Static | ZeroBOX

PE Compile Time

2067-04-09 22:44:02

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00029894 0x00029a00 6.95400803446
.sdata 0x0002c000 0x0000020f 0x00000400 4.23127380133
.rsrc 0x0002e000 0x000005c0 0x00000600 4.17627997321
.reloc 0x00030000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x0002e0a0 0x00000334 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x0002e3d4 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.sdata
@.reloc
Z?_d
_b`*
v4.0.30319
#Strings
xeno rat client
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
mscorlib
System
Boolean
RuntimeCompatibilityAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
AssemblyTitleAttribute
System.Reflection
String
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
SuppressIldasmAttribute
AssemblyKeyNameAttribute
AssemblyDelaySignAttribute
f4b27df2-c7d5-4b2f-8176-783c42be22cd
xeno rat client.exe
<Module>
Dn7Uxb4BNY7MliNytE
Y1wqoaD57rRn7A16ZI
EOBcErsEIr70F4ts0O
SO9rhQh9XxmvHjBf48
Object
qcaLymc0H8hqX8wALu
O3EY4lYBytyvltCyCB
HkfnBpKeqgnbsoaJqO
pnimXfnbT17qsyJZHQ
<DllNodeHandler>d__3
ValueType
BbrMnOah764okaKegA
MoVdNLFeVvQTbcVvOd
qnyHx0PchbFDF8oqXV
nviGRbMtZCV5jxsj4o
<CreateSubSock>d__3
<DebugMenu>d__10
<GetAndSendInfo>d__5
<SendUpdateInfo>d__11
<Type0Receive>d__6
<Type1Receive>d__7
<Type2Receive>d__9
<setSetId>d__8
xeno_rat_client
<AuthenticateAsync>d__18
<ConnectSubSockAsync>d__11
<Disconnect>d__10
<ReceiveAsync>d__13
<SendAsync>d__14
FKYu2LXCaqXVr9Wa5F
rF5VCpy2Ia0N6l3wpK
SocketHandler
<ReceiveAsync>d__10
<RecvAllAsync_ddos_safer>d__5
<RecvAllAsync_ddos_unsafer>d__4
<SendAsync>d__9
qrxY6Q0l3PlUsWbdqB
TZa6jM5RBTyYF0gU4H
<Main>d__11
CapturingConsoleWriter
TextWriter
System.IO
HThyeXT017XD0boSNW
<>c__DisplayClass16_0
<>c__DisplayClass18_0
<AddToStartupAdmin>d__19
<AddToStartupNonAdmin>d__18
<ConnectAndSetupAsync>d__15
<GetCaptionOfActiveWindowAsync>d__8
<GetIdleTimeAsync>d__20
<RemoveStartup>d__16
<Uninstall>d__17
<PrivateImplementationDetails>
__StaticArrayInitTypeSize=7
__StaticArrayInitTypeSize=32
<Module>{70906369-ACA2-48A5-8110-472166050B82}
TmQ1RFkCPOIn0X5Ls0
Yuf8EKBiNSiS9xSQXk
SFU4mbT3GMret7THonf
MulticastDelegate
T62COgj3R5j0XfUWV6
p6y4gg8Q4XXI41Ijcu
BrLEOweEvPMZ4ehneT
Attribute
TjAIso9L6ocQeAr9Jl`1
nqEK2cIgneb2xcXIlx
okC4Db2yafYQrOk9fD
RSvLGU1itr9KD9vMrc
c3n5IPGirErDVCmG1F
dxcFUTdRrWIIbtHgKR
QDaZcNW592EF546Tes
x78h4avqHxPkAsUCnh
<PrivateImplementationDetails>{754D20B4-FAD3-4D93-98BF-B163CAAFBEDC}
__StaticArrayInitTypeSize=256
__StaticArrayInitTypeSize=40
__StaticArrayInitTypeSize=30
__StaticArrayInitTypeSize=16
__StaticArrayInitTypeSize=64
__StaticArrayInitTypeSize=18
.cctor
nORh8SXZ5
UInt32
UInt16
RtlGetCompressionWorkSpaceSize
ntdll.dll
I4ftNwfO3
RtlDecompressBuffer
l1NYHloLK
IntPtr
RtlCompressBuffer
AQfPP0Qev
LocalAlloc
kernel32.dll
F01DgF9GV
LocalFree
M7xmZutPh
Resize
cDAdeItGq
Oclk0S5OdyfOX7l6bZ
rwnp65YwRVpX0UQiWC
hnc2ScGNT6SAua5mOm
z3pIXHCbDvrpab48PN
Ow5p4vv42
Dictionary`2
System.Collections.Generic
Assembly
GQVSY4dan
ResolveEventHandler
ljurspSE3
System.Threading.Tasks
AsyncTaskMethodBuilder
get_Task
CvYkcBgNP
AssemblyName
QLK03eqf1PVmFFv29r
kWDKjsW2NsURgnO5Qu
aJcSutpWOXaCuMYTQ3
AppDomain
get_CurrentDomain
q08LylRT7KQwI9rX6G
add_AssemblyResolve
hUU8NKUweNL7lk5COj
aDvame6GrcgLZnrcVj
