Suspicious
Suspect
Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Low

Hash
 Hash Value
MD5
71cacd65d768fd035d086cb0c761e2ff
Sha1
73b8724fbf31e42439260701d85afe1a1eeae388
Sha256
72b256825fa2e95529201f5844ceeb970dff79bad2862d8ac1d82e658f7e9d4a
Sha384
6b93a45c4858fb5393c65f705d916faea926a24b55eb8c45554189d58630a910d6d4d10eb8d52af5881f6476251df052
Sha512
d08b01212bc0ed9c06bfba585bfbfdb1459e4cdb18e4e76fe43a59d79283dedde62cc0db1af6d9b9565f4dd94fa38141fda792c45b7a9cac1e7cb7ff527f14d1
SSDeep
49152:mbtGb7mvw1nL+3yLA4rWpDoRvbLuRzHYF3w+W7SCWcnR5MtAxToDF0BtSLR:WoscnL8yLA1QvWHYw5LAWoB0BK
TLSH
0AE5BC02BB99F652D226A5BD6BADC11C1A3538F1587BD58834FE3CCEE2D33CE6441126

PeID

MEW 11 SE 1.2
Microsoft Visual C++ DLL
Microsoft Visual C++ v6.0
File Structure
71cacd65d768fd035d086cb0c761e2ff
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rsrc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
MainDab.g.resources
MainDabRedo.Properties.Resources.resources
costura.costura.dll.compressed
costura.costura.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.costura.pdb.compressed
costura.costura.pdb
costura.discordrpc.dll.compressed
costura.discordrpc.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.discordrpc.pdb.compressed
costura.discordrpc.pdb
costura.icsharpcode.avalonedit.dll.compressed
costura.icsharpcode.avalonedit.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
ICSharpCode.AvalonEdit.g.resources
ICSharpCode.AvalonEdit.Highlighting.Resources.ASPX.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.Boo.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.Coco-Mode.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.CPP-Mode.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.CSharp-Mode.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.CSS-Mode.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.HTML-Mode.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.Java-Mode.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.JavaScript-Mode.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.Json.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.MarkDown-Mode.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.MarkDownWithFontSize-Mode.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.Patch-Mode.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.PHP-Mode.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.PowerShell.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.Python-Mode.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.Tex-Mode.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.TSQL-Mode.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.VB-Mode.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.XML-Mode.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.XmlDoc.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.ModeV1.xsd
ICSharpCode.AvalonEdit.Highlighting.Resources.ModeV2.xsd
costura.microsoft.bcl.asyncinterfaces.dll.compressed
costura.microsoft.bcl.asyncinterfaces.dll
[Authenticode]_5bf00412.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.microsoft.extensions.logging.abstractions.dll.compressed
costura.microsoft.extensions.logging.abstractions.dll
[Authenticode]_86e8c340.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Microsoft.Extensions.Logging.Abstractions.Resource.resources
costura.mono.httputility.dll.compressed
costura.mono.httputility.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.newtonsoft.json.dll.compressed
costura.newtonsoft.json.dll
[Authenticode]_5366eba8.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.buffers.dll.compressed
costura.system.buffers.dll
[Authenticode]_8c38879e.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Buffers.SR.resources
costura.system.diagnostics.diagnosticsource.dll.compressed
costura.system.diagnostics.diagnosticsource.dll
[Authenticode]_50c89911.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.memory.dll.compressed
costura.system.memory.dll
[Authenticode]_8f789375.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Memory.SR.resources
costura.system.numerics.vectors.dll.compressed
costura.system.numerics.vectors.dll
[Authenticode]_ae030d4d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Numerics.Vectors.SR.resources
costura.system.reactive.dll.compressed
costura.system.reactive.dll
[Authenticode]_812fbd24.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
System.Reactive.Strings_Core.resources
System.Reactive.Strings_Linq.resources
System.Reactive.Strings_PlatformServices.resources
System.Reactive.Strings_Providers.resources
System.Reactive.Platforms.Windows.Strings_WindowsThreading.resources
costura.system.runtime.compilerservices.unsafe.dll.compressed
costura.system.runtime.compilerservices.unsafe.dll
[Authenticode]_81de04f4.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.text.encodings.web.dll.compressed
costura.system.text.encodings.web.dll
[Authenticode]_ba76dee4.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Text.Encodings.Web.SR.resources
ILLink.Substitutions.xml
costura.system.text.json.dll.compressed
costura.system.text.json.dll
[Authenticode]_702dfcfd.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Text.Json.SR.resources
ILLink.Substitutions.xml
costura.system.threading.tasks.extensions.dll.compressed
costura.system.threading.tasks.extensions.dll
[Authenticode]_7121b905.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.valuetuple.dll.compressed
costura.system.valuetuple.dll
[Authenticode]_5e4e41f0.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.ValueTuple.SR.resources
costura.wpfanimatedgif.dll.compressed
costura.wpfanimatedgif.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.wpfanimatedgif.pdb.compressed
costura.wpfanimatedgif.pdb
costura.metadata
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Info

PDB Path: E:\Development\MainDab\MainDab\obj\Release\MainDab.pdb
Module Name

MainDab.exe
Full Name

MainDab.exe
EntryPoint

System.Void MainDabV2.App::Main()
Scope Name

MainDab.exe
Scope Type

ModuleDef
Kind

Console
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

MainDab
Assembly Version

1.0.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.8
Total Strings

484
Main Method

System.Void MainDabV2.App::Main()
Main IL Instruction Count

6
Main IL

newobj System.Void MainDabV2.App::.ctor() dup <null> callvirt System.Void MainDabV2.App::InitializeComponent() callvirt System.Int32 System.Windows.Application::Run() pop <null> ret <null>
71cacd65d768fd035d086cb0c761e2ff (3.26 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