Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.SetHandler source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.GetMemberRefProps source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.EnumTypeRefs source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.SetParent source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.ApplyEditAndContinue source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: System.Collections.Generic.IEnumerator<dnlib.DotNet.Pdb.PdbScope>.Current source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.DefineModuleRef source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.GetNameFromToken source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.DeleteFieldMarshal source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.FindField source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.EnumMembers source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.DeleteClassLayout source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.IsValidToken source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.Merge source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.FindMemberRef source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.GetParamProps source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.SetParamProps source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.GetSaveSize source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.FindTypeRef source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.ResetEnum source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.EnumProperties source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.GetMethodProps source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.EnumMembersWithName source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.SetCustomAttributeValue source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.DefineCustomAttribute source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.EnumMethodImpls source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.DefineEvent source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.GetCustomAttributeByName source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.DefineMethod source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.TranslateSigWithScope source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.DefineUserString source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.Save source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.GetTypeSpecFromToken source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.SetPermissionSetProps source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.GetNativeCallConvFromSig source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.CountEnum source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.EnumMethodSemantics source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.EnumFields source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.EnumMethods source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.GetTypeRefProps source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.GetSigFromToken source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.EnumTypeSpecs source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.CloseEnum source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.GetModuleRefProps source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.SaveToMemory source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.DefineTypeRefByName source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.GetScopeProps source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.FindMember source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.SetPropertyProps source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.EnumParams source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.MergeEnd source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.GetEventProps source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.EnumCustomAttributes source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.SetFieldProps source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.EnumModuleRefs source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: System.Collections.Generic.IEnumerator<dnlib.DotNet.Pdb.PdbScope>.get_Current source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.GetCustomAttributeProps source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.GetFieldProps source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.DefineParam source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.DeleteToken source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.GetClassLayout source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.DefineNestedType source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.EnumUnresolvedMethods source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.EnumPermissionSets source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Managed source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.SetRVA source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.GetModuleFromScope source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.DefineMethodImpl source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.DefinePinvokeMap source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.DefineSecurityAttributeSet source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.SetClassLayout source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.DefineMemberRef source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.GetPermissionSetProps source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.SetTypeDefProps source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.DefineProperty source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.SetFieldRVA source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.FindTypeDefByName source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.SetModuleProps source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.EnumFieldsWithName source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.EnumMemberRefs source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.ResolveTypeRef source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.SaveToStream source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.GetMethodSemantics source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.GetTypeDefProps source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.FindMethod source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.GetNestedClassProps source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.DeletePinvokeMap