Suspicious
Suspect

cd2d9126d52cfe4e4634facf0414a5ad

PE Executable
MD5: cd2d9126d52cfe4e4634facf0414a5ad
Size: 1.97 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Medium
MD5 cd2d9126d52cfe4e4634facf0414a5ad
Sha1 1f0599dad2f8fc1f8af225eb17980daa65303e04
Sha256 b3e01ecc1e0a7e485e7bb39ae0ebbb39875c4c1a39b2e9414cff53d07926f5e8
Sha384 9d2fe8126186c76036e6d082fc1f01bbcbbdccbb7fb7c16eb9c55c333e1e5e9cf977e3f606430463ef25258303348497
Sha512 e26c6c3673349fe0a0eb4a70e1bd438a8b1be9eb413335cde3b7e77b4a06176d42634d84ae442b39514eb87937301d1ef0820cb3a28e942ca37b664a6b63b54c
SSDeep 24576:AqUU+E0ny5Lco1GBzzPn0ATneqpwnslq0DQ6TV7b:TUU1XinLJwsv
TLSH 51957C2439FB502AB1B3EF664BE475D6DA6FB6333B07641E1091038A4723A81DED153E
PeID
Microsoft Visual C++ DLLMicrosoft Visual C++ v6.0
cd2d9126d52cfe4e4634facf0414a5ad
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rsrc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Unity.Interception.Properties.Resources.resources
Unity.Interception.package.snk
NeonBadminton.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
ILRepack.List
L×Xʋ͗̍ß̢̇̆ӧ̯͓̕Ε͓̊ͫͦλ̴͖с̐ʋ̒́ͅΚ͑̃Е̌е̸Ж̴͔ͬΡ̸͙͉о͉̲̏Ο̴͖͆X̷̫ͣT́̑̌̔1
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 3
Name Value
Module Name
LX_Xa5PgvOQoyyf5XPj
Full Name
LX_Xa5PgvOQoyyf5XPj
EntryPoint
System.Void BriefingRoom4DCS.Program::Main(System.String[])
Scope Name
LX_Xa5PgvOQoyyf5XPj
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
LX_Xa5PgvOQoyyf5XPj
Assembly Version
0.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.7.2
Info
PE Detect: PeReader OK (file layout)
Total Strings
48
Main Method
System.Void BriefingRoom4DCS.Program::Main(System.String[])
Main IL Instruction Count
451
Main IL 
ldc.i4.0 <null>
call System.String BriefingRoom4DCS.Toolbox::GetAlias(System.Int32)
pop <null>
ldc.i4.5 <null>
call System.String BriefingRoom4DCS.Toolbox::GetAlias(System.Int32)
pop <null>
ldc.i4 -2045542863
ldc.i4 2045542883
xor <null>
ldc.i4 36
ldc.i4.2 <null>
mul <null>
add <null>
call System.String BriefingRoom4DCS.Toolbox::GetAlias(System.Int32)
pop <null>
ldc.i4 -592377552
ldc.i4 -1564099118
ldc.i4 554755817
xor <null>
mul <null>
ldc.i4 73257
xor <null>
newobj System.Void System.Nullable`1<System.Int32>::.ctor(System.Int32)
call System.Void BriefingRoom4DCS.Toolbox::Reseed(System.Nullable`1<System.Int32>)
ldc.i4 81881
ldc.i4 140328473
ldc.i4 140351560
xor <null>
add <null>
ldc.i4 1273244815
ldc.i4 1273330184
xor <null>
xor <null>
ldc.i4 605306497
ldc.i4 605326882
xor <null>
sub <null>
ldc.i4 -1875852275
ldc.i4 2011656083
xor <null>
ldc.i4 1986945066
ldc.i4 1850094687
xor <null>
xor <null>
not <null>
call System.Int32 BriefingRoom4DCS.Toolbox::RandomInt(System.Int32,System.Int32)
pop <null>
call System.Double BriefingRoom4DCS.Toolbox::RandomDouble()
pop <null>
newobj System.Void System.Collections.Generic.List`1<System.String>::.ctor()
dup <null>
ldc.i4 183
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
callvirt System.Void System.Collections.Generic.List`1<System.String>::Add(System.String)
dup <null>
ldc.i4 184
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
callvirt System.Void System.Collections.Generic.List`1<System.String>::Add(System.String)
dup <null>
ldc.i4 185
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
