Symbol Obfuscation Score
|
Hash | Hash Value |
|---|---|
| MD5 | 03d282095ff0c474e582e26d65ec9139
|
| Sha1 | 9072dea651b6d68d53db5be11dd02b94f53b07f8
|
| Sha256 | 5bcf71623d9092f772c0c9947db516f0867eaf818ecb5775d76fbf93a2b7de85
|
| Sha384 | 94c1ef1285114c6c18432ebc153eaa000074c023990e971ca3f5ba8cf579c3e30d269ff84ea68414f1bece0fff71720e
|
| Sha512 | 205a14e47a6c3988025ce70d7a67cb40448ca6f18134c389443f1f9260f0f4dc4af112ae120ee7c6091a4a30b1323a73d4c26fa3948f847ec434de611336ac0a
|
| SSDeep | 12288:ZINV7iDG7sXsVtIZL06oImTEoF4e8cmXFUDgO2TKfHJEfM/E6P2VgBJzuPbyKOP:ZINxOoUCxIEF4Am1UB2TKf+6uVgBJ0b
|
| TLSH | AFF4CF219E872F48E62D0F78C02218686BF4D82767A7E66F6FFC51A169E7F44CE07411
|
PeID
|
Name0 | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Module Name | 5zwTyY4rWmt1p |
| Full Name | 5zwTyY4rWmt1p |
| EntryPoint | System.Void Jk3e1G.7sgGWb3m/gr9EN1pc.Qmd9zk::Kdy1ca2NeLi7Gg() |
| Scope Name | 5zwTyY4rWmt1p |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | 5zwTyY4rWmt1p |
| Assembly Version | 14.26.39.51 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.6 |
| Total Strings | 0 |
| Main Method | System.Void Jk3e1G.7sgGWb3m/gr9EN1pc.Qmd9zk::Kdy1ca2NeLi7Gg() |
| Main IL Instruction Count | 264 |
| Main IL | nop <null> br.s IL_0003: ldc.i4.3 ldc.i4.3 <null> stloc.s V_24 ldloc.s V_24 switch dnlib.DotNet.Emit.Instruction[] br.s IL_002F: nop nop <null> call System.Threading.Thread System.Threading.Thread::get_CurrentThread() callvirt System.Threading.ApartmentState System.Threading.Thread::GetApartmentState() ldc.i4.1 <null> ceq <null> stloc.s V_18 ldloc.s V_18 brfalse.s IL_0048: ldc.i4.4 ldc.i4.7 <null> stloc.s V_24 br.s IL_0006: ldloc.s V_24 ldc.i4.4 <null> br.s IL_0044: stloc.s V_24 call System.Threading.Thread System.Threading.Thread::get_CurrentThread() ldc.i4.0 <null> callvirt System.Void System.Threading.Thread::SetApartmentState(System.Threading.ApartmentState) nop <null> nop <null> ldc.i4.4 <null> stloc.s V_24 br.s IL_0006: ldloc.s V_24 nop <null> call System.Globalization.CultureInfo System.Globalization.CultureInfo::get_InvariantCulture() stloc.0 <null> ldloc.0 <null> call System.Void System.Globalization.CultureInfo::set_CurrentCulture(System.Globalization.CultureInfo) nop <null> ldloc.0 <null> call System.Void System.Globalization.CultureInfo::set_CurrentUICulture(System.Globalization.CultureInfo) nop <null> call System.Reflection.Assembly System.Reflection.Assembly::GetExecutingAssembly() stloc.1 <null> ldc.i4.2 <null> stloc.s V_24 br.s IL_0006: ldloc.s V_24 nop <null> ldnull <null> ldc.i4 703393589 ldc.i4.6 <null> ldc.i4 182 call System.String j_8JkLn24kq.6reJirS/bc5R3HdtE.yt8XJ2cwbzW95::Dqn8b9eQ0fAj(System.String,System.Int32,System.Int32,System.Char) stloc.2 <null> br.s IL_0092: br.s IL_0094 br.s IL_0094: ldc.i4.3 ldc.i4.3 <null> stloc.s V_26 ldloc.s V_26 switch dnlib.DotNet.Emit.Instruction[] br.s IL_00B4: nop nop <null> ldloc.1 <null> callvirt System.String System.Reflection.Assembly::get_Location() call System.Diagnostics.FileVersionInfo System.Diagnostics.FileVersionInfo::GetVersionInfo(System.String) stloc.s V_19 ldloc.s V_19 callvirt System.String