Suspicious
Suspect

05d749a638fab1dbf02cc129f0e6a104

PE Executable
|
MD5: 05d749a638fab1dbf02cc129f0e6a104
|
Size: 793.09 KB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very low

Hash
 Hash Value
MD5
05d749a638fab1dbf02cc129f0e6a104
Sha1
1fec0f0fcd1a75de7988637caae2c0cb0f9a43bb
Sha256
fb114b07eab8c5dd7faf8dc1b15f79cda7043f283f17c2c89797c57112d926d1
Sha384
5fb245578e16d8b9496bc56a0ec9dc333eed79caa2e6de4bb88ff736bd8f8aa9d0fba0157500de1c133ebdea804065e0
Sha512
77d49e31965540970376b7d879d731ab1a9814b74452733a72f6161ea92279d2552f72ffe63619facd62b47ed3aad598d571392c2e7e416f600f5f3bcc83a5f9
SSDeep
24576:oN7Z+IuQo5/x1AYuMKejvRp0eq9iP4jz:oBZpuQo5BudKfsEI
TLSH
D2F40192B48CDF02E1AF1AB20671D234135B0E49EE21D7DBD6E47DDB747BA256208B43

PeID

Microsoft Visual C++ v6.0 DLL
File Structure
05d749a638fab1dbf02cc129f0e6a104
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
.Net Resources
Cycle_Jump_Game.Form1.resources
Cycle_Jump_Game.Main.resources
$this.Icon
[NBF]root.IconData
PIP
[NBF]root.Data
timer1.TrayLocation
Cycle_Jump_Game.Properties.Resources.resources
QfIc
[NBF]root.Data
[NBF]root.Data-preview.png
t1
[NBF]root.Data
[NBF]root.Data-preview.png
t2
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
Name
 Value
Module Name

klRx.exe
Full Name

klRx.exe
EntryPoint

System.Void Cycle_Jump_Game.More::Main()
Scope Name

klRx.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

klRx
Assembly Version

0.0.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.5
Total Strings

64
Main Method

System.Void Cycle_Jump_Game.More::Main()
Main IL Instruction Count

10
Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void Cycle_Jump_Game.Main::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>
Artefacts
Name
 Value
PDB Path

klRx.pdb
05d749a638fab1dbf02cc129f0e6a104 (793.09 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