4e5636a99d96a3738fe5496b7a625142
PE Executable | MD5: 4e5636a99d96a3738fe5496b7a625142 | Size: 87.04 KB | application/x-dosexec
Symbol Obfuscation Score
|
Hash | Hash Value |
|---|---|
| MD5 | 4e5636a99d96a3738fe5496b7a625142
|
| Sha1 | 868c67c34c890e038e1ba06ba6bd5cce7c59360b
|
| Sha256 | ee1e4d3e39e4c7232021b0e3ed8004489ff56e8f80945c14b956bbbffadca7a5
|
| Sha384 | 21d9f093cface4714131a874758a20c37d93a2f3345dd13fdd739a9a862379aded94e0a74fe6f04a384a6aa08c758652
|
| Sha512 | 2ce4d57a43c8006ecda8ef1a9115643a99dc7d50c4b6595e8ae76b82dc2f19e815259c47d7857295f1944b83ebeb2ecdac686ccbd45ebca17187574669a33611
|
| SSDeep | 1536:IC0lB4H00wz0epKV1Tsqa4tsi5lRjTnwCbTtlbe4CUBoJWs3:IxlB4HWzPC1AX4tndnwCbTtlbezUB6WW
|
| TLSH | BA835A0433EC1119F6BF4BBD99B460410AB77A17AE71E74D4D86609C0CB2B81AE24F7B
|
PeID
|
Name0 | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Module Name | Client.exe |
| Full Name | Client.exe |
| EntryPoint | System.Void Program::Main() |
| Scope Name | Client.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | Client |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.7.2 |
| Total Strings | 722 |
| Main Method | System.Void Program::Main() |
| Main IL Instruction Count | 45 |
| Main IL | call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) ldsfld System.Int32 Config::Delay ldc.i4 1000 mul <null> call System.Void System.Threading.Thread::Sleep(System.Int32) ldsfld System.Boolean Config::HideFile brfalse.s IL_0027: call System.Boolean MutexControl::CreateMutex() call System.Void HideClient::Execute() call System.Boolean MutexControl::CreateMutex() brtrue.s IL_0034: nop ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) nop <null> newobj System.Void SillyClient::.ctor() stsfld SillyClient Program::client leave.s IL_0044: ldsfld System.Action Program/<>c::<>9__1_0 pop <null> leave.s IL_0098: ret ldsfld System.Action Program/<>c::<>9__1_0 dup <null> brtrue.s IL_0063: call System.Threading.Tasks.Task System.Threading.Tasks.Task::Run(System.Action) pop <null> ldsfld Program/<>c Program/<>c::<>9 ldftn System.Void Program/<>c::<Main>b__1_0() newobj System.Void System.Action::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Action Program/<>c::<>9__1_0 call System.Threading.Tasks.Task System.Threading.Tasks.Task::Run(System.Action) pop <null> ldsfld System.Func`1<System.Threading.Tasks.Task> Program/<>c::<>9__1_1 dup <null> brtrue.s IL_0088: call System.Threading.Tasks.Task System.Threading.Tasks.Task::Run(System.Func`1<System.Threading.Tasks.Task>) pop <null> ldsfld Program/<>c Program/<>c::<>9 ldftn System.Threading.Tasks.Task Program/<>c::<Main>b__1_1() newobj System.Void System.Func`1<System.Threading.Tasks.Task>::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Func`1<System.Threading.Tasks.Task> Program/<>c::<>9__1_1 call System.Threading.Tasks.Task System.Threading.Tasks.Task::Run(System.Func`1<System.Threading.Tasks.Task>) pop <null> newobj System.Void System.Windows.Forms.ApplicationContext::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.ApplicationContext) ret <null> |
| Module Name | Client.exe |
| Full Name | Client.exe |
| EntryPoint | System.Void Program::Main() |
| Scope Name | Client.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | Client |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.7.2 |
| Total Strings | 722 |
| Main Method | System.Void Program::Main() |
| Main IL Instruction Count | 45 |
| Main IL | call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) ldsfld System.Int32 Config::Delay ldc.i4 1000 mul <null> call System.Void System.Threading.Thread::Sleep(System.Int32) ldsfld System.Boolean Config::HideFile brfalse.s IL_0027: call System.Boolean MutexControl::CreateMutex() call System.Void HideClient::Execute() call System.Boolean MutexControl::CreateMutex() brtrue.s IL_0034: nop ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) nop <null> newobj System.Void SillyClient::.ctor() stsfld SillyClient Program::client leave.s IL_0044: ldsfld System.Action Program/<>c::<>9__1_0 pop <null> leave.s IL_0098: ret ldsfld System.Action Program/<>c::<>9__1_0 dup <null> brtrue.s IL_0063: call System.Threading.Tasks.Task System.Threading.Tasks.Task::Run(System.Action) pop <null> ldsfld Program/<>c Program/<>c::<>9 ldftn System.Void Program/<>c::<Main>b__1_0() newobj System.Void System.Action::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Action Program/<>c::<>9__1_0 call System.Threading.Tasks.Task System.Threading.Tasks.Task::Run(System.Action) pop <null> ldsfld System.Func`1<System.Threading.Tasks.Task> Program/<>c::<>9__1_1 dup <null> brtrue.s IL_0088: call System.Threading.Tasks.Task System.Threading.Tasks.Task::Run(System.Func`1<System.Threading.Tasks.Task>) pop <null> ldsfld Program/<>c Program/<>c::<>9 ldftn System.Threading.Tasks.Task Program/<>c::<Main>b__1_1() newobj System.Void System.Func`1<System.Threading.Tasks.Task>::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Func`1<System.Threading.Tasks.Task> Program/<>c::<>9__1_1 call System.Threading.Tasks.Task System.Threading.Tasks.Task::Run(System.Func`1<System.Threading.Tasks.Task>) pop <null> newobj System.Void System.Windows.Forms.ApplicationContext::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.ApplicationContext) ret <null> |