4ea22ccc86b8d7fc2dd9c40858c9d4d1

PE Executable

MD5: 4ea22ccc86b8d7fc2dd9c40858c9d4d1

Size: 148.99 KB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

Symbol Obfuscation Score Low

MD5	4ea22ccc86b8d7fc2dd9c40858c9d4d1
Sha1	2fffe27bc9d7c212e7e557402e1aac22e54fcc8f
Sha256	fdb0675dac72fc8fdda65a83269040a33bb101bc7ab48de07c557e544a570607
Sha384	2586689c04093425a10b61bd1f474f297b685ab6f1edaa91bf3c66a7fff90a03f56e0b6420582f06c3d20385035066fc
Sha512	17d6b1886d7b5ab31cec55525b578506ccd2f93604416161f44ca0bf8253226a2bbb57456a21e642c1c42cbac582fc5ff84ec98b72edb4348d1b21825aa18261
SSDeep	3072:eW//kSed/T4pxzNiPXcLizVGwPKagTbTICPg:BkVd/T4pxzNiPXyihG0KagTb
TLSH	9AE38F6962EC560DE7FB4279FCF513844EBDFD713202D22DA49251916E00FE66E222B3

PeID

Microsoft Visual C++ DLLMicrosoft Visual C++ v6.0

STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1

Name	Value
Info	PE Detect: PeReader OK (file layout)
Module Name	pg1.exe
Full Name	pg1.exe
EntryPoint	System.Void fin24.Program::Main(System.String[])
Scope Name	pg1.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	pg1
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	<null>
Total Strings	841
Main Method	System.Void fin24.Program::Main(System.String[])
Main IL Instruction Count	677
Main IL	call System.String[] arr703.mid8::slot484() ldstr kinhdepnjngclgbfdejie call System.String mem60.obj786.span126::fld144(System.String) call System.Boolean System.Linq.Enumerable::Contains<System.String>(System.Collections.Generic.IEnumerable`1<System.String>,System.String) brtrue.s IL_0018: br IL_01A5 br.s IL_0094: ldsfld System.String err842.cfg352::span755 br IL_01A5: ret ldloc.0 <null> callvirt System.Nullable`1<System.Boolean> vel822.tag42::prev84() stloc.1 <null> br IL_01D1: ldloca.s V_1 ldloc.0 <null> callvirt System.Void vel822.tag42::op358() br.s IL_0045: ret ldloc.0 <null> ldfld idx42.lbl5 vel822.tag42::sku0 ldloc.s V_4 callvirt System.Int32 System.Collections.Generic.List`1<vel0.span736>::get_Count() callvirt System.Void idx42.lbl5::cur5<System.Int32>(System.Int32) br.s IL_00A7: ldloc.0 ret <null> ldloc.0 <null> ldfld idx42.lbl5 vel822.tag42::sku0 ldloc.s V_11 callvirt System.Void idx42.lbl5::cur5<System.Byte[]>(System.Byte[]) br IL_01E4: call System.Collections.Generic.List`1<System.IO.DirectoryInfo> val47.elm250::cost2() ret <null> ldloc.s V_27 ldc.i4 116024477 xor <null> stloc.s V_28 ldc.i4 49998155 ldloc.s V_28 sub <null> brfalse.s IL_0045: ret ldloc.s V_28 ldc.i4 49998155 blt.s IL_0078: nop br.s IL_0079: ldc.i4 107698862 nop <null> ldc.i4 107698862 ldloc.s V_28 ceq <null> brtrue IL_01A5: ret br IL_01F1: call System.Byte[] typ614.tbl61::ln42() ldloc.0 <null> callvirt System.Void vel822.tag42::opt872() br.s IL_001D: ldloc.0 ldsfld System.String err842.cfg352::span755 call System.Boolean cap5.ln60::sub2(System.String) brfalse.s IL_00A5: br.s IL_0058 br IL_01B5: newobj System.Void