Ed2WS2wYCjHxtFoiGb
Create
JkbOqOEqmYwTOavkxZ
ResolveEventArgs
get_Name
LJ6ahSgD7wfLV9GGOF
vxVU42ifv22VjKxjDo
op_Equality
Hf0M0kjIHYTgwiLSTX
GetExecutingAssembly
<>1__state
<>t__builder
subServer
<>4__this
<getdll>5__2
<hasdll>5__3
<fail>5__4
<>7__wrap4
<>7__wrap5
<dllname>5__7
<>u__1
TaskAwaiter`1
<>u__2
<>u__3
TaskAwaiter
<e>5__8
Exception
MoveNext
IAsyncStateMachine
SetResult
Task`1
GetAwaiter
get_IsCompleted
GetType
GetMethod
MethodInfo
BindingFlags
GetResult
AwaitUnsafeOnCompleted
get_Item
ContainsKey
set_Item
SetException
SetStateMachine
stateMachine
c7MHvtXeHDBk1L8Qnt
Encoding
System.Text
get_UTF8
BGQ2tjs4pKv7vfEsAp
GetString
TXW44vQJMmVru3j7Qi
Console
WriteLine
NjgpB1Zo6AmZxgeOC1
sMpVyllmeq5H5DWKXn
Lla2hBS16ycj0UHqjP
awWNFRTZFGSDZWIrE8
Activator
CreateInstance
PncKXtAlXNhbck3sG0
MethodBase
Invoke
qJpp4RkYbqOS7jjrDn
mbqxXq1n23YtOR6MxY
get_Message
RBo3OryjwvdBVvy5cV
GetBytes
vVM4GJ3rjJrRhMd3b3
get_StackTrace
SviIXc7v1qBC2VRq4Y
tOiRWoKuHgfKiKF5l6
j6SJwDL8Q
System.Security.Cryptography
ICryptoTransform
MemoryStream
CryptoStream
Stream
CryptoStreamMode
LIfKy9qVr
vAtePEfEeWZZTqbm2L
zZ5CUCuSfahqblI9os
SymmetricAlgorithm
set_Key
Hnm2ZGDwk4ayr6JFVh
set_IV
uEPTl84dbD43ZiqSFY
get_Key
odxsPn2FWX8yIKS4hp
get_IV
YPfisNBdHfvZ013yOi
CreateEncryptor
TXnXdAdC3GXigqqLh0
oXIBFYhSs2ABisQEOP
FlushFinalBlock
ThTc4SceJRr0GbYpBc
ToArray
EXO5tOH81EftGylZiq
IDisposable
Dispose
BkPa8wxvBGG8eqWK6C
gUBnRFvDwDkRBsvYIJ
Oosl1DP9A3QTajiANp
CreateDecryptor
yeXOGjnqD4RyviQTp8
ap5D2XMktv0yMLF5lm
hV1VDKHsk
hCls4Rcti
nxO5xLVB0
e7kFBxtpq
wn6lWekjb
WjS8ydIVu
B6j4osFq4
dXFaw3vbK
PYtwrelAk
QoSMaWk6d
f7aAe3NuZ
UbJLxKNn2gPZGmlCKF
A3HLEkFwJp8LK11QX2
peqbZq99fp5SMhUJ2o
dLwbAPm4aGQD8j3HVw
Pfw3frJZ0H0whjd1RB
Action`1
ToString
rOBpfg8LKyipRC9Lrs
jS9hcqbBHDZwLR4SJm
U932YneqfxE6Y2HrkX
QHvWbvVY6ONZn5Gu38
Concat
sXm1jNapxMLpa2mN8Z
qfsqkEoQqMtDCSPK9O
v4HvE2LcVSE79Mu73A
get_Keys
KeyCollection
IEnumerable`1
Enumerable
System.Linq
System.Core
Contains
Remove
l1hqlKOO5jN4i6NggfF
RXiPscO0N5kxoTgCZM1
qiUZ7sOrLWfuZivF97J
hVJTSazdkpQhSyJisM
xpa8WoOIiPJSDALNCbi
pEssF5OYeXyjXtISGHn
lrp6QdOGThMqXwKcW9X
Environment
get_UserName
nwswxoOCxaWuLVajKtL
WindowsIdentity
System.Security.Principal
GetCurrent
VKxcGHOUOsrcXlk9Vph
ClaimsIdentity
System.Security.Claims
aFVkK4O6hThsi0noOOf
ddBDmlOqUOAKrirrUtj
DODv0NOWtwWcKG2md98
XxytKDOprMylCJSlLFb
pdXXCmORp1KbQWwWrOT
xpsiU3OwpSXfyWY3Jfb
XLyGvSOtaNhCIWRTOaU
nkcA8ZO5GCtAv7ThswL
<currwin>5__2
Uo36Q7OiIUXHkS5E155
OOK9IvOjvjruJRWMKc2
yIADh6O7yoL35Dd1SAx
wfL3fvOEKpiOCRAxblH
eVFU6jOgl8drXY8xDPJ
t5S8uQOs36dJfSxRP2v
V4lBxuOQsS9q5wuG85W
Process
GetCurrentProcess
jN905qOZy94YokxpOo2
EGcPboOlVSKSdpNCghr
GetEntryAssembly
zFCYeUOSmPGqfayki4a
get_Location
n6FbtfOTGahwV79yVIu
ljqq1fOA3ZuQBQAvuNf
pLoktJOkDMTgHBEH8Fc
K5vIyxO1cdETdfws3n3
Y3Wm6oOKxQniHO29GHv
ki55dHOXgWcRbCltphu
<HearbeatReply>5__2
<HearbeatFail>5__3
EWheLFOxHrvBOm1Nkgh
XFA6vIOvJVCIk8JDi9B
tlI7aWOfBH8IsiYkqHn
zNa1ahOus3EyV34DO7Y
YW1dyoODHa0g0hV7jsl
h7XnlNOyYFMWyxQZ0fD
QtrKqQO3ucV56b8nW9i
yPoKEUOBrFeCVZfDE6m
DtIQ2kOd05EtdwNXkx6
p5UP12OhSHmuxNtWZX7
NEccSrOc5UnI8PKvwcJ
Ou3Hq1O4JLuospSCs7m
DsaqETO2TSCIKHe1iiG
OJUZfxOHB3KvSNonOMH
ae6LbROPKeuscAgpTqN
n7h73UjhV
subNodes
List`1
Parent
SockType
XEfC65hqw
memcmp
msvcrt.dll
_OnDisconnect
AddSubNode
subNode
Disconnect
