Suspicious
Suspect

a2d63e4e6e75e326eba3366850e66be4

PE Executable
|
MD5: a2d63e4e6e75e326eba3366850e66be4
|
Size: 697.34 KB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Low

Hash
 Hash Value
MD5
a2d63e4e6e75e326eba3366850e66be4
Sha1
c1a78b708925f54b9be5eca37a6f96607b57717b
Sha256
70a576a39497248cdc4e1510b0b210abc5c4fbc702fe00f69d4ed1f6f50ce7f8
Sha384
358e863dda9ed8c38ab7d4c41f6485a2d020ce365afc7a6e509704e5aa900d43ec0774d3be323bf1700e21b9cc71f442
Sha512
b30147b5f74f91bee09ddbbf7e2854b355177410052aa5540a354a5c7853a197d77392cc65d747b6ba83aad7296c7358cdaa342b0c48e4f37df1a3db24d5b259
SSDeep
12288:tOTWpDKq22T4s6Npzbm1GX83G5/ZoSYkFtJJsbwzdYy2X1f8f/WQdY8dx:tOTuDKR2Szbo3GpZYkFtPsbc2V8XWo
TLSH
95E412256359DA21E8992BF88152E2FA83B09FD9E813D317DEE9BCDBF03670111542C7
File Structure
a2d63e4e6e75e326eba3366850e66be4
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
.Net Resources
Jogo_da_memoria.cf.resources
Jogo_da_memoria.Form1.resources
$this.Icon
[NBF]root.IconData
whey
[NBF]root.Data
Jogo_da_memoria.Properties.Resources.resources
NwJe
[NBF]root.Data
[NBF]root.Data-preview.png
fundo
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
Name
 Value
Module Name

wSLe.exe
Full Name

wSLe.exe
EntryPoint

System.Void Jogo_da_memoria.Program::Main()
Scope Name

wSLe.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

wSLe
Assembly Version

8.5.7.2
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.5
Total Strings

120
Main Method

System.Void Jogo_da_memoria.Program::Main()
Main IL Instruction Count

10
Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void Jogo_da_memoria.Form1::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>
Artefacts
Name
 Value
PDB Path

?
a2d63e4e6e75e326eba3366850e66be4 (697.34 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