Suspicious
Suspect

1a65ed3ed5c6431b6c94d1a671f8e48d

PE Executable
|
MD5: 1a65ed3ed5c6431b6c94d1a671f8e48d
|
Size: 3.39 MB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Low

Hash
 Hash Value
MD5
1a65ed3ed5c6431b6c94d1a671f8e48d
Sha1
fecedae31091280b948103776d1c4c5c58476370
Sha256
d8a4f7be62e25c84652a3dd085f09be2e8af716d0c4cd207a36b465f79d6baaf
Sha384
fda57eab44911842f0ff6cb4b0df254787f2a65dd55a2014bbe64b6cd5fcde4bfbf8f7532cb3817fc70359f5f1886d76
Sha512
c39c1136b62364c4068e37840ed3481df31b0bd5295473d7d72fe0012f47d817ed71ea7c9a1ffc0ce7bdc0638ac3c016d8b728e242dc3fdd1b970d3d2cf771d9
SSDeep
49152:hm0X4VcpfAdACVKQg6+CWGY+orn2FtRD1MHHn72eh2NT:hmCrlCVKQg6+C9U4
TLSH
DBF56C1477F85F27E2BF8372A5B0005297F1E82AB367EB0B658166BA1C53B015D427B3

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
1a65ed3ed5c6431b6c94d1a671f8e48d
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Quasar.Client.Properties.Resources.resources
ILRepack.List
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Module Name

Client
Full Name

Client
EntryPoint

System.Void 晄쁟〺൪ⰿᑕ묱姌᫼␕￢Ȃ䱳澏鵅::Main(System.String[])
Scope Name

Client
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Client
Assembly Version

1.4.1.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.5.2
Total Strings

11987
Main Method

System.Void 晄쁟〺൪ⰿᑕ묱姌᫼␕￢Ȃ䱳澏鵅::Main(System.String[])
Main IL Instruction Count

62
Main IL

ldarg.0 <null> brfalse.s IL_003F: nop ldarg.0 <null> ldlen <null> brfalse.s IL_003F: nop ldarg.0 <null> stloc.0 <null> ldc.i4.0 <null> stloc.1 <null> br.s IL_0039: ldloc.1 ldloc.0 <null> ldloc.1 <null> ldelem.ref <null> stloc.2 <null> ldloc.2 <null> ldstr --stress-test-bot- callvirt System.Boolean System.String::StartsWith(System.String) brfalse.s IL_0035: ldloc.1 ldloc.2 <null> ldstr --stress-test-bot- ldstr callvirt System.String System.String::Replace(System.String,System.String) stsfld System.String 晄쁟〺൪ⰿᑕ묱姌᫼␕￢Ȃ䱳澏鵅::㐥胐೧㝶樠鸩囜鵙䢷前஑ᐿ鿹逺㏆㓢ꛈ✜ br.s IL_003F: nop ldloc.1 <null> ldc.i4.1 <null> add <null> stloc.1 <null> ldloc.1 <null> ldloc.0 <null> ldlen <null> conv.i4 <null> blt.s IL_000D: ldloc.0 nop <null> ldsfld System.Boolean 쯜◩Ä鰯䰣儘ਿ″鯯鐓⋬膅쏯�ꖡ咶敋拐堖ﴬ::㓈뿍⻽╆票ౘ딸聇⿐䔱괹弐情꒘⑉붔ೖ୯ꒁ ldsfld System.Boolean 쯜◩Ä鰯䰣儘ਿ″鯯鐓⋬膅쏯�ꖡ咶敋拐堖ﴬ::﫥晦栖Æ鍤ꖡ�깳컵ﾀ츄ٹ鯌睼ꋇ㦢䞊 ldsfld System.Boolean 쯜◩Ä鰯䰣儘ਿ″鯯鐓⋬膅쏯�ꖡ咶敋拐堖ﴬ::䅚垐䒄㮛ᕍ檼鏔牏妰컡⌞륑齯睃⟩姖畚漍 ldsfld System.Boolean 쯜◩Ä鰯䰣儘ਿ″鯯鐓⋬膅쏯�ꖡ咶敋拐堖ﴬ::�魛奁⣡⥔熨ಷ酶鬩㊻섖庒衪ຜ뢜￿謵륒 call System.Boolean ﹹ멽㧩碸⧒캬疑끞菄馽暬俜�緇趝쎆::鋖�쪪琞ᘕ⌺式뱬茵ｩ䔙ᨀퟑ▌㫅䋠⍁(System.Boolean,System.Boolean,System.Boolean,System.Boolean) pop <null> leave.s IL_005F: ldc.i4 3072 pop <null> leave.s IL_005F: ldc.i4 3072 ldc.i4 3072 call System.Void System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType) ldc.i4.2 <null> call System.Void System.Windows.Forms.Application::SetUnhandledExceptionMode(System.Windows.Forms.UnhandledExceptionMode) ldnull <null> ldftn System.Void 晄쁟〺൪ⰿᑕ묱姌᫼␕￢Ȃ䱳澏鵅::酵⹂鲂ꔿ縷檿醭騨ᑆ鋻꼕ໟ箢껀Ὴ⧄�昐(System.Object,System.Threading.ThreadExceptionEventArgs) newobj System.Void System.Threading.ThreadExceptionEventHandler::.ctor(System.Object,System.IntPtr) call System.Void System.Windows.Forms.Application::add_ThreadException(System.Threading.ThreadExceptionEventHandler) call System.AppDomain System.AppDomain::get_CurrentDomain() ldnull <null> ldftn System.Void 晄쁟〺൪ⰿᑕ묱姌᫼␕￢Ȃ䱳澏鵅::噉퀊ⰴ憫௨䍣봱㖀尧ꑯ䁜棵ෆ點ᨑ窞꧊얉碸(System.Object,System.UnhandledExceptionEventArgs) newobj System.Void System.UnhandledExceptionEventHandler::.ctor(System.Object,System.IntPtr) callvirt System.Void System.AppDomain::add_UnhandledException(System.UnhandledExceptionEventHandler) call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void ᤎ䡘شⳋ럱ན됚ꀹ腮긝㘊䏂኶摍�õ⧗孕::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>
Module Name