System.Diagnostics.FileVersionInfo::get_FileVersion() stloc.2 <null> leave.s IL_00DD: br.s IL_00DF br.s IL_00CE: br.s IL_00D0 br.s IL_00D0: call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) nop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_00DD: br.s IL_00DF br.s IL_00DF: ldc.i4.s 10 ldc.i4.s 10 stloc.s V_28 ldloc.s V_28 switch dnlib.DotNet.Emit.Instruction[] br.s IL_0128: nop nop <null> ldc.i4.s 28 call System.String System.Environment::GetFolderPath(System.Environment/SpecialFolder) stloc.3 <null> ldloc.3 <null> nop <null> ldc.i4 1406787237 ldc.i4.8 <null> ldtoken Jk3e1G.7sgGWb3m/2Lbxt0Rt.Tn2msdY3fL call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) ldc.i4.s 21 call System.String 3tiPnE9b8jtW.Rf8t2Sik/Ywb9aT3.Wt9xdgP3aJ::Xkt2r6cC0qW(System.Int32,System.Int32,System.Type,System.Byte) nop <null> ldc.i4.7 <null> ldc.i4.3 <null> ldc.i4 1961288475 call System.String j_8JkLn24kq.6reJirS/bc5R3HdtE.yt8XJ2cwbzW95::Sr6iaQg3W5jzpX(System.Int32,System.Int32,System.Int32) call System.String System.IO.Path::Combine(System.String,System.String,System.String) stloc.s V_4 ldc.i4.8 <null> stloc.s V_28 br IL_00E3: ldloc.s V_28 ldloc.s V_4 call System.Boolean System.IO.Directory::Exists(System.String) ldc.i4.0 <null> ceq <null> stloc.s V_20 ldloc.s V_20 brfalse.s IL_017F: ldc.i4.s 14 ldc.i4.s 12 stloc.s V_28 br IL_00E3: ldloc.s V_28 ldc.i4.s 14 br.s IL_0178: stloc.s V_28 ldloc.s V_4 call System.IO.DirectoryInfo System.IO.Directory::CreateDirectory(System.String) pop <null> nop <null> ldc.i4.s 14 stloc.s V_28 br IL_00E3: ldloc.s V_28 nop <null> ldc.i4.1 <null> stloc.s V_5 ldc.r8 25 call System.Double System.Math::Floor(System.Double) conv.ovf.i4 <null> stloc.s V_6 ldloc.s V_6 ldc.i4.1 <null> sub.ovf <null> ldc.i4.1 <null> add.ovf <null> newarr System.Object stloc.s V_7 ldc.i4.1 <null> stloc.s V_28 br IL_00E3: ldloc.s V_28 call System.String sw1H6Dsnd0wNL.Gn8k1j::fYb9C2deqLa() call System.Byte[] sw1H6Dsnd0wNL.Gn8k1j::mKj48wyDFo3(System.String) stloc.s V_8 call System.Boolean System.Environment::get_UserInteractive() stloc.s V_9 ldc.i4 96071 stloc.s V_10 call System.Drawing.Rectangle System.Windows.Forms.SystemInformation::get_VirtualScreen() stloc.s V_21 ldloca.s V_21 call System.Int32 System.Drawing.Rectangle::get_Width() stloc.s V_11 ldc.i4.s 13 stloc.s V_28 br IL_00E3: ldloc.s V_28 ldloc.s V_8 castclass System.Byte[] ldloc.s V_10 call System.Object 0Hrqc7.Qz0a2onCtLd4r9::Tdn84X(System.Byte[],System.Int32) ldnull <null> nop <null> ldc.i4.s 12 ldc.i4.1 <null> ldc.i4 1961288465 call System.String j_8JkLn24kq.6reJirS/bc5R3HdtE.yt8XJ2cwbzW95::Sr6iaQg3W5jzpX(System.Int32,System.Int32,System.Int32) ldc.i4.0 <null> newarr System.Object ldnull <null> ldnull <null> ldnull <null> call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[]) castclass System.Byte[] stloc.s V_12 ldc.i4.7 <null> stloc.s V_28 br IL_00E3: ldloc.s V_28 ldloc.s V_7 ldloc.s V_6 ldc.i4.1 <null> sub.ovf <null> ldloc.s V_12 stelem.ref <null> ldc.i4.0 <null> call System.Int64 System.GC::GetTotalMemory(System.Boolean) ldc.i4 104857600 conv.i8 <null> cgt <null> stloc.s V_13 ldc.i4.6 <null> stloc.s V_28 br IL_00E3: ldloc.s