Suspicious
Suspect

7988f4c097d30581be2a5ed1e53bfc28

PE Executable
|
MD5: 7988f4c097d30581be2a5ed1e53bfc28
|
Size: 83.46 KB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Medium

Hash
 Hash Value
MD5
7988f4c097d30581be2a5ed1e53bfc28
Sha1
8f3123a8793276ec393fe2999c8815e3f25b3989
Sha256
74e51e9bfcda3d5f68dffd663270186d62e547c47624b4923dbd2819bff42c4b
Sha384
69143abc616dca4c2217d78b82824fef9d2db9231b4af422fd7aa8fc3267e2a66e56056582dda801a5fbfb717380342f
Sha512
c031fe5029850122c8f3589bbc79328d4ecb5c1746b86b83808b947405034758cb62508ec1ac79f41fe72a9fb763e960dbb5237a636a4617632626e5c7ab1f6f
SSDeep
1536:aiWXODkLiF5KG4t7qSig4NW0eWbO5OMlnNZtKY:aaDkqREazVIMY
TLSH
3F839307BA4A8DF2C6444736CDAF55CC0364D783B693C61A798AE35E5843FFA9840E4B

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
7988f4c097d30581be2a5ed1e53bfc28
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
ILRepack.List
         
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Module Name

Cyxxy
Full Name

Cyxxy
EntryPoint

System.Void Cyxxy.Handling.OrderedObserver::HandleGlobalObserver()
Scope Name

Cyxxy
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Cyxxy
Assembly Version

1.0.4376.13175
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.6
Total Strings

0
Main Method

System.Void Cyxxy.Handling.OrderedObserver::HandleGlobalObserver()
Main IL Instruction Count

