Suspicious
Suspect

14be2fb462c70fcaaa22493053e3d39d

PE Executable
MD5: 14be2fb462c70fcaaa22493053e3d39d
Size: 16.29 MB
application/x-dosexec

This sample is a 15.5 MB PE Executable. Malva.RE parsed it statically and found no known malware family, configuration or malicious signature. Static analysis extracted 1851 embedded or derived files. It matches 6 YARA rules. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.

SHA256
db15a159ffa5f570bd280069208761d0aa1261bb409a5a9abc84fdc88d6ce80e
MD5
14be2fb462c70fcaaa22493053e3d39d
Verdict
No known threat found
File type
PE Executable · 15.5 MB

Cite this report: https://app.malva.re/sha256/db15a159ffa5f570bd280069208761d0aa1261bb409a5a9abc84fdc88d6ce80e

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Portable Executable file
Size
16.29 MB · 16,293,376 B
First seen
2026-10-02 07:30 · one month ago
Last seen
2026-10-02 07:30 · one month ago
Last analysis
2026-10-02 07:30 · one month ago
Hashes
MD5 14be2fb462c70fcaaa22493053e3d39d Sha1 3d948f927b08480cd8bc827cf2402ba64880bcff Sha256 db15a159ffa5f570bd280069208761d0aa1261bb409a5a9abc84fdc88d6ce80e Sha384 12da13e33f46ffc4203bd9255c275fcd5f97110d47f0ce18a425a8f3da5750e1daec0a6af2ef14842303909d204dbe19 Sha512 eeab0bd4eae1af685281178e685ff404fb93c448208431d81f108ec68ea3969872147f46d9f31f9c9620ce20ca39485ec3ebd9b96e9a980ae78637da37e42851 SSDeep 393216:ZBW4cAY+y7BOIBSYLCtnq61FLBAiEVV/o:K4U+yFOIc5tZ/LmJ6 TLSH ABF633DCF19C4CBDD91F85318FB2B1EDD2E10087C697B23954E905C472A3AF2A66C25A
Detection
PeID
Microsoft Visual C++ DLLMicrosoft Visual C++ v6.0Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
Symbol obfuscation
Medium

1852 files
EXE14be2fb462c70fcaaa22493053e3d39d
Structure
BINResources
BINRT_ICON
BINID:0002
BINID:0
BINRT_GROUP_CURSOR4
BINID:7F00
BINID:0
BINRT_VERSION
BINID:0001
BINID:0
BINRT_MANIFEST
BINID:0001
BINID:0
BIN.Net Resources
IMGwebsite-hero.jpg
IMGwebsite-hero.jpg-preview.png
ZIPbootstrap.zip
ZIPpawly-agent.jar
BINMETA-INF
MFMANIFEST.MF
BINapp
BINpawly
BINattach
BINAttachMain.class
BINa.class
BINEntry.class
BINb$a.class
BINb.class
BINc.class
BINd.class
BINe.class
BINf.class
BINg$a.class
BINg$b.class
BINg$c.class
BINg$d.class
BINg.class
BINloader
BINMemoryArchiveLoader$1.class
BINMemoryArchiveLoader$2.class
BINMemoryArchiveLoader.class
BINsecurity
BINReleaseIdentity.class
DERpawly-release-public.der
TXTpawly-min-release.txt
TXTpawly-bootstrap-generation.txt
ZIPpawly-bridge.jar
BINapp
BINpawly
BINbridge
BINDispatch.class
ZIPpawly-hooks.jar
BINMETA-INF
MFMANIFEST.MF
BINapp
BINpawly
BINhooks
BINHookEngine$1.class
BINHookEngine$2$1.class
BINHookEngine$2.class
BINHookEngine$a.class
BINHookEngine.class
BINorg
BINobjectweb
BINasm
BINcommons
BINAdviceAdapter.class
BINAnalyzerAdapter.class
BINAnnotationRemapper.class
BINClassRemapper.class
BINCodeSizeEvaluator.class
BINFieldRemapper.class
BINGeneratorAdapter.class
BINInstructionAdapter.class
BINJSRInlinerAdapter$Instantiation.class
BINJSRInlinerAdapter.class
BINLocalVariablesSorter.class
BINMethod.class
BINMethodRemapper.class
BINModuleHashesAttribute.class
BINModuleRemapper.class
BINModuleResolutionAttribute.class
BINModuleTargetAttribute.class
BINRecordComponentRemapper.class
BINRemapper.class
BINSerialVersionUIDAdder$Item.class
BINSerialVersionUIDAdder.class
BINSignatureRemapper.class
BINSimpleRemapper.class
BINStaticInitMerger.class
BINTableSwitchGenerator.class
BINTryCatchBlockSorter$1.class
BINTryCatchBlockSorter.class
BINtree
BINAbstractInsnNode.class
BINAnnotationNode.class
BINClassNode.class
BINFieldInsnNode.class
BINFieldNode.class
BINFrameNode.class
BINIincInsnNode.class
BINInnerClassNode.class
BINInsnList$InsnListIterator.class
BINInsnList.class
BINInsnNode.class
BINIntInsnNode.class
BINInvokeDynamicInsnNode.class
BINJumpInsnNode.class
BINLabelNode.class
BINLdcInsnNode.class
BINLineNumberNode.class
BINLocalVariableAnnotationNode.class
BINLocalVariableNode.class
BINLookupSwitchInsnNode.class
BINMethodInsnNode.class
BINMethodNode$1.class
BINMethodNode.class
BINModuleExportNode.class
BINModuleNode.class
BINModuleOpenNode.class
BINModuleProvideNode.class
BINModuleRequireNode.class
BINMultiANewArrayInsnNode.class
BINParameterNode.class
BINRecordComponentNode.class
BINTableSwitchInsnNode.class
BINTryCatchBlockNode.class
BINTypeAnnotationNode.class