vel822.tag42::.ctor() br.s IL_0058: ret ldloc.0 <null> ldfld idx42.lbl5 vel822.tag42::sku0 callvirt fmt15.qty7 idx42.lbl5::mem537<fmt15.qty7>() call System.Void ln6.msg25::cnt61(fmt15.qty7) br IL_01FD: newobj System.Void System.Collections.Generic.Dictionary`2<vel0.span736,stat16.tbl4>::.ctor() ldloc.0 <null> ldfld idx42.lbl5 vel822.tag42::sku0 callvirt qty26.pct08 idx42.lbl5::mem537<qty26.pct08>() newobj System.Void fld52.ini584::.ctor() dup <null> call System.String arr703.mid8::stat7() callvirt System.Void fld52.ini584::dt58(System.String) dup <null> call System.String arr703.mid8::stk836() callvirt System.Void fld52.ini584::tier031(System.String) dup <null> call System.String arr703.mid8::seq5() callvirt System.Void fld52.ini584::val184(System.String) dup <null> call System.String arr703.mid8::brn254() callvirt System.Void fld52.ini584::tbl64(System.String) dup <null> call System.Boolean arr703.mid8::pct5() callvirt System.Void fld52.ini584::nxt62(System.Boolean) dup <null> call System.String arr703.mid8::hi08() callvirt System.Void fld52.ini584::dt042(System.String) dup <null> call System.DateTime System.DateTime::get_Now() stloc.s V_10 ldloca.s V_10 call System.Globalization.CultureInfo System.Globalization.CultureInfo::get_CurrentCulture() call System.String System.DateTime::ToString(System.IFormatProvider) ldstr ggbjiofhlnocl call System.String mem60.obj786.span126::fld144(System.String) call System.TimeZoneInfo System.TimeZoneInfo::get_Local() callvirt System.String System.TimeZoneInfo::get_DisplayName() call System.String System.String::Concat(System.String,System.String,System.String) callvirt System.Void fld52.ini584::bit8(System.String) dup <null> call System.String[] arr703.mid8::slot484() callvirt System.Void fld52.ini584::tbl66(System.String[]) dup <null> call System.Int32 arr703.mid8::tbl5() callvirt System.Void fld52.ini584::opt532(System.Int32) dup <null> call System.String[] arr703.mid8::dt052() callvirt System.Void fld52.ini584::ini8(System.String[]) dup <null> call System.Int32 arr703.mid8::lo153() callvirt System.Void fld52.ini584::cur76(System.Int32) dup <null> call System.Int32 arr703.mid8::tier8() callvirt System.Void fld52.ini584::val4(System.Int32) dup <null> call System.String arr703.mid8::seq2() callvirt System.Void fld52.ini584::scope1(System.String) dup <null> call System.Int32 arr703.mid8::opt278() callvirt System.Void fld52.ini584::msg3(System.Int32) stloc.2 <null> ldloc.0 <null> ldfld idx42.lbl5 vel822.tag42::sku0 ldloc.2 <null> callvirt System.Void idx42.lbl5::cur5<fld52.ini584>(fld52.ini584) callvirt System.Boolean qty26.pct08::stat4() brtrue.s IL_01A3: br.s IL_01F1 br.s IL_01E4: call System.Collections.Generic.List`1<System.IO.DirectoryInfo> val47.elm250::cost2() br.s IL_01F1: call System.Byte[] typ614.tbl61::ln42() ret <null> ldloc.3 <null> callvirt System.Collections.Generic.List`1<System.IO.DirectoryInfo> err851.ln71::span873() call