Suspicious
Suspect

30c79893c19e1d585e72c1793b19af9d

PE Executable
MD5: 30c79893c19e1d585e72c1793b19af9d
Size: 1.31 MB
application/x-dosexec
Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Low

Hash
Hash Value
MD5
30c79893c19e1d585e72c1793b19af9d
Sha1
ada3b62dc0a45b299edb5bda3d1f62bc7fc3f052
Sha256
e3f894ca1868d4dd9c8a0cf03bd00bb4268359b05feaabac640f753f7ef980ba
Sha384
5d4f944d99aa5e9b9764b36d93a8d3b4bc9312efb187af593c7e8901d1f31f40ef04abf21c4455773b06f16bd4e4709a
Sha512
64fa60d223d55c93d35adb07823b3bfa0cf32867e670b4594a74b78f9ed0b59c2ce6fe29c51c08c45158b76ea434dd5e466b3ca7e14bee6721e12eedb5bf71dd
SSDeep
24576:ltsCDb36T6hRRCCXUJWpQ+NGkIAm13QuQQe:ajkIAm1Q
TLSH
3155E242A2C6FD1BD3362E358594E32D89247F31EEA6930B30BD35AC543BBAD8549353

PeID

Microsoft Visual C++ DLL
Microsoft Visual C++ v6.0
File Structure
[Authenticode]_3ca009a4.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rsrc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0006
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Solara.g.resources
SolaraUI.Properties.Resources.resources
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

Authenticode present at 0x13DA00 size 8456 bytes

Info

PDB Path: C:\Users\quivi\Desktop\Projects\SOLARA\SolaraUI\WpfApp1\obj\x64\Release\Solara.pdb

Module Name

Solara.exe

Full Name

Solara.exe

EntryPoint

System.Void XamlGeneratedNamespace.GeneratedApplication::Main()

Scope Name

Solara.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

Solara

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.8

Total Strings

223

Main Method

System.Void XamlGeneratedNamespace.GeneratedApplication::Main()

Main IL Instruction Count

8

Main IL

newobj System.Void XamlGeneratedNamespace.GeneratedApplication::.ctor() stloc.0 <null> ldloc.0 <null> callvirt System.Void XamlGeneratedNamespace.GeneratedApplication::InitializeComponent() ldloc.0 <null> callvirt System.Int32 System.Windows.Application::Run() pop <null> ret <null>

30c79893c19e1d585e72c1793b19af9d (1.31 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