BINTypeInsnNode.class
BINUnsupportedClassVersionException.class
BINUtil.class
BINVarInsnNode.class
BINAnnotationVisitor.class
BINAnnotationWriter.class
BINAttribute$Set.class
BINAttribute.class
BINByteVector.class
BINClassReader.class
BINClassTooLargeException.class
BINClassVisitor.class
BINClassWriter.class
BINConstantDynamic.class
BINConstants.class
BINContext.class
BINCurrentFrame.class
BINEdge.class
BINFieldVisitor.class
BINFieldWriter.class
BINFrame.class
BINHandle.class
BINHandler.class
BINLabel.class
BINMethodTooLargeException.class
BINMethodVisitor.class
BINMethodWriter.class
BINModuleVisitor.class
BINModuleWriter.class
BINOpcodes.class
BINRecordComponentVisitor.class
BINRecordComponentWriter.class
BINSymbol.class
BINSymbolTable$Entry.class
BINSymbolTable$LabelEntry.class
BINSymbolTable.class
BINType.class
BINTypePath.class
BINTypeReference.class
BINsignature
BINSignatureReader.class
BINSignatureVisitor.class
BINSignatureWriter.class
BINruntime
BINrelease
BINbin
DLLapi-ms-win-core-console-l1-1-0.dll
Structure
P7B[Authenticode]_21bee036.p7b
DLLapi-ms-win-core-console-l1-2-0.dll
Structure
P7B[Authenticode]_d0c2de05.p7b
DLLapi-ms-win-core-datetime-l1-1-0.dll
Structure
P7B[Authenticode]_a3a6a9cd.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLapi-ms-win-core-debug-l1-1-0.dll
Structure
P7B[Authenticode]_0ec87edf.p7b
DLLapi-ms-win-core-errorhandling-l1-1-0.dll
Structure
P7B[Authenticode]_a16b48b1.p7b
DLLapi-ms-win-core-fibers-l1-1-0.dll
Structure
P7B[Authenticode]_83568075.p7b
DLLapi-ms-win-core-fibers-l1-1-1.dll
Structure
P7B[Authenticode]_24ac0238.p7b
DLLapi-ms-win-core-file-l1-1-0.dll
Structure
P7B[Authenticode]_ddf70009.p7b
DLLapi-ms-win-core-file-l1-2-0.dll
Structure
P7B[Authenticode]_0e2f8365.p7b
DLLapi-ms-win-core-file-l2-1-0.dll
Structure
P7B[Authenticode]_5371fd89.p7b
DLLapi-ms-win-core-handle-l1-1-0.dll
Structure
P7B[Authenticode]_3e10b352.p7b
DLLapi-ms-win-core-heap-l1-1-0.dll
Structure
P7B[Authenticode]_64ee5518.p7b
DLLapi-ms-win-core-interlocked-l1-1-0.dll
Structure
P7B[Authenticode]_0a8a9bc4.p7b
DLLapi-ms-win-core-kernel32-legacy-l1-1-1.dll
Structure
P7B[Authenticode]_1bb494fb.p7b
DLLapi-ms-win-core-libraryloader-l1-1-0.dll
Structure
P7B[Authenticode]_aca66cce.p7b
DLLapi-ms-win-core-localization-l1-2-0.dll
Structure
P7B[Authenticode]_2a57f005.p7b
DLLapi-ms-win-core-memory-l1-1-0.dll
Structure
P7B[Authenticode]_ab6edf9f.p7b
DLLapi-ms-win-core-namedpipe-l1-1-0.dll
Structure
P7B[Authenticode]_0fc98554.p7b
DLLapi-ms-win-core-processenvironment-l1-1-0.dll
Structure
P7B[Authenticode]_aa1bd9cb.p7b
DLLapi-ms-win-core-processthreads-l1-1-0.dll
Structure
P7B[Authenticode]_c3675623.p7b
DLLapi-ms-win-core-processthreads-l1-1-1.dll
Structure
P7B[Authenticode]_81fff91c.p7b
DLLapi-ms-win-core-profile-l1-1-0.dll
Structure
P7B[Authenticode]_927dc9f1.p7b
DLLapi-ms-win-core-rtlsupport-l1-1-0.dll
Structure
P7B[Authenticode]_2255cf99.p7b
DLLapi-ms-win-core-string-l1-1-0.dll
Structure
P7B[Authenticode]_13a71e23.p7b
DLLapi-ms-win-core-synch-l1-1-0.dll
Structure
P7B[Authenticode]_563ab3b8.p7b
DLLapi-ms-win-core-synch-l1-2-0.dll
Structure
P7B[Authenticode]_3dc2d39f.p7b
DLLapi-ms-win-core-sysinfo-l1-1-0.dll
Structure
P7B[Authenticode]_7c238a04.p7b
DLLapi-ms-win-core-sysinfo-l1-2-0.dll
Structure
P7B[Authenticode]_770f00e3.p7b
DLLapi-ms-win-core-timezone-l1-1-0.dll
Structure
P7B[Authenticode]_319a29b6.p7b
DLLapi-ms-win-core-util-l1-1-0.dll
Structure
P7B[Authenticode]_1d39af5a.p7b
DLLapi-ms-win-crt-conio-l1-1-0.dll
Structure
P7B[Authenticode]_cf6413c4.p7b
DLLapi-ms-win-crt-convert-l1-1-0.dll
Structure
P7B[Authenticode]_b522d520.p7b
DLLapi-ms-win-crt-environment-l1-1-0.dll
Structure
P7B[Authenticode]_6fba098e.p7b
DLLapi-ms-win-crt-filesystem-l1-1-0.dll
Structure
P7B[Authenticode]_d0637095.p7b
DLLapi-ms-win-crt-heap-l1-1-0.dll
Structure
P7B[Authenticode]_f91b6cbf.p7b
DLLapi-ms-win-crt-locale-l1-1-0.dll
Structure
P7B[Authenticode]_55751490.p7b
DLLapi-ms-win-crt-math-l1-1-0.dll
Structure
P7B[Authenticode]_444535bc.p7b
DLLapi-ms-win-crt-multibyte-l1-1-0.dll
Structure
P7B[Authenticode]_ea025b3d.p7b
DLLapi-ms-win-crt-private-l1-1-0.dll
Structure
P7B[Authenticode]_59f9eae4.p7b
DLLapi-ms-win-crt-process-l1-1-0.dll
Structure
P7B[Authenticode]_d660062a.p7b
DLLapi-ms-win-crt-runtime-l1-1-0.dll
