Suspicious
Suspect

bf10c0880ff642e5677f85fb06fea67a

PE Executable
|
MD5: bf10c0880ff642e5677f85fb06fea67a
|
Size: 53.76 KB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Medium

Hash
 Hash Value
MD5
bf10c0880ff642e5677f85fb06fea67a
Sha1
938d905137a8947a5e76882bf84261cf557be571
Sha256
b31084837bcfd507c18495ea053b0b234b06404e5c97b527866a8e43268c4c59
Sha384
684e49e946906271e3c994f6722858f569f4309655173d2a59b79d0057f58beca0f7dc19651c8cf75fbe73deea63e0e5
Sha512
4ab197728b75fc70b2833d1f6c0788bf467edf5619f927526f510d3836e9e753a0ee9a3e3846e0d35741fe1c9bd932c640442f245456c31b848359f6955b2379
SSDeep
768:i3t5iI1CN855CTwb5LuIXgW/xwYtjJjJHEKr4eEL1aK0Fy0xZGC2vSHsMdc5:iDR55CTwbUIXgWfYtt0h/xjHi
TLSH
3F33B71FB29A95A6E9B3B736CCF242101671BC526D13C40D294E238648D2375DADAF3F

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
bf10c0880ff642e5677f85fb06fea67a
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Module Name

Sunrdwuxic.exe
Full Name

Sunrdwuxic.exe
EntryPoint

System.Void Sunrdwuxic.IO.BufferDispatcher::RunBuffer()
Scope Name

Sunrdwuxic.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Sunrdwuxic
Assembly Version

1.0.1425.23612
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.6
Total Strings

1014
Main Method

System.Void Sunrdwuxic.IO.BufferDispatcher::RunBuffer()
Main IL Instruction Count

