosition
W

JC‘1U


‡InvokeUser32.WINDOWPLACEMENT.showCmdshowCmd
<
0?‘0Q


‡InvokeUser32.WINDOWPLACEMENT.flagsflags
$
A‘/S


‡InvokeUser32.WINDOWPLACEMENT.lengthlength

H‘.E+

‡InvokeUser32.WINDOWPLACEMENTWINDOWPLACEMENTéû·Û×4‘-%%
‡InvokeUser32InvokeUser32É×
ݼ
ø7‘,=


…Stealer.InfoType.CREDITSCREDITS‰‰9‘+A




…Stealer.InfoType.AUTOFILLSAUTOFILLS{	{	9‘*A




…Stealer.InfoType.BOOKMARKSBOOKMARKSm	m	7‘)?




…Stealer.InfoType.HISTORYSHISTORYS``5‘(=




…Stealer.InfoType.COOKIESCOOKIESTT9‘'A




…Stealer.InfoType.PASSWORDSPASSWORDSF	F	0‘&-






…Stealer.InfoTypeInfoType6AS(l'‘%





…StealerStealer$uˆ
E‘$
E


#kStealer.Chromium.History.GetGet’ªŠy»	Get(string)7‘#
=



kStealer.Chromium.HistoryHistoryjtÄTä9‘"
--




kStealer.ChromiumStealer.Chromium>Pí4	
6‘!
5



jHideDesktop.HDesktopHDesktop""2"#F‘ 
E-



jHideDesktop.StringCollectionStringCollection!±!ï!Ï1

((vv߀€€ŸPˆ€€€€
¿$)0.chˆs



ˆ#	�A		�A	ed‰G
Šl	fi‰{
Š<	inŠ	
Š2	op†;
�l
_ac�/
“3	
l�:
“3	
uŠ}
†{
bo„a
Œ>
cl�l
<
F
ŽT~‚_
r�2


-

“
	
	-		de�

Y


�d
‚8
�
Œ/&'n

i�]
J
�ƒOen�
7
*
�]
‚8
�
Œ/&'L	*	ge‚0
A
ŽYyho�4
1
“	1	
s‚=
�in�B
‰;
†{‚}	jo�5


1


“	
	1	
	ke‚1
V


ŽC�
lb‚





�


i‚?


ŽCV

pƒ


�Q

s�k
“3ma‚,
�
i‚+
�
o‚

ˆZ
†9;na�j
‚v
Œ>	ƒ
c‚
�
o�0
“3	pr�l
“3rb‚ 





�


e�1
5
G
@
ŽZx	‚%	5	sc�\
�%„
e‚o


�Q

h‚/
�
t‚%
�
w�9
*
“		*	
y‚*
�vs‚>
�wmƒ


�Q

r�8
*
�

�R	‚-	*	x_ƒ
�Ry_ƒ
�R
a_a‹
†kbl‚'
W
ŽC�cc�/
:
’y
:
e‚
2
Žh
2

k�6

*
~
�R‚1*
tI
+
�`



5
@
ŽE	1	dd‚
“3	
i�F
“3
o�1
5
�
�R‚%5
pT
ƒ+
Žes�


‚=


‚7


�


Œ
.
%
&
gem

N
�



7

%

‚,
‹o



o

:
)�
sC
�
C
�X
�B\‚ainU
ƒ+
Žkeƒ


�Pl_�l
“3
d�.
X
�)
��X
eˆs



H
4



>


7
†Dr�>
g‚H
�
iu
‚@
�b1
l�:

“/

p�6
2
2
�ƒ52
r�5
2
“
2
t…r
Ž

u„_
Œ>ma‹
†k
eF


�





l
;
A



X
�
?
„
†Qq

%W=%d


fƒ


�Q
n8…|
Ž


d�o
 


<




'
� 

Œ:
0t	
h�]

gG


‚!
�


Ž		
		

s‚$
�pps
H
�V

ƒ

„


ˆ!
fG
t�
	
�)
}
Y
	
�q

;


‹
�vA<	
	
	

	ra�A
�4











…h
‰O	







‚
d�;
�



3

Ža
h‚
e‚$
�

kŠ
‡&
s�P


�o
…7
‰mo�0

t�G
„1
Ž
�
seE
ƒ+
��		
k‹
†k
s�l
\
†5
�
J

†Y;�‚0
t‚r

�P
yD
ƒ+
Žta�;
‰


ˆ!
�w	
eI
i



)












v


%
G
X







�

‚u
ˆ

}.
	Z3`


)





hU
ƒ+
†P






‡K;



iB
�
9


�6
6
Ž#�&�09

oˆx
‰m
t�R
“3ul�^
,
“
tŠ
x
†.Mve‚o





�B

wfF
ƒ+
Žxb‚.
�
i‚,

�

p‚
�yb�6
2
“
2
b_l‚?


�
ac�6

*
“
*
r�;
“3crŠ}
†{egg




‚9




‚B




�"
‹

*

0

.igƒl
Ž7
tJ
ƒ+
Žje�1

*


p


�Q
‚%*
lc‚

�


e‚'
2
!

ŽC	=Noa‚O



3

Ža
h

o„a
…#
‡
t�
�2




/
�
#
‚<
Š<L

N‚
re�U
“3
oV
‰|
ˆ"si�<
“3ufd


‚:


‚C


�#


‹~
+
1
/

t�R
K















�





ƒ8

c_a�:
“3
m‚+


�

r‚-
�al�>
“3
p�
	
�)
}
Y
	
�q

;


‹
�vA<
		
	
tƒ2
�br�U
“3
s�<
“3ce�/
:
’y:deƒ0
‚P
�C>eih
‚;
‚D
�#	,	2	
m‚
2
Žh2
sT
[




$













�0
=
M





Œ7

���

$

haG


�



�
�


Ž‚A



d�9
*
“	*
e‚
‚T
�*
‹‚m�4
i‚

	
2
‚
Œ>%2
rD
ƒ+
…



�R
†Q
k=

�<
kd‚
‚T
Œ>„!
ea
‚
6
‚D
�%
‹3K
,
2
1

i†
Ž

m�>
“3	
oŠR
ˆ"la�l
\
�ƒ=
ia
�k


C
‚D
�%
Ša
�,21
k‚

�
o�




F


�_
Œ>(~
‚emd‚
�no‚
�od{
‚1
‚[
…
ˆ
"o
l‚
‚@

Œ.
m|


�-
�


‚5


…
†5�Z
.
#
1
nb


I
1
�8


‚;


� 

‹x#),N1
oŠ
‡&
pJ
‚*
�

Ž
r�5
2
“
2
u�P


“2

v†z
‚


G


3






�



ˆw	



re�
0


-










;
#








%
]
B







�*


A
ƒC
†{


:[





fB
@




-




oq


�K





Ž{
(
�


''







-
1?B


T8)
+:;%


'�$&




:*40=
:

]6+ 


&/1H
C�

""òòòŸVˆ€€€€¿0P0cry�


‚=


‚7


�


ƒk
†{�*
.
%
&
teb
	
‚2
	
‚;
	
�"
‹x		#		)		.
iI
+
�
X



5
@
n
Œ>
YE
1
�h

k‹




‰




p‚
‚@
Œ>
s�1

*

�


�Q
‚%*
tˆz
‰mur�.
B

T
�%‚bB
tŠ|
†{
d_b„a
Œ>	at�;
‰


ˆ!
�wbl‚

�chO
�@

�h
X
Œ>�

de‚
�

�w�s

oƒ
�R	e_Š}
†{
c|

‚9

‚1

�
„

ˆ*'
d„K
Œ>
fE
�
,
�f
Ž‚j
l‚s
Ž�F	
nƒ
�
p‹
‰
rL

*
^
�S
K

‚
Œj	"	�
	L
s�.






































































`


	



2



�













�




‹



�
	
s		
8

>"


























tˆz
‰m
v‚O



8
Ža		
	m
wH
ƒ+
Ž
x‚c
�%ge�?
ˆ
�
ˆ"�>?id�F
“3	
n�W
“3
sk
r
&




"
W
(
�3

�	
�"
Š"�=,2.w&


tŠ
‡&le�o
w


'
�$
Œ>�$h
�]
i‚
mep
�T
��4
s…u
Ž
ob�1
5
�
�R
‚%
5

kƒ
�R
mƒ
�R
nI









ƒ%









Ž








u�X
�

�%ƒ

wC
















'
"



	

































,


-














�g
J



Š5

.		

	
	

	
	
	


	
	




	
91
	'	I








"
prT
ƒ+
ŽraF

ƒ$

Ž		
e‚

‚@
Œ>svƒh
Ž7
uc‹




‰


lU
ƒ+
Žwf�R


“2

i‚G



"


Žd
Z


p�E
“3
t�F
“3
x�L


“/
y�M


“/
e_iŠ}
†{ac‚T

�
H
dT


C


 

m
7


N
�i

Œ0	L'%v 
l‚H
†+



H
4



>


7
†=r�>
ms
‚;
�g	,	
n„a
Œ>
s�~
t�2


-










v


%
�







�
‹

�D
f3r
-

ca†
Ž

eh
‚;
‚D
�#,2
hG
ƒ+
Ž
k‚
‚T
�*
„O
†E�]��4
l‚Y
�%
o|
9
2
�S
‚6
�

‚


G


3






�




ˆ/$	



+2
r�

‚>
‚8
�
Œ/&'
tb




(

*



U







C
#

A




\

B

�n
ˆ
�
#),-*
u‚Z
�%d2�U


“2



_„a
Œ>
c�~

dƒ-
�
e�r


|
�P


�/

‹�?�3?f
g�?
ˆ
�
ˆ"�>
?
iŠ
‡&
o‚@
 
%

ŽO+R
rM
ƒ+
Žedw
‚@
�b1
l‚#
�
n�
�J
#





�
�w


A
Š>

d[

�1
@


v‚^



 
Ž~
Mfa�^
,
“
eE
ƒ+
Ž
iU
ƒ+
Ž
o‰{
Š<

t�
�0






�
#
‚<
Š<J%
&‚
gig




‚9




‚B




�"
‹

*

0

.
r‚N
/
Žkgha‚s
�Rivh
‚;
‚D
�#
,
2
laˆy
‰m
e�~

l„


‚4

�f	
	
po
‚





‚D
� 
‹K
3,2,me�3
1
0
2
z
(
�F2?�4�1
f‚I
�
i‚J
�
m…y
Ž
	
oK
�Q
�
C
‚
‚s
ˆ=	^9`y
p‚u
�Rnaƒ
w
‚3

Œf�

c{

‚,

‚8

<
N
Œ&'"
dO


�



9
,

/
U
T


�

�
Š

Q:D&2"�
e�:
“3
gd
�1
�

‚D
�$
Š(�W	,	2	0	
i�}



“#
s�
�m





�
Ž7




�|

tO

M
B



"









 


^
�f
�%
Š)"	
		
	&&,21O	B		
u�3

*


6



-
ŽS

e‚
*

w…z
Ž

x†

Ž

y†
Ž
ob�8
*
�

�R‚-*
wL
ƒ+
ŽpaU
ƒ+
„x
�[
‡K.
oN
ƒ+

‚6
‹Y�u		
r�x



‚;


†@
…wƒ}qu…r
Ž

r.ˆs



H
4

‡�A�A
3�
�
�x
‚:
Šh
ƒ	

aE
r
*
�
q
Ž*
‚*
eE

ƒ 

Ž
i{
?
�r
‚[
�
9+8
%


0


/‚9


D
'


A‚0

PH
f
c�!



6

A

>:
/&


&
.R
"&p3


%+
½¹
ÿøñêãÜÕÎÇÀ¹]VOHA:3,%úóìåÞ×ÐÉ»´­¦Ÿ˜‘Šƒ|ung`YRKD=6/(!þ÷ðéâÛÔÍÆ¿¸±ª£œ•Ž‡€yõîçàÙÒËĽ¶¯¨¡š“Œ…~wpib[TMF?81*#
ù
ò
ë
ä
Ý
Ö
Ï
È
Á
º
³
¬
¥
ž
—
�
‰5.' ýöïèáÚÓÌž·°©¢›”�†xqjc\UNG@92+$

ú
ó
ì
å
Þ
×
Ð
É
Â
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»ÈÈÈÈÈÈÈÈÈÈÈÈÈÈÈÈÈÈÈÈÈÈÈÈÈÈ{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{³³³³³³³³³³³³³³³³³³³³³³³³³³³³³³³³³³³³³³³³³Ä~
ÄwÄpÄiÄbÄ[
ÄTÄMÄFÄ?Ä8Ä1
Ä*Ä#ÄÄ
ÄÄ
ø¡	øšø“
øŒø…ø~øwøpøiøbø[øTøMøFø?ø8	ø1ø*ø#
øøøøEçEàEÙEÒEËEÄ
E½E¶E¯E¨
E¡EšE“EŒE…E~Ew
EpEiEbE[ETEMEFE?	E8
E1E*E#EEEE‹-	‹,
‹+‹*‹)
‹(‹'
‹&
‹%‹$‹#‹"‹!‹ düdõ	dîdçdàdÙdÒ	
Ë	
Ä	
½	
¶	
¯	
¨	
b	
[	
T	
M
	
F
	
?	
8	
1
	
*	
#		
	
	
	
†y	
8	
1	
*
	
#	
	
	

	

‹8‹7‹6+‹5#‹4‹3‹2‹1‹0‹/‹.	

	
	
‹p‹o‹n‹m‹l‹k‹j‹i‹h‹g‹f‹e‹d‹c‹b‹a‹`‹_‹^‹]‹\‹[‹Z‹Y
‹X‹W
‹V‹U‹T‹S‹R‹Q‹P‹O‹N‹M‹L‹K‹J‹I‹H‹G‹F‹E‹D‹C‹B‹A‹@
‹?
‹>‹=‹<‹;‹:‹9ü
ˆ²
�²
z²
s²
l²
e²
^²
W	²
P²
I²
B²
;²
4²
-²
&²
²
²
²

²

²ü	²õ²î²ç²à
²Ù²Ò²Ë	²Ä	²½²¶²¯²¨²¡²š²“²Œ	²…²~²w²p²i
²b²[²T²M²F²?²8²1²*²#²²²²Œ%
Œ$
Œ#Œ"Œ!Œ ŒŒŒŒŒŒŒŒŒŒŒ	ŒŒŒŒŒŒŒŒ
ŒŒŒ

Œ	ŒŒŒŒŒŒŒŒ
Œ‹‹~‹}‹|‹{‹z‹y‹x‹w‹v
‹u‹t
‹s
‹r‹q<
¿ŠF<
±<
ª<
£<
œ<
•
<
Ž<
‡<
€
<
y<
r<
k<
d<
]
<
V<
O<
H<
A<
:<
3
<
,<
%<
<

<
	<
	ƒ	|ung
`YRKDɼ¶°ª¤ž˜’Œ†€ztnh	b\VPJD>8
2
,& 
	Œ\Œ[ŒZŒYŒXŒW
ŒVŒUŒTŒSŒRŒQŒPŒO	ŒN	ŒM	ŒLŒKŒJ#ŒIŒHŒGŒF
ŒE
ŒDŒCŒBŒAŒ@Œ?Œ>Œ=Œ<#Œ;Œ:Œ9Œ8Œ7Œ6Œ5Œ4	Œ3Œ2Œ1Œ0Œ/Œ.Œ-Œ,Œ+Œ*Œ)Œ(Œ'Œ&Ä	Ý…Ý~Ýw	ÝpÝi
ÝbÝ[ÝTÝMÝFÝ?Ý8Ý1Ý*Ý#ÝÝÝÝ„
1*#	

nþ


	ü	õ	î	ç	à	Ù	Ò	Ë	Ä	½	¶	¯	¨	¡	š	“	Œ	…	~	w	p	i	b	[	T	M	F	?	8	1	*	#					ùòëäÝÖÏÈÁº³¬¥ž—�‰‚{tmf_XQJC<5.' ýöïèáÚÓÌž·°©¢›”�†xqjc\UNG@92+$
úóìåÞ×ÐÉ»´­ùòëäÝÖÏÈÁº³¬¥ž—�‰‚{tmf_XQJC<5.' ýöïèáÚÓÌž·°©¢›”�†xqjc\UNG@92+$

ú
ó
ì
å
Þ
×
Ð
É
Â
»
´
­
¦
Ÿ
˜
‘
Š
ƒ
|
u
n
g
`
Y
R
K
D
=
6
/
(
!



þ÷ðéâÛÔÍÆ¿¸±ª£œ•Ž‡€yrkd]VOHA:3,%	ûôíæßØÑÊüµ®§ ™’‹„}vohaZSLE>70)"

ÿ
ø
ñ
ê
ã
Ü
Õ
Î
Ç
À
¹
²
«
¤
�
–
�
ˆ
�
z
s
l
e
^
W
P
I
B
;
4
-
&


¦Ÿ˜‘Šƒ|ung`YRKD=6/(!þ™™™™™™™™™™™™™™™™™™™™™™™™™™™™™™™™™™™™™™™™™™™™™™™™™™™ÎÎÎÎÎÎÎÎÎÎÎÎÎÎÎÎÎÎÎÎÎÎÎÎÎÎÎÎΖ–––––––81*#+#ú
À‡‡‡‡‡
‡‡‡

‡	‡‡
‡‡
‡
‡
‡
‡
ࠠ~
†}†|†{†z†y†x†w†v
yŒŒŒ
Œ‹‹~‹}‹|‹{‹z‹y‹x‹w‹v
‹u‹t
‹s
‹r‹q‹p‹o‹n‹m‹l‹k‹j‹i‹h‹g‹f‹e‹d‹c‹by
	6#6
66
6
†L†K†J
†I†H†G	†F†E†D†C�J
�I
�H
�G�F	�E�D
�C
�B�A�@	�?�>�=
�<�;�:
�9�8	�7�6�5�4�3�2�X�W�V�U�T�S�R�Q�P�O�N
�M�L�K�J�I�H	�G�F�E�D
�C�B�A�@�?�>�=�<�;�:�9�8�7�6�5�4�3�2�1�0�/�.�-�,
�+�*
�)�(�'�&
�%�$�#�"
�!� �	��	�����	�����������
���
�	����
���
�

�ŒŒ~
Œ}Œ|Œ{Œz
ŒyŒx
ŒwŒvŒuŒt
ŒsŒrŒqŒpŒoŒn
ŒmŒlŒk
ŒjŒiŒhŒg
ŒfŒeŒdŒcŒbŒa Œ`Œ_Œ^Œ]�1
�0�/�.�-	�,
�+	�*
�)�(�'	�&�%	�$	�#
�"�!	� ����
��	�	��
����
����	��
	���
�	�
�����	��

�
ŽŽ~Ž}Ž|Ž{
ŽzŽy
ŽxŽw
ŽvŽu	Žt	Žs	Žr	ŽqŽp
ŽoŽnŽmŽlŽk
ŽjŽiŽhŽgŽfŽe
ŽdŽcŽbŽa
Ž`Ž_
Ž^Ž]
Ž\Ž[ŽZŽYŽXŽWŽVŽUŽTŽSŽR
ŽQŽPŽOŽNŽMŽLŽKŽJŽI
ŽHŽGŽFŽE	ŽDŽCŽB	ŽA	Ž@Ž?	Ž>
Ž=
Ž<
Ž;Ž:Ž9Ž8Ž7
Ž6Ž5Ž4Ž3
Ž2
Ž1
Ž0Ž/Ž.Ž-
Ž,Ž+Ž*
Ž)Ž(Ž'Ž&Ž%Ž$Ž#Ž"Ž!Ž Ž	ŽŽŽ
Ž
ŽŽŽŽŽŽŽŽŽŽŽŽŽŽ

Ž	Ž
Ž

Ž		ŽŽŽŽŽŽŽŽ

Ž�
�~�}�|
�{	�z�y�x�w�v�u�t�s�r
�q�p�o�n�m�l�k�j�i�h
�g�f�e�d�c�b�a�`
�_�^
�]�\�[�Z�Y
v̡v)5#SymbolIX_Symbol_DocumentId1439 15 1 1)?SymbolIX_Symbol_UnqualifiedName1439 22