Structure
P7B[Authenticode]_dece20e5.p7b
DLLapi-ms-win-crt-stdio-l1-1-0.dll
Structure
P7B[Authenticode]_b3f9fc4f.p7b
DLLapi-ms-win-crt-string-l1-1-0.dll
Structure
P7B[Authenticode]_1b49c9be.p7b
DLLapi-ms-win-crt-time-l1-1-0.dll
Structure
P7B[Authenticode]_d5c9975f.p7b
DLLapi-ms-win-crt-utility-l1-1-0.dll
Structure
P7B[Authenticode]_9047a357.p7b
DLLattach.dll
Structure
P7B[Authenticode]_50eb4c9d.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLinstrument.dll
Structure
P7B[Authenticode]_d8d9197e.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLjava.dll
Structure
P7B[Authenticode]_264455c3.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXEjava.exe
Structure
P7B[Authenticode]_fd03258a.p7b
BINResources
BINRT_ICON
BINID:0001
BINID:1033
BINID:0002
BINID:1033
BINID:0003
BINID:1033
BINID:0004
BINID:1033
BINID:0005
BINID:1033
BINID:0006
BINID:1033
BINID:0007
BINID:1033
BINID:0008
BINID:1033
BINID:0009
BINID:1033
BINID:000A
BINID:1033
BINID:000B
BINID:1033
BINID:000C
BINID:1033
BINRT_GROUP_CURSOR4
BINID:07D0
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
BINRT_MANIFEST
BINID:0001
BINID:1033
EXEjavaw.exe
Structure
P7B[Authenticode]_e454de8f.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
BINRT_MANIFEST
BINID:0001
BINID:1033
DLLjimage.dll
Structure
P7B[Authenticode]_8200d346.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLjli.dll
Structure
P7B[Authenticode]_3a768f90.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXEkeytool.exe
Structure
P7B[Authenticode]_84449265.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
BINRT_MANIFEST
BINID:0001
BINID:1033
DLLmanagement.dll
Structure
P7B[Authenticode]_e15e67c3.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLmsvcp140.dll
Structure
P7B[Authenticode]_2aa0c996.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLnet.dll
Structure
P7B[Authenticode]_0c965d64.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLnio.dll
Structure
P7B[Authenticode]_bd2faa5b.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLsyslookup.dll
Structure
P7B[Authenticode]_9386d8ff.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLucrtbase.dll
Structure
P7B[Authenticode]_df5d0c0f.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLvcruntime140.dll
Structure
P7B[Authenticode]_87ed8b9b.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLvcruntime140_1.dll
Structure
P7B[Authenticode]_abae8cb4.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLverify.dll
Structure
P7B[Authenticode]_ae76ff8e.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLzip.dll
Structure
P7B[Authenticode]_3ed80cc9.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
BINserver
DLLjvm.dll
Structure
P7B[Authenticode]_d0d2028a.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
BINRT_MANIFEST
BINID:0002
BINID:1033
BINconf
BINlogging.properties
BINnet.properties
BINsecurity
BINjava.security
BINpolicy
TXTREADME.txt
BINlimited
BINdefault_local.policy
BINdefault_US_export.policy
BINexempt_local.policy
BINunlimited
BINdefault_local.policy
BINlegal
BINjava.base
MDaes.md
MDc-libutl.md
MDcldr.md
BINCOPYRIGHT
MDicu.md
BINLICENSE
MDpublic_suffix.md
MDsiphash.md
MDunicode.md
MDwepoll.md
MDzlib.md
BINjava.instrument
BINCOPYRIGHT
BINLICENSE
BINlib
BINclasslist
ZIPjrt-fs.jar
BINMETA-INF
MFMANIFEST.MF
BINservices
BINjava.nio.file.spi.FileSystemProvider
BINjdk
BINinternal
BINjimage
BINBasicImageReader$1.class
BINBasicImageReader$2.class
BINBasicImageReader.class
BINImageBufferCache$1.class
BINImageBufferCache$2.class
BINImageBufferCache.class
BINImageHeader.class
BINImageLocation.class
BINImageReader$1.class
BINImageReader$Directory.class
BINImageReader$LinkNode.class
BINImageReader$Node.class
BINImageReader$Resource.class
BINImageReader$SharedImageReader$LocationVisitor.class
BINImageReader$SharedImageReader.class
BINImageReader.class
BINImageReaderFactory$1.class
BINImageReaderFactory.class
BINImageStream.class
BINImageStrings.class
BINImageStringsReader.class
BINNativeImageBuffer$1.class
BINNativeImageBuffer.class
BINdecompressor
BINCompressIndexes.class
BINCompressedResourceHeader.class
BINDecompressor.class
BINResourceDecompressor$StringsProvider.class
BINResourceDecompressor.class
BINResourceDecompressorFactory.class
BINResourceDecompressorRepository.class
BINSignatureParser$1.class
