Suspicious
Suspect

8e148d539111dc0ea2363adf6b74f47c

PE Executable
|
MD5: 8e148d539111dc0ea2363adf6b74f47c
|
Size: 82.94 KB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Medium

Hash
 Hash Value
MD5
8e148d539111dc0ea2363adf6b74f47c
Sha1
c83695bbc24b65dffea9de76d67e5bfd73237ad0
Sha256
95926de79055494e25750033367473688c20d71842433d41c48cd787b4639131
Sha384
84b3d1108d42b863c8b4aeb91c7715d3f8a3e7f95c75f31c9367a7231b088a88457f1b4b81dbe61912b59a308fd14dd4
Sha512
bbb0993b182c6da82a1a63d991ad9fe0302b28ea70868a96911e19d5b5105226326879f4afc41db472d20d07544959fe31f213d1d68b8b377edc07aafd6cc21e
SSDeep
1536:zN3sPXbg0iJMg4m83tVQIdIrb2Uy4oHDYHzdew3jr0JSKFRv/aDNA6vWKEjS+Z:6v53S2PEhe6r0xF/a26MZ
TLSH
4D83A307BA4B86F2C6C48B76C59B45000364E7C2FEA3D61E798F1F6A18577FA994034B

PeID

.NET executable
HQR data file
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
8e148d539111dc0ea2363adf6b74f47c
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
ILRepack.List
          
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Module Name

Mzqcq
Full Name

Mzqcq
EntryPoint

System.Void Mzqcq.Parsing.ParserWrapper::TraverseEditableParser()
Scope Name

Mzqcq
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Mzqcq
Assembly Version

1.0.3037.179
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.6
Total Strings

0
Main Method

System.Void Mzqcq.Parsing.ParserWrapper::TraverseEditableParser()
Main IL Instruction Count