AsyncVoidMethodBuilder
ConnectSubSockAsync
OnDisconnect
AsyncTaskMethodBuilder`1
Connected
ReceiveAsync
SendAsync
LSLfcmqsd
SetRecvTimeout
ResetRecvTimeout
AuthenticateAsync
yESYSLOnEU4DmXO0M1v
BCu9W1OME7TvWVja06k
oKHxe1O9J7sVWYpuhRn
QdeptOOmPZJ1vhV5txu
Socket
System.Net.Sockets
get_Connected
uux8DiONlxOEi9IaSXN
jWhilQOFDPEmPZYicSD
<comp>5__2
nlsrTtOLpdGxs6vDnoZ
RuntimeFieldHandle
RuntimeHelpers
InitializeArray
DFKettO8e7CUQOVBFAq
W3pmgsObHVqOEEpPMXQ
hjC8apOe6r41PnpHPUy
gh28k5OJ1ycI546kls3
grsuCIOo15SDYXkZArk
<socket>5__2
<sub>5__3
AddressFamily
SocketType
ProtocolType
EMagBpOzUtOn40tXFdf
get_RemoteEndPoint
EndPoint
System.Net
hIGGCC0I6jJxZDSU0uN
SocketTaskExtensions
ConnectAsync
Sm1Dfh0OoDnVs2HrwyQ
fZTW26OVDUjiZZWHTU5
suBCnJOaBCbpsfrimbJ
Enumerator
BeginDisconnect
IAsyncResult
AsyncCallback
Func`4
EndDisconnect
TaskFactory
FromAsync
ToList
GetEnumerator
get_Current
oTwlmI0tctP24WXs3Rv
get_Factory
Fs9nlM05QusTZPXCnVN
aaqfBP0YCvy63Vk8mR4
lc9CTI0G4hs74gDNWc1
aUdPyQ0C6ow3InWBITR
YqdFQG000MuPe7fwYlY
vNmU4A0rydFlhfUlTvn
d2ZwJQ0UdDMYx7mpMfR
CTaKb1060b0ShSmHMdn
aeEVyo0qIa3GyX0FYG7
V2xqnU0WZqLgte6lcut
iXcEmnUyj
rVM9AgJWa
li5b5bZl7
trVeLp0wHNRn9vLkrp6
Rg8Jte0E9PpMAnVUQUR
aC76xX0pwQb31PyLxDL
lk3O0x0R8JBNtwaPVZO
EncryptionKey
xDDoJHTk3
socket
_EncryptionKey
BwMuBN51e
D6HQxCVhX
Func`2
SelectMany
NJaLMlf5L
BTruncate
offset
BytesToInt
BitConverter
IsLittleEndian
IntToBytes
P9G9et0jR2vDf0kboB3
zZHHM207IZGfeclEWEP
wxChRC0KgkahuDIc6b0
set_NoDelay
LBNMS60gsJdvjgxBTju
IwGPYo0i5bJSRVanlkb
gfNNYJ0XS7cUR1BrU8Q
Buffer
BlockCopy
Wk8LGd0s2OkQj7V0pyM
set_ReceiveTimeout
<>9__6_0
<Concat>b__6_0
A9jYws0lNSCWfdL0713
Kdh2VY0Q6k6ZCZIMRlt
PQsy6J0ZEWwrkAAA9Gj
UYOqH90SILuoEmRpQTw
FwkJJP0kKwMoTkk3dfT
RMPDfJ01wWGucDDwDGb
R4lwQQ0TsvqOQ3n2bha
BTC7up0Am5Nv2DbhOSU
<data>5__2
<total>5__3
<dataLeft>5__4
<startTimestamp>5__5
DateTime
<lastSendTime>5__6
TimeSpan
get_TotalMilliseconds
Double
ArraySegment`1
SocketFlags
D6RapH0xUgPvJPv4BTB
get_Now
qjVLAD0vvMLlEhUnFOX
TbfoHX0fbptUnanFDcl
get_Available
SnNkWY0uV5TBfbI0nIK
op_Subtraction
e7tlEA0DV5XeRcjQuyB
ONE5lM04iiq93biLgH9
pG8K1s0yAQ8n29hND6C
GHoV0X03o0bkMOjGOeL
tfqVcR0da7yb1eFe3mV
K9uW9O0hoT3p8TdiL0e
jY393E02lFTYapyhscZ
B9rm2Z0BUgHMADtVK9K
ArgumentNullException
jYDclr0PykSnkpZnN8L
NLhP4V0n4eJLtIP5sbr
A0VmKh0MB0LREjWq4dQ
KdRkDj0cVJ9bbAVn7Di
nn5Uyc0HgkVLwT1UmKv
TQdT27iRS
cMiXRv96D
lNBjFvpqQ
EbwBU1HGu
fqm0tssk8
GSbidclWL
OiNyc3Yk8
ieoOJylI1
jrcGNxA67
PRxx8R4GN
pN0H8EJvT
YsrnFLooj
t8GImOq0f
TLEvM3Z8X
get_Result
StringBuilder
<Main>
QM5T1E0N4Ubi37p9p32
ICrRmN09yDoPEMZSCfl
u0htQI0mr5wmBsP9e85
u11COj0FVGRXwyQMaeG
UYWRF50J3LDROjFkAPW
hAjkbv0oF1XigAM5mRf
UnhandledExceptionEventArgs
get_ExceptionObject
IvsQ770LlZQivT1FWBE
MnkHZ208B3Lmuwf2UM7
NjrEe60bMXtBMIOvteN
get_NewLine
RdrEZu0eCDAJRaUtM2e
yaTByI0VFrobAVT1ywL
CcZOZF0a3ueEvYmtbMZ
k3EBda0zlwCI9Oyg44e
oUy9lOrIq6UMTymcpes
Thread
System.Threading
QXJ6GCrO2xGKgNNkrU3
gJBt1xr0oJnVN83qXuW
Pe0AqErrSp2IejW8nxE
FX6MRfrtvDrw8tVX2dj
A3ryfYr5FJYCrmXpRiA
mMygdcrYiQjPs7Cn94j
s1p0OgrGLkZHYKwS0Ne
HojQDFrC4aq5rHbCx0S
<>7__wrap1
<>7__wrap2
<socket>5__4
<e>5__5
UnhandledExceptionEventHandler
add_UnhandledException
jLtHZ3rqSZ4wFkeovsH
get_Out
uSAFRvrWqT1dog6TfuY
SetOut
XdFi2NrpJ9bIbGUEJpC
tsNZK8rRbMTa7al31T5
E6RNsTrw5E7JyuJHuXT
JTfee6rEe0MOZFCfBcD
op_Inequality
