Malicious
Malicious

602243aada825c072763e9ac5465cc09

PE Executable
|
MD5: 602243aada825c072763e9ac5465cc09
|
Size: 67.58 KB
|
application/x-dosexec

Print
Infection Chain
Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Very high

Hash
 Hash Value
MD5
602243aada825c072763e9ac5465cc09
Sha1
8aaa16ec5ac8fb682569e1e7713e8be9acc86755
Sha256
e0059f8d6dfbf7bdddd47912c517a90d0c848ceb474445e920754ddb3119e902
Sha384
0173b23550070ef69d62f71a63be4579100d2022cd2833a71ba3b245b9e286457210efd8660426238f1c082d67143141
Sha512
ba6e660ed64879a9b585c9f2c89d18ab6a9ca13bf215a714a532c89e53450230f23ab89b3e2b2751437d76f20850a391d0eb58555d88886cfbcc802478b3a26d
SSDeep
1536:4v9q+AsblaQnTjliulFfn+bpp+kSPv/CXCzJvnIOrVT81D:4vWsbIQnvlZlFn+bpp+kKhdIOhTuD
TLSH
1C636C2877EA4115E1FFAFF01DE27112C276F2631902E66F20D9428726239C98D567FA

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
602243aada825c072763e9ac5465cc09
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Malware Configuration - XWorm config.
Config. Field
 Value
Mutex

eHBYD7Nk29PJOfsQ
Hosts

kinglear11.duckdns.org
Port

45000
KEY

<12345678910203040>
USBNM

<Xwormmm>
family

xworm
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Module Name

XClient.exe
Full Name

XClient.exe
EntryPoint

System.Void Stub.VDsbPA0HXz5L7w1ut86Ho33UIMyzYVo2Pq17Rwgv7Z8HIhvgWy7Nai75MWfAQJ1TQ8PwIs5oZbuNQriMT::MXDp7BtWWh3TjjCjxWKM0Fcj57GU1EtAGYE7eaF8wwjWpta8XEZlmFZCkOhu1HE15BqcRpGUXAA6xyFYt()
Scope Name

XClient.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

XClient
Assembly Version

1.0.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

<null>
Total Strings

291
Main Method

System.Void Stub.VDsbPA0HXz5L7w1ut86Ho33UIMyzYVo2Pq17Rwgv7Z8HIhvgWy7Nai75MWfAQJ1TQ8PwIs5oZbuNQriMT::MXDp7BtWWh3TjjCjxWKM0Fcj57GU1EtAGYE7eaF8wwjWpta8XEZlmFZCkOhu1HE15BqcRpGUXAA6xyFYt()
Main IL Instruction Count

