Suspicious
Suspect

802c0f764d989b793a8e90d90df65ec0

PE Executable
|
MD5: 802c0f764d989b793a8e90d90df65ec0
|
Size: 1.68 MB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Medium

Hash
 Hash Value
MD5
802c0f764d989b793a8e90d90df65ec0
Sha1
cefdb5dcf98ee43b51a7305b076d623d49a4d7a3
Sha256
6fa489597ac873e18887715a48134546cb7a316c0aac124700f905cd21c461bd
Sha384
25ac13554b29a104dae25da1ad9c89cec748f6e251178cebc6768ae42bbe635161a45d28918cf3f014d1e58225ee047a
Sha512
6be4bb2831ff21000a7b028ea7a0e8a86895fa2526e7ae708a56cf212d9d951bc5b6a5dc50feeddb5b7af398beb9e5aa33ace84432119dabda2b6a9a928d43f3
SSDeep
24576:hEWWM9Z6dUF77KPMsMbm3dkjezgC1Fk24dPfoB7a2zzjOeyFxylT921q:HZpmUbm30eUqydHmzzjOLy/z
TLSH
BE75F086E94545A0DD18AB31DA77CE344223BEEDA975D11D28CE3E2B3BBF3E64012057

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
802c0f764d989b793a8e90d90df65ec0
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0-preview.png
ID:0006
ID:0
ID:0007
ID:0
ID:0008
ID:0
ID:0009
ID:0
ID:000A
ID:0
ID:000B
ID:0
ID:000C
ID:0
ID:000D
ID:0
ID:000E
ID:0
ID:000F
ID:0
ID:0010
ID:0
ID:0011
ID:0
ID:0012
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Hblfljezsro.Properties.Resources.resources
Yneidkqx
ILRepack.List
          
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Module Name

Ijnozquyh
Full Name

Ijnozquyh
EntryPoint

System.Void Ijnozquyh.ErrorHandling.ReporterFactory::CatchStaticError()
Scope Name

Ijnozquyh
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Ijnozquyh
Assembly Version

1.0.5217.26164
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.6
Total Strings

0
Main Method

System.Void Ijnozquyh.ErrorHandling.ReporterFactory::CatchStaticError()
Main IL Instruction Count