Ü
¡
h
1
	Õ	Š	)ŸV˜€€€€¿0b�	C0ifi‰&
�		
	b‚;gh
)

ƒ

Y




9

	
-


�
ˆ	0
 		-
(
nŠ
r‹le�





























ƒG



�














	













<
ƒy6	
	Y





�



	



�














�	

l…)
‚%




L


G
l�
f
P
P��S
sˆC
‚9�t�Zma„|
ˆa	‚
eˆD
�V‚W�




i†n
�H
„)N
pˆ

4
ƒu4n.†4
Š%
7Š3
8Š(
_‡'


�	

ƒ
�
cˆ&
„)
d






























ƒ



























1






8


















	

�









‡p




	




























	+



e‰&
jƒF

f…

�w



4

	










�H}8#
#4&	
##
ƒ/
	
g
ƒK
�
�q
K


9




�eO
D'bN4�!S
i
ƒK
ƒ

\
g

‚E	o	p	N�;
lˆ$
„)
p….
Šw
s…S
ˆ‚^
tƒD

@



‚
ƒ7



„K

4


v‡<

„on„i

)
�}

}
#
Q

‚,�#!U	0�r)
r…
Šwpb%
ƒ\
‚4
Š



h‡


}

ƒ
�
p†h


†>
ra‰	
„-
e�'





…





�;

�y�@fV



sa„;
‰2�^
c

„(
„p
�W‚YRi5
e„z
Šw
h„8
‹
i
ƒD

‚q
l

„ƒ�g
m„E
ƒt
„)‚s
oŠv
pˆ"
„)
s„9
‹
t

	
ƒ?
‚u

�























K

N
h‚











O		
G�3	
w
	
ƒ;


‚q
ˆ 	�^
z„
‹t_‡L
l
‚Eou
c…
3
‚


e



=
‚Xi
K;�s3
e…
3
ƒ










5
	


�






‚




5	
�


�;3
h‡)








A
,




0
‚\

J,
�8

i
ƒK
�
ƒM
„)	‚#B
l„3


n
‚;
‚|�ƒS
U
sŠ
u<
ƒn
‰J
�F
�7

y…
…
…CumˆQ





�aSM�QFva�e
e
ƒB
_


)


ƒQ
„)‚
%
.


xtˆD
„-ze 
ƒE
X
S



�H
)
q

L
�~Nz
p
dp"*:	

i
ƒK
‹		
jec…

(

‚v
„)ƒ%(ou…


*


ŠK


*



k11ŽI_p‡6
„ 
agŠ%	co…

,
ŠK
,

s‡8
„ el8
ƒm
‹�8
nŽ(
y(











ƒC









‚




-

H






@







)


:
�j	

3
I			

>.	B

	�

�








ie‡c



Q



/

h‚
	
	U

4
n†k
g

ƒU�{4
ma‡[

d


G
h�j]


QobŠRsdŒmto„k













































�
‚W
„0‚

	

	

















I	
l_a‹	
e

…D
‰?�8
i…O
Šw
p…
Šw
s…P
Šw
u…Q
Šw
w…R
Šwabˆ)


„(

g…*



�Y
















l

*
�O
�	 
 



u �2;	�T



pŠU
sƒV
�-
…
ƒCv	�
t…)
Šw
y…

+
�-
‚?
„	0‚0+cl„+
‹daŠf
nŠj
o„.
R
Š>9e_‡-


„

a#
†1
k

‚L�NƒA
b
ŠL„7	
c%
ƒ\
h
�L
‰+	m
d…A
ˆ,‚K
e„
…a
…

f
)



ƒ

Y



N
*


�
„	ƒt0
5*
+

g†`


‚A
~u‚
2
h„3


‹

k‹

m+
‰d	





	†"
n3
Z




























„c














	













�p






ƒF





F


,


	


�





	






‚

p‹
r‡M

	







5









24
:C
5.#O
�[A


‚A
]P+

.<
O

&

{%
:pG(*G"	

�F70�	




l

H.�S
,ý×ÿ&	¤	à½)ã—KÀ—z,ÝL
jm
=
ß
Žå	és»+M’³cš	T
»¸V£wSýS‰G�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Networking\BridgeEndPoint.vb
Ü[NàÜþM‡5�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Networking\Listener.vb
Ü[NàÜþ?‡#sC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Helper.vb
Ü[NàÜþD‡}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Sound.vb
Ü[NàÜþK†z�	C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Performance.vb
Ü[NàÜþC†y{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Maps.vb
Ü[NàÜþC†w{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\INFO.vb
Ü[NàÜþB†uyC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\ACT.vb
Ü[NàÜþI†s�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Keylogger.vb
Ü[NàÜþI†r�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Clipboard.vb
Ü[NàÜþC†q{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Chat.vb
Ü[NàÜþK†p�	C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Chat\Chat\XChat.vb
Ü[NÈ9C‡4{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Main.vb
Ü[NàÜþG†k�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Builder.vb
Ü[NàÜþ
#�D‡3}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Proxy.vb
Ü[NàÜþA‡wC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\FM.vb
Ü[NàÜþC‡{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Port.vb
ÜÒ
‡ò
H†g�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\ToolsBox.vb
Ü[NàÜþE‡C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\VBCode.vb
Ü[NàÜþE‡C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\WebCam.vb
Ü[NàÜþI‡�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\VoiceChat.vb
Ü[NàÜþJ†c�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\TBotNotify.vb
Ü[NàÜþM‡�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\RemoteDesktop.vb
Ü[NàÜþB†ayC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\TXT.vb
Ü[NàÜþQ‡�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\TcpConnectionForm.vb
Ü[NàÜþN‡
�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\StartupManager.vb
Ü[NàÜþN‡�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\ServiceManager.vb
Ü[NàÜþD‡}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Shell.vb
Ü[NàÜþD†\}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\RunPE.vb
Ü[NàÜþH‡�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Registry.vb
Ü[NàÜþD‡}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\HApps.vb
Ü[NàÜþJ†Y�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Ransomware.vb
Ü[NàÜþH†}�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Programs.vb
Ü[NàÜþC†x{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\MBox.vb
Ü[NàÜþC†|{C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\HVNC.vb
Ü[NàÜþG}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Proxy.vb
Ü„IøÖN†~�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\ProcessManager.vb
Ü[NàÜþH‡�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\HBrowser.vb
Ü[NàÜþD‡	}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\ngrok.vb
Ü[NàÜþB‡
yC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\MIC.vb
Ü[NàÜþB‡yC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Fun.vb
Ü[NàÜþD†O}C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Hosts.vb
Ü[NàÜþB†NyC:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\Ftp.vb
Ü[NàÜþM‡
�
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\FilesSearcher.vb
Ü[NàÜþJ‡�C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\Forms\DDosAttack.vb
Ü[NàÜþ
GÊ
òä×ʽ°£–‰|obUH;.!úíàÓƹ¬Ÿ’…xk^QD7*
ö
é
Ü
Ï
Â
µ
¨
š
Œ

r
e
W
I
;
.
!9
,		ø
úíàÓϵ¨›�êÜÆº­ “†yl_RE8+÷éÛÍÀ³¦™ŒreXK>1$

ü
î
á
Ô
Ç
º
­
Ÿ
’
…
x
k
^
Q
D
7
*


	ö	é	Ü	Î	Á	³reXK>1$
ýðãÖÉ»­Ÿ’…xk^QC5(
ÿñã	¥	—	‰	{	n	`	S	E	7	*	Öɽ°£•ˆ{ocVI</"úìßÒGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG
˜×6	
˜hj	
‡0�è
‡
Ájç
‡¹™å
˜

®Eð0t


®E«;s
s
®DÓÊr
f
®CýÌq
Y

®Cw|p
M
®C@Ôo
@
® `"Ín
3
® 2#m
&
®l

®qšk

®§¼jÿ
®n
-iò
®:	(hå
®#gØ

®Î3fÌ

®¨eÀ

®t*d´

®Sc¨

®"'bœ
®ð:a�

®È`ƒ

®¥_w

®‚^k

®^]_

®:\S
®Ü[F
®

ìZ9

®ƒ|Y-
®õ„X 
®Ø*W
®½R\V

¬&šj	w
¬&0d	v
¬%>ì	u
¬2	t
¬Kµ	s
¬(&à	r
¬&ú	q
«{Ž	p
«T¹	o
«4Þ	n
©�%	m

©r%	l

©L 	k
©(ž	j
©º	i
¨
‡á	h
¨
(Y	g
¨¬v	f

¨|*	e
¨X	d
¨89	c
§
r›	W
§Ũ	V
§¥	U
§ŠŒ	T
§8M	S
§
¹z	R
§	û¹	Q
§ß	P
§ŒN	O
§p	N
§¾T	M
§fS	L
§õl	K
§‘_	J
§Š	I
§uˆ	H
§é‡	G
§²2	F
§Œ!	E
§Y.	D
§"2	C
§ï.	B
§¹1	A
§” 	@
§c,	?
§//	>
§	=
§
ý	<
§
è	;
§
Ò	:
§
¸r	9
§
@-î	8
’
ªÅö
’
k5õ
’üeô
’’`ó
’l

ò
’R
'ñ
”®
Xø
”�
y÷

ˆA ë

ˆ(=ê

ˆYé
§.ßL	b
§.ŽL	a
§-ç¢	`
§-P’	_
§,Ýn	^
§*NŠ	]
§)ßj	\
§(d
v	[
§'ŠÕ	Z
§&¾Ç	Y
§$§	X
™_9	7
™ðj	6
™6µ	5
™	4
™	3
™ï	2
™Ë	1
™®	0
™™	/
™u	.
™a	-
™F	,
™,	+
™	*
™
ü	)
™
æ	(
™
Í	'
™
¤$	&
™
n
Ã	%
™
S	$
™
<	#
™
'	"
™
	!
™÷r	 
™ÍÎ	
˜®µ	
˜“	
˜}	
˜g	
˜C	
˜&	
˜	
˜
í	
˜
Ù	
˜
¾	
˜
¤	
˜
�	
˜
t	
˜
^	
˜
E	
˜
$	

˜æ
Ã	
˜ÆJ	
–
sÅ	

–
S		
–
)%	
–

	
–ë	
–Á%	
–•'	
–h
Ó	
•Ú	
•Ì
	

•À	
•²
ÿ
•£þ
•˜ý
•‹	ü
•�û

•uú
•X‰ù
Š
Xð
Šãï
Š½!î
Š›í
Šköì
‡
Weæ
‡X\ä
‡árã
‡[�â
‡
Õ�á
‡
3�à
‡	¹uß
‡	?uÞ
‡éQÝ
‡<¨Ü
‡’¥Û
‡l!Ú
‡HÙ
‡!"Ø
‡ú"×
‡Ñ$Ö
‡©#Õ
‡…Ô
‡_!Ó
‡: Ò
‡Ñ
‡öÐ
‡ÔÏ
‡°Î
‡‹ Í
‡f Ì
‡?"Ë
‡#Ê
‡ì&É
‡Æ!È
‡�$Ç
‡s%Æ
‡I%Å
‡%Ä
‡ù!Ã
‡ÕÂ
‡§)Á
‡„À
‡^!¿
‡5$¾
‡%½
‡Þ(¼
‡µ$»
‡Š&º
‡](¹
‡4$¸
‡	&·
‡
à$¶
‡
·$µ
‡
Œ"´
‡
k³
‡
J²
‡
0±
‡
°
‡
¯
‡Û×®
‡¼
ø­
-™m­&

Ä
Pí[õžE
÷
�
<	ä	¦	k	0÷º{Drö’;Þsõ’LΆDí®h
¼
k
#â™F‘
E-



jHideDesktop.Disposed_BooleanDisposed_Boolean!p!›!Ž>‘
=%



jHideDesktop.Desktop_nameDesktop_name!1!^!OE‘
/




1jHideDesktop.ValuaValua ŠD á!) Ñ[	Valua<T>(ref T, T)N‘
;#


'jHideDesktop.GetDesktopsGetDesktops¿D-X	GetDesktops()[‘
;#



CjHideDesktop.DesktopProcDesktopProcçDBsG.Œ	DesktopProc(string, IntPtr)K‘
1


5jHideDesktop.ExistsExistsÝD7c
$
¾	Exists(string, bool)C‘
1




)jHideDesktop.ExistsExists8D’¨0Y	Exists(string)<‘
/


jHideDesktop.CloseClose]D°º
y¤
�	Close()T‘
?'


+jHideDesktop.CheckDisposedCheckDisposedmDÁ
Ó…´¤	CheckDisposed()?‘
-


%jHideDesktop.OpenOpenPD£·
±—
Ñ	Open(string)E‘
1


)jHideDesktop.CreateCreate×D*@-	Create(string)C‘
?'




jHideDesktop.DesktopHandleDesktopHandleh’
¢0„N5‘
1




jHideDesktop.IsOpenIsOpenUhÌÕ?ÀTC‘
-



/jHideDesktop.LoadLoadmCÆân³�	Load(HideDesktop)`‘
?'


CjHideDesktop.CreateProcessCreateProcessSC¥
Ñ—™Ï	CreateProcess(string, bool){‘
W?


IjHideDesktop.CollectProcessAndChildrenCollectProcessAndChildrenhCÁæh® 	CollectProcessAndChildren(int)h‘
?'


SjHideDesktop.CreateProcessCreateProcessÅC
Z
	
X	CreateProcess(string, string, bool)Z‘
?'


7jHideDesktop.CreateDesktopCreateDesktopNC®
Ëõ”
,	CreateDesktop(string)T‘

;#


3jHideDesktop.OpenDesktopOpenDesktopÛC;Vó!
(	OpenDesktop(string)a‘
;#


UjHideDesktop.OpenDesktopOpenDesktop.„LŠ	OpenDesktop(string, int, bool, long)y‘
?'


}jHideDesktop.CreateDesktopCreateDesktop]³
{®	CreateDesktop(string, IntPtr, IntPtr, int, long, IntPtr)�N‘

?'


‚%jHideDesktop.CreateProcessCreateProcessÉ
 
ç
q	CreateProcess(string, string, IntPtr, IntPtr, bool, int, IntPtr, string, ref HandelNative.STARTUPINFO, ref HandelNative.PROCESS_INFORMATION)4‘	
##

jHideDesktopHideDesktopŽ¸Å!y«!“<‘
E



iVNC.HelperScreen.RECT.BottomBottom

G
<:‘
C



iVNC.HelperScreen.RECT.RightRightà


6‘
?



iVNC.HelperScreen.RECT.TopTop¨ÕÊ8‘
A



iVNC.HelperScreen.RECT.LeftLeftoœ‘8‘
7


iVNC.HelperScreen.RECTRECT3aiêS
;‘
?



iVNC.HelperScreen.Num_ListNum_List^™~$U‘
A


3iVNC.HelperScreen.GetScreenGetScreenQD®	É�™¿	GetScreen(int, int)^‘

E#


=iVNC.HelperScreen.List_screenList_screenrDÏ÷
T¼
�	List_screen(IntPtr, int)W‘
G%



5iVNC.HelperScreen.GetTopWindowGetTopWindowùRS	GetTopWindow(IntPtr)K�
?



-iVNC.HelperScreen.DeleteDCDeleteDCˆÞ¨K	DeleteDC(IntPtr)V�~
A



?iVNC.HelperScreen.ReleaseDCReleaseDC_	&\	ReleaseDC(IntPtr, IntPtr)T�}
E#



3iVNC.HelperScreen.GetWindowDCGetWindowDCŽç®R	GetWindowDC(IntPtr)c�|
E#


OiVNC.HelperScreen.PrintWindowPrintWindowèV€	PrintWindow(IntPtr, IntPtr, uint)��{
S1


�iVNC.HelperScreen.EnumDesktopWindowsEnumDesktopWindows
ù}É	EnumDesktopWindows(IntPtr, HelperScreen.EnumDelegate, IntPtr)`�z
M+



;iVNC.HelperScreen.IsWindowVisibleIsWindowVisible

Ö
ŸT	IsWindowVisible(IntPtr)q�y
I'



eiVNC.HelperScreen.GetWindowRectGetWindowRectí
@


l	GetWindowRect(IntPtr, ref HelperScreen.RECT):�x
-%

iVNC.HelperScreenHelperScreenª×æqÈ�"�w


iVNCVNC¡¦´—Ã
��v
U=


edHandleMouse.CreateLParamFor_WM_KEYUPCreateLParamFor_WM_KEYUPÖ(`ÁÇ	CreateLParamFor_WM_KEYUP(ushort, byte, bool)T�u
=%

5dHandleMouse.KeyboardDownKeyboardDown(A{§	KeyboardDown(string)f�t
9!

adHandleMouse.KeysLParamKeysLParam¯


š
v	KeysLParam(ushort, byte, bool, bool, bool)��s
YA


udHandleMouse.CreateLParamFor_WM_KEYDOWNCreateLParamFor_WM_KEYDOWNÕ:[ÀÕ	CreateLParamFor_WM_KEYDOWN(ushort, byte, bool, bool)
Ô-ïÞ͹¥‘}cQB3"õéÝε£ŽydO:%
ô
ê
Ü
Ó
Ê
Á
¸
¯
�
‹
y
f
S
@
3

÷ç×Ç·§-ž�†tbXND:0&þôæÚν«™Š{jZJ:*
ö
ì
â
Ø
Î
Ä
º
©
—
ƒ
t
h
\
P
A
2
"


	ð	ã	Ö	Ç	´	¤	�	|	k	a	Q	A	1	!	
úãÕǹ¯¡��rbRA/
÷ç×Ç­•{cG-üã̵ ‹xeTC4%
íÙɹ©™‰yqiaY>1$þòÜÐƼ²¨ž”ŠoTJ<2(üòèÞÔÊÀ¶¬¢˜Ž„z_I9KillProcessAndChildren
Â-OpenBraveBrowserü7OpenAlgorithmProvider2	Open
¤	Open
)	Open
&	Open–	OpenY	OpenU	Open8	Open4	Open%	Open"	Openœ	Open™	Open‘	Open�	Open
	Opený
Num_Listƒ	Nullá	NullÛ
NSS_InitG	NSS3D7NORMAL_PRIORITY_CLASS
Ÿ7NORMAL_PRIORITY_CLASSú	None		NoneÕ	NoneÓ	NoneÑ	NoneÌ	NoneÊ	NoneÆnextIdë-NativeMethodsVNC	Native	#NameDesktop
	name¹
Mutex¡MsgLogs	¾MsgLogs	œ7MS_PRIMITIVE_PROVIDER_MS
MS	æMS	´MS	ˆ!MoveWindowå!MoveWindow¢!MoveWindow!MoveHandel	E!MoveHandelÌ!MoveCursorÿ)MouseRightDownp)MouseRightDown¹%MouseRghitUpq%MouseRghitUpºMouseMoverMouseMove¼#MouseLeftUpo#MouseLeftUp¸'MouseLeftDownn'MouseLeftDown·+MouseEventFlags4+MOUSEEVENTF_XUP>/MOUSEEVENTF_XDOWN=/MOUSEEVENTF_WHEEL?3MOUSEEVENTF_RIGHTUP<7MOUSEEVENTF_RIGHTDOWN;-MOUSEEVENTF_MOVE:5MOUSEEVENTF_MIDDLEUP99MOUSEEVENTF_MIDDLEDOWN81MOUSEEVENTF_LEFTUP75MOUSEEVENTF_LEFTDOWN61MOUSEEVENTF_HWHEEL@5MOUSEEVENTF_ABSOLUTE5!MouseEvent	
!MouseEvent		!MouseEvent	-MouseDuoblClieck»#MouseActionù#mouse_eventò%MonitorIndex	#MN_GETHMENUÊ!MK_RBUTTONÍ!MK_LBUTTONÌMiscUtils÷MinTopÁ)Methods.NativeÛ
MetaMaskò	Metaö
Messages	í
Messages	»
Messages	�/MenuItemFromPointã'mciSendStringñ)MaxAuthTagSize1!MAKELPARAM	^!MakeLParam	\!MakeLParamm!MakeLParamµ	m_sc
�#m_lstWindowu)m_lstProcessID
ž)m_lstProcessIDû!m_disposed
�'m_desktopName
Žm_desktop
�lpTitle
~lpTitle#lpReserved2
‰#lpReserved2$!lpReserved
|!lpReservedlpDesktop
}lpDesktoplParam
tLoWord	_loginsìLoginDataï)LocationHandle	Å%LoadLibraryAª#LoadLibraryE	Load
>	Load
:	Load
6	Load
2	Load’	Loadlistpslistps
listhist!
listhist !listcredit'!listcredit&!listcookie!listcookie#ListBrowseršlistbmark#listbmark"%listautofill%%listautofill$#List_screen�length¯LeftUpû
LeftDownú	left
Z	left
P	left
I	Left	:	Left…	Leftb	Left	Left×	left‡	leftj	Leftd%LastModified%%LastModified	Last

lappdata	wl_aô!KeysLParam	[!KeysLParamt!KeysLParam_!KeysLParamX!KeysLParamR!KeysLParam¶/KeyloggerServices©+KeyloggerModule¦KeyDownî'KeyboardEventð'KeyboardEventï'KeyboardEventì%KeyboardDown	X%KeyboardDownu%KeyboardDown½KEY
KEY	ÞKEY	¬KEY	€Keyí
ItemName
Ó	Itemê
IsZoomed	S
IsZoomed¯+IsWindowVisible	L+IsWindowVisiblez+IsWindowVisible“+IsWindowVisible{+IsWindowVisiblep+IsWindowActivedœ+IsWindowActivedw%IsShowHandelÉ3IsScreensaverActive	QIsRunning	üIsOpen
 IsOpen“
IsOdd
æ#IsMoveMouse	Æ#IsMovemouseÕ#IsMouseDown	IsInvalidâIsInvalidÜ%IsHideHandelÈ5Isgreaterorequalto81	ó)isDisconnected
)isDisconnected	ë)isDisconnected	¹)isDisconnected	�#isConnected	â#isConnected	°#isConnected	„

""™
NŸŸV˜€€€€¿060exs

…D
‰?�8
t1




ƒ$
�"
‚&


|


ƒ"
�
�%�
}v	
	
	y_ˆ#


„



b@
ƒm
‹�8
d)

ƒG

‚
ˆz�
f‡2
„ 
h‡:



„

l†g

†<
s*

ƒG
 
‚
ˆ|�
u(

ƒC
 
‚
ˆ|�ziŽM
f_a…>
Šw
h…I
Šw
l…?