92
Main IL

ldc.i4 1 stloc V_2 br IL_000E: ldloc V_2 ldloc V_2 switch dnlib.DotNet.Emit.Instruction[] br IL_0070: ldc.i4 -51103135 ldc.i4 -51103166 call System.String Mzqcq.Management.AutomatedPool::AddIntegratedPool(System.Int32) stloc.s V_3 ldc.i4 5 br IL_0012: switch(IL_0070,IL_004A,IL_00B7,IL_0086,IL_0034,IL_0087) newobj System.Void Mzqcq.Parsing.ParserWrapper/TransferableSynchronizer::.ctor() stloc.s V_0 ldc.i4 0 ldsfld <Module>{5ced19fa-da07-440f-8a77-b8f8bf5b2fcb} <Module>{5ced19fa-da07-440f-8a77-b8f8bf5b2fcb}::m_dd392898d3df46dfa3889c9e3c0b61ff ldfld System.Int32 <Module>{5ced19fa-da07-440f-8a77-b8f8bf5b2fcb}::m_e96f2d5efd06414d95562dc4a1d40bcd brtrue IL_0012: switch(IL_0070,IL_004A,IL_00B7,IL_0086,IL_0034,IL_0087) pop <null> ldc.i4 0 br IL_0012: switch(IL_0070,IL_004A,IL_00B7,IL_0086,IL_0034,IL_0087) ldc.i4 -51103135 call System.String Mzqcq.Management.AutomatedPool::AddIntegratedPool(System.Int32) stloc.s V_1 ldc.i4 4 br IL_0012: switch(IL_0070,IL_004A,IL_00B7,IL_0086,IL_0034,IL_0087) ret <null> ldsfld System.Func`1<System.Byte[]> Mzqcq.Parsing.ParserWrapper/TagIterator::logicalSingleton dup <null> brfalse IL_0097: pop br IL_00CD: newobj System.Void Mzqcq.Policies.PolicyCompiler::.ctor(System.Func`1<System.Byte[]>) pop <null> ldc.i4 2 ldsfld <Module>{5ced19fa-da07-440f-8a77-b8f8bf5b2fcb} <Module>{5ced19fa-da07-440f-8a77-b8f8bf5b2fcb}::m_dd392898d3df46dfa3889c9e3c0b61ff ldfld System.Int32 <Module>{5ced19fa-da07-440f-8a77-b8f8bf5b2fcb}::m_72750351b2d543c9ba26b03408fbfe7a brfalse IL_0012: switch(IL_0070,IL_004A,IL_00B7,IL_0086,IL_0034,IL_0087) pop <null> ldc.i4 1 br IL_0012: switch(IL_0070,IL_004A,IL_00B7,IL_0086,IL_0034,IL_0087) ldsfld System.Object Mzqcq.Parsing.ParserWrapper/TagIterator::_SegmentedMatcher ldftn System.Byte[] Mzqcq.Parsing.ParserWrapper/TagIterator::IdentifyIsolatedTag() newobj System.Void System.Func`1<System.Byte[]>::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Func`1<System.Byte[]> Mzqcq.Parsing.ParserWrapper/TagIterator::logicalSingleton newobj System.Void Mzqcq.Policies.PolicyCompiler::.ctor(System.Func`1<System.Byte[]>) ldloc.s V_0 ldloc.s V_1 ldloc.s V_3 newobj System.Void Mzqcq.Threading.SynchronizerService::.ctor(System.String,System.String) stfld System.Object Mzqcq.Parsing.ParserWrapper/TransferableSynchronizer::scopeManager ldloc.s V_0 newobj System.Void Mzqcq.Parsing.ParserModel::.ctor() stfld System.Object Mzqcq.Parsing.ParserWrapper/TransferableSynchronizer::m_ProviderResolver ldloc.s V_0 ldc.i4 -51103185 call System.String Mzqcq.Management.AutomatedPool::AddIntegratedPool(System.Int32) ldc.i4 -51103229 call System.String Mzqcq.Management.AutomatedPool::AddIntegratedPool(System.Int32) newobj System.Void Mzqcq.Policies.SymbolicPolicy::.ctor(System.String,System.String) stfld System.Object Mzqcq.Parsing.ParserWrapper/TransferableSynchronizer::expandableSynchronizer dup <null> ldloc.s V_0 ldftn System.Void Mzqcq.Parsing.ParserWrapper/TransferableSynchronizer::CoordinateIterableSynchronizer(System.IO.MemoryStream) newobj System.Void System.Action`1<System.IO.MemoryStream>::.ctor(System.Object,System.IntPtr) callvirt System.Void Mzqcq.Policies.PolicyCompiler::ImplementMixedPolicy(System.Action`1<System.IO.MemoryStream>) ldloc.s V_0 ldfld System.Object Mzqcq.Parsing.ParserWrapper/TransferableSynchronizer::scopeManager ldloc.s V_0 ldftn System.Void Mzqcq.Parsing.ParserWrapper/TransferableSynchronizer::CoordinateLiteralSynchronizer(System.IO.MemoryStream) newobj System.Void System.Action`1<System.IO.MemoryStream>::.ctor(System.Object,System.IntPtr) callvirt System.Void Mzqcq.Threading.SynchronizerService::MergeSynchronizer(System.Action`1<System.IO.MemoryStream>) ldloc.s V_0 ldfld System.Object Mzqcq.Parsing.ParserWrapper/TransferableSynchronizer::m_ProviderResolver ldloc.s V_0 ldftn System.Void Mzqcq.Parsing.ParserWrapper/TransferableSynchronizer::SynchronizeReadableSynchronizer(System.Reflection.Assembly) newobj System.Void System.Action`1<System.Reflection.Assembly>::.ctor(System.Object,System.IntPtr) callvirt System.Void Mzqcq.Parsing.ParserModel::ParseFilteredParser(System.Action`1<System.Reflection.Assembly>) ldloc.s V_0 ldfld System.Object Mzqcq.Parsing.ParserWrapper/TransferableSynchronizer::expandableSynchronizer ldsfld System.Object Mzqcq.Parsing.ParserWrapper/TagIterator::dividedTag dup <null> brfalse IL_016A: pop br IL_0181: callvirt System.Void Mzqcq.Policies.SymbolicPolicy::ReplacePolicy(System.Action) pop <null> ldsfld System.Object Mzqcq.Parsing.ParserWrapper/TagIterator::_SegmentedMatcher ldftn System.Void Mzqcq.Parsing.ParserWrapper/TagIterator::LoadTag() newobj System.Void System.Action::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Object Mzqcq.Parsing.ParserWrapper/TagIterator::dividedTag callvirt System.Void Mzqcq.Policies.SymbolicPolicy::ReplacePolicy(System.Action) callvirt System.Void Mzqcq.Policies.PolicyCompiler::DeletePolicy() ldc.i4 3 br IL_0012: switch(IL_0070,IL_004A,IL_00B7,IL_0086,IL_0034,IL_0087)
Module Name