95
Main IL

ldc.i4 4 stloc V_2 br IL_000E: ldloc V_2 ldloc V_2 switch dnlib.DotNet.Emit.Instruction[] br IL_0034: ret ret <null> newobj System.Void Ijnozquyh.ErrorHandling.ReporterFactory/ParameterThread::.ctor() stloc.s V_0 ldc.i4 0 ldsfld <Module>{b93d2eae-0353-45da-aa28-97537d4330ff} <Module>{b93d2eae-0353-45da-aa28-97537d4330ff}::m_5f00773f81f24693b8d0a7f36fd02db1 ldfld System.Int32 <Module>{b93d2eae-0353-45da-aa28-97537d4330ff}::m_3a2b214a176240529887163e714a20ea brfalse IL_0012: switch(IL_0034,IL_00B2,IL_0071,IL_009C,IL_0035,IL_005B) pop <null> ldc.i4 3 br IL_0012: switch(IL_0034,IL_00B2,IL_0071,IL_009C,IL_0035,IL_005B) ldc.i4 -1132236835 call System.String Ijnozquyh.Tagging.IdentifiableTag::LabelReadableTag(System.Int32) stloc.s V_3 ldc.i4 2 br IL_0012: switch(IL_0034,IL_00B2,IL_0071,IL_009C,IL_0035,IL_005B) ldsfld System.Func`1<System.Byte[]> Ijnozquyh.ErrorHandling.ReporterFactory/IdentifiableModel::_VisibleModel dup <null> brtrue IL_00C8: newobj System.Void Ijnozquyh.Messaging.ConcreteConsumer::.ctor(System.Func`1<System.Byte[]>) pop <null> ldc.i4 1 ldsfld <Module>{b93d2eae-0353-45da-aa28-97537d4330ff} <Module>{b93d2eae-0353-45da-aa28-97537d4330ff}::m_5f00773f81f24693b8d0a7f36fd02db1 ldfld System.Int32 <Module>{b93d2eae-0353-45da-aa28-97537d4330ff}::m_1b4c161289dc4b8c80ff4e937f9e62c5 brfalse IL_0012: switch(IL_0034,IL_00B2,IL_0071,IL_009C,IL_0035,IL_005B) pop <null> ldc.i4 1 br IL_0012: switch(IL_0034,IL_00B2,IL_0071,IL_009C,IL_0035,IL_005B) ldc.i4 -1132236814 call System.String Ijnozquyh.Tagging.IdentifiableTag::LabelReadableTag(System.Int32) stloc.s V_1 ldc.i4 5 br IL_0012: switch(IL_0034,IL_00B2,IL_0071,IL_009C,IL_0035,IL_005B) ldsfld System.Object Ijnozquyh.ErrorHandling.ReporterFactory/IdentifiableModel::statelessModel ldftn System.Byte[] Ijnozquyh.ErrorHandling.ReporterFactory/IdentifiableModel::ApplySortedModel() newobj System.Void System.Func`1<System.Byte[]>::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Func`1<System.Byte[]> Ijnozquyh.ErrorHandling.ReporterFactory/IdentifiableModel::_VisibleModel newobj System.Void Ijnozquyh.Messaging.ConcreteConsumer::.ctor(System.Func`1<System.Byte[]>) ldloc.s V_0 ldloc.s V_1 ldloc.s V_3 newobj System.Void Ijnozquyh.Parameters.ParameterTask::.ctor(System.String,System.String) stfld System.Object Ijnozquyh.ErrorHandling.ReporterFactory/ParameterThread::_ParameterTemplate ldloc.s V_0 newobj System.Void Ijnozquyh.ErrorHandling.ConverterBuilder::.ctor() stfld System.Object Ijnozquyh.ErrorHandling.ReporterFactory/ParameterThread::m_SelectorValidator ldloc.s V_0 ldc.i4 -1132236864 call System.String Ijnozquyh.Tagging.IdentifiableTag::LabelReadableTag(System.Int32) ldc.i4 -1132237284 call System.String Ijnozquyh.Tagging.IdentifiableTag::LabelReadableTag(System.Int32) newobj System.Void Ijnozquyh.Models.EfficientModel::.ctor(System.String,System.String) stfld System.Object Ijnozquyh.ErrorHandling.ReporterFactory/ParameterThread::m_StatelessWatcher dup <null> ldloc.s V_0 ldftn System.Void Ijnozquyh.ErrorHandling.ReporterFactory/ParameterThread::SetInterruptibleParameter(System.IO.MemoryStream) newobj System.Void System.Action`1<System.IO.MemoryStream>::.ctor(System.Object,System.IntPtr) callvirt System.Void Ijnozquyh.Messaging.ConcreteConsumer::ConsumeControllableConsumer(System.Action`1<System.IO.MemoryStream>) ldloc.s V_0 ldfld System.Object Ijnozquyh.ErrorHandling.ReporterFactory/ParameterThread::_ParameterTemplate ldloc.s V_0 ldftn System.Void Ijnozquyh.ErrorHandling.ReporterFactory/ParameterThread::SetAdjustableParameter(System.IO.MemoryStream) newobj System.Void System.Action`1<System.IO.MemoryStream>::.ctor(System.Object,System.IntPtr) callvirt System.Void Ijnozquyh.Parameters.ParameterTask::InterruptParameter(System.Action`1<System.IO.MemoryStream>) ldloc.s V_0 ldfld System.Object Ijnozquyh.ErrorHandling.ReporterFactory/ParameterThread::m_SelectorValidator ldloc.s V_0 ldftn System.Void Ijnozquyh.ErrorHandling.ReporterFactory/ParameterThread::SetAlphabeticParameter(System.Reflection.Assembly) newobj System.Void System.Action`1<System.Reflection.Assembly>::.ctor(System.Object,System.IntPtr) callvirt System.Void Ijnozquyh.ErrorHandling.ConverterBuilder::CatchLiteralError(System.Action`1<System.Reflection.Assembly>) ldloc.s V_0 ldfld System.Object Ijnozquyh.ErrorHandling.ReporterFactory/ParameterThread::m_StatelessWatcher ldsfld System.Object Ijnozquyh.ErrorHandling.ReporterFactory/IdentifiableModel::m_DynamicModel dup <null> brtrue IL_0177: callvirt System.Void Ijnozquyh.Models.EfficientModel::ViewModel(System.Action) pop <null> ldsfld System.Object Ijnozquyh.ErrorHandling.ReporterFactory/IdentifiableModel::statelessModel ldftn System.Void Ijnozquyh.ErrorHandling.ReporterFactory/IdentifiableModel::VerifyConnectedModel() newobj System.Void System.Action::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Object Ijnozquyh.ErrorHandling.ReporterFactory/IdentifiableModel::m_DynamicModel callvirt System.Void Ijnozquyh.Models.EfficientModel::ViewModel(System.Action) callvirt System.Void Ijnozquyh.Messaging.ConcreteConsumer::WatchConsumer() ldc.i4 0 ldsfld <Module>{b93d2eae-0353-45da-aa28-97537d4330ff} <Module>{b93d2eae-0353-45da-aa28-97537d4330ff}::m_5f00773f81f24693b8d0a7f36fd02db1 ldfld System.Int32 <Module>{b93d2eae-0353-45da-aa28-97537d4330ff}::m_00bfa48dafea4ca98c6417bee0494493 brtrue IL_0012: switch(IL_0034,IL_00B2,IL_0071,IL_009C,IL_0035,IL_005B) pop <null> ldc.i4 0 br IL_0012: switch(IL_0034,IL_00B2,IL_0071,IL_009C,IL_0035,IL_005B)
Module Name

