Suspicious
Suspect

18a60dcf20b5ba38ce24a550e6d7cd0e

PE Executable
|
MD5: 18a60dcf20b5ba38ce24a550e6d7cd0e
|
Size: 581.12 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Medium

Hash
Hash Value
MD5
18a60dcf20b5ba38ce24a550e6d7cd0e
Sha1
0616d7850862bab0f3e5550328402be14b2e3a9b
Sha256
76d04adae4c3745c6b059e1ce15e58b253257234b9d34ac259f71a7d7259d276
Sha384
5fded08a8d5f9e431b82ac4bce69e7317529c5750aee733c57b8e66d774995404db97432aabc4422c2d58f548f923d81
Sha512
aa4a641ebcbe8fbf24a48c32e42355255df7632e69d375ba390143bdf2cf26ec2fad01ab78e58318eb22a254fe3a934e38cc3e17b04185b51dac82eb29dd4eb0
SSDeep
12288:3+0uzc30OTMfwJhPCayJ5RljzIw7+7J86Yjx6l7v:u07AfUhPxybHjQ7+jx+
TLSH
59C401483266D617D6A417F91AB2F27403386D9EE621E21BAED87EDF7871F004C48793
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
SortingComparisons.Forms.AlgorithmSelectorForm.resources
SortingComparisons.Properties.Resources.resources
Eat_Other
[NBF]root.Data
[NBF]root.Data-preview.png
Oh
[NBF]root.Data
[NBF]root.Data-preview.png
Sort1
[NBF]root.Data
aSlK
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: mLLp.pdb

Module Name

mLLp.exe

Full Name

mLLp.exe

EntryPoint

System.Void SortingComparisons.Program::Main()

Scope Name

mLLp.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

mLLp

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

261

Main Method

System.Void SortingComparisons.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void SortingComparisons.Forms.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

18a60dcf20b5ba38ce24a550e6d7cd0e (581.12 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