95
Main IL

ldc.i4 1 stloc V_0 br IL_000E: ldloc V_0 ldloc V_0 switch dnlib.DotNet.Emit.Instruction[] br IL_009C: ldc.i4 974361570 ldc.i4 974361539 call System.String Cyxxy.Core.Engines.EngineValue::RunGenericEngine(System.Int32) stloc.s V_2 ldc.i4 5 br IL_0012: switch(IL_009C,IL_004A,IL_00B2,IL_009B,IL_0034,IL_0070) newobj System.Void Cyxxy.Handling.OrderedObserver/InterpreterReporter::.ctor() stloc.s V_3 ldc.i4 0 ldsfld <Module>{84b32f94-5a3d-434c-ae52-b112762d1971} <Module>{84b32f94-5a3d-434c-ae52-b112762d1971}::m_a56f5fabd2fc42d4974a628a4cbda762 ldfld System.Int32 <Module>{84b32f94-5a3d-434c-ae52-b112762d1971}::m_c0f3da76882d40d6b88a6cb2c066cf74 brtrue IL_0012: switch(IL_009C,IL_004A,IL_00B2,IL_009B,IL_0034,IL_0070) pop <null> ldc.i4 0 br IL_0012: switch(IL_009C,IL_004A,IL_00B2,IL_009B,IL_0034,IL_0070) ldsfld System.Func`1<System.Byte[]> Cyxxy.Handling.OrderedObserver/DecoratorRequest::_SetRequester dup <null> brtrue IL_00C8: newobj System.Void Cyxxy.Core.Engines.ConcreteEngine::.ctor(System.Func`1<System.Byte[]>) pop <null> ldc.i4 1 ldsfld <Module>{84b32f94-5a3d-434c-ae52-b112762d1971} <Module>{84b32f94-5a3d-434c-ae52-b112762d1971}::m_a56f5fabd2fc42d4974a628a4cbda762 ldfld System.Int32 <Module>{84b32f94-5a3d-434c-ae52-b112762d1971}::m_5327d390a8e84598abcabfa7d62ef515 brtrue IL_0012: switch(IL_009C,IL_004A,IL_00B2,IL_009B,IL_0034,IL_0070) pop <null> ldc.i4 2 br IL_0012: switch(IL_009C,IL_004A,IL_00B2,IL_009B,IL_0034,IL_0070) ret <null> ldc.i4 974361570 call System.String Cyxxy.Core.Engines.EngineValue::RunGenericEngine(System.Int32) stloc.s V_1 ldc.i4 4 br IL_0012: switch(IL_009C,IL_004A,IL_00B2,IL_009B,IL_0034,IL_0070) ldsfld System.Object Cyxxy.Handling.OrderedObserver/DecoratorRequest::handlerSolver ldftn System.Byte[] Cyxxy.Handling.OrderedObserver/DecoratorRequest::FetchVirtualRequester() newobj System.Void System.Func`1<System.Byte[]>::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Func`1<System.Byte[]> Cyxxy.Handling.OrderedObserver/DecoratorRequest::_SetRequester newobj System.Void Cyxxy.Core.Engines.ConcreteEngine::.ctor(System.Func`1<System.Byte[]>) ldloc.s V_3 ldloc.s V_1 ldloc.s V_2 newobj System.Void Cyxxy.Authorization.ResponsiveAuthorizer::.ctor(System.String,System.String) stfld System.Object Cyxxy.Handling.OrderedObserver/InterpreterReporter::m_ModularHandler ldloc.s V_3 newobj System.Void Cyxxy.Interpreters.SynchronizerCalculator::.ctor() stfld System.Object Cyxxy.Handling.OrderedObserver/InterpreterReporter::_InterpreterSpec ldloc.s V_3 ldc.i4 974361392 call System.String Cyxxy.Core.Engines.EngineValue::RunGenericEngine(System.Int32) ldc.i4 974361348 call System.String Cyxxy.Core.Engines.EngineValue::RunGenericEngine(System.Int32) newobj System.Void Cyxxy.ProjectManagement.ProjectExtractor::.ctor(System.String,System.String) stfld System.Object Cyxxy.Handling.OrderedObserver/InterpreterReporter::_DistributorTester dup <null> ldloc.s V_3 ldftn System.Void Cyxxy.Handling.OrderedObserver/InterpreterReporter::TranslateConvertibleInterpreter(System.IO.MemoryStream) newobj System.Void System.Action`1<System.IO.MemoryStream>::.ctor(System.Object,System.IntPtr) callvirt System.Void Cyxxy.Core.Engines.ConcreteEngine::RunSimpleEngine(System.Action`1<System.IO.MemoryStream>) ldloc.s V_3 ldfld System.Object Cyxxy.Handling.OrderedObserver/InterpreterReporter::m_ModularHandler ldloc.s V_3 ldftn System.Void Cyxxy.Handling.OrderedObserver/InterpreterReporter::DefineInterpreter(System.IO.MemoryStream) newobj System.Void System.Action`1<System.IO.MemoryStream>::.ctor(System.Object,System.IntPtr) callvirt System.Void Cyxxy.Authorization.ResponsiveAuthorizer::RateAuthorizer(System.Action`1<System.IO.MemoryStream>) ldloc.s V_3 ldfld System.Object Cyxxy.Handling.OrderedObserver/InterpreterReporter::_InterpreterSpec ldloc.s V_3 ldftn System.Void Cyxxy.Handling.OrderedObserver/InterpreterReporter::InterpretModularInterpreter(System.Reflection.Assembly) newobj System.Void System.Action`1<System.Reflection.Assembly>::.ctor(System.Object,System.IntPtr) callvirt System.Void Cyxxy.Interpreters.SynchronizerCalculator::TranslateEditableInterpreter(System.Action`1<System.Reflection.Assembly>) ldloc.s V_3 ldfld System.Object Cyxxy.Handling.OrderedObserver/InterpreterReporter::_DistributorTester ldsfld System.Object Cyxxy.Handling.OrderedObserver/DecoratorRequest::_RequesterNode dup <null> brtrue IL_0177: callvirt System.Void Cyxxy.ProjectManagement.ProjectExtractor::OpenCustomizableProject(System.Action) pop <null> ldsfld System.Object Cyxxy.Handling.OrderedObserver/DecoratorRequest::handlerSolver ldftn System.Void Cyxxy.Handling.OrderedObserver/DecoratorRequest::FetchScheduledRequester() newobj System.Void System.Action::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Object Cyxxy.Handling.OrderedObserver/DecoratorRequest::_RequesterNode callvirt System.Void Cyxxy.ProjectManagement.ProjectExtractor::OpenCustomizableProject(System.Action) callvirt System.Void Cyxxy.Core.Engines.ConcreteEngine::StopHiddenEngine() ldc.i4 3 ldsfld <Module>{84b32f94-5a3d-434c-ae52-b112762d1971} <Module>{84b32f94-5a3d-434c-ae52-b112762d1971}::m_a56f5fabd2fc42d4974a628a4cbda762 ldfld System.Int32 <Module>{84b32f94-5a3d-434c-ae52-b112762d1971}::m_c7c83b31a8ba431787ccd415e4fdd421 brtrue IL_0012: switch(IL_009C,IL_004A,IL_00B2,IL_009B,IL_0034,IL_0070) pop <null> ldc.i4 2 br IL_0012: switch(IL_009C,IL_004A,IL_00B2,IL_009B,IL_0034,IL_0070)
Module Name