System.Collections.Generic.List`1<vel0.span736> opt5.sub203::que26(System.Collections.Generic.IEnumerable`1<System.IO.DirectoryInfo>) stloc.s V_4 br.s IL_01C0: ldloc.s V_4 newobj System.Void vel822.tag42::.ctor() stloc.0 <null> br IL_008C: ldloc.0 ldloc.s V_4 call System.Boolean System.Linq.Enumerable::Any<vel0.span736>(System.Collections.Generic.IEnumerable`1<vel0.span736>) brfalse IL_044D: ldloc.0 br IL_0031: ldloc.0 ldloca.s V_1 call System.Boolean System.Nullable`1<System.Boolean>::get_HasValue() brfalse.s IL_01DF: br IL_0029 br IL_00BC: ldloc.0 br IL_0029: ldloc.0 call System.Collections.Generic.List`1<System.IO.DirectoryInfo> val47.elm250::cost2() call err851.ln71 prm1.nxt6::dst210(System.Collections.Generic.List`1<System.IO.DirectoryInfo>) stloc.3 <null> br.s IL_01A6: ldloc.3 call System.Byte[] typ614.tbl61::ln42() stloc.s V_11 br IL_0046: ldloc.0 newobj System.Void System.Collections.Generic.Dictionary`2<vel0.span736,stat16.tbl4>::.ctor() stloc.s V_12 ldloc.s V_4 callvirt System.Collections.Generic.List`1/Enumerator<vel0.span736> System.Collections.Generic.List`1<vel0.span736>::GetEnumerator() stloc.s V_14 br.s IL_0259: ldloca.s V_14 br.s IL_0259: ldloca.s V_14 ldloc.0 <null> ldfld idx42.lbl5 vel822.tag42::sku0 ldc.i4.0 <null> callvirt System.Void idx42.lbl5::cur5<System.Int32>(System.Int32) br IL_02C3: ldloc.0 ldloc.s V_15 callvirt System.Boolean vel0.span736::hue33() brtrue.s IL_0243: br.s IL_02A1 ldc.i4 -31584557 stloc.s V_27 ldc.i4 96014669 ldloc.s V_27 add <null> ldc.i4 64430112 beq.s IL_02AC: ldloc.0 br.s IL_0273: ldloc.s V_27 br.s IL_02A1: ldloc.s V_15 ldloc.0 <null> ldfld idx42.lbl5 vel822.tag42::sku0 ldloc.s V_15 call lhs628.mid36 cost871.fmt206::rec201(vel0.span736) callvirt System.Void idx42.lbl5::cur5<lhs628.mid36>(lhs628.mid36) br.s IL_0259: ldloca.s V_14 ldloca.s V_14 call System.Boolean System.Collections.Generic.List`1/Enumerator<vel0.span736>::MoveNext() brtrue.s IL_0264: br.s IL_0296 br.s IL_02DC: leave.s IL_02EC br.s IL_0296: ldloca.s V_14 ldloc.s V_12 ldloc.s V_15 ldloc.s V_16 callvirt System.Void System.Collections.Generic.Dictionary`2<vel0.span736,stat16.tbl4>::set_Item(vel0.span736,stat16.tbl4) br.s IL_0211: ldloc.0 ldloc.s V_27 ldc.i4 96014669 add <null> dup <null> ldc.i4 97306057 sub <null> brtrue.s IL_0287: dup pop <null> br.s IL_0222: ldloc.s V_15 dup <null> ldc.i4 64430112 sub <null> brtrue.s IL_0293: pop pop <null> br.s IL_02AC: ldloc.0 pop <null> br.s IL_0259: ldloca.s V_14 ldloca.s V_14 call vel0.span736 System.Collections.Generic.List`1/Enumerator<vel0.span736>::get_Current() stloc.s V_15 br.s IL_0222: ldloc.s V_15 ldloc.s V_15 call stat16.tbl4 cap683.ts08::num831(vel0.span736) stloc.s V_16 br.s IL_0266: ldloc.s V_12 ldloc.0 <null> ldfld idx42.lbl5 vel822.tag42::sku0 ldstr ikkhdemhfacmhcjaiho call System.Int32 mem60.obj786.span126::fld80(System.String) callvirt