Ijnozquyh
Full Name

Ijnozquyh
EntryPoint

System.Void Ijnozquyh.ErrorHandling.ReporterFactory::CatchStaticError()
Scope Name

Ijnozquyh
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Ijnozquyh
Assembly Version

1.0.5217.26164
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.6
Total Strings

0
Main Method

System.Void Ijnozquyh.ErrorHandling.ReporterFactory::CatchStaticError()
Main IL Instruction Count

95
Main IL

ldc.i4 4 stloc V_2 br IL_000E: ldloc V_2 ldloc V_2 switch dnlib.DotNet.Emit.Instruction[] br IL_0034: ret ret <null> newobj System.Void Ijnozquyh.ErrorHandling.ReporterFactory/ParameterThread::.ctor() stloc.s V_0 ldc.i4 0 ldsfld <Module>{b93d2eae-0353-45da-aa28-97537d4330ff} <Module>{b93d2eae-0353-45da-aa28-97537d4330ff}::m_5f00773f81f24693b8d0a7f36fd02db1 ldfld System.Int32 <Module>{b93d2eae-0353-45da-aa28-97537d4330ff}::m_3a2b214a176240529887163e714a20ea brfalse IL_0012: switch(IL_0034,IL_00B2,IL_0071,IL_009C,IL_0035,IL_005B) pop <null> ldc.i4 3 br IL_0012: switch(IL_0034,IL_00B2,IL_0071,IL_009C,IL_0035,IL_005B) ldc.i4 -1132236835 call System.String Ijnozquyh.Tagging.IdentifiableTag::LabelReadableTag(System.Int32) stloc.s V_3 ldc.i4 2 br IL_0012: switch(IL_0034,IL_00B2,IL_0071,IL_009C,IL_0035,IL_005B) ldsfld System.Func`1<System.Byte[]> Ijnozquyh.ErrorHandling.ReporterFactory/IdentifiableModel::_VisibleModel dup <null> brtrue IL_00C8: newobj System.Void Ijnozquyh.Messaging.ConcreteConsumer::.ctor(System.Func`1<System.Byte[]>) pop <null> ldc.i4 1 ldsfld <Module>{b93d2eae-0353-45da-aa28-97537d4330ff} <Module>{b93d2eae-0353-45da-aa28-97537d4330ff}::m_5f00773f81f24693b8d0a7f36fd02db1 ldfld System.Int32 <Module>{b93d2eae-0353-45da-aa28-97537d4330ff}::m_1b4c161289dc4b8c80ff4e937f9e62c5 brfalse IL_0012: switch(IL_0034,IL_00B2,IL_0071,IL_009C,IL_0035,IL_005B) pop <null> ldc.i4 1 br IL_0012: switch(IL_0034,IL_00B2,IL_0071,IL_009C,IL_0035,IL_005B) ldc.i4 -1132236814 call System.String Ijnozquyh.Tagging.IdentifiableTag::LabelReadableTag(System.Int32) stloc.s V_1 ldc.i4 5 br IL_0012: switch(IL_0034,IL_00B2,IL_0071,IL_009C,IL_0035,IL_005B) ldsfld System.Object Ijnozquyh.ErrorHandling.ReporterFactory/IdentifiableModel::statelessModel ldftn System.Byte[] Ijnozquyh.ErrorHandling.ReporterFactory/IdentifiableModel::ApplySortedModel() newobj System.Void System.Func`1<System.Byte[]>::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Func`1<System.Byte[]> Ijnozquyh.ErrorHandling.ReporterFactory/IdentifiableModel::_VisibleModel newobj System.Void Ijnozquyh.Messaging.ConcreteConsumer::.ctor(System.Func`1<System.Byte[]>) ldloc.s V_0 ldloc.s V_1 ldloc.s V_3 newobj System.Void Ijnozquyh.Parameters.ParameterTask::.ctor(System.String,System.String) stfld System.Object Ijnozquyh.ErrorHandling.ReporterFactory/ParameterThread::_ParameterTemplate ldloc.s V_0 newobj System.Void Ijnozquyh.ErrorHandling.ConverterBuilder::.ctor() stfld System.Object Ijnozquyh.ErrorHandling.ReporterFactory/ParameterThread::m_SelectorValidator ldloc.s V_0 ldc.i4 -1132236864 call System.String Ijnozquyh.Tagging.IdentifiableTag::LabelReadableTag(System.Int32) ldc.i4 -1132237284 call System.String Ijnozquyh.Tagging.IdentifiableTag::LabelReadableTag(System.Int32) newobj System.Void