Suspicious
Suspect

c8cb63e00ad306d756e260630710b9f0

PE Executable
|
MD5: c8cb63e00ad306d756e260630710b9f0
|
Size: 766.46 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Very high

Hash
Hash Value
MD5
c8cb63e00ad306d756e260630710b9f0
Sha1
348949843761cefb1304ae756963a2913e1a884e
Sha256
f2d6c54e4f79f143603d12eb00e6b4cbe9631ffa9f7c9de50fcecbc3a6b133d8
Sha384
990301f5728368f8bb90c2a745c302bc68de557e5530af7262ce49bb3190b469f68d0111991195452fdea90b74822cbf
Sha512
17918e4d67fd43aac3c36e08c153cfe0a5bce3bc21ddfe4301668f1e12fe262926d42ac7a655f097f4f721a9fcda422f44001e9d10a6b4dff6c7fb52d8901e5e
SSDeep
12288:w1GopAIH2JpA8QLn4G2yOrCQ4Js0Cc3Au4YucSi2EgB:01v0GuaJCQAH7cc
TLSH
1CF46B152B988D01D140363D89BD3B09C725AEF12452A7533B0AFE91ED26DDEED3CAC6

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0006
ID:0
ID:0007
ID:0
ID:0008
ID:0
ID:0009
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
p9jbt2y
tkmx3kjspu210mf6rmewmtpuz3ltc
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

Client.exe

Full Name

Client.exe

EntryPoint

System.Void wxurLLUeKhRo.iZUCdiAQrhBkHcrS::LmWyzeRJLxpD(System.String[])

Scope Name

Client.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

Client

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0

Total Strings

618

Main Method

System.Void wxurLLUeKhRo.iZUCdiAQrhBkHcrS::LmWyzeRJLxpD(System.String[])

