Suspicious
Suspect

6cdefaacb3647903af7d5334540d4961

PE Executable
|
MD5: 6cdefaacb3647903af7d5334540d4961
|
Size: 701.44 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Medium

Hash
Hash Value
MD5
6cdefaacb3647903af7d5334540d4961
Sha1
d505e2dd8ea848b3ab4862a466824c512dbef577
Sha256
ff1453627ce25ca4b2e6edea51129e776b54642b12770383444034df9bcce0ae
Sha384
2bcf043a1ef3b4e3b6861a97118b288694ede2fa89b4cdacb212365643bb1377434efd927aab8af4f618a3847fa51e3f
Sha512
6271043c16a0a0afb45377068422df45e88eb018655d0b235f94b5f55f740ef5c92ecbc1b959f7819341fe7f50fdf1bdc93eda37615d90fc94f14b687b495839
SSDeep
12288:NDlkt6vZBbtwMWyyeJ1SkByN58BXBOfrlfQemaQhIqnzlrU3L4vc0DLVd:9lEMbtwM8eSO08B8hfKZnCcxV
TLSH
78E4234EBB25E57AC95A9737C1D78211055F9902E523F2BF29D83EB00EA1A04C1CFE5E

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0.exif
ID:0-preview.png
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

iuDw.exe

Full Name

iuDw.exe

EntryPoint

System.Void Carubbi.MetroLayoutEngine.MainC::Main()

Scope Name

iuDw.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

iuDw

Assembly Version

1.4.1.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

2

Main Method

System.Void Carubbi.MetroLayoutEngine.MainC::Main()

Main IL Instruction Count

39

Main IL

ldsfld System.Char[] Carubbi.MetroLayoutEngine.Tile::Ⴀ stloc.2 <null> ldc.i4.4 <null> stloc.1 <null> ldloc.1 <null> switch dnlib.DotNet.Emit.Instruction[] call System.Void Carubbi.MetroLayoutEngine.Properties.Resources/Ⴃ::Ⴅ() ldc.i4 407 ldc.i4 447 call System.Void Carubbi.MetroLayoutEngine.ConfirmDialog::Ⴍ(System.Int16,System.Int16) ldc.i4.0 <null> ldc.i4 332 ldc.i4 329 call System.Void Carubbi.MetroLayoutEngine.MetroLayoutForm::ႠႰ(System.Boolean,System.Int32,System.Char) ldloc.2 <null> ldc.i4.s 106 ldelem.u2 <null> ldc.i4 20692 ldsfld System.Int32[] Carubbi.MetroLayoutEngine.MetroLayoutUserControl::Ⴐ ldc.i4.s 57 ldsfld System.Int32[] Carubbi.MetroLayoutEngine.MetroLayoutUserControl::Ⴐ ldc.i4.s 57 ldelem.i4 <null> ldsfld System.Int32[] Carubbi.MetroLayoutEngine.MetroLayoutUserControl::Ⴐ ldc.i4 166 ldelem.i4 <null> sub <null> ldc.i4.s 96 and <null> stelem.i4 <null> sub <null> stloc.1 <null> br.s IL_0008: ldloc.1 newobj System.Void Carubbi.MetroLayoutEngine.MetroLayoutForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null> ldtoken System.Void Carubbi.MetroLayoutEngine.MainC::Main() pop <null> ret <null>

Module Name

iuDw.exe

Full Name

iuDw.exe

EntryPoint

System.Void Carubbi.MetroLayoutEngine.MainC::Main()

Scope Name

iuDw.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

iuDw

Assembly Version

1.4.1.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

2

Main Method

System.Void Carubbi.MetroLayoutEngine.MainC::Main()

Main IL Instruction Count

39

Main IL

ldsfld System.Char[] Carubbi.MetroLayoutEngine.Tile::Ⴀ stloc.2 <null> ldc.i4.4 <null> stloc.1 <null> ldloc.1 <null> switch dnlib.DotNet.Emit.Instruction[] call System.Void Carubbi.MetroLayoutEngine.Properties.Resources/Ⴃ::Ⴅ() ldc.i4 407 ldc.i4 447 call System.Void Carubbi.MetroLayoutEngine.ConfirmDialog::Ⴍ(System.Int16,System.Int16) ldc.i4.0 <null> ldc.i4 332 ldc.i4 329 call System.Void Carubbi.MetroLayoutEngine.MetroLayoutForm::ႠႰ(System.Boolean,System.Int32,System.Char) ldloc.2 <null> ldc.i4.s 106 ldelem.u2 <null> ldc.i4 20692 ldsfld System.Int32[] Carubbi.MetroLayoutEngine.MetroLayoutUserControl::Ⴐ ldc.i4.s 57 ldsfld System.Int32[] Carubbi.MetroLayoutEngine.MetroLayoutUserControl::Ⴐ ldc.i4.s 57 ldelem.i4 <null> ldsfld System.Int32[] Carubbi.MetroLayoutEngine.MetroLayoutUserControl::Ⴐ ldc.i4 166 ldelem.i4 <null> sub <null> ldc.i4.s 96 and <null> stelem.i4 <null> sub <null> stloc.1 <null> br.s IL_0008: ldloc.1 newobj System.Void Carubbi.MetroLayoutEngine.MetroLayoutForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null> ldtoken System.Void Carubbi.MetroLayoutEngine.MainC::Main() pop <null> ret <null>

6cdefaacb3647903af7d5334540d4961 (701.44 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