Suspicious
Suspect

534791f805019a19137ced8ff8fef98b

PE Executable
|
MD5: 534791f805019a19137ced8ff8fef98b
|
Size: 3.27 MB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Low

Hash
 Hash Value
MD5
534791f805019a19137ced8ff8fef98b
Sha1
863210737a298ff483bff0bdc9893ea5c2be334f
Sha256
99994c18d34425aabf7316fd762be99dadc589eaf0801f8390beccff4db960aa
Sha384
9b21fafbd2779dff1bbb3c74951f2f6fb4526e54c15797d761f83b68e82a417268930d8120bfb394bc11960410672769
Sha512
093c56c59140d344b2063e853bb21811e7c415b4de4f0dd2e80f7bf3488865dbdf98e3de812ab48c2d9733285d6670a61d6cbc374e0ba0fa39024c70cf72c479
SSDeep
49152:rRTprRYzL/ipxVi/TMeJRkLDUo1iKknTHHB72eh2NT:rRTx6/ipxVidh
TLSH
1DE56B1473F89E33D46E927396B1042263F1F86EF363EB2B648167B92D93B5048017A7

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
534791f805019a19137ced8ff8fef98b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Quasar.Client.Properties.Resources.resources
ILRepack.List
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Module Name

Client
Full Name

Client
EntryPoint

System.Void 玥륊ޘ̘窤㧕양ᤅ馽⣿뽠ꢟ�嬼旮俇䮭ད::Main(System.String[])
Scope Name

Client
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Client
Assembly Version

