Suspicious
Suspect

5921c50e3904895ef85e9be321921ed4

PE Executable
|
MD5: 5921c50e3904895ef85e9be321921ed4
|
Size: 14.19 MB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Medium

Hash
Hash Value
MD5
5921c50e3904895ef85e9be321921ed4
Sha1
b9d2c0e8713bb97514b968677378e3070dd5ba9e
Sha256
260c17f9aa96c9ca3870e69a7361178c487534c89d004ccae5206a7d214ba43c
Sha384
1d8e9ddf84668d3fa1571197fb7584164e592c995b5cb3540c37da6dd23945547510ea3296222a0019829f121056db8a
Sha512
dd9fc149b937f46b80f9515241aa713ccda1c289656444028dc45c38120521b78bef99e4800370bea4cacae37de8b79204f202db4d4a0f7a164107b4c48731f9
SSDeep
98304:eo1/aAMBYusQmBcmflB3JTeSuhL2NWzSGACHBEnVti2bfy3bVE9AhJVClYbL5l/:eo1CZsEmflzTmtvzQaSfaWehvoS/
TLSH
EDE6E52014E56A03FD7ADFBDD9DC76450F79B2A53723EE785B420DE90AD1B08C8426A3

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
UPolyX 0.3 -> delikon
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
collaboratif.Properties.Resources.resources
fc
mkY
Informations
Name
Value
Module Name

brown329.exe

Full Name

brown329.exe

EntryPoint

System.Void collaboratif.Program::Main()

Scope Name

brown329.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

brown329

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5.2

Total Strings

89429

Main Method

System.Void collaboratif.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void collaboratif.económica1::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Module Name

brown329.exe

Full Name

brown329.exe

EntryPoint

System.Void collaboratif.Program::Main()

Scope Name

brown329.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

brown329

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5.2

Total Strings

89429

Main Method

System.Void collaboratif.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void collaboratif.económica1::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Artefacts
Name
Value
PDB Path

C:\Users\Administrator\Desktop\Debug\main\obj\Debug\brown329.pdb

5921c50e3904895ef85e9be321921ed4 (14.19 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