w06iBDrgbuSIrffUyYF
qRlwq4riWjXnBC0LVg4
ExpandEnvironmentVariables
veVBCSrj6SAijBCbJrB
Directory
GetCurrentDirectory
VFYUrYr7MOoQ7bEaA8i
dBub4srKAWfUUdGgei7
obtZEsrXb7s622Nm6Za
Exists
Q0Fpc7rsdf3jBp25PVl
CreateDirectory
DirectoryInfo
lMtBdArQN0ttr7XdOcK
GetFileName
nLa0iirZULbvjOmNpLo
qa2Agmrl5tJD9ZER8Fe
o07xavrScCNZav9xKIv
aU9T4OrTbNSvhU5DOH6
tkOcywrAwc9PTb8RXb2
fcGZwOrkTaZXtCqKyn6
FNHoiar1TG4VBIb8uSY
mteTOiryOg3GssYna3H
Ao3bTWr3SQYgplUfsla
Df1lrKrxqfJxaE1gq4G
UH5QISrULaL4ZbcbGJJ
D2FLZQr6anGYQe5v3V8
TOt3PwBcX
originalOut
get_Encoding
GetCapturedOutput
ClearCapturedOutput
sRLkePru0NUQUJOls19
LZfpZbrDBSupo2Wevp8
UKbG7KrvmXnSKA8kNAD
EU8kDMrfZZJnsUb0PuC
H5YaxCr4WyQFHg0cHv9
cljtK8r25fxulDAmptU
Append
a1cqYPrBb3td9cVnhnp
z8IhM7rd0KCn6At21iS
AppendLine
e8JtCnrh3baStttYJ3u
HPEnCErcwee5S7ckg6B
IDiqPR1IH
IsUserAnAdmin
shell32.dll
xRrW3yrN2
GetForegroundWindow
user32.dll
tx5R3uOxM
GetWindowText
j9WgqSASo
GetWindowTextLength
XSX1SxHq6
GetWindowThreadProcessId
pArUFP6ey
GetLastInputInfo
User32.dll
myJcDJxDb
CloseHandle
GetCaptionOfActiveWindowAsync
GetCaptionOfActiveWindow
IsAdmin
GetAntivirus
ManagementObjectSearcher
System.Management
ManagementObjectEnumerator
ManagementObjectCollection
GetWindowsVersion
ManagementObject
DriveInfo
GetHash
strToHash
MD5CryptoServiceProvider
ConnectAndSetupAsync
RemoveStartup
executablePath
Uninstall
AddToStartupNonAdmin
AddToStartupAdmin
GetIdleTimeAsync
GetIdleTime
Marshal
SizeOf
T487rgrnCyHyk2rG5y5
GetProcessById
VvGA46rMKD2fnfUhdhq
NCx0PGr91MCHrO48ZVF
get_ProcessName
OGep0ZrmLKaTT6hXZwk
XaHCFfrN5ohfUOjNdOD
Component
System.ComponentModel
kkDlxTrHf67bHserYB2
zPsPR1rPPr67XVUnpYE
ISYeNUrFAVnWRZnns0X
get_MachineName
KQoKjBrJAHZkBuPSp0U
XgW5jjroPiBK3swm5qJ
eVnBo6rLPoTPtLGp90P
ManagementBaseObject
fEF3a1r8avHXG2s64No
GetPropertyValue
jQ8cxqrbFMDI6wIBKjq
Pu9bkhreoK7IyIA5jGW
mi6GhcrVkvBL8TkOIny
yc5qZGra2xr5km0rau2
get_Count
Fv2V8Jrz0UHJ6okIAp2
oLCx5JtIfJK9pgHyj4Z
X4MXKJtOf6ICeJ5s6dw
get_ProcessorCount
suvtrCt0mSGQJHRm3lW
LyiNpHtrcfGqN78XZw6
get_OSVersion
OperatingSystem
fKn7YLttfhGqoNC5lWb
get_SystemDirectory
tD1CSFt54B5V5t09Rx2
GetPathRoot
etenrytY9MgW8rJhRE0
get_TotalSize
KNYremtGvhY0u5KYI8k
ix15m0tCpd4LIQTfUpx
abSs93tUwiWyFUc7CBd
get_ASCII
DIDvnSt6WQwrhZJm7lQ
cgLatJtqJrdiLXBOl3m
HashAlgorithm
ComputeHash
np2QEotW1O34k8plAbq
eCwZGNtpxNjsOJaAIZh
Substring
mpy9PYtRh8WrjHhIdRK
ToUpper
dSbEw6twG8CePLa7x8u
LbAivPtEerQILZvc2yC
get_TickCount
e5PfGFtgR7C0eCssygx
WejsP7tiDp4UqxdDR34
FYoNv73kK
xGqZIlorm
<>9__8_0
Func`1
<>9__20_0
<GetCaptionOfActiveWindowAsync>b__8_0
<GetIdleTimeAsync>b__20_0
RvNSIVtsFlweruNWFkR
VcNpcJtKchn5iR3dMHm
SRPcdstXckK605CcVs7
BwumV9tQLibdZrLRG8O
K6tRIGtZKwRELJ1s4Ca
aoDxHHtlTedEPOcSSOV
<RemoveStartup>b__0
RegistryKey
Microsoft.Win32
IndexOf
FU6HbWtAOSc5DJigu9M
xwxsKmtkb6A7gcsQVeN
h0OYAetSgLpKksCfQVm
Wg1SPdtTugWNkpStgRm
pQGMVst1mDDyRUjsT60
hSsTcytyispQYh18e1n
get_StartInfo
ProcessStartInfo
xEKn77t32xx43nRWYG2
set_FileName
E9bSbWtx9CJKO9Mgojx
set_Arguments
E1286ktvKCTQxunyk0t
set_UseShellExecute
wmyDXOtfMCYdJQNMFIl
set_RedirectStandardOutput
fDtguTtuj1MbZ59efVB
set_CreateNoWindow
a7uVqFtDm0dGKi1IswD
YufLY8t4Y4ItIEVc0bU
get_StandardOutput
StreamReader
cxujNBt2YoxiEqXEphS
TextReader
ReadToEnd
Y0vPV0tB9h70xxFu8ZU
WaitForExit
nD287TtdaEAQavV8aFQ
QbdkY1thxbliCJDnsq5