BINSignatureParser$ParseResult.class
BINSignatureParser.class
BINStringSharingDecompressor.class
BINStringSharingDecompressorFactory.class
BINZipDecompressor.class
BINZipDecompressorFactory.class
BINjrtfs
BINExplodedImage$PathNode.class
BINExplodedImage.class
BINJrtDirectoryStream$1.class
BINJrtDirectoryStream.class
BINJrtFileAttributeView$AttrID.class
BINJrtFileAttributeView.class
BINJrtFileAttributes.class
BINJrtFileStore.class
BINJrtFileSystem$1.class
BINJrtFileSystem.class
BINJrtFileSystemProvider$1.class
BINJrtFileSystemProvider$JrtFsLoader.class
BINJrtFileSystemProvider.class
BINJrtPath$1.class
BINJrtPath$2.class
BINJrtPath.class
BINJrtUtils.class
BINSystemImage$1.class
BINSystemImage$2.class
BINSystemImage.class
CFGjvm.cfg
LIBjvm.lib
BINmodules
DATtzdb.dat
BINtzmappings
BINsecurity
BINblocked.certs
BINcacerts
ZIPpublic_suffix_list.dat
BINaaa
BINaarp
BINabb
BINabbott
BINabbvie
BINabc
BINable
BINabogado
BINabudhabi
BINac
BINacademy
BINaccenture
BINaccountant
BINaccountants
BINaco
BINactor
BINad
BINads
BINadult
BINae
BINaeg
BINaero
BINaetna
BINaf
BINafl
BINafrica
BINag
BINagakhan
BINagency
BINai
BINaig
BINairbus
BINairforce
BINairtel
BINakdn
BINal
BINalibaba
BINalipay
BINallfinanz
BINallstate
BINally
BINalsace
BINalstom
BINam
BINamazon
BINamericanexpress
BINamericanfamily
BINamex
BINamfam
BINamica
BINamsterdam
BINanalytics
BINandroid
BINanquan
BINanz
BINao
BINaol
BINapartments
BINapp
BINapple
BINaq
BINaquarelle
BINar
BINarab
BINaramco
BINarchi
BINarmy
BINarpa
BINart
BINarte
BINas
BINasda
BINasia
BINassociates
BINat
BINathleta
BINattorney
BINau
BINauction
BINaudi
BINaudible
BINaudio
BINauspost
BINauthor
BINauto
BINautos
BINaw
BINaws
BINax
BINaxa
BINaz
BINazure
BINba
BINbaby
BINbaidu
BINbanamex
BINband
BINbank
BINbar
BINbarcelona
BINbarclaycard
BINbarclays
BINbarefoot
BINbargains
BINbaseball
BINbasketball
BINbauhaus
BINbayern
BINbb
BINbbc
BINbbt
BINbbva
BINbcg
BINbcn
BINbd
BINbe
BINbeats
BINbeauty
BINbeer
BINberlin
BINbest
BINbestbuy
BINbet
BINbf
BINbg
BINbh
BINbharti
BINbi
BINbible
BINbid
BINbike
BINbing
BINbingo
BINbio
BINbiz
BINbj
BINblack
BINblackfriday
BINblockbuster
BINblog
BINbloomberg
BINblue
BINbm
BINbms
BINbmw
BINbn
BINbnpparibas
BINbo
BINboats
BINboehringer
BINbofa
BINbom
BINbond
BINboo
BINbook
BINbooking
BINbosch
BINbostik
BINboston
BINbot
BINboutique
BINbox
BINbr
BINbradesco
BINbridgestone
BINbroadway
BINbroker
BINbrother
BINbrussels
BINbs
BINbt
BINbuild
BINbuilders
BINbusiness
BINbuy
BINbuzz
BINbv
BINbw
BINby
BINbz
BINbzh
BINca
BINcab
BINcafe
BINcal
BINcall
BINcalvinklein
BINcam
BINcamera
BINcamp
BINcanon
BINcapetown
BINcapital
BINcapitalone
BINcar
BINcaravan
BINcards
BINcare
BINcareer
BINcareers
BINcars
BINcasa
BINcase
BINcash
BINcasino
BINcat
BINcatering
BINcatholic
BINcba
BINcbn
BINcbre
BINcc
BINcd
BINcenter
BINceo
BINcern
BINcf
BINcfa
BINcfd
BINcg
BINch
BINchanel
BINchannel
BINcharity
BINchase
BINchat
BINcheap
BINchintai
BINchristmas
BINchrome
BINchurch
BINci
BINcipriani
BINcircle
BINcisco
BINcitadel
BINciti
BINcitic
BINcity
BINck
BINcl
BINclaims
BINcleaning
BINclick
BINclinic
BINclinique
BINclothing
BINcloud
BINclub
BINclubmed
BINcm
BINcn
BINco
BINcoach
BINcodes
BINcoffee
BINcollege
BINcologne
BINcom
BINcommbank
BINcommunity
BINcompany
BINcompare
BINcomputer
BINcomsec
BINcondos
BINconstruction
BINconsulting
BINcontact
BINcontractors
BINcooking
BINcool
BINcoop
BINcorsica
BINcountry
BINcoupon
BINcoupons
BINcourses
BINcpa
BINcr
BINcredit
BINcreditcard
BINcreditunion
BINcricket
BINcrown
BINcrs
BINcruise
BINcruises
BINcu
BINcuisinella
BINcv
BINcw
BINcx
BINcy
BINcymru
BINcyou
BINcz
BINdad
BINdance
BINdata
BINdate
BINdating
BINdatsun
BINday
BINdclk
BINdds
BINde
BINdeal
BINdealer
BINdeals
BINdegree
BINdelivery
BINdell
BINdeloitte
BINdelta
BINdemocrat
BINdental
BINdentist
BINdesi
BINdesign
BINdev
BINdhl
BINdiamonds
BINdiet
BINdigital
BINdirect
BINdirectory
BINdiscount
BINdiscover
BINdish
BINdiy
BINdj
BINdk
BINdm
BINdnp
BINdo
BINdocs
BINdoctor
BINdog
BINdomains
BINdot
BINdownload
BINdrive
BINdtv
BINdubai
BINdunlop
BINdupont
BINdurban
BINdvag
BINdvr
BINdz
BINearth
BINeat
BINec
BINeco
BINedeka
BINedu
BINeducation
BINee
BINeg
BINemail
BINemerck
BINenergy
BINengineer
BINengineering
BINenterprises
BINepson
BINequipment
BINer
BINericsson
BINerni
BINes
BINesq
BINestate
BINet
BINeu
