Suspicious
Suspect

a3812ff62d398091e764bcaf6db6c235

PE Executable
|
MD5: a3812ff62d398091e764bcaf6db6c235
|
Size: 32.26 KB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

High

Hash
 Hash Value
MD5
a3812ff62d398091e764bcaf6db6c235
Sha1
a0da7aa7d75793d960fb688975fc1b635aef2559
Sha256
091e27447a439cf6edb67f7d30b25531563d6dcc43348502de7e4a0925a52fdc
Sha384
9850bbc7f3a5b6c3dacc4bbf71a5c1101b216e6769ec206282f89155bfff80f43d1a1ea728eea1dd4589566c1d104f5a
Sha512
8aed4b18ab1a745aa246ae95359dff0a82fd3536202cd7757199d6502f755052bc68fe5dcc5a08d17ca15b580ebc64dc508a318f99e1b39b8d85a7e183d41a22
SSDeep
768:Ay2jOFxycfBlMd336362l5kysNh2dNAj/x:5qazTM2do
TLSH
F3E2D707BB9952B1C6505B3EC4A7A8000334D992A753FFCF3B4B636A9803F7AE54164B

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
a3812ff62d398091e764bcaf6db6c235
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
ILRepack.List
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Module Name

Welusenloj
Full Name

Welusenloj
EntryPoint

System.Void Cyiuxpd.Processing.FlexibleAggregator::CollectOperationalAggregator()
Scope Name

Welusenloj
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Welusenloj
Assembly Version

1.0.8307.17530
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.6
Total Strings

15
Main Method

System.Void Cyiuxpd.Processing.FlexibleAggregator::CollectOperationalAggregator()
Main IL Instruction Count