System.Void idx42.lbl5::cur5<System.Int32>(System.Int32) br.s IL_0245: ldloc.0 ldloc.0 <null> ldfld idx42.lbl5 vel822.tag42::sku0 ldloc.s V_15 ldloc.s V_16 call tbl482.dt7 cap683.ts08::cfg73(vel0.span736,stat16.tbl4) callvirt System.Void idx42.lbl5::cur5<tbl482.dt7>(tbl482.dt7) br IL_020F: br.s IL_0259 leave.s IL_02EC: call System.Void ln6.msg25::src201() ldloca.s V_14 constrained. System.Collections.Generic.List`1/Enumerator<vel0.span736> callvirt System.Void System.IDisposable::Dispose() endfinally <null> call System.Void ln6.msg25::src201() br.s IL_033D: call System.Void System.GC::Collect() ldloc.0 <null> ldfld idx42.lbl5 vel822.tag42::sku0 ldloc.s V_13 callvirt System.Int32 System.Collections.Generic.List`1<ln88.env8>::get_Count() callvirt System.Void idx42.lbl5::cur5<System.Int32>(System.Int32) br.s IL_0344: ldloc.s V_13 ldloc.0 <null> ldfld idx42.lbl5 vel822.tag42::sku0 callvirt System.Collections.Generic.List`1<lbl31.bit5> idx42.lbl5::mem537<System.Collections.Generic.List`1<lbl31.bit5>>() ldloc.s V_4 call System.Collections.Generic.List`1<ln88.env8> cap67.typ47::fld0(System.Collections.Generic.List`1<lbl31.bit5>,System.Collections.Generic.List`1<vel0.span736>) stloc.s V_13 br.s IL_02F3: ldloc.0 ldloc.s V_27 ldc.i4 81123021 sub <null> stloc.s V_28 ldloc.s V_28 ldc.i4 5772939 xor <null> brfalse.s IL_02F3: ldloc.0 ldloc.s V_28 ldc.i4 112723252 sub <null> brfalse.s IL_0344: ldloc.s V_13 br.s IL_033D: call System.Void System.GC::Collect() call System.Void System.GC::Collect() br.s IL_0307: ldloc.0 ldloc.s V_13 callvirt System.Collections.Generic.List`1/Enumerator<ln88.env8> System.Collections.Generic.List`1<ln88.env8>::GetEnumerator() stloc.s V_17 br.s IL_034F: ldloca.s V_17 ldloca.s V_17 call System.Boolean System.Collections.Generic.List`1/Enumerator<ln88.env8>::MoveNext() brfalse.s IL_0371: ldc.i4 75220529 ldc.i4 58322499 stloc.s V_27 ldloc.s V_27 ldc.i4 35568262 add <null> ldc.i4 93890761 xor <null> brfalse.s IL_03EC: ldloca.s V_17 br.s IL_0389: ldloc.s V_27 ldc.i4 75220529 stloc.s V_27 ldc.i4 35568262 ldloc.s V_27 add <null> ldc.i4 110788791 beq.s IL_03F7: leave IL_05F3 br.s IL_0389: ldloc.s V_27 ldloc.s V_27 ldc.i4 35568262 add <null> stloc.s V_28 ldc.i4 93890761 ldloc.s V_28 beq.s IL_03EC: ldloca.s V_17 ldloc.s V_28 ldc.i4 93890761 blt.s IL_03A7: nop br.s IL_03A8: ldloc.s V_28 nop <null> ldloc.s V_28 ldc.i4 110788791 sub <null> brfalse.s IL_03F7: leave IL_05F3 br.s IL_03D9: ldloc.s V_12 ldloc.0 <null> ldfld idx42.lbl5 vel822.tag42::sku0 ldloc.s V_18 ldloc.s V_19 brtrue.s IL_03C3: ldloc.s V_19 ldnull <null> br.s IL_03CA: call tok708.hi880 stat1.tbl2::lo2(ln88.env8,vel776.lo3) ldloc.s V_19 call vel776.lo3 stat16.tbl4::qty4() call tok708.hi880 stat1.tbl2::lo2(ln88.env8,vel776.lo3) callvirt System.Void idx42.lbl5::cur5<tok708.hi880>(tok708.hi880) br IL_034F: ldloca.s V_17 ldloc.s V_12 ldloc.s V_18 callvirt