Suspicious
Suspect

a4203690aa231979c8991cd60b11a782

PE Executable
|
MD5: a4203690aa231979c8991cd60b11a782
|
Size: 527.37 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Low

Hash
Hash Value
MD5
a4203690aa231979c8991cd60b11a782
Sha1
69e5e3fc2a20a3ec17ce85f5089e0ef74db079ea
Sha256
1dfeb104751544afbe70f792ef95535246eba683cdf47f21cb62038f8b5d86d6
Sha384
938d5e114bf16f9f81e9b76763fb5ec7b5dcce97bfd4919f2abeea2f76368768d9918e6803f8ef33b8eb14ab8ccc583e
Sha512
9fedb4d587d7ffdf0bea920aad3705ffa0b70486b39438622387d11a712a3f66e7896948320cc8a7e1c0cbe64cb83d6a715af04d361388fb4dcdc34164a13ab4
SSDeep
12288:7fMy/tDFlRte+2KvA95E5hSVx9EWTNDT/Wf1eW7fkR:dZFBF2vM5hSV3B/GeW+
TLSH
D9B402555204D503C9922BF049B1E3B95A7AAFCEB820C3539EFAFDFB7C363412485295

PeID

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
File Structure
[Authenticode]_a32ace3a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
SmartNotesApp.Properties.Resources.resources
NWya
[NBF]root.Data
[NBF]root.Data-preview.png
htta
[NBF]root.Data
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

Authenticode present at 0x7D600 size 13832 bytes

Info

PDB Path: rHTs.pdb

Module Name

rHTs.exe

Full Name

rHTs.exe

EntryPoint

System.Void SmartNotesApp.Program::Main()

Scope Name

rHTs.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

rHTs

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

76

Main Method

System.Void SmartNotesApp.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void SmartNotesApp.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Module Name

rHTs.exe

Full Name

rHTs.exe

EntryPoint

System.Void SmartNotesApp.Program::Main()

Scope Name

rHTs.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

rHTs

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

76

Main Method

System.Void SmartNotesApp.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void SmartNotesApp.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

a4203690aa231979c8991cd60b11a782 (527.37 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