144
Main IL

ldc.i4 6 stloc V_7 br IL_000E: ldloc V_7 ldloc V_7 switch dnlib.DotNet.Emit.Instruction[] br IL_0038: nop nop <null> ldloc.s V_0 ldloc.s V_6 ldftn System.Void Welusenloj.Core.ConfigurableObject::DefineObject(System.Object,Cyiuxpd.Collections.DetachedQueue) newobj System.Void System.EventHandler`1<Cyiuxpd.Collections.DetachedQueue>::.ctor(System.Object,System.IntPtr) callvirt System.Void Welusenloj.Publishing.ManagerPublisher::PublishBasicPublisher(System.EventHandler`1<Cyiuxpd.Collections.DetachedQueue>) ldc.i4 2 ldsfld <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461} <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_5340578000e94163b08b133fdf7dc690 ldfld System.Int32 <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_4f698d23e5e24dcc8f597be742345a67 brtrue IL_0070: switch(IL_0105,IL_0138,IL_00E7,IL_008E,IL_00C1) pop <null> ldc.i4 1 br IL_0070: switch(IL_0105,IL_0138,IL_00E7,IL_008E,IL_00C1) ldloc V_5 switch dnlib.DotNet.Emit.Instruction[] br IL_0105: ldloc.s V_3 ldloc.s V_2 ldloc.s V_6 ldftn System.Void Welusenloj.Core.ConfigurableObject::RateObject(System.Object,Cyiuxpd.Threading.TaskCompiler) newobj System.Void System.EventHandler`1<Cyiuxpd.Threading.TaskCompiler>::.ctor(System.Object,System.IntPtr) callvirt System.Void Welusenloj.Tracking.TrackerWorker::RecordLiteralTracker(System.EventHandler`1<Cyiuxpd.Threading.TaskCompiler>) ldc.i4 0 ldsfld <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461} <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_5340578000e94163b08b133fdf7dc690 ldfld System.Int32 <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_27a41a1a90b0402ba9c97dd0ac2e3878 brtrue IL_0070: switch(IL_0105,IL_0138,IL_00E7,IL_008E,IL_00C1) pop <null> ldc.i4 0 br IL_0070: switch(IL_0105,IL_0138,IL_00E7,IL_008E,IL_00C1) ldloc.s V_0 callvirt System.Void Welusenloj.Publishing.ManagerPublisher::ReplacePublisher() ldc.i4 1 ldsfld <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461} <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_5340578000e94163b08b133fdf7dc690 ldfld System.Int32 <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_bf69c75766e7454d81eb4af618914791 brtrue IL_0070: switch(IL_0105,IL_0138,IL_00E7,IL_008E,IL_00C1) pop <null> ldc.i4 1 br IL_0070: switch(IL_0105,IL_0138,IL_00E7,IL_008E,IL_00C1) ldloc.s V_1 ldloc.s V_6 ldftn System.Void Welusenloj.Core.ConfigurableObject::InstantiateSetObject(System.Object,Cyiuxpd.Visitors.OrderedVisitor) newobj System.Void System.EventHandler`1<Cyiuxpd.Visitors.OrderedVisitor>::.ctor(System.Object,System.IntPtr) callvirt System.Void Welusenloj.Tracking.TrackerPublisher::TrackStaticTracker(System.EventHandler`1<Cyiuxpd.Visitors.OrderedVisitor>) ldc.i4 3 br IL_0070: switch(IL_0105,IL_0138,IL_00E7,IL_008E,IL_00C1) ldloc.s V_3 ldloc.s V_6 ldftn System.Void Welusenloj.Core.ConfigurableObject::ResetObject(System.Object,Welusenloj.Initialization.RequestFinalizer) newobj System.Void System.EventHandler`1<Welusenloj.Initialization.RequestFinalizer>::.ctor(System.Object,System.IntPtr) callvirt System.Void Cyiuxpd.Threading.ParserTask::ExecuteTransferableTask(System.EventHandler`1<Welusenloj.Initialization.RequestFinalizer>) ldc.i4 0 ldsfld <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461} <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_5340578000e94163b08b133fdf7dc690 ldfld System.Int32 <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_3c5950767d744b06b6f59ab3363b8445 brfalse IL_0070: switch(IL_0105,IL_0138,IL_00E7,IL_008E,IL_00C1) pop <null> ldc.i4 4 br IL_0070: switch(IL_0105,IL_0138,IL_00E7,IL_008E,IL_00C1) leave IL_01F8: ret ldloc.s V_6 brtrue IL_017D: ldloc.s V_6 ldc.i4 0 ldsfld <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461} <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_5340578000e94163b08b133fdf7dc690 ldfld System.Int32 <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_77d704a4630840ec84b31447bc915806 brtrue