vel0.span736 ln88.env8::arr46() ldloca.s V_19 callvirt System.Boolean System.Collections.Generic.Dictionary`2<vel0.span736,stat16.tbl4>::TryGetValue(vel0.span736,stat16.tbl4&) pop <null> br.s IL_03B4: ldloc.0 ldloca.s V_17 call ln88.env8 System.Collections.Generic.List`1/Enumerator<ln88.env8>::get_Current() stloc.s V_18 br.s IL_03D9: ldloc.s V_12 leave IL_05F3: ldloc.0 ldloca.s V_17 constrained. System.Collections.Generic.List`1/Enumerator<ln88.env8> callvirt System.Void System.IDisposable::Dispose() endfinally <null> ldloc.s V_12 callvirt System.Collections.Generic.Dictionary`2/ValueCollection<vel0.span736,stat16.tbl4> System.Collections.Generic.Dictionary`2<vel0.span736,stat16.tbl4>::get_Values() callvirt System.Collections.Generic.Dictionary`2/ValueCollection/Enumerator<vel0.span736,stat16.tbl4> System.Collections.Generic.Dictionary`2/ValueCollection<vel0.span736,stat16.tbl4>::GetEnumerator() stloc.s V_20 br.s IL_042C: ldloca.s V_20 ldloca.s V_20 call stat16.tbl4 System.Collections.Generic.Dictionary`2/ValueCollection/Enumerator<vel0.span736,stat16.tbl4>::get_Current() dup <null> brtrue.s IL_0427: call System.Void stat16.tbl4::Dispose() pop <null> br.s IL_042C: ldloca.s V_20 call System.Void stat16.tbl4::Dispose() ldloca.s V_20 call System.Boolean System.Collections.Generic.Dictionary`2/ValueCollection/Enumerator<vel0.span736,stat16.tbl4>::MoveNext() brtrue.s IL_041A: ldloca.s V_20 leave.s IL_0445: ldloc.s V_12 ldloca.s V_20 constrained. System.Collections.Generic.Dictionary`2/ValueCollection/Enumerator<vel0.span736,stat16.tbl4> callvirt System.Void System.IDisposable::Dispose() endfinally <null> ldloc.s V_12 callvirt System.Void System.Collections.Generic.Dictionary`2<vel0.span736,stat16.tbl4>::Clear() endfinally <null> ldloc.0 <null> ldfld idx42.lbl5 vel822.tag42::sku0 ldc.i4.0 <null> callvirt System.Void idx42.lbl5::cur5<System.Int32>(System.Int32) br IL_05F3: ldloc.0 ldloc.s V_21 callvirt System.Collections.Generic.List`1<System.Byte[]> diff6.cfg833::que8() ldloc.s V_21 callvirt System.Collections.Generic.List`1<System.Byte[]> diff6.cfg833::op34() call System.Collections.Generic.List`1<System.String> msg82.dt7::tbl6(System.Collections.Generic.List`1<System.Byte[]>,System.Collections.Generic.List`1<System.Byte[]>) stloc.s V_22 br IL_0579: ldloc.0 ldloc.s V_7 callvirt System.Int32 System.Collections.Generic.List`1<fmt3.pos4>::get_Count() ldc.i4.0 <null> bgt.s IL_0494: br IL_05AC ldc.i4 400271531 ldc.i4 305419896 xor <null> stloc.s V_27 br IL_0538: ldloc.s V_27 br IL_05AC: ldloc.0 ldloc.0 <null> ldloc.3 <null> callvirt System.Collections.Generic.List`1<pos11.res167> err851.ln71::stk03() ldstr pcogiikkleghb call System.Byte mem60.obj786.span126::ret5(System.String) call System.Void fin24.Program::len50(vel822.tag42,System.Collections.Generic.IEnumerable`1<pos11.res167>,System.Byte) ldc.i4 317419322 ldc.i4 305419896 xor <null> stloc.s