Šv

m…A




Šu


r…D


Šv

w…H
Šw
x…F


Šv
deŽ?ea‡@



„

k‡:



„
fdŽ?
l�j
sŠpieŠ/


$
ƒ



g†_
„<‚
l�





























ƒG



)
e














	













<
_




L


G
lc6
P








P


	


	f













�
)
n
ƒD
C
[




„1
jƒF	�#B


r�'





…





�;

�y
‚@


f
V








la…*



�Y
















l

*
�O
�	





u�2
‚

o�jo_‡
�"
‚~%�+
r





ƒ
2





S
"
�


‚










„(




}z#"
:"@



tŠ
v‡
}
ƒ#�
x�'





…





�;

�y‚@fV





reŠB
iŠ*
o„!
†O„AseŠptd9
ƒn
�
‰x	8	
p‰!
„0
u:
ƒn
�
‰x	8	ul„|
Šw
g_h‡-
„ 
iˆ



„

lˆ2
„)
mˆ3

„#alŠ cmˆ
+
ƒ~+eb�%
„
ˆ
cŠR
d�}
n„|
@
�v

„„	@
pŠS
r†g

†<
sŠ%	;‚t
t












ƒ



	





7


E










�V



�
"
1








�S
(
#

J"1


? 


	

	




,



w


x�$
…
ˆfl…J
Šwge†g

†<hi<
ƒn
‹�7
t
)

ƒ

Y




9

	
-


�
ˆ	0	
 
	-
(	icˆ/
„)
dˆ

„
n†4
_
‚
�n&‚‚jneŠor‡)








A
,




ƒ

J,

pr…K
Šw	ra†`






‚3
�s	‚


$


p
e…L
�\
„ „{	
o
ƒD
�%
‰w	#	]	se†k
k
ƒY�{4
iˆ
„)th3
‡p






„



„
uiŠƒbvlŠtw_ƒV




‹


i
ƒK
‹


l

…D












‰9�8






h_m‡'


$
k


‚EJ
$t

r‡.
„ 
tˆ2

„"ai‡'
�



ƒ�


n







ƒ
>



















(
�P
x














„

		
	
	


	‚b0
	

	





p

r…'


Šv

s‡.
„ 	b.$
�(ch�
‹sda‡


|


ƒ"
�

cƒE


‹

e…
3
ŠD3eaŠ]
c!
ƒF
‹	!	
e…H


Šv

i„B
‹
l†N
Š*
mŠ



n‡


}

‚
}
�
r‡


}

ƒ
�id


„0
ŠL=
n…S
Šw
s‡d



Q

N
h‚

U	
G
t<
ƒn
‹	�7	keˆm
…1ma‡-
„ 
h‡@



„




o‡%
„ 
p‡)




A
1



ƒ
J
1
odƒa
�
Š^
o…

,
ŠK
,

rŠ

s‰


„

t†f
‚B


ƒ|3

w	


„

E


‰a
,pr…
Šwre„n



ŠH
o�







„z





�S

P





�aSM%\




,Fs_ˆ#
„)
t….




Šu

taˆ
„)
c„C
‹
d;
ƒn
�
‰u
�5

h…
Šw
oˆo
…1
s…
Šw
t‰
„-;
u…E
Šwwh…I
Šw
nƒD





	
�2
A
ƒ
…1M

	�
A
p„v
Šw
i_f‡/
„ 
al
ƒK
†D„M
n†c
†?
w„f
Šwbl
ƒD

‚q
ˆ 


�g

r„
Š+e
u…)
„s†c_…<
Šw
a‡


}

‚	


}
�‚

e†j






h




ƒW

�y




2







k„C
‚o

„ƒi	
oŠZ
s„g
Šwdd

…@


‰B
�4

e
„0
‚q




A
-



/
�8
�
J-
�7p=
g‰
„0
t„A
‹ec„+
‹
dŠ/

lŠ]
ƒ

nŠ*
s‡c
h


B
h/
0
� l: 
  

‚	-LjnL


‚N#B9
%.#
� 



#
,
-
(_




0



';
H




+œ¡¥
Ú
w
"Áf¢E
æ
‡
$	½	l	Ò�,Ý—Q
Å{º_û™Eü£Lù®c
½
^ÿœ

r…

+


dl…K
en…
3

v„{

x



…C
‰?
hi
…K
‰`� 
{+



`Methods.Native.HandelNative.STARTUPINFO.dwFillAttributedwFillAttributeÕ÷\�
w'



`Methods.Native.HandelNative.STARTUPINFO.dwYCountCharsdwYCountChars“À
µ\�
w'



`Methods.Native.HandelNative.STARTUPINFO.dwXCountCharsdwXCountCharsQ~
sP�
k



`Methods.Native.HandelNative.STARTUPINFO.dwYSizedwYSizeB7P�
k



`Methods.Native.HandelNative.STARTUPINFO.dwXSizedwXSizeÙûH�
c



`Methods.Native.HandelNative.STARTUPINFO.dwYdwY¡ÎÃH�
c



`Methods.Native.HandelNative.STARTUPINFO.dwXdwXi–‹P�
k



`Methods.Native.HandelNative.STARTUPINFO.lpTitlelpTitle*ZLT�
o



`Methods.Native.HandelNative.STARTUPINFO.lpDesktoplpDesktopé	V�
q!



`Methods.Native.HandelNative.STARTUPINFO.lpReservedlpReserved§×
ÉF�
a



`Methods.Native.HandelNative.STARTUPINFO.cbcbp�’Q�
[#


`Methods.Native.HandelNative.STARTUPINFOSTARTUPINFO-[jtM‘_�
�
!



`Methods.Native.HandelNative.PROCESS_INFORMATION.dwThreadIddwThreadIdê
a�
�#



`Methods.Native.HandelNative.PROCESS_INFORMATION.dwProcessIddwProcessIdª×ÌX�
{



`Methods.Native.HandelNative.PROCESS_INFORMATION.hThreadhThreadk›�Z�
}



`Methods.Native.HandelNative.PROCESS_INFORMATION.hProcesshProcess+[Ma�
k3


`Methods.Native.HandelNative.PROCESS_INFORMATIONPROCESS_INFORMATIONà%

'G�
[



`Methods.Native.HandelNative.RECT.BottomBottom¡ÎÃE�
Y



`Methods.Native.HandelNative.RECT.RightRightg”‰A�

U



`Methods.Native.HandelNative.RECT.TopTop/\QC�
W



`Methods.Native.HandelNative.RECT.LeftLeftö#C�
M


`Methods.Native.HandelNative.RECTRECTºèðêÚ
L�

[#



`Methods.Native.HandelNative.HWND_BOTTOMHWND_BOTTOM`˜€4R�	
a)



`Methods.Native.HandelNative.SWP_SHOWWINDOWSWP_SHOWWINDOWF3'N�
]%



`Methods.Native.HandelNative.SWP_NOZORDERSWP_NOZORDERÉüé$J�
Y!



`Methods.Native.HandelNative.SWP_NOSIZESWP_NOSIZE�´
¡"J�
Y!



`Methods.Native.HandelNative.SWP_NOMOVESWP_NOMOVE9l
Y"N�
]%



`Methods.Native.HandelNative.AccessRightsAccessRightsí
&d�
s;



`Methods.Native.HandelNative.DESKTOP_JOURNALPLAYBACKDESKTOP_JOURNALPLAYBACK—É·0`�
o7



`Methods.Native.HandelNative.DESKTOP_JOURNALRECORDDESKTOP_JOURNALRECORDCuc.\�
k3



`Methods.Native.HandelNative.DESKTOP_READOBJECTSDESKTOP_READOBJECTSò$+\�

k3



`Methods.Native.HandelNative.DESKTOP_HOOKCONTROLDESKTOP_HOOKCONTROL¡ÓÁ+Z�
i1



`Methods.Native.HandelNative.DESKTOP_CREATEMENUDESKTOP_CREATEMENUQƒq*`�
o7



`Methods.Native.HandelNative.DESKTOP_SWITCHDESKTOPDESKTOP_SWITCHDESKTOPü./^�~
m5



`Methods.Native.HandelNative.DESKTOP_WRITEOBJECTSDESKTOP_WRITEOBJECTS¨ÚÈ.X�}
g/



`Methods.Native.HandelNative.DESKTOP_ENUMERATEDESKTOP_ENUMERATEXŠx*^�|
m5



`Methods.Native.HandelNative.DESKTOP_CREATEWINDOWDESKTOP_CREATEWINDOW8&,R�{
a)



`Methods.Native.HandelNative.m_lstProcessIDm_lstProcessID§ßÇ9`�z
o7



`Methods.Native.HandelNative.NORMAL_PRIORITY_CLASSNORMAL_PRIORITY_CLASSU†u,@�y
O



`Methods.Native.HandelNative.RightRightA.!��x
]%


w`Methods.Native.HandelNative.SetWindowPosSetWindowPosS¬s•	SetWindowPos(IntPtr, IntPtr, int, int, int, int, int)�x�w
g/


‚I`Methods.Native.HandelNative.URLDownloadToFileURLDownloadToFileƒ5
	URLDownloadToFile([MarshalAs(UnmanagedType.IUnknown)] object, [MarshalAs(UnmanagedType.LPWStr)] string, [MarshalAs(UnmanagedType.LPWStr)] string, int, IntPtr)\�v
[#



-`Methods.Native.HandelNative.SleepThreadSleepThreadŒû¬c	SleepThread(int)

  ª£œ•Ž‡€yrkdŸXÄ€€€€¿40oad‰
H
4

Š&bj�1

*


’h
rŠR
ˆ"caƒ2
�
e�B



&












�0
�
ka
‚;
‚D
�%
‹~	,	2	1	de{
‚1
‚[
…
ˆ
"o
u‹




‰


gsz
‚1
�q"i_�j
kc�4
1
llq


� 
‘

miˆ
�R
ˆ"�<

p|


‚=


‚5


…
ˆ
.
#
1ne�0
Q
’b
hƒ2
�
nb


‚2


‚;


� 

‹x#),
t�4
1
ok�4
1
p_�/




















'
















’z



e�m











�|
�q
A

�>+

h�o

n�[




�'
�
p�w

s�v

rd�5
2
‘
e…r

„
‰jB
i�l

m�B
*


t]
‚;
‚D
�%
‹~,21se�]
"







t\
�&
�
‚D
�%
‹~,21tc�
ƒ
�C



e†
Ž9
t�
ƒ
‚<
Ž
un�P



r�5


1



sƒ3
�	
t�X
veƒ3
ƒG
‚


G


3






�



ˆ6A	



we„


‚4

�f

nq
’"	
rt

‚+
]
‚5
ŒP1		
	
sV
�%
ƒ
„X
ˆ"
�

w�T
�m
�
p_a�/
“3
c�2


-

“

e�7
*

h�4
1

j�5


1



n�0
“3
r�1
5
’~
s�9
*

w�8
*
ar�A
�
�
s’o
tŠP






ˆ


ba�;
daŠT


ˆ!

e�J
eew
‚@
�b1
n�m











�|
�q
A

�>+

ro
‚;
‚D
� 
Œ,2,ha�o
id…}


Ž

nl
[
�`
‚D
�"
Œ
,2.la�6
2

o…x
„
‰p	B
uW
‚;
‚D
�%
„
‡l,21na�[




�'
�or]
‚;
‚D
�%
‹~,21
s�]
&





w„


‚4

�f


pb�;

dŠT


ˆ!

r�w

ss
‚

�g	re|


L


�d


‚5


…
ˆ
.
#
1
i�

b
‚&
‚5
Ž

o�B



&













�0
‡O




ˆBW

sss
‚;
�g,
wŠQ
ˆ"ti�K

o�


‚=


‚7


�


Œ
.
%
&

r†
Ž


u�
	
‚&
Y
	
�q

;


�A	<

		
	ut�W








quau
‚@
‚=
�%1+
r.cˆ
‹0
e‰G
Šl
f‰{
Š<
iŠ	
Š232�
ƒ
‚:
Ž	
act
‚@
�b1
m�A

t�7
*
da�;

s’oeai


>



















�





‚7


�"
%q


ch


,
2
�<
i

�V
_

2
‚


G


3






�



‡z,2	



	
e�
ƒ
�w


A
�?
@


f‰{
Š<
m†
Ž9
n�.
B

	

’O
q…r
Ž

r…x
„
‰pB
sv



L



�`



‚5


…
ˆ	
*
#
1
tƒ1
�
w�
ƒ
‚1
Ž
ib�R

c�:
„?
Ž

g�
b
‚&
‚<
Ž

n{

x
�*
f
�u
@
ŒV"�


o�l

t�8
*


led
‚;
‚D
�$
‹,20ma�B
*

na�5


1



eŠ	
Š2ob�|

c�B



&













�0
�
d‹




‰

	
lq


B
1
‘.

mˆ
�R
ˆ"�<
r�Y
„
Ž


wV
‰|
ˆ"	paŠR
ˆ"re�.
B

’[
o�Y
seƒ@
�
h„


‚4

�f
te…x
Ž

h…|
Ž

u�.

?
�)
��unZ
‚;
‚D
"
�
„
‡n,2"ve�I



yp�


‚=


‚7


�


Œ	
	.	
	%	
	&	
	
s.o†;
�l_d�

‚>
‚8
�
Œ/&'
e�
‚>
‚8
�
Œ/&'
i�B
agm

N
�j

‚,
�#	)

n‚

chŠQ
ˆ"
ob
	
‚2
	
‚;
	
�"
‹x	#	)	.
rq



ƒ
�w


A
ŒP
n
@

de…z
Ž

ik
‚;
‚D
�"
Œ
,2.ed�]
"


mƒ@
�
nj

‚5
‚D

�
Œ
&2"
rV
-
F



&
‚
‚:
„

ˆ"�M	

t[
S
B


�
‚D
�%
‹~,21UgeŠR
ˆ"
lz
‚1
�q"
r…r
Ž
he„


‚4

�f

o�
R
�m
I
�Jy
id�E
&
#

zv
F



�g
�b1kiƒB
�
t�.






































































�!



‚J




�:
8
>
"



moƒ3
�oca
‚;
‚D
�%
‹~,21
p�m
pew
‚@
�b1
l_
‚;
‚D
�%
‹~,21
o�]
&




ri�i

u…{
Ž
s_�B

am

N
Q

�

‚,
�#)	
i�E
&
#

kƒB
�
r�i

ts
‚;
�g,
w�{
�tta�G
4
ƒ}

�u
d�W





e…y
ƒ
H
4

F
ˆ"�	5
p�k

rs
�
�,
�g,
s�t


wi�9
*


o’o
pŠQ
ˆ"ys…y
Ž

tar�G
„1
Ž

t�{
„	
Ž
ca�
ƒ
�C

h�9





u�.
B

’[de�Y









i�W

o�X
eaˆ
H
4

F
ˆ"
!	*
>	:+


	
J	

+	!/3
0
4


bu 


:

'

#

'1"*)
%)&
�
%



%


Aã
Û#éÒ̇veT
Á?*úœä«§	5„+dE'6

÷
í
݇
J
ò
�
}
m
a
T
B
0
#

ûðèàØÐÈº¨šO
e
Yzu(Ì{¦üäK¶¤’¹RkZI8'
ô
ã
Òj
Â
²	a
‘z
Û
{
œ	ó

&Ù	Á	Ú	¦<	u	Š¯	S	E	
³ûëØÅ4¬�…o
Òeð=.î×÷ɳ=»­Ÿ‘ƒugY/!ÏÅ»±§�“‰GƒŽp]J7XX	šüêØ¡·¤xmbWLA6+ ˜™ì
ôç"ÖÍÄ#LD<4QsdUF7(‰öÝÊ·¤•‡yjSß\2‘#òâÔÃe’ÊA/pPropertyElements(7pAuthenticatorElement$-pIdentityElement##RunRecovery
"Quality	—‚sC	Rect
HS
B%RemoveLatest	f#PostMessage	UPlugin	y
Paths	r
SchemaId
Resource
)ProtectedArray#ScanWindows¡
ScanData±!SC_RESTOREÇ#SC_MINIMIZEÅ#SC_MAXIMIZEÆSB_LINEUPÙ#SB_LINEDOWNÚS
�S	ãóS	±¼S	…/SavedWifiNetworksÖSAMESITES²
sameSite¼
sameSite»saltBytes
ì'SafeKeyHandleÞ'SafeKeyHandleÝ'SafeKeyHandleÚ3SafeAlgorithmHandleä3SafeAlgorithmHandleã3SafeAlgorithmHandleàS.OpenAppVS.OpenApp5S.OpenApp#S.OpenAppšS.OpenAppŽS.OpenAppþ	S.OS.OpenApp
'
right
KSâPlugin	¥c
Recovery
 yŽRun
Run	ÚRun	¨SB	 RootNum
ÔRightUpýRightDownü!RightClickÓ
Right	<
Right‡
Rightd
Right
Rightù
RightÙ
right‰
rightl
Rightf	Rect
OK	Rect
Y
right
R'RetrunBrowser 'RestoreMaxTopÂ
SchemaId %ResizeWondow£%ResizeWondow�%ResizeHandelÍ	Ping	º	Port	«Run	|Parser	d'RemoteDesktop
?'ReleaseHandleå'ReleaseHandleßReleaseDC~	RECT	9	RECT	 	RECT„	RECTa	RECT	RECTÖ	RECT†	RECTi	RECTc#PrintWindow
_t
right
\
RecoveryN
RecoveryL
Recovery&
Recovery;
Recovery9
Recovery
+Plugin
!Œ
Recovery
=
Recovery
<
Recovery
9
Recovery
8
Recovery
5
Recovery
4
Recovery
1
Recovery
0
Recovery
/RecordHeaderField
Í1RealGetWindowClassâ3ReadTableFromOffset
àReadTable
éReadTable
â+ReadMasterTable
á	Port	ÝSB	Ï
	Read	¼-rcNormalPosition´rc
s?QueryFullProcessImageNameóQuality	È	Port	yu'ptMinPosition²'ptMaxPosition³!ptLastCopy	FptLast	D	…pszCredenti?pszCredentialFriendlyName!PackageSid
pszAlgIdQ
pszAlgId9#pPackageSidy!ProductKey×
7P!ProductKey
,Resize	É7ProcessExecutablePath
ø3PROCESS_INFORMATION3PROCESS_INFORMATION
u#PrintWindow|#PrintWindow
G#OpenDesktop
±#PrintWindow
U
¡pResourceElemen7pAuthenticatorElement-pIdentityElement-pResourceElement!pPasswordsØpPackageSid.!PowerShell
(!PowerShell
$#PostMessage	N#PostMessageß#PostMessageÛ#PostMessagek#PostMessage[#PostMessageT#PostMessageN#PostMessage«#PostMessage™	Port
	Ping	ì%ParseMessage	Ó]%PornServicesà%PornServices¬-Plugin.S.OpenAppYPlugin³rPlugin�Plugin
	Read	îÖPlugin	×	Ping	ŽW+PK11SDR_DecryptI	Ping
SB	ôë#ProcessKill	ÕglPID	þþPidginÏ+SchemaElementId*/pPropertyElementsSB
ý
pHistory
%pCreditCards

pCookiesPCõPCZPC9PC’PC
pbTagC
pbTag½!pBookmarkspbNonce?pbNonce¹%pbMacContextE%pbMacContext¿pbLabelRpbData!pbAuthDataA!pbAuthData»pAutoFill-pResourceElement"e?pszCredentialFriendlyName!	Read	�P!PathChrome‹	pathº
Paste\
PasteU
PasteOPASSWORDS§PasswordsÇPasswords	o'passwordFieldöResize	˜
Password	j—Pars	PIDs	ÿ'PacketHandler	8¿PackageSid%1OpenWindowsDesktop	û˜
OpenInput1OpenDefaultDesktop
½-OpenInputDesktop
°1OpenFireFoxBrowserX1OpenFireFoxBrowserT+OpenEdgeBrowser7+OpenEdgeBrowser3#OpenDesktop	H#OpenDesktop�#OpenDesktopŒ#OpenDesktopãOpenInput
À-OpenInputDesktop
¿#OpenDesktop
¾/OpenChromeBrowser�/OpenChromeBrowserŒ
	f¦9ç{*ª.Âk$»kØuÁh"
ä
™
7Èf11s‰zs_‹_
_'



