Symbol Ofbuscation Score
|
Hash | Hash Value |
|---|---|
| MD5 | 149d457e4f0c07c0219a0d0277882b08
|
| Sha1 | dcc27632ee847cc810ecc55cddbae7f03ef4f030
|
| Sha256 | 29a18b2e7ac7681c4c7c2754c0e2508403a865596d822961512f63386153318c
|
| Sha384 | 0497417e176abcc177e00a5b85f30bd0bfbef67de9666a810a1336ee139774c98deea715d8258504bd2219c46bcb22fd
|
| Sha512 | d50319c42998c085ab4b8abe89b7e25eb49061a40bf3773fd13ee7c71b8904eb246c07aa6b99b4d658c16f6a77b760f2f291ad06921dbda5ada7a6d7c14d1cb3
|
| SSDeep | 12288:bF+FAKqOZQ8VnuAPntOfcLEfb5tJiweuhWg+o2SXbDcRrJtrA2qA4gRIDoaq5zmL:kvRQ4PAfS2Viwzv/SnE2qAVIcaq5zQv
|
| TLSH | A0558B483200EF5EC01F8972C961DDF49A236D66DE06C3C366C77E5FB87E6969A101A3
|
PeID
|
Name0 | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | Authenticode present at 0x13FC00 size 13832 bytes |
| Module Name | rvNQ.exe |
| Full Name | rvNQ.exe |
| EntryPoint | System.Void EventLogAnalyzer.Program::Main() |
| Scope Name | rvNQ.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | rvNQ |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.5 |
| Total Strings | 341 |
| Main Method | System.Void EventLogAnalyzer.Program::Main() |
| Main IL Instruction Count | 72 |
| Main IL | nop <null> call System.Void EventLogAnalyzer.Program::() ldc.i4 -1545408205 ldc.i4 -1055028468 xor <null> dup <null> stloc.1 <null> ldc.i4.3 <null> rem.un <null> switch dnlib.DotNet.Emit.Instruction[] br.s IL_003E: nop nop <null> ldc.i4.0 <null> call System.Void EventLogAnalyzer.Program::(System.Boolean) ldloc.1 <null> ldc.i4 -2021009365 mul <null> ldc.i4 2084753835 xor <null> br.s IL_000B: ldc.i4 -1055028468 nop <null> nop <null> newobj System.Void EventLogAnalyzer.Forms.MainForm::.ctor() call System.Void EventLogAnalyzer.Program::(System.Windows.Forms.Form) ldc.i4 -976076867 ldc.i4 -1055028468 xor <null> dup <null> stloc.1 <null> ldc.i4.3 <null> rem.un <null> switch dnlib.DotNet.Emit.Instruction[] br.s IL_007D: leave.s IL_00D8 nop <null> nop <null> ldloc.1 <null> ldc.i4 1366100461 mul <null> ldc.i4 723970059 xor <null> br.s IL_004F: ldc.i4 -1055028468 leave.s IL_00D8: ret stloc.0 <null> nop <null> ldc.i4 -787957392 ldc.i4 -1055028468 xor <null> dup <null> stloc.1 <null> ldc.i4.3 <null> rem.un <null> switch dnlib.DotNet.Emit.Instruction[] br.s IL_00D6: leave.s IL_00D8 ldstr An unexpected error occurred: ldloc.0 <null> call System.String EventLogAnalyzer.Program::(System.Exception) ldstr The application will now close. call System.String EventLogAnalyzer.Program::(System.String,System.String,System.String) ldstr Critical Error ldc.i4.0 <null> ldc.i4.s 16 call System.Windows.Forms.DialogResult EventLogAnalyzer.Program::(System.String,System.String,System.Windows.Forms.MessageBoxButtons,System.Windows.Forms.MessageBoxIcon) pop <null> nop <null> ldloc.1 <null> ldc.i4 -1880173173 mul <null> ldc.i4 1060582284 xor <null> br.s IL_0086: ldc.i4 -1055028468 leave.s IL_00D8: ret ret <null> |
| Module Name | rvNQ.exe |
| Full Name | rvNQ.exe |
| EntryPoint | System.Void EventLogAnalyzer.Program::Main() |
| Scope Name | rvNQ.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | rvNQ |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.5 |
| Total Strings | 341 |
| Main Method | System.Void EventLogAnalyzer.Program::Main() |
| Main IL Instruction Count | 72 |
| Main IL | nop <null> call System.Void EventLogAnalyzer.Program::() ldc.i4 -1545408205 ldc.i4 -1055028468 xor <null> dup <null> stloc.1 <null> ldc.i4.3 <null> rem.un <null> switch dnlib.DotNet.Emit.Instruction[] br.s IL_003E: nop nop <null> ldc.i4.0 <null> call System.Void EventLogAnalyzer.Program::(System.Boolean) ldloc.1 <null> ldc.i4 -2021009365 mul <null> ldc.i4 2084753835 xor <null> br.s IL_000B: ldc.i4 -1055028468 nop <null> nop <null> newobj System.Void EventLogAnalyzer.Forms.MainForm::.ctor() call System.Void EventLogAnalyzer.Program::(System.Windows.Forms.Form) ldc.i4 -976076867 ldc.i4 -1055028468 xor <null> dup <null> stloc.1 <null> ldc.i4.3 <null> rem.un <null> switch dnlib.DotNet.Emit.Instruction[] br.s IL_007D: leave.s IL_00D8 nop <null> nop <null> ldloc.1 <null> ldc.i4 1366100461 mul <null> ldc.i4 723970059 xor <null> br.s IL_004F: ldc.i4 -1055028468 leave.s IL_00D8: ret stloc.0 <null> nop <null> ldc.i4 -787957392 ldc.i4 -1055028468 xor <null> dup <null> stloc.1 <null> ldc.i4.3 <null> rem.un <null> switch dnlib.DotNet.Emit.Instruction[] br.s IL_00D6: leave.s IL_00D8 ldstr An unexpected error occurred: ldloc.0 <null> call System.String EventLogAnalyzer.Program::(System.Exception) ldstr The application will now close. call System.String EventLogAnalyzer.Program::(System.String,System.String,System.String) ldstr Critical Error ldc.i4.0 <null> ldc.i4.s 16 call System.Windows.Forms.DialogResult EventLogAnalyzer.Program::(System.String,System.String,System.Windows.Forms.MessageBoxButtons,System.Windows.Forms.MessageBoxIcon) pop <null> nop <null> ldloc.1 <null> ldc.i4 -1880173173 mul <null> ldc.i4 1060582284 xor <null> br.s IL_0086: ldc.i4 -1055028468 leave.s IL_00D8: ret ret <null> |