7f4740bcc4719f3c5a756a1012af61bc

PE Executable
|
MD5: 7f4740bcc4719f3c5a756a1012af61bc
|
Size: 1.65 MB
|
application/x-dosexec

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	7f4740bcc4719f3c5a756a1012af61bc
Sha1	02bc99887bff72e84439c6a11d7cef081d4f9f5c
Sha256	88fde9a2c7f061165c94aea3dea033b834b20cafd7c56e7f906f75b77c9447b9
Sha384	4136213684fc22b0a393b8cfa26529da750c18d7dc58c47c19cc071b82e4d9f52e5030be6a88aff8abbca04a137dd9d3
Sha512	270c41b2b3fc09a53189a2074dc21fdb6ea89f51b890958ad0d5e17c8b68024f2e95d4748f01ea166c499f42ee19278487cd7afa3b32539844663483ffb4e658
SSDeep	24576:ET6IS2eWBRwRR16zhHIPbcNK0KKm77yviUSQaZaOwI55l2S62r9ETNQ6:ET6C7wR2EgKKm77LrwCB6Z
TLSH	6B75F100B3F98206F1BF5BB8B97640580777BA42EA7AC78F188C909D1EE73419D517A7

PeID

.NET executable

Microsoft Visual C# / Basic .NET

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL

Microsoft Visual C# v7.0 / Basic .NET

Microsoft Visual Studio .NET

File Structure

Informations

Name0	Value
Module Name	Client.exe
Full Name	Client.exe
EntryPoint	System.Void ulyrfslwhtmkgmsaidhjj.BB0VGi9QDQNRMA::Main()
Scope Name	Client.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Client
Assembly Version	1.6.3.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.7.2
Total Strings	1621
Main Method	System.Void ulyrfslwhtmkgmsaidhjj.BB0VGi9QDQNRMA::Main()
Main IL Instruction Count	11
Main IL	ldc.i4 3072 call System.Void System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType) ldc.i4.2 <null> call System.Void System.Windows.Forms.Application::SetUnhandledExceptionMode(System.Windows.Forms.UnhandledExceptionMode) call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) call System.Void ulyrfslwhtmkgmsaidhjj.BB0VGi9QDQNRMA::jn3N1F18LOEME() newobj System.Void ulyrfslwhtmkgmsaidhjj.ed1HzzsUFLZ6wIRQeOhx::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>
Module Name	Client.exe
Full Name	Client.exe
EntryPoint	System.Void ulyrfslwhtmkgmsaidhjj.BB0VGi9QDQNRMA::Main()
Scope Name	Client.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Client
Assembly Version	1.6.3.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.7.2
Total Strings	1621
Main Method	System.Void ulyrfslwhtmkgmsaidhjj.BB0VGi9QDQNRMA::Main()
Main IL Instruction Count	11
Main IL	ldc.i4 3072 call System.Void System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType) ldc.i4.2 <null> call System.Void System.Windows.Forms.Application::SetUnhandledExceptionMode(System.Windows.Forms.UnhandledExceptionMode) call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) call System.Void ulyrfslwhtmkgmsaidhjj.BB0VGi9QDQNRMA::jn3N1F18LOEME() newobj System.Void ulyrfslwhtmkgmsaidhjj.ed1HzzsUFLZ6wIRQeOhx::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>

Artefacts

Name0	Value
PDB Path	?
Embedded Resources	25
Suspicious Type Names (1-2 chars)	0
PDB Path	D:\Andrew\AForge.NET\trunk\Sources\Core\obj\Release\AForge.pdb
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0
PDB Path	D:\Andrew\AForge.NET\trunk\Sources\Video\obj\Release\AForge.Video.pdb
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0
PDB Path	D:\Andrew\AForge.NET\trunk\Sources\Video.DirectShow\obj\Release\AForge.Video.DirectShow.pdb
Embedded Resources	2
Suspicious Type Names (1-2 chars)	0
PDB Path	?
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0
PDB Path	?
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0
PDB Path	C:\Users\markh\code\mygithub\NAudio\NAudio.Core\obj\Release\netstandard2.0\NAudio.Core.pdb
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0
PDB Path	C:\Users\markh\code\mygithub\NAudio\NAudio.Wasapi\obj\Release\netstandard2.0\NAudio.Wasapi.pdb
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0
PDB Path	C:\Users\markh\code\mygithub\NAudio\NAudio.WinForms\obj\Release\net472\NAudio.WinForms.pdb
Embedded Resources	6
Suspicious Type Names (1-2 chars)	0
PDB Path	C:\Users\markh\code\mygithub\NAudio\NAudio.WinMM\obj\Release\netstandard2.0\NAudio.WinMM.pdb
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0
PDB Path	protobuf-net.pdb
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0
PDB Path	SharpDX.pdb
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0
PDB Path	SharpDX.D3DCompiler.pdb
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0
PDB Path	SharpDX.Direct2D1.pdb
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0
PDB Path	SharpDX.Direct3D11.pdb
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0
PDB Path	SharpDX.DXGI.pdb
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0
PDB Path	SharpDX.Mathematics.pdb
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0

7f4740bcc4719f3c5a756a1012af61bc (1.65 MB)

7f4740bcc4719f3c5a756a1012af61bc

PE Executable | MD5: 7f4740bcc4719f3c5a756a1012af61bc | Size: 1.65 MB | application/x-dosexec

PE Executable
|
MD5: 7f4740bcc4719f3c5a756a1012af61bc
|
Size: 1.65 MB
|
application/x-dosexec