Suspicious
Suspect

3605489cbc52559f6d32d1cf004ea3e5

PE Executable
|
MD5: 3605489cbc52559f6d32d1cf004ea3e5
|
Size: 1.3 MB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Medium

Hash
 Hash Value
MD5
3605489cbc52559f6d32d1cf004ea3e5
Sha1
84e519bcd0e41f6d897e9c693f894c3a4fb43a3a
Sha256
8fa6a5b34fac89062c13172061b58a0afeb4c034edf3a2de0f8c3a37ba444419
Sha384
ab591d868c08cb790536bbb0e9c804cf0a797005d37aed4573ada6d2f22238b08700603e62dbfd4805cde0bc2d11e8f7
Sha512
8f3f0b845932b9e960a40320103dc8a42fb1eb6c5b01e7a3d4689eeb73c8153730e0289fe208593df8f03690212f1b32b51606d1365dfa77b6e27a18a430fadb
SSDeep
24576:8+lz6gtLZWfE4qouhPMiUcrTm2GD1jDFJa2Qq7XEJB+0l7t3+S:rJnoKbHbGD1/qgMkuO
TLSH
06550246FA8285A4CD585772C277C8304222FD9DA263D42C3DCE3F2B3A777A7850159B

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
3605489cbc52559f6d32d1cf004ea3e5
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Vmyfa.Properties.Resources.resources
Adpob
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Module Name

dont.exe
Full Name

dont.exe
EntryPoint

System.Void dont.Core.Engines.SharerPredicate::StopTransformableEngine()
Scope Name

dont.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

dont
Assembly Version

1.0.132.16070
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.6
Total Strings

119
Main Method

System.Void dont.Core.Engines.SharerPredicate::StopTransformableEngine()
Main IL Instruction Count