source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.GetTokenFromTypeSpec source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.SetMethodImplFlags source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.GetPinvokeMap source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.SetPinvokeMap source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.EnumSignatures source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.SetFieldMarshal source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.EnumUserStrings source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.GetRVA source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.DefinePermissionSet source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.SetMethodProps source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.GetPropertyProps source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.GetUserString source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.GetInterfaceImplProps source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.GetFieldMarshal source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.DefineTypeDef source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.EnumTypeDefs source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.DefineImportMember source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.EnumInterfaceImpls source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.GetMemberProps source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.DefineImportType source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.GetTokenFromSig source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: System.Collections.Generic.IEnumerable<dnlib.DotNet.Pdb.PdbScope>.GetEnumerator source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.EnumEvents source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.GetParamForMethodIndex source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.DefineField source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.EnumMethodsWithName source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataImport.IsGlobal source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: dnlib.DotNet.Pdb.Dss.IMetaDataEmit.SetEventProps source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: |
Binary string: H:\New Private Panell Src 3.0 New\New Private Panell Src 3.0 2025\New Private Panell Src 3.0\dnlib-fuscator-master win7\src\obj\Debug\dnlib.pdb source: powershell.exe, 00000002.00000002.1364665086.000002463BCE0000.00000004.08000000.00040000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
Source: powershell.exe, 00000002.00000002.1264396222.0000024623A4E000.00000004.00000800.00020000.00000000.sdmp |
String found in binary or memory: http://192.3.176.154 |
Source: powershell.exe, 00000002.00000002.1264396222.0000024623A4E000.00000004.00000800.00020000.00000000.sdmp |
String found in binary or memory: http://192.3.176.154/xampp/glo/KBV.txt |
Source: powershell.exe, 00000002.00000002.1264396222.00000246237E4000.00000004.00000800.00020000.00000000.sdmp |
String found in binary or memory: http://198.46.176.133 |
Source: powershell.exe, 00000002.00000002.1264396222.00000246237E4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.1363407451.000002463B8A0000.00000004.00000020.00020000.00000000.sdmp |
String found in binary or memory: http://198.46.176.133/Upload/vbs.jpeg |
Source: RegAsm.exe, 00000004.00000002.2488829216.000000000129E000.00000004.00000020.00020000.00000000.sdmp |
String found in binary or memory: http://geoplugin.net/ |
Source: RegAsm.exe, RegAsm.exe, 00000004.00000002.2488829216.00000000012A3000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000004.00000002.2488829216.000000000122B000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000004.00000002.2488829216.000000000126C000.00000004.00000020.00020000.00000000.sdmp |
String found in binary or memory: http://geoplugin.net/json.gp |
Source: powershell.exe, 00000002.00000002.1328673356.00000246335CF000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.1328673356.00000246343D8000.00000004.00000800.00020000.00000000.sdmp, RegAsm.exe, 00000004.00000002.2484502723.0000000000400000.00000040.00000400.00020000.00000000.sdmp |
String found in binary or memory: http://geoplugin.net/json.gp/C |
Source: RegAsm.exe, 00000004.00000002.2488829216.000000000122B000.00000004.00000020.00020000.00000000.sdmp |
String found in binary or memory: http://geoplugin.net/json.gpSystem32 |
Source: RegAsm.exe, 00000004.00000002.2488829216.000000000126C000.00000004.00000020.00020000.00000000.sdmp |
String found in binary or memory: http://geoplugin.net/json.gpl |
Source: RegAsm.exe, 00000004.00000002.2488829216.000000000126C000.00000004.00000020.00020000.00000000.sdmp |
String found in binary or memory: http://geoplugin.net/json.gpw |
Source: powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
String found in binary or memory: http://nuget.org/NuGet.exe |
Source: powershell.exe, 00000002.00000002.1264396222.00000246237E4000.00000004.00000800.00020000.00000000.sdmp |
String found in binary or memory: http://pesterbdd.com/images/Pester.png |
Source: wscript.exe, 00000000.00000003.1207989484.000001C7DAF7D000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000003.1208263755.000001C7DAF85000.00000004.00000020.00020000.00000000.sdmp |
String found in binary or memory: http://schemas.m0L |
Source: powershell.exe, 00000002.00000002.1264396222.00000246235C1000.00000004.00000800.00020000.00000000.sdmp |
String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name |
Source: powershell.exe, 00000002.00000002.1264396222.00000246237E4000.00000004.00000800.00020000.00000000.sdmp |
String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.html |
Source: powershell.exe, 00000002.00000002.1264396222.00000246235C1000.00000004.00000800.00020000.00000000.sdmp |
String found in binary or memory: https://aka.ms/pscore68 |
Source: powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
String found in binary or memory: https://contoso.com/ |
Source: powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
String found in binary or memory: https://contoso.com/Icon |
Source: powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
String found in binary or memory: https://contoso.com/License |
Source: powershell.exe, 00000002.00000002.1264396222.00000246237E4000.00000004.00000800.00020000.00000000.sdmp |
String found in binary or memory: https://github.com/Pester/Pester |
Source: powershell.exe, 00000002.00000002.1328673356.000002463362F000.00000004.00000800.00020000.00000000.sdmp |
String found in binary or memory: https://nuget.org/nuget.exe |