Suspicious
Suspect

9a8a88ad4308cad8814369cb40e93bc5

PE Executable
|
MD5: 9a8a88ad4308cad8814369cb40e93bc5
|
Size: 837.63 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Low

Hash
Hash Value
MD5
9a8a88ad4308cad8814369cb40e93bc5
Sha1
5dc3539b6fed4f9905e5a6e29bf13909a7c6e1e6
Sha256
e07e7df88008f8d1ba3b459a3e8907c78c7a22cadfcb2ab439ffda155d3e2fc0
Sha384
cf02210a0ec86ec0fda5bdd0368d7a9816ce336cf461ff7df008b9d19074912bfeb8ac3ea958a71d18ad975b87a87b83
Sha512
e46339155f32414128bdd8589451e831f6c7bc548dfceb6694bf471eb60fa927efd7ee70e810a24f426f793ba4ee4f20ac6996206e349fbf50d27a4cd346d478
SSDeep
12288:F0WbnbtCKNB1QoV2PEZ9Z9Y5RmPk+686QiHqK7rqmDFEUyfxUPm5UX50585QQ+:aYtzVS3Rq6QiH+mJyecUey1
TLSH
D505F08BF2C4E803C8425A743B61F6B4CDEE6DD9980ED697AFE83E5B3D795151A23001

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
NMBSTracker.Form1.resources
$this.Icon
[NBF]root.IconData
DelayNotification.Icon
[NBF]root.IconData
DelayNotification.TrayLocation
GSA
[NBF]root.Data
UpdateTimer.TrayLocation
NMBSTracker.Properties.Resources.resources
KyAt
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: C:\Users\Administrator\Desktop\Client\Temp\fXuONReuXP\src\obj\Debug\mmAo.pdb

Module Name

mmAo.exe

Full Name

mmAo.exe

EntryPoint

System.Void NMBSTracker.Program::Main()

Scope Name

mmAo.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

mmAo

Assembly Version

1.2.1.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.7.2

Total Strings

132

Main Method

System.Void NMBSTracker.Program::Main()

Main IL Instruction Count

6

Main IL

call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void NMBSTracker.Form1::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>

Module Name

mmAo.exe

Full Name

mmAo.exe

EntryPoint

System.Void NMBSTracker.Program::Main()

Scope Name

mmAo.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

mmAo

Assembly Version

1.2.1.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.7.2

Total Strings

132

Main Method

System.Void NMBSTracker.Program::Main()

Main IL Instruction Count

6

Main IL

call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void NMBSTracker.Form1::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>

9a8a88ad4308cad8814369cb40e93bc5 (837.63 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