Suspicious
Suspect

155dfdc4eb24f4e4622168fc015a93db

PE Executable
|
MD5: 155dfdc4eb24f4e4622168fc015a93db
|
Size: 1.27 MB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Low

Hash
Hash Value
MD5
155dfdc4eb24f4e4622168fc015a93db
Sha1
9ba90e762751aff73ce894bc278e3053d9a31c0c
Sha256
a9b670ff357cbb942a795c8524999072cd9466486b9c28b5b0d809b01547293b
Sha384
2ace428624e1ea3760d87e5b2f01c0daa2de2ee114c11f78240a3d755f09c55c97faa5cbc37a77f1404b66a1b20f1e70
Sha512
e2c501590162a1d89b30d9973d67af579eed96cfc0ab61130d87a1e5de727e11d7c270639cfeede45abc0e156809495410458236bb3972229df6dfad4d2df7e1
SSDeep
24576:2guQUdN+w0N6UDszMsvqkUibr+2eVtKLZyAeJxFRK3YyiVBdVict:vud+l6w4lCzibrjejAroxSohXdQc
TLSH
C645231028DCCE51C1F803F06476E33443B5AE9D9813E29BADF96CEB3A95F9458A8357

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
BlindSimulator.Properties.Resources.resources
Clear
[NBF]root.Data
hPnBL
[NBF]root.Data
[NBF]root.Data-preview.png
werwre
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

DeploymentMetadataEntryFiel

Full Name

DeploymentMetadataEntryFiel

EntryPoint

System.Void ISectionWithReferenceIdentity.IMethodCallMess::Main()

Scope Name

DeploymentMetadataEntryFiel

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

EQwhl

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

251

Main Method

System.Void ISectionWithReferenceIdentity.IMethodCallMess::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void IsSubsetOfT.SuppressIldasmAttrib::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Module Name

DeploymentMetadataEntryFiel

Full Name

DeploymentMetadataEntryFiel

EntryPoint

System.Void ISectionWithReferenceIdentity.IMethodCallMess::Main()

Scope Name

DeploymentMetadataEntryFiel

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

EQwhl

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

251

Main Method

System.Void ISectionWithReferenceIdentity.IMethodCallMess::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void IsSubsetOfT.SuppressIldasmAttrib::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

155dfdc4eb24f4e4622168fc015a93db (1.27 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