187
Main IL

ldc.i4 7 stloc V_4 br IL_000E: ldloc V_4 ldloc V_4 switch dnlib.DotNet.Emit.Instruction[] br IL_0321: newobj System.Void Sunrdwuxic.RecommendationSystems.IsolatedRecommender::.ctor() newobj System.Void Byxajhmn.Monitoring.WatcherGateway::.ctor() stloc.s V_9 ldc.i4 1 ldsfld <Module>{521428b5-0541-4566-a91c-46f095cf5d29} <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_e7c76ffbfad748af96a0f997e5a47209 ldfld System.Int32 <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_5175c442c0244731aeacc2d6856bc83c brfalse IL_0012: switch(IL_0321,IL_00C1,IL_006E,IL_0048,IL_0278,IL_00DC,IL_00F3,IL_0097,IL_00FE,IL_00F2,IL_00AC) pop <null> ldc.i4 1 br IL_0012: switch(IL_0321,IL_00C1,IL_006E,IL_0048,IL_0278,IL_00DC,IL_00F3,IL_0097,IL_00FE,IL_00F2,IL_00AC) ldnull <null> ldloc.s V_10 newobj System.Void Byxajhmn.Modules.ModuleWorker::.ctor(System.String,System.Version) stloc.s V_7 ldc.i4 0 ldsfld <Module>{521428b5-0541-4566-a91c-46f095cf5d29} <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_e7c76ffbfad748af96a0f997e5a47209 ldfld System.Int32 <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_1e2fb0bed0c24482a06515461b1ee67b brtrue IL_0012: switch(IL_0321,IL_00C1,IL_006E,IL_0048,IL_0278,IL_00DC,IL_00F3,IL_0097,IL_00FE,IL_00F2,IL_00AC) pop <null> ldc.i4 0 br IL_0012: switch(IL_0321,IL_00C1,IL_006E,IL_0048,IL_0278,IL_00DC,IL_00F3,IL_0097,IL_00FE,IL_00F2,IL_00AC) nop <null> ldc.i4 4032 call System.Void System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType) ldc.i4 6 br IL_0012: switch(IL_0321,IL_00C1,IL_006E,IL_0048,IL_0278,IL_00DC,IL_00F3,IL_0097,IL_00FE,IL_00F2,IL_00AC) newobj System.Void Byxajhmn.Monitoring.WatcherMatcher::.ctor() stloc.s V_11 ldc.i4 3 stloc V_4 br IL_000E: ldloc V_4 ldloc.s V_3 ldloc.s V_11 ldloc.s V_9 newobj System.Void Sunrdwuxic.IO.EfficientBuffer::.ctor(Sunrdwuxic.RecommendationSystems.IsolatedRecommender,Byxajhmn.Monitoring.WatcherMatcher,Byxajhmn.Monitoring.WatcherGateway) stloc.s V_6 ldc.i4 8 stloc V_4 br IL_000E: ldloc V_4 ldstr 1.4.1 newobj System.Void System.Version::.ctor(System.String) stloc.s V_10 ldc.i4 2 br IL_0012: switch(IL_0321,IL_00C1,IL_006E,IL_0048,IL_0278,IL_00DC,IL_00F3,IL_0097,IL_00FE,IL_00F2,IL_00AC) ret <null> nop <null> ldc.i4 4 br IL_0012: switch(IL_0321,IL_00C1,IL_006E,IL_0048,IL_0278,IL_00DC,IL_00F3,IL_0097,IL_00FE,IL_00F2,IL_00AC) nop <null> nop <null> ldloc.s V_7 ldloc.s V_6 ldftn System.Void Sunrdwuxic.IO.EfficientBuffer::StoreSeparatedBuffer(System.Object,Byxajhmn.Specifications.SpecTracker) newobj System.Void System.EventHandler`1<Byxajhmn.Specifications.SpecTracker>::.ctor(System.Object,System.IntPtr) callvirt System.Void Byxajhmn.Modules.ModuleWorker::AnalyzeModule(System.EventHandler`1<Byxajhmn.Specifications.SpecTracker>) ldc.i4 2 br IL_0122: switch(IL_0140,IL_0167,IL_019B,IL_01CF,IL_0203) ldloc V_1 switch dnlib.DotNet.Emit.Instruction[] br IL_0140: nop nop <null> ldloc.s V_7 callvirt System.Void Byxajhmn.Modules.ModuleWorker::WatchModule() ldc.i4 4 ldsfld <Module>{521428b5-0541-4566-a91c-46f095cf5d29} <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_e7c76ffbfad748af96a0f997e5a47209 ldfld System.Int32 <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_5840407ff8b94338a844097a35d35a34 brtrue IL_0122: switch(IL_0140,IL_0167,IL_019B,IL_01CF,IL_0203) pop <null> ldc.i4 2 br IL_0122: switch(IL_0140,IL_0167,IL_019B,IL_01CF,IL_0203) nop <null> ldloc.s V_9 ldloc.s V_6 ldftn System.Void Sunrdwuxic.IO.EfficientBuffer::PopBuffer(System.Object,Sunrdwuxic.Execution.ConcreteCommand) newobj System.Void System.EventHandler`1<Sunrdwuxic.Execution.ConcreteCommand>::.ctor(System.Object,System.IntPtr) callvirt System.Void Byxajhmn.Monitoring.WatcherGateway::EnableWatcher(System.EventHandler`1<Sunrdwuxic.Execution.ConcreteCommand>) ldc.i4 0 ldsfld <Module>{521428b5-0541-4566-a91c-46f095cf5d29} <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_e7c76ffbfad748af96a0f997e5a47209 ldfld System.Int32 <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_be784f8a6f96446cbd3f84267547a257 brtrue IL_0122: switch(IL_0140,IL_0167,IL_019B,IL_01CF,IL_0203) pop <null> ldc.i4 0 br IL_0122: switch(IL_0140,IL_0167,IL_019B,IL_01CF,IL_0203) nop <null> ldloc.s V_3 ldloc.s V_6 ldftn System.Void Sunrdwuxic.IO.EfficientBuffer::MonitorBuffer(System.Object,Byxajhmn.Proxies.ClientProxy) newobj