DotDumper 1.1-stable by Max 'Libra' Kersten (@Libranalysis) [02-02-2025 16:44:40] Hook for System.Void Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() hit! --------StackTrace information-------- at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- [DotDumper or DotNet Framework related assembly] -------------------------------------- -------------Return value------------- Type: "null" Name: "ReturnValue" Value: "null" -------------------------------------- [02-02-2025 16:44:41] Hook for System.Object System.Resources.ResourceManager.GetObject(System.String name, System.Globalization.CultureInfo culture) hit! --------StackTrace information-------- at Krbgjwkkk.Containers.ProcessorGlobalContainer.ResolveVisitor() at Krbgjwkkk.Containers.ClientGlobalContainer.PushBase() at Krbgjwkkk.Containers.ClientGlobalContainer.ChangeBase() at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Krbgjwkkk Version: 1.0.0.0 MD-5: ae5e7ba3510eb0929a573c831177443a SHA-1: 860292d7189eeab350530e0a214f95d974f9aa4e SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 SHA-384: 16a116465f6e969bb43834a9899253207e54dcc79ef94e0e24159015cccc59168ceee4219941a19fc607397472c5a0d2 SHA-512: 48d7d30f1192d317750d3203a61d8bfb945d56afe2083d2e13f9fe7dbb3317319182d98b333e8e589fd898deb89fb0b21719dc1f4f48d5409bc2ce8fb9f004fc ImportHash: f34d5f2d4577ed6d9ceec516c1f5a744 Resource names: Ukqvys.Properties.Resources.resources   �  ​      -------------------------------------- ----Function argument information----- Type: "System.String" Name: "name" Value: "Oetwuwbfch" Type: "System.Globalization.CultureInfo" Name: "culture" Value: "null" -------------------------------------- -------------Return value------------- Type: "System.Byte[]" Name: "ReturnValue" Value: "DotDumper::bd992befb5f19bef2a2690ea6372447b674bd26b794dad996d71c6ef12f7574f" -------------------------------------- ------------Related files------------- MD-5: "f2aa1fe7545f21d1bef011cdbc1f85cf" SHA-1: "5e683f8267a36a607931c259dd543cbcc0ffcb40" SHA-256: "bd992befb5f19bef2a2690ea6372447b674bd26b794dad996d71c6ef12f7574f" SHA-384: "ffad209f116ba8f4751beb10963ca6ed7b24938577fa2212a770dedb9e39e2b8fbdae0d95acdc59e9f9a331d66367eca" SHA-512: "be99c909573572f1ceb46265bb799bf151a6661a9eccc5db194367e7354501f4f333c75d6979c94907e4d891624c85347b270304e63373dedee3170ba8cf5dd9" -------------------------------------- [02-02-2025 16:44:42] Hook for System.Byte[] System.Convert.FromBase64String(System.String s) hit! --------StackTrace information-------- at Krbgjwkkk.Containers.ClientGlobalContainer.ChangeBase() at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Krbgjwkkk Version: 1.0.0.0 MD-5: ae5e7ba3510eb0929a573c831177443a SHA-1: 860292d7189eeab350530e0a214f95d974f9aa4e SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 SHA-384: 16a116465f6e969bb43834a9899253207e54dcc79ef94e0e24159015cccc59168ceee4219941a19fc607397472c5a0d2 SHA-512: 48d7d30f1192d317750d3203a61d8bfb945d56afe2083d2e13f9fe7dbb3317319182d98b333e8e589fd898deb89fb0b21719dc1f4f48d5409bc2ce8fb9f004fc ImportHash: f34d5f2d4577ed6d9ceec516c1f5a744 Resource names: Ukqvys.Properties.Resources.resources   �  ​      -------------------------------------- ----Function argument information----- Type: "System.String" Name: "s" Value: "2JJe5bzZ4EZVNYp0vtuPBw==" -------------------------------------- -------------Return value------------- Type: "System.Byte[]" Name: "ReturnValue" Value: "216, 146, 94, 229, 188, 217, 224, 70, 85, 53, 138, 116, 190, 219, 143, 7" -------------------------------------- [02-02-2025 16:44:42] Hook for System.Byte[] System.Convert.FromBase64String(System.String s) hit! --------StackTrace information-------- at Krbgjwkkk.Containers.ClientGlobalContainer.ChangeBase() at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Krbgjwkkk Version: 1.0.0.0 MD-5: ae5e7ba3510eb0929a573c831177443a SHA-1: 860292d7189eeab350530e0a214f95d974f9aa4e SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 SHA-384: 16a116465f6e969bb43834a9899253207e54dcc79ef94e0e24159015cccc59168ceee4219941a19fc607397472c5a0d2 SHA-512: 48d7d30f1192d317750d3203a61d8bfb945d56afe2083d2e13f9fe7dbb3317319182d98b333e8e589fd898deb89fb0b21719dc1f4f48d5409bc2ce8fb9f004fc ImportHash: f34d5f2d4577ed6d9ceec516c1f5a744 Resource names: Ukqvys.Properties.Resources.resources   �  ​      -------------------------------------- ----Function argument information----- Type: "System.String" Name: "s" Value: "BeLEgZC9R9g=" -------------------------------------- -------------Return value------------- Type: "System.Byte[]" Name: "ReturnValue" Value: "5, 226, 196, 129, 144, 189, 71, 216" -------------------------------------- [02-02-2025 16:44:42] Hook for periodic assembly dumping hit! ------------Related files------------- MD-5: "08678e46e2aa243347f1ac7bf6298d01" SHA-1: "13ecddef498c91d0c3abedd3927beea9afab8fac" SHA-256: "2cac5480b9d27bde0a6bd018a68b4de846750c590fb5723e5356a30f04bf9adf" SHA-384: "030de8621f622baf2f89553b7979c3681e035657d59378446749833c743976c8d13483b6ff954276a7d04850bcca5750" SHA-512: "28ab63895fbb0938e564219e4da53b2f1d5b94c9f7f5dacb1e8f945bac9926ca6cef01baff96b89ae79b1765a4b4eecbbf80bfd94355d6ca1303cace9ef773c1" ImportHash: "dae02f32a21e03ce65412f6e56942daa" -------------------------------------- [02-02-2025 16:44:43] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at lkoTTTQYZBOCpESIXml.HIjyV0QGyECLeQFcXt6.b5tX06VL4oenJPdpvZU() at lkoTTTQYZBOCpESIXml.HIjyV0QGyECLeQFcXt6.HvrQtcQDYM() at .cctor() at System.Delegate.BindToMethodName(Object target, RuntimeType methodType, String method, DelegateBindingFlags flags) at System.Delegate.CreateDelegate(Type type, Type target, String method, Boolean ignoreCase, Boolean throwOnBindFailure) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: 2cac5480b9d27bde0a6bd018a68b4de846750c590fb5723e5356a30f04bf9adf) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 08678e46e2aa243347f1ac7bf6298d01 SHA-1: 13ecddef498c91d0c3abedd3927beea9afab8fac SHA-256: 2cac5480b9d27bde0a6bd018a68b4de846750c590fb5723e5356a30f04bf9adf SHA-384: 030de8621f622baf2f89553b7979c3681e035657d59378446749833c743976c8d13483b6ff954276a7d04850bcca5750 SHA-512: 28ab63895fbb0938e564219e4da53b2f1d5b94c9f7f5dacb1e8f945bac9926ca6cef01baff96b89ae79b1765a4b4eecbbf80bfd94355d6ca1303cace9ef773c1 ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:44:44] Hook for System.Delegate System.Runtime.InteropServices.Marshal.GetDelegateForFunctionPointer(System.IntPtr ptr, System.Type t) hit! --------StackTrace information-------- at lkoTTTQYZBOCpESIXml.HIjyV0QGyECLeQFcXt6.BBCQruWJXT(IntPtr , Type ) at lkoTTTQYZBOCpESIXml.HIjyV0QGyECLeQFcXt6.tZGax7iwYgp945MuEs0(IntPtr , Type ) at lkoTTTQYZBOCpESIXml.HIjyV0QGyECLeQFcXt6.HvrQtcQDYM() at .cctor() at System.Delegate.BindToMethodName(Object target, RuntimeType methodType, String method, DelegateBindingFlags flags) at System.Delegate.CreateDelegate(Type type, Type target, String method, Boolean ignoreCase, Boolean throwOnBindFailure) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- ----Function argument information----- Type: "System.IntPtr" Name: "ptr" Value: "1922915456" Type: "System.Type" Name: "t" Value: "lkoTTTQYZBOCpESIXml.HIjyV0QGyECLeQFcXt6+FdMvMFWUKWCe2VZqBYj" -------------------------------------- -------------Return value------------- Type: "null" Name: "ReturnValue" Value: "null" -------------------------------------- [02-02-2025 16:44:44] Hook for periodic assembly dumping hit! ------------Related files------------- MD-5: "28614190a64b33f62b2c660e52ccbe89" SHA-1: "07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19" SHA-256: "ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e" SHA-384: "49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36" SHA-512: "518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a" ImportHash: "dae02f32a21e03ce65412f6e56942daa" -------------------------------------- [02-02-2025 16:44:44] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at lkoTTTQYZBOCpESIXml.HIjyV0QGyECLeQFcXt6.b5tX06VL4oenJPdpvZU() at lkoTTTQYZBOCpESIXml.HIjyV0QGyECLeQFcXt6.HvrQtcQDYM() at .cctor() at System.Delegate.BindToMethodName(Object target, RuntimeType methodType, String method, DelegateBindingFlags flags) at System.Delegate.CreateDelegate(Type type, Type target, String method, Boolean ignoreCase, Boolean throwOnBindFailure) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:44:45] Hook for System.Delegate System.Runtime.InteropServices.Marshal.GetDelegateForFunctionPointer(System.IntPtr ptr, System.Type t) hit! --------StackTrace information-------- at lkoTTTQYZBOCpESIXml.HIjyV0QGyECLeQFcXt6.BBCQruWJXT(IntPtr , Type ) at lkoTTTQYZBOCpESIXml.HIjyV0QGyECLeQFcXt6.tZGax7iwYgp945MuEs0(IntPtr , Type ) at lkoTTTQYZBOCpESIXml.HIjyV0QGyECLeQFcXt6.HvrQtcQDYM() at .cctor() at System.Delegate.BindToMethodName(Object target, RuntimeType methodType, String method, DelegateBindingFlags flags) at System.Delegate.CreateDelegate(Type type, Type target, String method, Boolean ignoreCase, Boolean throwOnBindFailure) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- ----Function argument information----- Type: "System.IntPtr" Name: "ptr" Value: "1922578176" Type: "System.Type" Name: "t" Value: "lkoTTTQYZBOCpESIXml.HIjyV0QGyECLeQFcXt6+IupAuZW5Adrk2BAN6pH" -------------------------------------- -------------Return value------------- Type: "null" Name: "ReturnValue" Value: "null" -------------------------------------- [02-02-2025 16:44:46] Hook for System.Void Aqp8STWZ11YxEbBlFZb.fO3gG9WMLOe6s6yRsYf.xhZVN90jOg() hit! --------StackTrace information-------- at qeDJscWm77d7yDRfab5.rfbVJ5W3N86tnJBWYsd.OBcxQbn4xb1Gf76qCqZ.uQBowgweaI(Boolean ) at UV1o6GPeBXrUTXGRsuj.k6lR0X3JVa(Object , Boolean , UV1o6GPeBXrUTXGRsuj ) at qeDJscWm77d7yDRfab5.rfbVJ5W3N86tnJBWYsd.OBcxQbn4xb1Gf76qCqZ.ifTT0pyvOd(Q4bXXHexm16qO5XhGPj ) at lJab3VBehwnjncTwEaT.k6lR0X3JVa(Object , Q4bXXHexm16qO5XhGPj , lJab3VBehwnjncTwEaT ) at qeDJscWm77d7yDRfab5.rfbVJ5W3N86tnJBWYsd.OBcxQbn4xb1Gf76qCqZ.sT1ntqsojQ(Boolean& ) at AMkxU4BH0B1v1g50mKA.k6lR0X3JVa(Object , Boolean& , AMkxU4BH0B1v1g50mKA ) at qeDJscWm77d7yDRfab5.rfbVJ5W3N86tnJBWYsd.OBcxQbn4xb1Gf76qCqZ.glknCW0fBG() at qH4pLvA2YZDPbKGkgdp.k6lR0X3JVa(Object , qH4pLvA2YZDPbKGkgdp ) at qeDJscWm77d7yDRfab5.rfbVJ5W3N86tnJBWYsd.u94W46iOkK[rtSoUlWCJAUjH4mn4J3](Int32 , Object , Object , rtSoUlWCJAUjH4mn4J3& ) at qeDJscWm77d7yDRfab5.rfbVJ5W3N86tnJBWYsd.YxOWrr4XxC(Int32 , Object , Object ) at lkoTTTQYZBOCpESIXml.HIjyV0QGyECLeQFcXt6.SniQbMSJtD(Object , Int32 ) at lkoTTTQYZBOCpESIXml.HIjyV0QGyECLeQFcXt6.xpvQ3oJOC6(Int32 ) at Costura.AssemblyLoader..cctor() at Costura.AssemblyLoader.Attach() at j4P6B1PjQ53dsLbW0yS() at .cctor() at System.Delegate.BindToMethodName(Object target, RuntimeType methodType, String method, DelegateBindingFlags flags) at System.Delegate.CreateDelegate(Type type, Type target, String method, Boolean ignoreCase, Boolean throwOnBindFailure) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "null" Name: "ReturnValue" Value: "null" -------------------------------------- [02-02-2025 16:44:48] Hook for System.Reflection.Assembly System.Reflection.Assembly.Load(System.Byte[] rawAssembly) hit! --------StackTrace information-------- at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at GcwJJXWN5fUKFVXVIJs.QRvUlUWYlKh0DjUwAgt.egJ1sbW6pdrYuUCGDPf.l8NWddAud3(Object ) at GcwJJXWN5fUKFVXVIJs.QRvUlUWYlKh0DjUwAgt.irpLc5lSsSEI2PuXeva(Object ) at GcwJJXWN5fUKFVXVIJs.QRvUlUWYlKh0DjUwAgt.pXDWf8RfEd() at GcwJJXWN5fUKFVXVIJs.QRvUlUWYlKh0DjUwAgt.btKWa9OcDo(Object , Object ) at System.AppDomain.OnResourceResolveEvent(RuntimeAssembly assembly, String resourceName) at System.Reflection.RuntimeAssembly.GetResource(RuntimeAssembly assembly, String resourceName, UInt64& length, StackCrawlMarkHandle stackMark, Boolean skipSecurityCheck) at System.Reflection.RuntimeAssembly.GetManifestResourceStream(String name, StackCrawlMark& stackMark, Boolean skipSecurityCheck) at System.Reflection.RuntimeAssembly.GetManifestResourceStream(String name) at Costura.AssemblyLoader.LoadStream(String fullName) at Costura.AssemblyLoader.LoadStream(Dictionary`2 resourceNames, String name) at Costura.AssemblyLoader.ReadFromEmbeddedResources(Dictionary`2 assemblyNames, Dictionary`2 symbolNames, AssemblyName requestedAssemblyName) at Costura.AssemblyLoader.ResolveAssembly(Object sender, ResolveEventArgs e) at System.AppDomain.OnAssemblyResolveEvent(RuntimeAssembly assembly, String assemblyFullName) at lkoTTTQYZBOCpESIXml.HIjyV0QGyECLeQFcXt6.TxDQSLmaMi(IntPtr , IntPtr , IntPtr , UInt32 , IntPtr , UInt32& ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- ----Function argument information----- Type: "System.Byte[]" Name: "rawAssembly" Value: "DotDumper::fd92c6728dc1497a463dd98ad0dbaee4cbeb2a40fb80d67e7d6ffddfec6eb1ad" -------------------------------------- -------------Return value------------- Type: "System.Reflection.RuntimeAssembly" Name: "ReturnValue" Value: "" -------------------------------------- ------------Related files------------- MD-5: "59e24c91165081f404caf740f78439e8" SHA-1: "29ff6b974e46236d0f4937022dad512bb1428053" SHA-256: "fd92c6728dc1497a463dd98ad0dbaee4cbeb2a40fb80d67e7d6ffddfec6eb1ad" SHA-384: "fde72c8147de31b0300968d3be805f922106c1d0d36d1d579b9f5614ca4b02272571206698fd343d64d0e35be696e209" SHA-512: "bfdaf9fb39b3936ed4a8da585fbe67cb210b4d13393a924dd5d696a1916f4bfa43bf5b67596314162541bed452619bd8ef875449e51d24d1eaabdd0dc6c60d1a" ImportHash: "dae02f32a21e03ce65412f6e56942daa" -------------------------------------- [02-02-2025 16:44:49] Hook for System.Reflection.Assembly System.Reflection.Assembly.Load(System.Byte[] rawAssembly) hit! --------StackTrace information-------- at Costura.AssemblyLoader.ReadFromEmbeddedResources(Dictionary`2 assemblyNames, Dictionary`2 symbolNames, AssemblyName requestedAssemblyName) at Costura.AssemblyLoader.ResolveAssembly(Object sender, ResolveEventArgs e) at System.AppDomain.OnAssemblyResolveEvent(RuntimeAssembly assembly, String assemblyFullName) at lkoTTTQYZBOCpESIXml.HIjyV0QGyECLeQFcXt6.TxDQSLmaMi(IntPtr , IntPtr , IntPtr , UInt32 , IntPtr , UInt32& ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- ----Function argument information----- Type: "System.Byte[]" Name: "rawAssembly" Value: "DotDumper::19efdf03cb94895935225795f68bb9abfded1869687367013b8b4eee3cc99372" -------------------------------------- -------------Return value------------- Type: "System.Reflection.RuntimeAssembly" Name: "ReturnValue" Value: "" -------------------------------------- ------------Related files------------- MD-5: "4e29f75c0c51b9dec76955f0382d9541" SHA-1: "4899aa8e3f57339cbaec8faab777897a76fe1c3a" SHA-256: "19efdf03cb94895935225795f68bb9abfded1869687367013b8b4eee3cc99372" SHA-384: "c190feea5efff5909e99c036161f05b8c8f841163436d78f07b214746d8488d4c7c890abec5d5e743e629747e6122e1b" SHA-512: "756afafeec10d9d9a399083f9d1df2e69dfda607ee9bbd813a9a01e31cf407bf2c10c5e67580eeefe95ada74c386ae80450849135fac54f13fffcb9d569f3056" ImportHash: "dae02f32a21e03ce65412f6e56942daa" -------------------------------------- [02-02-2025 16:44:49] Hook for System.Object System.Resources.ResourceManager.GetObject(System.String name, System.Globalization.CultureInfo culture) hit! --------StackTrace information-------- at Szdihkrrj.Properties.Resources.N9dSekG53dXx364mQ3k(Object , Object , Object ) at Szdihkrrj.Properties.Resources.get_Msebmkfocg() at MurS0BR9jMCF7t76cSD.k6lR0X3JVa(MurS0BR9jMCF7t76cSD ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- ----Function argument information----- Type: "System.String" Name: "name" Value: "Msebmkfocg" Type: "System.Globalization.CultureInfo" Name: "culture" Value: "null" -------------------------------------- -------------Return value------------- Type: "System.Byte[]" Name: "ReturnValue" Value: "DotDumper::a26e5084c1e26c90adbcfbd2c138530a4250edd71e644a1e374da102247d50a3" -------------------------------------- ------------Related files------------- MD-5: "e566915a13d2e589fe9b01ec7c1f5835" SHA-1: "092fb4b19e405ab3464d75b5afd5190e0f642201" SHA-256: "a26e5084c1e26c90adbcfbd2c138530a4250edd71e644a1e374da102247d50a3" SHA-384: "35bc9bfdf777bb0335b0b41ac4002918bf1625267dd5dbaa8bf7eace5c5a749eca9779f6a4a72ecd8dfee63331095939" SHA-512: "f4bd6fe5d897a0bdecd927edcbb0f077ae5846afc033546e29e3904411f6c69e7d30e0bfc1b0f94177d0c681be279bd6b5016b68d92fd60a21cadf20446b55ef" -------------------------------------- [02-02-2025 16:44:50] Hook for System.Byte[] System.Convert.FromBase64String(System.String s) hit! --------StackTrace information-------- at hcl45PQTieXnwrpI9lB.RkqDPcQnHRQROgBBoZr.aC8QKx8yg2(Object ) at NDe5LmRqsvJlq92k45F.k6lR0X3JVa(Byte[] , NDe5LmRqsvJlq92k45F ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- ----Function argument information----- Type: "System.String" Name: "s" Value: "Fm8+gaM8+OxsFQO2fgs11QF7p8xAhsGDnBRgGsEOcKw=" -------------------------------------- -------------Return value------------- Type: "System.Byte[]" Name: "ReturnValue" Value: "22, 111, 62, 129, 163, 60, 248, 236, 108, 21, 3, 182, 126, 11, 53, 213, 1, 123, 167, 204, 64, 134, 193, 131, 156, 20, 96, 26, 193, 14, 112, 172" -------------------------------------- [02-02-2025 16:44:51] Hook for System.Byte[] System.Convert.FromBase64String(System.String s) hit! --------StackTrace information-------- at hcl45PQTieXnwrpI9lB.RkqDPcQnHRQROgBBoZr.eAFQPbDrrcSpsTJ0VVT(Object ) at hcl45PQTieXnwrpI9lB.RkqDPcQnHRQROgBBoZr.aC8QKx8yg2(Object ) at NDe5LmRqsvJlq92k45F.k6lR0X3JVa(Byte[] , NDe5LmRqsvJlq92k45F ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- ----Function argument information----- Type: "System.String" Name: "s" Value: "xPPXQidhE4Z695xNbuBOTQ==" -------------------------------------- -------------Return value------------- Type: "System.Byte[]" Name: "ReturnValue" Value: "196, 243, 215, 66, 39, 97, 19, 134, 122, 247, 156, 77, 110, 224, 78, 77" -------------------------------------- [02-02-2025 16:44:53] Hook for System.Boolean ProtoBuf.ProtoEnumAttribute.HasValue() hit! --------StackTrace information-------- at ProtoBuf.Meta.MetaType.NormalizeProtoMember(TypeModel model, MemberInfo member, AttributeFamily family, Boolean forced, Boolean isEnum, BasicList partialMembers, Int32 dataMemberOffset, Boolean inferByTagName, Boolean& hasConflictingEnumValue, MemberInfo backingMember) at ProtoBuf.Meta.MetaType.ApplyDefaultBehaviour_AddMembers(TypeModel model, AttributeFamily family, Boolean isEnum, BasicList partialMembers, Int32 dataMemberOffset, Boolean inferTagByName, ImplicitFields implicitMode, BasicList members, MemberInfo member, Boolean& forced, Boolean isPublic, Boolean isField, Type& effectiveType, Boolean& hasConflictingEnumValue, MemberInfo backingMember) at ProtoBuf.Meta.MetaType.ApplyDefaultBehaviourImpl() at ProtoBuf.Meta.MetaType.ApplyDefaultBehaviour() at ProtoBuf.Meta.RuntimeTypeModel.FindOrAddAuto(Type type, Boolean demand, Boolean addWithContractOnly, Boolean addEvenIfAutoDisabled) at ProtoBuf.Meta.RuntimeTypeModel.GetEnumMap(Type type) at ProtoBuf.Meta.ValueMember.TryGetCoreSerializer(RuntimeTypeModel model, DataFormat dataFormat, Type type, WireType& defaultWireType, Boolean asReference, Boolean dynamicType, Boolean overwriteList, Boolean allowComplexTypes) at ProtoBuf.Meta.ValueMember.BuildSerializer() at ProtoBuf.Meta.ValueMember.get_Serializer() at ProtoBuf.Meta.MetaType.BuildSerializer() at ProtoBuf.Meta.MetaType.get_Serializer() at ProtoBuf.Meta.MetaType.ProtoBuf.Serializers.ISerializerProxy.get_Serializer() at ProtoBuf.Serializers.SubItemSerializer.ProtoBuf.Serializers.IProtoTypeSerializer.HasCallbacks(CallbackType callbackType) at ProtoBuf.Serializers.TagDecorator.HasCallbacks(CallbackType callbackType) at ProtoBuf.Serializers.TypeSerializer.HasCallbacks(CallbackType callbackType) at ProtoBuf.Serializers.TypeSerializer.ProtoBuf.Serializers.IProtoSerializer.EmitWrite(CompilerContext ctx, Local valueFrom) at ProtoBuf.Compiler.CompilerContext.WriteNullCheckedTail(Type type, IProtoSerializer tail, Local valueFrom) at ProtoBuf.Compiler.CompilerContext.BuildSerializer(IProtoSerializer head, TypeModel model) at ProtoBuf.Serializers.CompiledSerializer..ctor(IProtoTypeSerializer head, TypeModel model) at ProtoBuf.Serializers.CompiledSerializer.Wrap(IProtoTypeSerializer head, TypeModel model) at ProtoBuf.Meta.MetaType.get_Serializer() at ProtoBuf.Meta.RuntimeTypeModel.Deserialize(Int32 key, Object value, ProtoReader source) at ProtoBuf.Meta.TypeModel.DeserializeCore(ProtoReader reader, Type type, Object value, Boolean noAutoCreate) at ProtoBuf.Meta.TypeModel.Deserialize(Stream source, Object value, Type type, SerializationContext context) at ProtoBuf.Serializer.Deserialize[T](Stream source) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- protobuf-net (SHA-256: 19efdf03cb94895935225795f68bb9abfded1869687367013b8b4eee3cc99372) [DotDumper or DotNet Framework related assembly] protobuf-net (SHA-256: 19efdf03cb94895935225795f68bb9abfded1869687367013b8b4eee3cc99372) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: protobuf-net Version: 2.4.0.0 MD-5: 4e29f75c0c51b9dec76955f0382d9541 SHA-1: 4899aa8e3f57339cbaec8faab777897a76fe1c3a SHA-256: 19efdf03cb94895935225795f68bb9abfded1869687367013b8b4eee3cc99372 SHA-384: c190feea5efff5909e99c036161f05b8c8f841163436d78f07b214746d8488d4c7c890abec5d5e743e629747e6122e1b SHA-512: 756afafeec10d9d9a399083f9d1df2e69dfda607ee9bbd813a9a01e31cf407bf2c10c5e67580eeefe95ada74c386ae80450849135fac54f13fffcb9d569f3056 ImportHash: dae02f32a21e03ce65412f6e56942daa -------------------------------------- ---------Parent assembly hash--------- ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e -------------------------------------- -------------Return value------------- Type: "null" Name: "ReturnValue" Value: "null" -------------------------------------- [02-02-2025 16:44:55] Hook for System.Boolean ProtoBuf.ProtoEnumAttribute.HasValue() hit! --------StackTrace information-------- at ProtoBuf.Meta.MetaType.NormalizeProtoMember(TypeModel model, MemberInfo member, AttributeFamily family, Boolean forced, Boolean isEnum, BasicList partialMembers, Int32 dataMemberOffset, Boolean inferByTagName, Boolean& hasConflictingEnumValue, MemberInfo backingMember) at ProtoBuf.Meta.MetaType.ApplyDefaultBehaviour_AddMembers(TypeModel model, AttributeFamily family, Boolean isEnum, BasicList partialMembers, Int32 dataMemberOffset, Boolean inferTagByName, ImplicitFields implicitMode, BasicList members, MemberInfo member, Boolean& forced, Boolean isPublic, Boolean isField, Type& effectiveType, Boolean& hasConflictingEnumValue, MemberInfo backingMember) at ProtoBuf.Meta.MetaType.ApplyDefaultBehaviourImpl() at ProtoBuf.Meta.MetaType.ApplyDefaultBehaviour() at ProtoBuf.Meta.RuntimeTypeModel.FindOrAddAuto(Type type, Boolean demand, Boolean addWithContractOnly, Boolean addEvenIfAutoDisabled) at ProtoBuf.Meta.RuntimeTypeModel.GetEnumMap(Type type) at ProtoBuf.Meta.ValueMember.TryGetCoreSerializer(RuntimeTypeModel model, DataFormat dataFormat, Type type, WireType& defaultWireType, Boolean asReference, Boolean dynamicType, Boolean overwriteList, Boolean allowComplexTypes) at ProtoBuf.Meta.ValueMember.BuildSerializer() at ProtoBuf.Meta.ValueMember.get_Serializer() at ProtoBuf.Meta.MetaType.BuildSerializer() at ProtoBuf.Meta.MetaType.get_Serializer() at ProtoBuf.Meta.MetaType.ProtoBuf.Serializers.ISerializerProxy.get_Serializer() at ProtoBuf.Serializers.SubItemSerializer.ProtoBuf.Serializers.IProtoTypeSerializer.HasCallbacks(CallbackType callbackType) at ProtoBuf.Serializers.TagDecorator.HasCallbacks(CallbackType callbackType) at ProtoBuf.Serializers.TypeSerializer.HasCallbacks(CallbackType callbackType) at ProtoBuf.Serializers.TypeSerializer.ProtoBuf.Serializers.IProtoSerializer.EmitWrite(CompilerContext ctx, Local valueFrom) at ProtoBuf.Compiler.CompilerContext.WriteNullCheckedTail(Type type, IProtoSerializer tail, Local valueFrom) at ProtoBuf.Compiler.CompilerContext.BuildSerializer(IProtoSerializer head, TypeModel model) at ProtoBuf.Serializers.CompiledSerializer..ctor(IProtoTypeSerializer head, TypeModel model) at ProtoBuf.Serializers.CompiledSerializer.Wrap(IProtoTypeSerializer head, TypeModel model) at ProtoBuf.Meta.MetaType.get_Serializer() at ProtoBuf.Meta.RuntimeTypeModel.Deserialize(Int32 key, Object value, ProtoReader source) at ProtoBuf.Meta.TypeModel.DeserializeCore(ProtoReader reader, Type type, Object value, Boolean noAutoCreate) at ProtoBuf.Meta.TypeModel.Deserialize(Stream source, Object value, Type type, SerializationContext context) at ProtoBuf.Serializer.Deserialize[T](Stream source) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- protobuf-net (SHA-256: 19efdf03cb94895935225795f68bb9abfded1869687367013b8b4eee3cc99372) [DotDumper or DotNet Framework related assembly] protobuf-net (SHA-256: 19efdf03cb94895935225795f68bb9abfded1869687367013b8b4eee3cc99372) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: protobuf-net Version: 2.4.0.0 MD-5: 4e29f75c0c51b9dec76955f0382d9541 SHA-1: 4899aa8e3f57339cbaec8faab777897a76fe1c3a SHA-256: 19efdf03cb94895935225795f68bb9abfded1869687367013b8b4eee3cc99372 SHA-384: c190feea5efff5909e99c036161f05b8c8f841163436d78f07b214746d8488d4c7c890abec5d5e743e629747e6122e1b SHA-512: 756afafeec10d9d9a399083f9d1df2e69dfda607ee9bbd813a9a01e31cf407bf2c10c5e67580eeefe95ada74c386ae80450849135fac54f13fffcb9d569f3056 ImportHash: dae02f32a21e03ce65412f6e56942daa -------------------------------------- ---------Parent assembly hash--------- ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e -------------------------------------- -------------Return value------------- Type: "null" Name: "ReturnValue" Value: "null" -------------------------------------- [02-02-2025 16:44:58] Hook for System.Boolean ProtoBuf.ProtoEnumAttribute.HasValue() hit! --------StackTrace information-------- at ProtoBuf.Meta.MetaType.NormalizeProtoMember(TypeModel model, MemberInfo member, AttributeFamily family, Boolean forced, Boolean isEnum, BasicList partialMembers, Int32 dataMemberOffset, Boolean inferByTagName, Boolean& hasConflictingEnumValue, MemberInfo backingMember) at