Suspicious
Suspect

Share on LinkedIn
Print
PE Executable
MD5: 1b67e62e91c65302f1a4c9494f8464cc
Size: 3.33 MB
application/x-dosexec
Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Low

Hash
Hash Value
MD5
1b67e62e91c65302f1a4c9494f8464cc
Sha1
e5e3f446e406ef98515f194a6d013b23b350f5aa
Sha256
3057ec5b6ca4841b13739f936a428edbd671bf26bf1fae4ff52ebd677bd82c50
Sha384
a0aefa7a7b83cfd1821f39d30063b7d8022f364438743d1e3b40de57c1ff53bde0e8575124a626ae1a890bf7b813c35b
Sha512
ea5d8fd6a869ab6a074030ccb29d2daf9627c433b59cadcbfb3680ea9b37cc920c495694d6115da438fce7ec7398ebf0126942a361fc6bbe74a89c31b6e3b57a
SSDeep
49152:HvrlL26AaNeWgPhlmVqvMQ7XSKZUP8hbbRzLoGx0THHB72eh2NTg:HvRL26AaNeWgPhlmVqkQ7XSKeP8hZK
TLSH
B8F55A0537F85E32E16BD37295F1541367F0FC2AB363EB0B659167BA1C93B408842AA7

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Quasar.Client.Properties.Resources.resources
ILRepack.List
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

Client

Full Name

Client

EntryPoint

System.Void ᛅ㷻퀏ꇦ⡪曩믇�罏맿뚍�쯻氺젱媼ᰱ::Main(System.String[])

Scope Name

Client

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

Client

Assembly Version

1.4.1.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5.2

Total Strings

11123

Main Method

System.Void ᛅ㷻퀏ꇦ⡪曩믇�罏맿뚍�쯻氺젱媼ᰱ::Main(System.String[])

Main IL Instruction Count

19

Main IL

ldc.i4 3072 call System.Void System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType) ldc.i4.2 <null> call System.Void System.Windows.Forms.Application::SetUnhandledExceptionMode(System.Windows.Forms.UnhandledExceptionMode) ldnull <null> ldftn System.Void ᛅ㷻퀏ꇦ⡪曩믇�罏맿뚍�쯻氺젱媼ᰱ::࿔퇿躑ꓯ˒٢췢触漪�祲엹㏙䃃ㄱ⛐鱩χᲫ↷(System.Object,System.Threading.ThreadExceptionEventArgs) newobj System.Void System.Threading.ThreadExceptionEventHandler::.ctor(System.Object,System.IntPtr) call System.Void System.Windows.Forms.Application::add_ThreadException(System.Threading.ThreadExceptionEventHandler) call System.AppDomain System.AppDomain::get_CurrentDomain() ldnull <null> ldftn System.Void ᛅ㷻퀏ꇦ⡪曩믇�罏맿뚍�쯻氺젱媼ᰱ::돰싼䨲渥뱋攀⧟Яꔹ﬉㲸縝࿾ǵ댖Ꮳ(System.Object,System.UnhandledExceptionEventArgs) newobj System.Void System.UnhandledExceptionEventHandler::.ctor(System.Object,System.IntPtr) callvirt System.Void System.AppDomain::add_UnhandledException(System.UnhandledExceptionEventHandler) call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void �총퐃憓⻀徹띛㡊峔瀞魏膠堻夃鮫댅怂呏⻷朧::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>

Module Name

Client

Full Name

Client

EntryPoint

System.Void ᛅ㷻퀏ꇦ⡪曩믇�罏맿뚍�쯻氺젱媼ᰱ::Main(System.String[])

Scope Name

Client

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

Client

Assembly Version

1.4.1.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5.2

Total Strings

11123

Main Method

System.Void ᛅ㷻퀏ꇦ⡪曩믇�罏맿뚍�쯻氺젱媼ᰱ::Main(System.String[])

Main IL Instruction Count

19

Main IL

ldc.i4 3072 call System.Void System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType) ldc.i4.2 <null> call System.Void System.Windows.Forms.Application::SetUnhandledExceptionMode(System.Windows.Forms.UnhandledExceptionMode) ldnull <null> ldftn System.Void ᛅ㷻퀏ꇦ⡪曩믇�罏맿뚍�쯻氺젱媼ᰱ::࿔퇿躑ꓯ˒٢췢触漪�祲엹㏙䃃ㄱ⛐鱩χᲫ↷(System.Object,System.Threading.ThreadExceptionEventArgs) newobj System.Void System.Threading.ThreadExceptionEventHandler::.ctor(System.Object,System.IntPtr) call System.Void System.Windows.Forms.Application::add_ThreadException(System.Threading.ThreadExceptionEventHandler) call System.AppDomain System.AppDomain::get_CurrentDomain() ldnull <null> ldftn System.Void ᛅ㷻퀏ꇦ⡪曩믇�罏맿뚍�쯻氺젱媼ᰱ::돰싼䨲渥뱋攀⧟Яꔹ﬉㲸縝࿾ǵ댖Ꮳ(System.Object,System.UnhandledExceptionEventArgs) newobj System.Void System.UnhandledExceptionEventHandler::.ctor(System.Object,System.IntPtr) callvirt System.Void System.AppDomain::add_UnhandledException(System.UnhandledExceptionEventHandler) call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void �총퐃憓⻀徹띛㡊峔瀞魏膠堻夃鮫댅怂呏⻷朧::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>

1b67e62e91c65302f1a4c9494f8464cc (3.33 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