System.Void System.EventHandler`1<Byxajhmn.Proxies.ClientProxy>::.ctor(System.Object,System.IntPtr) callvirt System.Void Sunrdwuxic.RecommendationSystems.IsolatedRecommender::DeclineConvertibleRecommender(System.EventHandler`1<Byxajhmn.Proxies.ClientProxy>) ldc.i4 0 ldsfld <Module>{521428b5-0541-4566-a91c-46f095cf5d29} <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_e7c76ffbfad748af96a0f997e5a47209 ldfld System.Int32 <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_7bc7e2d0cc1a48a6af68d0a0b4f80711 brfalse IL_0122: switch(IL_0140,IL_0167,IL_019B,IL_01CF,IL_0203) pop <null> ldc.i4 3 br IL_0122: switch(IL_0140,IL_0167,IL_019B,IL_01CF,IL_0203) nop <null> ldloc.s V_11 ldloc.s V_6 ldftn System.Void Sunrdwuxic.IO.EfficientBuffer::BufferExpandableBuffer(System.Object,Byxajhmn.Visitors.AttributeVisitor) newobj System.Void System.EventHandler`1<Byxajhmn.Visitors.AttributeVisitor>::.ctor(System.Object,System.IntPtr) callvirt System.Void Byxajhmn.Monitoring.WatcherMatcher::MonitorVisibleWatcher(System.EventHandler`1<Byxajhmn.Visitors.AttributeVisitor>) ldc.i4 1 ldsfld <Module>{521428b5-0541-4566-a91c-46f095cf5d29} <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_e7c76ffbfad748af96a0f997e5a47209 ldfld System.Int32 <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_a05081c6532341b2b05dad30867368a0 brtrue IL_0122: switch(IL_0140,IL_0167,IL_019B,IL_01CF,IL_0203) pop <null> ldc.i4 1 br IL_0122: switch(IL_0140,IL_0167,IL_019B,IL_01CF,IL_0203) nop <null> nop <null> leave IL_00F2: ret ldloc.s V_6 brfalse IL_026D: endfinally ldc.i4 0 ldsfld <Module>{521428b5-0541-4566-a91c-46f095cf5d29} <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_e7c76ffbfad748af96a0f997e5a47209 ldfld System.Int32 <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_5840407ff8b94338a844097a35d35a34 brfalse IL_0234: switch(IL_0246,IL_026C) pop <null> ldc.i4 0 br IL_0234: switch(IL_0246,IL_026C) ldloc V_2 switch dnlib.DotNet.Emit.Instruction[] br IL_0246: ldloc.s V_6 ldloc.s V_6 callvirt System.Void System.IDisposable::Dispose() ldc.i4 0 ldsfld <Module>{521428b5-0541-4566-a91c-46f095cf5d29} <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_e7c76ffbfad748af96a0f997e5a47209 ldfld System.Int32 <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_794660c719df457382419259ec324d48 brfalse IL_0234: switch(IL_0246,IL_026C) pop <null> ldc.i4 1 br IL_0234: switch(IL_0246,IL_026C) nop <null> endfinally <null> ldc.i4 9 br IL_0012: switch(IL_0321,IL_00C1,IL_006E,IL_0048,IL_0278,IL_00DC,IL_00F3,IL_0097,IL_00FE,IL_00F2,IL_00AC) nop <null> nop <null> ldsfld System.Object Sunrdwuxic.Structures.RecordSpec::m_DetailedRecords stloc.s V_0 ldc.i4 1 ldsfld <Module>{521428b5-0541-4566-a91c-46f095cf5d29} <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_e7c76ffbfad748af96a0f997e5a47209 ldfld System.Int32 <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_a05081c6532341b2b05dad30867368a0 brfalse IL_02A4: switch(IL_02D8,IL_02B6) pop <null> ldc.i4 1 br IL_02A4: switch(IL_02D8,IL_02B6) ldloc V_8 switch dnlib.DotNet.Emit.Instruction[] br IL_02D8: nop ldnull <null> stloc.s V_0 ldc.i4 0 ldsfld <Module>{521428b5-0541-4566-a91c-46f095cf5d29} <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_e7c76ffbfad748af96a0f997e5a47209 ldfld System.Int32 <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_63ede66ed2394e6580dd59391ccf8449 brtrue IL_02A4: switch(IL_02D8,IL_02B6) pop <null> ldc.i4 0 br IL_02A4: switch(IL_02D8,IL_02B6) nop <null> leave IL_00DC: ldstr "1.4.1" pop <null> ldc.i4 0 ldsfld <Module>{521428b5-0541-4566-a91c-46f095cf5d29} <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_e7c76ffbfad748af96a0f997e5a47209 ldfld System.Int32 <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_df091f8e34cc42d7a927dd4a188bd464 brtrue IL_0302: switch(IL_0310) pop <null> ldc.i4 0 br IL_0302: switch(IL_0310) ldloc V_5 switch dnlib.DotNet.Emit.Instruction[] br IL_0310: nop nop <null> nop <null> leave IL_00DC: ldstr "1.4.1" ldc.i4 5 br IL_0012: switch(IL_0321,IL_00C1,IL_006E,IL_0048,IL_0278,IL_00DC,IL_00F3,IL_0097,IL_00FE,IL_00F2,IL_00AC) newobj System.Void Sunrdwuxic.RecommendationSystems.IsolatedRecommender::.ctor() stloc.s V_3 ldc.i4 10 br IL_0012: switch(IL_0321,IL_00C1,IL_006E,IL_0048,IL_0278,IL_00DC,IL_00F3,IL_0097,IL_00FE,IL_00F2,IL_00AC)
Module Name

