Suspicious
Suspect

6c3e89cc882630480cb92df04f2af57e

PE Executable
MD5: 6c3e89cc882630480cb92df04f2af57e
Size: 638.46 KB
application/x-dosexec
Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Low

Hash
Hash Value
MD5
6c3e89cc882630480cb92df04f2af57e
Sha1
77a262c02420193a7a6b8bcdc7e82c7e5e71f3cd
Sha256
db3ca33193a586fadeabbc0f15800432b3ce627f2e66e97161dc3947bbefa7ef
Sha384
1bef3d5a569808a9643500cfbdbea31015fcc4656f307387ba7f8091c3e87b2d0927d35a803271731d741522af53a8a9
Sha512
bcc46a892009aa7ed8482b5ce6664936124c21fbf4f643b59efe220ec815b74fdc03dc54503576f9afcf1300e9190eb349f807809b0a8fc3b68524675e8db6c4
SSDeep
12288:Hf4vzZXzuqPy+CAGIUoh2RyXtkCHEDnnUEPHuwUkAVlO8/V8:/4vztzVy+BVHgWkCkDnnxFufb
TLSH
D5D4E054236DEF03C2B99FF80129E27107F56DA95116E70A8EC63CDFB929F804A15B93

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:0
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
.Net Resources
WebAudioController.AddFile.resources
SimpleWindowsApp.Calculator.resources
$this.Icon
[NBF]root.IconData
VY
[NBF]root.Data
WebAudioController.Properties.Resources.resources
QlPST
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: C:\Users\Administrator\Desktop\Client\Temp\IXsjmUhwOv\src\obj\Debug\QyrQW.pdb

Module Name

QyrQW.exe

Full Name

QyrQW.exe

EntryPoint

System.Void WebAudioController.Service::Main()

Scope Name

QyrQW.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

QyrQW

Assembly Version

2.8.1.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

788

Main Method

System.Void WebAudioController.Service::Main()

Main IL Instruction Count

13

Main IL

nop <null> newobj System.Void SimpleWindowsApp.Calculator::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void WebAudioController.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Module Name

QyrQW.exe

Full Name

QyrQW.exe

EntryPoint

System.Void WebAudioController.Service::Main()

Scope Name

QyrQW.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

QyrQW

Assembly Version

2.8.1.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

788

Main Method

System.Void WebAudioController.Service::Main()

Main IL Instruction Count

13

Main IL

nop <null> newobj System.Void SimpleWindowsApp.Calculator::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void WebAudioController.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

6c3e89cc882630480cb92df04f2af57e (638.46 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