Suspicious
Suspect

25a62b765824226548d88291b8e1e01f

PE Executable
|
MD5: 25a62b765824226548d88291b8e1e01f
|
Size: 723.97 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Low

Hash
Hash Value
MD5
25a62b765824226548d88291b8e1e01f
Sha1
477b4503d11841fd4d916faa2a1d54dbaf0ac8c9
Sha256
1b114b61f4a2313dc924eb4ff2cf26fd0c66b0a4127901d5be4531f1a201928e
Sha384
a204e3825591919c143201fd9b6d63e876dae703186fd488b2061439da34d8f29714f11bb5acb84d29fc693adc09b9b7
Sha512
de7cfee44000ae54d59d6ddfa2e2da71622d8e8967d145369099412bb000ecaa402dfd0680ad8975097918bd2bf9f47a5de88a1f1a80d9d9fdbe54bc0dddbfc6
SSDeep
12288:m0OWhOQlPDa/snDnBMwIyB88B1Ov19FtSiHCn1kHLM8K3b:jtlPCsD+M9axttPHk
TLSH
F3F4129823ABE617D9A643B10CA1D3B417B92F98B401CB139EFABCE779127013C55397
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
ColorSchemeGenerator.ExportForm.resources
ColorSchemeGenerator.Properties.Resources.resources
KS
[NBF]root.Data
Qxrn
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: ZKOL.pdb

Module Name

ZKOL.exe

Full Name

ZKOL.exe

EntryPoint

System.Void ColorSchemeGenerator.Program::Main()

Scope Name

ZKOL.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

ZKOL

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

168

Main Method

System.Void ColorSchemeGenerator.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void ColorSchemeGenerator.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

25a62b765824226548d88291b8e1e01f (723.97 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