This is interesting to me, when extracting a deobfuscated version of it (deobfuscated using de4dot), I saw this:
At this point I was already decompiling and reversing it to implement its functionality into an Electron app, making it crossplatform, but I think you should know of this warning too.
Of course, it could be a "false positive" and this could be nothing, but it is quite interesting already.
The program encrypts every string in a file called "fvGvniHlL5t89jCdxt.iXRCkP2b29rLWjHYun
", what algorithm, I'm unsure, but I think it might be AES. This file is an embedded resource, meaning it's in the .exe file itself, however there is another embedded resource with it, called "rKnD7Rxc5txuEtqdTo.nuAYrdapOvOf5d0Z8S
", which because as I said before every string in the program is encrypted turns up no result when searched, but after I made my decryptor I found this (look at string 193152
):
What references this I haven't found, I just found this a few minutes ago as of writing this. I might update this document at a later date.
EDIT: I still haven't found reference to 193152
, worrying...
EDIT (2): Not used? I don't believe that somehow - if the encryptor turned that into a string to be decrypted by that function, no way it isn't used, I'm missing something...