Symbol Ofbuscation Score
|
Hash | Hash Value |
|---|---|
| MD5 | 9b7af0b65760f2506074828a2515fa24
|
| Sha1 | 39d2f823ac87579fb74aa8872c2f5f69d7ecda1e
|
| Sha256 | e151fd79a759d3206f5e0012cec26e972ec74ea43c5e6943d81310c30408fe4e
|
| Sha384 | dcafa27b632d6d788a478ad17646e8f166f7085b9d05f7542c5e8b0a8fa22f4965529f8633d319e60952990a3d6185ae
|
| Sha512 | 9982ac7aabf52a00d48ef08ef50d783a57fa58e7a5190ad0dd2457704fbfe4f02fa841cf81106cfdbf5f85492b2d267448cfa1c496e0d4d6ee84c64591a1f82c
|
| SSDeep | 98304:HIrF5ear1KnRu3xMae57edj/1JyC0Pxx:oTeM6Zed/0Pxx
|
| TLSH | A01623CD765075AED853DC7185542DB86213ADAA2B1BF2079C2338A7763F4CACF160A3
|
PeID
|
Name0 | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Module Name | server1.exe |
| Full Name | server1.exe |
| EntryPoint | System.Void ::() |
| Scope Name | server1.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | server1 |
| Assembly Version | 2.2.9.9 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.8 |
| Total Strings | 7 |
| Main Method | System.Void ::() |
| Main IL Instruction Count | 55 |
| Main IL | nop <null> call System.String ::() ldc.i4 -1483510198 call System.String <Module>::<System.String>(System.UInt32) call System.String ::(System.String,System.String) stsfld System.String :: ldsfld System.String :: call System.Byte[] ::(System.String) stsfld System.Byte[] :: ldc.i4 802795817 ldc.i4 414080704 xor <null> dup <null> stloc.2 <null> ldc.i4.5 <null> rem.un <null> switch dnlib.DotNet.Emit.Instruction[] br.s IL_00C5: ret newobj System.Void ::.ctor() stloc.0 <null> ldloc.0 <null> ldsfld System.Byte[] :: call System.Diagnostics.Process ::() call System.Diagnostics.ProcessModule ::(System.Diagnostics.Process) call System.String ::(System.Diagnostics.ProcessModule) callvirt System.Boolean ::(System.Byte[],System.String) pop <null> ldloc.2 <null> ldc.i4 -2079006767 mul <null> ldc.i4 -854575878 xor <null> br.s IL_002E: ldc.i4 414080704 newobj System.Void ::.ctor() stloc.1 <null> ldloc.2 <null> ldc.i4 617195639 mul <null> ldc.i4 751658989 xor <null> br.s IL_002E: ldc.i4 414080704 ldloc.1 <null> ldsfld System.Byte[] :: call System.Diagnostics.Process ::() call System.Diagnostics.ProcessModule ::(System.Diagnostics.Process) call System.String ::(System.Diagnostics.ProcessModule) callvirt System.Boolean ::(System.Byte[],System.String) pop <null> ldloc.2 <null> ldc.i4 1496902521 mul <null> ldc.i4 138859044 xor <null> br IL_002E: ldc.i4 414080704 ret <null> |
| Module Name | server1.exe |
| Full Name | server1.exe |
| EntryPoint | System.Void ::() |
| Scope Name | server1.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | server1 |
| Assembly Version | 2.2.9.9 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.8 |
| Total Strings | 7 |
| Main Method | System.Void ::() |
| Main IL Instruction Count | 55 |
| Main IL | nop <null> call System.String ::() ldc.i4 -1483510198 call System.String <Module>::<System.String>(System.UInt32) call System.String ::(System.String,System.String) stsfld System.String :: ldsfld System.String :: call System.Byte[] ::(System.String) stsfld System.Byte[] :: ldc.i4 802795817 ldc.i4 414080704 xor <null> dup <null> stloc.2 <null> ldc.i4.5 <null> rem.un <null> switch dnlib.DotNet.Emit.Instruction[] br.s IL_00C5: ret newobj System.Void ::.ctor() stloc.0 <null> ldloc.0 <null> ldsfld System.Byte[] :: call System.Diagnostics.Process ::() call System.Diagnostics.ProcessModule ::(System.Diagnostics.Process) call System.String ::(System.Diagnostics.ProcessModule) callvirt System.Boolean ::(System.Byte[],System.String) pop <null> ldloc.2 <null> ldc.i4 -2079006767 mul <null> ldc.i4 -854575878 xor <null> br.s IL_002E: ldc.i4 414080704 newobj System.Void ::.ctor() stloc.1 <null> ldloc.2 <null> ldc.i4 617195639 mul <null> ldc.i4 751658989 xor <null> br.s IL_002E: ldc.i4 414080704 ldloc.1 <null> ldsfld System.Byte[] :: call System.Diagnostics.Process ::() call System.Diagnostics.ProcessModule ::(System.Diagnostics.Process) call System.String ::(System.Diagnostics.ProcessModule) callvirt System.Boolean ::(System.Byte[],System.String) pop <null> ldloc.2 <null> ldc.i4 1496902521 mul <null> ldc.i4 138859044 xor <null> br IL_002E: ldc.i4 414080704 ret <null> |