BINeurovision
BINeus
BINevents
BINexchange
BINexpert
BINexposed
BINexpress
BINextraspace
BINfage
BINfail
BINfairwinds
BINfaith
BINfamily
BINfan
BINfans
BINfarm
BINfarmers
BINfashion
BINfast
BINfedex
BINfeedback
BINferrari
BINferrero
BINfi
BINfidelity
BINfido
BINfilm
BINfinal
BINfinance
BINfinancial
BINfire
BINfirestone
BINfirmdale
BINfish
BINfishing
BINfit
BINfitness
BINfj
BINfk
BINflickr
BINflights
BINflir
BINflorist
BINflowers
BINfly
BINfm
BINfo
BINfoo
BINfood
BINfootball
BINford
BINforex
BINforsale
BINforum
BINfoundation
BINfox
BINfr
BINfree
BINfresenius
BINfrl
BINfrogans
BINfrontier
BINftr
BINfujitsu
BINfun
BINfund
BINfurniture
BINfutbol
BINfyi
BINga
BINgal
BINgallery
BINgallo
BINgallup
BINgame
BINgames
BINgap
BINgarden
BINgay
BINgb
BINgbiz
BINgd
BINgdn
BINge
BINgea
BINgent
BINgenting
BINgeorge
BINgf
BINgg
BINggee
BINgh
BINgi
BINgift
BINgifts
BINgives
BINgiving
BINgl
BINglass
BINgle
BINglobal
BINglobo
BINgm
BINgmail
BINgmbh
BINgmo
BINgmx
BINgn
BINgodaddy
BINgold
BINgoldpoint
BINgolf
BINgoo
BINgoodyear
BINgoog
BINgoogle
BINgop
BINgot
BINgov
BINgp
BINgq
BINgr
BINgrainger
BINgraphics
BINgratis
BINgreen
BINgripe
BINgrocery
BINgroup
BINgs
BINgt
BINgu
BINgucci
BINguge
BINguide
BINguitars
BINguru
BINgw
BINgy
BINhair
BINhamburg
BINhangout
BINhaus
BINhbo
BINhdfc
BINhdfcbank
BINhealth
BINhealthcare
BINhelp
BINhelsinki
BINhere
BINhermes
BINhiphop
BINhisamitsu
BINhitachi
BINhiv
BINhk
BINhkt
BINhm
BINhn
BINhockey
BINholdings
BINholiday
BINhomedepot
BINhomegoods
BINhomes
BINhomesense
BINhonda
BINhorse
BINhospital
BINhost
BINhosting
BINhot
BINhotels
BINhotmail
BINhouse
BINhow
BINhr
BINhsbc
BINht
BINhu
BINhughes
BINhyatt
BINhyundai
BINibm
BINicbc
BINice
BINicu
BINid
BINie
BINieee
BINifm
BINikano
BINil
BINim
BINimamat
BINimdb
BINimmo
BINimmobilien
BINin
BINinc
BINindustries
BINinfiniti
BINinfo
BINing
BINink
BINinstitute
BINinsurance
BINinsure
BINint
BINinternational
BINintuit
BINinvestments
BINio
BINipiranga
BINiq
BINir
BINirish
BINis
BINismaili
BINist
BINistanbul
BINit
BINitau
BINitv
BINjaguar
BINjava
BINjcb
BINje
BINjeep
BINjetzt
BINjewelry
BINjio
BINjll
BINjm
BINjmp
BINjnj
BINjo
BINjobs
BINjoburg
BINjot
BINjoy
BINjp
BINjpmorgan
BINjprs
BINjuegos
BINjuniper
BINkaufen
BINkddi
BINke
BINkerryhotels
BINkerryproperties
BINkfh
BINkg
BINkh
BINki
BINkia
BINkids
BINkim
BINkindle
BINkitchen
BINkiwi
BINkm
BINkn
BINkoeln
BINkomatsu
BINkosher
BINkp
BINkpmg
BINkpn
BINkr
BINkrd
BINkred
BINkuokgroup
BINkw
BINky
BINkyoto
BINkz
BINla
BINlacaixa
BINlamborghini
BINlamer
BINland
BINlandrover
BINlanxess
BINlasalle
BINlat
BINlatino
BINlatrobe
BINlaw
BINlawyer
BINlb
BINlc
BINlds
BINlease
BINleclerc
BINlefrak
BINlegal
BINlego
BINlexus
BINlgbt
BINli
BINlidl
BINlife
BINlifeinsurance
BINlifestyle
BINlighting
BINlike
BINlilly
BINlimited
BINlimo
BINlincoln
BINlink
BINlive
BINliving
BINlk
BINllc
BINllp
BINloan
BINloans
BINlocker
BINlocus
BINlol
BINlondon
BINlotte
BINlotto
BINlove
BINlpl
BINlplfinancial
BINlr
BINls
BINlt
BINltd
BINltda
BINlu
BINlundbeck
BINluxe
BINluxury
BINlv
BINly
BINma
BINmadrid
BINmaif
BINmaison
BINmakeup
BINman
BINmanagement
BINmango
BINmap
BINmarket
BINmarketing
BINmarkets
BINmarriott
BINmarshalls
BINmattel
BINmba
BINmc
BINmckinsey
BINmd
BINme
BINmed
BINmedia
BINmeet
BINmelbourne
BINmeme
BINmemorial
BINmen
BINmenu
BINmerck
BINmerckmsd
BINmg
BINmh
BINmiami
BINmicrosoft
BINmil
BINmini
BINmint
BINmit
BINmitsubishi
BINmk
BINml
BINmlb
BINmls
BINmm
BINmma
BINmn
BINmo
BINmobi
BINmobile
BINmoda
BINmoe
BINmoi
BINmom
BINmonash
BINmoney
BINmonster
BINmormon
BINmortgage
BINmoscow
BINmoto
BINmotorcycles
BINmov
BINmovie
BINmp
BINmq
BINmr
BINms
BINmsd
BINmt
BINmtn
BINmtr
BINmu
BINmuseum
BINmusic
BINmv
BINmw
BINmx
BINmy
BINmz
BINna
BINnab
BINnagoya
BINname
BINnavy
BINnba
BINnc
BINne
BINnec
BINnet
BINnetbank
BINnetflix
BINnetwork
BINneustar
BINnew
BINnews
BINnext
BINnextdirect
BINnexus
BINnf
BINnfl
BINng
BINngo
BINnhk
BINni
BINnico
BINnike
BINnikon
BINninja
BINnissan
BINnissay
BINnl
BINno
BINnokia
BINnorton
BINnow
BINnowruz
BINnowtv
BINnp
BINnr
BINnra
BINnrw
BINntt
BINnu
BINnyc
BINnz
BINobi
BINobserver
BINoffice
BINokinawa
BINolayan
BINolayangroup
BINollo
BINom
BINomega
BINone
BINong
BINonion
BINonl
BINonline
BINooo
BINopen
BINoracle
BINorange
BINorg
BINorganic
BINorigins
BINosaka
BINotsuka
BINott
BINovh
BINpa
BINpage
BINpanasonic
