42f0956497e42518a1d0b32c27cf1653
PE Executable | MD5: 42f0956497e42518a1d0b32c27cf1653 | Size: 94.21 KB | application/x-dosexec
Symbol Obfuscation Score
|
Hash | Hash Value |
|---|---|
| MD5 | 42f0956497e42518a1d0b32c27cf1653
|
| Sha1 | 61376cdf268c9b3880b5307d484a35d2946eb0df
|
| Sha256 | 4ea16583fea8b113427a8ef69ffd8b40839cc6fa4e1332904465e0e83930dbd6
|
| Sha384 | c10d9bc0ba402c1253ae23280f758fe14e2379335a660adb9684204740197212a8fe7572f9512d4657ae3cd1403ed0a3
|
| Sha512 | 60db945053b5ad00e77fcbbd135c93209b9dad1614307f033db4ed67b5f643c1386d7c94a46bef9ab855b28a60011cd4b31d577bb23ab4c29ba3e284c805065f
|
| SSDeep | 1536:nr/cICn3TR7Oz7bzm/04nFTsqa4tsi5gj50Elb+KvCm1s9G2:nDcx3TRSj8nFAX4tnCt0Elb+KKm1CG2
|
| TLSH | E8934C0073FD5526E67F8BBDA87625088FB27917AE71F64D8C47506D0A70B81A920F3B
|
PeID
|
Name0 | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Module Name | Client.exe |
| Full Name | Client.exe |
| EntryPoint | System.Void Program::Main() |
| Scope Name | Client.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | Client |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.7.2 |
| Total Strings | 769 |
| Main Method | System.Void Program::Main() |
| Main IL Instruction Count | 45 |
| Main IL | call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) ldsfld System.Int32 Config::Delay ldc.i4 1000 mul <null> call System.Void System.Threading.Thread::Sleep(System.Int32) ldsfld System.Boolean Config::HideFile brfalse.s IL_0027: call System.Boolean MutexControl::CreateMutex() call System.Void HideClient::Execute() call System.Boolean MutexControl::CreateMutex() brtrue.s IL_0034: nop ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) nop <null> newobj System.Void SillyClient::.ctor() stsfld SillyClient Program::client leave.s IL_0044: ldsfld System.Action Program/<>c::<>9__1_0 pop <null> leave.s IL_0098: ret ldsfld System.Action Program/<>c::<>9__1_0 dup <null> brtrue.s IL_0063: call System.Threading.Tasks.Task System.Threading.Tasks.Task::Run(System.Action) pop <null> ldsfld Program/<>c Program/<>c::<>9 ldftn System.Void Program/<>c::<Main>b__1_0() newobj System.Void System.Action::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Action Program/<>c::<>9__1_0 call System.Threading.Tasks.Task System.Threading.Tasks.Task::Run(System.Action) pop <null> ldsfld System.Func`1<System.Threading.Tasks.Task> Program/<>c::<>9__1_1 dup <null> brtrue.s IL_0088: call System.Threading.Tasks.Task System.Threading.Tasks.Task::Run(System.Func`1<System.Threading.Tasks.Task>) pop <null> ldsfld Program/<>c Program/<>c::<>9 ldftn System.Threading.Tasks.Task Program/<>c::<Main>b__1_1() newobj System.Void System.Func`1<System.Threading.Tasks.Task>::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Func`1<System.Threading.Tasks.Task> Program/<>c::<>9__1_1 call System.Threading.Tasks.Task System.Threading.Tasks.Task::Run(System.Func`1<System.Threading.Tasks.Task>) pop <null> newobj System.Void System.Windows.Forms.ApplicationContext::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.ApplicationContext) ret <null> |
| Module Name | Client.exe |
| Full Name | Client.exe |
| EntryPoint | System.Void Program::Main() |
| Scope Name | Client.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | Client |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.7.2 |
| Total Strings | 769 |
| Main Method | System.Void Program::Main() |
| Main IL Instruction Count | 45 |
| Main IL | call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) ldsfld System.Int32 Config::Delay ldc.i4 1000 mul <null> call System.Void System.Threading.Thread::Sleep(System.Int32) ldsfld System.Boolean Config::HideFile brfalse.s IL_0027: call System.Boolean MutexControl::CreateMutex() call System.Void HideClient::Execute() call System.Boolean MutexControl::CreateMutex() brtrue.s IL_0034: nop ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) nop <null> newobj System.Void SillyClient::.ctor() stsfld SillyClient Program::client leave.s IL_0044: ldsfld System.Action Program/<>c::<>9__1_0 pop <null> leave.s IL_0098: ret ldsfld System.Action Program/<>c::<>9__1_0 dup <null> brtrue.s IL_0063: call System.Threading.Tasks.Task System.Threading.Tasks.Task::Run(System.Action) pop <null> ldsfld Program/<>c Program/<>c::<>9 ldftn System.Void Program/<>c::<Main>b__1_0() newobj System.Void System.Action::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Action Program/<>c::<>9__1_0 call System.Threading.Tasks.Task System.Threading.Tasks.Task::Run(System.Action) pop <null> ldsfld System.Func`1<System.Threading.Tasks.Task> Program/<>c::<>9__1_1 dup <null> brtrue.s IL_0088: call System.Threading.Tasks.Task System.Threading.Tasks.Task::Run(System.Func`1<System.Threading.Tasks.Task>) pop <null> ldsfld Program/<>c Program/<>c::<>9 ldftn System.Threading.Tasks.Task Program/<>c::<Main>b__1_1() newobj System.Void System.Func`1<System.Threading.Tasks.Task>::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Func`1<System.Threading.Tasks.Task> Program/<>c::<>9__1_1 call System.Threading.Tasks.Task System.Threading.Tasks.Task::Run(System.Func`1<System.Threading.Tasks.Task>) pop <null> newobj System.Void System.Windows.Forms.ApplicationContext::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.ApplicationContext) ret <null> |