Suspicious
Suspect

3806052533fd589a302746c95435b9ab

PE Executable
|
MD5: 3806052533fd589a302746c95435b9ab
|
Size: 939.01 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Medium

Hash
Hash Value
MD5
3806052533fd589a302746c95435b9ab
Sha1
7000f79abfc34defa7e3f72ad97d3f1f988f6dff
Sha256
57b8d1f1afc63450aff6f6c4a3ac9af5c7f7e1ea8de0187987df2ce051cd2ea5
Sha384
242f7a0cc0275f9897e11e41235a87de5f1d31e7e9f5a9fa598932d87edaa5021633718fa688fccf15ebdb504b4c570a
Sha512
a6cdde835d0682ee68d046b1f8ce9ff2868f0fd6bd8eff6772125d476267e96d4499fc355dd126eaa0b34c8e21f79fe7fae50f2aadf1e7906b1e9f8659137f45
SSDeep
24576:35/Btrev9VaWSyOG2YbuhPTJW8gfL0FoR3obwwAEMFC:3dCvDKVLZ8fL4m4wwAEMF
TLSH
A21512611A19CB13D5E61BF0DC71D3B907B42E8AB411C35B6EE9BDEF387574826802A3

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
WindowsContacts.AddEditContactForm.resources
WindowsContacts.Properties.Resources.resources
KOp
[NBF]root.Data
kupa
[NBF]root.Data
[NBF]root.Data-preview.png
tTZ
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: sOL.pdb

Module Name

sOL.exe

Full Name

sOL.exe

EntryPoint

System.Void WindowsContacts.Program::Main()

Scope Name

sOL.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

sOL

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

208

Main Method

System.Void WindowsContacts.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void WindowsContacts.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Module Name

sOL.exe

Full Name

sOL.exe

EntryPoint

System.Void WindowsContacts.Program::Main()

Scope Name

sOL.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

sOL

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

208

Main Method

System.Void WindowsContacts.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void WindowsContacts.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

3806052533fd589a302746c95435b9ab (939.01 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