Suspicious
Suspect

340bce8ecf50f897540aa668bcc4f091

PE Executable
|
MD5: 340bce8ecf50f897540aa668bcc4f091
|
Size: 62.46 KB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very high

Hash
Hash Value
MD5
340bce8ecf50f897540aa668bcc4f091
Sha1
5fd1095ef29d534763eddd3e142763a65f4d07c2
Sha256
2717a528cc621c0b0d308245902ecee7101a40426d13addc3ae152178d9d286d
Sha384
031d182c4f0708c300220a317d10f7b1c894ae37a11f2c70060e72da00f80b890036580bfc991270eac45a75c117ffa3
Sha512
d74beac8d17d449d8a627c7b461a91126b2d1d219f6f5485c777656bd979101749221b535f107531aa6a9729f8dd03b725b71b724f7bca5fe00ec8a6abcbfeaf
SSDeep
1536:iI5m2WDarfMrbcwOcjz/rGbUpY7qjzOtGNZdD:H43yfIgiybUpfzOtGNZN
TLSH
B1539F287BF5422AE2FF5FF44DF17152C67DF6639512DA1F28C402AA1613E88CE016E6

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Informations
Name
Value
Module Name

XClient.exe

Full Name

XClient.exe

EntryPoint

System.Void Stub.LpIQbJ6na69YUpGEvkwbNphtMwgwEEv0RC5RzkAPEObYRlsdAyhXUiDnWw5Jta0nc6pRiGdp4G8trb::o2IThEOPVlOqJhOOoj7DFgJx35RMpbW8zZDzYbXNsnFjRA1JCzP87AfHElstuMm()

Scope Name

XClient.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

XClient

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

<null>

Total Strings

231

Main Method

System.Void Stub.LpIQbJ6na69YUpGEvkwbNphtMwgwEEv0RC5RzkAPEObYRlsdAyhXUiDnWw5Jta0nc6pRiGdp4G8trb::o2IThEOPVlOqJhOOoj7DFgJx35RMpbW8zZDzYbXNsnFjRA1JCzP87AfHElstuMm()

