Symbol Obfuscation Score
|
Hash | Hash Value |
|---|---|
| MD5 | 5e45c1b1a90a8ef8a4c83d303336243b
|
| Sha1 | 504d7709f86a096846cc8d28fbc38749b53c56e0
|
| Sha256 | 71e8601241879b7ffd5fd4a5093918cd73e72e160a1ee935ca7d9b98cef9968e
|
| Sha384 | 3f0353e4d604fbc3d612d9970819fd284f489d5ba6c3c1bfafcaec13b1381a02e65432145c4075c32879fab2c7eca21f
|
| Sha512 | ffdb95047f1dab74862b17acd500a5f669b17b26d7ae8523a8edc9b066d8d66bcf958f2963529284e279e1bd2b50c95aa3214cc8266808f6b041b26db1fa53cd
|
| SSDeep | 393216:2AgTIlGsKhJprtkNYbl0hVRPRbW/mH6cI0gZAQXo:fglzpJeRRy26vAQX
|
| TLSH | 0DE63345C8E97C74929805F4F0A1A1F5B438735F1E4796BADF93A2C1CE5306B4A3AB2C
|
PeID
|
Name0 | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Module Name | TerryHackExtra.exe |
| Full Name | TerryHackExtra.exe |
| EntryPoint | System.Void Program::Main() |
| Scope Name | TerryHackExtra.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | TerryHackExtra |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | <null> |
| Total Strings | 23 |
| Main Method | System.Void Program::Main() |
| Main IL Instruction Count | 57 |
| Main IL | ldc.i4 2000 call System.Void System.Threading.Thread::Sleep(System.Int32) call System.Boolean Program::CreateMutex() brtrue.s IL_001B: call System.Boolean Program::DetectVirtualMachine() call System.Int32 System.Environment::get_ExitCode() call System.Void System.Environment::Exit(System.Int32) call System.Boolean Program::DetectVirtualMachine() call System.Boolean Program::Emulator() or <null> call System.Boolean Program::DetectDebugger() or <null> call System.Boolean Program::DetectSandboxie() or <null> call System.Boolean Program::anyrun() or <null> brfalse.s IL_0040: leave.s IL_0050 ldnull <null> call System.Void System.Environment::FailFast(System.String) leave.s IL_0050: call System.Boolean Program::AdminCheck() dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.0 <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_0050: call System.Boolean Program::AdminCheck() call System.Boolean Program::AdminCheck() brtrue.s IL_00B1: ldnull newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor() stloc.1 <null> ldloc.1 <null> call System.Diagnostics.Process System.Diagnostics.Process::GetCurrentProcess() callvirt System.Diagnostics.ProcessModule System.Diagnostics.Process::get_MainModule() callvirt System.String System.Diagnostics.ProcessModule::get_FileName() callvirt System.Void System.Diagnostics.ProcessStartInfo::set_FileName(System.String) ldloc.1 <null> ldstr runas callvirt System.Void System.Diagnostics.ProcessStartInfo::set_Verb(System.String) ldloc.1 <null> ldc.i4.1 <null> callvirt System.Void System.Diagnostics.ProcessStartInfo::set_UseShellExecute(System.Boolean) ldloc.1 <null> call System.Diagnostics.Process System.Diagnostics.Process::Start(System.Diagnostics.ProcessStartInfo) pop <null> call System.Int32 System.Environment::get_ExitCode() call System.Void System.Environment::Exit(System.Int32) leave.s IL_00AF: br.s IL_00B8 dup <null> call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception) stloc.2 <null> call System.Int32 System.Environment::get_ExitCode() call System.Void System.Environment::Exit(System.Int32) call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError() leave.s IL_00AF: br.s IL_00B8 br.s IL_00B8: ret ldnull <null> call System.Object Program::WorkF(System.Object) pop <null> ret <null> |