Symbol Obfuscation Score
|
Hash | Hash Value |
|---|---|
| MD5 | 12c2a95893c7fb3b63248b3b51ca53e1
|
| Sha1 | 076ba2d96adfc5d01b6abe481e544ff3ddecf100
|
| Sha256 | 27f555873ce5ab6b6cdbfa5690db3a663793be34e29917be22ef1e9cb1d2dec1
|
| Sha384 | fef99ae25b567d2ec018d4f920cd76d6cc1258161d9b266d06c3c87cc038f29ce33fdc8088bf71126efeec5b84da9bad
|
| Sha512 | 9d6f7dfc506b57cd55aa2e9d44ddd9d9ee654980d52ddf68db11e2b88d8813fff3e50659c637e69f469642095a8b86793fd96e68495e80e87c331597d0956bcc
|
| SSDeep | 12288:R957EvntYbcoamTEoF4e8cmXFUDgO2TKfHJEfM/E6P2VgBxzuU+Tddp:R951JaEF4Am1UB2TKf+6uVgBxST
|
| TLSH | 13F4CE210E872F98E22D0F78C056186977F5E863A297E76F2FFC01B069ABF51CE16151
|
PeID
|
Name0 | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Module Name | wa1FbZj96tHf |
| Full Name | wa1FbZj96tHf |
| EntryPoint | System.Void dPq2F.7yzDK2a/rDp0As.Dp1ba7rK8Sccix::kAo08fcXq2B() |
| Scope Name | wa1FbZj96tHf |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | wa1FbZj96tHf |
| Assembly Version | 21.3.1.120 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.6 |
| Total Strings | 0 |
| Main Method | System.Void dPq2F.7yzDK2a/rDp0As.Dp1ba7rK8Sccix::kAo08fcXq2B() |
| Main IL Instruction Count | 265 |
| Main IL | nop <null> br.s IL_0003: ldc.i4.3 ldc.i4.3 <null> stloc.s V_24 ldloc.s V_24 switch dnlib.DotNet.Emit.Instruction[] br.s IL_002F: nop nop <null> call System.Threading.Thread System.Threading.Thread::get_CurrentThread() callvirt System.Threading.ApartmentState System.Threading.Thread::GetApartmentState() ldc.i4.1 <null> ceq <null> stloc.s V_18 ldloc.s V_18 brfalse.s IL_0048: ldc.i4.6 ldc.i4.0 <null> stloc.s V_24 br.s IL_0006: ldloc.s V_24 ldc.i4.6 <null> br.s IL_0044: stloc.s V_24 call System.Threading.Thread System.Threading.Thread::get_CurrentThread() ldc.i4.0 <null> callvirt System.Void System.Threading.Thread::SetApartmentState(System.Threading.ApartmentState) nop <null> nop <null> ldc.i4.6 <null> stloc.s V_24 br.s IL_0006: ldloc.s V_24 nop <null> call System.Globalization.CultureInfo System.Globalization.CultureInfo::get_InvariantCulture() stloc.0 <null> ldloc.0 <null> call System.Void System.Globalization.CultureInfo::set_CurrentCulture(System.Globalization.CultureInfo) nop <null> ldloc.0 <null> call System.Void System.Globalization.CultureInfo::set_CurrentUICulture(System.Globalization.CultureInfo) nop <null> call System.Reflection.Assembly System.Reflection.Assembly::GetExecutingAssembly() stloc.1 <null> ldc.i4.4 <null> stloc.s V_24 br.s IL_0006: ldloc.s V_24 nop <null> ldc.i4.2 <null> ldc.i4 1516939046 ldnull <null> call System.String tYg2Mo.Tkx7k3e::ng4S0(System.Int32,System.Int32,tYg2Mo.Tkx7k3e) stloc.2 <null> br.s IL_008D: br.s IL_008F br.s IL_008F: ldc.i4.1 ldc.i4.1 <null> stloc.s V_26 ldloc.s V_26 switch dnlib.DotNet.Emit.Instruction[] br.s IL_00AF: nop nop <null> ldloc.1 <null> callvirt System.String System.Reflection.Assembly::get_Location() call System.Diagnostics.FileVersionInfo System.Diagnostics.FileVersionInfo::GetVersionInfo(System.String) stloc.s V_19 ldloc.s V_19 callvirt System.String System.Diagnostics.FileVersionInfo::get_FileVersion() stloc.2 <null> leave.s IL_00D8: br.s IL_00DA br.s IL_00C9: br.s IL_00CB br.s IL_00CB: call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) nop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_00D8: br.s IL_00DA br.s IL_00DA: ldc.i4.s 11 ldc.i4.s 11 stloc.s V_28 ldloc.s V_28 switch dnlib.DotNet.Emit.Instruction[] br.s IL_0123: nop nop <null> ldc.i4.s 28 call System.String System.Environment::GetFolderPath(System.Environment/SpecialFolder) stloc.3 <null> ldloc.3 <null> nop <null> ldc.i4.s 27 ldc.i4.5 <null> ldc.i4 997178991 call System.String Pgd8iN2ntsT7.Yt3k6Sgm::qXt3sz2MKco9(System.Byte,System.Int32,System.Int32) nop <null> ldtoken dPq2F.7yzDK2a/rDp0As.Dp1ba7rK8Sccix/2gzLiYx4H3qk8t.7LxkbgG62/Gd3_2NyfHi5o.Fi1ma9 call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) ldnull <null> ldc.i4.6 <null> ldc.i4 1923661972 call System.String tYg2Mo.Tkx7k3e/rWf34bgBe.cSw16bXtpz8::Wk0kd1EyK(System.Type,System.Reflection.Assembly,System.Int32,System.Int32) call System.String System.IO.Path::Combine(System.String,System.String,System.String) stloc.s V_4 ldc.i4.7 <null> stloc.s V_28 br IL_00DE: ldloc.s V_28 ldloc.s V_4 call System.Boolean System.IO.Directory::Exists(System.String) ldc.i4.0 <null> ceq <null> stloc.s V_20 ldloc.s V_20 brfalse.s IL_0179: ldc.i4.1 ldc.i4.3 <null> stloc.s V_28 br IL_00DE: ldloc.s V_28 ldc.i4.1 <null> br.s IL_0172: stloc.s V_28 ldloc.s V_4 call System.IO.DirectoryInfo System.IO.Directory::CreateDirectory(System.String) pop <null> nop <null> ldc.i4.1 <null> stloc.s V_28 br IL_00DE: ldloc.s V_28 nop <null> ldc.i4.1 <null> stloc.s V_5 ldc.r8 25 call System.Double System.Math::Floor(System.Double) conv.ovf.i4 <null> stloc.s V_6 ldloc.s V_6 ldc.i4.1 <null> sub.ovf <null> ldc.i4.1 <null> add.ovf <null> newarr System.Object stloc.s V_7 ldc.i4.0 <null> stloc.s V_28 br IL_00DE: ldloc.s V_28 call System.String xTz3m4Ypsw2Gy.jBj9G8qw6s::xWc9Q() call System.Byte[] xTz3m4Ypsw2Gy.jBj9G8qw6s::4KstLw5myNb7(System.String) stloc.s V_8 call System.Boolean System.Environment::get_UserInteractive() stloc.s V_9 ldc.i4 96071 stloc.s V_10 call System.Drawing.Rectangle System.Windows.Forms.SystemInformation::get_VirtualScreen() stloc.s V_21 ldloca.s V_21 call System.Int32 System.Drawing.Rectangle::get_Width() stloc.s V_11 ldc.i4.s 12 stloc.s V_28 br IL_00DE: ldloc.s V_28 ldloc.s V_8 castclass System.Byte[] ldloc.s V_10 call System.Object 2doLrCy0n1Few.Gdt4a0zQXm::Mdo5kS7s(System.Byte[],System.Int32) ldnull <null> nop <null> ldtoken wa1FbZj96tHf.My.cEf9p6 call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) ldnull <null> ldc.i4.4 <null> ldc.i4 1923661982 call System.String tYg2Mo.Tkx7k3e/rWf34bgBe.cSw16bXtpz8::Wk0kd1EyK(System.Type,System.Reflection.Assembly,System.Int32,System.Int32) ldc.i4.0 <null> newarr System.Object ldnull <null> ldnull <null> ldnull <null> call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[]) castclass System.Byte[] stloc.s V_12 ldc.i4.s 13 stloc.s V_28 br IL_00DE: ldloc.s V_28 ldloc.s V_7 ldloc.s V_6 ldc.i4.1 <null> sub.ovf <null> ldloc.s V_12 stelem.ref <null> ldc.i4.0 <null> call System.Int64 System.GC::GetTotalMemory(System.Boolean) ldc.i4 104857600 conv.i8 <null> cgt <null> stloc.s V_13 ldc.i4.8 <null> stloc.s V_28 br IL_00DE: ldloc.s V_28 call System.Drawing.Rectangle