IL_0167: switch(IL_01A3,IL_01B2,IL_017D) pop <null> ldc.i4 0 br IL_0167: switch(IL_01A3,IL_01B2,IL_017D) ldloc V_4 switch dnlib.DotNet.Emit.Instruction[] br IL_01A3: br IL_01B2 ldloc.s V_6 callvirt System.Void System.IDisposable::Dispose() ldc.i4 0 ldsfld <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461} <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_5340578000e94163b08b133fdf7dc690 ldfld System.Int32 <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_461f286bf32c4f1887aada6682f9372a brtrue IL_0167: switch(IL_01A3,IL_01B2,IL_017D) pop <null> ldc.i4 1 br IL_0167: switch(IL_01A3,IL_01B2,IL_017D) br IL_01B2: endfinally ldc.i4 2 br IL_0167: switch(IL_01A3,IL_01B2,IL_017D) endfinally <null> ldc.i4 3 ldsfld <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461} <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_5340578000e94163b08b133fdf7dc690 ldfld System.Int32 <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_e8644de6c14445fda0f44a871af41bb0 brfalse IL_0012: switch(IL_0038,IL_021F,IL_01F9,IL_01F8,IL_0271,IL_01D2,IL_024B) pop <null> ldc.i4 1 br IL_0012: switch(IL_0038,IL_021F,IL_01F9,IL_01F8,IL_0271,IL_01D2,IL_024B) newobj System.Void Welusenloj.Tracking.TrackerPublisher::.ctor() stloc.s V_1 ldc.i4 2 ldsfld <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461} <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_5340578000e94163b08b133fdf7dc690 ldfld System.Int32 <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_4194125f096d44cc861df7d8ca4e864b brtrue IL_0012: switch(IL_0038,IL_021F,IL_01F9,IL_01F8,IL_0271,IL_01D2,IL_024B) pop <null> ldc.i4 2 br IL_0012: switch(IL_0038,IL_021F,IL_01F9,IL_01F8,IL_0271,IL_01D2,IL_024B) ret <null> newobj System.Void Welusenloj.Tracking.TrackerWorker::.ctor() stloc.s V_2 ldc.i4 3 ldsfld <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461} <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_5340578000e94163b08b133fdf7dc690 ldfld System.Int32 <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_26a7edb054d94a79b581b197a37dac58 brtrue IL_0012: switch(IL_0038,IL_021F,IL_01F9,IL_01F8,IL_0271,IL_01D2,IL_024B) pop <null> ldc.i4 4 br IL_0012: switch(IL_0038,IL_021F,IL_01F9,IL_01F8,IL_0271,IL_01D2,IL_024B) ldloc.s V_1 ldloc.s V_2 ldloc.s V_3 newobj System.Void Welusenloj.Core.ConfigurableObject::.ctor(Welusenloj.Tracking.TrackerPublisher,Welusenloj.Tracking.TrackerWorker,Cyiuxpd.Threading.ParserTask) stloc.s V_6 ldc.i4 0 ldsfld <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461} <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_5340578000e94163b08b133fdf7dc690 ldfld System.Int32 <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_f0411eb5b0034b93a538b4b4fdaf0bd4 brfalse IL_0012: switch(IL_0038,IL_021F,IL_01F9,IL_01F8,IL_0271,IL_01D2,IL_024B) pop <null> ldc.i4 0 br IL_0012: switch(IL_0038,IL_021F,IL_01F9,IL_01F8,IL_0271,IL_01D2,IL_024B) newobj System.Void Welusenloj.Publishing.ManagerPublisher::.ctor() stloc.s V_0 ldc.i4 4 ldsfld <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461} <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_5340578000e94163b08b133fdf7dc690 ldfld System.Int32 <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_0128ab405110471a97ea6d7d75e570dc brtrue IL_0012: switch(IL_0038,IL_021F,IL_01F9,IL_01F8,IL_0271,IL_01D2,IL_024B) pop <null> ldc.i4 5 br IL_0012: switch(IL_0038,IL_021F,IL_01F9,IL_01F8,IL_0271,IL_01D2,IL_024B) newobj System.Void Cyiuxpd.Threading.ParserTask::.ctor() stloc.s V_3 ldc.i4 0 ldsfld <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461} <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_5340578000e94163b08b133fdf7dc690 ldfld System.Int32 <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_e6ba9a5b0ba4488a811d0e01a5dbf808 brtrue IL_0012: switch(IL_0038,IL_021F,IL_01F9,IL_01F8,IL_0271,IL_01D2,IL_024B) pop <null> ldc.i4 1 br IL_0012: switch(IL_0038,IL_021F,IL_01F9,IL_01F8,IL_0271,IL_01D2,IL_024B)
Module Name