Client
Full Name

Client
EntryPoint

System.Void 晄쁟〺൪ⰿᑕ묱姌᫼␕￢Ȃ䱳澏鵅::Main(System.String[])
Scope Name

Client
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Client
Assembly Version

1.4.1.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.5.2
Total Strings

11987
Main Method

System.Void 晄쁟〺൪ⰿᑕ묱姌᫼␕￢Ȃ䱳澏鵅::Main(System.String[])
Main IL Instruction Count

62
Main IL

ldarg.0 <null> brfalse.s IL_003F: nop ldarg.0 <null> ldlen <null> brfalse.s IL_003F: nop ldarg.0 <null> stloc.0 <null> ldc.i4.0 <null> stloc.1 <null> br.s IL_0039: ldloc.1 ldloc.0 <null> ldloc.1 <null> ldelem.ref <null> stloc.2 <null> ldloc.2 <null> ldstr --stress-test-bot- callvirt System.Boolean System.String::StartsWith(System.String) brfalse.s IL_0035: ldloc.1 ldloc.2 <null> ldstr --stress-test-bot- ldstr callvirt System.String System.String::Replace(System.String,System.String) stsfld System.String 晄쁟〺൪ⰿᑕ묱姌᫼␕￢Ȃ䱳澏鵅::㐥胐೧㝶樠鸩囜鵙䢷前஑ᐿ鿹逺㏆㓢ꛈ✜ br.s IL_003F: nop ldloc.1 <null> ldc.i4.1 <null> add <null> stloc.1 <null> ldloc.1 <null> ldloc.0 <null> ldlen <null> conv.i4 <null> blt.s IL_000D: ldloc.0 nop <null> ldsfld System.Boolean 쯜◩Ä鰯䰣儘ਿ″鯯鐓⋬膅쏯�ꖡ咶敋拐堖ﴬ::㓈뿍⻽╆票ౘ딸聇⿐䔱괹弐情꒘⑉붔ೖ୯ꒁ ldsfld System.Boolean 쯜◩Ä鰯䰣儘ਿ″鯯鐓⋬膅쏯�ꖡ咶敋拐堖ﴬ::﫥晦栖Æ鍤ꖡ�깳컵ﾀ츄ٹ鯌睼ꋇ㦢䞊 ldsfld System.Boolean 쯜◩Ä鰯䰣儘ਿ″鯯鐓⋬膅쏯�ꖡ咶敋拐堖ﴬ::䅚垐䒄㮛ᕍ檼鏔牏妰컡⌞륑齯睃⟩姖畚漍 ldsfld System.Boolean 쯜◩Ä鰯䰣儘ਿ″鯯鐓⋬膅쏯�ꖡ咶敋拐堖ﴬ::�魛奁⣡⥔熨ಷ酶鬩㊻섖庒衪ຜ뢜￿謵륒 call System.Boolean ﹹ멽㧩碸⧒캬疑끞菄馽暬俜�緇趝쎆::鋖�쪪琞ᘕ⌺式뱬茵ｩ䔙ᨀퟑ▌㫅䋠⍁(System.Boolean,System.Boolean,System.Boolean,System.Boolean) pop <null> leave.s IL_005F: ldc.i4 3072 pop <null> leave.s IL_005F: ldc.i4 3072 ldc.i4 3072 call System.Void System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType) ldc.i4.2 <null> call System.Void System.Windows.Forms.Application::SetUnhandledExceptionMode(System.Windows.Forms.UnhandledExceptionMode) ldnull <null> ldftn System.Void 晄쁟〺൪ⰿᑕ묱姌᫼␕￢Ȃ䱳澏鵅::酵⹂鲂ꔿ縷檿醭騨ᑆ鋻꼕ໟ箢껀Ὴ⧄�昐(System.Object,System.Threading.ThreadExceptionEventArgs) newobj System.Void System.Threading.ThreadExceptionEventHandler::.ctor(System.Object,System.IntPtr) call System.Void System.Windows.Forms.Application::add_ThreadException(System.Threading.ThreadExceptionEventHandler) call System.AppDomain System.AppDomain::get_CurrentDomain() ldnull <null> ldftn System.Void 晄쁟〺൪ⰿᑕ묱姌᫼␕￢Ȃ䱳澏鵅::噉퀊ⰴ憫௨䍣봱㖀尧ꑯ䁜棵ෆ點ᨑ窞꧊얉碸(System.Object,System.UnhandledExceptionEventArgs) newobj System.Void System.UnhandledExceptionEventHandler::.ctor(System.Object,System.IntPtr) callvirt System.Void System.AppDomain::add_UnhandledException(System.UnhandledExceptionEventHandler) call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void ᤎ䡘شⳋ럱ན됚ꀹ腮긝㘊䏂኶摍�õ⧗孕::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>
1a65ed3ed5c6431b6c94d1a671f8e48d (3.39 MB)
File Structure
1a65ed3ed5c6431b6c94d1a671f8e48d
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Quasar.Client.Properties.Resources.resources
ILRepack.List
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