BINparis
BINpars
BINpartners
BINparts
BINparty
BINpay
BINpccw
BINpe
BINpet
BINpf
BINpfizer
BINpg
BINph
BINpharmacy
BINphd
BINphilips
BINphone
BINphoto
BINphotography
BINphotos
BINphysio
BINpics
BINpictet
BINpictures
BINpid
BINpin
BINping
BINpink
BINpioneer
BINpizza
BINpk
BINpl
BINplace
BINplay
BINplaystation
BINplumbing
BINplus
BINpm
BINpn
BINpnc
BINpohl
BINpoker
BINpolitie
BINporn
BINpost
BINpr
BINpramerica
BINpraxi
BINpress
BINprime
BINpro
BINprod
BINproductions
BINprof
BINprogressive
BINpromo
BINproperties
BINproperty
BINprotection
BINpru
BINprudential
BINps
BINpt
BINpub
BINpw
BINpwc
BINpy
BINqa
BINqpon
BINquebec
BINquest
BINracing
BINradio
BINre
BINread
BINrealestate
BINrealtor
BINrealty
BINrecipes
BINred
BINredstone
BINredumbrella
BINrehab
BINreise
BINreisen
BINreit
BINreliance
BINren
BINrent
BINrentals
BINrepair
BINreport
BINrepublican
BINrest
BINrestaurant
BINreview
BINreviews
BINrexroth
BINrich
BINrichardli
BINricoh
BINril
BINrio
BINrip
BINro
BINrocks
BINrodeo
BINrogers
BINroom
BINrs
BINrsvp
BINru
BINrugby
BINruhr
BINrun
BINrw
BINrwe
BINryukyu
BINsa
BINsaarland
BINsafe
BINsafety
BINsakura
BINsale
BINsalon
BINsamsclub
BINsamsung
BINsandvik
BINsandvikcoromant
BINsanofi
BINsap
BINsarl
BINsas
BINsave
BINsaxo
BINsb
BINsbi
BINsbs
BINsc
BINscb
BINschaeffler
BINschmidt
BINscholarships
BINschool
BINschule
BINschwarz
BINscience
BINscot
BINsd
BINse
BINsearch
BINseat
BINsecure
BINsecurity
BINseek
BINselect
BINsener
BINservices
BINseven
BINsew
BINsex
BINsexy
BINsfr
BINsg
BINsh
BINshangrila
BINsharp
BINshell
BINshia
BINshiksha
BINshoes
BINshop
BINshopping
BINshouji
BINshow
BINsi
BINsilk
BINsina
BINsingles
BINsite
BINsj
BINsk
BINski
BINskin
BINsky
BINskype
BINsl
BINsling
BINsm
BINsmart
BINsmile
BINsn
BINsncf
BINso
BINsoccer
BINsocial
BINsoftbank
BINsoftware
BINsohu
BINsolar
BINsolutions
BINsong
BINsony
BINsoy
BINspa
BINspace
BINsport
BINspot
BINsr
BINsrl
BINss
BINst
BINstada
BINstaples
BINstar
BINstatebank
BINstatefarm
BINstc
BINstcgroup
BINstockholm
BINstorage
BINstore
BINstream
BINstudio
BINstudy
BINstyle
BINsu
BINsucks
BINsupplies
BINsupply
BINsupport
BINsurf
BINsurgery
BINsuzuki
BINsv
BINswatch
BINswiss
BINsx
BINsy
BINsydney
BINsystems
BINsz
BINtab
BINtaipei
BINtalk
BINtaobao
BINtarget
BINtatamotors
BINtatar
BINtattoo
BINtax
BINtaxi
BINtc
BINtci
BINtd
BINtdk
BINteam
BINtech
BINtechnology
BINtel
BINtemasek
BINtennis
BINteva
BINtf
BINtg
BINth
BINthd
BINtheater
BINtheatre
BINtiaa
BINtickets
BINtienda
BINtips
BINtires
BINtirol
BINtj
BINtjmaxx
BINtjx
BINtk
BINtkmaxx
BINtl
BINtm
BINtmall
BINtn
BINto
BINtoday
BINtokyo
BINtools
BINtop
BINtoray
BINtoshiba
BINtotal
BINtours
BINtown
BINtoyota
BINtoys
BINtr
BINtrade
BINtrading
BINtraining
BINtravel
BINtravelers
BINtravelersinsurance
BINtrust
BINtrv
BINtt
BINtube
BINtui
BINtunes
BINtushu
BINtv
BINtvs
BINtw
BINtz
BINua
BINubank
BINubs
BINug
BINuk
BINunicom
BINuniversity
BINuno
BINuol
BINups
BINus
BINuy
BINuz
BINva
BINvacations
BINvana
BINvanguard
BINvc
BINve
BINvegas
BINventures
BINverisign
BINvermögensberater
BINvermögensberatung
BINversicherung
BINvet
BINvg
BINvi
BINviajes
BINvideo
BINvig
BINviking
BINvillas
BINvin
BINvip
BINvirgin
BINvisa
BINvision
BINviva
BINvivo
BINvlaanderen
BINvn
BINvodka
BINvolvo
BINvote
BINvoting
BINvoto
BINvoyage
BINvu
BINwales
BINwalmart
BINwalter
BINwang
BINwanggou
BINwatch
BINwatches
BINweather
BINweatherchannel
BINwebcam
BINweber
BINwebsite
BINwed
BINwedding
BINweibo
BINweir
BINwf
BINwhoswho
BINwien
BINwiki
BINwilliamhill
BINwin
BINwindows
BINwine
BINwinners
BINwme
BINwolterskluwer
BINwoodside
BINwork
BINworks
BINworld
BINwow
BINws
BINwtc
BINwtf
BINxbox
BINxerox
BINxihuan
BINxin
BINxxx
BINxyz
BINyachts
BINyahoo
BINyamaxun
BINyandex
BINye
BINyodobashi
BINyoga
BINyokohama
BINyou
BINyoutube
BINyt
BINyun
BINza
BINzappos
BINzara
BINzero
BINzip
BINzm
BINzone
BINzuerich
BINzw
BINελ
BINευ
BINбг
BINбел
BINдети
BINею
BINкатолик
BINком
BINмкд
BINмон
BINмосква
BINонлайн
BINорг
BINрус
BINрф
BINсайт
BINсрб
BINукр
BINқаз
BINհայ
BINישראל
BINקום
BINابوظبي
BINارامكو
BINالاردن
BINالبحرين
BINالجزائر
BINالسعودية
BINالسعوديه
BINالسعودیة
BINالسعودیۃ
BINالعليان
BINالمغرب
BINاليمن
BINامارات
BINايران
BINایران
BINبارت
BINبازار
BINبيتك
BINبھارت
BINتونس
BINسودان
BINسوريا
BINسورية
BINشبكة
BINعراق
BINعرب
BINعمان
BINفلسطين
BINقطر
BINكاثوليك
BINكوم
BINمصر