+Plugin.11s‰zs_‹_
_'



+Plugin.BCrypt.SafeKeyHandle.ReleaseHandleReleaseHandle‹
Ÿ2s^	ReleaseHandle()l‹^
_'


CPlugin.BCrypt.SafeKeyHandle.SafeKeyHandleSafeKeyHandleÙ
B*Òš	SafeKeyHandle(IntPtr, bool)_‹]
_'



+Plugin.BCrypt.SafeKeyHandle.SafeKeyHandleSafeKeyHandle…
Ä~M	SafeKeyHandle()H‹\
W



Plugin.BCrypt.SafeKeyHandle.IsInvalidIsInvalidT	^?8;‹[
M


Plugin.BCrypt.SafeKeyHandle.NullNullø@C‹Z
C'
Plugin.BCrypt.SafeKeyHandleSafeKeyHandleÔ
ò
äÇV‹Y
m+


Plugin.BCrypt.BCryptEncryptFlags.BCRYPT_PAD_OAEPBCRYPT_PAD_OAEP©©X‹X
o-


Plugin.BCrypt.BCryptEncryptFlags.BCRYPT_PAD_PKCS1BCRYPT_PAD_PKCS1��V‹W
m+


Plugin.BCrypt.BCryptEncryptFlags.BCRYPT_PAD_NONEBCRYPT_PAD_NONEvv`‹V
w5


Plugin.BCrypt.BCryptEncryptFlags.BCRYPT_BLOCK_PADDINGBCRYPT_BLOCK_PADDINGXX@‹U
W


Plugin.BCrypt.BCryptEncryptFlags.NoneNoneJJM‹T
M1


Plugin.BCrypt.BCryptEncryptFlagsBCryptEncryptFlags.D}ªM‹S
q


Plugin.BCrypt.BCryptGenerateSymmetricKeyFlags.NoneNonef‹R
gK



Plugin.BCrypt.BCryptGenerateSymmetricKeyFlagsBCryptGenerateSymmetricKeyFlagsÛþÄMD‹Q
_


Plugin.BCrypt.BCryptSetPropertyFlags.NoneNoneµµT‹P
U9



Plugin.BCrypt.BCryptSetPropertyFlagsBCryptSetPropertyFlags•¯‰5i‹O
�
/


Plugin.BCrypt.BCryptOpenAlgorithmProviderFlags.BCRYPT_MULTI_FLAGBCRYPT_MULTI_FLAGffy‹N
�?


Plugin.BCrypt.BCryptOpenAlgorithmProviderFlags.BCRYPT_HASH_REUSABLE_FLAGBCRYPT_HASH_REUSABLE_FLAG@@ }‹M
�!C


Plugin.BCrypt.BCryptOpenAlgorithmProviderFlags.BCRYPT_ALG_HANDLE_HMAC_FLAGBCRYPT_ALG_HANDLE_HMAC_FLAGN‹L
s


Plugin.BCrypt.BCryptOpenAlgorithmProviderFlags.NoneNone

i‹K
iM


Plugin.BCrypt.BCryptOpenAlgorithmProviderFlagsBCryptOpenAlgorithmProviderFlagsã |Ì·O‹J
u


Plugin.BCrypt.BCryptCloseAlgorithmProviderFlags.NoneNone¹¹j‹I
kO



Plugin.BCrypt.BCryptCloseAlgorithmProviderFlagsBCryptCloseAlgorithmProviderFlagsŽ!³wOv‹H
�O


Plugin.BCrypt.AuthModeFlags.BCRYPT_AUTH_MODE_IN_PROGRESS_FLAGBCRYPT_AUTH_MODE_IN_PROGRESS_FLAGG!G%á
�O


Plugin.BCrypt.AuthModeFlags.BCRYPT_AUTH_MODE_CHAIN_CALLS_FLAGBCRYPT_AUTH_MODE_CHAIN_CALLS_FLAG!%;‹F
M


Plugin.BCrypt.AuthModeFlags.NoneNoneC‹E
C'


Plugin.BCrypt.AuthModeFlagsAuthModeFlags÷
ià‘e‹D
�


Plugin.BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO.CreateCreateÕâó¡
4	Create()Z‹C
�


Plugin.BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO.dwFlagsdwFlags’}X‹B
�



Plugin.BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO.cbDatacbDataocU‹A



Plugin.BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO.cbAADcbAADVKd‹@
�
%


Plugin.BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO.cbMacContextcbMacContext7,d‹?
�
%


Plugin.BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO.pbMacContextpbMacContext!U‹>



Plugin.BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO.cbTagcbTag
÷
ìU‹=



Plugin.BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO.pbTagpbTag
ß
Ë`‹<
�	!


Plugin.BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO.cbAuthDatacbAuthData
¹

®`‹;
�	!


Plugin.BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO.pbAuthDatapbAuthData
œ

ˆZ‹:
�


Plugin.BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO.cbNoncecbNonce
y
nZ‹9
�


Plugin.BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO.pbNoncepbNonce
_
Kf‹8
�'


Plugin.BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO.dwInfoVersiondwInfoVersion
6

*X‹7
�



Plugin.BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO.cbSizecbSize

�&‹6
�Og


Plugin.BCrypt.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO.BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO_VERSIONBCRYPT_AUTHENTICATED_CIPHER_MODE_INFO_VERSION×-ÅE
Û®
ð1
'óÜ	û
c
V�
“VdŸF‚	>®
:ü·RÀÞ	1‚uGW
	#
©à´1Ñ	º	

"E4	£É	ØÈ#O¨�áðï
€$¯ž§á`
ƒ	š
ðm	êüÖþ*r
Œa‰€ûñt`w}U9á¨
p
Ï
D»®cVI</"⛎8uá,
K
úƒHÚ‚EÀ˜?<9ÈÈp®wï͸*
ù
Û
½-˜óh[Õ
j
X¤!ÿ
<ð8p	È	µ
—cñ	H	…	p	VŠUX¤‘‰¬™–�„pcOF=0&ðàÏ¿ª•€kYF8*öæмª˜…s]I7(òÞ̶¤�jYHB;4("œ
Type_Š
Size^	Site
ÇStealer
Æ#SECItemDataBY#SECItemTypeA+Stealer.Firefox>-Stealer.Chromium+
t0ken()sPrevMasterKey-sPrevBrowserPath
szPrompt-Stealer.Chromium%Stealer.Edge-Stealer.Chromium
sNamesExpMonth
sExpYearsNumberStealer+Stealer.Firefoxè
SteamÓStealerÅ-Stealer.ChromiumÂstoreIdÀstoreId¿session¾secure½Stealer³Stealer°!StartDelay¤+Stealer.Firefox‚+Stealer.Firefox~Stealero+Stealer.Firefoxk=STATUS_AUTH_TAG_MISMATCHbStealer6Stealer.Stealer(StealerStealerStealer%Stealer.Edgeô-Stealer.ChromiumñsTitleð	sUrlïStealeríStealerª%Stealer.Edge§-Stealer.Chromium¤sValue£
sName¢Stealer Stealer
ó	sUrl	krStealerñSqlReader
èStealer
ç/SqliteMasterEntry
Òe	Size
ÎSQLite
ÌStealer
Ë/SetWindowPosFlags	%!ShowWindow	#SendMessageô�%SetWindowPos¬ÿSe!ShowWindow	4
SyncLockvÊ'SetWindowLong	KshowCmd±%SetWindowPos	kSW_HIDE‹'SetWindowLongäT1	z!ShowWindow	RSW_SHOWŒSQLite
ÝT1
	T1	ØT2	§ingT1	¦T2	{-SetThreadDesktopå)S#STARTUPINFO
z9SetProcessDpiAwarenessÝ#SendMessage­e7-SW_SHOWMAXIMIZEDÉw
N‘SetC-SetThreadDesktop
³!SetCurrent
£=SetCurrentVirtualDesktop
aStealer¥separator	e	)ST2	Ù!ShowWindowõ}!ShowWindow®#SendMessageÞ
Settings	}epStealerége4SPL
‹SPL	ßéSPL	­¥	Send	Œ"SPL	�!ShowWindow–%SetWindowPos€!SECItemLenC
ScrollUp¿
ScrollUp	
Speed	™pr!ScrollDown¾!ScrollDown	

ScrollUp	”q	Send	êY
Settings	Û%SetWindowPosÜ
L/ScreenshotCapture
W/ScreenshotCapture
M
Settings
Ø
Settings	©Y
5T1|SendMSG	ö	Send	¸
SyncLock›5SystemParametersInfo	G+SystemDirectory8+SystemDirectory5Sid	%SetWindowPos—!SWP_NOSIZEOW!SWP_NOMOVE%SetWindowPosø#SleepThreadö)ScreenToClientæ
/#STARTUPINFO'SetWindowLong˜¿sUssUsername	lStealer	i%StringsCrypt
ê-StringCollection 
Short
þ
Speed	Ê%SWP_NOZORDER)SetHandelValueÇ=Stealer.InternetExplorer
ù=Stealer.InternetExplorer
;+Stealer.Firefox
7%SetWindowPos	5xï3SetForegroundWindowè-Stealer.Chromium¢#SendMessagei)SWP_SHOWWINDOW	%Stealer.Edge
3;SPI_SETSCREENSAVEACTIVE	A.E/SetWindowPosFlags	›	Steal-Stealer.Chromium
/#SendMessage	’1sGeckoBrowserPaths	tStealer	q-Stealer.Chromium	nsPassword	m-Stealer.Chromium	c%SetWindowPos	V?SPI_GETSCREENSAVERRUNNING	C7SPIF_SENDWININICHANGE	B
£:StealerO
µûStealerJ
µîStealerG
µáStealerÿ
µÔStString%SqlStatement
ÕsTitle
É	sUrl
È=SetCurrentVirtualDesktop
¹'ScreenCapture
C	Send
%StateCapture
ScreenY
ScreenX
'StartExplorer	ù!ShowWindow	Ô!ScrollDown	“]StateCapture
×STARTUPINFOž#STARTUPINFOÇÿ
StartExplorerø-:StartDelaye)sPrevMasterKeyhÂsPrevBrowserPathgSPLƒÿÉSPLÞÿÀSPL
š©_SPL_³WSPIF_SENDWININICHANGE
pÂSPI_SETSCREENSAVEACTIVE
o?SPI_GETSCREENSAVERRUNNING
q
Speed
·ÿMSpeedwÿCsPasswordNÿ4sNumberº
sName½�sNameÏ#SleepThreadSid

ShowWindow~^ShowWindow!ShowWindow
ý!ShowWindow
Á…;ShowWindow
€�+ShowWindowR�ShowWindowshowCmd

Short{sGeckoBrowserPathsR4sExpYear»sExpMonth¼Set!TableEntry`SQLite\#Stealer[sTitleY
sUrlX
9è^
ÓÅ·ªœòåØ˾±öéÜÎÀ²¤–ˆzl^QC5(
ôçÚ̾°¢•ˆzl£•‡zl^QD7*õèÛÎÀ²¤–ˆzl^PB4&
ÿ
ò
å
Ø
Ë
¾
±
¤
—
Š
|
n
a
T
F
8
*


òä×É»®¡”‡zl_RE8+
óå×É»­Ÿ‘ƒuh[M?1#
û
î
á
Ô
Ç
º
­
 
“
†
y
k
]
O
B
4
&

	ÿ	ò	å	×	Ê	½	°	£	•	‡	y	k	]	P	C	5	'„vhZŽ€	seWI+<.^!úíàÓŸ«Ÿ	’ýðãÕǹ¬ž�‚uhZM@3&
ýðãÖɼ¯¡“…xk^QD7*999999999999999999999999
Ú_ï
.
®R‚‹	£
®Oë‹	¢
®Ozg	¡
®Of	 
®L­O	Ÿ
®J!€	ž
®GÖ?	�
®G$¦	œ
®Fñ!	›
®FÄ!	š
®F’&	™
®F_'	˜
®F,'	—
®Eð0	–
®E«;	•
®DÓÊ	”
®CýÌ	“
®Cw|	’
®C@Ô	‘
® `"Í	�
® 2#	�
®	Ž
®qš	�
®§¼	Œ
®n
-	‹
®:	(	Š
®#	‰
®Î3	ˆ
®¨	‡
®t*	†
®S	…
®"'	„
®ð:	ƒ
Ú`ø
+“á!
ñVÅá
ñ:Äá
²
Ä:
#
²
³
"
²ê
!
²Ï9
 
ä
�
;

ãr1
9
ãB©
8
ã#Ë
7
â¼¼
6
âˆ.
5
âX$
4
â<E
3
á©‹
2

ás0
1
áCõ
0
á#
/
Úœ·
-
Ú{Ú
,
׃ž
*
×
H
)
ת{
(
×r¶
'
Ö®ž
%
Ö‘Ô
$
®

ì	|
®ƒ|	{
®õ„	z
®Ø*	y
®½R\	x
I
ñÃ
.ñóšÂ
 
ñÕÁ

ñ¯ À

ñ˜¿ù
ñv¾ì
ñ]½ß
ñE¼Òñ%É»Ä
ñ
º·
ñ鹪
ñɸ�
ñ­·�
񋶃
ñkµv
ñN´i
ñ2³\
ñ²O
ñ
÷±B
ñ
á°5ñ
·
i¯'ñ
$+®®îR
�
î
Ýl
îR

`
î
Ýl
_
î
tc
^
î
W
]
î
?
\
î
)
[
î

Z
îöx
Y
îÚ
s
X
î­²
W
íf

V
í
ñl
U
í
ˆc
T
í
k
S
í
S
R
í
=
Q
í
&
P
í

x
O
íî
s
N
íÁ²
M
ì
L
ìÆ
K
ìŒ
J
ìQ
I
ì


H
ì{m
G
ìÙy
F
왆
E
ì
l
D
욉
C
ìj¼
B
æÊ°
A
æÖ
ì
@
æ¯Ò
?
ä
<\
>
ä

,
=
äÚÂ
<
ã©>
:
Ö
Q
&
±e‹

±Î‹

±]g

±ëf

±¶A

±›

±y

±	L¼

±$

±ç3

±Á

±�*

±l

±:t

±

±ï

±Ì

±¨

±„


±VÜ

±W
ì

±
Í|


±
?„
	
±
"*

±
ó

°l.&

°kÌ(

°kq!

°k

°jÉ

°jb-


°iô4

°i�9	ÿ
°i-	þ
°hË(	ý
°h‘*	ü
°bn
	û
°a­^	ú
°\V	ù
°Y;Ï	ø
°V\Ï	÷
°U¦¦	ö
°U#s	õ
°T¡r	ô
°P˜ù	ó
°N
‡	ò
°K5¼	ñ
°H„¡	ð
°HC$	ï
°%3"õ	î
°$ý#:	í
° rt	ì
°11	ë
°	ê
°²
Y	é
°
Ž
	è
°Ç·	ç
°†3	æ
°\	å
°$*	ä
°ÿ	ã
°Ê'	â
°�a	á
°`	à
°9	ß
°	Þ
°ê	Ý
°Â	Ü
°Œø	Û
°”
ì	Ú
°
|	Ù
°|„	Ø
°_j		×
°Hj#	Ö
¯ec
ë	Õ
¯dÏŒ	Ô
¯^6‘	Ó
¯[åG	Ò
¯Y–G	Ñ
¯Y5[	Ð
¯XÓZ	Ï
¯V´	Î
¯ThD	Í
¯T;!	Ì
¯T!	Ë
¯Sä&	Ê
¯Sµ'	É
¯S†'	È
¯SN0	Ç
¯S &	Æ
¯Ró%	Å
¯RÁ*	Ä
¯R‰0	Ã
¯RD=	Â
¯Qÿ;	Á
¯Ob“	À
¯ME	¿
¯L¦—	¾
¯Lsà	½
¯ .H	¼
¯ø.w	»
¯M¤	º
¯>	¹
¯Àt	¸
¯·

	·
¯s<	¶
¯¥Æ	µ
¯l3	´
¯J	³
¯*	²
¯ý	±
¯Ð'	°
¯¦N	¯
¯†	®
¯g	­
¯H	¬
¯(	«
¯	ª
¯âÀ	©
¯ä
ì	¨
¯^|	§
¯Є	¦
¯±(	¥
¯”J	¤
®È	‚
®¥	�
®‚	€
®^	
®:	~
®Ü	}

rròòQ
ÛÝ€€€
¿.×0_de�

‚>
�den�
‚>
�d
actt
‚@
�b	es�


‚=


�c
gem

‚8

�O
)ldƒ/
�
eŠO
ˆ"
iu
‚@
�bmeƒ0
�ndƒ2
�pps
‚

‡&


ˆ!

tƒ1
�rsƒ@
ss’otaŠT


ˆ!

eƒ-
�
hŠP






ˆ



iƒ2
�
begg




‚9




�e

*

roV
‰|
ˆ"ufd


‚:


�f
+

capƒ1
�
tƒ2
�deƒ0
�eih
‚;
�g	,	
sƒB
hrŠQ
ˆ"kea
‚;
�g
,

o—€€€
•4Ï0_al”m	cr”f	en”j	ho”g	in”u	jo”h	
	sw”l	wr”k	
ack”ige”qll”m

p”i
r”hpp”nra”t
d”nta”n	
e”f

i”uyb”i
bac”i
r”nje”ksi”o
c_a”mal”qbs”oes”u
hd”lkm”q	on”g
r”hre”f
ts”k
dat”nes”f





ge”r
eat”fco”h
t”kdg”rme”fne”m
u”f
ob”kra”j
i”msk”f






s”q

for”u
gen”m
hde”loo”g
pr”vwn”p
ic_”mnf”u
on”utc”l
e”kze”o
jec”kou”h



kco”g
me”q
to”f






lay”iba”qlb”qpa”t
l”ire”h
mat”uen”f
r”j

s”q
nal”h
er”mfo”utr”gum”j
obj”kce”u
kc”gnt”gok”gp_”f





rd”h
m”u
ur”h

p_c”f
e”j
h”g
j”h

s”l
w”kar”tba”nla”ipb”nro”u

ram”t
t”jda”nea”f
c”hic”m
t”kma”una”h


oc”u

l”g
s_i”uag”qiz”okt”f





s_”u
a”q
wi”l

tch”l
em”f
o”k
io”uop”f





ro”g
uca”qed”rme”jrn”h

wit”lnd”pri”k

yba”i	
			

								
k€€€
‚`™0_re•	
ado•
bje•
cts•
des•ob•

ead•ct•sk•
jec•
kto•
obj•p_•
p_r•
rea•

skt•
top•												µ€€€
‚^˜0_ho•	
con•
des•
esk•
€€€
x10dis•7
isp•7
ose•7
pos•7
spo•7				@€€
x10dis•6
isp•6
ose•6
pos•6
spo•6				�Ä€€€€ž”/0tec†
Ž

db
	
�

�$
	

‚4
	

�
‹x
	
#
	
"
	
.
&
m�3
1
„
Ž

n{
‚1
‚[
�"�

o�8
*

p�x




r…r
„
‰jH
w�2
.
“
x…o
	
„
‰g	Bha…|
Ž

r�D

:
�1
�	
sŠP




ˆ 

in[
�!
�
‚D
�%
‹~,21
o�B
9


�6
�
t�K

vt
‚@
�b1ke‹




‰

le�K
o8…r
Ž

m�
ƒ
‚<
Ž

p�
(






































































�!