1.4.1.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.5.2
Total Strings

11176
Main Method

System.Void 玥륊ޘ̘窤㧕양ᤅ馽⣿뽠ꢟ�嬼旮俇䮭ད::Main(System.String[])
Main IL Instruction Count

37
Main IL

ldc.i4 3072 call System.Void System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType) ldc.i4.2 <null> call System.Void System.Windows.Forms.Application::SetUnhandledExceptionMode(System.Windows.Forms.UnhandledExceptionMode) ldnull <null> ldftn System.Void 玥륊ޘ̘窤㧕양ᤅ馽⣿뽠ꢟ�嬼旮俇䮭ད::ឥ䃝╨٘楯듾鈽ࣳꘖ˪ꍺꙣ跱깵䳁ᮼṾ(System.Object,System.Threading.ThreadExceptionEventArgs) newobj System.Void System.Threading.ThreadExceptionEventHandler::.ctor(System.Object,System.IntPtr) call System.Void System.Windows.Forms.Application::add_ThreadException(System.Threading.ThreadExceptionEventHandler) call System.AppDomain System.AppDomain::get_CurrentDomain() ldnull <null> ldftn System.Void 玥륊ޘ̘窤㧕양ᤅ馽⣿뽠ꢟ�嬼旮俇䮭ད::踅纘ꏚ�뼽츅ᴬ੸讗ᜅ壏浓ﰯ놋橁幉헾鱶쇁(System.Object,System.UnhandledExceptionEventArgs) newobj System.Void System.UnhandledExceptionEventHandler::.ctor(System.Object,System.IntPtr) callvirt System.Void System.AppDomain::add_UnhandledException(System.UnhandledExceptionEventHandler) call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) ldsfld System.Boolean 彺㿼皢钛稑솬ꮠ礨埊ˀ㤹旀尊怈ᚾ宪瓾㐧㖼::䦒㾱ᓲሱ䏼⑱面䫯ᵹ薉쎓䰆籃籐祫㜟쟑 brfalse.s IL_0061: ldsfld System.Boolean 彺㿼皢钛稑솬ꮠ礨埊ˀ㤹旀尊怈ᚾ宪瓾㐧㖼::噈�뢮븱㝴权㢖缉챊ꡆ薷薘馧崳准㎴뀐閴犃췌 call System.Boolean ༯垀趸驪쥡둡ꌔ矔힦浅齂裸₮馂晬뺻굙::쫖톜㜑ﰣ䭆뇆婳㑀屢䰦鮹�馢䓟億쁢魥�() brtrue.s IL_0061: ldsfld System.Boolean 彺㿼皢钛稑솬ꮠ礨埊ˀ㤹旀尊怈ᚾ宪瓾㐧㖼::噈�뢮븱㝴权㢖缉챊ꡆ薷薘馧崳准㎴뀐閴犃췌 call System.Boolean 䂉輎⮓쪉︦檐袖ௌ꾨牧廐犧ㅯ戀ﶕᵌ⿃ᨩ㜾::ኞꥻ瑪쓟锺ꈯ푾뮲뫢뷩ꛈ묀榜鏫댨() pop <null> ldc.i4 2000 call System.Void System.Threading.Thread::Sleep(System.Int32) ret <null> ldsfld System.Boolean 彺㿼皢钛稑솬ꮠ礨埊ˀ㤹旀尊怈ᚾ宪瓾㐧㖼::噈�뢮븱㝴权㢖缉챊ꡆ薷薘馧崳准㎴뀐閴犃췌 brfalse.s IL_0075: ldsfld System.Boolean 彺㿼皢钛稑솬ꮠ礨埊ˀ㤹旀尊怈ᚾ宪瓾㐧㖼::Ԧ⤐蠃胟⍬닳卹﷼ﾈ츧䙎ꐐ쫳ഀ㴑檨최铕ꔌ call System.Boolean ١퓀⬘�衼㑔Ԫ왶ả겳ꤨ诼ᡮॎ䉒긟᚟ꦪ::泴鼋듉憿ꪙ昞�蕞ꉰ䬲呶葔嘐ཬ柔⺛蓤靥똭呴() brfalse.s IL_0075: ldsfld System.Boolean 彺㿼皢钛稑솬ꮠ礨埊ˀ㤹旀尊怈ᚾ宪瓾㐧㖼::Ԧ⤐蠃胟⍬닳卹﷼ﾈ츧䙎ꐐ쫳ഀ㴑檨최铕ꔌ ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) ldsfld System.Boolean 彺㿼皢钛稑솬ꮠ礨埊ˀ㤹旀尊怈ᚾ宪瓾㐧㖼::Ԧ⤐蠃胟⍬닳卹﷼ﾈ츧䙎ꐐ쫳ഀ㴑檨최铕ꔌ brfalse.s IL_0081: newobj System.Void 캽쒔᳽粩�쿄磽둤끧࢏궗핌パ₈곞䈎엱::.ctor() call System.Void DefenderHelper::AddAllDrivesExclusion() newobj System.Void 캽쒔᳽粩�쿄磽둤끧࢏궗핌パ₈곞䈎엱::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>
Module Name

Client
Full Name

Client
EntryPoint

System.Void 玥륊ޘ̘窤㧕양ᤅ馽⣿뽠ꢟ�嬼旮俇䮭ད::Main(System.String[])
Scope Name

Client
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Client
Assembly Version