We6bvJtcVjBHjvyPYFG
Replace
LgT5uHtHqOT6u2M1Zol
StringSplitOptions
P5hGp0tPlbtdgUKByvZ
eMglgatnkP23Cs7U4dq
A7gmXrtMVD01ndYl4NQ
MRt5RHt9wnxtrlUIvaZ
tRhAfvtmGJZWQZ8hRQ0
RegistryHive
RegistryView
OpenBaseKey
IayawDtNml745RXdZX6
OpenSubKey
nbX1H5tF7B3QjXAMrsa
GetValueNames
h3hnsBtJPSZetfVPkeQ
GetValue
fIyxTito6umcoRZoUR9
DeleteValue
L5fDGZtLvGMly96qlY1
<AddToStartupNonAdmin>b__0
nlt90vte5lkfsMVnTgQ
OFcODvtVRgU3MDrq4Wl
gdDb99t8BHGJyVCPUYh
E5kd3FtbMda8suJPjkv
pVyxwPta5wM79bVcD7o
s8M1eUtzgcNm2U5ofdQ
x8yIEj5ICJqytSSvlps
UrYoHs5OCmm6QsVy58Q
SetValue
O34ShV50T1VwT24DjmR
<tempXmlFile>5__2
<process>5__3
lSNd0955MWmr02sVB4J
wLQ7N65YJK8LF2696Bs
GetTempFileName
rIScPT5G8vx4l7NwRyM
WriteAllText
cCI04P5CtUsydAFBNRE
AmPQnW5UYHdrRHhcL0I
EliZ7C56opfZ8PWgtBn
csRnTG5qfIRT8pNMJYY
aABso55W4snApbbXcft
BkjlDe5pO44LIJkuFW4
zrvPHi5RarBiPxTDyMq
WYW9iI5wIeio9I8qwWU
zgsldh5EToCUJG5NUOS
MXak6S5gkl5lKHn8Wfc
aFQFn85iuC7YEoT9uOJ
UcSFt85j4eVIODJ6fGv
gAmXPx57ptJ9lCMxf3N
Delete
dOyvPX5K7M0ifPZ2ZEC
XpUSv85rxQxEmZ4qt2R
lOveHC5tjoH8DStwVu0
aShTbJ5Xt88slTmRWtw
rV3Ryp5scphk3QX46bV
<conn>5__2
mSSJq45Quq5i5VwLhsC
dDT2P35Z8nVnrD58b5y
qAWfkH5liFGJWnDJ5PG
wwA0xq5S2eUcW9EI97t
oZbJib5TQshoOiNUcMU
RF9EVy5Aax7hcXDeqid
Action
ViEnUx5yAyVJ00IgNQP
GAATcs53g64o5f6fSps
EJrwfv5kSaEkamOXVPW
zRrcH151jknnwL4YwSh
Vrr2lY5fLfdYJejweXw
roU6IN5uOyDBtqXB9iK
Ojogeq5DVc0ledAIeBJ
PZ1YfJ54BP8y49H7cxD
tsIoCM52mK37dDEYsop
tMD8J55Bc5uasWTCrR2
Convert
FromBase64String
Mt0UWO5d4Y6Y79bxy4P
ktCQSl5hBeTSIFRaRJo
uHELUB5cYMgNJW87ihg
vaKRC25HY69riJ4K2oP
ProcessWindowStyle
set_WindowStyle
uM1t9t5PhDQ8jXgJh9D
nTC8Xo5neCsEHBRJCbX
VtSJ9j5MgpMtDTw3dT7
gKZblM59M94LuwTc7Ef
n7KDbO5mKEBv25FUL7G
CS52om5xx5cSu1VedmM
dQ71Ga5vwa0ZQoiucbo
1D1CC35EA61331C5A85D2A960611153E37A62DCD916269D6E3B5A0DAC2EF3824
630DCD2966C4336691125448BBB25B4FF412A49C732DB2C8ABC1B8581BD710DD
wh72rWMJj
EILctVaaKkstN
typemdt
FieldInfo
GetFields
get_Assembly
KYBj1D5zWH6MlXwJbRy
Module
ResolveType
zB5yHZYI7x9NCnHQqpG
MemberInfo
get_MetadataToken
Qo9rphYOsf26xSWCsIv
ResolveMethod
lvcbeoY0nyWoH0Ia7pF
Delegate
CreateDelegate
nw3D9pYrBuoG1mdaChY
R3ZYH05Vu75f9IIxSmB
APQniT5aJV58MCTnwQo
JQLP2tYtPfjJmpJEVBy
GCrTyLY5t7IYXxjVL0s
jM3wV1YYFeCWOt6TngV
RuntimeTypeHandle
GetTypeFromHandle
EyoLIVYGMdnsRsOC1lN
get_ManifestModule
object
method
BeginInvoke
callback
EndInvoke
result
TnUhyWCFvg
Xtyhg0N3ZN
pSFhZuNdFf
t34h33cJ3O
aBNhGuwBMF
jeUtYWB2ov
yydh0P2iLW
khateS3Pl6
OgehUsG5Yt
lsfhRCTSi6
rCdhxgtSAM
JEqh2ou0Ik
labh6x5ewi
URVhW4Onr4
w6whzdH5e0
a9PhHOhUlm
VwshB0GkK7
OY4hqSYtNb
B98hik5snd
fEcttcD5o3
guxth4KRmi
Sv3hcxkJ81
RJvhNvMhKK
xXthOIiiMf
Y1ZtPgKtNl
XomtDJI4QN
sVlh1B97Cw
SortedList
System.Collections
Hashtable
Y33ctVa5KYCbg
u5W6EPKV3
UInt64
yQAzq33Sg
lN1he2drdn
KdGhh3LVyR
VF0htiA4YJ
drThYZrubS
yVLhPBl814
IuQhDSS2pt
AesManaged
RijndaelManaged
c4qhmJIBV5
EuFhd4vRZN
LnshpHPCPc
BinaryReader
CZfhSRvYqD
get_Unicode
xYqhJvPaxU
RtlZeroMemory
aAahKU1APS
VirtualProtect
Kprh5IOcjY
FindResource
kxHhFl1342
VirtualAlloc
C3dhlGHeJ0
get_Size
ReadInt32
ReadInt64
AllocCoTaskMem
WriteIntPtr
WriteInt32
X1uh8EkdRr
jNph4xm2Cn
RSACryptoServiceProvider
set_UseMachineKeyStore
WjKhao4tyo
QE7hwSCefM
Version
IEnumerator
ProcessModule
ProcessModuleCollection
ToInt32
ToInt64
ModuleHandle
GetField
PhXhMvtt6b
GetName
get_CodeBase
GetProperty
PropertyInfo