callvirt System.Void System.Collections.Generic.List`1<System.String>::Add(System.String)
dup <null>
ldc.i4 186
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
callvirt System.Void System.Collections.Generic.List`1<System.String>::Add(System.String)
dup <null>
ldc.i4 187
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
callvirt System.Void System.Collections.Generic.List`1<System.String>::Add(System.String)
call System.Collections.Generic.List`1<System.String> BriefingRoom4DCS.Toolbox::ShuffleList<System.String>(System.Collections.Generic.List`1<System.String>)
pop <null>
ldc.i4 188
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
stloc.0 <null>
ldloc.0 <null>
call System.Collections.Generic.Dictionary`2<System.String,System.Object> BriefingRoom4DCS.Toolbox::ToDictionaryObject(System.String)
pop <null>
leave.s IL_0107: newobj System.Void Razorvine.Serpent.Parser::.ctor()
pop <null>
leave.s IL_0107: newobj System.Void Razorvine.Serpent.Parser::.ctor()
newobj System.Void Razorvine.Serpent.Parser::.ctor()
stloc.1 <null>
ldc.i4 641687054
ldc.i4 1446237372
xor <null>
ldc.i4 1879870122
xor <null>
newarr System.String
dup <null>
ldc.i4.0 <null>
ldc.i4 189
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
stelem.ref <null>
dup <null>
ldc.i4.1 <null>
ldc.i4 190
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
stelem.ref <null>
dup <null>
ldc.i4.2 <null>
ldc.i4 191
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
stelem.ref <null>
dup <null>
ldc.i4.3 <null>
ldc.i4 192
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
stelem.ref <null>
dup <null>
ldc.i4.4 <null>
ldc.i4 193
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
stelem.ref <null>
dup <null>
ldc.i4.5 <null>
ldc.i4 194
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
stelem.ref <null>
dup <null>
ldc.i4.6 <null>
ldc.i4 195
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
stelem.ref <null>
dup <null>
ldc.i4.7 <null>
ldc.i4 196
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
stelem.ref <null>
dup <null>
ldc.i4.8 <null>
ldc.i4 197
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
stelem.ref <null>
dup <null>
ldc.i4 718785169
ldc.i4 873048998
xor <null>
ldc.i4 517890350
sub <null>
ldc.i4 198
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
stelem.ref <null>
dup <null>
ldc.i4 537679076
not <null>
not <null>
ldc.i4 938398125
ldc.i4 400721219
xor <null>
xor <null>
ldc.i4 199
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
stelem.ref <null>
dup <null>
ldc.i4 -1206132571
ldc.i4 1206147273
xor <null>
neg <null>
ldc.i4 18313
sub <null>
ldc.i4 200
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
stelem.ref <null>
dup <null>
ldc.i4 -1932836768
ldc.i4 1932836755
xor <null>
not <null>
ldc.i4 201
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
stelem.ref <null>
dup <null>
ldc.i4 -2141058379
ldc.i4 1123207608
xor <null>
neg <null>
ldc.i4 1786333518
ldc.i4 1461089704
xor <null>
sub <null>
ldc.i4 202
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
stelem.ref <null>
dup <null>
ldc.i4 1690301221
ldc.i4 578624206
xor <null>
ldc.i4 1339794109
ldc.i4 468616396
xor <null>
xor <null>
ldc.i4 613553319
ldc.i4 1553894127
xor <null>
xor <null>
ldc.i4 1726876357
ldc.i4 202726169