Cyxxy
Full Name

Cyxxy
EntryPoint

System.Void Cyxxy.Handling.OrderedObserver::HandleGlobalObserver()
Scope Name

Cyxxy
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Cyxxy
Assembly Version

1.0.4376.13175
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.6
Total Strings

0
Main Method

System.Void Cyxxy.Handling.OrderedObserver::HandleGlobalObserver()
Main IL Instruction Count

95
Main IL

ldc.i4 1 stloc V_0 br IL_000E: ldloc V_0 ldloc V_0 switch dnlib.DotNet.Emit.Instruction[] br IL_009C: ldc.i4 974361570 ldc.i4 974361539 call System.String Cyxxy.Core.Engines.EngineValue::RunGenericEngine(System.Int32) stloc.s V_2 ldc.i4 5 br IL_0012: switch(IL_009C,IL_004A,IL_00B2,IL_009B,IL_0034,IL_0070) newobj System.Void Cyxxy.Handling.OrderedObserver/InterpreterReporter::.ctor() stloc.s V_3 ldc.i4 0 ldsfld <Module>{84b32f94-5a3d-434c-ae52-b112762d1971} <Module>{84b32f94-5a3d-434c-ae52-b112762d1971}::m_a56f5fabd2fc42d4974a628a4cbda762 ldfld System.Int32 <Module>{84b32f94-5a3d-434c-ae52-b112762d1971}::m_c0f3da76882d40d6b88a6cb2c066cf74 brtrue IL_0012: switch(IL_009C,IL_004A,IL_00B2,IL_009B,IL_0034,IL_0070) pop <null> ldc.i4 0 br IL_0012: switch(IL_009C,IL_004A,IL_00B2,IL_009B,IL_0034,IL_0070) ldsfld System.Func`1<System.Byte[]> Cyxxy.Handling.OrderedObserver/DecoratorRequest::_SetRequester dup <null> brtrue IL_00C8: newobj System.Void Cyxxy.Core.Engines.ConcreteEngine::.ctor(System.Func`1<System.Byte[]>) pop <null> ldc.i4 1 ldsfld <Module>{84b32f94-5a3d-434c-ae52-b112762d1971} <Module>{84b32f94-5a3d-434c-ae52-b112762d1971}::m_a56f5fabd2fc42d4974a628a4cbda762 ldfld System.Int32 <Module>{84b32f94-5a3d-434c-ae52-b112762d1971}::m_5327d390a8e84598abcabfa7d62ef515 brtrue IL_0012: switch(IL_009C,IL_004A,IL_00B2,IL_009B,IL_0034,IL_0070) pop <null> ldc.i4 2 br IL_0012: switch(IL_009C,IL_004A,IL_00B2,IL_009B,IL_0034,IL_0070) ret <null> ldc.i4 974361570 call System.String Cyxxy.Core.Engines.EngineValue::RunGenericEngine(System.Int32) stloc.s V_1 ldc.i4 4 br IL_0012: switch(IL_009C,IL_004A,IL_00B2,IL_009B,IL_0034,IL_0070) ldsfld System.Object Cyxxy.Handling.OrderedObserver/DecoratorRequest::handlerSolver ldftn System.Byte[] Cyxxy.Handling.OrderedObserver/DecoratorRequest::FetchVirtualRequester() newobj System.Void System.Func`1<System.Byte[]>::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Func`1<System.Byte[]> Cyxxy.Handling.OrderedObserver/DecoratorRequest::_SetRequester newobj System.Void Cyxxy.Core.Engines.ConcreteEngine::.ctor(System.Func`1<System.Byte[]>) ldloc.s V_3 ldloc.s V_1 ldloc.s V_2 newobj System.Void Cyxxy.Authorization.ResponsiveAuthorizer::.ctor(System.String,System.String) stfld System.Object Cyxxy.Handling.OrderedObserver/InterpreterReporter::m_ModularHandler ldloc.s V_3 newobj System.Void Cyxxy.Interpreters.SynchronizerCalculator::.ctor() stfld System.Object Cyxxy.Handling.OrderedObserver/InterpreterReporter::_InterpreterSpec ldloc.s V_3 ldc.i4 974361392 call System.String