63
Main IL

ldsfld System.Int32 mQl5OfLhOHSG2ZOJrzcug3wdmF1A8F6blU8pjZPhgMqSVxsNzynNPhlHwJiLTYnDDuTMPdSiGmsLuRwVA::7cKjP7tPnyh42H3KAHMV6hXTbcWwDWTx4p7yEdngIJekU60QvP77M07e0qAWO20TSqYcEEenrJPKoH9X2 ldc.i4 1000 mul.ovf <null> call System.Void System.Threading.Thread::Sleep(System.Int32) ldsfld System.String mQl5OfLhOHSG2ZOJrzcug3wdmF1A8F6blU8pjZPhgMqSVxsNzynNPhlHwJiLTYnDDuTMPdSiGmsLuRwVA::3ev8iWWXlnjJlvLvynVNpsl89Pwfv5CetkQEB00flx3ciKkrqRgMoaNby4jM1ZWyytzRfvzl5v0QpX2am call System.Object Stub.WK3x1KH1g8RVaXC51ui2SRdNkIVnBinwoeRoiigDg0sCCC2sWhuQMHH::xKRBkd3eqJATx1dbG5QKnjw42aUmo2irA9md2xW1waRKH3pY0h4Nz98(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String mQl5OfLhOHSG2ZOJrzcug3wdmF1A8F6blU8pjZPhgMqSVxsNzynNPhlHwJiLTYnDDuTMPdSiGmsLuRwVA::3ev8iWWXlnjJlvLvynVNpsl89Pwfv5CetkQEB00flx3ciKkrqRgMoaNby4jM1ZWyytzRfvzl5v0QpX2am ldsfld System.String mQl5OfLhOHSG2ZOJrzcug3wdmF1A8F6blU8pjZPhgMqSVxsNzynNPhlHwJiLTYnDDuTMPdSiGmsLuRwVA::D7Rr5KOsPNyg9tzjIVeDTdViCSEtri0hpdRpAFnvuicdmT3B7d83NLj63p1kPxLO1Pt8LkLmIUbW1ybL4 call System.Object Stub.WK3x1KH1g8RVaXC51ui2SRdNkIVnBinwoeRoiigDg0sCCC2sWhuQMHH::xKRBkd3eqJATx1dbG5QKnjw42aUmo2irA9md2xW1waRKH3pY0h4Nz98(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String mQl5OfLhOHSG2ZOJrzcug3wdmF1A8F6blU8pjZPhgMqSVxsNzynNPhlHwJiLTYnDDuTMPdSiGmsLuRwVA::D7Rr5KOsPNyg9tzjIVeDTdViCSEtri0hpdRpAFnvuicdmT3B7d83NLj63p1kPxLO1Pt8LkLmIUbW1ybL4 ldsfld System.String mQl5OfLhOHSG2ZOJrzcug3wdmF1A8F6blU8pjZPhgMqSVxsNzynNPhlHwJiLTYnDDuTMPdSiGmsLuRwVA::tm6YyfeY2mO55BGrYS1pFvN30B3N7f9HC7Vv0ixcZL1ugUrOGTUYJyu3zIk7opRdosRxQPTYd4nZKbz0e call System.Object Stub.WK3x1KH1g8RVaXC51ui2SRdNkIVnBinwoeRoiigDg0sCCC2sWhuQMHH::xKRBkd3eqJATx1dbG5QKnjw42aUmo2irA9md2xW1waRKH3pY0h4Nz98(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String mQl5OfLhOHSG2ZOJrzcug3wdmF1A8F6blU8pjZPhgMqSVxsNzynNPhlHwJiLTYnDDuTMPdSiGmsLuRwVA::tm6YyfeY2mO55BGrYS1pFvN30B3N7f9HC7Vv0ixcZL1ugUrOGTUYJyu3zIk7opRdosRxQPTYd4nZKbz0e ldsfld System.String mQl5OfLhOHSG2ZOJrzcug3wdmF1A8F6blU8pjZPhgMqSVxsNzynNPhlHwJiLTYnDDuTMPdSiGmsLuRwVA::rAVsSCCwaziRH9jk3vZl00SbZ8NWCLIWNQ39WIfJfOZ6aD2BoluZeF9qudNlK9SrURxK8mO9Jr3U9rhGm call System.Object Stub.WK3x1KH1g8RVaXC51ui2SRdNkIVnBinwoeRoiigDg0sCCC2sWhuQMHH::xKRBkd3eqJATx1dbG5QKnjw42aUmo2irA9md2xW1waRKH3pY0h4Nz98(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String mQl5OfLhOHSG2ZOJrzcug3wdmF1A8F6blU8pjZPhgMqSVxsNzynNPhlHwJiLTYnDDuTMPdSiGmsLuRwVA::rAVsSCCwaziRH9jk3vZl00SbZ8NWCLIWNQ39WIfJfOZ6aD2BoluZeF9qudNlK9SrURxK8mO9Jr3U9rhGm ldsfld System.String mQl5OfLhOHSG2ZOJrzcug3wdmF1A8F6blU8pjZPhgMqSVxsNzynNPhlHwJiLTYnDDuTMPdSiGmsLuRwVA::tgZb0HrzG04q9Z4sRJMFzt5QzOxRDAI7wqCrsYRY7lX80btg0v4YjfmSRZr3h00JRMrXZZawMO3hq2ZV7 call System.Object