Suspicious
Suspect

709c5b5d53f5ef3eccb8dc4329ba9d2c

PE Executable
|
MD5: 709c5b5d53f5ef3eccb8dc4329ba9d2c
|
Size: 751.1 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Medium

Hash
Hash Value
MD5
709c5b5d53f5ef3eccb8dc4329ba9d2c
Sha1
76b04d6e7ea803ed4aec907d0edc7145bf89089d
Sha256
c374f2998fc7dcbc0c3e559a1dfcdf4b2729a12ea1783ead0624a1553a8bacf1
Sha384
a9b77f416135de46cf51dd9767dfaa6f631cfe7e99c21bd21809dcd22dfa2b30874828decd01d0774041af4ad6a57e3d
Sha512
88a127bd350ca80b1f73fa6bc51bcc01bfab09fd15b3a89d151a456ed404633ad4f8a194e5a1bf2cb58910593f89bef7a1361b2e2fbe93a8c1b67aae8125fdea
SSDeep
12288:ylCcF8b4gi93iiZUCuRbIFZ/Maq+uWgU30IM3bY7D627G0pbEBevQZipz58LxOy4:ge4gJ2UWPqlSxRP7DyZS18Lxc
TLSH
38F41219137AFA01D0E61FB41DB1D3B903669E98A915E3074FFAECEF7C2A7416640392

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
GradientCreator.Forms.MainForm.resources
GradientCreator.Properties.Resources.resources
Teacher
[NBF]root.Data
UVZs
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: fnsp.pdb

Module Name

fnsp.exe

Full Name

fnsp.exe

EntryPoint

System.Void GradientCreator.Program::Main()

Scope Name

fnsp.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

fnsp

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

128

Main Method

System.Void GradientCreator.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void GradientCreator.Forms.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Module Name

fnsp.exe

Full Name

fnsp.exe

EntryPoint

System.Void GradientCreator.Program::Main()

Scope Name

fnsp.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

fnsp

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

128

Main Method

System.Void GradientCreator.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void GradientCreator.Forms.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

709c5b5d53f5ef3eccb8dc4329ba9d2c (751.1 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