Mzqcq
Full Name

Mzqcq
EntryPoint

System.Void Mzqcq.Parsing.ParserWrapper::TraverseEditableParser()
Scope Name

Mzqcq
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Mzqcq
Assembly Version

1.0.3037.179
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.6
Total Strings

0
Main Method

System.Void Mzqcq.Parsing.ParserWrapper::TraverseEditableParser()
Main IL Instruction Count

92
Main IL

ldc.i4 1 stloc V_2 br IL_000E: ldloc V_2 ldloc V_2 switch dnlib.DotNet.Emit.Instruction[] br IL_0070: ldc.i4 -51103135 ldc.i4 -51103166 call System.String Mzqcq.Management.AutomatedPool::AddIntegratedPool(System.Int32) stloc.s V_3 ldc.i4 5 br IL_0012: switch(IL_0070,IL_004A,IL_00B7,IL_0086,IL_0034,IL_0087) newobj System.Void Mzqcq.Parsing.ParserWrapper/TransferableSynchronizer::.ctor() stloc.s V_0 ldc.i4 0 ldsfld <Module>{5ced19fa-da07-440f-8a77-b8f8bf5b2fcb} <Module>{5ced19fa-da07-440f-8a77-b8f8bf5b2fcb}::m_dd392898d3df46dfa3889c9e3c0b61ff ldfld System.Int32 <Module>{5ced19fa-da07-440f-8a77-b8f8bf5b2fcb}::m_e96f2d5efd06414d95562dc4a1d40bcd brtrue IL_0012: switch(IL_0070,IL_004A,IL_00B7,IL_0086,IL_0034,IL_0087) pop <null> ldc.i4 0 br IL_0012: switch(IL_0070,IL_004A,IL_00B7,IL_0086,IL_0034,IL_0087) ldc.i4 -51103135 call System.String Mzqcq.Management.AutomatedPool::AddIntegratedPool(System.Int32) stloc.s V_1 ldc.i4 4 br IL_0012: switch(IL_0070,IL_004A,IL_00B7,IL_0086,IL_0034,IL_0087) ret <null> ldsfld System.Func`1<System.Byte[]> Mzqcq.Parsing.ParserWrapper/TagIterator::logicalSingleton dup <null> brfalse IL_0097: pop br IL_00CD: newobj System.Void Mzqcq.Policies.PolicyCompiler::.ctor(System.Func`1<System.Byte[]>) pop <null> ldc.i4 2 ldsfld <Module>{5ced19fa-da07-440f-8a77-b8f8bf5b2fcb} <Module>{5ced19fa-da07-440f-8a77-b8f8bf5b2fcb}::m_dd392898d3df46dfa3889c9e3c0b61ff ldfld System.Int32 <Module>{5ced19fa-da07-440f-8a77-b8f8bf5b2fcb}::m_72750351b2d543c9ba26b03408fbfe7a brfalse IL_0012: switch(IL_0070,IL_004A,IL_00B7,IL_0086,IL_0034,IL_0087) pop <null> ldc.i4 1 br IL_0012: switch(IL_0070,IL_004A,IL_00B7,IL_0086,IL_0034,IL_0087) ldsfld System.Object Mzqcq.Parsing.ParserWrapper/TagIterator::_SegmentedMatcher ldftn System.Byte[] Mzqcq.Parsing.ParserWrapper/TagIterator::IdentifyIsolatedTag() newobj System.Void System.Func`1<System.Byte[]>::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Func`1<System.Byte[]> Mzqcq.Parsing.ParserWrapper/TagIterator::logicalSingleton newobj System.Void Mzqcq.Policies.PolicyCompiler::.ctor(System.Func`1<System.Byte[]>) ldloc.s V_0 ldloc.s V_1 ldloc.s V_3 newobj System.Void Mzqcq.Threading.SynchronizerService::.ctor(System.String,System.String) stfld System.Object Mzqcq.Parsing.ParserWrapper/TransferableSynchronizer::scopeManager ldloc.s V_0 newobj System.Void Mzqcq.Parsing.ParserModel::.ctor() stfld System.Object