Suspicious
Suspect

84a35144a824390fe4e294759650e388

PE Executable
|
MD5: 84a35144a824390fe4e294759650e388
|
Size: 835.58 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very low

Hash
Hash Value
MD5
84a35144a824390fe4e294759650e388
Sha1
8d9c5da5bb5def431f3cb0b90db13f28a36980e3
Sha256
49327b6fefdbd1c747e705e3f5c8cba7161aa3a55c626548fb39337b0d347571
Sha384
afee03e20c29cc3949432ef127cf78a3eef70d1851f5c6b3cb111965c60cd2776097a89444d2bb0ea3b77de9af9286e3
Sha512
85fdd06440dfbd1a483b97059815c55b40f6ccd35a163a51888c4e58a8a10bc69197e7ba23f08586bd2ad03cad104775e6af8bb80a986a3457fb81ed7228ab96
SSDeep
12288:dW2Y5kYKTi5EyTQJy/316nhAU0dL8MsJFrkd78crlUF3Ft3LFZ8PsmYCGSAjuyo+:dlgkRq/m6khJ4phUFFpF4t5A4jGY
TLSH
F505D01172A9AF42C5B943F81561E77047F26DAFE429D31B0DC5ACEF39B8B810E12693

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
UPolyX 0.3 -> delikon
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
EczaneOtomasyon.AnaMenu.resources
EczaneOtomasyon.Hakkinda.resources
ımageList1.ImageStream
[NBF]root.Data
EczaneOtomasyon.GenelMenu.resources
ımageList1.ImageStream
[NBF]root.Data
EczaneOtomasyon.Properties.Resources.resources
DUzu
[NBF]root.Data
[NBF]root.Data-preview.png
jj
[NBF]root.Data
EczaneOtomasyon.SaglikArsiv.resources
ımageList1.TrayLocation
Informations
Name
Value
Module Name

lwKm.exe

Full Name

lwKm.exe

EntryPoint

System.Void EczaneOtomasyon.Program::Main()

Scope Name

lwKm.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

lwKm

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0

Total Strings

1124

Main Method

System.Void EczaneOtomasyon.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void EczaneOtomasyon.GenelMenu::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Module Name

lwKm.exe

Full Name

lwKm.exe

EntryPoint

System.Void EczaneOtomasyon.Program::Main()

Scope Name

lwKm.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

lwKm

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0

Total Strings

1124

Main Method

System.Void EczaneOtomasyon.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void EczaneOtomasyon.GenelMenu::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Artefacts
Name
Value
PDB Path

lwKm.pdb

Embedded Resources

20

Suspicious Type Names (1-2 chars)

0

84a35144a824390fe4e294759650e388 (835.58 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