System.Windows.Forms.Cursor::get_Clip() stloc.s V_21 ldloca.s V_21 call System.Boolean System.Drawing.Rectangle::get_IsEmpty() stloc.s V_14 ldtoken System.Reflection.Assembly call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) stloc.s V_15 ldloc.s V_15 nop <null> ldc.i4 1076778583 ldc.i8 10 ldc.i4.2 <null> call System.String tYg2Mo.Tkx7k3e/1AebzgY08q_.qq1T2Hwtb4Qi8::Hn7rf6eBqi(System.Int32,System.Int64,System.Int32) ldc.i4.1 <null> newarr System.Type dup <null> ldc.i4.0 <null> ldtoken System.Byte[] call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) stelem.ref <null> callvirt System.Reflection.MethodInfo System.Type::GetMethod(System.String,System.Type[]) stloc.s V_16 ldc.i4.6 <null> stloc.s V_28 br IL_00DE: ldloc.s V_28 ldloc.s V_16 ldnull <null> ldc.i4.1 <null> newarr System.Object dup <null> ldc.i4.0 <null> ldloc.s V_7 ldloc.s V_6 ldc.i4.1 <null> sub.ovf <null> ldelem.ref <null> stelem.ref <null> callvirt System.Object System.Reflection.MethodBase::Invoke(System.Object,System.Object[]) call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object) stloc.s V_17 ldc.i4.s 14 stloc.s V_28 br IL_00DE: ldloc.s V_28 ldloc.s V_7 ldloc.s V_6 ldc.i4.6 <null> sub.ovf <null> ldloc.s V_17 call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object) stelem.ref <null> ldloc.s V_7 ldloc.s V_6 call System.Void dPq2F.7yzDK2a::Br7atmP0_(System.Object[],System.Int32) ldc.i4.s 9 stloc.s V_28 br IL_00DE: ldloc.s V_28 nop <null> leave.s IL_0303: br.s IL_0305 br.s IL_02F1: br.s IL_02F3 br.s IL_02F3: dup dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_22 nop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_0303: br.s IL_0305 br.s IL_0305: ldc.i4.0 ldc.i4.0 <null> stloc.s V_30 ldloc.s V_30 switch dnlib.DotNet.Emit.Instruction[] br.s IL_0325: nop nop <null> ret <null> ldtoken System.Void dPq2F.7yzDK2a/rDp0As.Dp1ba7rK8Sccix::kAo08fcXq2B() pop <null> ret <null> |
| Module Name | wa1FbZj96tHf |
| Full Name | wa1FbZj96tHf |
| EntryPoint | System.Void dPq2F.7yzDK2a/rDp0As.Dp1ba7rK8Sccix::kAo08fcXq2B() |
| Scope Name | wa1FbZj96tHf |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | wa1FbZj96tHf |
| Assembly Version | 21.3.1.120 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.6 |
| Total Strings | 0 |
| Main Method | System.Void dPq2F.7yzDK2a/rDp0As.Dp1ba7rK8Sccix::kAo08fcXq2B() |
| Main IL Instruction Count | 265 |
| Main IL | nop <null> br.s IL_0003: ldc.i4.3 ldc.i4.3 <null> stloc.s V_24 ldloc.s V_24 switch dnlib.DotNet.Emit.Instruction[] br.s IL_002F: nop nop <null> call System.Threading.Thread System.Threading.Thread::get_CurrentThread() callvirt System.Threading.ApartmentState System.Threading.Thread::GetApartmentState() ldc.i4.1 <null> ceq <null> stloc.s V_18 ldloc.s V_18 brfalse.s IL_0048: ldc.i4.6 ldc.i4.0 <null> stloc.s V_24 br.s IL_0006: ldloc.s V_24 ldc.i4.6 <null> br.s IL_0044: stloc.s V_24 call System.Threading.Thread System.Threading.Thread::get_CurrentThread() ldc.i4.0 <null> callvirt System.Void System.Threading.Thread::SetApartmentState(System.Threading.ApartmentState) nop <null> nop <null> ldc.i4.6 <null> stloc.s V_24 br.s IL_0006: ldloc.s V_24 nop <null> call System.Globalization.CultureInfo