Main IL Instruction Count

167

Main IL

call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::yMFRLjozxfRQlQjcXZnielHF() stloc V_3 br IL_003F: br IL_000E nop <null> ldloc V_3 call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::eYNPykBQmTdircHLAoaZ() ceq <null> brfalse IL_0029: nop nop <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::UnSRACuCSMFAkgKak() stloc V_3 nop <null> ldloc V_3 call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::vQAywGugwgXdxhfHJluxxiGOU() ceq <null> brfalse IL_003F: br IL_000E br IL_0044: call System.Void wxurLLUeKhRo.SpiVIroVdmoIoNWNBhHnuh::EFrYVjMLbpiiCb() br IL_000E: nop call System.Void wxurLLUeKhRo.SpiVIroVdmoIoNWNBhHnuh::EFrYVjMLbpiiCb() call System.Void wxurLLUeKhRo.JARgcDelkNnNFwyVOLesXi::joCVsQYDOdcahWZZwyyo() ldsfld System.String wxurLLUeKhRo.SpiVIroVdmoIoNWNBhHnuh::uwRFJlfHLaIb call System.String wxurLLUeKhRo.XoEHUJYFnloeKD::QENtpIkzXgRTPZEYP() call System.String ARzQAdhGXQtZNHxlb.atoHNNEQhFUVOvVNWqDtJiLwu::GPQnZkyrcdmQhZmjKtJSNK(System.String) call System.Boolean System.String::op_Equality(System.String,System.String) brfalse IL_006C: ldsfld System.String wxurLLUeKhRo.SpiVIroVdmoIoNWNBhHnuh::zeEwfdPMCvvHZY call System.Void YwLPMdqIxhvEiFcMOpwb.MSZJDkvmpBUxFos::TERglNHYXIAQ() ldsfld System.String wxurLLUeKhRo.SpiVIroVdmoIoNWNBhHnuh::zeEwfdPMCvvHZY call System.Boolean QXftpLuzvAnWGoZGfMeSr.QifExKenpV::wpYNRHvVmVwyvNpSRkBy(System.String) brtrue IL_0080: call System.Void NJnwAtQNutvvpMJcAFkFRq.gQuhOEWbAwqra::cJWXxHfGLB() leave IL_0283: ret call System.Void NJnwAtQNutvvpMJcAFkFRq.gQuhOEWbAwqra::cJWXxHfGLB() call System.Void TyQEYjOESIngiAL.anxogeqYNnrti::BEuDiyPWrWgYcrWhxdnPPHS() ldsfld wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac wxurLLUeKhRo.iZUCdiAQrhBkHcrS::YWehiQhOJHWeXgJCIQQ ldfld System.Boolean wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac::CcyPjdpzzD brtrue IL_026E: call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::RNepniOeNiWJemRkl() ldsfld System.String wxurLLUeKhRo.SpiVIroVdmoIoNWNBhHnuh::roVhlmKqDwVpZTeAJ call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::XiGvwlPpeJZV() newarr System.Char dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::MXUFNeoPYUdWZfnBNJmepiL() call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::BklNHCViouiZddsjf() stelem.i2 <null> callvirt System.String[] System.String::Split(System.Char[]) stloc V_0 ldloc V_0 ldsfld System.Random TyQEYjOESIngiAL.anxogeqYNnrti::gooMJtHXKWiYPhgzJSzoZdW ldloc V_0 ldlen <null> conv.i4 <null> callvirt System.Int32 System.Random::Next(System.Int32) ldelem System.String call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::yNcYWFcnRzmrBeMvDdtaHWy() newarr System.Char dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::ifxOYkRCyyjxwcNglUlWvwtD() call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::hZOqFkcPhpqIO() stelem.i2 <null> callvirt System.String[] System.String::Split(System.Char[]) stloc V_1 ldloc V_1 call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::hijsDuOyaQMpml() ldelem System.String call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::AmmtBqKCMtNHiPnWYW() newarr System.Char dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::DnLDpJxiyyd() call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::xrmgDEOMXWgXzp() stelem.i2 <null> callvirt System.String[] System.String::Split(System.Char[]) stloc V_2 ldsfld wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac wxurLLUeKhRo.iZUCdiAQrhBkHcrS::YWehiQhOJHWeXgJCIQQ callvirt System.Void wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac::lhUwmEnEbpMvcWrDc() ldsfld wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac wxurLLUeKhRo.iZUCdiAQrhBkHcrS::YWehiQhOJHWeXgJCIQQ ldloc V_1 call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::gjntoShhppiwjDHLDidQPw() ldelem System.String ldloc V_2 ldsfld System.Random TyQEYjOESIngiAL.anxogeqYNnrti::gooMJtHXKWiYPhgzJSzoZdW ldloc V_2 ldlen <null> conv.i4 <null> callvirt System.Int32 System.Random::Next(System.Int32) ldelem System.String callvirt System.Void wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac::ogLDXeqpEmG(System.String,System.String) ldsfld wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac wxurLLUeKhRo.iZUCdiAQrhBkHcrS::YWehiQhOJHWeXgJCIQQ ldfld System.Boolean wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac::CcyPjdpzzD brfalse IL_026E: call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::RNepniOeNiWJemRkl() ldsfld wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac wxurLLUeKhRo.iZUCdiAQrhBkHcrS::YWehiQhOJHWeXgJCIQQ ldsfld wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac wxurLLUeKhRo.iZUCdiAQrhBkHcrS::YWehiQhOJHWeXgJCIQQ newobj System.Void TyQEYjOESIngiAL.WNhUotwSDqOQmALPsEBZDZV::.ctor(wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac) stfld TyQEYjOESIngiAL.WNhUotwSDqOQmALPsEBZDZV wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac::LcVefAkromRqtYz ldsfld wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac wxurLLUeKhRo.iZUCdiAQrhBkHcrS::YWehiQhOJHWeXgJCIQQ ldsfld wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac wxurLLUeKhRo.iZUCdiAQrhBkHcrS::YWehiQhOJHWeXgJCIQQ newobj System.Void YwLPMdqIxhvEiFcMOpwb.YvvboUzXmgEwRkRr::.ctor(wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac) stfld YwLPMdqIxhvEiFcMOpwb.YvvboUzXmgEwRkRr wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac::gFVJDeBtRroyw ldsfld wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac wxurLLUeKhRo.iZUCdiAQrhBkHcrS::YWehiQhOJHWeXgJCIQQ call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::jSJJhgGnEAWRzKFowQJw() newarr System.Object dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::VHeJPLcoVZXjBEafIzAiBdv() call System.String wxurLLUeKhRo.XoEHUJYFnloeKD::kOxtHPidsOOXv() call System.String ARzQAdhGXQtZNHxlb.atoHNNEQhFUVOvVNWqDtJiLwu::GPQnZkyrcdmQhZmjKtJSNK(System.String) stelem.ref <null> dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::lIAyugzFzqNKeA() call System.Byte[] TyQEYjOESIngiAL.anxogeqYNnrti::jqkrebWMdysdsCzCsvh() stelem.ref <null> dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::VdzibyixGeJoQJO() ldsfld System.String wxurLLUeKhRo.SpiVIroVdmoIoNWNBhHnuh::vEnRupTlIFtYTGcXYjt stelem.ref <null> dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::rLQXHKeuoZRkKqQAHheECv() ldsfld System.String wxurLLUeKhRo.SpiVIroVdmoIoNWNBhHnuh::pFGBmqguueIIABqPo stelem.ref <null> dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::ODLuUksjwlAWyNdK() call System.String System.Environment::get_UserName() call System.String wxurLLUeKhRo.XoEHUJYFnloeKD::DSahKkeDTY() call System.String ARzQAdhGXQtZNHxlb.atoHNNEQhFUVOvVNWqDtJiLwu::GPQnZkyrcdmQhZmjKtJSNK(System.String) call System.String System.Environment::get_MachineName() call System.String System.String::Concat(System.String,System.String,System.String) stelem.ref <null> dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::zEuChxnPOIgie() ldsfld System.String wxurLLUeKhRo.SpiVIroVdmoIoNWNBhHnuh::EJCnplNQFwQsNImm stelem.ref <null> dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::nwrCTvPKJvpV() ldsfld System.String wxurLLUeKhRo.SpiVIroVdmoIoNWNBhHnuh::jANmKoHgqUQsyhbIlwhyR stelem.ref <null> dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::JURmeXTFxBShGYeGbMARcNZHL() ldsfld System.String wxurLLUeKhRo.SpiVIroVdmoIoNWNBhHnuh::wYiYaMahSHZKlykiuVv stelem.ref <null> dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::OvpuyMLydvwW() ldsfld System.String wxurLLUeKhRo.SpiVIroVdmoIoNWNBhHnuh::CLDKffaJSL stelem.ref <null> dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::LLDpvZUNXl() ldsfld System.String wxurLLUeKhRo.SpiVIroVdmoIoNWNBhHnuh::yQxYGOpkbMFn stelem.ref <null> dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::hjpDWvuJaVI() ldsfld System.String wxurLLUeKhRo.SpiVIroVdmoIoNWNBhHnuh::HmKqzpghFAuTPrrpkauf stelem.ref <null> dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::PCCFWHujJFKpFYYei() ldsfld System.String wxurLLUeKhRo.SpiVIroVdmoIoNWNBhHnuh::SSMMYKukKZY stelem.ref <null> dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::vqKlNOXIchAmvgConmsTxGd() ldsfld System.String wxurLLUeKhRo.SpiVIroVdmoIoNWNBhHnuh::vSBXPDvGgxQidY stelem.ref <null> dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::ucYzxyXPbi() call System.String TyQEYjOESIngiAL.anxogeqYNnrti::lklPURJOQnFNRNuzVoD() stelem.ref <null> call System.Byte[] oWQOUZlyNATL.hvBtftnueWQ::BXUZtSqLyYfrTrYM(System.Object[]) callvirt System.Void wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac::zqqKIFVMLEdORUSedoAqYEhGm(System.Byte[]) call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::RNepniOeNiWJemRkl() call System.Void System.Threading.Thread::Sleep(System.Int32) br IL_008A: ldsfld wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac wxurLLUeKhRo.iZUCdiAQrhBkHcrS::YWehiQhOJHWeXgJCIQQ pop <null> leave IL_0283: ret ret <null>

