Suspicious
Suspect

ab4f430dde4094a31b0ce1e32303784b

PE Executable
|
MD5: ab4f430dde4094a31b0ce1e32303784b
|
Size: 1.72 MB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

High

Hash
 Hash Value
MD5
ab4f430dde4094a31b0ce1e32303784b
Sha1
f25e37d4dc934de178d373d81c4688ae18de148c
Sha256
46505503a377aa9b3c1ae730aa77f1ae90f7d78967cd546adc4b3721ff867a8d
Sha384
c0b9c2d62c3f4b94f32ab72453327c72e1a7a5d20bcfdf5b5adbd4580ab5c2aeaf903c40f74bea216e3dabbea5c68233
Sha512
003f7064dbe1318f6327c1fa7d1038bac528067659c4fe1515a3b5a73950a51acf8141e397258310175d46b9c72677c996ee9eb2502987d9374868b4d590fe57
SSDeep
49152:i18DnzBkU5bXRI1TAKKQHDHKblcP8mXHwT:i18DqU5bKRKC6KP8mXq
TLSH
9C853319E7A44195E87B4F31DDF2852427317E979142C82E308F3659CCE27688E9EB3E

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
ab4f430dde4094a31b0ce1e32303784b
[Authenticode]_b0e71d57.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Bpyvxg.Properties.Resources.resources
Pyslgoxd
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Info

Authenticode present at 0x1A0200 size 10656 bytes
Module Name

Pnvsqw.exe
Full Name

Pnvsqw.exe
EntryPoint

System.Void Bpyvxg.DesignPatterns.EditableAdapter::FindAdapter()
Scope Name

Pnvsqw.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Pnvsqw
Assembly Version

23.8.20555.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.6
Total Strings

1015
Main Method

System.Void Bpyvxg.DesignPatterns.EditableAdapter::FindAdapter()
Main IL Instruction Count

