Suspicious
Suspect

574c905ddb249b2aafeeb9572cdba7d1

PE Executable
|
MD5: 574c905ddb249b2aafeeb9572cdba7d1
|
Size: 780.29 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics
Hash
Hash Value
MD5
574c905ddb249b2aafeeb9572cdba7d1
Sha1
78453c1b4d49d8bfc01e2d2cc6f4fbf67efa9d72
Sha256
1494ed37c7ea409a0d8445032855474030fc4dbe0c16844b3b349d55acea5de8
Sha384
12ce9591183b24e0a536efd57e3bf3fc7f4610ea0a4e049018a459dc3f61ea7ba5bf6f4a7ab690f051888eae54872d50
Sha512
a63060a68c37e1292dd45e9290f0bb949fc72669b5ee7db904f202dc3d622c9406ab8fc8deab74f7c4adff52ec7d5eb01394bcbe395a6d96028ef3bcd4ea4e70
SSDeep
12288:uugoI1wa1/nkJsvzgnbbArdiW8odB7cTDkivVbxj6G3JXcdvFjDhsZv064dMvc:AJFkJsvkbArgzMatJlJX+vFjDpivc
TLSH
33F4DE903FB4AEC1D8A507F00521EAF51279AFAA8C20D3D66DDCBFEB74387406569193

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
Informations
Name
Value
Module Name

aQFp.exe

Full Name

aQFp.exe

EntryPoint

System.Void AtYarışıOyunu.Program::Main()

Scope Name

aQFp.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

aQFp

Assembly Version

0.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0

Total Strings

288

Main Method

System.Void AtYarışıOyunu.Program::Main()

Main IL Instruction Count

13

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void AtYarışıOyunu.Form3::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> newobj System.Void AtYarışıOyunu.frm1::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Module Name

aQFp.exe

Full Name

aQFp.exe

EntryPoint

System.Void AtYarışıOyunu.Program::Main()

Scope Name

aQFp.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

aQFp

Assembly Version

0.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0

Total Strings

288

Main Method

System.Void AtYarışıOyunu.Program::Main()

Main IL Instruction Count

13

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void AtYarışıOyunu.Form3::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> newobj System.Void AtYarışıOyunu.frm1::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Artefacts
Name
Value
Embedded Resources

4

Suspicious Type Names (1-2 chars)

0

574c905ddb249b2aafeeb9572cdba7d1 (780.29 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