Module Name

Client.exe

Full Name

Client.exe

EntryPoint

System.Void wxurLLUeKhRo.iZUCdiAQrhBkHcrS::LmWyzeRJLxpD(System.String[])

Scope Name

Client.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

Client

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0

Total Strings

618

Main Method

System.Void wxurLLUeKhRo.iZUCdiAQrhBkHcrS::LmWyzeRJLxpD(System.String[])

Main IL Instruction Count

167

Main IL

call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::yMFRLjozxfRQlQjcXZnielHF() stloc V_3 br IL_003F: br IL_000E nop <null> ldloc V_3 call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::eYNPykBQmTdircHLAoaZ() ceq <null> brfalse IL_0029: nop nop <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::UnSRACuCSMFAkgKak() stloc V_3 nop <null> ldloc V_3 call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::vQAywGugwgXdxhfHJluxxiGOU() ceq <null> brfalse IL_003F: br IL_000E br IL_0044: call System.Void wxurLLUeKhRo.SpiVIroVdmoIoNWNBhHnuh::EFrYVjMLbpiiCb() br IL_000E: nop call System.Void wxurLLUeKhRo.SpiVIroVdmoIoNWNBhHnuh::EFrYVjMLbpiiCb() call System.Void wxurLLUeKhRo.JARgcDelkNnNFwyVOLesXi::joCVsQYDOdcahWZZwyyo() ldsfld System.String wxurLLUeKhRo.SpiVIroVdmoIoNWNBhHnuh::uwRFJlfHLaIb call System.String wxurLLUeKhRo.XoEHUJYFnloeKD::QENtpIkzXgRTPZEYP() call System.String ARzQAdhGXQtZNHxlb.atoHNNEQhFUVOvVNWqDtJiLwu::GPQnZkyrcdmQhZmjKtJSNK(System.String) call System.Boolean System.String::op_Equality(System.String,System.String) brfalse IL_006C: ldsfld System.String wxurLLUeKhRo.SpiVIroVdmoIoNWNBhHnuh::zeEwfdPMCvvHZY call System.Void YwLPMdqIxhvEiFcMOpwb.MSZJDkvmpBUxFos::TERglNHYXIAQ() ldsfld System.String wxurLLUeKhRo.SpiVIroVdmoIoNWNBhHnuh::zeEwfdPMCvvHZY call System.Boolean QXftpLuzvAnWGoZGfMeSr.QifExKenpV::wpYNRHvVmVwyvNpSRkBy(System.String) brtrue IL_0080: call System.Void NJnwAtQNutvvpMJcAFkFRq.gQuhOEWbAwqra::cJWXxHfGLB() leave IL_0283: ret call System.Void NJnwAtQNutvvpMJcAFkFRq.gQuhOEWbAwqra::cJWXxHfGLB() call System.Void TyQEYjOESIngiAL.anxogeqYNnrti::BEuDiyPWrWgYcrWhxdnPPHS() ldsfld wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac wxurLLUeKhRo.iZUCdiAQrhBkHcrS::YWehiQhOJHWeXgJCIQQ ldfld System.Boolean wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac::CcyPjdpzzD brtrue IL_026E: call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::RNepniOeNiWJemRkl() ldsfld System.String wxurLLUeKhRo.SpiVIroVdmoIoNWNBhHnuh::roVhlmKqDwVpZTeAJ call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::XiGvwlPpeJZV() newarr System.Char dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::MXUFNeoPYUdWZfnBNJmepiL() call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::BklNHCViouiZddsjf() stelem.i2 <null> callvirt System.String[] System.String::Split(System.Char[]) stloc V_0 ldloc V_0 ldsfld System.Random TyQEYjOESIngiAL.anxogeqYNnrti::gooMJtHXKWiYPhgzJSzoZdW ldloc V_0 ldlen <null> conv.i4 <null> callvirt System.Int32 System.Random::Next(System.Int32) ldelem System.String call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::yNcYWFcnRzmrBeMvDdtaHWy() newarr System.Char dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::ifxOYkRCyyjxwcNglUlWvwtD() call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::hZOqFkcPhpqIO() stelem.i2 <null> callvirt System.String[] System.String::Split(System.Char[]) stloc V_1 ldloc V_1 call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::hijsDuOyaQMpml() ldelem System.String call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::AmmtBqKCMtNHiPnWYW() newarr System.Char dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::DnLDpJxiyyd() call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::xrmgDEOMXWgXzp() stelem.i2 <null> callvirt System.String[] System.String::Split(System.Char[]) stloc V_2 ldsfld wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac wxurLLUeKhRo.iZUCdiAQrhBkHcrS::YWehiQhOJHWeXgJCIQQ callvirt System.Void wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac::lhUwmEnEbpMvcWrDc() ldsfld wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac wxurLLUeKhRo.iZUCdiAQrhBkHcrS::YWehiQhOJHWeXgJCIQQ ldloc V_1 call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::gjntoShhppiwjDHLDidQPw() ldelem System.String ldloc V_2 ldsfld System.Random TyQEYjOESIngiAL.anxogeqYNnrti::gooMJtHXKWiYPhgzJSzoZdW ldloc V_2 ldlen <null> conv.i4 <null> callvirt System.Int32 System.Random::Next(System.Int32) ldelem System.String callvirt System.Void wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac::ogLDXeqpEmG(System.String,System.String) ldsfld wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac wxurLLUeKhRo.iZUCdiAQrhBkHcrS::YWehiQhOJHWeXgJCIQQ ldfld System.Boolean wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac::CcyPjdpzzD brfalse IL_026E: call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::RNepniOeNiWJemRkl() ldsfld wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac wxurLLUeKhRo.iZUCdiAQrhBkHcrS::YWehiQhOJHWeXgJCIQQ ldsfld wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac wxurLLUeKhRo.iZUCdiAQrhBkHcrS::YWehiQhOJHWeXgJCIQQ newobj System.Void TyQEYjOESIngiAL.WNhUotwSDqOQmALPsEBZDZV::.ctor(wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac) stfld TyQEYjOESIngiAL.WNhUotwSDqOQmALPsEBZDZV wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac::LcVefAkromRqtYz ldsfld wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac wxurLLUeKhRo.iZUCdiAQrhBkHcrS::YWehiQhOJHWeXgJCIQQ ldsfld wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac wxurLLUeKhRo.iZUCdiAQrhBkHcrS::YWehiQhOJHWeXgJCIQQ newobj System.Void YwLPMdqIxhvEiFcMOpwb.YvvboUzXmgEwRkRr::.ctor(wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac) stfld YwLPMdqIxhvEiFcMOpwb.YvvboUzXmgEwRkRr wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac::gFVJDeBtRroyw ldsfld wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac wxurLLUeKhRo.iZUCdiAQrhBkHcrS::YWehiQhOJHWeXgJCIQQ call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::jSJJhgGnEAWRzKFowQJw() newarr System.Object dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::VHeJPLcoVZXjBEafIzAiBdv() call System.String wxurLLUeKhRo.XoEHUJYFnloeKD::kOxtHPidsOOXv() call System.String