BINمليسيا
BINموريتانيا
BINموقع
BINهمراه
BINپاكستان
BINپاکستان
BINڀارت
BINकॉम
BINनेट
BINभारत
BINभारतम्
BINभारोत
BINसंगठन
BINবাংলা
BINভারত
BINভাৰত
BINਭਾਰਤ
BINભારત
BINଭାରତ
BINஇந்தியா
BINஇலங்கை
BINசிங்கப்பூர்
BINభారత్
BINಭಾರತ
BINഭാരതം
BINලංකා
BINคอม
BINไทย
BINລາວ
BINგე
BINみんな
BINアマゾン
BINクラウド
BINグーグル
BINコム
BINストア
BINセール
BINファッション
BINポイント
BIN世界
BIN中信
BIN中国
BIN中國
BIN中文网
BIN亚马逊
BIN企业
BIN佛山
BIN信息
BIN健康
BIN八卦
BIN公司
BIN公益
BIN台湾
BIN台灣
BIN商城
BIN商店
BIN商标
BIN嘉里
BIN嘉里大酒店
BIN在线
BIN大拿
BIN天主教
BIN娱乐
BIN家電
BIN广东
BIN微博
BIN慈善
BIN我爱你
BIN手机
BIN招聘
BIN政务
BIN政府
BIN新加坡
BIN新闻
BIN时尚
BIN書籍
BIN机构
BIN淡马锡
BIN游戏
BIN澳門
BIN澳门
BIN点看
BIN移动
BIN组织机构
BIN网址
BIN网店
BIN网站
BIN网络
BIN联通
BIN臺灣
BIN谷歌
BIN购物
BIN通販
BIN集团
BIN電訊盈科
BIN飞利浦
BIN食品
BIN餐厅
BIN香格里拉
BIN香港
BIN닷넷
BIN닷컴
BIN삼성
BIN한국
TXTservice-url.txt
STICH beta

No STICH Path has been generated for this analysis yet.

9 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 8img 1

Name Value
Module Name
Pawly.exe
Full Name
Pawly.exe
EntryPoint
System.Void A.A::a()
Scope Name
Pawly.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Pawly
Assembly Version
0.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
<null>
Total Strings
0
Main Method
System.Void A.A::a()
Main IL Instruction Count
164
Main IL
ldc.i4 3072
call System.Void System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType)
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
call System.Reflection.Assembly System.Reflection.Assembly::GetExecutingAssembly()
call System.String <PrivateImplementationDetails>{F0B18A5D-6DA9-427F-A2AB-639DF3DADE21}.F3BC1E7C-28FE-41B5-A9D5-F808CB3C1F85::d()
callvirt System.IO.Stream System.Reflection.Assembly::GetManifestResourceStream(System.String)
stloc.0 <null>
ldloc.0 <null>
brtrue.s IL_0033: call System.Security.Cryptography.SHA256 System.Security.Cryptography.SHA256::Create()
call System.String <PrivateImplementationDetails>{F0B18A5D-6DA9-427F-A2AB-639DF3DADE21}.F3BC1E7C-28FE-41B5-A9D5-F808CB3C1F85::E()
newobj System.Void System.IO.IOException::.ctor(System.String)
throw <null>
call System.Security.Cryptography.SHA256 System.Security.Cryptography.SHA256::Create()
stloc.2 <null>
ldloc.2 <null>
ldloc.0 <null>
callvirt System.Byte[] System.Security.Cryptography.HashAlgorithm::ComputeHash(System.IO.Stream)
call System.String System.BitConverter::ToString(System.Byte[])
call System.String <PrivateImplementationDetails>{F0B18A5D-6DA9-427F-A2AB-639DF3DADE21}.F3BC1E7C-28FE-41B5-A9D5-F808CB3C1F85::D()
call System.String <PrivateImplementationDetails>{F0B18A5D-6DA9-427F-A2AB-639DF3DADE21}.F3BC1E7C-28FE-41B5-A9D5-F808CB3C1F85::B()
callvirt System.String System.String::Replace(System.String,System.String)
ldc.i4.0 <null>
ldc.i4.s 20
callvirt System.String System.String::Substring(System.Int32,System.Int32)
stloc.1 <null>
leave.s IL_0069: ldloc.0
ldloc.2 <null>
brfalse.s IL_0068: endfinally
ldloc.2 <null>
callvirt System.Void System.IDisposable::Dispose()
endfinally <null>
ldloc.0 <null>
ldc.i4.0 <null>
conv.i8 <null>
callvirt System.Void System.IO.Stream::set_Position(System.Int64)
ldc.i4.s 28
call System.String System.Environment::GetFolderPath(System.Environment/SpecialFolder)
call System.String <PrivateImplementationDetails>{F0B18A5D-6DA9-427F-A2AB-639DF3DADE21}.F3BC1E7C-28FE-41B5-A9D5-F808CB3C1F85::e()
call System.String <PrivateImplementationDetails>{F0B18A5D-6DA9-427F-A2AB-639DF3DADE21}.F3BC1E7C-28FE-41B5-A9D5-F808CB3C1F85::F()
ldloc.1 <null>
call System.String System.String::Concat(System.String,System.String)
call System.String System.IO.Path::Combine(System.String,System.String,System.String)
stsfld System.String A.A::A
ldsfld System.String A.A::A
call System.IO.DirectoryInfo System.IO.Directory::CreateDirectory(System.String)
pop <null>
ldloc.0 <null>
ldc.i4.0 <null>
newobj System.Void System.IO.Compression.ZipArchive::.ctor(System.IO.Stream,System.IO.Compression.ZipArchiveMode)
stloc.3 <null>
ldloc.3 <null>
callvirt System.Collections.ObjectModel.ReadOnlyCollection`1<System.IO.Compression.ZipArchiveEntry> System.IO.Compression.ZipArchive::get_Entries()
callvirt System.Collections.Generic.IEnumerator`1<System.IO.Compression.ZipArchiveEntry> System.Collections.ObjectModel.ReadOnlyCollection`1<System.IO.Compression.ZipArchiveEntry>::GetEnumerator()
stloc.s V_10
br IL_01A2: ldloc.s V_10