^
�l




D
Œv



8


>





r�


‚=


‚7


�


Œ
.
%
&

s‚
pr�k



‰
‰
t†
Ž
	
u�X
res
‚;
�g,
i�R
0
ƒw
Ž


o�4
1
soa
‚;
‚D
�%
‹~,21
y…y
Ž
te…o
Ž

h‚

i[
‚;
‚D
�%
‹~,21
o�
ƒ
‚<
Ž

r�R
ua�.
X
�)
��
p�G

r�
	
‚&
Y
	
�q

;


�A
<
		
	
s�|
vi�.
X
’[wi�	


ƒ


‚4


�


	
y_�l

ualu
9
X
�)

‚=
�%++nca�>

t‹




‰
	
ed�?
ffd


‚:


‚C


�#


‹~
+
1
/
giW
‚;
‚D
�%
„
‡l,21lt�^
,
md�z

e�7
*

pŠQ
ˆ"	nn…{
Ž

r‹
‰
t�P


oi�j
pi�G
re�
	
‚&
Y
	
�q

;


�A<
		
	
n�5


1



r�.
B

’[se�
y
�7
X
‚:
�

	
td�}


e�R

p�X

ved�I




mƒ3
�
r†z
‚


G


3






�



ˆw		



ir�.
X
�)
��ncƒ0
‚%
+
�C+
wer„


‚4

�f
fi�R

l�S
int





'
"


�9


P




�g
J



ŒO1
'I	



	

	
t�9
*
nd�=
or’opaŠQ
ˆ"

r�E
rat
‚@
�b1
e�	
ƒ
‚5
Ž




i�8
*
sd…z
Ž

eV
‰|
ˆ"
h�T

t�{
th�F
wi�T
�m
�xc�P

s�N
yc�Q

s�O

xco�P
is�t


pl…x
„
‰pBsi�N

y_c�l
ba�6
2
co�Q
pt�


‚=


‚7


�


Œ


.


%


&


si�O

t…y
Ž
9
�0

4
&#0"	

5	
CS		1

$$’,Éj
¤
N	ç	Š	2ÕŸW”ŸTЀ€€€
¿,‘0_al”m	cl•
r”f	-		de•


i•en”j	*	ho”g	1	in”u	jo”h	
	1	
	ls•na•pr•re•	sc•
w”l	*	wr”k	*	
acc•
k”i*dd•3	
i”y
o•ge”q
s•l_•
l”m

p”i2
r”h2me•
nd•"
pp”nra”t
d”n
s•

t”zss•ta”n	
e”f
)





i”u9

t•ul•yb”i2
bac”i*
r”nje”k*
re•si”out•

c_a”mal”qbr•
s”oce•es”u
$

ha•



d”l*km”q	la•
o•2on”g1
r”h2
u•
re”f
-



ti•/

s”k*ur•#
dat”nde•3
ef•
r•
s”f




















ge”rid”y	
n•

s•&
le•"ob•

u•
w•
wf•

p”x
t”y
x”
y•
ead”w 
t”f-

co”h2
t”k*d2•



e•%
g”rfa•me”f1nd•1
e”m
i•0
t•#	
u”f
*
ob”k*pr•+ra”j*
i”m
o•/
r•
v”|
se”|

k”f















	
	




s”q
$
	tc•#
d•)
p•.
t•3
u•/wi•xi•'

fau•il•la•or”u:
gen”m
t•)
ht•

han•"	
r•
de”l*oo”g
1

w•pr”vre”w:st•


th”w
s•wn”p
i_n•bu•c_”mgh•	ll•nd•

f”u
	5
g•5
p•
on”u9

r•so• 
p•&

t•'
tc”l*
e”k*
l”~
y•ze”o

jec”k*ou”h


1



kco”g
1
me”q
to”f

















	
	



l_p•ag•
s•
t•
y”i2ba”qla•
b”qon•4
s•2pa”t
d”}
l”i2
r”|

t”~re”h2st•
m_d•


l•
s•al•
t”u:de•-en”f1
r”j
*

s”q
nal”h
1

m•	de•1
l•"
o•	er”mfo”u
5in•0or•pu•
tc•

r”g1um”j*
obj”k*	ce”u
&	

i_•kc”g1ne•4
t”g1ok”g1p_”f





'








e• 

h•"
n•	
p•*
s•)
rd”h2
i•
m”u
*se•"

t•5un•

r”h
1

t•ws•.
w•
p_c”f-
e”j*
h”g1
j”h
1

r•
s”l*
w”k*ar”tba”nde”}en• 
ha•"in”zla”i2na•
os•&
pb”n
r•*re”|

i•	
o”u
&	
ti”~ut•

	
ram”t
t”j*da”nea”f



c”h2
n•#
s”|
ib•
c”m
g•
n•5
o•

t”k*

ma”u*na”h


1


ob•/
c”u
&

	
l”g1
r•re•#
o•tu”zve”|

s_i”uag”qed•	"
r”|
&
t•#ho•id”x
&

z”o
kt”f






















	

op• po•&
ri•s_”u
a”q

i”x	&
r•
w•.
ta”z4
d•



p•
r•5
s•'
wi”l
*

tar”z
t•.ch”l
	
	

u•#de•

i•

o•ed•%
m”f1
o”k
*

p•+
w•hr”w:in•/
o”u9

t”~le”~op”f















	







s•5pr•
u•ri•
0
o”g1th•3
r•	up”z
s•/y_•
uca”qed”rlt•md•-	

	





	




	`





`		
	
	



a	








5






	
&



	

a


	


a
	
	Ç­-¿QÙs¨8Òc†¬
}ÇRaaaaaaaaa�2ŠEs/

�5
Stealer.InternetExplorer.VaultCli.VaultGetItem_WIN8VaultGetItem_WIN8ú¥
	VaultGetItem_WIN8(IntPtr, ref Guid, IntPtr, IntPtr, IntPtr, IntPtr, int, ref IntPtr)�ŠDw3

w
Stealer.InternetExplorer.VaultCli.VaultEnumerateItemsVaultEnumerateItems:�	VaultEnumerateItems(IntPtr, int, ref int, ref IntPtr)�ŠCy5

i
Stealer.InternetExplorer.VaultCli.VaultEnumerateVaultsVaultEnumerateVaults±yƒ	VaultEnumerateVaults(int, ref int, ref IntPtr)aŠBc


7
Stealer.InternetExplorer.VaultCli.VaultFreeVaultFreeQ	Z	VaultFree(ref IntPtr)sŠAo+


C
Stealer.InternetExplorer.VaultCli.VaultCloseVaultVaultCloseVaultë³`	VaultCloseVault(ref IntPtr)�
Š@m)

a
Stealer.InternetExplorer.VaultCli.VaultOpenVaultVaultOpenVaulte-€	VaultOpenVault(ref Guid, uint, ref IntPtr)UŠ?



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_ELEMENT.TypeTypeî4lŠ>�+



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_ELEMENT.SchemaElementIdSchemaElementId×£DcŠ=u1


Stealer.InternetExplorer.VaultCli.VAULT_ITEM_ELEMENTVAULT_ITEM_ELEMENT‡�ŠRÕmŠ<�/



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN7.pPropertyElementspPropertyElements5' mŠ;�/



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN7.dwPropertiesCountdwPropertiesCountXŠ:



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN7.dwFlagsdwFlagsóçcŠ9�	%



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN7.LastModifiedLastModifiedÓÆuŠ8�7



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN7.pAuthenticatorElementpAuthenticatorElement©›$kŠ7�-



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN7.pIdentityElementpIdentityElementƒukŠ6�-



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN7.pResourceElementpResourceElement]O}Š5�#?



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN7.pszCredentialFriendlyNamepszCredentialFriendlyName. ([Š4�




Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN7.SchemaIdSchemaIdGo+


Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN7VAULT_ITEM_WIN7ëþ
NÝ
omŠ2�/



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN8.pPropertyElementspPropertyElementsÀ² mŠ1�/



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN8.dwPropertiesCountdwPropertiesCount™�XŠ0



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN8.dwFlagsdwFlags~rcŠ/�	%



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN8.LastModifiedLastModified^QaŠ.�#



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN8.pPackageSidpPackageSid>0uŠ-�7



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN8.pAuthenticatorElementpAuthenticatorElement$kŠ,�-



Stealer.InternetExplorer.VaultCli.VAULT_ITEM_WIN8.pIdentityElementpIdentityElementíßkŠ+�-:Št1

÷Stealer.SQLite.GvlGvl'l'�
p'`
‘	Gvl(int)´G)

=÷Stealer.SQLite.ConvertToULongConvertToULong&&F
&
N	ConvertToULong(int, int)Q=

/÷Stealer.SQLite.ReadTableReadTable!æ	"
!Ú,	ReadTable(string)
ÿI+

7÷Stealer.SQLite.ReadMasterTableReadMasterTableúºíç	ReadMasterTable(long)
�Q3

A÷Stealer.SQLite.ReadTableFromOffsetReadTableFromOffsetZ
hM
š	ReadTableFromOffset(ulong)
.A#



'÷Stealer.SQLite.GetRowCountGetRowCount 'C	GetRowCount()Þ;

1÷Stealer.SQLite.GetValueGetValueæ	õØ
&	GetValue(int, int)�7

)÷Stealer.SQLite.SQLiteSQLite3ŸÁ	SQLite(string)DE'


÷Stealer.SQLite._tableEntries_tableEntriesý
è#�*ŠFs/

�%
Stealer.InternetExplorer.VaultCli.VaultGetItem_WIN7VaultGetItem_WIN7
	³ô	VaultGetItem_WIN7(IntPtr, ref Guid, IntPtr, IntPtr, IntPtr, int, ref IntPtr)

%%ŸS˜€€€€¿*PˆF



=
n�
X
L

	K;0edo…A
Šw
p�c	
sŠ
u„+
‰L	�D
w‰&
„0ed�#


…


ˆ	
	
	
	
l…H


„b

†	

nƒF
ƒ
	



‚B


�7

‚93
�	‚
p„
Šw
v…=
























Šk











fi�*


ƒG
�@


ƒ]ƒe	V	
	
	
	�
l‡%
„ 	
o�'





…





�;

�y
‚@


f
V




	
	



rŠp

t
)



ƒ

Y



N
*


�
ˆ	0
5*
+
gaŠ 
r
ƒD
�%
�i


‚A
�s‚
2�#]ha


„&











ƒ

„ƒ*
3




iˆM
„-id‰


„,

g„B
‹
n„;
‹	
tŠDke‡:



ƒa;
l1„3
‹
2„4
‹
a†e
†?X
dŠ]
ƒ

e9


ƒm


J
�b





^

�]
m






WH�:
2�e
1�

i†n
†?
m„
‹
n„e
Šw
p(





ƒC







‚



ˆe

�



v„7
‹	m_Š(





a„2
…m

$„`
dŽB
e…	
,
‚q
�i













'	�jƒ1,
lŽC
m„g
Šw	
nŠc
o+

ƒo

Šw�
pŽK	
sŠD
tŽAna�





























ƒ>

�









































w

A
1
ƒ







,1
$





�











�f

b�
„z
…q
c�
„{
� 
!
k
‚'G&�#g

d4
ƒi
O


‚W
‚Sx„6u
e�%
ƒA
V
h
�

„		‚I�&V
f�,
…

ˆ'
g3
‡p






„

„


s†f
‚B


ƒ|3


t„"
T

B

























�A


}


�i
	


	




"


I


�


��X;	
B	
	
	
	
	
	
	
	
	
	
	
	
	
uƒD



�


,

�
ƒr
„
k
,
K
vŠ@	ob…
3
ŠD3p_ˆ'

„%
aˆO
‚F�c�

r„j
†)„N
t„
Šwr.ˆQ





W4�Jw@& 
3
ƒJ
‹
_‡


}

ƒ
�
a…
3
�0
I

‚y
��>‚U3
d�












„(
=











…G


�

FS





�l
eŠb
f†o
:

ƒ2l�c
g<
ƒn
‹�7
i;
ƒn
�
ˆ!�\z=
kˆh

….	
m†g


†>	

nŠ	

@ƒ(

pˆg

�c
ƒF
r…0
‚|
„)ƒR
s†N


(

}
#
‚~)	�	#H	.ƒ

t‡0

#

1


�t
	
/
],	1

uˆC
„-
v… 



�=






h




ƒW


�y


	
2

	



‚4

y„|
„L
3


�


ƒ
&�%s_ˆ5
„)

cŠ1

d�

e… 



Šj

gˆ
„)
i 
ƒE
X
„H
	


�		8
‚I	
�E"*
k„k













































�
‚W
„0‚
	



















I
oŠ!

s



ƒL



I













�
3
?
�
e
�~/�
S
�
S
0		



&
t„2
ƒ
y

�V�L	�			‚Q
u…L
ˆ2‚E
y‡2

„ta‡i
T
‚J�T	
bŒmz
c„v
ˆ
‚m
e„r
�c
�





‚0�!

‚/

h�
f
ƒD
�%
‰w#]
h
ƒ'

V
-
ˆ �["(
iˆD
‚

‚+t
l
ƒH
Š�
mˆk
…1
p„
	
D


‚@

B
1
‚V
1		K1	�ac	+

r
„J
‚K

ƒ%cƒ6>
s„g
�q
‚H
„0�z
t1




ƒ*
�
�h
„@
ƒbl�



uˆl
…1
vŠn
w






"
ƒ
	


8

H





�N

‚S
„0�	
/
t

y†o
†?up…B
Šw
s�












„e











}
„ *	
	
	
	�	
		
	�	
	
	
		
	
	
	
tŽJvaŠA
bˆg
…1
e„{
B
























Š)B












mˆh
…1wi
ƒ$
 
M
U
/
‰+
 #</
o 
ƒE
‹"x2„u
Šw
8�



„m
	

…Q��


_
�
e‹	
p‰	
�ƒ)O
5

0
F,
LD.D




i


H
>
�u-.'$�@;
H(c08
L7

2�
� 
7"
;*
i
]
K
$&	


  ¬Ø�*
Â
š
j
>
¶{ŸX˜€€€€
¿450.chˆQ





‚4	M	�Q	F			ed‰G	�`	M	‚	fi‰{	‚p			f	V	ha$
�(inŠ			na„d
Šw	op†	
	
	


	
	
…J��	!‚
s.†4
Š%
0keŽ(
11sŽIsdŽI
_ab…>
Šw

c…1
Šw	
eˆ5
„)
l…<
�q
�
ƒ�ƒU	
u‡





$
G







‚D
8

$
P


bl‡6
y

ƒ"�
o…
Šwca‡'
�
ƒ�
h‡'
�



ƒ�
i‡


}

ƒ
�
l…
Šw
r…

+


ŠG		+	
	daˆ/

„$
bŠg
eŽI	
l…K
ŠwelŠ
n…
3
ŠD	3	
v„{
Šw
x



…C
‰?
�7fiŠh
l‡'







�
ƒ


�gcˆ1
„)
e2


�4
ha‡-


„

i
…K
‰8�?
m‡-
„ 
o…

,
ŠK	,	
wƒV




�q

‰

�L
id…O
„P†'
n…
�|



$
C








‚E8"
"$L
""
�f�I	
tŠ(
jo…


*


ŠK	
	*	
	ke(




ƒC





‚


�j


„‚V
�


le…?


‚c



„
ƒ[



i†Y

sƒY
�+
‰q�maˆ/
‚<�m
i…A


‚w
„)ƒV



o…C
�R





$
G






‚E8



$P

ƒY

s…L
Šw
u‡/
„ no…




!
‚
„ „/

!	oa‡9
n


ƒ+w
bˆ0
„)pa‡6






V






‚;m


_



k‡8
„ 
r…
‚%
�
ƒ�ƒ
sˆ


„re…
(
�{
„ 
„4	(	
i…D


Šv


sc†W
ƒH
e1
�5
h	
…	
‰z}
qŠf
t…P
‚S
„)ƒ{
uˆ,
„)
w…
3
ŠD	3	taˆ2

‚3�o


o
�
yŠus…M

Šsve‡
�"
‚~'�+wh…H
Šw

iŠ(

m(




ƒC





‚


ˆz
�



n…R
Šw
r…
3
ŠD	3	xd…F
Šw

u…G
Šw

a_a‹
bˆ/

„$
eŠ
ad‡!
}
ƒ#�ba�\
b†n


†>
,



eˆ)


„(

l„i
‚E
�6
�|




 5‚(�K
s…>
Šwc_‡-
„ 
c…
#
�n


|


ƒ"
�
ƒ?#

k…

+
„m	…V+
o�




„f
	

	
…H��
t
ƒB
_


Š<
%
.
d_‡7




t


ƒ)




}



d„
U
�{
M
Y



ƒ+bT	�	c	<	
eŠ]

i…
Šw
l„
Š+e
mŠq
o…
(
ŠO(
sˆq
,
„0_
t…
…p„~elŠ>
p‡9
n


ƒ+w


sˆ
/
ƒz/	fe‡:







„

g_ˆ2

„"
e



ƒL


_


�9
ƒo	;‚t�<


F

Z





iˆ/
„)
rŽM

s…*



�Y






T

A
�O
�	 ]
�I‚
idŠ)
n‡'
�



Q
‚?�Uke8
ƒm
‹�8l_…
Šw
e‡M

	







5









24
:C
5.#
fŠ*


g‡)









A








ƒ
	


J




i
ƒK
ƒV

„ƒ 
l…<
�k
B
N
i
‚'KNp‚c

m�s
p…

+
ŠL+
r…
+
ŠL+
tˆ
„)
u„7
ƒ

�@
�Z5
	‚#


�`
y†c
†?ma†`
„'‚
e�





























ƒQ
�














	













�
� 





�	8V





�



	



5











�
f(




ƒC





‚


ˆz
�



i†a
†?
pˆD
�V‚W
s†f
‚C
�n‚4na†c
†?
c…S
Šw
d







p
‚(
>



















(
�7

x















ƒY










�2�D0







	
	
	
	p

g�}
k†k
g

ƒU	�{4
t†c
†?
w
�pi†`
‚

„5
|
p†	
	
	


	
	
� 
�


�7
-
XQ�y
!‚ra(









ƒC











‚




ˆy




�















d%

ƒA
,
‚
�


e



=
‚	X
i
K	;			�1�
e„"
D
n
‰^+n
k‡[




P


G
h�j
I



Q
l#
�
rŠ
s…'


Šv

t…
�G
ƒA‚~‚q
y„
Š+
e
se†T
k

„�w
h‡.
„ 

k‹
s…
‚_
&
,		

?



