Suspicious
Suspect

8628f2ba198911d9f9a58f02c3142d34

PE Executable
|
MD5: 8628f2ba198911d9f9a58f02c3142d34
|
Size: 619.01 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Low

Hash
Hash Value
MD5
8628f2ba198911d9f9a58f02c3142d34
Sha1
0ad870f535ccf22804a1136690671f570dbc615f
Sha256
a2e39401f7e09438f35e9a4ca0ce24dafbfef8c0b6250170f67fb9a4dfc0b63e
Sha384
a8898217df95b207286b169d36aa8ea2943de55d8b8e46b592431ec8ac5b6ae57118c08c4f40b5589b9ecae2c7bdb4aa
Sha512
e676c958648257e31df14e01a139e6bb45e8e979590403877f22b85cdc15d404a24bc90556e8996aaba034e6ef71ea1aa1f6e0b1de55ddd18cdaa8d892bb65e3
SSDeep
12288:Ewk0sIrqQrV5xDWKhouVWH3Rdrrc6R/fftrYPUf9q:s0L75mndrLR/ffFiY
TLSH
4CD412B01718CD23E8A96F720AB0E33197B15D9DE422D192CBDE9DFF7603B156C88661

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
NumberLink.FormSelecteurNiveau.resources
NumberLink.Properties.Resources.resources
NH
[NBF]root.Data
vlCRgO
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: UFQEFs.pdb

Module Name

UFQEFs.exe

Full Name

UFQEFs.exe

EntryPoint

System.Void NumberLink.Program::Main()

Scope Name

UFQEFs.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

UFQEFs

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

56

Main Method

System.Void NumberLink.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void NumberLink.FormSelecteurNiveau::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Module Name

UFQEFs.exe

Full Name

UFQEFs.exe

EntryPoint

System.Void NumberLink.Program::Main()

Scope Name

UFQEFs.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

UFQEFs

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

56

Main Method

System.Void NumberLink.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void NumberLink.FormSelecteurNiveau::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

8628f2ba198911d9f9a58f02c3142d34 (619.01 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