xor <null>
xor <null>
ldc.i4 203
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
stelem.ref <null>
dup <null>
ldc.i4 1070112956
ldc.i4 1624346064
xor <null>
not <null>
ldc.i4 1595485539
xor <null>
not <null>
ldc.i4 204
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
stelem.ref <null>
dup <null>
ldc.i4 -2026234614
ldc.i4 1107752240
xor <null>
neg <null>
ldc.i4 1813574853
ldc.i4 1457251187
xor <null>
sub <null>
ldc.i4 205
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
stelem.ref <null>
dup <null>
ldc.i4 -1302780159
ldc.i4 1302762410
xor <null>
neg <null>
ldc.i4 610845463
ldc.i4 610830419
xor <null>
sub <null>
ldc.i4 206
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
stelem.ref <null>
dup <null>
ldc.i4 1172494903
ldc.i4 1172494885
xor <null>
ldc.i4 0
ldc.i4.2 <null>
mul <null>
sub <null>
ldc.i4 207
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
stelem.ref <null>
dup <null>
ldc.i4 354281623
ldc.i4 813745843
ldc.i4 983446425
xor <null>
sub <null>
ldc.i4 1495852079
ldc.i4 1406539601
xor <null>
xor <null>
ldc.i4 208
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
stelem.ref <null>
dup <null>
ldc.i4 274375007
ldc.i4 1141901834
xor <null>
not <null>
not <null>
ldc.i4 640060678
ldc.i4 1919690311
xor <null>
xor <null>
ldc.i4 209
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
stelem.ref <null>
dup <null>
ldc.i4 1165201523
ldc.i4 1553982982
xor <null>
ldc.i4 2062488900
ldc.i4 1661166372
xor <null>
sub <null>
ldc.i4 210
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
stelem.ref <null>
dup <null>
ldc.i4 47554
ldc.i4 1354834526
ldc.i4 1354865604
xor <null>
xor <null>
ldc.i4.2 <null>
shr <null>
ldc.i4 211
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
stelem.ref <null>
dup <null>
ldc.i4 -1333331202
ldc.i4 1333331449
xor <null>
ldc.i4 136
ldc.i4.2 <null>
mul <null>
add <null>
ldc.i4 212
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
stelem.ref <null>
stloc.s V_4
ldc.i4.0 <null>
stloc.s V_5
br.s IL_03C0: ldloc.s V_5
ldloc.s V_4
ldloc.s V_5
ldelem.ref <null>
stloc.s V_6
ldloc.1 <null>
ldloc.s V_6
callvirt Razorvine.Serpent.Ast Razorvine.Serpent.Parser::Parse(System.String)
pop <null>
leave.s IL_03BA: ldloc.s V_5
pop <null>
leave.s IL_03BA: ldloc.s V_5
ldloc.s V_5
ldc.i4.1 <null>
add <null>
stloc.s V_5
ldloc.s V_5
ldloc.s V_4
ldlen <null>
conv.i4 <null>
blt.s IL_03A5: ldloc.s V_4
newobj System.Void BriefingRoom4DCS.Character::.ctor()
dup <null>
ldc.i4 213
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
callvirt System.Void BriefingRoom4DCS.Character::set_Name(System.String)
dup <null>
ldc.i4 1305352502
ldc.i4 1350965290
ldc.i4 944681328
xor <null>
xor <null>
ldc.i4 1818891214
xor <null>
ldc.i4 1130667598
ldc.i4 168312207
xor <null>
xor <null>
stfld System.Int32 BriefingRoom4DCS.Character::Level
dup <null>
ldc.i4.1 <null>
stfld System.Boolean BriefingRoom4DCS.Character::IsActive
dup <null>
ldc.r4 123.45
stfld System.Single BriefingRoom4DCS.Character::Health
dup <null>
newobj System.Void System.Collections.Generic.List`1<System.String>::.ctor()
dup <null>
ldc.i4 214
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
callvirt System.Void System.Collections.Generic.List`1<System.String>::Add(System.String)
dup <null>
ldc.i4 215