Stub.WK3x1KH1g8RVaXC51ui2SRdNkIVnBinwoeRoiigDg0sCCC2sWhuQMHH::xKRBkd3eqJATx1dbG5QKnjw42aUmo2irA9md2xW1waRKH3pY0h4Nz98(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String mQl5OfLhOHSG2ZOJrzcug3wdmF1A8F6blU8pjZPhgMqSVxsNzynNPhlHwJiLTYnDDuTMPdSiGmsLuRwVA::tgZb0HrzG04q9Z4sRJMFzt5QzOxRDAI7wqCrsYRY7lX80btg0v4YjfmSRZr3h00JRMrXZZawMO3hq2ZV7 ldsfld System.String mQl5OfLhOHSG2ZOJrzcug3wdmF1A8F6blU8pjZPhgMqSVxsNzynNPhlHwJiLTYnDDuTMPdSiGmsLuRwVA::8gKUdkhm52ypJhYoY1WTM8CGY8vfmsg9FJrWmeO7ZuwOqBHdyYbM21SEU9GUgW2d0nL8K2XMhYDmctH5s call System.Object Stub.WK3x1KH1g8RVaXC51ui2SRdNkIVnBinwoeRoiigDg0sCCC2sWhuQMHH::xKRBkd3eqJATx1dbG5QKnjw42aUmo2irA9md2xW1waRKH3pY0h4Nz98(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String mQl5OfLhOHSG2ZOJrzcug3wdmF1A8F6blU8pjZPhgMqSVxsNzynNPhlHwJiLTYnDDuTMPdSiGmsLuRwVA::8gKUdkhm52ypJhYoY1WTM8CGY8vfmsg9FJrWmeO7ZuwOqBHdyYbM21SEU9GUgW2d0nL8K2XMhYDmctH5s leave.s IL_009E: call System.Boolean Stub.72oFfN4REPMQsoqxQgRlNeEVQxNRPtZn5S8upUu1Vs97flX4a2bvWVf::8Pqvg4iUfoxGOm74a1dXh36T34OwOzf0bM68z5M6() dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.2 <null> ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_009E: call System.Boolean Stub.72oFfN4REPMQsoqxQgRlNeEVQxNRPtZn5S8upUu1Vs97flX4a2bvWVf::8Pqvg4iUfoxGOm74a1dXh36T34OwOzf0bM68z5M6() call System.Boolean Stub.72oFfN4REPMQsoqxQgRlNeEVQxNRPtZn5S8upUu1Vs97flX4a2bvWVf::8Pqvg4iUfoxGOm74a1dXh36T34OwOzf0bM68z5M6() brtrue.s IL_00AB: call System.Void Stub.72oFfN4REPMQsoqxQgRlNeEVQxNRPtZn5S8upUu1Vs97flX4a2bvWVf::BhfXMXBiEWIKv51pM1TPkI1WGQQd4zBBKeYXrUGwpGaJ04AO3UkVyx9() ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void Stub.72oFfN4REPMQsoqxQgRlNeEVQxNRPtZn5S8upUu1Vs97flX4a2bvWVf::BhfXMXBiEWIKv51pM1TPkI1WGQQd4zBBKeYXrUGwpGaJ04AO3UkVyx9() ldnull <null> ldftn System.Void Stub.VDsbPA0HXz5L7w1ut86Ho33UIMyzYVo2Pq17Rwgv7Z8HIhvgWy7Nai75MWfAQJ1TQ8PwIs5oZbuNQriMT::xiFlpuSkJSzy10ZpVcKyQ9nL4bEGgPpQLnAWcFrFC465xweN5EkHHIw94slS5XksZUV6ubJKuRjhUD61V() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) callvirt System.Void System.Threading.Thread::Start() ldnull <null> ldftn System.Void Stub.VDsbPA0HXz5L7w1ut86Ho33UIMyzYVo2Pq17Rwgv7Z8HIhvgWy7Nai75MWfAQJ1TQ8PwIs5oZbuNQriMT::N4uvDFIAd5Zrhi7NyNzDLAHRud9Ye4ZMJ4MNzSurr8bye4esc66f4bbsbxlHeFwrDvBDuvH71uPMhljRD() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.0 <null> ldnull <null> ldftn System.Void Stub.VDsbPA0HXz5L7w1ut86Ho33UIMyzYVo2Pq17Rwgv7Z8HIhvgWy7Nai75MWfAQJ1TQ8PwIs5oZbuNQriMT::835KTJAD3dJUxg99oAaYt2k7Vm9YGa4BJv84NTqonngFtOySmyc735ZAbso05UT4lHBBmJ2ytVmXqwVBG() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.1 <null> ldloc.0 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.1 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.1 <null> callvirt System.Void System.Threading.Thread::Join() ret <null>
Module Name