zRUhAafDJf
LoadLibrary
kernel32
prqhVvo7l0
GetProcAddress
RTNhsDObe6
WriteProcessMemory
xfEhCTGunk
ReadProcessMemory
oEXhf5IpPw
SfYh7Iwn0n
OpenProcess
UfuhE6TaSc
wnvh92I0IN
FileStream
FileMode
FileAccess
FileShare
get_Length
ClThbTeusk
raehuiFLBA
p5IhQb3TQM
NVmhLudsKX
x2VhoklWiS
atGhn0cZjI
fqPhIk3aHO
v3Bhv9MRKm
ncGhTYv4oV
auchXXQx4u
wH1hjsJubu
pElNrYcUilSnU7iR4f
twqFerdjuCiuFVFgyT
GetManifestResourceStream
zhvUo2xx4FWdxOQEcl
get_BaseStream
Al5VToEpu4rHjqTbHk
set_Position
VjONfbXdsowhCjEySD
QXitHCmo3aoeHb265L
uOUS9hSC9SYk7f0ZQN
ReadBytes
X3UC7gACrl2JWPYEdW
SlInpgfd34FwOw6dNw
Reverse
DgXRP9bXMZLQtslCZI
X4K0rnGjTa8TWXmacJ
GetPublicKeyToken
M32CyGugjT4fLNyxCM
hcBcsyYRM1Bxdfdbqb
hTIeSZlPeEUelOp8LC
qJL75QPRG29xMpynye
CZFdVgDFLyC4SMPX1S
cs3OInWsjEV2FUjwDT
ReadIntPtr
RiM4FhbYTndoZR2R2t
JpREodBwAon8owtElG
AdQNyML7KYWP2KpCg3
gV6Lx8dXcgYR5SHGxp
SEImffrl0r0aj6I2MA
WriteInt64
NbDJYtVvP1flAIUp5x
aluul3NIDc7Js1qltp
iSDhxfUplkUubUgZnb
kKvFTaml54fPDs9jP9
fsn5dckSIemFWF2IkQ
get_MainModule
lUlxPiF67Ue3N08Are
get_BaseAddress
p1gujsZdZFf8Uw63AS
yPXBBi0Dp1PCgEnS51
KFwH0cEXjiTb0chyWX
BpRp3ICEuxH9q6Fg2F
cH2TJ2uQUlF9uDlh06
get_Modules
M6BSwr4meeTvEkO57q
ReadOnlyCollectionBase
TjOGgGHX9epeOS2XpN
g7iZvrp4X7Xpp67MQe
get_ModuleName
GwWxeC1V3CkLK8pAQy
ToLower
d3qsDHtJbA3YhaMBFk
P1Y9owOIbIIXWdxnmy
get_FileVersionInfo
FileVersionInfo
aGI5I3h9QOPjSu8nCb
get_ProductMajorPart
tsjAki9jhJbeDl68Ap
get_ProductMinorPart
IgiiKvITCgqkvCLfWJ
get_ProductBuildPart
vF41fJGnQDJC4oSXcK
get_ProductPrivatePart
fjc4PZnp7rVFTSe1GQ
op_GreaterThanOrEqual
aWjdHk2qGYlj0AHXoy
op_LessThan
cHiCIUqBT18JvMrNWx
JBWwwEonxf60T7FDfH
xiQL6X3gefxtUTvL7b
zkDlFFYgCLWnaVcsSp
aSGD0S7AyIEWAhsV4y
JsJ0v6X6RajRfyPPSY
oPc7xOKE0uAXsX2nlJ
I8p7chffxA3dUxv74b
pB1sFdlss4u6rQr3oZ
l5ET7UiP8dmIjnIrvu
VtwuBYQ1hSWJFWU2qA
uDRK6ARTZrccWJehrW
dLtUGQsVJtlZMKX1t8
GetModules
LogpxlwmwOmPR5UoVK
GetHINSTANCE
oNQBBqxTGmTurQeskT
NGAOoxDMk5JN67aTaZ
tLMFFDSudP3Vt1JC7d
BjFZS6yXsEgfh2R05C
get_Id
Nq5imN51dlyDJpJtnK
HD8KiJ6QpYb0aROE6p
get_Position
xC1Zu6Jx6kH0dAGCPJ
GlmGxsPlZJ157N86or
ONgbsZg5s5ks0TotiK
aY9rNmMoZ3Xkd3trD4
g9dyiraVVIQKpPpb8S
p24rN18GIqu1ZeyPyy
zR3qU6T8V1VwHlBhlC
KT5lpfAhJAP5D4GiAq
FFLuIWekmmnpS3svQS
HEQkDpzVD2hGT74frL
svIwIDjcPoOOVpdfFoR
GetFunctionPointerForDelegate
CqG7vNjjYxEkTFYtfZq
get_ModuleMemorySize
eQIjlrjvmVK8JFW9pNp
get_EntryPoint
MktrNwjWMZ76tqhDhJW
xHfb3yjbqdDPYDJy9ws
get_Method
w3tpbyjBluLHtxmLrss
wDongljLghVZDdtyned
GetParameters
ParameterInfo
VY7wbwjd7DNnMFCCeLe
LSjnN2jrU7uPEBmifVv
get_ModuleHandle
RJrKSajV3HFFvi9T52u
n9ZXMljNhfep3aj7BkI
E1i9ydjUkvrq0d9K2Es
iqaJZljmUrM10xihesS
JIBtwVjkN0DshX4cEdi
wRoFIWjFFQO0QLk5OAT
M4VMMAjZ898ME6oMMqC
PrepareDelegate
WlTRbGj0WqgQqCvT1rg
RuntimeMethodHandle
get_MethodHandle
zvO8wmjEqaMTv9UpjAG
PrepareMethod
tRBU2JjCiCVvlvsERj3
Wn5w8gjuIEWC7uPEFyj
E0VZ6Wju4rk5SsKdxK
JLAKX6vWIeRIigiZLo
a9xYKnY6KOjabX9c61f
OlTZcEYqH0NcIsGvmn5
v3bfZkYWdvwAaX57mKM
gKKtpoYpoXlYbivy8wa
ce4DmfsmSrOT856tDgfrkMb
VSwtm8w4Ws
HBnv9HYEr89cMgHHWvd
PI5ELLYghjBVophUp6R
TmelJIYiC2H2WCTuhlE
e2DW3kYjNuJI1NcqoKw
ToBase64String
NJyr5oY7stCt9u27Km4
VVp1MIYK9tDQsZmFqQ0
EoZ9BrYXRYykCXv2Xbp
eBG19ZYsUj5gQIgGifL
coXbgCYQdNC6G1hxoFM
g7WlujYZgn6NOo9ZBy9
xhHQcDYl8MtPorrmUeW
QGt3VOYSMSUbXm301e0
QogCAuYTlSJq9do0f5D
aGnQkMYAgBLP5pegU2b
JWHH6uYks9HSggq7FNN
sT1IiRY1oJpWUHMEKuR