Main IL Instruction Count

61

Main IL

ldsfld System.Int32 6lIAqhIXBUFODAiag4WkU1RJOnF3pAmuxkghcPjK5t7oURTsDgwozBZnuGhNhjn2Rwq32DbiQRC21Q::EHP51GCmPBZ4dXSQE8MA7hZ6vBezQLFZE9JQCcgenRWWZO2O8jQaehl2APP19d4BHhFfWnAaY28aSY ldc.i4 1000 mul.ovf <null> call System.Void System.Threading.Thread::Sleep(System.Int32) ldsfld System.String 6lIAqhIXBUFODAiag4WkU1RJOnF3pAmuxkghcPjK5t7oURTsDgwozBZnuGhNhjn2Rwq32DbiQRC21Q::Bp9xnJU3Jm50sLrK0l2gBNWAEzzoiNdShjCluoNgTqnmT3Uew19nRodmkfSvksqsXiFm4KYYqq3HYQ call System.Object Stub.nQ0pI8ofan2vLYfY9So01ZQLM6puf60Q2ADcXoKVnv6GpH5zl3NuvLBnlXLEbWp6dNivhXEsUB3SJtOpWFcp8bXgmWdp1B4::c6aPRnUMcluLWxajbLHNARYRiO2QoDvwi9ily17SBayG1fpVKPVnSCdR1AoDmkUMUrplWMh59OsYY6kSR5uYLIZj0e7X0RF(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String 6lIAqhIXBUFODAiag4WkU1RJOnF3pAmuxkghcPjK5t7oURTsDgwozBZnuGhNhjn2Rwq32DbiQRC21Q::Bp9xnJU3Jm50sLrK0l2gBNWAEzzoiNdShjCluoNgTqnmT3Uew19nRodmkfSvksqsXiFm4KYYqq3HYQ ldsfld System.String 6lIAqhIXBUFODAiag4WkU1RJOnF3pAmuxkghcPjK5t7oURTsDgwozBZnuGhNhjn2Rwq32DbiQRC21Q::m7PYiVQGX5eWYYOVeLwEp3fFLpGlnjvhn4p9j8ocDEdGg7GuE7CNls5FSFqhyLxgpubnfmK6rtdctG call System.Object Stub.nQ0pI8ofan2vLYfY9So01ZQLM6puf60Q2ADcXoKVnv6GpH5zl3NuvLBnlXLEbWp6dNivhXEsUB3SJtOpWFcp8bXgmWdp1B4::c6aPRnUMcluLWxajbLHNARYRiO2QoDvwi9ily17SBayG1fpVKPVnSCdR1AoDmkUMUrplWMh59OsYY6kSR5uYLIZj0e7X0RF(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String 6lIAqhIXBUFODAiag4WkU1RJOnF3pAmuxkghcPjK5t7oURTsDgwozBZnuGhNhjn2Rwq32DbiQRC21Q::m7PYiVQGX5eWYYOVeLwEp3fFLpGlnjvhn4p9j8ocDEdGg7GuE7CNls5FSFqhyLxgpubnfmK6rtdctG ldsfld System.String 6lIAqhIXBUFODAiag4WkU1RJOnF3pAmuxkghcPjK5t7oURTsDgwozBZnuGhNhjn2Rwq32DbiQRC21Q::4mLI0PMpboCMvOT5rmTl6S0Hc104HuqONeDHY7d7CQQVRg3Hwx2UVhWek14JTw4YhXAD3qiIm7RdUa call System.Object Stub.nQ0pI8ofan2vLYfY9So01ZQLM6puf60Q2ADcXoKVnv6GpH5zl3NuvLBnlXLEbWp6dNivhXEsUB3SJtOpWFcp8bXgmWdp1B4::c6aPRnUMcluLWxajbLHNARYRiO2QoDvwi9ily17SBayG1fpVKPVnSCdR1AoDmkUMUrplWMh59OsYY6kSR5uYLIZj0e7X0RF(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String 6lIAqhIXBUFODAiag4WkU1RJOnF3pAmuxkghcPjK5t7oURTsDgwozBZnuGhNhjn2Rwq32DbiQRC21Q::4mLI0PMpboCMvOT5rmTl6S0Hc104HuqONeDHY7d7CQQVRg3Hwx2UVhWek14JTw4YhXAD3qiIm7RdUa ldsfld System.String 6lIAqhIXBUFODAiag4WkU1RJOnF3pAmuxkghcPjK5t7oURTsDgwozBZnuGhNhjn2Rwq32DbiQRC21Q::MM0DNwjfDnZdyhL3vriTyw7amQVGiW6fNHq7GvdrZ48GOv6awHAxuoMpvDzviSQf61Uu74Em4oN5zr call System.Object Stub.nQ0pI8ofan2vLYfY9So01ZQLM6puf60Q2ADcXoKVnv6GpH5zl3NuvLBnlXLEbWp6dNivhXEsUB3SJtOpWFcp8bXgmWdp1B4::c6aPRnUMcluLWxajbLHNARYRiO2QoDvwi9ily17SBayG1fpVKPVnSCdR1AoDmkUMUrplWMh59OsYY6kSR5uYLIZj0e7X0RF(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String 6lIAqhIXBUFODAiag4WkU1RJOnF3pAmuxkghcPjK5t7oURTsDgwozBZnuGhNhjn2Rwq32DbiQRC21Q::MM0DNwjfDnZdyhL3vriTyw7amQVGiW6fNHq7GvdrZ48GOv6awHAxuoMpvDzviSQf61Uu74Em4oN5zr ldsfld System.String 6lIAqhIXBUFODAiag4WkU1RJOnF3pAmuxkghcPjK5t7oURTsDgwozBZnuGhNhjn2Rwq32DbiQRC21Q::2FtyF9GNNMe3uoG0VDM7tbeaMrFrQninCWiGs3Z55xZBl0tMolEFv08otHumNyKqDRLvPnOfnBQMgQ call System.Object