%
 M
K!F

!
;
	
	9

	3
&02


$F
P �%
P 
,
�s9

�-
	G]K9	



.²®KÌŠ_)
Î
—
Q
Ý©hý³W,
ö
¨
6	Î	U	Ã]ú›@Õ»c£@ÓpÂR
î
ˆ
"²m–�'



Stealer.InternetExplorer.VaultCli.VAULT_SCHEMA_ELEMENT_ID.AuthenticatorAuthenticator
â

âc–�



Stealer.InternetExplorer.VaultCli.VAULT_SCHEMA_ELEMENT_ID.IdentityIdentity
Ð
Ðc–
�



Stealer.InternetExplorer.VaultCli.VAULT_SCHEMA_ELEMENT_ID.ResourceResource
¾
¾a–�



Stealer.InternetExplorer.VaultCli.VAULT_SCHEMA_ELEMENT_ID.IllegalIllegal
­
­m–;


Stealer.InternetExplorer.VaultCli.VAULT_SCHEMA_ELEMENT_IDVAULT_SCHEMA_ELEMENT_ID
Œ
§š
€ÁU–




Stealer.InternetExplorer.VaultCli.VAULT_ELEMENT_TYPE.LastLast
q
qS–	}



Stealer.InternetExplorer.VaultCli.VAULT_ELEMENT_TYPE.SidSid
h
h`–�	



Stealer.InternetExplorer.VaultCli.VAULT_ELEMENT_TYPE.AttributeAttribute
Y	
Y	j–�)



Stealer.InternetExplorer.VaultCli.VAULT_ELEMENT_TYPE.ProtectedArrayProtectedArray
E
E`–�	



Stealer.InternetExplorer.VaultCli.VAULT_ELEMENT_TYPE.TimeStampTimeStamp
6	
6	`–�	



Stealer.InternetExplorer.VaultCli.VAULT_ELEMENT_TYPE.ByteArrayByteArray
'	
'	Z–�



Stealer.InternetExplorer.VaultCli.VAULT_ELEMENT_TYPE.StringString

U–



Stealer.InternetExplorer.VaultCli.VAULT_ELEMENT_TYPE.GuidGuid

Z–�



Stealer.InternetExplorer.VaultCli.VAULT_ELEMENT_TYPE.DoubleDouble

d–
�
#



Stealer.InternetExplorer.VaultCli.VAULT_ELEMENT_TYPE.UnsignedIntUnsignedIntôôS–}



Stealer.InternetExplorer.VaultCli.VAULT_ELEMENT_TYPE.IntIntëëh•�'



Stealer.InternetExplorer.VaultCli.VAULT_ELEMENT_TYPE.UnsignedShortUnsignedShortØ
Ø
X•~�




Stealer.InternetExplorer.VaultCli.VAULT_ELEMENT_TYPE.ShortShortÍÍ\•}�



Stealer.InternetExplorer.VaultCli.VAULT_ELEMENT_TYPE.BooleanBooleanÀÀ`•|�	



Stealer.InternetExplorer.VaultCli.VAULT_ELEMENT_TYPE.UndefinedUndefined¬	¬c•{u1


Stealer.InternetExplorer.VaultCli.VAULT_ELEMENT_TYPEVAULT_ELEMENT_TYPE�¦Ô„öB•zO




Stealer.InternetExplorer.VaultCliVaultClit
,`
KJ•y==





Stealer.InternetExplorerStealer.InternetExplorerB\
R8
v
v•xY7

I

Stealer.Telegram.ProcessExecutablePathProcessExecutablePath
‰
¹ø
t=	ProcessExecutablePath(Process)e•wI'

G

Stealer.Telegram.CopyDirectoryCopyDirectory
O
ŽØ
<*	CopyDirectory(string, string)o•vU3

C

Stealer.Telegram.GetTelegramSessionsGetTelegramSessionsû)èF	GetTelegramSessions(string)K•u?


!

Stealer.Telegram.GetTdataGetTdataŸÕé
ó¿	GetTdata()3•t-



Stealer.TelegramTelegram„’*pL(•s






StealerStealerbkTXg
Y•rA'

7üStringsCrypt.DecryptConfigDecryptConfig	&
	DÔ	
	DecryptConfig(string)G•q5

+üStringsCrypt.DecryptDecryptŒ±[w•	Decrypt(byte[])h•pK1

AüStringsCrypt.GenerateRandomDataGenerateRandomData&L
&
a	GenerateRandomData(string)>•o?%

üStringsCrypt.AnonApiTokenAnonApiToken:%ç1•n3


üStringsCrypt.githubgithubõà@6•m7

üStringsCrypt.cryptKeycryptKey
þ
ßü8•l9

üStringsCrypt.saltBytessaltBytes
j	
K�C•kE+


üStringsCrypt.ArchivePasswordArchivePassword


<4•j%%
üStringsCryptStringsCryptø
	â	9X•iC



?ùStealer.SqlReader.ReadTableReadTablev	¢
Ha
‰	ReadTable(string, string)3•h/



ùStealer.SqlReaderSqlReaderP	\
’:
´(•g




ùStealerStealer-6
½#
Ð
?•f5



#÷Stealer.SQLite.IsOddIsOdd---B#-L	IsOdd(long)?•e1

'÷Stealer.SQLite.CvlCvl))%î(÷	Cvl(int, int):•d1

÷Stealer.SQLite.GvlGvl'l'�
p'`
‘	Gvl(int)`•cG)

=÷Stealer.SQLite.ConvertToULongConvertToULong&&F
&
N	ConvertToULong(int, int)O•b=

/÷Stealer.SQLite.ReadTableReadTable!æ	"
!Ú,	ReadTable(string)

((@ê˜
ˆ

e
	á	 	c	$Þ€€ŸP„€€€€¿$0ernŠM
ˆ
r‚q
�R
s‚u
�R
zL
ƒ+
Žsc‚~
�R
iP
ƒ+
Ž		
k‚l


	



�P













Œ&	


	
�
	

sT
�m



7

|
M





Œ7


J
>
t‚

†L
ˆ<�t_ƒ


�Q

a‹

†g
d„^
Œ>
e‚u
†
ˆ�H
 
f‚N
/
Žkg
h‚0
6
�
�bU	
mU
�u
�6
�d:
s‚o

Ž�?
t‘
wC



�n


0


	

j



Œ~_*


	up‚?
�
s‚
�veO
‚







 

o
�r




&wh‚#
�	
iH
‚
�(
�r,xi„[


Œ=
yb‚O



3

Ža
h
d‚1
 
7
ŽC#l
sƒ	
�R
uƒ
�RzoQ
ƒ+
Ž
f_s‚p
�RerE
ƒ+
ŽilU
ƒ+
†
‡&s
n‚G
�laC
�S
�X
�B\or‚N
/




Ž`g


tŠ
‡&raF


ƒ*


Ž


o‚C


�

td‚U
�%
u‚V
�%
gco„b
Œ>edG
ƒ+
Ž
oL
ƒ+
Ž
tT


�[



'







o


^
„


‡&9




vO
ƒ+
Žht‚6






�
�I	&
&inO
ƒ+
ŽnoK



ƒ%



Ž

ro‚N
/
Žk	g	th‚
�wl‚%
�
h_mŠ}
†{anG


‚





g


\
Œ>	|
de„c
Œ>ec„Y
Œ>
e‚#
�idH
ƒ+
X
Œ>�
l‚M
‚
Œ>W
sˆt
�
‡ 
t‚
�
wƒ
�Rme‚0
�odƒh
Ž7
wR
�E

Q
}
�4RreT
ƒ+
Ž
oD
ƒ+
…


ˆ&k=sc‚=
�tb‚:




�


c‚&

�
d‚W
�%
l‚5
�
m‚)

�
r‚6
�
t‚$





�


u‚X
�%
i_g‚q
�R
s‚o
�Rbl‚z
�R
ch‚p
�R
k‚Y
�%
deH
ƒ+
X
Œ>�en‚L
�
sŠ
‡&f_‚p
�Rgh‚6






�
�I&
&
nK



ƒ%



Ž

ld‚M
‚
Œ>W
eU
ƒ+
Ž
lŠ
‡&
sŠ|
†{mi‚+



�
nb‚)
�
dC









�@
.























j









Œ}
	..




 	











e‚?


�

f‚u
‡
}
†)RO
gO
‚"
�	
h
Œ>x
i‚+
E
ˆ

†H3	J
mU
ƒ+
Ž
p‚
�
t‚C


Ž/a
v‚
�onD


�J





 

�


i
Œ>

+
	

sa‚'
W
ŽC�
cŠ|
†{
i‚z
�R
m‚`
�%
o„U
Œ>
p„Y

Œ6
s‚
�R
t„[


„
�
†~
	
w‚z
�R
zƒ

�Rt_Š}
†{
e‚I


"
‡\
‡
	T
iD


�J




�U


�9




Y


lˆz
‰m	
o‚c
�%
sJ
ƒ+
†
‡&g
t‚
�umˆs


ˆ&�AvaI
ƒ+
Ž


eB
‚-

i
Ž#"woƒ
�RzeP
�[



�L
�J


P
jec‚l


�Q

k_l‚2
�
r‚3
�di„Y
Œ>elƒ


�P
t‚f
�R
u‚
�
y‚1









3







Ž@!



h



ieŠ
‡&maŠ
‡&to‚l


	



�P













Œ&	
	
	

�
		
	

l_a‹	
†k
s‚%
�ac‚
2
Žh	2
gC
�S
�X
�B\
s‚H
*

Žnb
tˆy
‰mbu‚





�

cl‚

�do‚\
�%
r„R
Œ>
w‚M
�ea„a
Œ!
c‚Y
�y

Œ.^
d‚'
^

Ž6
�
fU
�`






�
�J
%
#


n‚
�
pU
ƒ+
Ž
r‚f
†



�
H

<
†DG+
s‚~
�R
t�ge‚H
�ic‚Y
�%	
e‚L
�
n‚?


�

s‘
ld‚\
�%
e„R

Œ.

sŠ
‡&
u‚[
�%oa„T
Œ>
n‚x


�Q

s‚&

F


�_
Œ>(~

wƒ

�Rpaƒ










�I




o‚
�	ua„_
Œ>
p‚[
�%
m_c‚(
F
ŽT~
h‚=
�
k‚1
V


ŽC�

l‚




Žd4


m‚

�
n‚
�
r‚ 




�


s‚*
�
v‚>
�aiU
ƒ+
Ž
kƒ


�P
l‚
�
n‚*
�
rŠ
‡&
s‹
†k
x‚




�
	de‚w
�RecG
ƒ+
Ž
dƒ

�R
n‚





Žd
	

s‚A



7

ŽX
o
t‚u
s
‡

†g)(foƒ


�Q



r‚I
�	id‚J
�
n‚


�
sŠ|
†{

R<
I
8




f-$B









-#

�%

>




!

)


 


<S



1
/





)












	wúì’$å÷Ͼ¬“
dR@Ã
�	V
Ó	<
;W
ǰͺ	¦(g r	K
E	Ô
!
2	
z
š
Þ
»	_7
£
¯
õ
…	|
TªÂ×õ
lw'!h+ŒOC2îá«•×Ђ�U€
B;
Kì
öj`
(
¨
Ð
¾
ä
Y	ñ
l
”
‚
8›	¯	‰	ÂÁ	�D	k«pÛ		5	ó	'	.	 ß/VaultGetItem_WIN72/VaultGetItem_WIN81'WindowrActive	–+WindowFromPointÝ-WM_GETTEXTLENGTHh+WindowLongFlagsA-WebcamScreenshotÙ-WebcamScreenshot¥-WriteCreditCards}
WifiGrab:
Telegram
ôXwidthÑBX	ËX		EYy	TTTTÔAY	ÌY	Y	›X	šTop
#wS
uEdge
rtopˆUser32…#WS_DISABLEDÁ
valueÁss)WriteBookmarks{%WriteHistoryz'WriteAutoFilly%WriteCookiesx;UnixTimeStampToDateTimeq%WM_NCHITTESTµ+WINDOWPLACEMENT®Topc2W!WM_KEYDOWNË'WM_SYSCOMMANDÄ
WM_CLOSEÂ'WM_MOUSEWHEEL½-WM_RBUTTONDBLCLK¼%WM_RBUTTONUP»)WM_RBUTTONDOWNº-WM_LBUTTONDBLCLK¹%WM_LBUTTONUP¸)WM_LBUTTONDOWN·%WM_MOUSEMOVE¶!WM_GETTEXTg!WM_SETTEXTftop
JTop	;	typeë–WUser32
E)VirtualDesktop	Âtop	"!WM_HSCROLL×#wShowWindow"+WindowFromPoint±ÌW!WM_VSCROLLØ-WS_EX_TOOLWINDOWŽndTope#WindowCheck¤WalletsÐVPNÎ#TelegramAPIŸ\WDir	WDir7	WDir4
TelegramÒVNCw'WindowrActive	ǯversionîVaultOpeVaultFree.+VaultCloseVault-)VaultOpenVault,	Type+1VAULT_ITEM_ELEMENT)+VAULT_ITEM_WIN7+VAULT_ITEM_WIN8Tag;VAULT_SCHEMA_ELEMENT_IDTimeStamp#UnsignedInt
'UnsignedShort
ÿUndefined
ü1VAULT_ELEMENT_TYPE
û
VaultCli
ú
UplayÔ
Valua�topkaurlòUser32
NUser32
XUser32htop
Q2ƒTopØ2/URLDownloadToFile÷'usernameFieldõ¤
UOI_NAME
�X
Unsign5VaultEnumerateVaults/Top†)WritePasswords|ˆUndefined	Type
Ï¿-uCallbackMessage
qœ
Type_	teft	!È
Type?	type	top
[D
TSECItem@T
ToString
µ#wShowWindow
‡
WM_CLOSE	@!TableEntry
Ð
ë#WindowCheckƒÉs	Top
i3VaultEnumerateItems0%TitleHandel2Ä%TitleHandel1ÃtimesUsedþíTimeStamp#WindowClose¥3timePasswordChangedý%timeLastUsedü#timeCreatedû!TelegramID YheightÒ¢teft
êTag$
5 «VÅf
õ
š
B¸‰ä£F
×
Œ
L
	§	r	A	œZ'×2â¦UÃŽW"é®t8ú¾~<Ðf
 
`
 à =Žu
C#


]GetHandleWindow.m_lstWindowm_lstWindowT9<=Žt
C#


]GetHandleWindow.GW_HWNDPREVGW_HWNDPREV$!=Žs
C#


]GetHandleWindow.GW_HWNDNEXTGW_HWNDNEXTþí!=Žr
C#


]GetHandleWindow.GW_HWNDLASTGW_HWNDLASTØÇ!]Žq
O!

A]GetHandleWindow.User32.FindWindowFindWindowŠ
<‚	FindWindow(string, string)cŽp
Y+


;]GetHandleWindow.User32.IsWindowVisibleIsWindowVisible·	IsWindowVisible(IntPtr)gŽo
U'


K]GetHandleWindow.User32.GetWindowRectGetWindowRect‡
Nc	GetWindowRect(IntPtr, ref RECT)iŽn
a3


7]GetHandleWindow.User32.GetForegroundWindowGetForegroundWindow2ùO	GetForegroundWindow()?Žm
Q


]GetHandleWindow.User32.RECT.bottombottomçÜ=Žl
O


]GetHandleWindow.User32.RECT.rightrightÏÄ9Žk
K


]GetHandleWindow.User32.RECT.toptop¹®;Žj
M


]GetHandleWindow.User32.RECT.leftleft¢—9Ži
C



]GetHandleWindow.User32.RECTRECT‰‘b{x7Žh
9
]GetHandleWindow.User32User32mvL_c8Žg
C


]GetHandleWindow.RECT.BottomBottom
û6Žf
A


]GetHandleWindow.RECT.RightRight
ï
ä2Že
=


]GetHandleWindow.RECT.TopTop
Ú
Ï4Žd
?


]GetHandleWindow.RECT.LeftLeft
Ä
¹2Žc
5



]GetHandleWindow.RECTRECT
­
´]
ŸrLŽb
e


]GetHandleWindow.EnumHwndsPrintData.hDcScreenhDcScreen
Œ	
~@Ža
Y


]GetHandleWindow.EnumHwndsPrintData.hDchDc
t
fNŽ`
Q1



]GetHandleWindow.EnumHwndsPrintDataEnumHwndsPrintData
L
a9
>\9Ž_
++
]GetHandleWindowGetHandleWindow
)
:h
ˆMŽ^
U1


US.OpenApp.FireFox.FilenameFireFoxX86FilenameFireFoxX86¶—JŽ]
O+



US.OpenApp.FireFox.FilenameFireFoxFilenameFireFox
ü<vUŽ\
Y5


US.OpenApp.FireFox.fileNameUserDataCopyfileNameUserDataCopy
0
p
Q¥MŽ[
Q-


US.OpenApp.FireFox.fileNameUserDatafileNameUserDatal¬��0ŽZ
5



US.OpenApp.FireFox.PCPCR15?ŽY
9


US.OpenApp.FireFox.OpenOpenyEÕß+ÂH	Open()iŽX
U1


5US.OpenApp.FireFox.OpenFireFoxBrowserOpenFireFoxBrowser
E
`
xû
M&	OpenFireFoxBrowser()6ŽW
/

US.OpenApp.FireFoxFireFoxÇõÿæ4.ŽV


US.OpenAppS.OpenApp¸	ÃZ®o
2ŽU
%

TFireFox.OpenOpen	>	Gm	+‰	Open()\ŽT
A1

5TFireFox.OpenFireFoxBrowserOpenFireFoxBrowserG^È4ò	OpenFireFoxBrowser()CŽS
A1


TFireFox.FilenameFireFoxX86FilenameFireFoxX86Ì­=ŽR
;+


TFireFox.FilenameFireFoxFilenameFireFoxP1vHŽQ
E5

TFireFox.fileNameUserDataCopyfileNameUserDataCopy
 
�¥@ŽP
=-

TFireFox.fileNameUserDatafileNameUserDataþß�)ŽO

TFireFoxFireFoxÒÛÜÅòZŽN
K

;SRecovery.FileZillaGrab.RecoveryRecoveryÜ

À
g	Recovery(StringBuilder)>ŽM
9'
SRecovery.FileZillaGrabFileZillaGrab¢
µ
{œ
”,ŽL


SRecoveryRecovery‹•
ž�
²
sŽK
O;

KRFileUtils.CreateTempDuplicateFileCreateTempDuplicateFile®Ùý™
=	CreateTempDuplicateFile(string),ŽJ


RFileUtilsFileUtilsŠ	•
D{
^�ŽI
c+

mPStealer.Firefox.FFDecryptor.PK11SDR_DecryptPK11SDR_Decrypt
u
¸

c
n	PK11SDR_Decrypt(ref TSECItem, ref TSECItem, int)UŽH
S

+PStealer.Firefox.FFDecryptor.DecryptDecryptÈæw³ª	Decrypt(string)XŽG
U

-PStealer.Firefox.FFDecryptor.NSS_InitNSS_Init#Al�	NSS_Init(string)nŽF
a)

IPStealer.Firefox.FFDecryptor.GetProcAddressGetProcAddressÚ`ª	GetProcAddress(IntPtr, string)\ŽE
[#


3PStealer.Firefox.FFDecryptor.LoadLibraryLoadLibrary:ÿ[	LoadLibrary(string);ŽD
M


PStealer.Firefox.FFDecryptor.NSS3NSS3ôÞPŽC
k!