152
Main IL

ldc.i4 7 stloc V_0 br IL_000E: ldloc V_0 ldloc V_0 switch dnlib.DotNet.Emit.Instruction[] br IL_00AE: nop nop <null> ldstr 1.4.1 newobj System.Void System.Version::.ctor(System.String) stloc.s V_8 ldc.i4 8 ldsfld <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383} <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_cd3b18e1ccb44c0fb4c4cd88f726dfc3 ldfld System.Int32 <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_a4d9044217bb4108b2be90432b8d4a13 brfalse IL_0012: switch(IL_00AE,IL_0228,IL_00AD,IL_025F,IL_0239,IL_0081,IL_0040,IL_006C,IL_0285) pop <null> ldc.i4 5 br IL_0012: switch(IL_00AE,IL_0228,IL_00AD,IL_025F,IL_0239,IL_0081,IL_0040,IL_006C,IL_0285) nop <null> ldc.i4 4032 call System.Void System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType) ldc.i4 6 br IL_0012: switch(IL_00AE,IL_0228,IL_00AD,IL_025F,IL_0239,IL_0081,IL_0040,IL_006C,IL_0285) ldloc.s V_7 ldloc.s V_3 ldloc.s V_4 newobj System.Void Vmyfa.Execution.CommandInitializer::.ctor(dont.IO.StatelessWriter,Vmyfa.Wrapping.LocalWrapper,Vmyfa.Core.ScopeProgram) stloc.s V_6 ldc.i4 0 ldsfld <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383} <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_cd3b18e1ccb44c0fb4c4cd88f726dfc3 ldfld System.Int32 <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_2e2bacd8588c4093af05c012506479ff brtrue IL_0012: switch(IL_00AE,IL_0228,IL_00AD,IL_025F,IL_0239,IL_0081,IL_0040,IL_006C,IL_0285) pop <null> ldc.i4 0 br IL_0012: switch(IL_00AE,IL_0228,IL_00AD,IL_025F,IL_0239,IL_0081,IL_0040,IL_006C,IL_0285) ret <null> nop <null> nop <null> ldloc.s V_1 ldloc.s V_6 ldftn System.Void Vmyfa.Execution.CommandInitializer::RunSequentialCommand(System.Object,dont.Verification.VerifierPolicy) newobj System.Void System.EventHandler`1<dont.Verification.VerifierPolicy>::.ctor(System.Object,System.IntPtr) callvirt System.Void dont.Verification.ExternalVerifier::VerifyDetailedVerifier(System.EventHandler`1<dont.Verification.VerifierPolicy>) ldc.i4 4 br IL_00D2: switch(IL_00F0,IL_019E,IL_0143,IL_016A,IL_010F) ldloc V_2 switch dnlib.DotNet.Emit.Instruction[] br IL_00F0: nop nop <null> ldloc.s V_4 ldloc.s V_6 ldftn System.Void Vmyfa.Execution.CommandInitializer::RunPortableCommand(System.Object,dont.Verification.OperationalVerifier) newobj System.Void System.EventHandler`1<dont.Verification.OperationalVerifier>::.ctor(System.Object,System.IntPtr) callvirt System.Void Vmyfa.Core.ScopeProgram::RunFilteredProgram(System.EventHandler`1<dont.Verification.OperationalVerifier>) ldc.i4 2 br IL_00D2: switch(IL_00F0,IL_019E,IL_0143,IL_016A,IL_010F) nop <null> ldloc.s V_7 ldloc.s V_6 ldftn System.Void Vmyfa.Execution.CommandInitializer::ExecuteSeparatedCommand(System.Object,Vmyfa.Values.ResponsiveValue) newobj System.Void System.EventHandler`1<Vmyfa.Values.ResponsiveValue>::.ctor(System.Object,System.IntPtr) callvirt System.Void dont.IO.StatelessWriter::FilterWriter(System.EventHandler`1<Vmyfa.Values.ResponsiveValue>) ldc.i4 3 ldsfld <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383} <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_cd3b18e1ccb44c0fb4c4cd88f726dfc3 ldfld System.Int32 <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_a5653336b46e428d9ee0f335ea159cdf brfalse IL_00D2: switch(IL_00F0,IL_019E,IL_0143,IL_016A,IL_010F) pop <null> ldc.i4 0 br IL_00D2: switch(IL_00F0,IL_019E,IL_0143,IL_016A,IL_010F) nop <null> ldloc.s V_1 callvirt System.Void dont.Verification.ExternalVerifier::VerifyAutomatedVerifier() ldc.i4 1 ldsfld <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383} <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_cd3b18e1ccb44c0fb4c4cd88f726dfc3 ldfld System.Int32 <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_b226aa280f5548b2895904f484464844 brtrue IL_00D2: switch(IL_00F0,IL_019E,IL_0143,IL_016A,IL_010F) pop <null> ldc.i4 0 br IL_00D2: switch(IL_00F0,IL_019E,IL_0143,IL_016A,IL_010F) nop <null> ldloc.s V_3 ldloc.s V_6 ldftn System.Void Vmyfa.Execution.CommandInitializer::RunEfficientCommand(System.Object,dont.Iterators.SeparatedIterator) newobj System.Void System.EventHandler`1<dont.Iterators.SeparatedIterator>::.ctor(System.Object,System.IntPtr) callvirt System.Void Vmyfa.Wrapping.LocalWrapper::WrapIntegratedWrapper(System.EventHandler`1<dont.Iterators.SeparatedIterator>) ldc.i4 0 ldsfld <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383} <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_cd3b18e1ccb44c0fb4c4cd88f726dfc3 ldfld System.Int32 <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_93dd4721c4de468aaf22e2def80607c4 brtrue IL_00D2: switch(IL_00F0,IL_019E,IL_0143,IL_016A,IL_010F) pop <null> ldc.i4 0 br IL_00D2: switch(IL_00F0,IL_019E,IL_0143,IL_016A,IL_010F) nop <null> nop <null> leave IL_00AD: ret ldloc.s V_6 brfalse IL_0208: endfinally ldc.i4 0 ldsfld <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383} <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_cd3b18e1ccb44c0fb4c4cd88f726dfc3 ldfld System.Int32 <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_b41e0ef852204c40aeb97410883d50ad brtrue IL_01CF: switch(IL_01E1,IL_0207) pop <null> ldc.i4 0 br IL_01CF: switch(IL_01E1,IL_0207) ldloc V_5 switch dnlib.DotNet.Emit.Instruction[] br IL_01E1: ldloc.s V_6 ldloc.s V_6 callvirt System.Void System.IDisposable::Dispose() ldc.i4 0 ldsfld <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383} <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_cd3b18e1ccb44c0fb4c4cd88f726dfc3 ldfld System.Int32 <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_98eb465a6bb648d3849fe81c4cf1452b brtrue IL_01CF: switch(IL_01E1,IL_0207) pop <null> ldc.i4 1 br IL_01CF: switch(IL_01E1,IL_0207) nop <null> endfinally <null> ldc.i4 2 ldsfld <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383} <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_cd3b18e1ccb44c0fb4c4cd88f726dfc3 ldfld System.Int32 <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_ccec2a8b1050481faa62b93180d19089 brtrue IL_0012: switch(IL_00AE,IL_0228,IL_00AD,IL_025F,IL_0239,IL_0081,IL_0040,IL_006C,IL_0285) pop <null> ldc.i4 2 br IL_0012: switch(IL_00AE,IL_0228,IL_00AD,IL_025F,IL_0239,IL_0081,IL_0040,IL_006C,IL_0285) newobj System.Void Vmyfa.Core.ScopeProgram::.ctor() stloc.s V_4 ldc.i4 5 br IL_0012: switch(IL_00AE,IL_0228,IL_00AD,IL_025F,IL_0239,IL_0081,IL_0040,IL_006C,IL_0285) newobj System.Void Vmyfa.Wrapping.LocalWrapper::.ctor() stloc.s V_3 ldc.i4 1 ldsfld <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383} <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_cd3b18e1ccb44c0fb4c4cd88f726dfc3 ldfld System.Int32 <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_5c29ce61b2e04d3f98e68a6f1f50d609 brfalse IL_0012: switch(IL_00AE,IL_0228,IL_00AD,IL_025F,IL_0239,IL_0081,IL_0040,IL_006C,IL_0285) pop <null> ldc.i4 1 br IL_0012: switch(IL_00AE,IL_0228,IL_00AD,IL_025F,IL_0239,IL_0081,IL_0040,IL_006C,IL_0285) newobj System.Void dont.IO.StatelessWriter::.ctor() stloc.s V_7 ldc.i4 4 ldsfld <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383} <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_cd3b18e1ccb44c0fb4c4cd88f726dfc3 ldfld System.Int32 <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_7555307d082345baa494c2e03b07fb5d brfalse IL_0012: switch(IL_00AE,IL_0228,IL_00AD,IL_025F,IL_0239,IL_0081,IL_0040,IL_006C,IL_0285) pop <null> ldc.i4 1 br IL_0012: switch(IL_00AE,IL_0228,IL_00AD,IL_025F,IL_0239,IL_0081,IL_0040,IL_006C,IL_0285) ldnull <null> ldloc.s V_8 newobj System.Void dont.Verification.ExternalVerifier::.ctor(System.String,System.Version) stloc.s V_1 ldc.i4 3 br IL_0012: switch(IL_00AE,IL_0228,IL_00AD,IL_025F,IL_0239,IL_0081,IL_0040,IL_006C,IL_0285)
Module Name