Stub.nQ0pI8ofan2vLYfY9So01ZQLM6puf60Q2ADcXoKVnv6GpH5zl3NuvLBnlXLEbWp6dNivhXEsUB3SJtOpWFcp8bXgmWdp1B4::c6aPRnUMcluLWxajbLHNARYRiO2QoDvwi9ily17SBayG1fpVKPVnSCdR1AoDmkUMUrplWMh59OsYY6kSR5uYLIZj0e7X0RF(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String 6lIAqhIXBUFODAiag4WkU1RJOnF3pAmuxkghcPjK5t7oURTsDgwozBZnuGhNhjn2Rwq32DbiQRC21Q::2FtyF9GNNMe3uoG0VDM7tbeaMrFrQninCWiGs3Z55xZBl0tMolEFv08otHumNyKqDRLvPnOfnBQMgQ leave.s IL_008A: call System.Boolean Stub.PP2J4lZTCyrMFWumO0wdXVZIQHMqJzOjgYAvVzntdmRCRRyCoiJXc7eKw9ENTzsgY4tG9qEgthHBZepBNkOtKMR8dk724HM::y4WkgGubJaH1ZRTcb27pa6mkMcuOyw1kJHedQcuV5vg5pUwnCQjOo5G1tt25Awihd7YxClWqyKUvQoXcB() dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.2 <null> ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_008A: call System.Boolean Stub.PP2J4lZTCyrMFWumO0wdXVZIQHMqJzOjgYAvVzntdmRCRRyCoiJXc7eKw9ENTzsgY4tG9qEgthHBZepBNkOtKMR8dk724HM::y4WkgGubJaH1ZRTcb27pa6mkMcuOyw1kJHedQcuV5vg5pUwnCQjOo5G1tt25Awihd7YxClWqyKUvQoXcB() call System.Boolean Stub.PP2J4lZTCyrMFWumO0wdXVZIQHMqJzOjgYAvVzntdmRCRRyCoiJXc7eKw9ENTzsgY4tG9qEgthHBZepBNkOtKMR8dk724HM::y4WkgGubJaH1ZRTcb27pa6mkMcuOyw1kJHedQcuV5vg5pUwnCQjOo5G1tt25Awihd7YxClWqyKUvQoXcB() brtrue.s IL_0097: call System.Void Stub.LpIQbJ6na69YUpGEvkwbNphtMwgwEEv0RC5RzkAPEObYRlsdAyhXUiDnWw5Jta0nc6pRiGdp4G8trb::CrKBZhJ1ILrNCytUxNAmsDdRucYmzb4PdabbAxj3YSwvl3PpeGZXF13yqi1FAB9() ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void Stub.LpIQbJ6na69YUpGEvkwbNphtMwgwEEv0RC5RzkAPEObYRlsdAyhXUiDnWw5Jta0nc6pRiGdp4G8trb::CrKBZhJ1ILrNCytUxNAmsDdRucYmzb4PdabbAxj3YSwvl3PpeGZXF13yqi1FAB9() leave.s IL_00AC: call System.Void Stub.PP2J4lZTCyrMFWumO0wdXVZIQHMqJzOjgYAvVzntdmRCRRyCoiJXc7eKw9ENTzsgY4tG9qEgthHBZepBNkOtKMR8dk724HM::iphNLuZeYNrFeBCHWKw4e3OMYynESgH290lHT4FpDzC0xN1Ha83cYrO3nit6ZBs3eioLzWpYXD1bpTeAsuhnbKyOAqFZ5i6() dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.3 <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_00AC: call System.Void Stub.PP2J4lZTCyrMFWumO0wdXVZIQHMqJzOjgYAvVzntdmRCRRyCoiJXc7eKw9ENTzsgY4tG9qEgthHBZepBNkOtKMR8dk724HM::iphNLuZeYNrFeBCHWKw4e3OMYynESgH290lHT4FpDzC0xN1Ha83cYrO3nit6ZBs3eioLzWpYXD1bpTeAsuhnbKyOAqFZ5i6() call System.Void Stub.PP2J4lZTCyrMFWumO0wdXVZIQHMqJzOjgYAvVzntdmRCRRyCoiJXc7eKw9ENTzsgY4tG9qEgthHBZepBNkOtKMR8dk724HM::iphNLuZeYNrFeBCHWKw4e3OMYynESgH290lHT4FpDzC0xN1Ha83cYrO3nit6ZBs3eioLzWpYXD1bpTeAsuhnbKyOAqFZ5i6() ldnull <null> ldftn System.Void Stub.LpIQbJ6na69YUpGEvkwbNphtMwgwEEv0RC5RzkAPEObYRlsdAyhXUiDnWw5Jta0nc6pRiGdp4G8trb::3xeayqN6MzcRnufT1IbdqmXMERNNfK3b1coGFam53filtmvvv5Ys0HaQpOJ0vxt() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.0 <null> ldnull <null> ldftn System.Void Stub.LpIQbJ6na69YUpGEvkwbNphtMwgwEEv0RC5RzkAPEObYRlsdAyhXUiDnWw5Jta0nc6pRiGdp4G8trb::Az2wiqh6EVhu138onZEBkbRKFs98f206rChwgE5bgjqgye0tQJYXSW1wa3W0Ny7() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.1 <null> ldloc.0 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.1 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.1 <null> callvirt System.Void System.Threading.Thread::Join() ret <null>