cj96DlYy7HsDmmThq2o
sEHQH6Y3Pnef8oxEN3D
HaMUfVYxOwsHHHjtarv
knlKyLYvSdjlOZIlZku
classthis
nativeEntry
nativeSizeOfCode
VnCtdv2t7j
IKatrRXPAk
value__
tQFtk1jv3Q
BnNctVazjOb3T
Wbout7YdLjkmS23PKCT
$$method0x6000007-1
$$method0x6000020-1
$$method0x6000020-2
$$method0x600002a-1
$$method0x600002a-2
$$method0x6000039-1
$$method0x600005f-1
$$method0x600027d-1
8XUxUrbtT63MnUePdO.m4ctg1nQ5TL6skLynE
0OXG506wQBj9ewb6Uq.9AN2LuYMYaiFutrVNp
xeno rat client.g.resources
aR3nbf8dQp2feLmk31.SplashForm.resources
aR3nbf8dQp2feLmk31.lSfgApatkdxsVcGcrktoFd.resources
AsyncStateMachineAttribute
CompilerGeneratedAttribute
DebuggerHiddenAttribute
UnmanagedFunctionPointerAttribute
CallingConvention
FlagsAttribute
WrapNonExceptionThrows
xeno rat client
Copyright
2023
$310fc5be-6f5e-479c-a246-6093a39296c0
1.0.0.0
.NETFramework,Version=v4.8
FrameworkDisplayName
.NET Framework 4.8
:pnimXfnbT17qsyJZHQ.HkfnBpKeqgnbsoaJqO+<DllNodeHandler>d__3
9nviGRbMtZCV5jxsj4o.qnyHx0PchbFDF8oqXV+<CreateSubSock>d__3
:nviGRbMtZCV5jxsj4o.qnyHx0PchbFDF8oqXV+<GetAndSendInfo>d__5
8nviGRbMtZCV5jxsj4o.qnyHx0PchbFDF8oqXV+<Type0Receive>d__6
8nviGRbMtZCV5jxsj4o.qnyHx0PchbFDF8oqXV+<Type1Receive>d__7
4nviGRbMtZCV5jxsj4o.qnyHx0PchbFDF8oqXV+<setSetId>d__8
8nviGRbMtZCV5jxsj4o.qnyHx0PchbFDF8oqXV+<Type2Receive>d__9
6nviGRbMtZCV5jxsj4o.qnyHx0PchbFDF8oqXV+<DebugMenu>d__10
;nviGRbMtZCV5jxsj4o.qnyHx0PchbFDF8oqXV+<SendUpdateInfo>d__11
&xeno_rat_client.Node+<Disconnect>d__10
/xeno_rat_client.Node+<ConnectSubSockAsync>d__11
(xeno_rat_client.Node+<ReceiveAsync>d__13
%xeno_rat_client.Node+<SendAsync>d__14
-xeno_rat_client.Node+<AuthenticateAsync>d__18
=xeno_rat_client.SocketHandler+<RecvAllAsync_ddos_unsafer>d__4
;xeno_rat_client.SocketHandler+<RecvAllAsync_ddos_safer>d__5
-xeno_rat_client.SocketHandler+<SendAsync>d__9
1xeno_rat_client.SocketHandler+<ReceiveAsync>d__10
1TZa6jM5RBTyYF0gU4H.qrxY6Q0l3PlUsWbdqB+<Main>d__11
9xeno_rat_client.Utils+<GetCaptionOfActiveWindowAsync>d__8
1xeno_rat_client.Utils+<ConnectAndSetupAsync>d__15
*xeno_rat_client.Utils+<RemoveStartup>d__16
&xeno_rat_client.Utils+<Uninstall>d__17
1xeno_rat_client.Utils+<AddToStartupNonAdmin>d__18
.xeno_rat_client.Utils+<AddToStartupAdmin>d__19
-xeno_rat_client.Utils+<GetIdleTimeAsync>d__20
p6y4gg8Q4XXI41Ijcu.T62COgj3R5j0XfUWV6+BrLEOweEvPMZ4ehneT+TjAIso9L6ocQeAr9Jl`1[[System.Object, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]][]
oX7`|,
%R3pkO
YAhj`$
WAK[JU
b17Bm\8
RZPxCA
;;,7/)
I6&[$!0n
HsW<Dy
Bzm[E
4H@e'-
8|F0=Y
J(x~,
-<s:2Eq
4;VJT,
aSbNolWx
1jMt}j
5F|{L~
K1Z8_Z
7&:Jd9603
QSH$Yj>
!b"DR
U|9-|\e
7=xq;D
dMW/Q[
*,6X8+
3l(kU6
u:E8ACv\aK
@5o_s5
m\\8B2P
_p411%r
> A)v}
yjS)A%
@9<n{'5y
7)`h;
Q<zhJ&
j+xCH+
!A.eN&
12af9xswK
q/s+K=H
Ir&j-y
4E5Ub@
:l^S.G
NHn Nu
:/XZ,_s
1(d)|o
:| zS{
J0&o(Nv
/U3?`%
riwUg\d
KsDveX
g(j&~S
|b aBx[:
/z_OP8d
b5a&6/@
U{-'h?qm.!1F)
kw8;Z~
jo|^gy
+C\<+\
Z:kq5G"
_9[so#gN
x5y*}U
7/pH1Ct^
'DRxC>
0GQN"<"
*}st#g
V5]{J"
yC.1Exlj
]#g=.?yx
+?q*AL{-
*(Jl1L
9wFsfj
lzERt_
!WTTLlp
<:xYct$
>YUR{Um
WnuYum
r@"HPX
=]U@X.p
X;2tB$
(tMm~EB
e^lE-.dw
sR3B|U
Kq"F"9
D_#z}T"
R3{?FG
f}KARn
__M4]U
W&^[T7
CWx>w{
uFh=>>
EN6z2y
e<OKxf
O\'j;a
$0:Oi/
F({>z<
;Jo(M\ <.wn,9
?zYSrVM)G
F2eB#
<-acS1
73A=$G
[DhT*u
tE#+G}|p
|k-I|1
{52j"-w
YT?3jn
L?PVd5
]^clcM
_|j)po$P
d}SX$c
\wX]^2
sy#R#$
d{uW@
FR?1L`
x;[\&+
Tr^kY6L