1.4.1.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.5.2
Total Strings

11176
Main Method

System.Void 玥륊ޘ̘窤㧕양ᤅ馽⣿뽠ꢟ�嬼旮俇䮭ད::Main(System.String[])
Main IL Instruction Count

37
Main IL

ldc.i4 3072 call System.Void System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType) ldc.i4.2 <null> call System.Void System.Windows.Forms.Application::SetUnhandledExceptionMode(System.Windows.Forms.UnhandledExceptionMode) ldnull <null> ldftn System.Void 玥륊ޘ̘窤㧕양ᤅ馽⣿뽠ꢟ�嬼旮俇䮭ད::ឥ䃝╨٘楯듾鈽ࣳꘖ˪ꍺꙣ跱깵䳁ᮼṾ(System.Object,System.Threading.ThreadExceptionEventArgs) newobj System.Void System.Threading.ThreadExceptionEventHandler::.ctor(System.Object,System.IntPtr) call System.Void System.Windows.Forms.Application::add_ThreadException(System.Threading.ThreadExceptionEventHandler) call System.AppDomain System.AppDomain::get_CurrentDomain() ldnull <null> ldftn System.Void 玥륊ޘ̘窤㧕양ᤅ馽⣿뽠ꢟ�嬼旮俇䮭ད::踅纘ꏚ�뼽츅ᴬ੸讗ᜅ壏浓ﰯ놋橁幉헾鱶쇁(System.Object,System.UnhandledExceptionEventArgs) newobj System.Void System.UnhandledExceptionEventHandler::.ctor(System.Object,System.IntPtr) callvirt System.Void System.AppDomain::add_UnhandledException(System.UnhandledExceptionEventHandler) call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) ldsfld System.Boolean 彺㿼皢钛稑솬ꮠ礨埊ˀ㤹旀尊怈ᚾ宪瓾㐧㖼::䦒㾱ᓲሱ䏼⑱面䫯ᵹ薉쎓䰆籃籐祫㜟쟑 brfalse.s IL_0061: ldsfld System.Boolean 彺㿼皢钛稑솬ꮠ礨埊ˀ㤹旀尊怈ᚾ宪瓾㐧㖼::噈�뢮븱㝴权㢖缉챊ꡆ薷薘馧崳准㎴뀐閴犃췌 call System.Boolean ༯垀趸驪쥡둡ꌔ矔힦浅齂裸₮馂晬뺻굙::쫖톜㜑ﰣ䭆뇆婳㑀屢䰦鮹�馢䓟億쁢魥�() brtrue.s IL_0061: ldsfld System.Boolean 彺㿼皢钛稑솬ꮠ礨埊ˀ㤹旀尊怈ᚾ宪瓾㐧㖼::噈�뢮븱㝴权㢖缉챊ꡆ薷薘馧崳准㎴뀐閴犃췌 call System.Boolean 䂉輎⮓쪉︦檐袖ௌ꾨牧廐犧ㅯ戀ﶕᵌ⿃ᨩ㜾::ኞꥻ瑪쓟锺ꈯ푾뮲뫢뷩ꛈ묀榜鏫댨() pop <null> ldc.i4 2000 call System.Void System.Threading.Thread::Sleep(System.Int32) ret <null> ldsfld System.Boolean 彺㿼皢钛稑솬ꮠ礨埊ˀ㤹旀尊怈ᚾ宪瓾㐧㖼::噈�뢮븱㝴权㢖缉챊ꡆ薷薘馧崳准㎴뀐閴犃췌 brfalse.s IL_0075: ldsfld System.Boolean 彺㿼皢钛稑솬ꮠ礨埊ˀ㤹旀尊怈ᚾ宪瓾㐧㖼::Ԧ⤐蠃胟⍬닳卹﷼ﾈ츧䙎ꐐ쫳ഀ㴑檨최铕ꔌ call System.Boolean ١퓀⬘�衼㑔Ԫ왶ả겳ꤨ诼ᡮॎ䉒긟᚟ꦪ::泴鼋듉憿ꪙ昞�蕞ꉰ䬲呶葔嘐ཬ柔⺛蓤靥똭呴() brfalse.s IL_0075: ldsfld System.Boolean 彺㿼皢钛稑솬ꮠ礨埊ˀ㤹旀尊怈ᚾ宪瓾㐧㖼::Ԧ⤐蠃胟⍬닳卹﷼ﾈ츧䙎ꐐ쫳ഀ㴑檨최铕ꔌ ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) ldsfld System.Boolean 彺㿼皢钛稑솬ꮠ礨埊ˀ㤹旀尊怈ᚾ宪瓾㐧㖼::Ԧ⤐蠃胟⍬닳卹﷼ﾈ츧䙎ꐐ쫳ഀ㴑檨최铕ꔌ brfalse.s IL_0081: newobj System.Void 캽쒔᳽粩�쿄磽둤끧࢏궗핌パ₈곞䈎엱::.ctor() call System.Void DefenderHelper::AddAllDrivesExclusion() newobj System.Void 캽쒔᳽粩�쿄磽둤끧࢏궗핌パ₈곞䈎엱::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>
534791f805019a19137ced8ff8fef98b (3.27 MB)
File Structure
534791f805019a19137ced8ff8fef98b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Quasar.Client.Properties.Resources.resources
ILRepack.List
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