Sunrdwuxic.exe
Full Name

Sunrdwuxic.exe
EntryPoint

System.Void Sunrdwuxic.IO.BufferDispatcher::RunBuffer()
Scope Name

Sunrdwuxic.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Sunrdwuxic
Assembly Version

1.0.1425.23612
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.6
Total Strings

1014
Main Method

System.Void Sunrdwuxic.IO.BufferDispatcher::RunBuffer()
Main IL Instruction Count

187
Main IL

ldc.i4 7 stloc V_4 br IL_000E: ldloc V_4 ldloc V_4 switch dnlib.DotNet.Emit.Instruction[] br IL_0321: newobj System.Void Sunrdwuxic.RecommendationSystems.IsolatedRecommender::.ctor() newobj System.Void Byxajhmn.Monitoring.WatcherGateway::.ctor() stloc.s V_9 ldc.i4 1 ldsfld <Module>{521428b5-0541-4566-a91c-46f095cf5d29} <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_e7c76ffbfad748af96a0f997e5a47209 ldfld System.Int32 <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_5175c442c0244731aeacc2d6856bc83c brfalse IL_0012: switch(IL_0321,IL_00C1,IL_006E,IL_0048,IL_0278,IL_00DC,IL_00F3,IL_0097,IL_00FE,IL_00F2,IL_00AC) pop <null> ldc.i4 1 br IL_0012: switch(IL_0321,IL_00C1,IL_006E,IL_0048,IL_0278,IL_00DC,IL_00F3,IL_0097,IL_00FE,IL_00F2,IL_00AC) ldnull <null> ldloc.s V_10 newobj System.Void Byxajhmn.Modules.ModuleWorker::.ctor(System.String,System.Version) stloc.s V_7 ldc.i4 0 ldsfld <Module>{521428b5-0541-4566-a91c-46f095cf5d29} <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_e7c76ffbfad748af96a0f997e5a47209 ldfld System.Int32 <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_1e2fb0bed0c24482a06515461b1ee67b brtrue IL_0012: switch(IL_0321,IL_00C1,IL_006E,IL_0048,IL_0278,IL_00DC,IL_00F3,IL_0097,IL_00FE,IL_00F2,IL_00AC) pop <null> ldc.i4 0 br IL_0012: switch(IL_0321,IL_00C1,IL_006E,IL_0048,IL_0278,IL_00DC,IL_00F3,IL_0097,IL_00FE,IL_00F2,IL_00AC) nop <null> ldc.i4 4032 call System.Void System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType) ldc.i4 6 br IL_0012: switch(IL_0321,IL_00C1,IL_006E,IL_0048,IL_0278,IL_00DC,IL_00F3,IL_0097,IL_00FE,IL_00F2,IL_00AC) newobj System.Void Byxajhmn.Monitoring.WatcherMatcher::.ctor() stloc.s V_11 ldc.i4 3 stloc V_4 br IL_000E: ldloc V_4 ldloc.s V_3 ldloc.s V_11 ldloc.s V_9 newobj System.Void Sunrdwuxic.IO.EfficientBuffer::.ctor(Sunrdwuxic.RecommendationSystems.IsolatedRecommender,Byxajhmn.Monitoring.WatcherMatcher,Byxajhmn.Monitoring.WatcherGateway) stloc.s V_6 ldc.i4 8 stloc V_4 br IL_000E: ldloc V_4 ldstr 1.4.1 newobj System.Void System.Version::.ctor(System.String) stloc.s V_10 ldc.i4 2 br IL_0012: switch(IL_0321,IL_00C1,IL_006E,IL_0048,IL_0278,IL_00DC,IL_00F3,IL_0097,IL_00FE,IL_00F2,IL_00AC) ret <null> nop <null> ldc.i4 4 br IL_0012: switch(IL_0321,IL_00C1,IL_006E,IL_0048,IL_0278,IL_00DC,IL_00F3,IL_0097,IL_00FE,IL_00F2,IL_00AC) nop <null> nop <null> ldloc.s V_7 ldloc.s V_6 ldftn System.Void Sunrdwuxic.IO.EfficientBuffer::StoreSeparatedBuffer(System.Object,Byxajhmn.Specifications.SpecTracker) newobj System.Void System.EventHandler`1<Byxajhmn.Specifications.SpecTracker>::.ctor(System.Object,System.IntPtr) callvirt System.Void