PStealer.Firefox.FFDecryptor.TSECItem.SECItemLenSECItemLenÈ
½RŽB
m#


PStealer.Firefox.FFDecryptor.TSECItem.SECItemDataSECItemDataªœRŽA
m#


PStealer.Firefox.FFDecryptor.TSECItem.SECItemTypeSECItemType‰~
0† 4ê™K
ù
™
ÎRçx
«
U	ì	löˆþÓ¨xCá®_×–S·mÏ�QÕ…A
ø
§
W膆					
_•aI+

7÷Stealer.SQLite.ReadMasterTableReadMasterTableúºíç	ReadMasterTable(long)l•`Q3

A÷Stealer.SQLite.ReadTableFromOffsetReadTableFromOffsetZ
hM
š	ReadTableFromOffset(ulong)M•_A#



'÷Stealer.SQLite.GetRowCountGetRowCount 'C	GetRowCount()N•^;

1÷Stealer.SQLite.GetValueGetValueæ	õØ
&	GetValue(int, int)F•]7

)÷Stealer.SQLite.SQLiteSQLite3ŸÁ	SQLite(string)A•\E'


÷Stealer.SQLite._tableEntries_tableEntriesý
è#M•[Q3


÷Stealer.SQLite._masterTableEntries_masterTableEntriesβ0=•ZA#


÷Stealer.SQLite._fieldNames_fieldNames �9•Y=


÷Stealer.SQLite._pageSize_pageSize	h!;•X?!


÷Stealer.SQLite._fileBytes_fileBytesW
?#=•WA#


÷Stealer.SQLite._dbEncoding_dbEncoding-#G•VK-


÷Stealer.SQLite._sqlDataTypeSize_sqlDataTypeSize
Ï
·YQ•Ug%


÷Stealer.SQLite.SqliteMasterEntry.SqlStatementSqlStatement
Ÿ
‘G•T]


÷Stealer.SQLite.SqliteMasterEntry.RootNumRootNum
‚
vI•S_


÷Stealer.SQLite.SqliteMasterEntry.ItemNameItemName
f
XM•RM/


÷Stealer.SQLite.SqliteMasterEntrySqliteMasterEntry
=
R_
.ƒ@•QO


÷Stealer.SQLite.TableEntry.ContentContent

>•P?!



÷Stealer.SQLite.TableEntryTableEntry÷

#è@A•OW


÷Stealer.SQLite.RecordHeaderField.TypeTypeØÌA•NW


÷Stealer.SQLite.RecordHeaderField.SizeSizeÀ´L•MM/



÷Stealer.SQLite.RecordHeaderFieldRecordHeaderField™®4ŠX0•L)




÷Stealer.SQLiteSQLiteN|…,äm,ü(•K




÷StealerStealerAJ-$7-7
4•J3



ôStealer.Site.iCountiCount¡¨
–2•I3





ôStealer.Site.sTitlesTitle|ƒ
n"-•H/






ôStealer.Site.sUrlsUrlV[
H (•G%




ôStealer.SiteSite5Cv(‘(•F




ôStealerStealer$š­
�•Eq?

IñSetCurrentVirtualDesktop.CollectProcessAndChildrenCollectProcessAndChildren*è+

Â*Õ
ú	CollectProcessAndChildren(int)k•DY'

CñSetCurrentVirtualDesktop.CreateProcessCreateProcess'â
(Â'Öú	CreateProcess(string, bool)s•CY'

SñSetCurrentVirtualDesktop.CreateProcessCreateProcess&Ì
'É&¹
	CreateProcess(string, string, bool)}•Bk9

CñSetCurrentVirtualDesktop.KillProcessAndChildrenKillProcessAndChildren$h$Š*$U_	KillProcessAndChildren(int)f•A_-



1ñSetCurrentVirtualDesktop.GetProcessIDListGetProcessIDList$$1$L	GetProcessIDList()S•@Q

#ñSetCurrentVirtualDesktop.OpenInputOpenInput"Ú	"è
"Î
1	OpenInput()h•?_-

1ñSetCurrentVirtualDesktop.OpenInputDesktopOpenInputDesktop!ë"É!Ä
	OpenInputDesktop()_•>U#

3ñSetCurrentVirtualDesktop.OpenDesktopOpenDesktop Ü ÷È µ

	OpenDesktop(string)l•=c1



5ñSetCurrentVirtualDesktop.OpenDefaultDesktopOpenDefaultDesktop r ‰' Ke	OpenDefaultDesktop()h•<[)

9ñSetCurrentVirtualDesktop.GetDesktopNameGetDesktopName=	
E	GetDesktopName(IntPtr)y•;[)


]ñSetCurrentVirtualDesktop.GetDesktopNameGetDesktopNamea”hL°	GetDesktopName(SetCurrentVirtualDesktop)G•:I

ñSetCurrentVirtualDesktop.CloseClosePZíD
	Close()~•9o=



AñSetCurrentVirtualDesktop.SetCurrentVirtualDesktopSetCurrentVirtualDesktop•²YŽ}	SetCurrentVirtualDesktop()]•8Y'



+ñSetCurrentVirtualDesktop.CheckDisposedCheckDisposed*
<Ml	CheckDisposed()O•7M



'ñSetCurrentVirtualDesktop.DisposeDispose¸ÒF¤t	Dispose(bool)K•6M



ñSetCurrentVirtualDesktop.DisposeDisposeS_@GX	Dispose()N•5O



!ñSetCurrentVirtualDesktop.ToStringToString$B	ToString()G•4I

ñSetCurrentVirtualDesktop.CloneCloneß÷	Clone()i•3_-


=ñSetCurrentVirtualDesktop.SetThreadDesktopSetThreadDesktopݦY	SetThreadDesktop(IntPtr)]•2W%


5ñSetCurrentVirtualDesktop.CloseDesktopCloseDesktopƒLU	CloseDesktop(IntPtr)
-s¥p3öq

ƒ
&Ãe¯K
å
|

	Á	^õ}
³)“'ÓW
¼w!ËŽU¯P
×
¤
p
0ï²s<’oA



«Stealer.Chromium.PasswordsPasswordsj	v—T¹:’n--




«Stealer.ChromiumStealer.Chromium>PÂ4Þ
>’mA



©Stealer.Password.sPasswordsPassword«	µ
�%=’lA




©Stealer.Password.sUsernamesUsername€	Š
r%1’k7






©Stealer.Password.sUrlsUrlZ_
L 0’j-




©Stealer.PasswordPassword5G(ž(’i




©StealerStealer$§º
K’hC

-¨Stealer.Chromium.Parser.GetGet
œ
»­
‡á	Get(string, int)\’gS#



3¨Stealer.Chromium.Parser.DetectTitleDetectTitle
;
W*
(Y	DetectTitle(string)_’fU%



5¨Stealer.Chromium.Parser.RemoveLatestRemoveLatestÁÞD¬v	RemoveLatest(string)A’eO



¨Stealer.Chromium.Parser.separatorseparator‘	|*6’d;



¨Stealer.Chromium.ParserParsernw
õX:’c--




¨Stealer.ChromiumStealer.ChromiumBT89
S’bA%



1§PacketHandler.GET_Y_LPARAMGET_Y_LPARAM.ñ/	".ßL	GET_Y_LPARAM(long)S’aA%



1§PacketHandler.GET_X_LPARAMGET_X_LPARAM. .¸".ŽL	GET_X_LPARAM(long)B’`5


%§PacketHandler.HiWordHiWord-ú.y-ç¢	HiWord(long)B’_5


%§PacketHandler.LoWordLoWord-c-yi-P’	LoWord(long)S’^=!



9§PacketHandler.MAKELPARAMMAKELPARAM,ð
-7,Ýn	MAKELPARAM(long, long)y’]S7

U§PacketHandler.HandleDoKeyboardEventHandleDoKeyboardEvent*a*�H*NŠ	HandleDoKeyboardEvent(KeyboardEvent)Q’\=!



5§PacketHandler.MakeLParamMakeLParam)ñ
*3)ßj	MakeLParam(int, int)i’[=!

a§PacketHandler.KeysLParamKeysLParam(y
(Ú
(d
v	KeysLParam(ushort, byte, bool, bool, bool)�’Z]A


u§PacketHandler.CreateLParamFor_WM_KEYDOWNCreateLParamFor_WM_KEYDOWN'Ÿ(['ŠÕ	CreateLParamFor_WM_KEYDOWN(ushort, byte, bool, bool)�’YY=


e§PacketHandler.CreateLParamFor_WM_KEYUPCreateLParamFor_WM_KEYUP&Ó'%`&¾Ç	CreateLParamFor_WM_KEYUP(ushort, byte, bool)W’XA%

5§PacketHandler.KeyboardDownKeyboardDown$%$>{$§	KeyboardDown(string)m’WM1

I§PacketHandler.HandleDoMouseEventHandleDoMouseEvent
…
®_
r›	HandleDoMouseEvent(MouseEvent)u’VA%

y§PacketHandler.SetWindowPosSetWindowPos
Ũ	SetWindowPos(IntPtr, IntPtr, int, int, int, int, uint)f’U?#

_§PacketHandler.PostMessagePostMessage¥	PostMessage(IntPtr, uint, IntPtr, IntPtr)`’TC'

K§PacketHandler.GetWindowRectGetWindowRectê
ŠŒ	GetWindowRect(IntPtr, out RECT)F’S9


-§PacketHandler.IsZoomedIsZoomedo8M	IsZoomed(IntPtr)o’R=!


w§PacketHandler.ShowWindowShowWindow
ï

¹z	ShowWindow(IntPtr, [MarshalAs(UnmanagedType.I4)] int)f’QO3

7§PacketHandler.IsScreensaverActiveIsScreensaverActive

&Ž	û¹	IsScreensaverActive()c’PM1

5§PacketHandler.DisableScreensaverDisableScreensaverò	
íß	DisableScreensaver()a’OO3


7§PacketHandler.GetForegroundWindowGetForegroundWindowÄŒN	GetForegroundWindow()^’N?#


Q§PacketHandler.PostMessagePostMessageLp	PostMessage(IntPtr, int, int, int)R’MA%


5§PacketHandler.CloseDesktopCloseDesktopô¾T	CloseDesktop(IntPtr)[’LG+


;§PacketHandler.IsWindowVisibleIsWindowVisibleœfS	IsWindowVisible(IntPtr)`’KC'


M§PacketHandler.SetWindowLongSetWindowLong*
õl	SetWindowLong(IntPtr, int, uint)Z’JC'


A§PacketHandler.GetWindowLongGetWindowLongÉ
‘_	GetWindowLong(IntPtr, int)�’IM1

�
§PacketHandler.EnumDesktopWindowsEnumDesktopWindows8Š	EnumDesktopWindows(IntPtr, EnumDesktopWindowsProc, IntPtr)a’H?#

U§PacketHandler.OpenDesktopOpenDesktop­uˆ	OpenDesktop(string, int, bool, uint)�
’GQ5

q§PacketHandler.SystemParametersInfoSystemParametersInfoé‡	SystemParametersInfo(uint, uint, ref IntPtr, uint):’F=!


§PacketHandler.ptLastCopyptLastCopyÇ
²2:’E=!


§PacketHandler.MoveHandelMoveHandel¢
Œ!2’D5


§PacketHandler.ptLastptLastnY.X’C[?


§PacketHandler.SPI_GETSCREENSAVERRUNNINGSPI_GETSCREENSAVERRUNNING4"2
þÞm;-ñä×ʽ°£–‰|kóæÙÌ¿²¤—Š}pbUH;.!úíàÓƹ¬Ÿ’…xk^QD7*
ö
é
Ü
Ï
Â
µ
¨
›
Ž
�
t
g
Z
L
>
0
"

ùìÞÐÃ¶¨›�€seXK>1$úíßÑö¨šŒ~ûïâÕÈ»®¡”‡yl_RE8+÷éÛÎÀ²¤–ˆzmqdW]PB4'ýïâÕǹ«�õèÛÎÁ´§š�€sfYL?2$
ýðãÖɼ®¡”‡zm`SF9,÷êÝÐö©›Ž�sfYK=/!J=0#	��seWI#
Ðw
÷-Lv
÷(÷u
÷'`
‘t
÷&
Ns
÷!Ú,r
÷íçq
e†
r†
»Ú{Ú‘
Ú`ø�	L'ùa
‰y	Lù:
´x	L
ù#
Ðw
÷-L
æ
÷(÷
å
÷'`
‘
ä
÷&
N
ã
÷!Ú,
â
÷íç
á
÷M
š
à
÷C
ß
֯
&
Þ
÷Á
Ý
֏#
Ü
÷²0
Û
÷�
Ú
÷h!
Ù
÷?#
Ø
÷#
×
÷
·Y
Ö
÷
‘
Õ
÷
v
Ô
÷
X
Ó
÷
.ƒ
Ò
÷

Ñ
֏@
Ð
÷Ì
Ï
÷´
Î
÷ŠX
Í
÷m,ü
Ì
÷7-7
Ë
ô–
Ê

ôn"
É

ôH 
È
ô(‘
Ç
ô­
Æ

	³ô2

¥
1

�0

yƒ/

Z.

³`-

-€,

î4+

£D*

RÕ)

' (

'

ç&

Æ%

›$$

u#

O"

 (!

 

Ý
o

² 

�

r

Q

0

$

ß

¹

Š(

n

G
�

.






ù


â


Ð


¾



­


€Á


q



h	


Y	


E


6	


'	










ô


ë

Ø
ÿ

Í
þ

À
ý

¬
ü

„ö
û

`
K
ú

8
v
ù
ñ
á
c
ñ
·
i
b
ñ
$+®
a

	
6>

Ý=

º<




;

à
^:

Å
|9



t=
ø



<*
÷


èF
ö


¿
õ


pL
ô


Xg
ó
ü	

ò
üw•
ñ
ü
a
ð
ü%ç
ï
üà@
î
ü
ßü
í
ü
K�
ì
ü

<
ë
üâ	9
ê
ñ%É
n
ñ

m
ñé
l
ñÉ
k
ñ­
j
ñ‹
i
ñk
h
ñN
g
ñ2
f
ñ
e
ñ
÷
d

©UA%

Žw@
nš?


©U%


‡~

nšñ*Õ
ú
¦ñ'Öú
˜ñ&¹

Šñ$U_
|
ñ$L
oñ"Î
1

añ!Ä

Sñ µ


E
ñ Ke

8ñ
E
	*ñL°
ñD


ñŽ}


ñl
ô
ñ¤t
ç
ñGX
Ú
ñB
Íñ÷

¿
ñ¦Y
²
ñLUÿ¥ñ¼‹þ—
ñ;|ýŠñ˜žü|
ñ@Sûo
ñ¼úbñ¯ùTñ¬
WøF
ñ3t÷9ñ>
ðö+ñÊ
oõ
ñg^ôñ
î
tóñÛ


©U8

Žw7

nš6


©U5


‡~4


nš3
ùa
‰
é
ù:
´
è
ù#
Ð
ç
ñ*Õ
ú
Å
ñ'Öú
Ä
ñ&¹

Ã
ñ$U_
Â
ñ$L
Á
ñ"Î
1
À
ñ!Ä

¿
ñ µ


¾
ñ Ke
½
ñ
E
¼
ñL°
»
ñD

º
ñŽ}
¹
ñl
¸
ñ¤t
·
ñGX
¶
ñB
µ
ñ÷
´
ñ¦Y
³
ñLU
²
ñ¼‹
±
ñ;|
°
ñ˜ž
¯
ñ@S
®
ñ¼
­
ñ¯
¬
ñ¬
W
«
ñ3t
ª
ñ>
ð
©
ñÊ
o
¨
ñg^
§
ñ
î
t
¦
ñÛ

¥
ñ²
$
¤
ñ
ÿ®
£
ñ
Ñ)
¢
ñ
¡+
¡
ñ
m/
 
ñ
;-
Ÿ
ñ	óC
ž
ñ	Ï
�
ñ	£'
œ
ñ	m1
›
ñ	9/
š
ñ	,
™
ñ×,
˜
ñ§+
—
ñr0
–
ñ>/
•
ñ+
”
ñÜ-
“
ñŒK
’
ñ8O
‘
ñ
�
ññ%
�
ñÏ
Ž
ñ±
�
ñ�
Œ
ñq
‹
ñS
Š
ñ3
‰
ñ
ˆ
ñõ
‡
ñÜ
†
ñ»
…
ñœ
„
ñ}
ƒ
ñd
‚
ñK
�
ñ6
€
ñ!

ñ
~
ñç
}
ñÈ
|
ñ´
{
ñ’
z
ñs
y
ñV
x
ñ:
w
ñ
v
ñóš
u
ñÕ
t
ñ¯ 
s
ñ˜
r
ñv
q
ñ]
p
ñE
o

%%ùuM�ìpÑ
ߟSˆ€€€€¿*?“?
�

-0erld
‚;
‚D
�$
‹,20
nŠ	
D
ˆ�O

o�|
ƒv
Ž
	�<
pŠR
ˆ"

r�Y
�
�R‚I
s‚u
�


‚4

Œ	�]



t…|
Ž

v�I



“&

y†z
‚


G


3






�



ˆw
	




zL
ƒ+
Žs_�


‚=


‚7


�


Œ
.
%
&

c‚~
�R
e�I



“&

iP
&
‚@
E
Ž		f1
k�.






































































`


	



2



�













�




‹	


	
�
	
s


8
>	"




















	
	




sT





2





$













/



7

%





=
M





�



…
…{


J
>:	
	
	
1?

$
	
t‚

†L
ˆ<�t_ƒ


�Q

a‹

†g
c�.
B

’[B
d�v



‚U
Œ>„

e{
�z
7
‚[
‚s
�
†v�H
 6"|
f‚N
/
Žkg
h‚0
6
K
7
�bU	�
mU
�u
�6
�d:
p�{

‰
‰�

r…y
Ž

s‚o

ƒ
‹	�?�7
t[
�%
�
‚D

�
Š
�},2�'
u�|
“3
wC



5
�9


0


	

j




‚5
Š7_*


	�p
up‚?
�
s‚
�veO
‚







 

o
�r




&wh‚#
�	
iH
C
'
.
k
�(
 
‚1
‹!,‚
.xi�t


‚f


Œ=
„


p…x
„
‰pB
t…o
Ž
yb‚O



3

Ža
h
d‚1
 
7
ŽC#l
sƒ	
�R
uƒ
�RzoQ
ƒ+
Ž
f_s‚p
�Rau�^
,
“erE



‚:


P
�s


�#


‹_
+
1
/
fed


‚:


‚C


�#


‹~
+
1
/
ilU
}
‚.

‚6
ƒG
‡&s�n[
n‚G
�
r‰{
Š<
laC
�
C
�X
�B\‚aor�B
:
R
/




Ž`g

‚:
tŠ
‡&
x‰{
Š<raF


ƒ*


Ž


o‚C


�

td‚U
�%
u‚V
�%
gco„b
Œ>ecŠR
ˆ"
dG
ƒ+
Ž
n�:
“3
oL
ƒ+
Ž
pŠS
ˆ"
sm
‚;
‚D
�#,2
tT


&

m







"



'








S



M
�



?
‚/


‚
…k&9



-"1
3
K

vO
ƒ+
Žhe…|
Ž

t�
b
M






�
#
‚<
Š<I	&
&‚
@
inO






‚)





V
�\





�

„
‡H



 


loz
‚1
�q"noK



ƒ%



Ž

re…r
Ž

o‚N
/
Žk	g	thd
�1
�

‚D
�$
Š(�W,20wl‚%
�
h_mŠ}
†{anG


� 
w





'
@


\
�&
‹	|
h
8	�%	
r�P


“2
brV
’"de�9
*
ƒ
Œ>ƒK*ec‚
‚T
�*
‹‚m�4
e‚#
�
lo
‚;
]


�f
N

P
Œ,2,	

r…|
Ž
idH
‚I
b
X
Œ>�z
g…|
Ž

l‚

;
‚
Œ>W
sˆt
�
‡ 
t‚
�
wƒ
�Rme‚0
�odƒh
Ž7
o�4
1
“
1

s\
‚;
‚D
�%
‹~,21
t�
ƒ
�C	
	
wR
�
C

Q
A
<
�4R��3pr�C
“3reT
p

:
�1
N
Ž�
�3:
oD
ƒ+
…



�R
†Qk=�<sc‚=
�
t�W




“1

tb‚:




�


c‚&

�
d‚W
�%
h�D
“3
l‚5
�
m‚)

�
r‚6
�
s�i
“3
t‚$





�


u‚X
�%vnƒ0
‚%
+
�C+wn�=
“3
i_g‚q
�R
n�j
“3
s‚o
�Rbl‚z
�R

u�R
“3c_�:
“3
h‚p
�R
k‚Y
�%

s…y
Ž
dd`
‚1


‚D
�%
‹~"
21
eH
ƒ+
X
Œ>�
l‚

s…~
Ž
ena
�k
P
‚D
�%
Ša�,21
sŠ
‡&f_‚p
�Rgh�
b
M






�
#
�m
O
Š<I&
&�AN
@	
nK



ƒ%



Ž

ld‚

;
‚
Œ>W
eU
ƒ+

‚6
‹`�n
l�R
=
�3
†C
‡&‚*
�0
sŠ|
†{mi‚+



�
nb‚)
�
cg
‚;
‚D
�$
‹,20
dC









 





'
"



.