Cyxxy.Core.Engines.EngineValue::RunGenericEngine(System.Int32) ldc.i4 974361348 call System.String Cyxxy.Core.Engines.EngineValue::RunGenericEngine(System.Int32) newobj System.Void Cyxxy.ProjectManagement.ProjectExtractor::.ctor(System.String,System.String) stfld System.Object Cyxxy.Handling.OrderedObserver/InterpreterReporter::_DistributorTester dup <null> ldloc.s V_3 ldftn System.Void Cyxxy.Handling.OrderedObserver/InterpreterReporter::TranslateConvertibleInterpreter(System.IO.MemoryStream) newobj System.Void System.Action`1<System.IO.MemoryStream>::.ctor(System.Object,System.IntPtr) callvirt System.Void Cyxxy.Core.Engines.ConcreteEngine::RunSimpleEngine(System.Action`1<System.IO.MemoryStream>) ldloc.s V_3 ldfld System.Object Cyxxy.Handling.OrderedObserver/InterpreterReporter::m_ModularHandler ldloc.s V_3 ldftn System.Void Cyxxy.Handling.OrderedObserver/InterpreterReporter::DefineInterpreter(System.IO.MemoryStream) newobj System.Void System.Action`1<System.IO.MemoryStream>::.ctor(System.Object,System.IntPtr) callvirt System.Void Cyxxy.Authorization.ResponsiveAuthorizer::RateAuthorizer(System.Action`1<System.IO.MemoryStream>) ldloc.s V_3 ldfld System.Object Cyxxy.Handling.OrderedObserver/InterpreterReporter::_InterpreterSpec ldloc.s V_3 ldftn System.Void Cyxxy.Handling.OrderedObserver/InterpreterReporter::InterpretModularInterpreter(System.Reflection.Assembly) newobj System.Void System.Action`1<System.Reflection.Assembly>::.ctor(System.Object,System.IntPtr) callvirt System.Void Cyxxy.Interpreters.SynchronizerCalculator::TranslateEditableInterpreter(System.Action`1<System.Reflection.Assembly>) ldloc.s V_3 ldfld System.Object Cyxxy.Handling.OrderedObserver/InterpreterReporter::_DistributorTester ldsfld System.Object Cyxxy.Handling.OrderedObserver/DecoratorRequest::_RequesterNode dup <null> brtrue IL_0177: callvirt System.Void Cyxxy.ProjectManagement.ProjectExtractor::OpenCustomizableProject(System.Action) pop <null> ldsfld System.Object Cyxxy.Handling.OrderedObserver/DecoratorRequest::handlerSolver ldftn System.Void Cyxxy.Handling.OrderedObserver/DecoratorRequest::FetchScheduledRequester() newobj System.Void System.Action::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Object Cyxxy.Handling.OrderedObserver/DecoratorRequest::_RequesterNode callvirt System.Void Cyxxy.ProjectManagement.ProjectExtractor::OpenCustomizableProject(System.Action) callvirt System.Void Cyxxy.Core.Engines.ConcreteEngine::StopHiddenEngine() ldc.i4 3 ldsfld <Module>{84b32f94-5a3d-434c-ae52-b112762d1971} <Module>{84b32f94-5a3d-434c-ae52-b112762d1971}::m_a56f5fabd2fc42d4974a628a4cbda762 ldfld System.Int32 <Module>{84b32f94-5a3d-434c-ae52-b112762d1971}::m_c7c83b31a8ba431787ccd415e4fdd421 brtrue IL_0012: switch(IL_009C,IL_004A,IL_00B2,IL_009B,IL_0034,IL_0070) pop <null> ldc.i4 2 br IL_0012: switch(IL_009C,IL_004A,IL_00B2,IL_009B,IL_0034,IL_0070)
7988f4c097d30581be2a5ed1e53bfc28 (83.46 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