V_27 br.s IL_0538: ldloc.s V_27 ldloc.0 <null> ldfld idx42.lbl5 vel822.tag42::sku0 ldstr fglfnhinmiabhgdllcj call System.Int32 mem60.obj786.span126::fld80(System.String) callvirt System.Void idx42.lbl5::cur5<System.Byte>(System.Byte) br.s IL_04D5: call System.Collections.Generic.List`1<fmt3.pos4> msg82.dt7::idx3() call System.Collections.Generic.List`1<fmt3.pos4> msg82.dt7::idx3() stloc.s V_7 br.s IL_04F5: ldloc.0 ldloc.0 <null> ldfld idx42.lbl5 vel822.tag42::sku0 ldstr ncecnmelcpkmoanfclf call System.Int32 mem60.obj786.span126::fld80(System.String) callvirt System.Void idx42.lbl5::cur5<System.Byte>(System.Byte) br.s IL_051D: ldloc.0 ldloc.0 <null> ldfld idx42.lbl5 vel822.tag42::sku0 ldloc.s V_7 callvirt System.Void idx42.lbl5::cur5<System.Collections.Generic.List`1<fmt3.pos4>>(System.Collections.Generic.List`1<fmt3.pos4>) ldc.i4 66447469 stloc.s V_27 ldc.i4 14750554 ldloc.s V_27 xor <null> ldc.i4 51706679 bne.un.s IL_0538: ldloc.s V_27 br IL_0478: ldloc.s V_7 ldloc.0 <null> ldfld idx42.lbl5 vel822.tag42::sku0 ldloc.3 <null> callvirt System.Collections.Generic.List`1<prev07.err660> err851.ln71::ln817() call System.Collections.Generic.List`1<tag3.str1> own135.mem633::mem157(System.Collections.Generic.IEnumerable`1<prev07.err660>) callvirt System.Void idx42.lbl5::cur5<System.Collections.Generic.List`1<tag3.str1>>(System.Collections.Generic.List`1<tag3.str1>) br IL_0499: ldloc.0 ldloc.s V_27 ldc.i4 14750554 xor <null> stloc.s V_28 ldloc.s V_28 ldc.i4 51706679 sub <null> brfalse IL_0478: ldloc.s V_7 ldc.i4 22922782 ldloc.s V_28 ceq <null> brtrue IL_045E: ldloc.s V_21 ldc.i4 84864393 ldloc.s V_28 sub <null> brfalse IL_0619: ldloc.0 ldloc.s V_28 ldc.i4 4074008 sub <null> brfalse IL_060A: ldloc.0 br.s IL_058B: ldloc.0 ldloc.0 <null> ldfld idx42.lbl5 vel822.tag42::sku0 ldloc.s V_22 callvirt System.Void idx42.lbl5::cur5<System.Collections.Generic.List`1<System.String>>(System.Collections.Generic.List`1<System.String>) br IL_0619: ldloc.0 ldloc.0 <null> ldfld idx42.lbl5 vel822.tag42::sku0 ldloc.s V_5 callvirt System.Void idx42.lbl5::cur5<System.Collections.Generic.List`1<col137.rhs31>>(System.Collections.Generic.List`1<col137.rhs31>) br IL_04DE: ldloc.0 ldloc.0 <null> ldfld idx42.lbl5 vel822.tag42::sku0 callvirt System.Collections.Generic.List`1<elm8.que0> idx42.lbl5::mem537<System.Collections.Generic.List`1<elm8.que0>>() stloc.s V_8 br.s IL_062A: ldloc.s V_8 ldloc.0 <null> ldfld idx42.lbl5 vel822.tag42::sku0 callvirt diff6.cfg833 idx42.lbl5::mem537<diff6.cfg833>() stloc.s V_21 ldc.i4 29152580 stloc.s V_27 ldc.i4 14750554 ldloc.s V_27 xor <null> ldc.i4 22922782 bne.un IL_0538: ldloc.s V_27 br IL_045E: ldloc.s V_21 ldloc.0 <null> ldloc.s V_6 call System.Collections.Generic.List`1<pos11.res167> tbl0.src53::uid40(System.Collections.Generic.List`1<arg11.span00>) ldstr fioeepbkhimci call System.Byte mem60.obj786.span126::ret5(System.String) call