Suspicious
Suspect

Share on LinkedIn
Print
PE Executable
MD5: 85e596bc08ac8e28887f0b40a4ec3064
Size: 41.22 KB
application/x-dosexec
Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Low

Hash
Hash Value
MD5
85e596bc08ac8e28887f0b40a4ec3064
Sha1
9d3c257c150dc3581fcb7819e34566ee793405ba
Sha256
04f4dde250db15de247e67ecd25134ab7e4512a77859589f4e979905685316c0
Sha384
d035e6716b09bbd4204766781d5e5590add7d98604f2972aa6e40020d3b0f6e8dbd43ca028f288b420013dfd34042cba
Sha512
97c9873fede253bcc69fbb8a8698867b053edfd95ffcd400b31dc8db29eb6fa6d923bb18e9a6771809af949b2ff838d6fc7816454604e8769c5c6644e12b4589
SSDeep
768:QMsC0RYhDSnbIdiI/bwGOr0hNWSZaqVUvu9+0AmbLo:QMsvRYLiQb/k0OKaiU0+0Vw
TLSH
14037E48366C8763DE5F4E7CB4D5966B0EB2E322DD12EB899CDC90C98CA33911A0475F
File Structure
[Authenticode]_ba6040a1.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
cs.Properties.Resources.resources
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

Authenticode present at 0x7200 size 12032 bytes

Info

PDB Path: C:\Users\Administrator\Desktop\photo\cs\cs\obj\Release\cs.pdb

Module Name

cs.exe

Full Name

cs.exe

EntryPoint

System.Void Software.Updater.ApplicationStarter::Main()

Scope Name

cs.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

cs

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.8

Total Strings

103

Main Method

System.Void Software.Updater.ApplicationStarter::Main()

Main IL Instruction Count

11

Main IL

call System.Boolean Software.Updater.ApplicationStarter::IsDebuggerPresent() brfalse.s IL_000E: call System.Void Software.Updater.ApplicationStarter::HideConsoleWindow() call System.Void Software.Updater.ApplicationStarter::ShowConsoleWindow() br.s IL_0013: call System.Threading.Tasks.Task Software.Updater.ApplicationStarter::ExecuteCoreProcess() call System.Void Software.Updater.ApplicationStarter::HideConsoleWindow() call System.Threading.Tasks.Task Software.Updater.ApplicationStarter::ExecuteCoreProcess() callvirt System.Runtime.CompilerServices.TaskAwaiter System.Threading.Tasks.Task::GetAwaiter() stloc.0 <null> ldloca.s V_0 call System.Void System.Runtime.CompilerServices.TaskAwaiter::GetResult() ret <null>

85e596bc08ac8e28887f0b40a4ec3064 (41.22 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