ProtoBuf.Meta.MetaType.ApplyDefaultBehaviour_AddMembers(TypeModel model, AttributeFamily family, Boolean isEnum, BasicList partialMembers, Int32 dataMemberOffset, Boolean inferTagByName, ImplicitFields implicitMode, BasicList members, MemberInfo member, Boolean& forced, Boolean isPublic, Boolean isField, Type& effectiveType, Boolean& hasConflictingEnumValue, MemberInfo backingMember) at ProtoBuf.Meta.MetaType.ApplyDefaultBehaviourImpl() at ProtoBuf.Meta.MetaType.ApplyDefaultBehaviour() at ProtoBuf.Meta.RuntimeTypeModel.FindOrAddAuto(Type type, Boolean demand, Boolean addWithContractOnly, Boolean addEvenIfAutoDisabled) at ProtoBuf.Meta.RuntimeTypeModel.GetEnumMap(Type type) at ProtoBuf.Meta.ValueMember.TryGetCoreSerializer(RuntimeTypeModel model, DataFormat dataFormat, Type type, WireType& defaultWireType, Boolean asReference, Boolean dynamicType, Boolean overwriteList, Boolean allowComplexTypes) at ProtoBuf.Meta.ValueMember.BuildSerializer() at ProtoBuf.Meta.ValueMember.get_Serializer() at ProtoBuf.Meta.MetaType.BuildSerializer() at ProtoBuf.Meta.MetaType.get_Serializer() at ProtoBuf.Meta.RuntimeTypeModel.Deserialize(Int32 key, Object value, ProtoReader source) at ProtoBuf.ProtoReader.ReadTypedObject(Object value, Int32 key, ProtoReader reader, Type type) at ProtoBuf.ProtoReader.ReadObject(Object value, Int32 key, ProtoReader reader) at proto_9(Object , ProtoReader ) at ProtoBuf.Serializers.CompiledSerializer.ProtoBuf.Serializers.IProtoSerializer.Read(Object value, ProtoReader source) at ProtoBuf.Meta.RuntimeTypeModel.Deserialize(Int32 key, Object value, ProtoReader source) at ProtoBuf.ProtoReader.ReadTypedObject(Object value, Int32 key, ProtoReader reader, Type type) at ProtoBuf.ProtoReader.ReadObject(Object value, Int32 key, ProtoReader reader) at proto_16(Object , ProtoReader ) at ProtoBuf.Serializers.CompiledSerializer.ProtoBuf.Serializers.IProtoSerializer.Read(Object value, ProtoReader source) at ProtoBuf.Meta.RuntimeTypeModel.Deserialize(Int32 key, Object value, ProtoReader source) at ProtoBuf.ProtoReader.ReadTypedObject(Object value, Int32 key, ProtoReader reader, Type type) at ProtoBuf.ProtoReader.ReadObject(Object value, Int32 key, ProtoReader reader) at proto_3(Object , ProtoReader ) at ProtoBuf.Serializers.CompiledSerializer.ProtoBuf.Serializers.IProtoSerializer.Read(Object value, ProtoReader source) at ProtoBuf.Meta.RuntimeTypeModel.Deserialize(Int32 key, Object value, ProtoReader source) at ProtoBuf.ProtoReader.ReadTypedObject(Object value, Int32 key, ProtoReader reader, Type type) at ProtoBuf.ProtoReader.ReadObject(Object value, Int32 key, ProtoReader reader) at proto_16(Object , ProtoReader ) at ProtoBuf.Serializers.CompiledSerializer.ProtoBuf.Serializers.IProtoSerializer.Read(Object value, ProtoReader source) at ProtoBuf.Meta.RuntimeTypeModel.Deserialize(Int32 key, Object value, ProtoReader source) at ProtoBuf.Meta.TypeModel.DeserializeCore(ProtoReader reader, Type type, Object value, Boolean noAutoCreate) at ProtoBuf.Meta.TypeModel.Deserialize(Stream source, Object value, Type type, SerializationContext context) at ProtoBuf.Serializer.Deserialize[T](Stream source) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- protobuf-net (SHA-256: 19efdf03cb94895935225795f68bb9abfded1869687367013b8b4eee3cc99372) [DotDumper or DotNet Framework related assembly] protobuf-net (SHA-256: 19efdf03cb94895935225795f68bb9abfded1869687367013b8b4eee3cc99372) [DotDumper or DotNet Framework related assembly] protobuf-net (SHA-256: 19efdf03cb94895935225795f68bb9abfded1869687367013b8b4eee3cc99372) [DotDumper or DotNet Framework related assembly] protobuf-net (SHA-256: 19efdf03cb94895935225795f68bb9abfded1869687367013b8b4eee3cc99372) [DotDumper or DotNet Framework related assembly] protobuf-net (SHA-256: 19efdf03cb94895935225795f68bb9abfded1869687367013b8b4eee3cc99372) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: protobuf-net Version: 2.4.0.0 MD-5: 4e29f75c0c51b9dec76955f0382d9541 SHA-1: 4899aa8e3f57339cbaec8faab777897a76fe1c3a SHA-256: 19efdf03cb94895935225795f68bb9abfded1869687367013b8b4eee3cc99372 SHA-384: c190feea5efff5909e99c036161f05b8c8f841163436d78f07b214746d8488d4c7c890abec5d5e743e629747e6122e1b SHA-512: 756afafeec10d9d9a399083f9d1df2e69dfda607ee9bbd813a9a01e31cf407bf2c10c5e67580eeefe95ada74c386ae80450849135fac54f13fffcb9d569f3056 ImportHash: dae02f32a21e03ce65412f6e56942daa -------------------------------------- ---------Parent assembly hash--------- ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e -------------------------------------- -------------Return value------------- Type: "null" Name: "ReturnValue" Value: "null" -------------------------------------- [02-02-2025 16:44:58] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:44:59] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:00] Hook for System.Byte[] System.Convert.FromBase64String(System.String s) hit! --------StackTrace information-------- at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.dMR2JvDuKKvWe8JvTBv(Object ) at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.mNr9SFnYOO() at I0hGTQAeMPHpv11dWBo.k6lR0X3JVa(I0hGTQAeMPHpv11dWBo ) at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- ----Function argument information----- Type: "System.String" Name: "s" Value: "uFcAB4DCGAA=" -------------------------------------- -------------Return value------------- Type: "System.Byte[]" Name: "ReturnValue" Value: "184, 87, 0, 7, 128, 194, 24, 0" -------------------------------------- [02-02-2025 16:45:02] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:03] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:04] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:06] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.K31Us3xgU3[ILLinXUpqLMgwKcGD1e](Object , Object , Type , Object[]& , Boolean , Boolean ) at N1rmOEUlOZJck5gMCmu.m6O1kJUXDJZtxdgFx7s.RtlZeroMemory(IntPtr destination, Int32 length) at bn0gQ9ZhIBkoE06AqgB.k6lR0X3JVa(IntPtr destination, Int32 length, bn0gQ9ZhIBkoE06AqgB ) at N1rmOEUlOZJck5gMCmu.m6O1kJUXDJZtxdgFx7s.NtQueryInformationProcess(IntPtr hProcess, i2ZWD4Ui6lFFlLAsvT4 processInfoClass, IntPtr& pProcInfo) at Pw2ASgZDZGj0SwVLsTl.k6lR0X3JVa(IntPtr hProcess, i2ZWD4Ui6lFFlLAsvT4 processInfoClass, IntPtr& pProcInfo, Pw2ASgZDZGj0SwVLsTl ) at N1rmOEUlOZJck5gMCmu.m6O1kJUXDJZtxdgFx7s.BaIU7Kbmt8(IntPtr ) at p154DBZYqd3Y1EiNNlN.k6lR0X3JVa(IntPtr , p154DBZYqd3Y1EiNNlN ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.Q3LUKNVYIn() at gdE5jAZALQEtP2xQpII.k6lR0X3JVa(gdE5jAZALQEtP2xQpII ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.JjEUTw786C(IntPtr , Boolean ) at L81C8FZMxoN51nT33XR.k6lR0X3JVa(IntPtr , Boolean , L81C8FZMxoN51nT33XR ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.ygaUnhMHuS(IntPtr , Object , Boolean ) at uvdpMxZXRquKiBa5YK7.k6lR0X3JVa(IntPtr , String , Boolean , uvdpMxZXRquKiBa5YK7 ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:08] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.K31Us3xgU3[ILLinXUpqLMgwKcGD1e](Object , Object , Type , Object[]& , Boolean , Boolean ) at N1rmOEUlOZJck5gMCmu.m6O1kJUXDJZtxdgFx7s.NtQueryInformationProcess(IntPtr hProcess, i2ZWD4Ui6lFFlLAsvT4 processInfoClass, IntPtr& pProcInfo) at Pw2ASgZDZGj0SwVLsTl.k6lR0X3JVa(IntPtr hProcess, i2ZWD4Ui6lFFlLAsvT4 processInfoClass, IntPtr& pProcInfo, Pw2ASgZDZGj0SwVLsTl ) at N1rmOEUlOZJck5gMCmu.m6O1kJUXDJZtxdgFx7s.BaIU7Kbmt8(IntPtr ) at p154DBZYqd3Y1EiNNlN.k6lR0X3JVa(IntPtr , p154DBZYqd3Y1EiNNlN ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.Q3LUKNVYIn() at gdE5jAZALQEtP2xQpII.k6lR0X3JVa(gdE5jAZALQEtP2xQpII ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.JjEUTw786C(IntPtr , Boolean ) at L81C8FZMxoN51nT33XR.k6lR0X3JVa(IntPtr , Boolean , L81C8FZMxoN51nT33XR ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.ygaUnhMHuS(IntPtr , Object , Boolean ) at uvdpMxZXRquKiBa5YK7.k6lR0X3JVa(IntPtr , String , Boolean , uvdpMxZXRquKiBa5YK7 ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:10] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.K31Us3xgU3[ILLinXUpqLMgwKcGD1e](Object , Object , Type , Object[]& , Boolean , Boolean ) at N1rmOEUlOZJck5gMCmu.m6O1kJUXDJZtxdgFx7s.NtProtectVirtualMemory(IntPtr processHandle, IntPtr& baseAddress, IntPtr& regionSize, UInt32 newProtect) at PmfHIcZq9oqy6CviE1T.k6lR0X3JVa(IntPtr processHandle, IntPtr& baseAddress, IntPtr& regionSize, UInt32 newProtect, PmfHIcZq9oqy6CviE1T ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.iLcUH6TBGj[bmR6yjUunRI1nOcNlrK](Object , Type , Object[]& ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.yJXUWI2Zog() at rINdDZZ7PfCew9GGmfp.k6lR0X3JVa(rINdDZZ7PfCew9GGmfp ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.jgqUecBnPJ(Object ) at