ldloc.s V_10
callvirt System.IO.Compression.ZipArchiveEntry System.Collections.Generic.IEnumerator`1<System.IO.Compression.ZipArchiveEntry>::get_Current()
stloc.s V_4
ldloc.s V_4
callvirt System.String System.IO.Compression.ZipArchiveEntry::get_Name()
call System.Boolean System.String::IsNullOrEmpty(System.String)
brtrue IL_01A2: ldloc.s V_10
ldsfld System.String A.A::A
ldloc.s V_4
callvirt System.String System.IO.Compression.ZipArchiveEntry::get_FullName()
call System.String System.IO.Path::Combine(System.String,System.String)
call System.String System.IO.Path::GetFullPath(System.String)
stloc.s V_5
ldloc.s V_5
ldsfld System.String A.A::A
ldsfld System.Char System.IO.Path::DirectorySeparatorChar
box System.Char
call System.String System.String::Concat(System.Object,System.Object)
ldc.i4.5 <null>
callvirt System.Boolean System.String::StartsWith(System.String,System.StringComparison)
brtrue.s IL_0112: ldloc.s V_5
call System.String <PrivateImplementationDetails>{F0B18A5D-6DA9-427F-A2AB-639DF3DADE21}.F3BC1E7C-28FE-41B5-A9D5-F808CB3C1F85::f()
newobj System.Void System.IO.IOException::.ctor(System.String)
throw <null>
ldloc.s V_5
call System.String System.IO.Path::GetDirectoryName(System.String)
call System.IO.DirectoryInfo System.IO.Directory::CreateDirectory(System.String)
pop <null>
ldloc.s V_5
call System.Boolean System.IO.File::Exists(System.String)
brfalse.s IL_0199: ldloc.s V_4
call System.Security.Cryptography.SHA256 System.Security.Cryptography.SHA256::Create()
stloc.s V_6
ldloc.s V_4
callvirt System.IO.Stream System.IO.Compression.ZipArchiveEntry::Open()
stloc.s V_7
ldloc.s V_5
call System.IO.FileStream System.IO.File::OpenRead(System.String)
stloc.s V_8
ldloc.s V_6
ldloc.s V_7
callvirt System.Byte[] System.Security.Cryptography.HashAlgorithm::ComputeHash(System.IO.Stream)
call System.String System.BitConverter::ToString(System.Byte[])
ldloc.s V_6
ldloc.s V_8
callvirt System.Byte[] System.Security.Cryptography.HashAlgorithm::ComputeHash(System.IO.Stream)
call System.String System.BitConverter::ToString(System.Byte[])
call System.Boolean System.String::op_Inequality(System.String,System.String)
brfalse.s IL_016F: leave.s IL_017D
call System.String <PrivateImplementationDetails>{F0B18A5D-6DA9-427F-A2AB-639DF3DADE21}.F3BC1E7C-28FE-41B5-A9D5-F808CB3C1F85::G()
newobj System.Void System.IO.IOException::.ctor(System.String)
throw <null>
leave.s IL_017D: leave.s IL_018B
ldloc.s V_8
brfalse.s IL_017C: endfinally
ldloc.s V_8
callvirt System.Void System.IDisposable::Dispose()
endfinally <null>
leave.s IL_018B: leave.s IL_01A2
ldloc.s V_7
brfalse.s IL_018A: endfinally
ldloc.s V_7
callvirt System.Void System.IDisposable::Dispose()
endfinally <null>
leave.s IL_01A2: ldloc.s V_10
ldloc.s V_6
brfalse.s IL_0198: endfinally
ldloc.s V_6
callvirt System.Void System.IDisposable::Dispose()
endfinally <null>
ldloc.s V_4
ldloc.s V_5
call System.Void System.IO.Compression.ZipFileExtensions::ExtractToFile(System.IO.Compression.ZipArchiveEntry,System.String)
ldloc.s V_10
callvirt System.Boolean System.Collections.IEnumerator::MoveNext()
brtrue IL_00B7: ldloc.s V_10
leave.s IL_01BC: leave.s IL_01C8
ldloc.s V_10
brfalse.s IL_01BB: endfinally
ldloc.s V_10
callvirt System.Void System.IDisposable::Dispose()
endfinally <null>
leave.s IL_01C8: leave.s IL_01D4
ldloc.3 <null>
brfalse.s IL_01C7: endfinally
ldloc.3 <null>
callvirt System.Void System.IDisposable::Dispose()
endfinally <null>
leave.s IL_01D4: newobj System.Void A.C::.ctor()
ldloc.0 <null>
brfalse.s IL_01D3: endfinally
ldloc.0 <null>
callvirt System.Void System.IDisposable::Dispose()
endfinally <null>
newobj System.Void A.C::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
leave.s IL_01F9: ret
stloc.s V_9
ldloc.s V_9
callvirt System.String System.Exception::get_Message()
call System.String <PrivateImplementationDetails>{F0B18A5D-6DA9-427F-A2AB-639DF3DADE21}.F3BC1E7C-28FE-41B5-A9D5-F808CB3C1F85::e()
ldc.i4.0 <null>
ldc.i4.s 16
call System.Windows.Forms.DialogResult System.Windows.Forms.MessageBox::Show(System.String,System.String,System.Windows.Forms.MessageBoxButtons,System.Windows.Forms.MessageBoxIcon)
pop <null>
leave.s IL_01F9: ret
ret <null>

1852 files
EXE14be2fb462c70fcaaa22493053e3d39d
Structure
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