V_28 call System.Drawing.Rectangle System.Windows.Forms.Cursor::get_Clip() stloc.s V_21 ldloca.s V_21 call System.Boolean System.Drawing.Rectangle::get_IsEmpty() stloc.s V_14 ldtoken System.Reflection.Assembly call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) stloc.s V_15 ldloc.s V_15 nop <null> ldc.i4.2 <null> ldc.i4 1076179653 ldnull <null> call System.String j_8JkLn24kq.6reJirS::6PdtEk2i3(System.Int32,System.Int32,j_8JkLn24kq.6reJirS) ldc.i4.1 <null> newarr System.Type dup <null> ldc.i4.0 <null> ldtoken System.Byte[] call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) stelem.ref <null> callvirt System.Reflection.MethodInfo System.Type::GetMethod(System.String,System.Type[]) stloc.s V_16 ldc.i4.3 <null> stloc.s V_28 br IL_00E3: ldloc.s V_28 ldloc.s V_16 ldnull <null> ldc.i4.1 <null> newarr System.Object dup <null> ldc.i4.0 <null> ldloc.s V_7 ldloc.s V_6 ldc.i4.1 <null> sub.ovf <null> ldelem.ref <null> stelem.ref <null> callvirt System.Object System.Reflection.MethodBase::Invoke(System.Object,System.Object[]) call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object) stloc.s V_17 ldc.i4.4 <null> stloc.s V_28 br IL_00E3: ldloc.s V_28 ldloc.s V_7 ldloc.s V_6 ldc.i4.6 <null> sub.ovf <null> ldloc.s V_17 call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object) stelem.ref <null> ldloc.s V_7 ldloc.s V_6 call System.Void Jk3e1G.7sgGWb3m::Rtr97iPzwr3Y(System.Object[],System.Int32) ldc.i4.2 <null> stloc.s V_28 br IL_00E3: ldloc.s V_28 nop <null> leave.s IL_02F7: br.s IL_02F9 br.s IL_02E5: br.s IL_02E7 br.s IL_02E7: dup dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_22 nop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_02F7: br.s IL_02F9 br.s IL_02F9: ldc.i4.4 ldc.i4.4 <null> stloc.s V_30 ldloc.s V_30 switch dnlib.DotNet.Emit.Instruction[] br.s IL_0319: nop nop <null> ret <null> ldtoken System.Void Jk3e1G.7sgGWb3m/gr9EN1pc.Qmd9zk::Kdy1ca2NeLi7Gg() pop <null> ret <null> |
| Module Name | 5zwTyY4rWmt1p |
| Full Name | 5zwTyY4rWmt1p |
| EntryPoint | System.Void Jk3e1G.7sgGWb3m/gr9EN1pc.Qmd9zk::Kdy1ca2NeLi7Gg() |
| Scope Name | 5zwTyY4rWmt1p |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | 5zwTyY4rWmt1p |
| Assembly Version | 14.26.39.51 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.6 |
| Total Strings | 0 |
| Main Method | System.Void Jk3e1G.7sgGWb3m/gr9EN1pc.Qmd9zk::Kdy1ca2NeLi7Gg() |
| Main IL Instruction Count | 264 |
| Main IL | nop <null> br.s IL_0003: ldc.i4.3 ldc.i4.3 <null> stloc.s V_24 ldloc.s V_24 switch dnlib.DotNet.Emit.Instruction[] br.s IL_002F: nop nop <null> call System.Threading.Thread System.Threading.Thread::get_CurrentThread() callvirt System.Threading.ApartmentState System.Threading.Thread::GetApartmentState() ldc.i4.1 <null> ceq <null> stloc.s V_18 ldloc.s V_18 brfalse.s IL_0048: ldc.i4.4 ldc.i4.7 <null> stloc.s V_24 br.s IL_0006: ldloc.s V_24 ldc.i4.4 <null> br.s IL_0044: stloc.s V_24 call System.Threading.Thread System.Threading.Thread::get_CurrentThread() ldc.i4.0 <null> callvirt System.Void System.Threading.Thread::SetApartmentState(System.Threading.ApartmentState) nop <null> nop <null> ldc.i4.4 <null> stloc.s