Ijnozquyh.Models.EfficientModel::.ctor(System.String,System.String) stfld System.Object Ijnozquyh.ErrorHandling.ReporterFactory/ParameterThread::m_StatelessWatcher dup <null> ldloc.s V_0 ldftn System.Void Ijnozquyh.ErrorHandling.ReporterFactory/ParameterThread::SetInterruptibleParameter(System.IO.MemoryStream) newobj System.Void System.Action`1<System.IO.MemoryStream>::.ctor(System.Object,System.IntPtr) callvirt System.Void Ijnozquyh.Messaging.ConcreteConsumer::ConsumeControllableConsumer(System.Action`1<System.IO.MemoryStream>) ldloc.s V_0 ldfld System.Object Ijnozquyh.ErrorHandling.ReporterFactory/ParameterThread::_ParameterTemplate ldloc.s V_0 ldftn System.Void Ijnozquyh.ErrorHandling.ReporterFactory/ParameterThread::SetAdjustableParameter(System.IO.MemoryStream) newobj System.Void System.Action`1<System.IO.MemoryStream>::.ctor(System.Object,System.IntPtr) callvirt System.Void Ijnozquyh.Parameters.ParameterTask::InterruptParameter(System.Action`1<System.IO.MemoryStream>) ldloc.s V_0 ldfld System.Object Ijnozquyh.ErrorHandling.ReporterFactory/ParameterThread::m_SelectorValidator ldloc.s V_0 ldftn System.Void Ijnozquyh.ErrorHandling.ReporterFactory/ParameterThread::SetAlphabeticParameter(System.Reflection.Assembly) newobj System.Void System.Action`1<System.Reflection.Assembly>::.ctor(System.Object,System.IntPtr) callvirt System.Void Ijnozquyh.ErrorHandling.ConverterBuilder::CatchLiteralError(System.Action`1<System.Reflection.Assembly>) ldloc.s V_0 ldfld System.Object Ijnozquyh.ErrorHandling.ReporterFactory/ParameterThread::m_StatelessWatcher ldsfld System.Object Ijnozquyh.ErrorHandling.ReporterFactory/IdentifiableModel::m_DynamicModel dup <null> brtrue IL_0177: callvirt System.Void Ijnozquyh.Models.EfficientModel::ViewModel(System.Action) pop <null> ldsfld System.Object Ijnozquyh.ErrorHandling.ReporterFactory/IdentifiableModel::statelessModel ldftn System.Void Ijnozquyh.ErrorHandling.ReporterFactory/IdentifiableModel::VerifyConnectedModel() newobj System.Void System.Action::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Object Ijnozquyh.ErrorHandling.ReporterFactory/IdentifiableModel::m_DynamicModel callvirt System.Void Ijnozquyh.Models.EfficientModel::ViewModel(System.Action) callvirt System.Void Ijnozquyh.Messaging.ConcreteConsumer::WatchConsumer() ldc.i4 0 ldsfld <Module>{b93d2eae-0353-45da-aa28-97537d4330ff} <Module>{b93d2eae-0353-45da-aa28-97537d4330ff}::m_5f00773f81f24693b8d0a7f36fd02db1 ldfld System.Int32 <Module>{b93d2eae-0353-45da-aa28-97537d4330ff}::m_00bfa48dafea4ca98c6417bee0494493 brtrue IL_0012: switch(IL_0034,IL_00B2,IL_0071,IL_009C,IL_0035,IL_005B) pop <null> ldc.i4 0 br IL_0012: switch(IL_0034,IL_00B2,IL_0071,IL_009C,IL_0035,IL_005B)
802c0f764d989b793a8e90d90df65ec0 (1.68 MB)
File Structure
802c0f764d989b793a8e90d90df65ec0
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0-preview.png
ID:0006
ID:0
ID:0007
ID:0
ID:0008
ID:0
ID:0009
ID:0
ID:000A
ID:0
ID:000B
ID:0
ID:000C
ID:0
ID:000D
ID:0
ID:000E
ID:0
ID:000F
ID:0
ID:0010
ID:0
ID:0011
ID:0
ID:0012
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Hblfljezsro.Properties.Resources.resources
Yneidkqx
ILRepack.List
          
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