ARzQAdhGXQtZNHxlb.atoHNNEQhFUVOvVNWqDtJiLwu::GPQnZkyrcdmQhZmjKtJSNK(System.String) stelem.ref <null> dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::lIAyugzFzqNKeA() call System.Byte[] TyQEYjOESIngiAL.anxogeqYNnrti::jqkrebWMdysdsCzCsvh() stelem.ref <null> dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::VdzibyixGeJoQJO() ldsfld System.String wxurLLUeKhRo.SpiVIroVdmoIoNWNBhHnuh::vEnRupTlIFtYTGcXYjt stelem.ref <null> dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::rLQXHKeuoZRkKqQAHheECv() ldsfld System.String wxurLLUeKhRo.SpiVIroVdmoIoNWNBhHnuh::pFGBmqguueIIABqPo stelem.ref <null> dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::ODLuUksjwlAWyNdK() call System.String System.Environment::get_UserName() call System.String wxurLLUeKhRo.XoEHUJYFnloeKD::DSahKkeDTY() call System.String ARzQAdhGXQtZNHxlb.atoHNNEQhFUVOvVNWqDtJiLwu::GPQnZkyrcdmQhZmjKtJSNK(System.String) call System.String System.Environment::get_MachineName() call System.String System.String::Concat(System.String,System.String,System.String) stelem.ref <null> dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::zEuChxnPOIgie() ldsfld System.String wxurLLUeKhRo.SpiVIroVdmoIoNWNBhHnuh::EJCnplNQFwQsNImm stelem.ref <null> dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::nwrCTvPKJvpV() ldsfld System.String wxurLLUeKhRo.SpiVIroVdmoIoNWNBhHnuh::jANmKoHgqUQsyhbIlwhyR stelem.ref <null> dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::JURmeXTFxBShGYeGbMARcNZHL() ldsfld System.String wxurLLUeKhRo.SpiVIroVdmoIoNWNBhHnuh::wYiYaMahSHZKlykiuVv stelem.ref <null> dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::OvpuyMLydvwW() ldsfld System.String wxurLLUeKhRo.SpiVIroVdmoIoNWNBhHnuh::CLDKffaJSL stelem.ref <null> dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::LLDpvZUNXl() ldsfld System.String wxurLLUeKhRo.SpiVIroVdmoIoNWNBhHnuh::yQxYGOpkbMFn stelem.ref <null> dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::hjpDWvuJaVI() ldsfld System.String wxurLLUeKhRo.SpiVIroVdmoIoNWNBhHnuh::HmKqzpghFAuTPrrpkauf stelem.ref <null> dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::PCCFWHujJFKpFYYei() ldsfld System.String wxurLLUeKhRo.SpiVIroVdmoIoNWNBhHnuh::SSMMYKukKZY stelem.ref <null> dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::vqKlNOXIchAmvgConmsTxGd() ldsfld System.String wxurLLUeKhRo.SpiVIroVdmoIoNWNBhHnuh::vSBXPDvGgxQidY stelem.ref <null> dup <null> call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::ucYzxyXPbi() call System.String TyQEYjOESIngiAL.anxogeqYNnrti::lklPURJOQnFNRNuzVoD() stelem.ref <null> call System.Byte[] oWQOUZlyNATL.hvBtftnueWQ::BXUZtSqLyYfrTrYM(System.Object[]) callvirt System.Void wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac::zqqKIFVMLEdORUSedoAqYEhGm(System.Byte[]) call System.Int32 wxurLLUeKhRo.XoEHUJYFnloeKD::RNepniOeNiWJemRkl() call System.Void System.Threading.Thread::Sleep(System.Int32) br IL_008A: ldsfld wxurLLUeKhRo.IocaNgAJieufbTgfxiKHmac wxurLLUeKhRo.iZUCdiAQrhBkHcrS::YWehiQhOJHWeXgJCIQQ pop <null> leave IL_0283: ret ret <null>

c8cb63e00ad306d756e260630710b9f0 (766.46 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