V_24 br.s IL_0006: ldloc.s V_24 nop <null> call System.Globalization.CultureInfo System.Globalization.CultureInfo::get_InvariantCulture() stloc.0 <null> ldloc.0 <null> call System.Void System.Globalization.CultureInfo::set_CurrentCulture(System.Globalization.CultureInfo) nop <null> ldloc.0 <null> call System.Void System.Globalization.CultureInfo::set_CurrentUICulture(System.Globalization.CultureInfo) nop <null> call System.Reflection.Assembly System.Reflection.Assembly::GetExecutingAssembly() stloc.1 <null> ldc.i4.2 <null> stloc.s V_24 br.s IL_0006: ldloc.s V_24 nop <null> ldnull <null> ldc.i4 703393589 ldc.i4.6 <null> ldc.i4 182 call System.String j_8JkLn24kq.6reJirS/bc5R3HdtE.yt8XJ2cwbzW95::Dqn8b9eQ0fAj(System.String,System.Int32,System.Int32,System.Char) stloc.2 <null> br.s IL_0092: br.s IL_0094 br.s IL_0094: ldc.i4.3 ldc.i4.3 <null> stloc.s V_26 ldloc.s V_26 switch dnlib.DotNet.Emit.Instruction[] br.s IL_00B4: nop nop <null> ldloc.1 <null> callvirt System.String System.Reflection.Assembly::get_Location() call System.Diagnostics.FileVersionInfo System.Diagnostics.FileVersionInfo::GetVersionInfo(System.String) stloc.s V_19 ldloc.s V_19 callvirt System.String System.Diagnostics.FileVersionInfo::get_FileVersion() stloc.2 <null> leave.s IL_00DD: br.s IL_00DF br.s IL_00CE: br.s IL_00D0 br.s IL_00D0: call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) nop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_00DD: br.s IL_00DF br.s IL_00DF: ldc.i4.s 10 ldc.i4.s 10 stloc.s V_28 ldloc.s V_28 switch dnlib.DotNet.Emit.Instruction[] br.s IL_0128: nop nop <null> ldc.i4.s 28 call System.String System.Environment::GetFolderPath(System.Environment/SpecialFolder) stloc.3 <null> ldloc.3 <null> nop <null> ldc.i4 1406787237 ldc.i4.8 <null> ldtoken Jk3e1G.7sgGWb3m/2Lbxt0Rt.Tn2msdY3fL call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) ldc.i4.s 21 call System.String 3tiPnE9b8jtW.Rf8t2Sik/Ywb9aT3.Wt9xdgP3aJ::Xkt2r6cC0qW(System.Int32,System.Int32,System.Type,System.Byte) nop <null> ldc.i4.7 <null> ldc.i4.3 <null> ldc.i4 1961288475 call System.String j_8JkLn24kq.6reJirS/bc5R3HdtE.yt8XJ2cwbzW95::Sr6iaQg3W5jzpX(System.Int32,System.Int32,System.Int32) call System.String System.IO.Path::Combine(System.String,System.String,System.String) stloc.s V_4 ldc.i4.8 <null> stloc.s V_28 br IL_00E3: ldloc.s V_28 ldloc.s V_4 call System.Boolean System.IO.Directory::Exists(System.String) ldc.i4.0 <null> ceq <null> stloc.s V_20 ldloc.s V_20 brfalse.s IL_017F: ldc.i4.s 14 ldc.i4.s 12 stloc.s V_28 br IL_00E3: ldloc.s V_28 ldc.i4.s 14 br.s IL_0178: stloc.s V_28 ldloc.s V_4 call System.IO.DirectoryInfo System.IO.Directory::CreateDirectory(System.String) pop <null> nop <null> ldc.i4.s 14 stloc.s V_28 br IL_00E3: ldloc.s V_28 nop <null> ldc.i4.1 <null> stloc.s V_5 ldc.r8 25 call System.Double System.Math::Floor(System.Double) conv.ovf.i4 <null> stloc.s V_6 ldloc.s V_6 ldc.i4.1 <null> sub.ovf <null> ldc.i4.1 <null> add.ovf <null> newarr System.Object stloc.s V_7 ldc.i4.1 <null> stloc.s V_28 br IL_00E3: ldloc.s V_28 call System.String sw1H6Dsnd0wNL.Gn8k1j::fYb9C2deqLa() call