dont.exe
Full Name

dont.exe
EntryPoint

System.Void dont.Core.Engines.SharerPredicate::StopTransformableEngine()
Scope Name

dont.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

dont
Assembly Version

1.0.132.16070
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.6
Total Strings

119
Main Method

System.Void dont.Core.Engines.SharerPredicate::StopTransformableEngine()
Main IL Instruction Count

152
Main IL

ldc.i4 7 stloc V_0 br IL_000E: ldloc V_0 ldloc V_0 switch dnlib.DotNet.Emit.Instruction[] br IL_00AE: nop nop <null> ldstr 1.4.1 newobj System.Void System.Version::.ctor(System.String) stloc.s V_8 ldc.i4 8 ldsfld <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383} <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_cd3b18e1ccb44c0fb4c4cd88f726dfc3 ldfld System.Int32 <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_a4d9044217bb4108b2be90432b8d4a13 brfalse IL_0012: switch(IL_00AE,IL_0228,IL_00AD,IL_025F,IL_0239,IL_0081,IL_0040,IL_006C,IL_0285) pop <null> ldc.i4 5 br IL_0012: switch(IL_00AE,IL_0228,IL_00AD,IL_025F,IL_0239,IL_0081,IL_0040,IL_006C,IL_0285) nop <null> ldc.i4 4032 call System.Void System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType) ldc.i4 6 br IL_0012: switch(IL_00AE,IL_0228,IL_00AD,IL_025F,IL_0239,IL_0081,IL_0040,IL_006C,IL_0285) ldloc.s V_7 ldloc.s V_3 ldloc.s V_4 newobj System.Void Vmyfa.Execution.CommandInitializer::.ctor(dont.IO.StatelessWriter,Vmyfa.Wrapping.LocalWrapper,Vmyfa.Core.ScopeProgram) stloc.s V_6 ldc.i4 0 ldsfld <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383} <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_cd3b18e1ccb44c0fb4c4cd88f726dfc3 ldfld System.Int32 <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_2e2bacd8588c4093af05c012506479ff brtrue IL_0012: switch(IL_00AE,IL_0228,IL_00AD,IL_025F,IL_0239,IL_0081,IL_0040,IL_006C,IL_0285) pop <null> ldc.i4 0 br IL_0012: switch(IL_00AE,IL_0228,IL_00AD,IL_025F,IL_0239,IL_0081,IL_0040,IL_006C,IL_0285) ret <null> nop <null> nop <null> ldloc.s V_1 ldloc.s V_6 ldftn System.Void Vmyfa.Execution.CommandInitializer::RunSequentialCommand(System.Object,dont.Verification.VerifierPolicy) newobj System.Void System.EventHandler`1<dont.Verification.VerifierPolicy>::.ctor(System.Object,System.IntPtr) callvirt System.Void dont.Verification.ExternalVerifier::VerifyDetailedVerifier(System.EventHandler`1<dont.Verification.VerifierPolicy>) ldc.i4 4 br IL_00D2: switch(IL_00F0,IL_019E,IL_0143,IL_016A,IL_010F) ldloc V_2 switch dnlib.DotNet.Emit.Instruction[] br IL_00F0: nop nop <null> ldloc.s V_4 ldloc.s V_6 ldftn System.Void Vmyfa.Execution.CommandInitializer::RunPortableCommand(System.Object,dont.Verification.OperationalVerifier) newobj System.Void System.EventHandler`1<dont.Verification.OperationalVerifier>::.ctor(System.Object,System.IntPtr) callvirt System.Void Vmyfa.Core.ScopeProgram::RunFilteredProgram(System.EventHandler`1<dont.Verification.OperationalVerifier>) ldc.i4 2 br IL_00D2: switch(IL_00F0,IL_019E,IL_0143,IL_016A,IL_010F) nop <null> ldloc.s V_7 ldloc.s V_6 ldftn System.Void Vmyfa.Execution.CommandInitializer::ExecuteSeparatedCommand(System.Object,Vmyfa.Values.ResponsiveValue) newobj System.Void System.EventHandler`1<Vmyfa.Values.ResponsiveValue>::.ctor(System.Object,System.IntPtr) callvirt System.Void dont.IO.StatelessWriter::FilterWriter(System.EventHandler`1<Vmyfa.Values.ResponsiveValue>) ldc.i4 3 ldsfld <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383} <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_cd3b18e1ccb44c0fb4c4cd88f726dfc3 ldfld System.Int32 <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_a5653336b46e428d9ee0f335ea159cdf brfalse IL_00D2: switch(IL_00F0,IL_019E,IL_0143,IL_016A,IL_010F) pop <null> ldc.i4 0 br IL_00D2: switch(IL_00F0,IL_019E,IL_0143,IL_016A,IL_010F) nop <null> ldloc.s V_1 callvirt System.Void dont.Verification.ExternalVerifier::VerifyAutomatedVerifier() ldc.i4 1 ldsfld <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383} <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_cd3b18e1ccb44c0fb4c4cd88f726dfc3 ldfld System.Int32 <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_b226aa280f5548b2895904f484464844 