XClient.exe
Full Name

XClient.exe
EntryPoint

System.Void Stub.VDsbPA0HXz5L7w1ut86Ho33UIMyzYVo2Pq17Rwgv7Z8HIhvgWy7Nai75MWfAQJ1TQ8PwIs5oZbuNQriMT::MXDp7BtWWh3TjjCjxWKM0Fcj57GU1EtAGYE7eaF8wwjWpta8XEZlmFZCkOhu1HE15BqcRpGUXAA6xyFYt()
Scope Name

XClient.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

XClient
Assembly Version

1.0.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

<null>
Total Strings

291
Main Method

System.Void Stub.VDsbPA0HXz5L7w1ut86Ho33UIMyzYVo2Pq17Rwgv7Z8HIhvgWy7Nai75MWfAQJ1TQ8PwIs5oZbuNQriMT::MXDp7BtWWh3TjjCjxWKM0Fcj57GU1EtAGYE7eaF8wwjWpta8XEZlmFZCkOhu1HE15BqcRpGUXAA6xyFYt()
Main IL Instruction Count

63
Main IL

ldsfld System.Int32 mQl5OfLhOHSG2ZOJrzcug3wdmF1A8F6blU8pjZPhgMqSVxsNzynNPhlHwJiLTYnDDuTMPdSiGmsLuRwVA::7cKjP7tPnyh42H3KAHMV6hXTbcWwDWTx4p7yEdngIJekU60QvP77M07e0qAWO20TSqYcEEenrJPKoH9X2 ldc.i4 1000 mul.ovf <null> call System.Void System.Threading.Thread::Sleep(System.Int32) ldsfld System.String mQl5OfLhOHSG2ZOJrzcug3wdmF1A8F6blU8pjZPhgMqSVxsNzynNPhlHwJiLTYnDDuTMPdSiGmsLuRwVA::3ev8iWWXlnjJlvLvynVNpsl89Pwfv5CetkQEB00flx3ciKkrqRgMoaNby4jM1ZWyytzRfvzl5v0QpX2am call System.Object Stub.WK3x1KH1g8RVaXC51ui2SRdNkIVnBinwoeRoiigDg0sCCC2sWhuQMHH::xKRBkd3eqJATx1dbG5QKnjw42aUmo2irA9md2xW1waRKH3pY0h4Nz98(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String mQl5OfLhOHSG2ZOJrzcug3wdmF1A8F6blU8pjZPhgMqSVxsNzynNPhlHwJiLTYnDDuTMPdSiGmsLuRwVA::3ev8iWWXlnjJlvLvynVNpsl89Pwfv5CetkQEB00flx3ciKkrqRgMoaNby4jM1ZWyytzRfvzl5v0QpX2am ldsfld System.String mQl5OfLhOHSG2ZOJrzcug3wdmF1A8F6blU8pjZPhgMqSVxsNzynNPhlHwJiLTYnDDuTMPdSiGmsLuRwVA::D7Rr5KOsPNyg9tzjIVeDTdViCSEtri0hpdRpAFnvuicdmT3B7d83NLj63p1kPxLO1Pt8LkLmIUbW1ybL4 call System.Object Stub.WK3x1KH1g8RVaXC51ui2SRdNkIVnBinwoeRoiigDg0sCCC2sWhuQMHH::xKRBkd3eqJATx1dbG5QKnjw42aUmo2irA9md2xW1waRKH3pY0h4Nz98(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String mQl5OfLhOHSG2ZOJrzcug3wdmF1A8F6blU8pjZPhgMqSVxsNzynNPhlHwJiLTYnDDuTMPdSiGmsLuRwVA::D7Rr5KOsPNyg9tzjIVeDTdViCSEtri0hpdRpAFnvuicdmT3B7d83NLj63p1kPxLO1Pt8LkLmIUbW1ybL4 ldsfld System.String