Module Name

XClient.exe

Full Name

XClient.exe

EntryPoint

System.Void Stub.LpIQbJ6na69YUpGEvkwbNphtMwgwEEv0RC5RzkAPEObYRlsdAyhXUiDnWw5Jta0nc6pRiGdp4G8trb::o2IThEOPVlOqJhOOoj7DFgJx35RMpbW8zZDzYbXNsnFjRA1JCzP87AfHElstuMm()

Scope Name

XClient.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

XClient

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

<null>

Total Strings

231

Main Method

System.Void Stub.LpIQbJ6na69YUpGEvkwbNphtMwgwEEv0RC5RzkAPEObYRlsdAyhXUiDnWw5Jta0nc6pRiGdp4G8trb::o2IThEOPVlOqJhOOoj7DFgJx35RMpbW8zZDzYbXNsnFjRA1JCzP87AfHElstuMm()

Main IL Instruction Count

61

Main IL

ldsfld System.Int32 6lIAqhIXBUFODAiag4WkU1RJOnF3pAmuxkghcPjK5t7oURTsDgwozBZnuGhNhjn2Rwq32DbiQRC21Q::EHP51GCmPBZ4dXSQE8MA7hZ6vBezQLFZE9JQCcgenRWWZO2O8jQaehl2APP19d4BHhFfWnAaY28aSY ldc.i4 1000 mul.ovf <null> call System.Void System.Threading.Thread::Sleep(System.Int32) ldsfld System.String 6lIAqhIXBUFODAiag4WkU1RJOnF3pAmuxkghcPjK5t7oURTsDgwozBZnuGhNhjn2Rwq32DbiQRC21Q::Bp9xnJU3Jm50sLrK0l2gBNWAEzzoiNdShjCluoNgTqnmT3Uew19nRodmkfSvksqsXiFm4KYYqq3HYQ call System.Object Stub.nQ0pI8ofan2vLYfY9So01ZQLM6puf60Q2ADcXoKVnv6GpH5zl3NuvLBnlXLEbWp6dNivhXEsUB3SJtOpWFcp8bXgmWdp1B4::c6aPRnUMcluLWxajbLHNARYRiO2QoDvwi9ily17SBayG1fpVKPVnSCdR1AoDmkUMUrplWMh59OsYY6kSR5uYLIZj0e7X0RF(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String 6lIAqhIXBUFODAiag4WkU1RJOnF3pAmuxkghcPjK5t7oURTsDgwozBZnuGhNhjn2Rwq32DbiQRC21Q::Bp9xnJU3Jm50sLrK0l2gBNWAEzzoiNdShjCluoNgTqnmT3Uew19nRodmkfSvksqsXiFm4KYYqq3HYQ ldsfld System.String 6lIAqhIXBUFODAiag4WkU1RJOnF3pAmuxkghcPjK5t7oURTsDgwozBZnuGhNhjn2Rwq32DbiQRC21Q::m7PYiVQGX5eWYYOVeLwEp3fFLpGlnjvhn4p9j8ocDEdGg7GuE7CNls5FSFqhyLxgpubnfmK6rtdctG call System.Object Stub.nQ0pI8ofan2vLYfY9So01ZQLM6puf60Q2ADcXoKVnv6GpH5zl3NuvLBnlXLEbWp6dNivhXEsUB3SJtOpWFcp8bXgmWdp1B4::c6aPRnUMcluLWxajbLHNARYRiO2QoDvwi9ily17SBayG1fpVKPVnSCdR1AoDmkUMUrplWMh59OsYY6kSR5uYLIZj0e7X0RF(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String 6lIAqhIXBUFODAiag4WkU1RJOnF3pAmuxkghcPjK5t7oURTsDgwozBZnuGhNhjn2Rwq32DbiQRC21Q::m7PYiVQGX5eWYYOVeLwEp3fFLpGlnjvhn4p9j8ocDEdGg7GuE7CNls5FSFqhyLxgpubnfmK6rtdctG ldsfld System.String 6lIAqhIXBUFODAiag4WkU1RJOnF3pAmuxkghcPjK5t7oURTsDgwozBZnuGhNhjn2Rwq32DbiQRC21Q::4mLI0PMpboCMvOT5rmTl6S0Hc104HuqONeDHY7d7CQQVRg3Hwx2UVhWek14JTw4YhXAD3qiIm7RdUa