System.Globalization.CultureInfo::get_InvariantCulture() stloc.0 <null> ldloc.0 <null> call System.Void System.Globalization.CultureInfo::set_CurrentCulture(System.Globalization.CultureInfo) nop <null> ldloc.0 <null> call System.Void System.Globalization.CultureInfo::set_CurrentUICulture(System.Globalization.CultureInfo) nop <null> call System.Reflection.Assembly System.Reflection.Assembly::GetExecutingAssembly() stloc.1 <null> ldc.i4.4 <null> stloc.s V_24 br.s IL_0006: ldloc.s V_24 nop <null> ldc.i4.2 <null> ldc.i4 1516939046 ldnull <null> call System.String tYg2Mo.Tkx7k3e::ng4S0(System.Int32,System.Int32,tYg2Mo.Tkx7k3e) stloc.2 <null> br.s IL_008D: br.s IL_008F br.s IL_008F: ldc.i4.1 ldc.i4.1 <null> stloc.s V_26 ldloc.s V_26 switch dnlib.DotNet.Emit.Instruction[] br.s IL_00AF: nop nop <null> ldloc.1 <null> callvirt System.String System.Reflection.Assembly::get_Location() call System.Diagnostics.FileVersionInfo System.Diagnostics.FileVersionInfo::GetVersionInfo(System.String) stloc.s V_19 ldloc.s V_19 callvirt System.String System.Diagnostics.FileVersionInfo::get_FileVersion() stloc.2 <null> leave.s IL_00D8: br.s IL_00DA br.s IL_00C9: br.s IL_00CB br.s IL_00CB: call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) nop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_00D8: br.s IL_00DA br.s IL_00DA: ldc.i4.s 11 ldc.i4.s 11 stloc.s V_28 ldloc.s V_28 switch dnlib.DotNet.Emit.Instruction[] br.s IL_0123: nop nop <null> ldc.i4.s 28 call System.String System.Environment::GetFolderPath(System.Environment/SpecialFolder) stloc.3 <null> ldloc.3 <null> nop <null> ldc.i4.s 27 ldc.i4.5 <null> ldc.i4 997178991 call System.String Pgd8iN2ntsT7.Yt3k6Sgm::qXt3sz2MKco9(System.Byte,System.Int32,System.Int32) nop <null> ldtoken dPq2F.7yzDK2a/rDp0As.Dp1ba7rK8Sccix/2gzLiYx4H3qk8t.7LxkbgG62/Gd3_2NyfHi5o.Fi1ma9 call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) ldnull <null> ldc.i4.6 <null> ldc.i4 1923661972 call System.String tYg2Mo.Tkx7k3e/rWf34bgBe.cSw16bXtpz8::Wk0kd1EyK(System.Type,System.Reflection.Assembly,System.Int32,System.Int32) call System.String System.IO.Path::Combine(System.String,System.String,System.String) stloc.s V_4 ldc.i4.7 <null> stloc.s V_28 br IL_00DE: ldloc.s V_28 ldloc.s V_4 call System.Boolean System.IO.Directory::Exists(System.String) ldc.i4.0 <null> ceq <null> stloc.s V_20 ldloc.s V_20 brfalse.s IL_0179: ldc.i4.1 ldc.i4.3 <null> stloc.s V_28 br IL_00DE: ldloc.s V_28 ldc.i4.1 <null> br.s IL_0172: stloc.s V_28 ldloc.s V_4 call System.IO.DirectoryInfo System.IO.Directory::CreateDirectory(System.String) pop <null> nop <null> ldc.i4.1 <null> stloc.s V_28 br IL_00DE: ldloc.s V_28 nop <null> ldc.i4.1 <null> stloc.s V_5 ldc.r8 25 call System.Double System.Math::Floor(System.Double) conv.ovf.i4 <null> stloc.s V_6 ldloc.s V_6 ldc.i4.1 <null> sub.ovf <null> ldc.i4.1 <null> add.ovf <null> newarr System.Object stloc.s V_7 ldc.i4.0 <null> stloc.s V_28 br IL_00DE: ldloc.s V_28 call System.String xTz3m4Ypsw2Gy.jBj9G8qw6s::xWc9Q() call System.Byte[] xTz3m4Ypsw2Gy.jBj9G8qw6s::4KstLw5myNb7(System.String) stloc.s V_8 call System.Boolean System.Environment::get_UserInteractive() stloc.s V_9 ldc.i4 96071 stloc.s V_10 call System.Drawing.Rectangle