mQl5OfLhOHSG2ZOJrzcug3wdmF1A8F6blU8pjZPhgMqSVxsNzynNPhlHwJiLTYnDDuTMPdSiGmsLuRwVA::tm6YyfeY2mO55BGrYS1pFvN30B3N7f9HC7Vv0ixcZL1ugUrOGTUYJyu3zIk7opRdosRxQPTYd4nZKbz0e call System.Object Stub.WK3x1KH1g8RVaXC51ui2SRdNkIVnBinwoeRoiigDg0sCCC2sWhuQMHH::xKRBkd3eqJATx1dbG5QKnjw42aUmo2irA9md2xW1waRKH3pY0h4Nz98(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String mQl5OfLhOHSG2ZOJrzcug3wdmF1A8F6blU8pjZPhgMqSVxsNzynNPhlHwJiLTYnDDuTMPdSiGmsLuRwVA::tm6YyfeY2mO55BGrYS1pFvN30B3N7f9HC7Vv0ixcZL1ugUrOGTUYJyu3zIk7opRdosRxQPTYd4nZKbz0e ldsfld System.String mQl5OfLhOHSG2ZOJrzcug3wdmF1A8F6blU8pjZPhgMqSVxsNzynNPhlHwJiLTYnDDuTMPdSiGmsLuRwVA::rAVsSCCwaziRH9jk3vZl00SbZ8NWCLIWNQ39WIfJfOZ6aD2BoluZeF9qudNlK9SrURxK8mO9Jr3U9rhGm call System.Object Stub.WK3x1KH1g8RVaXC51ui2SRdNkIVnBinwoeRoiigDg0sCCC2sWhuQMHH::xKRBkd3eqJATx1dbG5QKnjw42aUmo2irA9md2xW1waRKH3pY0h4Nz98(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String mQl5OfLhOHSG2ZOJrzcug3wdmF1A8F6blU8pjZPhgMqSVxsNzynNPhlHwJiLTYnDDuTMPdSiGmsLuRwVA::rAVsSCCwaziRH9jk3vZl00SbZ8NWCLIWNQ39WIfJfOZ6aD2BoluZeF9qudNlK9SrURxK8mO9Jr3U9rhGm ldsfld System.String mQl5OfLhOHSG2ZOJrzcug3wdmF1A8F6blU8pjZPhgMqSVxsNzynNPhlHwJiLTYnDDuTMPdSiGmsLuRwVA::tgZb0HrzG04q9Z4sRJMFzt5QzOxRDAI7wqCrsYRY7lX80btg0v4YjfmSRZr3h00JRMrXZZawMO3hq2ZV7 call System.Object Stub.WK3x1KH1g8RVaXC51ui2SRdNkIVnBinwoeRoiigDg0sCCC2sWhuQMHH::xKRBkd3eqJATx1dbG5QKnjw42aUmo2irA9md2xW1waRKH3pY0h4Nz98(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String mQl5OfLhOHSG2ZOJrzcug3wdmF1A8F6blU8pjZPhgMqSVxsNzynNPhlHwJiLTYnDDuTMPdSiGmsLuRwVA::tgZb0HrzG04q9Z4sRJMFzt5QzOxRDAI7wqCrsYRY7lX80btg0v4YjfmSRZr3h00JRMrXZZawMO3hq2ZV7 ldsfld System.String mQl5OfLhOHSG2ZOJrzcug3wdmF1A8F6blU8pjZPhgMqSVxsNzynNPhlHwJiLTYnDDuTMPdSiGmsLuRwVA::8gKUdkhm52ypJhYoY1WTM8CGY8vfmsg9FJrWmeO7ZuwOqBHdyYbM21SEU9GUgW2d0nL8K2XMhYDmctH5s call System.Object Stub.WK3x1KH1g8RVaXC51ui2SRdNkIVnBinwoeRoiigDg0sCCC2sWhuQMHH::xKRBkd3eqJATx1dbG5QKnjw42aUmo2irA9md2xW1waRKH3pY0h4Nz98(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String mQl5OfLhOHSG2ZOJrzcug3wdmF1A8F6blU8pjZPhgMqSVxsNzynNPhlHwJiLTYnDDuTMPdSiGmsLuRwVA::8gKUdkhm52ypJhYoY1WTM8CGY8vfmsg9FJrWmeO7ZuwOqBHdyYbM21SEU9GUgW2d0nL8K2XMhYDmctH5s