0


-














�g
J



Š5
	..




 	










@1
'I








"

!
C1
‚9�5*
+
Z
8/



:0'

%




�/B^$#S

.



*&+











!
"
H#

CÁ²z<
Ò�E
ú
Ð
™
d
9
Ñœ[áŸ[
Ý
¤
c
!	í	Ä	—	^	4	ЉMÝ©m(ð¶|:ÈŠAæ«k1ùÁ…Iã«q7
Ï
—
K

Á7
gcˆ1
inˆ








„
""keˆ#

I�X
O/


;Stealer.Counter.DesktopScreenshotDesktopScreenshotþ-;�W
A!


;Stealer.Counter.ProductKeyProductKeyå
Ò&I�V
O/


;Stealer.Counter.SavedWifiNetworksSavedWifiNetworks¶¤(5�U
;


;Stealer.Counter.DiscordDiscordŽ{#1�T
7


;Stealer.Counter.UplayUplaygT!1�S
7


;Stealer.Counter.SteamSteam@-!7�R
=


;Stealer.Counter.TelegramTelegram$7�Q
=


;Stealer.Counter.FTPHostsFTPHosts
ð
Þ5�P
;


;Stealer.Counter.WalletsWallets
Ì
º3�O
9


;Stealer.Counter.PidginPidgin
©
—-�N
3


;Stealer.Counter.VPNVPN
‰
w9�M
?


;Stealer.Counter.DownloadsDownloads
c	
Q 9�L
?


;Stealer.Counter.BookmarksBookmarks
=	
+ 5�K
;


;Stealer.Counter.HistoryHistory

5�J
;


;Stealer.Counter.CookiesCookiesõã7�I
=


;Stealer.Counter.AutoFillAutoFillо=�H
C#


;Stealer.Counter.CreditCardsCreditCards¨–"8�G
?



;Stealer.Counter.PasswordsPasswords‚	p .�F
+



;Stealer.CounterCounterak&KF'�E





;StealerStealer>GM4`
F�D
E

#:Stealer.Chromium.Cookies.GetGet³Ê“˜Å	Get(string);�C
=



:Stealer.Chromium.CookiesCookiesT‰“Îsî9�B
--




:Stealer.ChromiumStealer.Chromium>P42
3�A
5



8Stealer.Cookie.valuevalue

ò!?�@
I



8Stealer.Cookie.storeId.storeIdstoreId
Í
å
¿+7�?
9



8Stealer.Cookie.storeIdstoreId
Í
Õ

¿+7�>
9



8Stealer.Cookie.sessionsession
¤
¬

˜!5�=
7



8Stealer.Cookie.securesecure
~
…

r B�<
M



8Stealer.Cookie.sameSite.sameSitesameSite
L
e
>,9�;
;



8Stealer.Cookie.sameSitesameSite
L
U

>,1�:
3



8Stealer.Cookie.pathpath
&
+

 1�9
3



8Stealer.Cookie.namename


ò 9�8
;



8Stealer.Cookie.httpOnlyhttpOnlyÖß
Ê"9�7
;



8Stealer.Cookie.hostOnlyhostOnly®·
¢"D�6
G)




8Stealer.Cookie.expirationDateexpirationDate€�
r*2�5
7






8Stealer.Cookie.domaindomainX_
J",�4
)



8Stealer.CookieCookie5E
Ò(
ï'�3





8StealerStealer$
ø
6�2
=




7Stealer.Consts.SAMESITESSAMESITESZ	CW*�1
)





7Stealer.ConstsConsts5>`(v&�0






7StealerStealer$}�
1�/
#

6Config.InitInit
�
˜ã
|ÿ	Init()?�.
;-

6Config.GrabberFileTypesGrabberFileTypesò…>�-
;-


6Config.GrabberSizeLimitGrabberSizeLimitÕÃ*6�,
3%


6Config.PornServicesPornServicesu^`;�+
7)

6Config.CryptoServicesCryptoServices,
D=�*
9+

6Config.BankingServicesBankingServices¤�ƒA�)
=/

6Config.KeyloggerServicesKeyloggerServicesI2
V?�(
;-

6Config.ClipperAddressesClipperAddressesøÏ
^8�'
5'


6Config.ClipperModuleClipperModule¨
“7<�&
9+


6Config.KeyloggerModuleKeyloggerModulehS;>�%
;-


6Config.WebcamScreenshotWebcamScreenshot C2�$
/!


6Config.StartDelayStartDelay
ä

Ï7,�#
)


6Config.AutorunAutorun
®
™16�"
3%


6Config.AntiAnalysisAntiAnalysis
n
Y;(�!
%


6Config.MutexMutex
<
'-2� 
/!


6Config.TelegramIDTelegramIDÿ
ê84�
1#


6Config.TelegramAPITelegramAPIÀ«:'�

6ConfigConfigŸ§׉õH�
S#



5S.OpenApp.CommandPrompt.fileNameCmdfileNameCmdHˆiwE�
E


5S.OpenApp.CommandPrompt.OpenOpenÎE
*
4
+	Open()B�
;'

5S.OpenApp.CommandPromptCommandPrompt‹¹
ɪ:,�




5S.OpenAppS.OpenApp|	‡`ru
8�
1

4CommandPrompt.OpenOpen
E
N'
2C	Open();�
?#


4CommandPrompt.fileNameCmdfileNameCmdÕ¶w5�
''
4CommandPromptCommandPrompt£
²Æ–âK�
Q/

.S.OpenApp.Chrome.FilenameChromeX86FilenameChromeX86¢ƒ‰
	‚!¾
þ
]èö‹x	N,
J

4e	—
ëJÕ´Š¸’w¨ Hé�p_	<
Êô
»

©N:}	)h
…
p2
#
š÷	Ž	è.
‡"P¢	�	Ù	Ç]ÎC,

	
U
­
Aa阨Öå¸Ç
Û	^I'
Ï/<
Ã
Þ
ï‹
·|lÛR
KÀÓ	t
l
_òo:
“
¤þ
4
,	ü	êó
Öo	¸:	®Ñ¦—#	b’R	÷÷


rˆ6
sˆstˆ#
uˆ,taˆ2
veˆ8
a_bˆ/adˆbeˆ)
ccˆ
d_ˆ-



dˆepˆ'


sˆ/	g_ˆ2
iˆ/
sˆ
inˆ1le‡k
gˆ	


l‡iN
tˆrk‡y
taˆ	
	
e‡h+ut‡{
	
			
xaˆ
lˆ%
b_mˆ/aaˆ
uˆ
crˆ










daˆelˆ)
jeˆ0
laˆ)

oˆ/ma‡y
"
noˆ
ro‡l
s‡rsaˆ
iˆtaˆ

caeˆ
lˆ7
tˆbaˆ
cˆ
dˆ
lˆ*
mˆ
nˆ
sˆ
tˆceˆ,

oˆ
esˆ,haˆ1		
r‡mipˆonˆ

o‡u
re‡h
(
yˆ










t_ˆ0

d_cˆ
oˆ.
pˆ-atˆ


diˆe_ˆ  

cˆ
rˆ	-ge‡oinˆ
sˆ"
t‡}	
	wfˆ 
iˆ
mˆ$

e_cˆ7
gˆ1
iˆ!!
pˆ6
al‡k
t‡hcrˆ
tˆ0d_ˆ
g‡o
i‡}
fo‡nmeˆ&naˆ	
gˆ#


tˆ


p_ˆ'r_ˆ
rˆ,
sˆ	#
t‡l	s_ˆ5

gˆ
sˆ,ta‡i
pˆxtˆ
y_ˆ#



fil‡{



r‡nlaˆ o_ˆ8
vˆ
x‡n
g_iˆ
lˆ2
mˆ3cmˆ+et‡i"icˆ/
dˆorˆ	,siˆthˆ#




h_mˆ7

tˆ2aiˆ1

daˆ
enˆ
rˆis‡w
mpˆ	
ro‡ms_ˆ#7HandleDoKeyboardEvent	]1HandleDoMouseEvent	W=GetWindowThreadProcessId	+HandleClipboardM+GWLP_HWNDPARENTK)IsActiveintPtrË1InitializingWindowž'GetWindowLong•1InitializingWindow‚Gvl
äiCount
Ê
IdentityIllegal	GuidInt
HISTORYS©
InfoType¦	guidùhttprealmó
hostnameñidð'GrabberImagesÝ-GrabberDatabasesÜ1GrabberSourceCodesÛ-GrabberDocumentsÚHistoryË
httpOnly¸
hostOnly·
HBrowser	xdá
<isC!HiddenApps	¤	Host	~#HandelMouse§5#GWL_EXSTYLE�
'GetWindowRect°;%InvokeUser32­	hWnd
pßhDcScreenbhDca-GetWindowsHidden„	Init¯ImportKey3!HideWindow	*
ü!HideWindow	Q!IgnoreMove	-
û!IgnoreMove	PHiWord	`v%IgnoreResize	2IE,IE
}I	Host

	HVNC	Ö	Host	ªhwndApp#HWND_BOTTOM

œ
hWnd½Helper	½IDD	®HVNCIDD	à	Host	Ü
HTTOPÑPHTLEFTÏHTCAPTIONÎ#HTMAXBUTTONÈ#HTMINBUTTONÃHTCLOSEÀGWL_STYLE¿'HTTRANSPARENT¾hThreadhThread
w%HTBOTTOMLEFTÕTCA
HTBOTTOMÔ!HTTOPRIGHTÓHTTOPLEFTÒHTRIGHTÐ
hProcess¯
hProcess
vØhStdInput%hStdInput
ŠhStdError'hStdError
ŒGWL_IDFš’hPr!hStdOutput
‹IDD
Helper	ïHelper	‘IDD	‚History£Helper
a%HigherThan81	ý%IgnoreZOrder	3#HideDesktop‰
	H
Input
’%HelperScreenxgithub
î#HVNCDesktop

el+HVNCDesktopName	Ã
HDesktop¡'GetWindowRecto#HBr'GetWindowRect
F#HandleMouse`'GetWindowRect
Tent'GetWindowRect	T'GetWindowLong	J+HandleClipboardZ+HandleClipboardSHB.HandleL%GWL_USERDATAHGWL_STYLEG#GWL_EXSTYLEE!hStdOutput&'GetWindowTextð'GetWindowLongß%HandelNativeܾ'HTBOTTOMRIGHTÖ)GWLP_HINSTANCEJ#GWL_WNDPROCI#GW_HWNDPREVt#GW_HWNDNEXTs#GW_HWNDLASTr-GrabberFileTypes®-GrabberSizeLimit­?githubu?GetWind=GetWindowThreadProcessId	6%IgnoreResize	'GetWindowRectl'IsCloseHandel�n'GetWindowRectyž&GetWindowRectFžIsCloseHandelÅ'GetWindowRect
^'GetWindowRect’'GetWindowRectx8GetWindowRect
‚'GetWindowRect‰GetWindowRect7%IgnoreZOrder	1GetWindowPlacementàINJCEHCHIb€.CTm76�IbyŠhci‰q



kŠR
o‰+
3


R!
r‡K
‚	
�
t‡U





�X

h}	


u‹
y‹
d_‡


„

aŠ	
b‰1
c‰2
eŠ*
g‰A


�T

h‰\
i‡S

�`A�

p‰34	
sŠ
u‰f	elŠ+


nŠ`

fi‰d	,k
l‡%
„ 	
o‰K






rŠp
gaŠ 
r‹ha‡?

„itŠDke‡:



ƒa;
la‰k
d‰d
x

e‡?

‚J






WHm_Š(





aŠ

$
d‰s
eŠ













'	
l‰t
nŠc
pŠ{	
sŠD
t‰rna‡+

„

c‡4
!
‚
~G&
d‡T
‚Sx
e‡2

„	
t‡


‚e
	


	




"


I



uŠC

vŠ@	pa‰lgF
r‹r.ˆQ
p�
_‡


„

a‡2

‚y
�
d‰*
eŠb
f‡)

ƒ2l
i‰-
n‰d
#

@
pŠR

s‡

‚2�Y)	
t‡0

‚h
	
/
]
v‡U




�W

	



�{



y‰H
3


s

scŠ1

d‰Q

iŠ%		8

oŠ!

s‡(
‚O
�/
t‡F
‚T�L	
u‰m
y‡2

„ta‹
b‰7
c‰Q
e‡U





�X

Vn3


h‰U
i‰5�

l‰6
p‡0

‚.�
1	
r‡2

ƒ%c
s‰4
t‹

vŠnus‡.
„ 
tŠzvaŠAxe‹	
p‰;
M
t‡


‚:�e
yf‡2
„ 
h‡:



„
zi‹
fde‰pea‡@



„

k‡:



„
fd‰p
l‰Y
sŠpie‰d


J


$

g‹
l‡N
�
�3c
	

nŠ
r‰K





la‡#
















‚|
�	






o‰Yo_‡
„ %
r‰c
tŠ
v‡
„ 
x‰KreŠB
iŠ*
oŠpseŠp
g_h‡-
„ alŠ ecŠR
d‰l
n‡2

„
pŠS
s‰-x	;
tˆS
a





	=
(
#

in‡
‚F�/&neŠor‡)








„

ra‰*


�W	
e‡(
„ se‡V
�X�~ui‰h/vlŠt
h_m‡'


$
ƒ1J

r‡.
„ ai‡'
„ 
n‡-














‚'�a

		
	
	


	
s‡.
„ 	da‡


„
eaŠ]
mŠ



n‡


ƒ

}

r‡


„
is‰T
.ma‡-
„ 
h‡@



„




o‡%
„ 
p‡)




„
orŠ

s‰\
roˆQ
‚Stt‰b
i_f‡/
„ 
alŠ*br‰v
uŠca‡


ƒ
	


C:

e‡U




�W






�{


k‡2

„
oŠZde‡)




‚Z
�edŠ/

l‰d
x

nŠ*
s‰P
	1/
0
fiŠ/	
	bgnŠ
r‹leŠh
		
	
l‡N
�
�3d
sŠzma‰-	
e‰j


-n7Š3
8Š(
_‡'


„

d‰^
eŠ
f‡



4
‚4}8#
#
g‡6


�XgO
D'
i‡L
‚,�	
s‰Y
tŠ	




v‡<

„on‡

‚E�:,ph‡


„
re‰K�sa‰\
cŠ|
i‡<

„
oŠv
t‰T
.t_‡L
ƒ1
c‡S

�`�g
e‰q


4







h‡)








„


lŠY
sŠ
u‰c

yŠ"
umˆQ
‚Sva‰5ze‡
ƒGN
k11‰z_p‡6
„ 
agŠ%	cs‡8
„ en‹
y‡2






ƒ7		

3
ie‰P
1
n‡R

�X
�zma‰B

7obŠRsd‰M
l_a‹	ag‡#
















‚|
J	? 
 




pŠU
s‰k3
daŠf
nŠje_‡-


„

a‡?

‚L�N
bŠh
d‰\
eŠ`

fŠp	
gŠ u
k‹

mŠ	





	
n‰t	
p‹
r‡M

�
g	
:7(





9+
X
/
!'.

+
	(I

T#

6


'


 


4"
	/	K

(

!!ÉŸW”€€€€¿200es_�
‚=
‚7
�
�#

c‚~
e�I
ƒJ

gˆ
i 0	&‚@/	B„H	

k�.




















	
	







`
	
2


�	


	
	



















?
	K‚W
s	
2

$
		





/
7%	
=
/


		



;	
E3
?�e
t‚‚ƒ	y		5
u…L
y‡2t_ƒ

a‡iT	
c�.B‚p
d�v
‚U
e{�z
7�F�N�

�!
f‚@/U�%
h‚6K	O-
iˆD
lƒH
mU�u�6„k
p�{‚	D
‚@		B1	
r„J��9
s‚o�v�_‚H
t1

(�%�G�lg)
u�|†p
w

"
5�90
	O	

H
�E	‚S
y†oup‚?ƒ
s�
	
		
		
		
	jƒ{	
		
		
		
	}vbˆg
eO‚




 o�
B












mˆhwh‚#	
i)C'.kx
  U/�
o ƒEx2„u
8�

„m	

_
i�t
‚f

p…xƒ
s
…D
t1	
	
	ƒ$
�"v�0
|
y_ˆ#



b@‚
3�"
d)�s 7}‚
f‡2
h‡:

l†g
s*‚J} ‚
u(‚F} ‚zoQƒ+
f_a…>
h…I
l…?

m…A


r…D

s‚p
w…H
x…F
au�^,ea‡@

k‡:

rE
‚:
P�s
�#
fed
‚:
‚C
�#
ig†_
lU8











'‚.j
)e





	





1	_


LG
n‚6�C[

„1	
r�'



…



�;laC�C�X�<
�Y





l*
o_‡%�"
r
�
:R/

J2

S"�
‚





v‡}
x�'


…


�;raF
ƒ*

o‚C

�Ttd9	‚�R	�
p‰!
u:	‚�R	�ul„|
g_h‡-
iˆ
lˆ2
mˆ3cmˆ+
o„beb�%„
dGƒ+
n�:ƒB@�;;
oLƒ+
r†g
sm‚;‚D
t




&m

"'


	


<	



v
?	�"1

vOƒ+
x�$…fl…Jge†ghe…|
i<ƒn
t)	Lb
M	
`#	
9
	-
�icˆ/
dˆ
nO

‚)

V�\

LG	‚
t†uloz‚1noK
ƒ%
or‡)

A,

pr…K	ra†`


‚3
e…L	&�6
o	‚@	/	U	�%	sc†q
e†kk
iˆth31�1�
‚D�$�



w_ƒV


i
ƒK

l
‚ƒ)






h_m‡'
$k

r‡.
tˆ2ai‡'�



n
	
� 	w
'
/

	





	�	9x

		
	
	


	
r�P
ƒV

s‡.	b.$
rVch�da‡
|

cƒE

e�9*ƒ%3ec!	�d�b	r�*
e‚#ƒ%

i„B
lo‚;]
�fN@
n‡
}
r…|�
}id
@‚IbE
g…|
l‚;‚
n…S
s‡d
Q''
t<	�_‚	
v†r
wƒkeˆmma‡-
e‚0
h‡@




o‡%
p‡)
A
1
odƒa|
o�4
1
ƒ%
,

s\‚;‚D�%‚

t�	ƒ	‚\‚B

w	
?�CQA<!Epr�CƒWreTp:�1
No
oDO%#‚�<

)
$*r;M.

$
	



$� $JT
$	



�\

R
?)
*
 
�
 
.#

  ÕŸXˆ€€€€¿4)0ine‚?


�

f{
G

5
y
7
‚[
ƒy
}
†)ROV"�
5
	5
gO


�
o
%

S
h
x


�

Šx:!�
i‚+
E
ˆ

†H3	J
mU
ƒ+
Ž
p�W






�ƒX
rh


‚:


‚C


�"
+
1

t�

�9


�E
�q
D
ƒB
†sa‚7


v‚
�onD


t
9








 

S
=


i
Œ>

+
	

��09

r�l
“3re‰{
Š<
t�.
X
�)
��
X
sa‚'
W
ŽC�
cb
	
‚2
	
‚;
	
�"
ƒp
†{�
	#	)	.
dk
‚;
‚D
�"
Œ
,2.
g…r
Ž

i‚z
�R
m‚`
S
ŽR�A
o�m
‚h
Œ>„

p�]
&




‚T

Œ6ƒq&


r…{
Ž

s‚
�R
t�t



‚M


„
�
†~
	ƒ~

w‚z
�R
zƒ

�Rt_Š}
†{
c�9
*
“	*
e�8
*
g


"
‡\
‡
	T‚-*
iD


�J




�U


�9




Y