Suspicious
Suspect

52e843840e6c08a06bbdbde0ab505051

PE Executable
|
MD5: 52e843840e6c08a06bbdbde0ab505051
|
Size: 787.97 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Low

Hash
Hash Value
MD5
52e843840e6c08a06bbdbde0ab505051
Sha1
8afc8ddf784d3e8c8a9a227def736b0638ab1956
Sha256
c60a7b0e526a31793afddc2ebae966aac426e2e9d7e3ce1dc3d9e91660668771
Sha384
75f8d8b91fd6831bf8c6fe3cd59559bdac3666817536b22537dc065df7e58d654da832fff963aef5801aa02a5ac1cc0a
Sha512
ea51a510fa9712963f90323ada44480e77e60048f564be79c606854447a352312115d3b85b77c81ff52c7445215f8acfe3891f153a141215c7866473a241c774
SSDeep
24576:84vfyKVy+y9ASf+KtxYJBEfNhR3cQgDczxk:jHBy9AS2bJBy93dzC
TLSH
89F4F144236DEF03D1BA5FF80529E27003FAACAA9511E7498EDA3CDF7929F404A05797

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
.Net Resources
WebAudioController.AddFile.resources
SimpleWindowsApp.Calculator.resources
$this.Icon
[NBF]root.IconData
VY
[NBF]root.Data
WebAudioController.Properties.Resources.resources
QaGrR
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: C:\Users\Administrator\Desktop\Client\Temp\CsCmxftzaR\src\obj\Debug\SbrpN.pdb

Module Name

SbrpN.exe

Full Name

SbrpN.exe

EntryPoint

System.Void WebAudioController.Service::Main()

Scope Name

SbrpN.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

SbrpN

Assembly Version

2.8.1.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

788

Main Method

System.Void WebAudioController.Service::Main()

Main IL Instruction Count

13

Main IL

nop <null> newobj System.Void SimpleWindowsApp.Calculator::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void WebAudioController.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Module Name

SbrpN.exe

Full Name

SbrpN.exe

EntryPoint

System.Void WebAudioController.Service::Main()

Scope Name

SbrpN.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

SbrpN

Assembly Version

2.8.1.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

788

Main Method

System.Void WebAudioController.Service::Main()

Main IL Instruction Count

13

Main IL

nop <null> newobj System.Void SimpleWindowsApp.Calculator::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void WebAudioController.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

52e843840e6c08a06bbdbde0ab505051 (787.97 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