Byxajhmn.Modules.ModuleWorker::AnalyzeModule(System.EventHandler`1<Byxajhmn.Specifications.SpecTracker>) ldc.i4 2 br IL_0122: switch(IL_0140,IL_0167,IL_019B,IL_01CF,IL_0203) ldloc V_1 switch dnlib.DotNet.Emit.Instruction[] br IL_0140: nop nop <null> ldloc.s V_7 callvirt System.Void Byxajhmn.Modules.ModuleWorker::WatchModule() ldc.i4 4 ldsfld <Module>{521428b5-0541-4566-a91c-46f095cf5d29} <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_e7c76ffbfad748af96a0f997e5a47209 ldfld System.Int32 <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_5840407ff8b94338a844097a35d35a34 brtrue IL_0122: switch(IL_0140,IL_0167,IL_019B,IL_01CF,IL_0203) pop <null> ldc.i4 2 br IL_0122: switch(IL_0140,IL_0167,IL_019B,IL_01CF,IL_0203) nop <null> ldloc.s V_9 ldloc.s V_6 ldftn System.Void Sunrdwuxic.IO.EfficientBuffer::PopBuffer(System.Object,Sunrdwuxic.Execution.ConcreteCommand) newobj System.Void System.EventHandler`1<Sunrdwuxic.Execution.ConcreteCommand>::.ctor(System.Object,System.IntPtr) callvirt System.Void Byxajhmn.Monitoring.WatcherGateway::EnableWatcher(System.EventHandler`1<Sunrdwuxic.Execution.ConcreteCommand>) ldc.i4 0 ldsfld <Module>{521428b5-0541-4566-a91c-46f095cf5d29} <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_e7c76ffbfad748af96a0f997e5a47209 ldfld System.Int32 <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_be784f8a6f96446cbd3f84267547a257 brtrue IL_0122: switch(IL_0140,IL_0167,IL_019B,IL_01CF,IL_0203) pop <null> ldc.i4 0 br IL_0122: switch(IL_0140,IL_0167,IL_019B,IL_01CF,IL_0203) nop <null> ldloc.s V_3 ldloc.s V_6 ldftn System.Void Sunrdwuxic.IO.EfficientBuffer::MonitorBuffer(System.Object,Byxajhmn.Proxies.ClientProxy) newobj System.Void System.EventHandler`1<Byxajhmn.Proxies.ClientProxy>::.ctor(System.Object,System.IntPtr) callvirt System.Void Sunrdwuxic.RecommendationSystems.IsolatedRecommender::DeclineConvertibleRecommender(System.EventHandler`1<Byxajhmn.Proxies.ClientProxy>) ldc.i4 0 ldsfld <Module>{521428b5-0541-4566-a91c-46f095cf5d29} <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_e7c76ffbfad748af96a0f997e5a47209 ldfld System.Int32 <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_7bc7e2d0cc1a48a6af68d0a0b4f80711 brfalse IL_0122: switch(IL_0140,IL_0167,IL_019B,IL_01CF,IL_0203) pop <null> ldc.i4 3 br IL_0122: switch(IL_0140,IL_0167,IL_019B,IL_01CF,IL_0203) nop <null> ldloc.s V_11 ldloc.s V_6 ldftn System.Void Sunrdwuxic.IO.EfficientBuffer::BufferExpandableBuffer(System.Object,Byxajhmn.Visitors.AttributeVisitor) newobj System.Void System.EventHandler`1<Byxajhmn.Visitors.AttributeVisitor>::.ctor(System.Object,System.IntPtr) callvirt System.Void Byxajhmn.Monitoring.WatcherMatcher::MonitorVisibleWatcher(System.EventHandler`1<Byxajhmn.Visitors.AttributeVisitor>) ldc.i4 1 ldsfld <Module>{521428b5-0541-4566-a91c-46f095cf5d29} <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_e7c76ffbfad748af96a0f997e5a47209 ldfld System.Int32 <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_a05081c6532341b2b05dad30867368a0 brtrue IL_0122: switch(IL_0140,IL_0167,IL_019B,IL_01CF,IL_0203) pop <null> ldc.i4 1 br IL_0122: switch(IL_0140,IL_0167,IL_019B,IL_01CF,IL_0203) nop <null> nop <null> leave IL_00F2: ret ldloc.s V_6 brfalse IL_026D: endfinally ldc.i4 0 ldsfld <Module>{521428b5-0541-4566-a91c-46f095cf5d29} <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_e7c76ffbfad748af96a0f997e5a47209 ldfld System.Int32 <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_5840407ff8b94338a844097a35d35a34 brfalse IL_0234: switch(IL_0246,IL_026C) pop <null> ldc.i4 0 br IL_0234: switch(IL_0246,IL_026C) ldloc V_2 switch dnlib.DotNet.Emit.Instruction[] br IL_0246: ldloc.s V_6 ldloc.s V_6 callvirt System.Void System.IDisposable::Dispose() ldc.i4 0 ldsfld <Module>{521428b5-0541-4566-a91c-46f095cf5d29} <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_e7c76ffbfad748af96a0f997e5a47209 ldfld System.Int32 <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_794660c719df457382419259ec324d48 brfalse IL_0234: switch(IL_0246,IL_026C) pop <null> ldc.i4 1 br IL_0234: switch(IL_0246,IL_026C) nop <null> endfinally <null> ldc.i4 9 br IL_0012: switch(IL_0321,IL_00C1,IL_006E,IL_0048,IL_0278,IL_00DC,IL_00F3,IL_0097,IL_00FE,IL_00F2,IL_00AC) nop <null> nop <null> ldsfld System.Object Sunrdwuxic.Structures.RecordSpec::m_DetailedRecords stloc.s V_0 ldc.i4 1 ldsfld <Module>{521428b5-0541-4566-a91c-46f095cf5d29} <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_e7c76ffbfad748af96a0f997e5a47209 ldfld System.Int32 <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_a05081c6532341b2b05dad30867368a0 brfalse IL_02A4: switch(IL_02D8,IL_02B6) pop <null> ldc.i4 1 br IL_02A4: switch(IL_02D8,IL_02B6) ldloc V_8 switch dnlib.DotNet.Emit.Instruction[] br IL_02D8: nop ldnull <null> stloc.s V_0 ldc.i4 0 ldsfld <Module>{521428b5-0541-4566-a91c-46f095cf5d29} <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_e7c76ffbfad748af96a0f997e5a47209 ldfld System.Int32 <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_63ede66ed2394e6580dd59391ccf8449 brtrue IL_02A4: switch(IL_02D8,IL_02B6) pop <null> ldc.i4 0 br IL_02A4: switch(IL_02D8,IL_02B6) nop <null> leave IL_00DC: ldstr "1.4.1" pop <null> ldc.i4 0 ldsfld <Module>{521428b5-0541-4566-a91c-46f095cf5d29} <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_e7c76ffbfad748af96a0f997e5a47209 ldfld System.Int32 <Module>{521428b5-0541-4566-a91c-46f095cf5d29}::m_df091f8e34cc42d7a927dd4a188bd464 brtrue IL_0302: switch(IL_0310) pop <null> ldc.i4 0 br IL_0302: switch(IL_0310) ldloc V_5 switch dnlib.DotNet.Emit.Instruction[] br IL_0310: nop nop <null> nop <null> leave IL_00DC: ldstr "1.4.1" ldc.i4 5 br IL_0012: switch(IL_0321,IL_00C1,IL_006E,IL_0048,IL_0278,IL_00DC,IL_00F3,IL_0097,IL_00FE,IL_00F2,IL_00AC) newobj System.Void Sunrdwuxic.RecommendationSystems.IsolatedRecommender::.ctor() stloc.s V_3 ldc.i4 10 br IL_0012: switch(IL_0321,IL_00C1,IL_006E,IL_0048,IL_0278,IL_00DC,IL_00F3,IL_0097,IL_00FE,IL_00F2,IL_00AC)
bf10c0880ff642e5677f85fb06fea67a (53.76 KB)
File Structure
bf10c0880ff642e5677f85fb06fea67a
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