Suspicious
Suspect

5b667e118f71959aca9b80af1e3c81f5

PE Executable
|
MD5: 5b667e118f71959aca9b80af1e3c81f5
|
Size: 964.1 KB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very high

Hash
 Hash Value
MD5
5b667e118f71959aca9b80af1e3c81f5
Sha1
4129d2140fc5178eae5b5cfce66d391108f9cf83
Sha256
8bd23b1c65127d125a391e3af0f6ce40356c5db7043d397d8629b1f2458f7cd9
Sha384
334afc76aaaaf1d556d65aa07a21f96259b34ffbe99d1d54006a422a6516dc32e61426ab81347b0de1394a0203029162
Sha512
c2ec3a14ebf035b605ce6cb099a94386fdb4c5678524cde1b3cb74d0326dcc3935628a9e3024edf85a225f6dcdcb4dd7c75483c220967abf22e7249032540470
SSDeep
24576:RWveB7Ee2gMiiCMQReOHBOn2LsMyCSN1dc/ZCn2X9S:cvEki7o8B3yfK/Z/
TLSH
CC25233A7DEF87F6C116CF3ED69961C01640AE5B06E7910ED8E73153589E3FE40062AA

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
5b667e118f71959aca9b80af1e3c81f5
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Vphew.Properties.Resources.resources
Vjtimlpuru
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Module Name

INQUIRY LIST 2983.exe
Full Name

INQUIRY LIST 2983.exe
EntryPoint

System.Void INQUIRYLIST2983.DataStructures.MapSchema::AssociateCentralMap()
Scope Name

INQUIRY LIST 2983.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

INQUIRY LIST 2983
Assembly Version

1.0.2866.8948
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.5
Total Strings

6
Main Method

System.Void INQUIRYLIST2983.DataStructures.MapSchema::AssociateCentralMap()
Main IL Instruction Count

44
Main IL

ldc.i4 1 stloc V_0 br IL_000E: ldloc V_0 ldloc V_0 switch dnlib.DotNet.Emit.Instruction[] br IL_00CF: ret nop <null> newobj System.Void INQUIRYLIST2983.Elements.GeneralElement::.ctor() ldstr aSNlXzbmQEtXxm6d6DBD6w== ldstr Wy0nTcAHPik= ldstr UcJ16ZNJhlkB1kmYDQ.PfIufLY6OuKCcOReHJ ldstr r4exHFrYW callvirt System.Void INQUIRYLIST2983.Elements.GeneralElement::ManageSimpleElement(System.String,System.String,System.String,System.String) ldc.i4 0 ldsfld <Module>{f3acc3f1-3c40-4c91-a966-c949970f6c4c} <Module>{f3acc3f1-3c40-4c91-a966-c949970f6c4c}::m_1da0c4e18c3642fe8195c9fc01624462 ldfld System.Int32 <Module>{f3acc3f1-3c40-4c91-a966-c949970f6c4c}::m_038291ff9bad4a91b10d134a94aea131 brtrue IL_0066: switch(IL_0074) pop <null> ldc.i4 0 br IL_0066: switch(IL_0074) ldloc V_2 switch dnlib.DotNet.Emit.Instruction[] br IL_0074: leave IL_00CF leave IL_00CF: ret pop <null> ldc.i4 0 ldsfld <Module>{f3acc3f1-3c40-4c91-a966-c949970f6c4c} <Module>{f3acc3f1-3c40-4c91-a966-c949970f6c4c}::m_1da0c4e18c3642fe8195c9fc01624462 ldfld System.Int32 <Module>{f3acc3f1-3c40-4c91-a966-c949970f6c4c}::m_80717257321f45efac8460f774ad4c11 brtrue IL_009D: switch(IL_00AB) pop <null> ldc.i4 0 br IL_009D: switch(IL_00AB) ldloc V_1 switch dnlib.DotNet.Emit.Instruction[] br IL_00AB: leave IL_00CF leave IL_00CF: ret ldc.i4 0 ldsfld <Module>{f3acc3f1-3c40-4c91-a966-c949970f6c4c} <Module>{f3acc3f1-3c40-4c91-a966-c949970f6c4c}::m_1da0c4e18c3642fe8195c9fc01624462 ldfld System.Int32 <Module>{f3acc3f1-3c40-4c91-a966-c949970f6c4c}::m_e57396766a5a4a1288d11d2bda9c13c0 brtrue IL_0012: switch(IL_00CF,IL_0024) pop <null> ldc.i4 0 br IL_0012: switch(IL_00CF,IL_0024) ret <null>
Module Name