gS7svFZBm0jmA5vuJbI.k6lR0X3JVa(String , gS7svFZBm0jmA5vuJbI ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.JjEUTw786C(IntPtr , Boolean ) at L81C8FZMxoN51nT33XR.k6lR0X3JVa(IntPtr , Boolean , L81C8FZMxoN51nT33XR ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.ygaUnhMHuS(IntPtr , Object , Boolean ) at uvdpMxZXRquKiBa5YK7.k6lR0X3JVa(IntPtr , String , Boolean , uvdpMxZXRquKiBa5YK7 ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:12] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.K31Us3xgU3[ILLinXUpqLMgwKcGD1e](Object , Object , Type , Object[]& , Boolean , Boolean ) at N1rmOEUlOZJck5gMCmu.m6O1kJUXDJZtxdgFx7s.NtProtectVirtualMemory(IntPtr processHandle, IntPtr& baseAddress, IntPtr& regionSize, UInt32 newProtect) at PmfHIcZq9oqy6CviE1T.k6lR0X3JVa(IntPtr processHandle, IntPtr& baseAddress, IntPtr& regionSize, UInt32 newProtect, PmfHIcZq9oqy6CviE1T ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.iLcUH6TBGj[bmR6yjUunRI1nOcNlrK](Object , Type , Object[]& ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.yJXUWI2Zog() at rINdDZZ7PfCew9GGmfp.k6lR0X3JVa(rINdDZZ7PfCew9GGmfp ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.jgqUecBnPJ(Object ) at gS7svFZBm0jmA5vuJbI.k6lR0X3JVa(String , gS7svFZBm0jmA5vuJbI ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.JjEUTw786C(IntPtr , Boolean ) at L81C8FZMxoN51nT33XR.k6lR0X3JVa(IntPtr , Boolean , L81C8FZMxoN51nT33XR ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.ygaUnhMHuS(IntPtr , Object , Boolean ) at uvdpMxZXRquKiBa5YK7.k6lR0X3JVa(IntPtr , String , Boolean , uvdpMxZXRquKiBa5YK7 ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:13] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:15] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.K31Us3xgU3[ILLinXUpqLMgwKcGD1e](Object , Object , Type , Object[]& , Boolean , Boolean ) at N1rmOEUlOZJck5gMCmu.m6O1kJUXDJZtxdgFx7s.RtlZeroMemory(IntPtr destination, Int32 length) at bn0gQ9ZhIBkoE06AqgB.k6lR0X3JVa(IntPtr destination, Int32 length, bn0gQ9ZhIBkoE06AqgB ) at N1rmOEUlOZJck5gMCmu.m6O1kJUXDJZtxdgFx7s.NtQueryInformationProcess(IntPtr hProcess, i2ZWD4Ui6lFFlLAsvT4 processInfoClass, IntPtr& pProcInfo) at Pw2ASgZDZGj0SwVLsTl.k6lR0X3JVa(IntPtr hProcess, i2ZWD4Ui6lFFlLAsvT4 processInfoClass, IntPtr& pProcInfo, Pw2ASgZDZGj0SwVLsTl ) at N1rmOEUlOZJck5gMCmu.m6O1kJUXDJZtxdgFx7s.BaIU7Kbmt8(IntPtr ) at p154DBZYqd3Y1EiNNlN.k6lR0X3JVa(IntPtr , p154DBZYqd3Y1EiNNlN ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.Q3LUKNVYIn() at gdE5jAZALQEtP2xQpII.k6lR0X3JVa(gdE5jAZALQEtP2xQpII ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.JjEUTw786C(IntPtr , Boolean ) at L81C8FZMxoN51nT33XR.k6lR0X3JVa(IntPtr , Boolean , L81C8FZMxoN51nT33XR ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.ygaUnhMHuS(IntPtr , Object , Boolean ) at uvdpMxZXRquKiBa5YK7.k6lR0X3JVa(IntPtr , String , Boolean , uvdpMxZXRquKiBa5YK7 ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:17] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.K31Us3xgU3[ILLinXUpqLMgwKcGD1e](Object , Object , Type , Object[]& , Boolean , Boolean ) at N1rmOEUlOZJck5gMCmu.m6O1kJUXDJZtxdgFx7s.NtQueryInformationProcess(IntPtr hProcess, i2ZWD4Ui6lFFlLAsvT4 processInfoClass, IntPtr& pProcInfo) at Pw2ASgZDZGj0SwVLsTl.k6lR0X3JVa(IntPtr hProcess, i2ZWD4Ui6lFFlLAsvT4 processInfoClass, IntPtr& pProcInfo, Pw2ASgZDZGj0SwVLsTl ) at N1rmOEUlOZJck5gMCmu.m6O1kJUXDJZtxdgFx7s.BaIU7Kbmt8(IntPtr ) at p154DBZYqd3Y1EiNNlN.k6lR0X3JVa(IntPtr , p154DBZYqd3Y1EiNNlN ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.Q3LUKNVYIn() at gdE5jAZALQEtP2xQpII.k6lR0X3JVa(gdE5jAZALQEtP2xQpII ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.JjEUTw786C(IntPtr , Boolean ) at L81C8FZMxoN51nT33XR.k6lR0X3JVa(IntPtr , Boolean , L81C8FZMxoN51nT33XR ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.ygaUnhMHuS(IntPtr , Object , Boolean ) at uvdpMxZXRquKiBa5YK7.k6lR0X3JVa(IntPtr , String , Boolean , uvdpMxZXRquKiBa5YK7 ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:19] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.K31Us3xgU3[ILLinXUpqLMgwKcGD1e](Object , Object , Type , Object[]& , Boolean , Boolean ) at N1rmOEUlOZJck5gMCmu.m6O1kJUXDJZtxdgFx7s.NtProtectVirtualMemory(IntPtr processHandle, IntPtr& baseAddress, IntPtr& regionSize, UInt32 newProtect) at PmfHIcZq9oqy6CviE1T.k6lR0X3JVa(IntPtr processHandle, IntPtr& baseAddress, IntPtr& regionSize, UInt32 newProtect, PmfHIcZq9oqy6CviE1T ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.iLcUH6TBGj[bmR6yjUunRI1nOcNlrK](Object , Type , Object[]& ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.yJXUWI2Zog() at rINdDZZ7PfCew9GGmfp.k6lR0X3JVa(rINdDZZ7PfCew9GGmfp ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.jgqUecBnPJ(Object ) at gS7svFZBm0jmA5vuJbI.k6lR0X3JVa(String , gS7svFZBm0jmA5vuJbI ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.JjEUTw786C(IntPtr , Boolean ) at L81C8FZMxoN51nT33XR.k6lR0X3JVa(IntPtr , Boolean , L81C8FZMxoN51nT33XR ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.ygaUnhMHuS(IntPtr , Object , Boolean ) at uvdpMxZXRquKiBa5YK7.k6lR0X3JVa(IntPtr , String , Boolean , uvdpMxZXRquKiBa5YK7 ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:21] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.K31Us3xgU3[ILLinXUpqLMgwKcGD1e](Object , Object , Type , Object[]& , Boolean , Boolean ) at N1rmOEUlOZJck5gMCmu.m6O1kJUXDJZtxdgFx7s.NtProtectVirtualMemory(IntPtr processHandle, IntPtr& baseAddress, IntPtr& regionSize, UInt32 newProtect) at PmfHIcZq9oqy6CviE1T.k6lR0X3JVa(IntPtr processHandle, IntPtr& baseAddress, IntPtr& regionSize, UInt32 newProtect, PmfHIcZq9oqy6CviE1T ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.iLcUH6TBGj[bmR6yjUunRI1nOcNlrK](Object , Type , Object[]& ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.yJXUWI2Zog() at rINdDZZ7PfCew9GGmfp.k6lR0X3JVa(rINdDZZ7PfCew9GGmfp ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.jgqUecBnPJ(Object ) at gS7svFZBm0jmA5vuJbI.k6lR0X3JVa(String , gS7svFZBm0jmA5vuJbI ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.JjEUTw786C(IntPtr , Boolean ) at L81C8FZMxoN51nT33XR.k6lR0X3JVa(IntPtr , Boolean , L81C8FZMxoN51nT33XR ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.ygaUnhMHuS(IntPtr , Object , Boolean ) at uvdpMxZXRquKiBa5YK7.k6lR0X3JVa(IntPtr , String , Boolean , uvdpMxZXRquKiBa5YK7 ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:23] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:25] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.K31Us3xgU3[ILLinXUpqLMgwKcGD1e](Object , Object , Type , Object[]& , Boolean , Boolean ) at N1rmOEUlOZJck5gMCmu.m6O1kJUXDJZtxdgFx7s.RtlZeroMemory(IntPtr destination, Int32 length) at bn0gQ9ZhIBkoE06AqgB.k6lR0X3JVa(IntPtr destination, Int32 length, bn0gQ9ZhIBkoE06AqgB ) at N1rmOEUlOZJck5gMCmu.m6O1kJUXDJZtxdgFx7s.NtQueryInformationProcess(IntPtr hProcess, i2ZWD4Ui6lFFlLAsvT4 processInfoClass, IntPtr& pProcInfo) at Pw2ASgZDZGj0SwVLsTl.k6lR0X3JVa(IntPtr hProcess, i2ZWD4Ui6lFFlLAsvT4 processInfoClass, IntPtr& pProcInfo, Pw2ASgZDZGj0SwVLsTl ) at N1rmOEUlOZJck5gMCmu.m6O1kJUXDJZtxdgFx7s.BaIU7Kbmt8(IntPtr ) at p154DBZYqd3Y1EiNNlN.k6lR0X3JVa(IntPtr , p154DBZYqd3Y1EiNNlN ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.Q3LUKNVYIn() at gdE5jAZALQEtP2xQpII.k6lR0X3JVa(gdE5jAZALQEtP2xQpII ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.JjEUTw786C(IntPtr , Boolean ) at L81C8FZMxoN51nT33XR.k6lR0X3JVa(IntPtr , Boolean , L81C8FZMxoN51nT33XR ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.ygaUnhMHuS(IntPtr , Object , Boolean ) at uvdpMxZXRquKiBa5YK7.k6lR0X3JVa(IntPtr , String , Boolean , uvdpMxZXRquKiBa5YK7 ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:26] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.K31Us3xgU3[ILLinXUpqLMgwKcGD1e](Object , Object , Type , Object[]& , Boolean , Boolean ) at N1rmOEUlOZJck5gMCmu.m6O1kJUXDJZtxdgFx7s.NtQueryInformationProcess(IntPtr hProcess, i2ZWD4Ui6lFFlLAsvT4 processInfoClass, IntPtr& pProcInfo) at Pw2ASgZDZGj0SwVLsTl.k6lR0X3JVa(IntPtr hProcess, i2ZWD4Ui6lFFlLAsvT4 processInfoClass, IntPtr& pProcInfo, Pw2ASgZDZGj0SwVLsTl ) at N1rmOEUlOZJck5gMCmu.m6O1kJUXDJZtxdgFx7s.BaIU7Kbmt8(IntPtr ) at p154DBZYqd3Y1EiNNlN.k6lR0X3JVa(IntPtr , p154DBZYqd3Y1EiNNlN ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.Q3LUKNVYIn() at gdE5jAZALQEtP2xQpII.k6lR0X3JVa(gdE5jAZALQEtP2xQpII ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.JjEUTw786C(IntPtr , Boolean ) at L81C8FZMxoN51nT33XR.k6lR0X3JVa(IntPtr , Boolean , L81C8FZMxoN51nT33XR ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.ygaUnhMHuS(IntPtr , Object , Boolean ) at uvdpMxZXRquKiBa5YK7.k6lR0X3JVa(IntPtr , String , Boolean , uvdpMxZXRquKiBa5YK7 ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:28] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.K31Us3xgU3[ILLinXUpqLMgwKcGD1e](Object , Object , Type , Object[]& , Boolean , Boolean ) at N1rmOEUlOZJck5gMCmu.m6O1kJUXDJZtxdgFx7s.NtProtectVirtualMemory(IntPtr processHandle, IntPtr& baseAddress, IntPtr& regionSize, UInt32 newProtect) at PmfHIcZq9oqy6CviE1T.k6lR0X3JVa(IntPtr processHandle, IntPtr& baseAddress, IntPtr& regionSize, UInt32 newProtect, PmfHIcZq9oqy6CviE1T ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.iLcUH6TBGj[bmR6yjUunRI1nOcNlrK](Object , Type , Object[]& ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.yJXUWI2Zog() at rINdDZZ7PfCew9GGmfp.k6lR0X3JVa(rINdDZZ7PfCew9GGmfp ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.jgqUecBnPJ(Object ) at gS7svFZBm0jmA5vuJbI.k6lR0X3JVa(String , gS7svFZBm0jmA5vuJbI ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.JjEUTw786C(IntPtr , Boolean ) at L81C8FZMxoN51nT33XR.k6lR0X3JVa(IntPtr , Boolean , L81C8FZMxoN51nT33XR ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.ygaUnhMHuS(IntPtr , Object , Boolean ) at uvdpMxZXRquKiBa5YK7.k6lR0X3JVa(IntPtr , String , Boolean , uvdpMxZXRquKiBa5YK7 ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:29] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.K31Us3xgU3[ILLinXUpqLMgwKcGD1e](Object , Object , Type , Object[]& , Boolean , Boolean ) at N1rmOEUlOZJck5gMCmu.m6O1kJUXDJZtxdgFx7s.NtProtectVirtualMemory(IntPtr processHandle, IntPtr& baseAddress, IntPtr& regionSize, UInt32 newProtect) at PmfHIcZq9oqy6CviE1T.k6lR0X3JVa(IntPtr processHandle, IntPtr& baseAddress, IntPtr& regionSize, UInt32 newProtect, PmfHIcZq9oqy6CviE1T ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.iLcUH6TBGj[bmR6yjUunRI1nOcNlrK](Object , Type , Object[]& ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.yJXUWI2Zog() at rINdDZZ7PfCew9GGmfp.k6lR0X3JVa(rINdDZZ7PfCew9GGmfp ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.jgqUecBnPJ(Object ) at gS7svFZBm0jmA5vuJbI.k6lR0X3JVa(String , gS7svFZBm0jmA5vuJbI ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.JjEUTw786C(IntPtr , Boolean ) at L81C8FZMxoN51nT33XR.k6lR0X3JVa(IntPtr , Boolean , L81C8FZMxoN51nT33XR ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.ygaUnhMHuS(IntPtr , Object , Boolean ) at uvdpMxZXRquKiBa5YK7.k6lR0X3JVa(IntPtr , String , Boolean , uvdpMxZXRquKiBa5YK7 ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:30] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:31] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:32] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:33] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:34] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:35] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:36] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:37] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:38] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:39] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:41] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:42] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:43] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:44] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:45] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:46] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:48] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:49] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:50] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:51] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:52] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:53] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:54] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:55] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:56] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:57] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:45:59] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:46:00] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:46:01] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at yKNLfpOHbWV77gtcGdw.wxBAN5OU0nguaem5E3C.dFfOuuOaqt[Y8CjJkO9hpDr8iPYWJJ](Object , Object ) at CSJvB8OqhW7B69QbrUd.XR3a4yOQwM25sWDwQ3o..cctor() at FHqKVO9bL2mpp4uYT5C.ED8EP49djLxPcy5gCNN.GDa93WYjmJ() at UbxC1cRDUcbdjlA0swM.k6lR0X3JVa(Object , UbxC1cRDUcbdjlA0swM ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:46:02] Hook for System.Diagnostics.Process System.Diagnostics.Process.GetCurrentProcess() hit! --------StackTrace information-------- at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.xmfDO0NO00kFxMi8Mwe() at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.OHhUqKRQZc(Object ) at n9xT5TZoS5MnTSQnxXm.k6lR0X3JVa(String , n9xT5TZoS5MnTSQnxXm ) at PAtACBU0f3VMN2XdPr6.QsVRiLUOpSdyRue3HtI.fTFUQ7XYun(Object , Object , Boolean , Boolean ) at sROHDhMTCjxaCVM3ArT.k6lR0X3JVa(String , String , Boolean , Boolean , sROHDhMTCjxaCVM3ArT ) at O8c8di9rOO82kZ3i6Oa.irqR789CK0uWaYpNfKw.KbV9tBcDa0() at cbswyQRvncaW6XTIJDd.k6lR0X3JVa(Object , cbswyQRvncaW6XTIJDd ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (DotDumper)" -------------------------------------- [02-02-2025 16:46:03] Hook for System.Byte[] System.Convert.FromBase64String(System.String s) hit! --------StackTrace information-------- at O8c8di9rOO82kZ3i6Oa.irqR789CK0uWaYpNfKw.lUT9x6VqEX() at TyQEusAopIEuSntM7cM.k6lR0X3JVa(Object , TyQEusAopIEuSntM7cM ) at O8c8di9rOO82kZ3i6Oa.irqR789CK0uWaYpNfKw.KbV9tBcDa0() at cbswyQRvncaW6XTIJDd.k6lR0X3JVa(Object , cbswyQRvncaW6XTIJDd ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- ----Function argument information----- Type: "System.String" Name: "s" Value: "whQA" -------------------------------------- -------------Return value------------- Type: "System.Byte[]" Name: "ReturnValue" Value: "194, 20, 0" -------------------------------------- [02-02-2025 16:46:04] Hook for System.String System.Environment.GetFolderPath(System.Environment+SpecialFolder folder) hit! --------StackTrace information-------- at OZq1KLQqNNZR0BLccJb.BMSrDcQQ2eQLWuAVcx8.QhB1mGD2TFZk2f8s6XF(SpecialFolder ) at OZq1KLQqNNZR0BLccJb.BMSrDcQQ2eQLWuAVcx8.tJuQeX0UUD(String ) at UMakh9AYhUZL3MrnhQA.k6lR0X3JVa(Object , String , UMakh9AYhUZL3MrnhQA ) at OZq1KLQqNNZR0BLccJb.BMSrDcQQ2eQLWuAVcx8.CIPQW8uNcs() at u5CotZR2a07eFWrPf52.k6lR0X3JVa(Object , u5CotZR2a07eFWrPf52 ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- ----Function argument information----- Type: "System.Environment+SpecialFolder" Name: "folder" Value: "System" -------------------------------------- -------------Return value------------- Type: "System.String" Name: "ReturnValue" Value: "C:\Windows\system32" -------------------------------------- [02-02-2025 16:46:04] Hook for System.String System.IO.Path.Combine(System.String path1, System.String path2) hit! --------StackTrace information-------- at OZq1KLQqNNZR0BLccJb.BMSrDcQQ2eQLWuAVcx8.fBvpv9Dc7gfeXu8wNUX(Object , Object ) at OZq1KLQqNNZR0BLccJb.BMSrDcQQ2eQLWuAVcx8.tJuQeX0UUD(String ) at UMakh9AYhUZL3MrnhQA.k6lR0X3JVa(Object , String , UMakh9AYhUZL3MrnhQA ) at OZq1KLQqNNZR0BLccJb.BMSrDcQQ2eQLWuAVcx8.CIPQW8uNcs() at u5CotZR2a07eFWrPf52.k6lR0X3JVa(Object , u5CotZR2a07eFWrPf52 ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- ----Function argument information----- Type: "System.String" Name: "path1" Value: "C:\Windows\system32" Type: "System.String" Name: "path2" Value: "ntdll.dll" -------------------------------------- -------------Return value------------- Type: "System.String" Name: "ReturnValue" Value: "C:\Windows\system32\ntdll.dll" -------------------------------------- [02-02-2025 16:46:05] Hook for System.String System.IO.Path.GetTempPath() hit! --------StackTrace information-------- at qGedbS9XejTvJSmaxZm.akyrJ59J6UUHFMAFs88.oLR9lLKx7L() at HSpg3URixmJGI4eujEY.k6lR0X3JVa(Object , HSpg3URixmJGI4eujEY ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- -------------Return value------------- Type: "System.String" Name: "ReturnValue" Value: "C:\Users\IEUser\AppData\Local\Temp\" -------------------------------------- [02-02-2025 16:46:06] Hook for System.String System.IO.Path.Combine(System.String path1, System.String path2) hit! --------StackTrace information-------- at qGedbS9XejTvJSmaxZm.akyrJ59J6UUHFMAFs88.YTIwFRh1Scx0Jhhv7Nt(Object , Object ) at qGedbS9XejTvJSmaxZm.akyrJ59J6UUHFMAFs88.oLR9lLKx7L() at HSpg3URixmJGI4eujEY.k6lR0X3JVa(Object , HSpg3URixmJGI4eujEY ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- ----Function argument information----- Type: "System.String" Name: "path1" Value: "C:\Users\IEUser\AppData\Local\Temp\" Type: "System.String" Name: "path2" Value: "WORMreserved2021whsjsr.mywire.org 7100.exe" -------------------------------------- -------------Return