Suspicious
Suspect

6dd35fe24f4cf4f207b866885110f442

Share on LinkedIn
Print
PE Executable
MD5: 6dd35fe24f4cf4f207b866885110f442
Size: 1.01 MB
application/x-dosexec
Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Low

Hash
Hash Value
MD5
6dd35fe24f4cf4f207b866885110f442
Sha1
6c2fa754b1adc1c72ceb12c603582ae48e7d4ef3
Sha256
8f61cc3ad55de0b6cd15dd356764849fc3b2d82943dfd23ae17e541c09933f20
Sha384
47a54467cc81d6da3da50e421f8ae16dd27066696339b16a03938df8a9dc60c35ae1be2f6e6351b57a15e76c7340cbb3
Sha512
774a9cbf4ad8ede5a7fdd7972bd116a209b054218d156cc9aece5388890de24d2342221efa15f262e8275e062fd06f885abdc9b6707c09a7d0af6b38063c8c78
SSDeep
12288:M4cx2iNcHcvn0+xAEkHcvn0+xAEkHcvn0+xAEVHcvn0+xAEkHcvn0+xAEpKfCXy7:Fw13TPTPT8TPTHxXuidqjzefpC
TLSH
6A25D070F544DBA5CA7FB137D3F740A06BB2B1378065D2292AC9B3DC18637A32922657

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.reloc
.rsrc
Resources
RT_ICON
ID:0002
ID:0
ID:0-preview.png
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0006
ID:0
ID:0007
ID:0
ID:0008
ID:0
ID:0009
ID:0
ID:000A
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
system_advanced.AboutBox1.resources
LogoPictureBox.Image
[NBF]root.Data
[NBF]root.Data-preview.png
PictureBox1.Image
[NBF]root.Data
[NBF]root.Data-preview.png
system_advanced.Resources.resources
system_advanced.Form1.resources
BindingNavigatorAddNewItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
BindingNavigatorDeleteItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
BindingNavigatorMoveFirstItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
BindingNavigatorMoveLastItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
BindingNavigatorMoveNextItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
BindingNavigatorMovePreviousItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
569738fa8b49460b874b3e944da52ff6
2f56e3390c204af482c9289ac4201bab
fc403455e25149ac8459bdd00caa7dba
28deb9529af14f05a46582882754f73f
21c69f35e0cd478fa598d5c3413a4133
2af831230bd74484a15effcb2d7005c2
69e69c26132547dd9f95affa2a187d6c
6f7e6816ec4a4aaba4a04aedc63046d1
9f4918f7ad764c7ea09660fd03cedb09
40499d6e371e4e6aab8c6aea3b6a0044
3206399628984a96858c2c8009d91145
8a35436119a74b40bfe6d4ed34cd0b97
c8f3935998fe41d6b5e845ff7d20abc2
2bbc4ba9bbab43ee97e945c9dd7a0f56
94a7992cc58544fba8c7e26a29cde44a
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: C:\Users\Administrator\documents\visual studio 2010\Projects\system advanced\system advanced\obj\x86\Release\system advanced.pdb

Module Name

system advanced.exe

Full Name

system advanced.exe

EntryPoint

System.Void system_advanced.My.MyApplication::Main(System.String[])

Scope Name

system advanced.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

system advanced

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0,Profile=Client

Total Strings

147

Main Method

System.Void system_advanced.My.MyApplication::Main(System.String[])

Main IL Instruction Count

21

Main IL

br IL_0006: nop conv.i2 <null> nop <null> br IL_000C: br IL_0011 br IL_0011: call System.Boolean Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase::get_UseCompatibleTextRendering() call System.Boolean Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase::get_UseCompatibleTextRendering() call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) leave.s IL_001E: call system_advanced.My.MyApplication system_advanced.My.MyProject::get_Application() endfinally <null> call system_advanced.My.MyApplication system_advanced.My.MyProject::get_Application() ldarg.0 <null> callvirt System.Void Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase::Run(System.String[]) ret <null> br IL_0034: nop br IL_0011: call System.Boolean Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase::get_UseCompatibleTextRendering() nop <null> br IL_003B: nop div <null> nop <null> br IL_002F: br IL_0011 ret <null>

Module Name

system advanced.exe

Full Name

system advanced.exe

EntryPoint

System.Void system_advanced.My.MyApplication::Main(System.String[])

Scope Name

system advanced.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

system advanced

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0,Profile=Client

Total Strings

147

Main Method

System.Void system_advanced.My.MyApplication::Main(System.String[])

Main IL Instruction Count

21

Main IL

br IL_0006: nop conv.i2 <null> nop <null> br IL_000C: br IL_0011 br IL_0011: call System.Boolean Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase::get_UseCompatibleTextRendering() call System.Boolean Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase::get_UseCompatibleTextRendering() call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) leave.s IL_001E: call system_advanced.My.MyApplication system_advanced.My.MyProject::get_Application() endfinally <null> call system_advanced.My.MyApplication system_advanced.My.MyProject::get_Application() ldarg.0 <null> callvirt System.Void Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase::Run(System.String[]) ret <null> br IL_0034: nop br IL_0011: call System.Boolean Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase::get_UseCompatibleTextRendering() nop <null> br IL_003B: nop div <null> nop <null> br IL_002F: br IL_0011 ret <null>

6dd35fe24f4cf4f207b866885110f442 (1.01 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