Suspicious
Suspect

668a30f9c96f2afdf9d861b4e918e5ae

PE Executable
|
MD5: 668a30f9c96f2afdf9d861b4e918e5ae
|
Size: 404.48 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Medium

Hash
Hash Value
MD5
668a30f9c96f2afdf9d861b4e918e5ae
Sha1
e5957e723450ca5b1c6ba2e8c4baf329d51ee4d9
Sha256
73df6000eae29d553b66408a42e601dd9be8871c8b27a799b1208659c53278b8
Sha384
c47c95fb3a59a6aec536fc83e026a8cbc84c899aabb494a5f1374ccbe2652b9e793a85d755927f119ac423c8c64ca290
Sha512
cd8d6560b7bf7c0becf58aab034bcdde09ced292c7be8819a612d2b4aa69f52957f3a9144d7514f95ea2135c251b96a3e172895609c6c12e7d5376e131f66a18
SSDeep
6144:2B2V1qjwZlfGhNqJETbSYfdhjZbDDPehr5eQ/CZA1UOrhjlJjmez6K8xCBjV+YZz:3/kqWaY7jREre9OPJjy0Bj
TLSH
858402B55794D923E9F26BF20972E37017B92E5EE931C3078BE98CDB74197268840363
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Checkers.MenuPrincipale.resources
Checkers.Properties.Resources.resources
NH
[NBF]root.Data
xSC
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: xyt.pdb

Module Name

xyt.exe

Full Name

xyt.exe

EntryPoint

System.Void Checkers.Program::Main()

Scope Name

xyt.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

xyt

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

77

Main Method

System.Void Checkers.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void Checkers.MenuPrincipale::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

668a30f9c96f2afdf9d861b4e918e5ae (404.48 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