value------------- Type: "System.String" Name: "ReturnValue" Value: "C:\Users\IEUser\AppData\Local\Temp\WORMreserved2021whsjsr.mywire.org 7100.exe" -------------------------------------- [02-02-2025 16:46:08] Hook for System.Void System.IO.File.WriteAllBytes(System.String path, System.Byte[] bytes) hit! --------StackTrace information-------- at qGedbS9XejTvJSmaxZm.akyrJ59J6UUHFMAFs88.hOC0qNhwEE11WfVPiQK(Object , Object ) at qGedbS9XejTvJSmaxZm.akyrJ59J6UUHFMAFs88.oLR9lLKx7L() at HSpg3URixmJGI4eujEY.k6lR0X3JVa(Object , HSpg3URixmJGI4eujEY ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- ----Function argument information----- Type: "System.String" Name: "path" Value: "C:\Users\IEUser\AppData\Local\Temp\WORMreserved2021whsjsr.mywire.org 7100.exe" Type: "System.Byte[]" Name: "bytes" Value: "DotDumper::60d7df1282af530664475c64e172e40b04c052960be1ec73ad42156e11dccb0e" -------------------------------------- -------------Return value------------- Type: "null" Name: "ReturnValue" Value: "null" -------------------------------------- ------------Related files------------- MD-5: "8530aac64c7eae15a9e322ba01939297" SHA-1: "ea4bd22364ac8598020b4834807656a69c286ec3" SHA-256: "60d7df1282af530664475c64e172e40b04c052960be1ec73ad42156e11dccb0e" SHA-384: "23352b00828a497eae9c7320df8d6a6291ed491a7aac67385a9b96300722ade26c537ba8c1384c563dda444f41b6a04c" SHA-512: "af490d5a0605925dad587248f3ef1148c4b7310ba2b648ed0e8b0f9032ae37371cd9043fa2afd035850302f6e19a6e5d312c49caab5a8da3c304d7a958ce73e5" ImportHash: "f34d5f2d4577ed6d9ceec516c1f5a744" -------------------------------------- [02-02-2025 16:46:09] Hook for System.Diagnostics.Process System.Diagnostics.Process.Start(System.Diagnostics.ProcessStartInfo startInfo) hit! --------StackTrace information-------- at qGedbS9XejTvJSmaxZm.akyrJ59J6UUHFMAFs88.Yu0H48hVU4osRWo4Grl(Object ) at qGedbS9XejTvJSmaxZm.akyrJ59J6UUHFMAFs88.oLR9lLKx7L() at HSpg3URixmJGI4eujEY.k6lR0X3JVa(Object , HSpg3URixmJGI4eujEY ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- ----Function argument information----- Type: "System.Diagnostics.ProcessStartInfo" Name: "startInfo" Value: "System.Diagnostics.ProcessStartInfo" -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process" Name: "ReturnValue" Value: "System.Diagnostics.Process (WORMreserved2021whsjsr.mywire.org 7100)" -------------------------------------- [02-02-2025 16:46:10] Hook for System.Reflection.Assembly System.Reflection.Assembly.Load(System.Byte[] rawAssembly) hit! --------StackTrace information-------- at Costura.AssemblyLoader.ReadFromEmbeddedResources(Dictionary`2 assemblyNames, Dictionary`2 symbolNames, AssemblyName requestedAssemblyName) at Costura.AssemblyLoader.ResolveAssembly(Object sender, ResolveEventArgs e) at System.AppDomain.OnAssemblyResolveEvent(RuntimeAssembly assembly, String assemblyFullName) at lkoTTTQYZBOCpESIXml.HIjyV0QGyECLeQFcXt6.TxDQSLmaMi(IntPtr , IntPtr , IntPtr , UInt32 , IntPtr , UInt32& ) at oCS9nG0XOhfjoDfEgG2.COJxkr0Ja7SgurDbf5D.xgx0lIJaPs() at CjYwwjREPueZGD85BTA.k6lR0X3JVa(Object , CjYwwjREPueZGD85BTA ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- ----Function argument information----- Type: "System.Byte[]" Name: "rawAssembly" Value: "DotDumper::78f73e1734daa918b253517c75971fbb8df773a3d77d02a752e9a0ad1711a677" -------------------------------------- -------------Return value------------- Type: "System.Reflection.RuntimeAssembly" Name: "ReturnValue" Value: "" -------------------------------------- ------------Related files------------- MD-5: "f9d2985aa1c41cca281321fffb5ed424" SHA-1: "3a7a58d2dcae2762882357ae34d372744b1dbb9d" SHA-256: "78f73e1734daa918b253517c75971fbb8df773a3d77d02a752e9a0ad1711a677" SHA-384: "237ccada00e8b9bb6db28eec467db713dd450ea6cd75e3f5cd2b0fb5e922a8fee5c6508ca2dc31d0fc3d4c85116136f8" SHA-512: "3a38e64094204398a5a65f445f2a86215663c7618385c1d7591190fb2545ff0982b6110401a7af3414dabbdbf3493d72245e5ba7521236051e2f979d6d656433" ImportHash: "dae02f32a21e03ce65412f6e56942daa" -------------------------------------- [02-02-2025 16:46:11] Hook for System.String System.Environment.ExpandEnvironmentVariables(System.String name) hit! --------StackTrace information-------- at SPZwRZApZbkX9MaRF7.tgVn5CZTD50mrJ63ku.zfdvgoP4nZEIQweHE0i(Object ) at SPZwRZApZbkX9MaRF7.tgVn5CZTD50mrJ63ku.j8pkmnZ8d() at yRW8J6MXBTbusl29Z1G.k6lR0X3JVa(yRW8J6MXBTbusl29Z1G ) at oCS9nG0XOhfjoDfEgG2.COJxkr0Ja7SgurDbf5D.xgx0lIJaPs() at CjYwwjREPueZGD85BTA.k6lR0X3JVa(Object , CjYwwjREPueZGD85BTA ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- ----Function argument information----- Type: "System.String" Name: "name" Value: "%appdata%" -------------------------------------- -------------Return value------------- Type: "System.String" Name: "ReturnValue" Value: "C:\Users\IEUser\AppData\Roaming" -------------------------------------- [02-02-2025 16:46:13] Hook for System.String System.IO.Path.Combine(System.String path1, System.String path2) hit! --------StackTrace information-------- at SPZwRZApZbkX9MaRF7.tgVn5CZTD50mrJ63ku.NYK15fPCiahxWxoU0WW(Object , Object ) at SPZwRZApZbkX9MaRF7.tgVn5CZTD50mrJ63ku.j8pkmnZ8d() at yRW8J6MXBTbusl29Z1G.k6lR0X3JVa(yRW8J6MXBTbusl29Z1G ) at oCS9nG0XOhfjoDfEgG2.COJxkr0Ja7SgurDbf5D.xgx0lIJaPs() at CjYwwjREPueZGD85BTA.k6lR0X3JVa(Object , CjYwwjREPueZGD85BTA ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- ----Function argument information----- Type: "System.String" Name: "path1" Value: "C:\Users\IEUser\AppData\Roaming" Type: "System.String" Name: "path2" Value: "Dvpubhhpn.vbs" -------------------------------------- -------------Return value------------- Type: "System.String" Name: "ReturnValue" Value: "C:\Users\IEUser\AppData\Roaming\Dvpubhhpn.vbs" -------------------------------------- [02-02-2025 16:46:14] Hook for System.String System.IO.Path.GetFileName(System.String path) hit! --------StackTrace information-------- at SPZwRZApZbkX9MaRF7.tgVn5CZTD50mrJ63ku.p9hdBEPxIDIKBtHQV4A(Object ) at SPZwRZApZbkX9MaRF7.tgVn5CZTD50mrJ63ku.j8pkmnZ8d() at yRW8J6MXBTbusl29Z1G.k6lR0X3JVa(yRW8J6MXBTbusl29Z1G ) at oCS9nG0XOhfjoDfEgG2.COJxkr0Ja7SgurDbf5D.xgx0lIJaPs() at CjYwwjREPueZGD85BTA.k6lR0X3JVa(Object , CjYwwjREPueZGD85BTA ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- ----Function argument information----- Type: "System.String" Name: "path" Value: "c:\tools\dotdumper\dotdumper" -------------------------------------- -------------Return value------------- Type: "System.String" Name: "ReturnValue" Value: "dotdumper" -------------------------------------- [02-02-2025 16:46:15] Hook for System.String System.Environment.ExpandEnvironmentVariables(System.String name) hit! --------StackTrace information-------- at oCS9nG0XOhfjoDfEgG2.COJxkr0Ja7SgurDbf5D.xgx0lIJaPs() at CjYwwjREPueZGD85BTA.k6lR0X3JVa(Object , CjYwwjREPueZGD85BTA ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- ----Function argument information----- Type: "System.String" Name: "name" Value: "%appdata%" -------------------------------------- -------------Return value------------- Type: "System.String" Name: "ReturnValue" Value: "C:\Users\IEUser\AppData\Roaming" -------------------------------------- [02-02-2025 16:46:16] Hook for System.String System.IO.Path.Combine(System.String path1, System.String path2) hit! --------StackTrace information-------- at oCS9nG0XOhfjoDfEgG2.COJxkr0Ja7SgurDbf5D.BPkmdcFGxD91Ba3EJWm(Object , Object ) at oCS9nG0XOhfjoDfEgG2.COJxkr0Ja7SgurDbf5D.xgx0lIJaPs() at CjYwwjREPueZGD85BTA.k6lR0X3JVa(Object , CjYwwjREPueZGD85BTA ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- ----Function argument information----- Type: "System.String" Name: "path1" Value: "C:\Users\IEUser\AppData\Roaming" Type: "System.String" Name: "path2" Value: "Dvpubhhpn.vbs" -------------------------------------- -------------Return value------------- Type: "System.String" Name: "ReturnValue" Value: "C:\Users\IEUser\AppData\Roaming\Dvpubhhpn.vbs" -------------------------------------- [02-02-2025 16:46:17] Hook for System.String System.IO.Path.GetFileNameWithoutExtension(System.String path) hit! --------StackTrace information-------- at oCS9nG0XOhfjoDfEgG2.COJxkr0Ja7SgurDbf5D.Ww1fWBFaI1dFy3mAixr(Object ) at oCS9nG0XOhfjoDfEgG2.COJxkr0Ja7SgurDbf5D.xgx0lIJaPs() at CjYwwjREPueZGD85BTA.k6lR0X3JVa(Object , CjYwwjREPueZGD85BTA ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- ----Function argument information----- Type: "System.String" Name: "path" Value: "C:\Users\IEUser\AppData\Roaming\Dvpubhhpn.vbs" -------------------------------------- -------------Return value------------- Type: "System.String" Name: "ReturnValue" Value: "Dvpubhhpn" -------------------------------------- [02-02-2025 16:46:18] Hook