System.Void fin24.Program::len50(vel822.tag42,System.Collections.Generic.IEnumerable`1<pos11.res167>,System.Byte) br IL_04BE: ldloc.0 ldloc.0 <null> ldfld idx42.lbl5 vel822.tag42::sku0 ldstr ajcdhnnkjodokoeiffl call System.Int32 mem60.obj786.span126::fld80(System.String) callvirt System.Void idx42.lbl5::cur5<System.Byte>(System.Byte) br.s IL_0633: ldloc.3 ldloc.0 <null> ldfld idx42.lbl5 vel822.tag42::sku0 callvirt System.Collections.Generic.List`1<arg11.span00> idx42.lbl5::mem537<System.Collections.Generic.List`1<arg11.span00>>() stloc.s V_6 br.s IL_05D7: ldloc.0 ldloc.0 <null> ldfld idx42.lbl5 vel822.tag42::sku0 ldc.i4.0 <null> callvirt System.Void idx42.lbl5::cur5<System.Byte>(System.Byte) br IL_059D: ldloc.0 ldloc.s V_8 brfalse IL_06D7: ldloc.0 br.s IL_0645: ldloc.s V_8 ldloc.3 <null> callvirt System.Collections.Generic.List`1<prev07.err660> err851.ln71::ret608() call System.Collections.Generic.List`1<col137.rhs31> op2.num464::fin5(System.Collections.Generic.IEnumerable`1<prev07.err660>) stloc.s V_5 br IL_058B: ldloc.0 ldloc.s V_8 callvirt System.Int32 System.Collections.Generic.List`1<elm8.que0>::get_Count() ldc.i4.0 <null> ble IL_06D7: ldloc.0 br.s IL_0654: ldloc.s V_8 ldloc.s V_8 callvirt System.Collections.Generic.List`1/Enumerator<elm8.que0> System.Collections.Generic.List`1<elm8.que0>::GetEnumerator() stloc.s V_23 br.s IL_0692: ldloca.s V_23 ldloca.s V_23 call elm8.que0 System.Collections.Generic.List`1/Enumerator<elm8.que0>::get_Current() call System.Void ln3.var533::cur27(elm8.que0) br.s IL_0692: ldloca.s V_23 ldloc.s V_27 ldc.i4 8695189 xor <null> dup <null> ldc.i4 11641907 ceq <null> brfalse.s IL_0682: dup pop <null> br.s IL_065F: ldloca.s V_23 dup <null> ldc.i4 29218023 ceq <null> brfalse.s IL_068F: pop pop <null> br.s IL_06C7: leave.s IL_06D7 pop <null> br.s IL_0692: ldloca.s V_23 ldloca.s V_23 call System.Boolean System.Collections.Generic.List`1/Enumerator<elm8.que0>::MoveNext() brtrue.s IL_06AE: ldc.i4 3475878 ldc.i4 20543858 stloc.s V_27 ldc.i4 8695189 ldloc.s V_27 xor <null> stloc.s V_28 br.s IL_06C7: leave.s IL_06D7 ldc.i4 3475878 stloc.s V_27 ldloc.s V_27 ldc.i4 8695189 xor <null> ldc.i4 11641907 xor <null> brfalse.s IL_065F: ldloca.s V_23 br.s IL_066D: ldloc.s V_27 leave.s IL_06D7: ldloc.0 ldloca.s V_23 constrained. System.Collections.Generic.List`1/Enumerator<elm8.que0> callvirt System.Void System.IDisposable::Dispose() endfinally <null> ldloc.0 <null> ldfld idx42.lbl5 vel822.tag42::sku0 callvirt opt85.val78 idx42.lbl5::mem537<opt85.val78>() stloc.s V_9 br.s IL_073C: ldloc.s V_9 ldloc.0 <null> ldfld idx42.lbl5 vel822.tag42::sku0 ldloc.s V_24 callvirt System.Int32 System.Collections.Generic.List`1<System.String>::get_Count() callvirt System.Void idx42.lbl5::cur5<System.Int32>(System.Int32) br.s IL_0750: ldloc.s V_24 ldloc.s V_9 callvirt System.Collections.Generic.List`1<rhs576.arr534> opt85.val78::uid08() callvirt