leave.s IL_009E: call System.Boolean Stub.72oFfN4REPMQsoqxQgRlNeEVQxNRPtZn5S8upUu1Vs97flX4a2bvWVf::8Pqvg4iUfoxGOm74a1dXh36T34OwOzf0bM68z5M6() dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.2 <null> ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_009E: call System.Boolean Stub.72oFfN4REPMQsoqxQgRlNeEVQxNRPtZn5S8upUu1Vs97flX4a2bvWVf::8Pqvg4iUfoxGOm74a1dXh36T34OwOzf0bM68z5M6() call System.Boolean Stub.72oFfN4REPMQsoqxQgRlNeEVQxNRPtZn5S8upUu1Vs97flX4a2bvWVf::8Pqvg4iUfoxGOm74a1dXh36T34OwOzf0bM68z5M6() brtrue.s IL_00AB: call System.Void Stub.72oFfN4REPMQsoqxQgRlNeEVQxNRPtZn5S8upUu1Vs97flX4a2bvWVf::BhfXMXBiEWIKv51pM1TPkI1WGQQd4zBBKeYXrUGwpGaJ04AO3UkVyx9() ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void Stub.72oFfN4REPMQsoqxQgRlNeEVQxNRPtZn5S8upUu1Vs97flX4a2bvWVf::BhfXMXBiEWIKv51pM1TPkI1WGQQd4zBBKeYXrUGwpGaJ04AO3UkVyx9() ldnull <null> ldftn System.Void Stub.VDsbPA0HXz5L7w1ut86Ho33UIMyzYVo2Pq17Rwgv7Z8HIhvgWy7Nai75MWfAQJ1TQ8PwIs5oZbuNQriMT::xiFlpuSkJSzy10ZpVcKyQ9nL4bEGgPpQLnAWcFrFC465xweN5EkHHIw94slS5XksZUV6ubJKuRjhUD61V() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) callvirt System.Void System.Threading.Thread::Start() ldnull <null> ldftn System.Void Stub.VDsbPA0HXz5L7w1ut86Ho33UIMyzYVo2Pq17Rwgv7Z8HIhvgWy7Nai75MWfAQJ1TQ8PwIs5oZbuNQriMT::N4uvDFIAd5Zrhi7NyNzDLAHRud9Ye4ZMJ4MNzSurr8bye4esc66f4bbsbxlHeFwrDvBDuvH71uPMhljRD() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.0 <null> ldnull <null> ldftn System.Void Stub.VDsbPA0HXz5L7w1ut86Ho33UIMyzYVo2Pq17Rwgv7Z8HIhvgWy7Nai75MWfAQJ1TQ8PwIs5oZbuNQriMT::835KTJAD3dJUxg99oAaYt2k7Vm9YGa4BJv84NTqonngFtOySmyc735ZAbso05UT4lHBBmJ2ytVmXqwVBG() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.1 <null> ldloc.0 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.1 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.1 <null> callvirt System.Void System.Threading.Thread::Join() ret <null>
Artefacts
Name
 Value
Mutex

eHBYD7Nk29PJOfsQ
CnC

kinglear11.duckdns.org
Port

45000
602243aada825c072763e9ac5465cc09 (67.58 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