System.Windows.Forms.SystemInformation::get_VirtualScreen() stloc.s V_21 ldloca.s V_21 call System.Int32 System.Drawing.Rectangle::get_Width() stloc.s V_11 ldc.i4.s 12 stloc.s V_28 br IL_00DE: ldloc.s V_28 ldloc.s V_8 castclass System.Byte[] ldloc.s V_10 call System.Object 2doLrCy0n1Few.Gdt4a0zQXm::Mdo5kS7s(System.Byte[],System.Int32) ldnull <null> nop <null> ldtoken wa1FbZj96tHf.My.cEf9p6 call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) ldnull <null> ldc.i4.4 <null> ldc.i4 1923661982 call System.String tYg2Mo.Tkx7k3e/rWf34bgBe.cSw16bXtpz8::Wk0kd1EyK(System.Type,System.Reflection.Assembly,System.Int32,System.Int32) ldc.i4.0 <null> newarr System.Object ldnull <null> ldnull <null> ldnull <null> call System.Object Microsoft.VisualBasic.CompilerServices.NewLateBinding::LateGet(System.Object,System.Type,System.String,System.Object[],System.String[],System.Type[],System.Boolean[]) castclass System.Byte[] stloc.s V_12 ldc.i4.s 13 stloc.s V_28 br IL_00DE: ldloc.s V_28 ldloc.s V_7 ldloc.s V_6 ldc.i4.1 <null> sub.ovf <null> ldloc.s V_12 stelem.ref <null> ldc.i4.0 <null> call System.Int64 System.GC::GetTotalMemory(System.Boolean) ldc.i4 104857600 conv.i8 <null> cgt <null> stloc.s V_13 ldc.i4.8 <null> stloc.s V_28 br IL_00DE: ldloc.s V_28 call System.Drawing.Rectangle System.Windows.Forms.Cursor::get_Clip() stloc.s V_21 ldloca.s V_21 call System.Boolean System.Drawing.Rectangle::get_IsEmpty() stloc.s V_14 ldtoken System.Reflection.Assembly call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) stloc.s V_15 ldloc.s V_15 nop <null> ldc.i4 1076778583 ldc.i8 10 ldc.i4.2 <null> call System.String tYg2Mo.Tkx7k3e/1AebzgY08q_.qq1T2Hwtb4Qi8::Hn7rf6eBqi(System.Int32,System.Int64,System.Int32) ldc.i4.1 <null> newarr System.Type dup <null> ldc.i4.0 <null> ldtoken System.Byte[] call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) stelem.ref <null> callvirt System.Reflection.MethodInfo System.Type::GetMethod(System.String,System.Type[]) stloc.s V_16 ldc.i4.6 <null> stloc.s V_28 br IL_00DE: ldloc.s V_28 ldloc.s V_16 ldnull <null> ldc.i4.1 <null> newarr System.Object dup <null> ldc.i4.0 <null> ldloc.s V_7 ldloc.s V_6 ldc.i4.1 <null> sub.ovf <null> ldelem.ref <null> stelem.ref <null> callvirt System.Object System.Reflection.MethodBase::Invoke(System.Object,System.Object[]) call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object) stloc.s V_17 ldc.i4.s 14 stloc.s V_28 br IL_00DE: ldloc.s V_28 ldloc.s V_7 ldloc.s V_6 ldc.i4.6 <null> sub.ovf <null> ldloc.s V_17 call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object) stelem.ref <null> ldloc.s V_7 ldloc.s V_6 call System.Void dPq2F.7yzDK2a::Br7atmP0_(System.Object[],System.Int32) ldc.i4.s 9 stloc.s V_28 br IL_00DE: ldloc.s V_28 nop <null> leave.s IL_0303: br.s IL_0305 br.s IL_02F1: br.s IL_02F3 br.s IL_02F3: dup dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.s V_22 nop <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_0303: br.s IL_0305 br.s IL_0305: ldc.i4.0 ldc.i4.0 <null> stloc.s V_30 ldloc.s V_30 switch dnlib.DotNet.Emit.Instruction[] br.s IL_0325: nop nop <null> ret <null> ldtoken System.Void dPq2F.7yzDK2a/rDp0As.Dp1ba7rK8Sccix::kAo08fcXq2B() pop <null> ret <null> |