System.Byte[] sw1H6Dsnd0wNL.Gn8k1j::mKj48wyDFo3(System.String) stloc.s V_8 call System.Boolean System.Environment::get_UserInteractive() stloc.s V_9 ldc.i4 96071 stloc.s V_10 call System.Drawing.Rectangle System.Windows.Forms.SystemInformation::get_VirtualScreen() stloc.s V_21 ldloca.s V_21 call System.Int32 System.Drawing.Rectangle::get_Width() stloc.s V_11 ldc.i4.s 13 stloc.s V_28 br IL_00E3: ldloc.s V_28 ldloc.s V_8 castclass System.Byte[] ldloc.s V_10 call System.Object 0Hrqc7.Qz0a2onCtLd4r9::Tdn84X(System.Byte[],System.Int32) ldnull <null> nop <null> ldc.i4.s 12 ldc.i4.1 <null> ldc.i4 1961288465 call System.String j_8JkLn24kq.6reJirS/bc5R3HdtE.yt8XJ2cwbzW95::Sr6iaQg3W5jzpX(System.Int32,System.Int32,System.Int32) ldc.i4.0 <null> newarr System.Object ldnull <null> ldnull <null> ldnull <null> call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[]) castclass System.Byte[] stloc.s V_12 ldc.i4.7 <null> stloc.s V_28 br IL_00E3: ldloc.s V_28 ldloc.s V_7 ldloc.s V_6 ldc.i4.1 <null> sub.ovf <null> ldloc.s V_12 stelem.ref <null> ldc.i4.0 <null> call System.Int64 System.GC::GetTotalMemory(System.Boolean) ldc.i4 104857600 conv.i8 <null> cgt <null> stloc.s V_13 ldc.i4.6 <null> stloc.s V_28 br IL_00E3: ldloc.s V_28 call System.Drawing.Rectangle System.Windows.Forms.Cursor::get_Clip() stloc.s V_21 ldloca.s V_21 call System.Boolean System.Drawing.Rectangle::get_IsEmpty() stloc.s V_14 ldtoken System.Reflection.Assembly call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) stloc.s V_15 ldloc.s V_15 nop <null> ldc.i4.2 <null> ldc.i4 1076179653 ldnull <null> call System.String j_8JkLn24kq.6reJirS::6PdtEk2i3(System.Int32,System.Int32,j_8JkLn24kq.6reJirS) ldc.i4.1 <null> newarr System.Type dup <null> ldc.i4.0 <null> ldtoken System.Byte[] call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) stelem.ref <null> callvirt System.Reflection.MethodInfo System.Type::GetMethod(System.String,System.Type[]) stloc.s V_16 ldc.i4.3 <null> stloc.s V_28 br IL_00E3: ldloc.s V_28 ldloc.s V_16 ldnull <null> ldc.i4.1 <null> newarr System.Object dup <null> ldc.i4.0 <null> ldloc.s V_7 ldloc.s V_6 ldc.i4.1 <null> sub.ovf <null> ldelem.ref <null> stelem.ref <null> callvirt System.Object System.Reflection.MethodBase::Invoke(System.Object,System.Object[]) call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object) stloc.s V_17 ldc.i4.4 <null> stloc.s V_28 br IL_00E3: ldloc.s V_28 ldloc.s V_7 ldloc.s V_6 ldc.i4.6 <null> sub.ovf <null> ldloc.s V_17 call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object) stelem.ref <null> ldloc.s V_7 ldloc.s V_6 call System.Void Jk3e1G.7sgGWb3m::Rtr97iPzwr3Y(System.Object[],System.Int32) ldc.i4.2 <null> stloc.s V_28 br IL_00E3: ldloc.s V_28 nop <null> leave.s IL_02F7: br.s IL_02F9 br.s IL_02E5: br.s IL_02E7 br.s IL_02E7: dup dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_22 nop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_02F7: br.s IL_02F9 br.s IL_02F9: ldc.i4.4 ldc.i4.4 <null> stloc.s V_30 ldloc.s V_30 switch dnlib.DotNet.Emit.Instruction[] br.s IL_0319: nop nop <null> ret <null> ldtoken System.Void Jk3e1G.7sgGWb3m/gr9EN1pc.Qmd9zk::Kdy1ca2NeLi7Gg() pop <null> ret <null> |