call System.Object Stub.nQ0pI8ofan2vLYfY9So01ZQLM6puf60Q2ADcXoKVnv6GpH5zl3NuvLBnlXLEbWp6dNivhXEsUB3SJtOpWFcp8bXgmWdp1B4::c6aPRnUMcluLWxajbLHNARYRiO2QoDvwi9ily17SBayG1fpVKPVnSCdR1AoDmkUMUrplWMh59OsYY6kSR5uYLIZj0e7X0RF(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String 6lIAqhIXBUFODAiag4WkU1RJOnF3pAmuxkghcPjK5t7oURTsDgwozBZnuGhNhjn2Rwq32DbiQRC21Q::4mLI0PMpboCMvOT5rmTl6S0Hc104HuqONeDHY7d7CQQVRg3Hwx2UVhWek14JTw4YhXAD3qiIm7RdUa ldsfld System.String 6lIAqhIXBUFODAiag4WkU1RJOnF3pAmuxkghcPjK5t7oURTsDgwozBZnuGhNhjn2Rwq32DbiQRC21Q::MM0DNwjfDnZdyhL3vriTyw7amQVGiW6fNHq7GvdrZ48GOv6awHAxuoMpvDzviSQf61Uu74Em4oN5zr call System.Object Stub.nQ0pI8ofan2vLYfY9So01ZQLM6puf60Q2ADcXoKVnv6GpH5zl3NuvLBnlXLEbWp6dNivhXEsUB3SJtOpWFcp8bXgmWdp1B4::c6aPRnUMcluLWxajbLHNARYRiO2QoDvwi9ily17SBayG1fpVKPVnSCdR1AoDmkUMUrplWMh59OsYY6kSR5uYLIZj0e7X0RF(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String 6lIAqhIXBUFODAiag4WkU1RJOnF3pAmuxkghcPjK5t7oURTsDgwozBZnuGhNhjn2Rwq32DbiQRC21Q::MM0DNwjfDnZdyhL3vriTyw7amQVGiW6fNHq7GvdrZ48GOv6awHAxuoMpvDzviSQf61Uu74Em4oN5zr ldsfld System.String 6lIAqhIXBUFODAiag4WkU1RJOnF3pAmuxkghcPjK5t7oURTsDgwozBZnuGhNhjn2Rwq32DbiQRC21Q::2FtyF9GNNMe3uoG0VDM7tbeaMrFrQninCWiGs3Z55xZBl0tMolEFv08otHumNyKqDRLvPnOfnBQMgQ call System.Object Stub.nQ0pI8ofan2vLYfY9So01ZQLM6puf60Q2ADcXoKVnv6GpH5zl3NuvLBnlXLEbWp6dNivhXEsUB3SJtOpWFcp8bXgmWdp1B4::c6aPRnUMcluLWxajbLHNARYRiO2QoDvwi9ily17SBayG1fpVKPVnSCdR1AoDmkUMUrplWMh59OsYY6kSR5uYLIZj0e7X0RF(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String 6lIAqhIXBUFODAiag4WkU1RJOnF3pAmuxkghcPjK5t7oURTsDgwozBZnuGhNhjn2Rwq32DbiQRC21Q::2FtyF9GNNMe3uoG0VDM7tbeaMrFrQninCWiGs3Z55xZBl0tMolEFv08otHumNyKqDRLvPnOfnBQMgQ leave.s IL_008A: call System.Boolean Stub.PP2J4lZTCyrMFWumO0wdXVZIQHMqJzOjgYAvVzntdmRCRRyCoiJXc7eKw9ENTzsgY4tG9qEgthHBZepBNkOtKMR8dk724HM::y4WkgGubJaH1ZRTcb27pa6mkMcuOyw1kJHedQcuV5vg5pUwnCQjOo5G1tt25Awihd7YxClWqyKUvQoXcB() dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.2 <null> ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_008A: call System.Boolean Stub.PP2J4lZTCyrMFWumO0wdXVZIQHMqJzOjgYAvVzntdmRCRRyCoiJXc7eKw9ENTzsgY4tG9qEgthHBZepBNkOtKMR8dk724HM::y4WkgGubJaH1ZRTcb27pa6mkMcuOyw1kJHedQcuV5vg5pUwnCQjOo5G1tt25Awihd7YxClWqyKUvQoXcB() call