INQUIRY LIST 2983.exe
Full Name

INQUIRY LIST 2983.exe
EntryPoint

System.Void INQUIRYLIST2983.DataStructures.MapSchema::AssociateCentralMap()
Scope Name

INQUIRY LIST 2983.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

INQUIRY LIST 2983
Assembly Version

1.0.2866.8948
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.5
Total Strings

6
Main Method

System.Void INQUIRYLIST2983.DataStructures.MapSchema::AssociateCentralMap()
Main IL Instruction Count

44
Main IL

ldc.i4 1 stloc V_0 br IL_000E: ldloc V_0 ldloc V_0 switch dnlib.DotNet.Emit.Instruction[] br IL_00CF: ret nop <null> newobj System.Void INQUIRYLIST2983.Elements.GeneralElement::.ctor() ldstr aSNlXzbmQEtXxm6d6DBD6w== ldstr Wy0nTcAHPik= ldstr UcJ16ZNJhlkB1kmYDQ.PfIufLY6OuKCcOReHJ ldstr r4exHFrYW callvirt System.Void INQUIRYLIST2983.Elements.GeneralElement::ManageSimpleElement(System.String,System.String,System.String,System.String) ldc.i4 0 ldsfld <Module>{f3acc3f1-3c40-4c91-a966-c949970f6c4c} <Module>{f3acc3f1-3c40-4c91-a966-c949970f6c4c}::m_1da0c4e18c3642fe8195c9fc01624462 ldfld System.Int32 <Module>{f3acc3f1-3c40-4c91-a966-c949970f6c4c}::m_038291ff9bad4a91b10d134a94aea131 brtrue IL_0066: switch(IL_0074) pop <null> ldc.i4 0 br IL_0066: switch(IL_0074) ldloc V_2 switch dnlib.DotNet.Emit.Instruction[] br IL_0074: leave IL_00CF leave IL_00CF: ret pop <null> ldc.i4 0 ldsfld <Module>{f3acc3f1-3c40-4c91-a966-c949970f6c4c} <Module>{f3acc3f1-3c40-4c91-a966-c949970f6c4c}::m_1da0c4e18c3642fe8195c9fc01624462 ldfld System.Int32 <Module>{f3acc3f1-3c40-4c91-a966-c949970f6c4c}::m_80717257321f45efac8460f774ad4c11 brtrue IL_009D: switch(IL_00AB) pop <null> ldc.i4 0 br IL_009D: switch(IL_00AB) ldloc V_1 switch dnlib.DotNet.Emit.Instruction[] br IL_00AB: leave IL_00CF leave IL_00CF: ret ldc.i4 0 ldsfld <Module>{f3acc3f1-3c40-4c91-a966-c949970f6c4c} <Module>{f3acc3f1-3c40-4c91-a966-c949970f6c4c}::m_1da0c4e18c3642fe8195c9fc01624462 ldfld System.Int32 <Module>{f3acc3f1-3c40-4c91-a966-c949970f6c4c}::m_e57396766a5a4a1288d11d2bda9c13c0 brtrue IL_0012: switch(IL_00CF,IL_0024) pop <null> ldc.i4 0 br IL_0012: switch(IL_00CF,IL_0024) ret <null>
5b667e118f71959aca9b80af1e3c81f5 (964.1 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