System.Int32 System.Collections.Generic.List`1<rhs576.arr534>::get_Count() ldc.i4.0 <null> ble IL_0819: ldloc.0 br.s IL_0745: ldloc.s V_9 ldloc.s V_27 ldc.i4 124708360 sub <null> stloc.s V_28 ldloc.s V_28 ldc.i4 71065262 ceq <null> brtrue.s IL_0750: ldloc.s V_24 ldloc.s V_28 ldc.i4 71065262 blt.s IL_072E: nop br.s IL_072F: ldc.i4 112071261 nop <null> ldc.i4 112071261 ldloc.s V_28 ceq <null> brtrue.s IL_073C: ldloc.s V_9 br.s IL_06FA: ldloc.s V_9 ldloc.s V_9 brfalse IL_0819: ldloc.0 br.s IL_06FA: ldloc.s V_9 ldloc.s V_9 call System.Collections.Generic.List`1<System.String> msg306.cfg120::tok10(opt85.val78) stloc.s V_24 br.s IL_06E6: ldloc.0 ldloc.s V_24 callvirt System.Collections.Generic.List`1/Enumerator<System.String> System.Collections.Generic.List`1<System.String>::GetEnumerator() stloc.s V_25 ldc.i4 -302638181 ldc.i4 305419896 xor <null> stloc.s V_27 br.s IL_0775: ldloc.s V_27 ldloca.s V_25 call System.Boolean System.Collections.Generic.List`1/Enumerator<System.String>::MoveNext() brfalse.s IL_0773: br.s IL_07CA br.s IL_07BF: ldloca.s V_25 br.s IL_07CA: leave.s IL_07DA ldloc.s V_27 ldc.i4 134126606 add <null> stloc.s V_28 ldloc.s V_28 ldc.i4 87988215 beq.s IL_07BF: ldloca.s V_25 ldloc.s V_28 ldc.i4 87988215 blt.s IL_0793: nop br.s IL_0794: ldc.i4 130083313 nop <null> ldc.i4 130083313 ldloc.s V_28 ceq <null> brtrue.s IL_0768: ldloca.s V_25 br.s IL_07A1: ldloc.0 ldloc.0 <null> ldfld idx42.lbl5 vel822.tag42::sku0 ldloc.s V_26 ldstr ajcbdggbmfelfkddccj call System.Int32 mem60.obj786.span126::fld80(System.String) call fmt3.pos4 ln2.pct15::nxt636(System.String,System.Int32) callvirt System.Void idx42.lbl5::cur5<fmt3.pos4>(fmt3.pos4) br.s IL_0768: ldloca.s V_25 ldloca.s V_25 call System.String System.Collections.Generic.List`1/Enumerator<System.String>::get_Current() stloc.s V_26 br.s IL_07A1: ldloc.0 leave.s IL_07DA: call System.Void System.GC::Collect() ldloca.s V_25 constrained. System.Collections.Generic.List`1/Enumerator<System.String> callvirt System.Void System.IDisposable::Dispose() endfinally <null> call System.Void System.GC::Collect() br.s IL_0800: ldc.i4 199104460 ldloc.s V_27 ldc.i4 130289682 sub <null> stloc.s V_28 ldc.i4 61349984 ldloc.s V_28 beq.s IL_0819: ldloc.0 ldc.i4 68814778 ldloc.s V_28 xor <null> brfalse.s IL_0834: ldloc.0 br.s IL_0800: ldc.i4 199104460 ldc.i4 199104460 stloc.s V_27 ldloc.s V_27 ldc.i4 130289682 sub <null> ldc.i4 68814778 xor <null> brfalse.s IL_0834: ldloc.0 br.s IL_07E1: ldloc.s V_27 ldloc.0 <null> ldfld idx42.lbl5 vel822.tag42::sku0 ldc.i4.0 <null> callvirt System.Void idx42.lbl5::cur5<System.Int32>(System.Int32) ldc.i4 434782644 ldc.i4 305419896 xor <null> stloc.s V_27 br.s IL_07E1: ldloc.s V_27 ldloc.0 <null> callvirt System.Void vel822.tag42::op358() br.s IL_083C: ret ret <null>

No malware configuration was found at this point.

You must be signed in to view YARA rules.