System.Boolean Stub.PP2J4lZTCyrMFWumO0wdXVZIQHMqJzOjgYAvVzntdmRCRRyCoiJXc7eKw9ENTzsgY4tG9qEgthHBZepBNkOtKMR8dk724HM::y4WkgGubJaH1ZRTcb27pa6mkMcuOyw1kJHedQcuV5vg5pUwnCQjOo5G1tt25Awihd7YxClWqyKUvQoXcB() brtrue.s IL_0097: call System.Void Stub.LpIQbJ6na69YUpGEvkwbNphtMwgwEEv0RC5RzkAPEObYRlsdAyhXUiDnWw5Jta0nc6pRiGdp4G8trb::CrKBZhJ1ILrNCytUxNAmsDdRucYmzb4PdabbAxj3YSwvl3PpeGZXF13yqi1FAB9() ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void Stub.LpIQbJ6na69YUpGEvkwbNphtMwgwEEv0RC5RzkAPEObYRlsdAyhXUiDnWw5Jta0nc6pRiGdp4G8trb::CrKBZhJ1ILrNCytUxNAmsDdRucYmzb4PdabbAxj3YSwvl3PpeGZXF13yqi1FAB9() leave.s IL_00AC: call System.Void Stub.PP2J4lZTCyrMFWumO0wdXVZIQHMqJzOjgYAvVzntdmRCRRyCoiJXc7eKw9ENTzsgY4tG9qEgthHBZepBNkOtKMR8dk724HM::iphNLuZeYNrFeBCHWKw4e3OMYynESgH290lHT4FpDzC0xN1Ha83cYrO3nit6ZBs3eioLzWpYXD1bpTeAsuhnbKyOAqFZ5i6() dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.3 <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_00AC: call System.Void Stub.PP2J4lZTCyrMFWumO0wdXVZIQHMqJzOjgYAvVzntdmRCRRyCoiJXc7eKw9ENTzsgY4tG9qEgthHBZepBNkOtKMR8dk724HM::iphNLuZeYNrFeBCHWKw4e3OMYynESgH290lHT4FpDzC0xN1Ha83cYrO3nit6ZBs3eioLzWpYXD1bpTeAsuhnbKyOAqFZ5i6() call System.Void Stub.PP2J4lZTCyrMFWumO0wdXVZIQHMqJzOjgYAvVzntdmRCRRyCoiJXc7eKw9ENTzsgY4tG9qEgthHBZepBNkOtKMR8dk724HM::iphNLuZeYNrFeBCHWKw4e3OMYynESgH290lHT4FpDzC0xN1Ha83cYrO3nit6ZBs3eioLzWpYXD1bpTeAsuhnbKyOAqFZ5i6() ldnull <null> ldftn System.Void Stub.LpIQbJ6na69YUpGEvkwbNphtMwgwEEv0RC5RzkAPEObYRlsdAyhXUiDnWw5Jta0nc6pRiGdp4G8trb::3xeayqN6MzcRnufT1IbdqmXMERNNfK3b1coGFam53filtmvvv5Ys0HaQpOJ0vxt() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.0 <null> ldnull <null> ldftn System.Void Stub.LpIQbJ6na69YUpGEvkwbNphtMwgwEEv0RC5RzkAPEObYRlsdAyhXUiDnWw5Jta0nc6pRiGdp4G8trb::Az2wiqh6EVhu138onZEBkbRKFs98f206rChwgE5bgjqgye0tQJYXSW1wa3W0Ny7() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.1 <null> ldloc.0 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.1 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.1 <null> callvirt System.Void System.Threading.Thread::Join() ret <null>

340bce8ecf50f897540aa668bcc4f091 (62.46 KB)
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