199
Main IL

ldc.i4 1 stloc V_9 br IL_000E: ldloc V_9 ldloc V_9 switch dnlib.DotNet.Emit.Instruction[] br IL_0314: nop ldstr 1.4.1 newobj System.Void System.Version::.ctor(System.String) stloc.s V_11 ldc.i4 2 ldsfld <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562} <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_908e87fcb8d6422f9ae4fc264ff00aab ldfld System.Int32 <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_7e6ecfd4c4ee432faae5dc89e542aa0f brtrue IL_0012: switch(IL_0314,IL_0330,IL_035A,IL_02DA,IL_021B,IL_031F,IL_02EE,IL_0048,IL_008A,IL_0073,IL_02D9) pop <null> ldc.i4 3 br IL_0012: switch(IL_0314,IL_0330,IL_035A,IL_02DA,IL_021B,IL_031F,IL_02EE,IL_0048,IL_008A,IL_0073,IL_02D9) ldloc.s V_3 ldloc.s V_8 ldloc.s V_7 newobj System.Void Pnvsqw.Helpers.ChooserFunction::.ctor(Bpyvxg.Parsing.ParserReporter,Bpyvxg.DataStructures.StreamTester,Bpyvxg.Settings.ConfigurationTracker) stloc.s V_6 ldc.i4 8 br IL_0012: switch(IL_0314,IL_0330,IL_035A,IL_02DA,IL_021B,IL_031F,IL_02EE,IL_0048,IL_008A,IL_0073,IL_02D9) nop <null> nop <null> ldloc.s V_2 ldloc.s V_6 ldftn System.Void Pnvsqw.Helpers.ChooserFunction::GetIdentifiableChooser(System.Object,Pnvsqw.Diagnostics.GatewayState) newobj System.Void System.EventHandler`1<Pnvsqw.Diagnostics.GatewayState>::.ctor(System.Object,System.IntPtr) callvirt System.Void Pnvsqw.Diagnostics.InspectorContainer::FinishEfficientInspector(System.EventHandler`1<Pnvsqw.Diagnostics.GatewayState>) ldc.i4 0 ldsfld <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562} <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_908e87fcb8d6422f9ae4fc264ff00aab ldfld System.Int32 <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_050fbdd99102442ba859ea2152b0302e brfalse IL_00C3: switch(IL_017E,IL_013C,IL_015B,IL_00E1,IL_0108) pop <null> ldc.i4 1 br IL_00C3: switch(IL_017E,IL_013C,IL_015B,IL_00E1,IL_0108) ldloc V_10 switch dnlib.DotNet.Emit.Instruction[] br IL_017E: nop nop <null> ldloc.s V_2 callvirt System.Void Pnvsqw.Diagnostics.InspectorContainer::CheckLocalInspector() ldc.i4 0 ldsfld <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562} <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_908e87fcb8d6422f9ae4fc264ff00aab ldfld System.Int32 <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_c3f2246ddc414645bb8481f843731d32 brfalse IL_00C3: switch(IL_017E,IL_013C,IL_015B,IL_00E1,IL_0108) pop <null> ldc.i4 0 br IL_00C3: switch(IL_017E,IL_013C,IL_015B,IL_00E1,IL_0108) nop <null> ldloc.s V_7 ldloc.s V_6 ldftn System.Void Pnvsqw.Helpers.ChooserFunction::DecideMixedChooser(System.Object,Pnvsqw.Diagnostics.ClientInspector) newobj System.Void System.EventHandler`1<Pnvsqw.Diagnostics.ClientInspector>::.ctor(System.Object,System.IntPtr) callvirt System.Void Bpyvxg.Settings.ConfigurationTracker::SetPassiveConfiguration(System.EventHandler`1<Pnvsqw.Diagnostics.ClientInspector>) ldc.i4 3 ldsfld <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562} <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_908e87fcb8d6422f9ae4fc264ff00aab ldfld System.Int32 <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_e5625c8f431e4df7bc64a45b3f75e186 brtrue IL_00C3: switch(IL_017E,IL_013C,IL_015B,IL_00E1,IL_0108) pop <null> ldc.i4 0 br IL_00C3: switch(IL_017E,IL_013C,IL_015B,IL_00E1,IL_0108) nop <null> ldloc.s V_3 ldloc.s V_6 ldftn System.Void Pnvsqw.Helpers.ChooserFunction::GetScalableChooser(System.Object,Pnvsqw.Controllers.SymbolicController) newobj System.Void System.EventHandler`1<Pnvsqw.Controllers.SymbolicController>::.ctor(System.Object,System.IntPtr) callvirt System.Void Bpyvxg.Parsing.ParserReporter::ParseHiddenParser(System.EventHandler`1<Pnvsqw.Controllers.SymbolicController>) ldc.i4 2 br IL_00C3: switch(IL_017E,IL_013C,IL_015B,IL_00E1,IL_0108) nop <null> ldloc.s V_8 ldloc.s V_6 ldftn System.Void Pnvsqw.Helpers.ChooserFunction::SelectScheduledChooser(System.Object,Bpyvxg.Schemas.DispatcherSchema) newobj System.Void System.EventHandler`1<Bpyvxg.Schemas.DispatcherSchema>::.ctor(System.Object,System.IntPtr) callvirt System.Void Bpyvxg.DataStructures.StreamTester::MapOperationalMap(System.EventHandler`1<Bpyvxg.Schemas.DispatcherSchema>) ldc.i4 4 stloc V_10 br IL_00BF: ldloc V_10 nop <null> nop <null> leave IL_02D9: ret ldloc.s V_6 brtrue IL_01D4: ldloc.s V_6 ldc.i4 1 ldsfld <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562} <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_908e87fcb8d6422f9ae4fc264ff00aab ldfld System.Int32 <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_bbff4c09cc1548449a980199b847b9c1 brfalse IL_01AF: switch(IL_01FA,IL_01C5,IL_01D4) pop <null> ldc.i4 1 br IL_01AF: switch(IL_01FA,IL_01C5,IL_01D4) ldloc V_5 switch dnlib.DotNet.Emit.Instruction[] br IL_01FA: nop br IL_01FB: endfinally ldc.i4 2 br IL_01AF: switch(IL_01FA,IL_01C5,IL_01D4) ldloc.s V_6 callvirt System.Void System.IDisposable::Dispose() ldc.i4 0 ldsfld <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562} <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_908e87fcb8d6422f9ae4fc264ff00aab ldfld System.Int32 <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_474e51241f8f4b6da440c856390af75c brtrue IL_01AF: switch(IL_01FA,IL_01C5,IL_01D4) pop <null> ldc.i4 0 br IL_01AF: switch(IL_01FA,IL_01C5,IL_01D4) nop <null> endfinally <null> ldc.i4 3 ldsfld <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562} <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_908e87fcb8d6422f9ae4fc264ff00aab ldfld System.Int32 <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_79433aa4e59b4875afe9ca4835e77b43 brfalse IL_0012: switch(IL_0314,IL_0330,IL_035A,IL_02DA,IL_021B,IL_031F,IL_02EE,IL_0048,IL_008A,IL_0073,IL_02D9) pop <null> ldc.i4 10 br IL_0012: switch(IL_0314,IL_0330,IL_035A,IL_02DA,IL_021B,IL_031F,IL_02EE,IL_0048,IL_008A,IL_0073,IL_02D9) nop <null> nop <null> ldsfld System.Object Pnvsqw.Collections.DictionaryController::_ConfigurableAggregatorData stloc.s V_0 ldc.i4 0 ldsfld <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562} <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_908e87fcb8d6422f9ae4fc264ff00aab ldfld System.Int32 <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_4f91a0a296094d29b79ded33db1a594f brfalse IL_0247: switch(IL_027B,IL_0259) pop <null> ldc.i4 1 br IL_0247: switch(IL_027B,IL_0259) ldloc V_4 switch dnlib.DotNet.Emit.Instruction[] br IL_027B: nop ldnull <null> stloc.s V_0 ldc.i4 0 ldsfld <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562} <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_908e87fcb8d6422f9ae4fc264ff00aab