12f8287f73f9853be77f9a1f42927f7a
PE Executable | MD5: 12f8287f73f9853be77f9a1f42927f7a | Size: 78.34 KB | application/x-dosexec
Symbol Obfuscation Score
|
Hash | Hash Value |
|---|---|
| MD5 | 12f8287f73f9853be77f9a1f42927f7a
|
| Sha1 | aafa1e49b984852b036efde514a2e29ab10aff28
|
| Sha256 | a7a7a887247db3707b5eb522d9530926aa6f0298ecff2dbb1d5e09e4949de07f
|
| Sha384 | 87e5a6df50151570c071eee643f816a800785d461c644dd762f02571c513cb58d5d69345155d4aa7900cc70ceeceb317
|
| Sha512 | 20307d343f0bdd0e5698eed5d9b6d761dad56378de6e151ed9213857283d0d8ddad27a02d54ed6d102ff20dd5ed76fd11704802cda408750d132271f59e9bb5a
|
| SSDeep | 1536:Nj3O+Bocwbg29PsKpN+LFLUBUDEVTsqa4tsi5Bl+xO6lcwbmVCJNb1AIR:NDNr6AX4tnfclcwbmoJ115
|
| TLSH | DB736C4173F8606DE6AE8B3DACA098B10E35B5636F2ADA1C1D46905C4B65782CD70BF3
|
PeID
|
Name0 | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Module Name | 0 |
| Full Name | 0 |
| EntryPoint | System.Void Program::Main() |
| Scope Name | 0 |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | Client |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.7.2 |
| Total Strings | 547 |
| Main Method | System.Void Program::Main() |
| Main IL Instruction Count | 29 |
| Main IL | newobj System.Void Program/3.4::.ctor() stloc.0 <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) call System.Boolean d.e::CreateMutex() brtrue.s IL_001E: ldsfld System.Boolean 6.7::HideFile ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) ldsfld System.Boolean 6.7::HideFile brfalse.s IL_002A: ldloc.0 call System.Void HideClient::Execute() ldloc.0 <null> ldnull <null> stfld SillyClient Program/3.4::client ldloc.0 <null> newobj System.Void SillyClient::.ctor() stfld SillyClient Program/3.4::client leave.s IL_0041: ldloc.0 pop <null> leave.s IL_005D: ret ldloc.0 <null> ldftn System.Void Program/3.4::5() newobj System.Void System.Action::.ctor(System.Object,System.IntPtr) call System.Threading.Tasks.Task System.Threading.Tasks.Task::Run(System.Action) pop <null> newobj System.Void System.Windows.Forms.ApplicationContext::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.ApplicationContext) ret <null> |
| Module Name | 0 |
| Full Name | 0 |
| EntryPoint | System.Void Program::Main() |
| Scope Name | 0 |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | Client |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.7.2 |
| Total Strings | 547 |
| Main Method | System.Void Program::Main() |
| Main IL Instruction Count | 29 |
| Main IL | newobj System.Void Program/3.4::.ctor() stloc.0 <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) call System.Boolean d.e::CreateMutex() brtrue.s IL_001E: ldsfld System.Boolean 6.7::HideFile ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) ldsfld System.Boolean 6.7::HideFile brfalse.s IL_002A: ldloc.0 call System.Void HideClient::Execute() ldloc.0 <null> ldnull <null> stfld SillyClient Program/3.4::client ldloc.0 <null> newobj System.Void SillyClient::.ctor() stfld SillyClient Program/3.4::client leave.s IL_0041: ldloc.0 pop <null> leave.s IL_005D: ret ldloc.0 <null> ldftn System.Void Program/3.4::5() newobj System.Void System.Action::.ctor(System.Object,System.IntPtr) call System.Threading.Tasks.Task System.Threading.Tasks.Task::Run(System.Action) pop <null> newobj System.Void System.Windows.Forms.ApplicationContext::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.ApplicationContext) ret <null> |