Suspicious
Suspect

91af45cc9ec31e71e607223d1f5c5a2c

PE Executable
MD5: 91af45cc9ec31e71e607223d1f5c5a2c
Size: 1.01 MB
application/x-dosexec
Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Low

Hash
Hash Value
MD5
91af45cc9ec31e71e607223d1f5c5a2c
Sha1
efdcdbb382ba807f0f1abde9a5777770c51ae457
Sha256
33522ec6cd83ae54e6602d1e85de8e01090fe1c134fa33f12f0aaec54dd588b5
Sha384
601103ebd0a8d6016475600f8265bc1c55be745cac67645aa8963f4c760a9f16b3a29c0db7814368492ac6fc81b13822
Sha512
8ddfdab50900668bfb1049b05730e2d48fb43aac7f9ee623a20ca1c92f663f33fb4425b55c8a889ca6d6695ac737f93fb967e95c757e1022af9e75ffb6b72e62
SSDeep
24576:O78iH2wUD4HeLwSzPbzojM7/5MbuUznq:O72jD4izj0jmWq
TLSH
B525016855238606E9B53FF01EB1E0B19776BC9AB138C2585FE61DFBB167310BD0036A

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
SwampLight.Properties.Resources.resources
CTR
[NBF]root.Data
EBNS
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: C:\Users\Administrator\Desktop\Client\Temp\hTevPRHHTX\src\obj\Debug\lWal.pdb

Module Name

lWal.exe

Full Name

lWal.exe

EntryPoint

System.Void SwampLight.Program::Main()

Scope Name

lWal.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

lWal

Assembly Version

0.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

426

Main Method

System.Void SwampLight.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void SwampLight.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Module Name

lWal.exe

Full Name

lWal.exe

EntryPoint

System.Void SwampLight.Program::Main()

Scope Name

lWal.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

lWal

Assembly Version

0.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

426

Main Method

System.Void SwampLight.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void SwampLight.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

91af45cc9ec31e71e607223d1f5c5a2c (1.01 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