ldfld System.Int32 <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_9ced688ba3c44e2dadf2d13207ab8a2e brfalse IL_0247: switch(IL_027B,IL_0259) pop <null> ldc.i4 0 br IL_0247: switch(IL_027B,IL_0259) nop <null> leave IL_0048: ldstr "1.4.1" pop <null> ldc.i4 0 ldsfld <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562} <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_908e87fcb8d6422f9ae4fc264ff00aab ldfld System.Int32 <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_82fe6118d9144fbb8e4d662145f8dfb3 brtrue IL_02A5: switch(IL_02B3) pop <null> ldc.i4 0 br IL_02A5: switch(IL_02B3) ldloc V_1 switch dnlib.DotNet.Emit.Instruction[] br IL_02B3: nop nop <null> nop <null> leave IL_0048: ldstr "1.4.1" ldc.i4 7 ldsfld <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562} <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_908e87fcb8d6422f9ae4fc264ff00aab ldfld System.Int32 <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_ade685d3f69842b899ec33c7e0bfa03b brtrue IL_0012: switch(IL_0314,IL_0330,IL_035A,IL_02DA,IL_021B,IL_031F,IL_02EE,IL_0048,IL_008A,IL_0073,IL_02D9) pop <null> ldc.i4 7 br IL_0012: switch(IL_0314,IL_0330,IL_035A,IL_02DA,IL_021B,IL_031F,IL_02EE,IL_0048,IL_008A,IL_0073,IL_02D9) ret <null> ldnull <null> ldloc.s V_11 newobj System.Void Pnvsqw.Diagnostics.InspectorContainer::.ctor(System.String,System.Version) stloc.s V_2 ldc.i4 6 br IL_0012: switch(IL_0314,IL_0330,IL_035A,IL_02DA,IL_021B,IL_031F,IL_02EE,IL_0048,IL_008A,IL_0073,IL_02D9) newobj System.Void Bpyvxg.Parsing.ParserReporter::.ctor() stloc.s V_3 ldc.i4 1 ldsfld <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562} <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_908e87fcb8d6422f9ae4fc264ff00aab ldfld System.Int32 <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_13f947381f0e4a7c91bb8c65d33da7f9 brtrue IL_0012: switch(IL_0314,IL_0330,IL_035A,IL_02DA,IL_021B,IL_031F,IL_02EE,IL_0048,IL_008A,IL_0073,IL_02D9) pop <null> ldc.i4 2 br IL_0012: switch(IL_0314,IL_0330,IL_035A,IL_02DA,IL_021B,IL_031F,IL_02EE,IL_0048,IL_008A,IL_0073,IL_02D9) nop <null> ldc.i4 4 br IL_0012: switch(IL_0314,IL_0330,IL_035A,IL_02DA,IL_021B,IL_031F,IL_02EE,IL_0048,IL_008A,IL_0073,IL_02D9) newobj System.Void Bpyvxg.Settings.ConfigurationTracker::.ctor() stloc.s V_7 ldc.i4 9 br IL_0012: switch(IL_0314,IL_0330,IL_035A,IL_02DA,IL_021B,IL_031F,IL_02EE,IL_0048,IL_008A,IL_0073,IL_02D9) nop <null> ldc.i4 4032 call System.Void System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType) ldc.i4 0 ldsfld <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562} <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_908e87fcb8d6422f9ae4fc264ff00aab ldfld System.Int32 <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_bfc3f745d05a496cb5c8eea8426a1dfb brfalse IL_0012: switch(IL_0314,IL_0330,IL_035A,IL_02DA,IL_021B,IL_031F,IL_02EE,IL_0048,IL_008A,IL_0073,IL_02D9) pop <null> ldc.i4 0 br IL_0012: switch(IL_0314,IL_0330,IL_035A,IL_02DA,IL_021B,IL_031F,IL_02EE,IL_0048,IL_008A,IL_0073,IL_02D9) newobj System.Void Bpyvxg.DataStructures.StreamTester::.ctor() stloc.s V_8 ldc.i4 5 br IL_0012: switch(IL_0314,IL_0330,IL_035A,IL_02DA,IL_021B,IL_031F,IL_02EE,IL_0048,IL_008A,IL_0073,IL_02D9)
Module Name

