Suspicious
Suspect

7dbf31540cc8c6a2b59d2766011751d5

PE Executable
|
MD5: 7dbf31540cc8c6a2b59d2766011751d5
|
Size: 695.81 KB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Low

Hash
 Hash Value
MD5
7dbf31540cc8c6a2b59d2766011751d5
Sha1
0329c6302fd4e381416096458c687cfd4f22082e
Sha256
7c770feb62e46be197fbb56da6e8eba885b433cfae93f5f9669712c7e3d951dd
Sha384
51d5486e3e0affda74280382d24f01173af1dd425b56ca6f82f2388287ed98aae2bcd71d64513916b713d8ad4496c836
Sha512
babade8901dff0cb1371a3c97fe8876a10845acad1e572ce252254168785e33293ee24a44b3771ab090c7f8dda0f8b60e76a3fd4e47cefbbc471371894ae30f0
SSDeep
12288:OTWpDKq22T5Oq8oGedRF+guel5HTnrqRsT1SqfLNRrHXv1m9ixpx:OTuDKR29Oextuel5HCsPLNRbv1Rxp
TLSH
1BE40194225EED22D8A92BFA5960D2F502B11F89F903D3538EE9BDD7F83974021652C3
File Structure
7dbf31540cc8c6a2b59d2766011751d5
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
.Net Resources
Jogo_da_memoria.cf.resources
Jogo_da_memoria.Form1.resources
$this.Icon
[NBF]root.IconData
whey
[NBF]root.Data
Jogo_da_memoria.Properties.Resources.resources
VvCa
[NBF]root.Data
[NBF]root.Data-preview.png
fundo
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
Name
 Value
Module Name

ZrWZ.exe
Full Name

ZrWZ.exe
EntryPoint

System.Void Jogo_da_memoria.Program::Main()
Scope Name

ZrWZ.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

ZrWZ
Assembly Version

1.1.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.5
Total Strings

120
Main Method

System.Void Jogo_da_memoria.Program::Main()
Main IL Instruction Count

10
Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void Jogo_da_memoria.Form1::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>
Artefacts
Name
 Value
PDB Path

?
7dbf31540cc8c6a2b59d2766011751d5 (695.81 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