Symbol Obfuscation Score
|
Hash | Hash Value |
|---|---|
| MD5 | 8722f31bcf8bb4df47a09db6e19893bf
|
| Sha1 | 9bf892ab492a321d750ae98b3a59b8842942c1e3
|
| Sha256 | 3a4a5d05c6e0da095521631b3d00a5f2a032e86427d7ea5ed6dc6410e4ebc919
|
| Sha384 | 84902acccdb6c7cf888366907f37236b715f9933581147c607a677a32c0dc03e9af2871aad0fea6f48b8ee232e7eef87
|
| Sha512 | 0998ae29b3731ef22899e9ca03629b9f29ef930c660202c771f1854e90b90ea1b591002109857ead70ac87c775e4ff65e361d7ef55c8bebbaa5ed48e3401bd4d
|
| SSDeep | 98304:HBvRPOWS0jvRPOWS0jvRPOWS0jvRPOWS0jvRPOWS0jvRPOWS0V:hZPO+ZPO+ZPO+ZPO+ZPO+ZPO8
|
| TLSH | A5563318938C2425BB1E5B383D602AEDAC535C917B22558526B210E1CE7EF86787DF3F
|
PeID
|
Name0 | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | Overlay extracted: Overlay_75216266.bin (6291456 bytes) |
| Module Name | Client.exe |
| Full Name | Client.exe |
| EntryPoint | System.Void Program::Main() |
| Scope Name | Client.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | Client |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.7.2 |
| Total Strings | 631 |
| Main Method | System.Void Program::Main() |
| Main IL Instruction Count | 33 |
| Main IL | newobj System.Void Program/<>c__DisplayClass0_0::.ctor() stloc.0 <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) ldsfld System.Int32 Config::Delay ldc.i4 1000 mul <null> call System.Void System.Threading.Thread::Sleep(System.Int32) ldsfld System.Boolean Config::HideFile brfalse.s IL_002D: call System.Boolean MutexControl::CreateMutex() call System.Void HideClient::Execute() call System.Boolean MutexControl::CreateMutex() brtrue.s IL_003A: ldloc.0 ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) ldloc.0 <null> ldnull <null> stfld SillyClient Program/<>c__DisplayClass0_0::client ldloc.0 <null> newobj System.Void SillyClient::.ctor() stfld SillyClient Program/<>c__DisplayClass0_0::client leave.s IL_0051: ldloc.0 pop <null> leave.s IL_006D: ret ldloc.0 <null> ldftn System.Void Program/<>c__DisplayClass0_0::<Main>b__0() newobj System.Void System.Action::.ctor(System.Object,System.IntPtr) call System.Threading.Tasks.Task System.Threading.Tasks.Task::Run(System.Action) pop <null> newobj System.Void System.Windows.Forms.ApplicationContext::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.ApplicationContext) ret <null> |
| Module Name | Client.exe |
| Full Name | Client.exe |
| EntryPoint | System.Void Program::Main() |
| Scope Name | Client.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | Client |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.7.2 |
| Total Strings | 631 |
| Main Method | System.Void Program::Main() |
| Main IL Instruction Count | 33 |
| Main IL | newobj System.Void Program/<>c__DisplayClass0_0::.ctor() stloc.0 <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) ldsfld System.Int32 Config::Delay ldc.i4 1000 mul <null> call System.Void System.Threading.Thread::Sleep(System.Int32) ldsfld System.Boolean Config::HideFile brfalse.s IL_002D: call System.Boolean MutexControl::CreateMutex() call System.Void HideClient::Execute() call System.Boolean MutexControl::CreateMutex() brtrue.s IL_003A: ldloc.0 ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) ldloc.0 <null> ldnull <null> stfld SillyClient Program/<>c__DisplayClass0_0::client ldloc.0 <null> newobj System.Void SillyClient::.ctor() stfld SillyClient Program/<>c__DisplayClass0_0::client leave.s IL_0051: ldloc.0 pop <null> leave.s IL_006D: ret ldloc.0 <null> ldftn System.Void Program/<>c__DisplayClass0_0::<Main>b__0() newobj System.Void System.Action::.ctor(System.Object,System.IntPtr) call System.Threading.Tasks.Task System.Threading.Tasks.Task::Run(System.Action) pop <null> newobj System.Void System.Windows.Forms.ApplicationContext::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.ApplicationContext) ret <null> |