<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>.NET &#8211; Cerbero Blog</title>
	<atom:link href="https://blog.cerbero.io/tag/net/feed/" rel="self" type="application/rss+xml" />
	<link>https://blog.cerbero.io</link>
	<description></description>
	<lastBuildDate>Tue, 09 Jul 2024 06:45:50 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=6.9.4</generator>

<image>
	<url>https://blog.cerbero.io/wp-content/uploads/2023/09/cropped-pro_icon_512-32x32.png</url>
	<title>.NET &#8211; Cerbero Blog</title>
	<link>https://blog.cerbero.io</link>
	<width>32</width>
	<height>32</height>
</image> 
<site xmlns="com-wordpress:feed-additions:1">184292133</site>	<item>
		<title>.NET Decompiler Package</title>
		<link>https://blog.cerbero.io/net-decompiler-package/</link>
					<comments>https://blog.cerbero.io/net-decompiler-package/#respond</comments>
		
		<dc:creator><![CDATA[Erik Pistelli]]></dc:creator>
		<pubDate>Tue, 09 Jul 2024 06:45:50 +0000</pubDate>
				<category><![CDATA[Package]]></category>
		<category><![CDATA[.NET]]></category>
		<category><![CDATA[decompiler]]></category>
		<category><![CDATA[MSIL]]></category>
		<category><![CDATA[PE]]></category>
		<category><![CDATA[Portable Executable]]></category>
		<guid isPermaLink="false">https://blog.cerbero.io/?p=3030</guid>

					<description><![CDATA[We&#8217;re excited to release the DotNET Decompiler package for all licenses of Cerbero Suite: this package is capable of decompiling .NET assemblies from their bytecode back to C#. Once you have installed the package, you can access the decompiler from the bytecode view. The interface provides a quick filter to show only matching namespaces, classes, &#8230; <a href="https://blog.cerbero.io/net-decompiler-package/" class="more-link">Continue reading<span class="screen-reader-text"> ".NET Decompiler Package"</span></a>]]></description>
		
					<wfw:commentRss>https://blog.cerbero.io/net-decompiler-package/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">3030</post-id>	</item>
		<item>
		<title>DotNET ManifestResources Format Package</title>
		<link>https://blog.cerbero.io/dotnet-manifestresources-format-package/</link>
					<comments>https://blog.cerbero.io/dotnet-manifestresources-format-package/#respond</comments>
		
		<dc:creator><![CDATA[Erik Pistelli]]></dc:creator>
		<pubDate>Thu, 04 Apr 2024 10:06:38 +0000</pubDate>
				<category><![CDATA[Package]]></category>
		<category><![CDATA[.NET]]></category>
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[Microsoft]]></category>
		<category><![CDATA[resources]]></category>
		<guid isPermaLink="false">https://blog.cerbero.io/?p=2975</guid>

					<description><![CDATA[We have released the DotNET ManifestResources Format package for all licenses of Cerbero Suite. .NET manifest resources are embedded elements within .NET assemblies, used to store additional data such as files, icons, and strings that an application requires for execution. These resources are directly compiled into the executable, becoming a part of the application’s core &#8230; <a href="https://blog.cerbero.io/dotnet-manifestresources-format-package/" class="more-link">Continue reading<span class="screen-reader-text"> "DotNET ManifestResources Format Package"</span></a>]]></description>
		
					<wfw:commentRss>https://blog.cerbero.io/dotnet-manifestresources-format-package/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">2975</post-id>	</item>
		<item>
		<title>RedLine Stealer Dropper</title>
		<link>https://blog.cerbero.io/redline-stealer-dropper/</link>
					<comments>https://blog.cerbero.io/redline-stealer-dropper/#respond</comments>
		
		<dc:creator><![CDATA[Erik Pistelli]]></dc:creator>
		<pubDate>Tue, 07 Mar 2023 11:53:28 +0000</pubDate>
				<category><![CDATA[Analysis]]></category>
		<category><![CDATA[Reversing]]></category>
		<category><![CDATA[.NET]]></category>
		<category><![CDATA[Batch]]></category>
		<category><![CDATA[Deobfuscator]]></category>
		<category><![CDATA[Dropper]]></category>
		<category><![CDATA[Emulator]]></category>
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[Multistage]]></category>
		<category><![CDATA[OneNote]]></category>
		<category><![CDATA[Payload]]></category>
		<category><![CDATA[Powershell]]></category>
		<guid isPermaLink="false">https://blog.cerbero.io/?p=2542</guid>

					<description><![CDATA[An interesting sample containing a number of different obfuscation techniques. In this article we analyze the dropper in detail and reach the final stage. SHA256: 0B93B5287841CEF2C6B2F2C3221C59FFD61BF772CD0D8B2BDAB9DADEB570C7A6 The first file we encounter is a OneNote document. If the &#8220;OneNote Format&#8221; package is installed, all files are automatically extracted. Among the extracted files there are two unidentified &#8230; <a href="https://blog.cerbero.io/redline-stealer-dropper/" class="more-link">Continue reading<span class="screen-reader-text"> "RedLine Stealer Dropper"</span></a>]]></description>
		
					<wfw:commentRss>https://blog.cerbero.io/redline-stealer-dropper/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">2542</post-id>	</item>
		<item>
		<title>.NET support</title>
		<link>https://blog.cerbero.io/net-support/</link>
					<comments>https://blog.cerbero.io/net-support/#comments</comments>
		
		<dc:creator><![CDATA[Erik Pistelli]]></dc:creator>
		<pubDate>Sun, 02 Dec 2012 16:07:58 +0000</pubDate>
				<category><![CDATA[Suite Standard]]></category>
		<category><![CDATA[.NET]]></category>
		<category><![CDATA[bytecode]]></category>
		<category><![CDATA[MSIL]]></category>
		<guid isPermaLink="false">http://cerbero-blog.com/?p=830</guid>

					<description><![CDATA[Although there haven&#8217;t been customer requests for this, the upcoming 0.9.0 version of the Profiler adds support for .NET, which includes format, layout ranges and an MSIL disassembler. As usual, let&#8217;s begin with the format itself. Since some users probably have used CFF Explorer to inspect the .NET format in the past, I have kept &#8230; <a href="https://blog.cerbero.io/net-support/" class="more-link">Continue reading<span class="screen-reader-text"> ".NET support"</span></a>]]></description>
		
					<wfw:commentRss>https://blog.cerbero.io/net-support/feed/</wfw:commentRss>
			<slash:comments>3</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">830</post-id>	</item>
	</channel>
</rss>