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
callvirt System.Void System.Collections.Generic.List`1<System.String>::Add(System.String)
dup <null>
ldc.i4 216
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
callvirt System.Void System.Collections.Generic.List`1<System.String>::Add(System.String)
stfld System.Collections.Generic.List`1<System.String> BriefingRoom4DCS.Character::Skills
dup <null>
newobj System.Void BriefingRoom4DCS.Weapon::.ctor()
dup <null>
ldc.i4 217
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
callvirt System.Void BriefingRoom4DCS.Weapon::set_Name(System.String)
dup <null>
ldc.i4 -42789163
ldc.i4 1836980090
ldc.i4 1878195810
xor <null>
xor <null>
not <null>
stfld System.Int32 BriefingRoom4DCS.Weapon::Damage
stfld BriefingRoom4DCS.Weapon BriefingRoom4DCS.Character::EquippedWeapon
call System.String HoyoToon.Parser::Serialize(System.Object)
call BriefingRoom4DCS.Character HoyoToon.Parser::Deserialize<BriefingRoom4DCS.Character>(System.String)
pop <null>
ldc.i4 218
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
stloc.2 <null>
ldc.i4 219
call System.String <Module>::L×XḾ̬̙̏Ζ́ω̼͋Ζ̸͓͌В̫ͦω̴̹̣ɑ̜̈́Κ̸̸̣͑ʋ̖͉͈̓Ж͇̱А͐ͧОͮ7(System.Int32)
stloc.3 <null>
ldloc.3 <null>
ldloc.2 <null>
call System.Void System.IO.File::WriteAllText(System.String,System.String)
ldloc.3 <null>
call HoyoToon.AnimationParser/Animation HoyoToon.AnimationParser::Parse(System.String)
pop <null>
leave.s IL_04C9: ldc.i4.1
pop <null>
leave.s IL_04C9: ldc.i4.1
ldloc.3 <null>
call System.Boolean System.IO.File::Exists(System.String)
brfalse.s IL_04C8: endfinally
ldloc.3 <null>
call System.Void System.IO.File::Delete(System.String)
endfinally <null>
ldc.i4.1 <null>
call System.String BriefingRoom4DCS.Toolbox::GetOrdinalAdjective(System.Int32)
pop <null>
ldc.i4.2 <null>
call System.String BriefingRoom4DCS.Toolbox::GetOrdinalAdjective(System.Int32)
pop <null>
ldc.i4.3 <null>
call System.String BriefingRoom4DCS.Toolbox::GetOrdinalAdjective(System.Int32)
pop <null>
ldc.i4.4 <null>
call System.String BriefingRoom4DCS.Toolbox::GetOrdinalAdjective(System.Int32)
pop <null>
ldc.i4 589497343
ldc.i4 100075280
xor <null>
ldc.i4 945701289
ldc.i4 512378189
xor <null>
sub <null>
call System.String BriefingRoom4DCS.Toolbox::GetOrdinalAdjective(System.Int32)
pop <null>
ldc.i4 41630
ldc.i4 382898068
ldc.i4 382909431
xor <null>
sub <null>
ldc.i4 1659242180
ldc.i4 1659267305
xor <null>
xor <null>
call System.String BriefingRoom4DCS.Toolbox::GetOrdinalAdjective(System.Int32)
pop <null>
ldc.i4.0 <null>
call BriefingRoom4DCS.Data.Coalition BriefingRoom4DCS.Toolbox::GetEnemy(BriefingRoom4DCS.Data.Coalition)
pop <null>
ldc.i4.1 <null>
call BriefingRoom4DCS.Data.Coalition BriefingRoom4DCS.Toolbox::GetEnemy(BriefingRoom4DCS.Data.Coalition)
pop <null>
call System.ConsoleKeyInfo System.Console::ReadKey()
pop <null>
ret <null>
cd2d9126d52cfe4e4634facf0414a5ad
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rsrc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Unity.Interception.Properties.Resources.resources
Unity.Interception.package.snk
NeonBadminton.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
ILRepack.List
L×Xʋ͗̍ß̢̇̆ӧ̯͓̕Ε͓̊ͫͦλ̴͖с̐ʋ̒́ͅΚ͑̃Е̌е̸Ж̴͔ͬΡ̸͙͉о͉̲̏Ο̴͖͆X̷̫ͣT́̑̌̔1
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