Suspicious
Suspect

9b73ca6ea696c420cb36203c8065d18c

PE Executable
|
MD5: 9b73ca6ea696c420cb36203c8065d18c
|
Size: 1.07 MB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Medium

Hash
Hash Value
MD5
9b73ca6ea696c420cb36203c8065d18c
Sha1
fabd534ecb94c04079f08ad873da3798b5fcc974
Sha256
6b802b866eb6af5dd5583f112f4005ce4db9c6c82017401b98bcf76cca2cc59b
Sha384
b6184f4b339fbfd7a9d5bf20a55c630087f22dc9b147eb353bce5d5f92797581f042d10944e419b516c4043736882b11
Sha512
53a68ebfeee93b2fa097d5be793eee2b95039f49dcb7b94f3d4b52d3efb9173a7ff3e793adf80392a61cfbc054975cb9f3831e91f91aa0c0b81f611cd3ab80e1
SSDeep
24576:1tkL/pM58WaNpBouf5OwREKFAQ4qdB2zyrQADGSUbUb2aduTsK:1ChM2N6C5hRHFuqb2nADGS8r
TLSH
64352254227DDB07D4930FF44930E2B147B58FF9A931E12A5FEA2CDBB83634641A2792

PeID

Microsoft Visual C++ DLL
Microsoft Visual C++ v6.0
File Structure
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rsrc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
ConnectFour.Formularios.FormMenuPrincipal.resources
ConnectFour.Properties.Resources.resources
Autismus
[NBF]root.Data
[NBF]root.Data-preview.png
EvQL
[NBF]root.Data
[NBF]root.Data-preview.png
YouTube_Logo
[NBF]root.Data
[NBF]root.Data-preview.png
shp
[NBF]root.Data
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: TKSd.pdb

Module Name

TKSd.exe

Full Name

TKSd.exe

EntryPoint

System.Void ConnectFour.Program::Main()

Scope Name

TKSd.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

TKSd

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

148

Main Method

System.Void ConnectFour.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void ConnectFour.Formularios.FormMenuPrincipal::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

9b73ca6ea696c420cb36203c8065d18c (1.07 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