for System.Byte[] System.Convert.FromBase64String(System.String s) hit! --------StackTrace information-------- at hcl45PQTieXnwrpI9lB.RkqDPcQnHRQROgBBoZr.aC8QKx8yg2(Object ) at NDe5LmRqsvJlq92k45F.k6lR0X3JVa(Byte[] , NDe5LmRqsvJlq92k45F ) at BuPVjX5lBE7AHUTgYMG.BWfuh65X3QA1Ziwui6D.DJw5RXYMkd() at FoTQswMYIAva8K0Bxdv.k6lR0X3JVa(FoTQswMYIAva8K0Bxdv ) at BuPVjX5lBE7AHUTgYMG.BWfuh65X3QA1Ziwui6D.TVx57u6qmk() at AmGG0qR3TQpb50MqLCk.k6lR0X3JVa(Object , AmGG0qR3TQpb50MqLCk ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- ----Function argument information----- Type: "System.String" Name: "s" Value: "Fm8+gaM8+OxsFQO2fgs11QF7p8xAhsGDnBRgGsEOcKw=" -------------------------------------- -------------Return value------------- Type: "System.Byte[]" Name: "ReturnValue" Value: "22, 111, 62, 129, 163, 60, 248, 236, 108, 21, 3, 182, 126, 11, 53, 213, 1, 123, 167, 204, 64, 134, 193, 131, 156, 20, 96, 26, 193, 14, 112, 172" -------------------------------------- [02-02-2025 16:46:19] Hook for System.Byte[] System.Convert.FromBase64String(System.String s) hit! --------StackTrace information-------- at hcl45PQTieXnwrpI9lB.RkqDPcQnHRQROgBBoZr.eAFQPbDrrcSpsTJ0VVT(Object ) at hcl45PQTieXnwrpI9lB.RkqDPcQnHRQROgBBoZr.aC8QKx8yg2(Object ) at NDe5LmRqsvJlq92k45F.k6lR0X3JVa(Byte[] , NDe5LmRqsvJlq92k45F ) at BuPVjX5lBE7AHUTgYMG.BWfuh65X3QA1Ziwui6D.DJw5RXYMkd() at FoTQswMYIAva8K0Bxdv.k6lR0X3JVa(FoTQswMYIAva8K0Bxdv ) at BuPVjX5lBE7AHUTgYMG.BWfuh65X3QA1Ziwui6D.TVx57u6qmk() at AmGG0qR3TQpb50MqLCk.k6lR0X3JVa(Object , AmGG0qR3TQpb50MqLCk ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- ----Function argument information----- Type: "System.String" Name: "s" Value: "xPPXQidhE4Z695xNbuBOTQ==" -------------------------------------- -------------Return value------------- Type: "System.Byte[]" Name: "ReturnValue" Value: "196, 243, 215, 66, 39, 97, 19, 134, 122, 247, 156, 77, 110, 224, 78, 77" -------------------------------------- [02-02-2025 16:46:21] Hook for System.String System.IO.Path.Combine(System.String path1, System.String path2) hit! --------StackTrace information-------- at PfL4A35BP8POrsettWr.ak9lYT5k7o5VDeOTvTT.bT2CmuGbJXkrqbS39Nq(Object , Object ) at PfL4A35BP8POrsettWr.ak9lYT5k7o5VDeOTvTT.rZU5PV3yFJ(Byte[] , String , String , String ) at Qmu3WGMwci2F23nPj1H.k6lR0X3JVa(Object , Byte[] , String , String , String , Qmu3WGMwci2F23nPj1H ) at BuPVjX5lBE7AHUTgYMG.BWfuh65X3QA1Ziwui6D.TVx57u6qmk() at AmGG0qR3TQpb50MqLCk.k6lR0X3JVa(Object , AmGG0qR3TQpb50MqLCk ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- ----Function argument information----- Type: "System.String" Name: "path1" Value: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\" Type: "System.String" Name: "path2" Value: "InstallUtil.exe" -------------------------------------- -------------Return value------------- Type: "System.String" Name: "ReturnValue" Value: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe" -------------------------------------- [02-02-2025 16:46:22] Hook for System.Boolean System.IO.File.Exists(System.String path) hit! --------StackTrace information-------- at PfL4A35BP8POrsettWr.ak9lYT5k7o5VDeOTvTT.LWv1htG3Y4MkcLNSkcJ(Object ) at PfL4A35BP8POrsettWr.ak9lYT5k7o5VDeOTvTT.rZU5PV3yFJ(Byte[] , String , String , String ) at Qmu3WGMwci2F23nPj1H.k6lR0X3JVa(Object , Byte[] , String , String , String , Qmu3WGMwci2F23nPj1H ) at BuPVjX5lBE7AHUTgYMG.BWfuh65X3QA1Ziwui6D.TVx57u6qmk() at AmGG0qR3TQpb50MqLCk.k6lR0X3JVa(Object , AmGG0qR3TQpb50MqLCk ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- ----Function argument information----- Type: "System.String" Name: "path" Value: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe" -------------------------------------- -------------Return value------------- Type: "System.Boolean" Name: "ReturnValue" Value: "True" -------------------------------------- [02-02-2025 16:46:23] Hook for System.Diagnostics.Process[] System.Diagnostics.Process.GetProcessesByName(System.String processName) hit! --------StackTrace information-------- at PfL4A35BP8POrsettWr.ak9lYT5k7o5VDeOTvTT.CF5SAZY78aJWDj0dNi0(Object ) at PfL4A35BP8POrsettWr.ak9lYT5k7o5VDeOTvTT.qpQ5NpBXKT(String , VDlZNlgtIpIVKUosjP& , IntPtr& ) at qeSCB1MzXKmlZ5xbAFI.k6lR0X3JVa(Object , String , VDlZNlgtIpIVKUosjP& , IntPtr& , qeSCB1MzXKmlZ5xbAFI ) at PfL4A35BP8POrsettWr.ak9lYT5k7o5VDeOTvTT.k6O5YKVLjb(String , String , String ) at rUfe0rMCeC24GyMxBR4.k6lR0X3JVa(Object , String , String , String , rUfe0rMCeC24GyMxBR4 ) at PfL4A35BP8POrsettWr.ak9lYT5k7o5VDeOTvTT.N9J5FxfmE3(Byte[] , String , String , String ) at sBXAvwMSQT7EpXr01hc.k6lR0X3JVa(Object , Byte[] , String , String , String , sBXAvwMSQT7EpXr01hc ) at PfL4A35BP8POrsettWr.ak9lYT5k7o5VDeOTvTT.rZU5PV3yFJ(Byte[] , String , String , String ) at Qmu3WGMwci2F23nPj1H.k6lR0X3JVa(Object , Byte[] , String , String , String , Qmu3WGMwci2F23nPj1H ) at BuPVjX5lBE7AHUTgYMG.BWfuh65X3QA1Ziwui6D.TVx57u6qmk() at AmGG0qR3TQpb50MqLCk.k6lR0X3JVa(Object , AmGG0qR3TQpb50MqLCk ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- ----Function argument information----- Type: "System.String" Name: "processName" Value: "explorer" -------------------------------------- -------------Return value------------- Type: "System.Diagnostics.Process[]" Name: "ReturnValue" Value: "System.Diagnostics.Process System.Diagnostics.Process (explorer)" -------------------------------------- [02-02-2025 16:46:24] Hook for System.String System.IO.Path.GetDirectoryName(System.String path) hit! --------StackTrace information-------- at PfL4A35BP8POrsettWr.ak9lYT5k7o5VDeOTvTT.mJrJU9YXsHCOebW57cX(Object ) at PfL4A35BP8POrsettWr.ak9lYT5k7o5VDeOTvTT.k6O5YKVLjb(String , String , String ) at rUfe0rMCeC24GyMxBR4.k6lR0X3JVa(Object , String , String , String , rUfe0rMCeC24GyMxBR4 ) at PfL4A35BP8POrsettWr.ak9lYT5k7o5VDeOTvTT.N9J5FxfmE3(Byte[] , String , String , String ) at sBXAvwMSQT7EpXr01hc.k6lR0X3JVa(Object , Byte[] , String , String , String , sBXAvwMSQT7EpXr01hc ) at PfL4A35BP8POrsettWr.ak9lYT5k7o5VDeOTvTT.rZU5PV3yFJ(Byte[] , String , String , String ) at Qmu3WGMwci2F23nPj1H.k6lR0X3JVa(Object , Byte[] , String , String , String , Qmu3WGMwci2F23nPj1H ) at BuPVjX5lBE7AHUTgYMG.BWfuh65X3QA1Ziwui6D.TVx57u6qmk() at AmGG0qR3TQpb50MqLCk.k6lR0X3JVa(Object , AmGG0qR3TQpb50MqLCk ) at Qayq1inBOgbsdLRs7o.gQgK8Qe9WGOWR3TdEC.iflTDmQLf() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Delegate.DynamicInvokeImpl(Object[] args) at Krbgjwkkk.Composer.InterceptorServiceComp.DefineGlobal() at Krbgjwkkk.Queues.VisitorGlobal.VisitComparator() at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor) at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Reflection.MethodBase.Invoke(Object obj, Object[] parameters) at DotDumper.HookHandlers.MethodBaseHooks.InvokeHookObjectObjectArray(MethodBase methodBase, Object obj, Object[] parameters) in C:\Users\John\Source\Repos\DotDumper\DotDumper\HookHandlers\MethodBase\MethodBaseHooks.cs:line 26 at DotDumper.Program.Main(String[] args) in C:\Users\John\Source\Repos\DotDumper\DotDumper\Program.cs:line 86 -------------------------------------- ---------Assembly call order---------- Szdihkrrj (SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e) [DotDumper or DotNet Framework related assembly] Krbgjwkkk (SHA-256: 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004) [DotDumper or DotNet Framework related assembly] -------------------------------------- ---Originating assembly information--- Name: Szdihkrrj Version: 1.0.0.0 MD-5: 28614190a64b33f62b2c660e52ccbe89 SHA-1: 07f6bcbfbb4f1cd1f195648dc62d3ff8a26ddd19 SHA-256: ab60f5b30566b8ca04973394e6f553828279c65a145fd2ffda4f613214cbd48e SHA-384: 49069dbc7c93d27dc1ed3e807294c71ded91fc392b0c0646c5a1bb6278c777aebfb40b0e96377badd526b6e4cd64ef36 SHA-512: 518d3b0ffa87faaae58d69963d382576350eb46d8ca716cbc1a3a256ecd0c47ade4591d94d9fbe932349c59245380444eee12c2b8e84cfb9414f8192c7d9e20a ImportHash: dae02f32a21e03ce65412f6e56942daa Resource names: igky1CqIib2sK1QxWs.4TcjVSWDkSYE3t83Es vym0OB5qNJuxVm9g0a.OU8g3DUAK82WyYDwW1 SWBjCjH3LKLv4pitIC.N49tEHuf1mrVufEbBX 5rbqxG9ftgHXxnxREm.ZMwicaQqaH8PJ9FIvw SIm8HBsxww1AO4DMZB.6fr03dpL41KbKFJEMp Dg2Nj0O9Qk8g9b8LMk.8dAjsD0YPbrBG8F73Q -------------------------------------- ---------Parent assembly hash--------- 8194e7c7be47a699d8fd05d8e1bd49de64c7587fa367eea190e1c4466d423004 -------------------------------------- ----Function argument information----- Type: "System.String" Name: "path" Value: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe" -------------------------------------- -------------Return value------------- Type: "System.String" Name: "ReturnValue" Value: "C:\Windows\Microsoft.NET\Framework\v4.0.30319" --------------------------------------