Welusenloj
Full Name

Welusenloj
EntryPoint

System.Void Cyiuxpd.Processing.FlexibleAggregator::CollectOperationalAggregator()
Scope Name

Welusenloj
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Welusenloj
Assembly Version

1.0.8307.17530
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.6
Total Strings

15
Main Method

System.Void Cyiuxpd.Processing.FlexibleAggregator::CollectOperationalAggregator()
Main IL Instruction Count

144
Main IL

ldc.i4 6 stloc V_7 br IL_000E: ldloc V_7 ldloc V_7 switch dnlib.DotNet.Emit.Instruction[] br IL_0038: nop nop <null> ldloc.s V_0 ldloc.s V_6 ldftn System.Void Welusenloj.Core.ConfigurableObject::DefineObject(System.Object,Cyiuxpd.Collections.DetachedQueue) newobj System.Void System.EventHandler`1<Cyiuxpd.Collections.DetachedQueue>::.ctor(System.Object,System.IntPtr) callvirt System.Void Welusenloj.Publishing.ManagerPublisher::PublishBasicPublisher(System.EventHandler`1<Cyiuxpd.Collections.DetachedQueue>) ldc.i4 2 ldsfld <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461} <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_5340578000e94163b08b133fdf7dc690 ldfld System.Int32 <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_4f698d23e5e24dcc8f597be742345a67 brtrue IL_0070: switch(IL_0105,IL_0138,IL_00E7,IL_008E,IL_00C1) pop <null> ldc.i4 1 br IL_0070: switch(IL_0105,IL_0138,IL_00E7,IL_008E,IL_00C1) ldloc V_5 switch dnlib.DotNet.Emit.Instruction[] br IL_0105: ldloc.s V_3 ldloc.s V_2 ldloc.s V_6 ldftn System.Void Welusenloj.Core.ConfigurableObject::RateObject(System.Object,Cyiuxpd.Threading.TaskCompiler) newobj System.Void System.EventHandler`1<Cyiuxpd.Threading.TaskCompiler>::.ctor(System.Object,System.IntPtr) callvirt System.Void Welusenloj.Tracking.TrackerWorker::RecordLiteralTracker(System.EventHandler`1<Cyiuxpd.Threading.TaskCompiler>) ldc.i4 0 ldsfld <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461} <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_5340578000e94163b08b133fdf7dc690 ldfld System.Int32 <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_27a41a1a90b0402ba9c97dd0ac2e3878 brtrue IL_0070: switch(IL_0105,IL_0138,IL_00E7,IL_008E,IL_00C1) pop <null> ldc.i4 0 br IL_0070: switch(IL_0105,IL_0138,IL_00E7,IL_008E,IL_00C1) ldloc.s V_0 callvirt System.Void Welusenloj.Publishing.ManagerPublisher::ReplacePublisher() ldc.i4 1 ldsfld <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461} <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_5340578000e94163b08b133fdf7dc690 ldfld System.Int32 <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_bf69c75766e7454d81eb4af618914791 brtrue IL_0070: switch(IL_0105,IL_0138,IL_00E7,IL_008E,IL_00C1) pop <null> ldc.i4 1 br IL_0070: switch(IL_0105,IL_0138,IL_00E7,IL_008E,IL_00C1) ldloc.s V_1 ldloc.s V_6 ldftn System.Void Welusenloj.Core.ConfigurableObject::InstantiateSetObject(System.Object,Cyiuxpd.Visitors.OrderedVisitor) newobj System.Void System.EventHandler`1<Cyiuxpd.Visitors.OrderedVisitor>::.ctor(System.Object,System.IntPtr) callvirt System.Void Welusenloj.Tracking.TrackerPublisher::TrackStaticTracker(System.EventHandler`1<Cyiuxpd.Visitors.OrderedVisitor>) ldc.i4 3 br IL_0070: switch(IL_0105,IL_0138,IL_00E7,IL_008E,IL_00C1) ldloc.s V_3 ldloc.s V_6 ldftn System.Void Welusenloj.Core.ConfigurableObject::ResetObject(System.Object,Welusenloj.Initialization.RequestFinalizer) newobj System.Void System.EventHandler`1<Welusenloj.Initialization.RequestFinalizer>::.ctor(System.Object,System.IntPtr) callvirt System.Void Cyiuxpd.Threading.ParserTask::ExecuteTransferableTask(System.EventHandler`1<Welusenloj.Initialization.RequestFinalizer>) ldc.i4 0 ldsfld <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461} <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_5340578000e94163b08b133fdf7dc690 ldfld System.Int32 <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_3c5950767d744b06b6f59ab3363b8445 brfalse IL_0070: switch(IL_0105,IL_0138,IL_00E7,IL_008E,IL_00C1) pop <null> ldc.i4 4 br IL_0070: switch(IL_0105,IL_0138,IL_00E7,IL_008E,IL_00C1) leave IL_01F8: ret ldloc.s V_6 brtrue IL_017D: ldloc.s V_6 ldc.i4 0 ldsfld <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461} <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_5340578000e94163b08b133fdf7dc690 