brtrue IL_00D2: switch(IL_00F0,IL_019E,IL_0143,IL_016A,IL_010F) pop <null> ldc.i4 0 br IL_00D2: switch(IL_00F0,IL_019E,IL_0143,IL_016A,IL_010F) nop <null> ldloc.s V_3 ldloc.s V_6 ldftn System.Void Vmyfa.Execution.CommandInitializer::RunEfficientCommand(System.Object,dont.Iterators.SeparatedIterator) newobj System.Void System.EventHandler`1<dont.Iterators.SeparatedIterator>::.ctor(System.Object,System.IntPtr) callvirt System.Void Vmyfa.Wrapping.LocalWrapper::WrapIntegratedWrapper(System.EventHandler`1<dont.Iterators.SeparatedIterator>) ldc.i4 0 ldsfld <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383} <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_cd3b18e1ccb44c0fb4c4cd88f726dfc3 ldfld System.Int32 <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_93dd4721c4de468aaf22e2def80607c4 brtrue IL_00D2: switch(IL_00F0,IL_019E,IL_0143,IL_016A,IL_010F) pop <null> ldc.i4 0 br IL_00D2: switch(IL_00F0,IL_019E,IL_0143,IL_016A,IL_010F) nop <null> nop <null> leave IL_00AD: ret ldloc.s V_6 brfalse IL_0208: endfinally ldc.i4 0 ldsfld <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383} <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_cd3b18e1ccb44c0fb4c4cd88f726dfc3 ldfld System.Int32 <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_b41e0ef852204c40aeb97410883d50ad brtrue IL_01CF: switch(IL_01E1,IL_0207) pop <null> ldc.i4 0 br IL_01CF: switch(IL_01E1,IL_0207) ldloc V_5 switch dnlib.DotNet.Emit.Instruction[] br IL_01E1: ldloc.s V_6 ldloc.s V_6 callvirt System.Void System.IDisposable::Dispose() ldc.i4 0 ldsfld <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383} <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_cd3b18e1ccb44c0fb4c4cd88f726dfc3 ldfld System.Int32 <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_98eb465a6bb648d3849fe81c4cf1452b brtrue IL_01CF: switch(IL_01E1,IL_0207) pop <null> ldc.i4 1 br IL_01CF: switch(IL_01E1,IL_0207) nop <null> endfinally <null> ldc.i4 2 ldsfld <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383} <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_cd3b18e1ccb44c0fb4c4cd88f726dfc3 ldfld System.Int32 <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_ccec2a8b1050481faa62b93180d19089 brtrue IL_0012: switch(IL_00AE,IL_0228,IL_00AD,IL_025F,IL_0239,IL_0081,IL_0040,IL_006C,IL_0285) pop <null> ldc.i4 2 br IL_0012: switch(IL_00AE,IL_0228,IL_00AD,IL_025F,IL_0239,IL_0081,IL_0040,IL_006C,IL_0285) newobj System.Void Vmyfa.Core.ScopeProgram::.ctor() stloc.s V_4 ldc.i4 5 br IL_0012: switch(IL_00AE,IL_0228,IL_00AD,IL_025F,IL_0239,IL_0081,IL_0040,IL_006C,IL_0285) newobj System.Void Vmyfa.Wrapping.LocalWrapper::.ctor() stloc.s V_3 ldc.i4 1 ldsfld <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383} <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_cd3b18e1ccb44c0fb4c4cd88f726dfc3 ldfld System.Int32 <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_5c29ce61b2e04d3f98e68a6f1f50d609 brfalse IL_0012: switch(IL_00AE,IL_0228,IL_00AD,IL_025F,IL_0239,IL_0081,IL_0040,IL_006C,IL_0285) pop <null> ldc.i4 1 br IL_0012: switch(IL_00AE,IL_0228,IL_00AD,IL_025F,IL_0239,IL_0081,IL_0040,IL_006C,IL_0285) newobj System.Void dont.IO.StatelessWriter::.ctor() stloc.s V_7 ldc.i4 4 ldsfld <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383} <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_cd3b18e1ccb44c0fb4c4cd88f726dfc3 ldfld System.Int32 <Module>{653b2377-06e7-47cf-9da1-6a59ff94b383}::m_7555307d082345baa494c2e03b07fb5d brfalse IL_0012: switch(IL_00AE,IL_0228,IL_00AD,IL_025F,IL_0239,IL_0081,IL_0040,IL_006C,IL_0285) pop <null> ldc.i4 1 br IL_0012: switch(IL_00AE,IL_0228,IL_00AD,IL_025F,IL_0239,IL_0081,IL_0040,IL_006C,IL_0285) ldnull <null> ldloc.s V_8 newobj System.Void dont.Verification.ExternalVerifier::.ctor(System.String,System.Version) stloc.s V_1 ldc.i4 3 br IL_0012: switch(IL_00AE,IL_0228,IL_00AD,IL_025F,IL_0239,IL_0081,IL_0040,IL_006C,IL_0285)
3605489cbc52559f6d32d1cf004ea3e5 (1.3 MB)
File Structure
3605489cbc52559f6d32d1cf004ea3e5
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Vmyfa.Properties.Resources.resources
Adpob
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