Pnvsqw.exe
Full Name

Pnvsqw.exe
EntryPoint

System.Void Bpyvxg.DesignPatterns.EditableAdapter::FindAdapter()
Scope Name

Pnvsqw.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Pnvsqw
Assembly Version

23.8.20555.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.6
Total Strings

1015
Main Method

System.Void Bpyvxg.DesignPatterns.EditableAdapter::FindAdapter()
Main IL Instruction Count

199
Main IL

ldc.i4 1 stloc V_9 br IL_000E: ldloc V_9 ldloc V_9 switch dnlib.DotNet.Emit.Instruction[] br IL_0314: nop ldstr 1.4.1 newobj System.Void System.Version::.ctor(System.String) stloc.s V_11 ldc.i4 2 ldsfld <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562} <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_908e87fcb8d6422f9ae4fc264ff00aab ldfld System.Int32 <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_7e6ecfd4c4ee432faae5dc89e542aa0f brtrue IL_0012: switch(IL_0314,IL_0330,IL_035A,IL_02DA,IL_021B,IL_031F,IL_02EE,IL_0048,IL_008A,IL_0073,IL_02D9) pop <null> ldc.i4 3 br IL_0012: switch(IL_0314,IL_0330,IL_035A,IL_02DA,IL_021B,IL_031F,IL_02EE,IL_0048,IL_008A,IL_0073,IL_02D9) ldloc.s V_3 ldloc.s V_8 ldloc.s V_7 newobj System.Void Pnvsqw.Helpers.ChooserFunction::.ctor(Bpyvxg.Parsing.ParserReporter,Bpyvxg.DataStructures.StreamTester,Bpyvxg.Settings.ConfigurationTracker) stloc.s V_6 ldc.i4 8 br IL_0012: switch(IL_0314,IL_0330,IL_035A,IL_02DA,IL_021B,IL_031F,IL_02EE,IL_0048,IL_008A,IL_0073,IL_02D9) nop <null> nop <null> ldloc.s V_2 ldloc.s V_6 ldftn System.Void Pnvsqw.Helpers.ChooserFunction::GetIdentifiableChooser(System.Object,Pnvsqw.Diagnostics.GatewayState) newobj System.Void System.EventHandler`1<Pnvsqw.Diagnostics.GatewayState>::.ctor(System.Object,System.IntPtr) callvirt System.Void Pnvsqw.Diagnostics.InspectorContainer::FinishEfficientInspector(System.EventHandler`1<Pnvsqw.Diagnostics.GatewayState>) ldc.i4 0 ldsfld <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562} <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_908e87fcb8d6422f9ae4fc264ff00aab ldfld System.Int32 <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_050fbdd99102442ba859ea2152b0302e brfalse IL_00C3: switch(IL_017E,IL_013C,IL_015B,IL_00E1,IL_0108) pop <null> ldc.i4 1 br IL_00C3: switch(IL_017E,IL_013C,IL_015B,IL_00E1,IL_0108) ldloc V_10 switch dnlib.DotNet.Emit.Instruction[] br IL_017E: nop nop <null> ldloc.s V_2 callvirt System.Void Pnvsqw.Diagnostics.InspectorContainer::CheckLocalInspector() ldc.i4 0 ldsfld <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562} <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_908e87fcb8d6422f9ae4fc264ff00aab ldfld System.Int32 <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_c3f2246ddc414645bb8481f843731d32 brfalse IL_00C3: switch(IL_017E,IL_013C,IL_015B,IL_00E1,IL_0108) pop <null> ldc.i4 0 br IL_00C3: switch(IL_017E,IL_013C,IL_015B,IL_00E1,IL_0108) nop <null> ldloc.s V_7 ldloc.s V_6 ldftn System.Void Pnvsqw.Helpers.ChooserFunction::DecideMixedChooser(System.Object,Pnvsqw.Diagnostics.ClientInspector) newobj System.Void System.EventHandler`1<Pnvsqw.Diagnostics.ClientInspector>::.ctor(System.Object,System.IntPtr) callvirt System.Void Bpyvxg.Settings.ConfigurationTracker::SetPassiveConfiguration(System.EventHandler`1<Pnvsqw.Diagnostics.ClientInspector>) ldc.i4 3 ldsfld <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562} <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_908e87fcb8d6422f9ae4fc264ff00aab ldfld System.Int32 <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_e5625c8f431e4df7bc64a45b3f75e186 brtrue IL_00C3: switch(IL_017E,IL_013C,IL_015B,IL_00E1,IL_0108) pop <null> ldc.i4 0 br IL_00C3: switch(IL_017E,IL_013C,IL_015B,IL_00E1,IL_0108) nop <null> ldloc.s V_3 ldloc.s V_6 ldftn System.Void Pnvsqw.Helpers.ChooserFunction::GetScalableChooser(System.Object,Pnvsqw.Controllers.SymbolicController) newobj System.Void System.EventHandler`1<Pnvsqw.Controllers.SymbolicController>::.ctor(System.Object,System.IntPtr) callvirt System.Void Bpyvxg.Parsing.ParserReporter::ParseHiddenParser(System.EventHandler`1<Pnvsqw.Controllers.SymbolicController>) ldc.i4 2 br IL_00C3: switch(IL_017E,IL_013C,IL_015B,IL_00E1,IL_0108) nop <null> ldloc.s V_8 ldloc.s V_6 ldftn System.Void Pnvsqw.Helpers.ChooserFunction::SelectScheduledChooser(System.Object,Bpyvxg.Schemas.DispatcherSchema) newobj System.Void System.EventHandler`1<Bpyvxg.Schemas.DispatcherSchema>::.ctor(System.Object,System.IntPtr) callvirt System.Void Bpyvxg.DataStructures.StreamTester::MapOperationalMap(System.EventHandler`1<Bpyvxg.Schemas.DispatcherSchema>) ldc.i4 4 stloc V_10 br IL_00BF: ldloc V_10 nop <null> nop <null> leave IL_02D9: ret ldloc.s V_6 brtrue IL_01D4: ldloc.s V_6 ldc.i4 1 ldsfld <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562} <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_908e87fcb8d6422f9ae4fc264ff00aab ldfld System.Int32 <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_bbff4c09cc1548449a980199b847b9c1 brfalse IL_01AF: switch(IL_01FA,IL_01C5,IL_01D4) pop <null> ldc.i4 1 br IL_01AF: switch(IL_01FA,IL_01C5,IL_01D4) ldloc V_5 switch dnlib.DotNet.Emit.Instruction[] br IL_01FA: nop br IL_01FB: endfinally ldc.i4 2 br IL_01AF: switch(IL_01FA,IL_01C5,IL_01D4) ldloc.s V_6 callvirt System.Void System.IDisposable::Dispose() ldc.i4 0 ldsfld <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562} <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_908e87fcb8d6422f9ae4fc264ff00aab ldfld System.Int32 <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_474e51241f8f4b6da440c856390af75c brtrue IL_01AF: switch(IL_01FA,IL_01C5,IL_01D4) pop <null> ldc.i4 0 br IL_01AF: switch(IL_01FA,IL_01C5,IL_01D4) nop <null> endfinally <null> ldc.i4 3 ldsfld <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562} <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_908e87fcb8d6422f9ae4fc264ff00aab ldfld System.Int32 <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_79433aa4e59b4875afe9ca4835e77b43 brfalse IL_0012: switch(IL_0314,IL_0330,IL_035A,IL_02DA,IL_021B,IL_031F,IL_02EE,IL_0048,IL_008A,IL_0073,IL_02D9) pop <null> ldc.i4 10 br IL_0012: switch(IL_0314,IL_0330,IL_035A,IL_02DA,IL_021B,IL_031F,IL_02EE,IL_0048,IL_008A,IL_0073,IL_02D9) nop <null> nop <null> ldsfld System.Object Pnvsqw.Collections.DictionaryController::_ConfigurableAggregatorData stloc.s V_0 ldc.i4 0 ldsfld <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562} <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_908e87fcb8d6422f9ae4fc264ff00aab ldfld System.Int32 <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_4f91a0a296094d29b79ded33db1a594f brfalse IL_0247: switch(IL_027B,IL_0259) pop <null> ldc.i4 1 br IL_0247: switch(IL_027B,IL_0259) ldloc V_4 switch dnlib.DotNet.Emit.Instruction[] br IL_027B: nop ldnull <null> stloc.s V_0 ldc.i4 0 ldsfld <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562} <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_908e87fcb8d6422f9ae4fc264ff00aab