ldfld System.Int32 <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_77d704a4630840ec84b31447bc915806 brtrue IL_0167: switch(IL_01A3,IL_01B2,IL_017D) pop <null> ldc.i4 0 br IL_0167: switch(IL_01A3,IL_01B2,IL_017D) ldloc V_4 switch dnlib.DotNet.Emit.Instruction[] br IL_01A3: br IL_01B2 ldloc.s V_6 callvirt System.Void System.IDisposable::Dispose() ldc.i4 0 ldsfld <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461} <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_5340578000e94163b08b133fdf7dc690 ldfld System.Int32 <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_461f286bf32c4f1887aada6682f9372a brtrue IL_0167: switch(IL_01A3,IL_01B2,IL_017D) pop <null> ldc.i4 1 br IL_0167: switch(IL_01A3,IL_01B2,IL_017D) br IL_01B2: endfinally ldc.i4 2 br IL_0167: switch(IL_01A3,IL_01B2,IL_017D) endfinally <null> ldc.i4 3 ldsfld <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461} <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_5340578000e94163b08b133fdf7dc690 ldfld System.Int32 <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_e8644de6c14445fda0f44a871af41bb0 brfalse IL_0012: switch(IL_0038,IL_021F,IL_01F9,IL_01F8,IL_0271,IL_01D2,IL_024B) pop <null> ldc.i4 1 br IL_0012: switch(IL_0038,IL_021F,IL_01F9,IL_01F8,IL_0271,IL_01D2,IL_024B) newobj System.Void Welusenloj.Tracking.TrackerPublisher::.ctor() stloc.s V_1 ldc.i4 2 ldsfld <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461} <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_5340578000e94163b08b133fdf7dc690 ldfld System.Int32 <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_4194125f096d44cc861df7d8ca4e864b brtrue IL_0012: switch(IL_0038,IL_021F,IL_01F9,IL_01F8,IL_0271,IL_01D2,IL_024B) pop <null> ldc.i4 2 br IL_0012: switch(IL_0038,IL_021F,IL_01F9,IL_01F8,IL_0271,IL_01D2,IL_024B) ret <null> newobj System.Void Welusenloj.Tracking.TrackerWorker::.ctor() stloc.s V_2 ldc.i4 3 ldsfld <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461} <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_5340578000e94163b08b133fdf7dc690 ldfld System.Int32 <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_26a7edb054d94a79b581b197a37dac58 brtrue IL_0012: switch(IL_0038,IL_021F,IL_01F9,IL_01F8,IL_0271,IL_01D2,IL_024B) pop <null> ldc.i4 4 br IL_0012: switch(IL_0038,IL_021F,IL_01F9,IL_01F8,IL_0271,IL_01D2,IL_024B) ldloc.s V_1 ldloc.s V_2 ldloc.s V_3 newobj System.Void Welusenloj.Core.ConfigurableObject::.ctor(Welusenloj.Tracking.TrackerPublisher,Welusenloj.Tracking.TrackerWorker,Cyiuxpd.Threading.ParserTask) stloc.s V_6 ldc.i4 0 ldsfld <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461} <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_5340578000e94163b08b133fdf7dc690 ldfld System.Int32 <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_f0411eb5b0034b93a538b4b4fdaf0bd4 brfalse IL_0012: switch(IL_0038,IL_021F,IL_01F9,IL_01F8,IL_0271,IL_01D2,IL_024B) pop <null> ldc.i4 0 br IL_0012: switch(IL_0038,IL_021F,IL_01F9,IL_01F8,IL_0271,IL_01D2,IL_024B) newobj System.Void Welusenloj.Publishing.ManagerPublisher::.ctor() stloc.s V_0 ldc.i4 4 ldsfld <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461} <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_5340578000e94163b08b133fdf7dc690 ldfld System.Int32 <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_0128ab405110471a97ea6d7d75e570dc brtrue IL_0012: switch(IL_0038,IL_021F,IL_01F9,IL_01F8,IL_0271,IL_01D2,IL_024B) pop <null> ldc.i4 5 br IL_0012: switch(IL_0038,IL_021F,IL_01F9,IL_01F8,IL_0271,IL_01D2,IL_024B) newobj System.Void Cyiuxpd.Threading.ParserTask::.ctor() stloc.s V_3 ldc.i4 0 ldsfld <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461} <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_5340578000e94163b08b133fdf7dc690 ldfld System.Int32 <Module>{a73db86a-bfee-4f9f-934b-c95a5b586461}::m_e6ba9a5b0ba4488a811d0e01a5dbf808 brtrue IL_0012: switch(IL_0038,IL_021F,IL_01F9,IL_01F8,IL_0271,IL_01D2,IL_024B) pop <null> ldc.i4 1 br IL_0012: switch(IL_0038,IL_021F,IL_01F9,IL_01F8,IL_0271,IL_01D2,IL_024B)
a3812ff62d398091e764bcaf6db6c235 (32.26 KB)
File Structure
a3812ff62d398091e764bcaf6db6c235
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
ILRepack.List
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