Xor.dll

Description: Coorporation RG

Authors: Coorporation RG

Version: 5.1.0.0

Architecture: 32-bit

Operating System: Windows NT

SHA256: ad2fb84dc0e3b60c56b41d3c459ccf13

File Size: 604.7 KB

Uploaded At: Jan. 17, 2026, 11:27 p.m.

Views: 16

Exported Functions

  • XORS (Ordinal: 1, Address: 0x670e0)
  • _XorResponse@12 (Ordinal: 2, Address: 0x440b0)

Imported DLLs & Functions

advapi32.dll
  • CryptGetHashParam (Address: 0x101a6174)
comctl32.dll
  • ImageList_Create (Address: 0x101a6214)
CRYPT32.dll
  • CryptProtectData (Address: 0x101a6184)
GDI32.dll
  • CreateFontW (Address: 0x101a6224)
gdiplus.dll
  • GdipDisposeImage (Address: 0x101a6194)
kernel32.dll
  • GetModuleHandleW (Address: 0x101a6154)
MSIMG32.dll
  • GradientFill (Address: 0x101a61d4)
MSVCP100.dll
  • ?pbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z (Address: 0x101a6204)
MSVCR100.dll
  • _unlock (Address: 0x101a61a4)
ole32.dll
  • CoCreateInstance (Address: 0x101a61b4)
OLEAUT32.dll
  • VariantClear (Address: 0x101a61c4)
shell32.dll
  • ExtractIconW (Address: 0x101a61e4)
SHLWAPI.dll
  • PathFindExtensionW (Address: 0x101a6234)
user32.dll
  • FrameRect (Address: 0x101a6164)
WINTRUST.dll
  • WinVerifyTrust (Address: 0x101a61f4)
WS2_32.dll
  • WSAWaitForMultipleEvents (Address: 0x101a6244)