ldfld System.Int32 <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_9ced688ba3c44e2dadf2d13207ab8a2e brfalse IL_0247: switch(IL_027B,IL_0259) pop <null> ldc.i4 0 br IL_0247: switch(IL_027B,IL_0259) nop <null> leave IL_0048: ldstr "1.4.1" pop <null> ldc.i4 0 ldsfld <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562} <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_908e87fcb8d6422f9ae4fc264ff00aab ldfld System.Int32 <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_82fe6118d9144fbb8e4d662145f8dfb3 brtrue IL_02A5: switch(IL_02B3) pop <null> ldc.i4 0 br IL_02A5: switch(IL_02B3) ldloc V_1 switch dnlib.DotNet.Emit.Instruction[] br IL_02B3: nop nop <null> nop <null> leave IL_0048: ldstr "1.4.1" ldc.i4 7 ldsfld <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562} <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_908e87fcb8d6422f9ae4fc264ff00aab ldfld System.Int32 <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_ade685d3f69842b899ec33c7e0bfa03b brtrue IL_0012: switch(IL_0314,IL_0330,IL_035A,IL_02DA,IL_021B,IL_031F,IL_02EE,IL_0048,IL_008A,IL_0073,IL_02D9) pop <null> ldc.i4 7 br IL_0012: switch(IL_0314,IL_0330,IL_035A,IL_02DA,IL_021B,IL_031F,IL_02EE,IL_0048,IL_008A,IL_0073,IL_02D9) ret <null> ldnull <null> ldloc.s V_11 newobj System.Void Pnvsqw.Diagnostics.InspectorContainer::.ctor(System.String,System.Version) stloc.s V_2 ldc.i4 6 br IL_0012: switch(IL_0314,IL_0330,IL_035A,IL_02DA,IL_021B,IL_031F,IL_02EE,IL_0048,IL_008A,IL_0073,IL_02D9) newobj System.Void Bpyvxg.Parsing.ParserReporter::.ctor() stloc.s V_3 ldc.i4 1 ldsfld <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562} <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_908e87fcb8d6422f9ae4fc264ff00aab ldfld System.Int32 <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_13f947381f0e4a7c91bb8c65d33da7f9 brtrue IL_0012: switch(IL_0314,IL_0330,IL_035A,IL_02DA,IL_021B,IL_031F,IL_02EE,IL_0048,IL_008A,IL_0073,IL_02D9) pop <null> ldc.i4 2 br IL_0012: switch(IL_0314,IL_0330,IL_035A,IL_02DA,IL_021B,IL_031F,IL_02EE,IL_0048,IL_008A,IL_0073,IL_02D9) nop <null> ldc.i4 4 br IL_0012: switch(IL_0314,IL_0330,IL_035A,IL_02DA,IL_021B,IL_031F,IL_02EE,IL_0048,IL_008A,IL_0073,IL_02D9) newobj System.Void Bpyvxg.Settings.ConfigurationTracker::.ctor() stloc.s V_7 ldc.i4 9 br IL_0012: switch(IL_0314,IL_0330,IL_035A,IL_02DA,IL_021B,IL_031F,IL_02EE,IL_0048,IL_008A,IL_0073,IL_02D9) nop <null> ldc.i4 4032 call System.Void System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType) ldc.i4 0 ldsfld <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562} <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_908e87fcb8d6422f9ae4fc264ff00aab ldfld System.Int32 <Module>{8ebac1f6-9b5b-4f58-b90d-0f62475b4562}::m_bfc3f745d05a496cb5c8eea8426a1dfb brfalse IL_0012: switch(IL_0314,IL_0330,IL_035A,IL_02DA,IL_021B,IL_031F,IL_02EE,IL_0048,IL_008A,IL_0073,IL_02D9) pop <null> ldc.i4 0 br IL_0012: switch(IL_0314,IL_0330,IL_035A,IL_02DA,IL_021B,IL_031F,IL_02EE,IL_0048,IL_008A,IL_0073,IL_02D9) newobj System.Void Bpyvxg.DataStructures.StreamTester::.ctor() stloc.s V_8 ldc.i4 5 br IL_0012: switch(IL_0314,IL_0330,IL_035A,IL_02DA,IL_021B,IL_031F,IL_02EE,IL_0048,IL_008A,IL_0073,IL_02D9)
ab4f430dde4094a31b0ce1e32303784b (1.72 MB)
File Structure
ab4f430dde4094a31b0ce1e32303784b
[Authenticode]_b0e71d57.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Bpyvxg.Properties.Resources.resources
Pyslgoxd
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