Suspicious
Suspect

147545b7f8afb7f7e3b6b1c0e5cb0f7b

PE Executable
|
MD5: 147545b7f8afb7f7e3b6b1c0e5cb0f7b
|
Size: 316.18 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

High

Hash
Hash Value
MD5
147545b7f8afb7f7e3b6b1c0e5cb0f7b
Sha1
823520bba2a0aeb6a10b8bc721690903019c6374
Sha256
1d2f9b6680d3df883dceac3eb5dd35c13a9862ef0ba6f40603df5a1e54408c6e
Sha384
bc603a05ae71dad2a7ce88cbcfb610e26641b32a6a50662544443f6b65192935fbcb2889712edb33ca05adf281f6d9d9
Sha512
72fa3516f9ebd9aa6a4283ec4148dff5c2b1252ed083c4b2a8b937b016926e444d5fe84aa44970a9d6f1aa8911cd27a806bc414ef3517b80581decb6aacb2e9c
SSDeep
6144:H13P6JvTP6fRZxLjHloHdve11ikZrwpRwBiT9ycCiVI:V3P6SpfSg1ikGpROTiVI
TLSH
AF640815135C7E0BD59EAA77D4F6214D23B4E0B2E4D3CB4A1840DB691FC1790AE32BAE
File Structure
[Authenticode]_3e43f63b.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.reloc
.rsrc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Edge.Properties.Resources.resources
             
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

Authenticode present at 0x4A400 size 12056 bytes

Module Name

Edge.exe

Full Name

Edge.exe

EntryPoint

System.Void  ::   ()

Scope Name

Edge.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

Edge

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.8

Total Strings

139

Main Method

System.Void  ::   ()

Main IL Instruction Count

85

Main IL

ldnull <null> call System.Reflection.MethodBase System.Reflection.MethodBase::GetCurrentMethod() ldc.i4 27224 br IL_00A0: ldc.i4.1 sub <null> ldarg.1 <null> stind.i8 <null> neg <null> ldc.i4 28208 ldc.i4 32 ldc.i4 303287 ldc.i4 11948 br IL_0091: ldc.i4.0 ldc.i4.8 <null> br.s IL_0054: ldc.i4.0 shr <null> ldnull <null> ldc.i4 0 newarr System.Object dup <null> stloc.0 <null> callvirt System.Object  . /. ::(System.Object,System.Object[]) br.s IL_005D: ldc.i4.1 ldarg.0 <null> ret <null> ldc.i4.1 <null> brtrue.s IL_004C: br.s IL_0071 ldc.i4.6 <null> pop <null> br.s IL_0071: ldc.i4.1 mul <null> ldind.ref <null> stind.r8 <null> ldind.i2 <null> br.s IL_0014: ldc.i4 28208 ldc.i4.0 <null> brfalse.s IL_0059: br.s IL_007A ldc.i4.m1 <null> pop <null> br.s IL_007A: ldc.i4.1 br.s IL_0031: ldnull ldc.i4.1 <null> brtrue.s IL_0062: pop ldc.i4.5 <null> pop <null> pop <null> br.s IL_0046: ret ldc.i4.0 <null> brfalse.s IL_006A: ldc.i4 50 ldc.i4.1 <null> pop <null> ldc.i4 50 br.s IL_0052: br.s IL_0014 ldc.i4.1 <null> brtrue.s IL_0076: br.s IL_0065 ldc.i4.6 <null> pop <null> br.s IL_0065: ldc.i4.0 br.s IL_0050: stind.r8 ldc.i4.1 <null> brtrue.s IL_007F: br.s IL_0085 ldc.i4.1 <null> pop <null> br.s IL_0085: ldc.i4.0 ldarg.2 <null> ldc.i4.5 <null> br.s IL_005B: br.s IL_0031 ldc.i4.0 <null> brfalse.s IL_008A: call  . /.   . ::  (System.Object,System.Reflection.MethodBase,System.UInt32,System.Int32,System.UInt32,System.UInt32,System.UInt32,System.UInt32,System.Int32) ldc.i4.0 <null> pop <null> call  . /.   . ::  (System.Object,System.Reflection.MethodBase,System.UInt32,System.Int32,System.UInt32,System.UInt32,System.UInt32,System.UInt32,System.Int32) br.s IL_0083: br.s IL_005B ldc.i4.0 <null> brfalse.s IL_0096: ldc.i4 5 ldc.i4.3 <null> pop <null> ldc.i4 5 br IL_002E: br.s IL_0054 ldc.i4.1 <null> brtrue.s IL_00A5: br IL_0047 ldc.i4.6 <null> pop <null> br IL_0047: ldc.i4.1 br IL_0012: stind.i8

147545b7f8afb7f7e3b6b1c0e5cb0f7b (316.18 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