+-PU_^
~M{6L.
5JbXE_
~V{/@l
&+-^or
IB=KXp
2)={l~
=6A#js
$7"W|d o
\`*'Mb
7b3'w44?_
:%dFT;p7
Y>qLYv
V: >_8
Ewv>$3
ZxgRs/
y$Mj/oO
jg;734
7)g$@a
).!]A1
?>y!_U
UDwqieH
>-c\vd+G|
RTChDp
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aBj
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3ajSystem.CodeDom.MemberAttributes, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089mSystem.Globalization.CultureInfo, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089fSystem.Drawing.Size, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
ISystem, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.CodeDom.MemberAttributes
value__
System.Globalization.CultureInfo
m_isReadOnly
compareInfo
textInfo
numInfo
dateTimeInfo
calendar
m_dataItem
cultureID
m_name
m_useUserOverride
System.Globalization.CompareInfo
System.Globalization.TextInfo%System.Globalization.NumberFormatInfo'System.Globalization.DateTimeFormatInfo
System.Globalization.Calendar
System.Globalization.CompareInfo
m_name
win32LCID
culture
m_SortVersion
System.Globalization.SortVersion
System.Globalization.TextInfo
m_listSeparator
m_isReadOnly
m_cultureName
customCultureName
m_nDataItem
m_useUserOverride
m_win32LangID
%System.Globalization.NumberFormatInfo"
numberGroupSizes
currencyGroupSizes
percentGroupSizes
positiveSign
negativeSign
numberDecimalSeparator
numberGroupSeparator
currencyGroupSeparator
currencyDecimalSeparator
currencySymbol
ansiCurrencySymbol
nanSymbol
positiveInfinitySymbol
negativeInfinitySymbol
percentDecimalSeparator
percentGroupSeparator
percentSymbol
perMilleSymbol
nativeDigits
m_dataItem
numberDecimalDigits
currencyDecimalDigits
currencyPositivePattern
currencyNegativePattern
numberNegativePattern
percentPositivePattern
percentNegativePattern
percentDecimalDigits
digitSubstitution
isReadOnly
m_useUserOverride
m_isInvariant
validForParseAsNumber
validForParseAsCurrency
Infinity
-Infinity
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Size
height
_CorExeMain
mscoree.dll
moom825
Rfhn M
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
)Z71ZDAZ_QZ_YZ_aZ_iZ_qZ_yZ_
.Sd.[d.
.;d.CJ.+d.3d
! " # $ % & ' ( ) * + -,.,1032435262728292<;=;>;?;@;A;B;
System.Security.Cryptography.AesCryptoServiceProvider
System.Security.Cryptography.CryptoConfig
get_AllowOnlyFipsAlgorithms
8XUxUrbtT63MnUePdO.m4ctg1nQ5TL6skLynE
{11111-22222-50001-00000}
GetDelegateForFunctionPointer
clrjit.dll
0OXG506wQBj9ewb6Uq.9AN2LuYMYaiFutrVNp
System.Reflection.ReflectionContext
System.Reflection.RuntimeModule
m_pData
file:///
Location
{11111-22222-20001-00001}
{11111-22222-20001-00002}
{11111-22222-40001-00001}
{11111-22222-40001-00002}
{11111-22222-50001-00001}
{11111-22222-50001-00002}
XenoUpdateManager
$this.Icon
$this.SnapToGrid
$this.TrayLargeIcon
$this.Icon
$this.Locked
$this.DrawGrid
progressBar1.Modifiers
$this.Localizable
$this.Language
$this.GridSize
$this.TrayHeight
progressBar1.Locked
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
Xentec
FileDescription
Client
FileVersion
3.2.1.0
InternalName
xeno rat client.exe
LegalCopyright
Copyright
2023
LegalTrademarks
Xentec
OriginalFilename
manager.exe
ProductName
manager
ProductVersion
1.2.3.0
Assembly Version
1.2.3.0
No antivirus signatures available.
No IRMA results available.