Mzqcq.Parsing.ParserWrapper/TransferableSynchronizer::m_ProviderResolver ldloc.s V_0 ldc.i4 -51103185 call System.String Mzqcq.Management.AutomatedPool::AddIntegratedPool(System.Int32) ldc.i4 -51103229 call System.String Mzqcq.Management.AutomatedPool::AddIntegratedPool(System.Int32) newobj System.Void Mzqcq.Policies.SymbolicPolicy::.ctor(System.String,System.String) stfld System.Object Mzqcq.Parsing.ParserWrapper/TransferableSynchronizer::expandableSynchronizer dup <null> ldloc.s V_0 ldftn System.Void Mzqcq.Parsing.ParserWrapper/TransferableSynchronizer::CoordinateIterableSynchronizer(System.IO.MemoryStream) newobj System.Void System.Action`1<System.IO.MemoryStream>::.ctor(System.Object,System.IntPtr) callvirt System.Void Mzqcq.Policies.PolicyCompiler::ImplementMixedPolicy(System.Action`1<System.IO.MemoryStream>) ldloc.s V_0 ldfld System.Object Mzqcq.Parsing.ParserWrapper/TransferableSynchronizer::scopeManager ldloc.s V_0 ldftn System.Void Mzqcq.Parsing.ParserWrapper/TransferableSynchronizer::CoordinateLiteralSynchronizer(System.IO.MemoryStream) newobj System.Void System.Action`1<System.IO.MemoryStream>::.ctor(System.Object,System.IntPtr) callvirt System.Void Mzqcq.Threading.SynchronizerService::MergeSynchronizer(System.Action`1<System.IO.MemoryStream>) ldloc.s V_0 ldfld System.Object Mzqcq.Parsing.ParserWrapper/TransferableSynchronizer::m_ProviderResolver ldloc.s V_0 ldftn System.Void Mzqcq.Parsing.ParserWrapper/TransferableSynchronizer::SynchronizeReadableSynchronizer(System.Reflection.Assembly) newobj System.Void System.Action`1<System.Reflection.Assembly>::.ctor(System.Object,System.IntPtr) callvirt System.Void Mzqcq.Parsing.ParserModel::ParseFilteredParser(System.Action`1<System.Reflection.Assembly>) ldloc.s V_0 ldfld System.Object Mzqcq.Parsing.ParserWrapper/TransferableSynchronizer::expandableSynchronizer ldsfld System.Object Mzqcq.Parsing.ParserWrapper/TagIterator::dividedTag dup <null> brfalse IL_016A: pop br IL_0181: callvirt System.Void Mzqcq.Policies.SymbolicPolicy::ReplacePolicy(System.Action) pop <null> ldsfld System.Object Mzqcq.Parsing.ParserWrapper/TagIterator::_SegmentedMatcher ldftn System.Void Mzqcq.Parsing.ParserWrapper/TagIterator::LoadTag() newobj System.Void System.Action::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Object Mzqcq.Parsing.ParserWrapper/TagIterator::dividedTag callvirt System.Void Mzqcq.Policies.SymbolicPolicy::ReplacePolicy(System.Action) callvirt System.Void Mzqcq.Policies.PolicyCompiler::DeletePolicy() ldc.i4 3 br IL_0012: switch(IL_0070,IL_004A,IL_00B7,IL_0086,IL_0034,IL_0087)
8e148d539111dc0ea2363adf6b74f47c (82.94 KB)
File Structure
8e148d539111dc0ea2363adf6b74f47c
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
ILRepack.List
          
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