Suspicious
Suspect

ab589067a6a2c25307f25f2e3ce8cf71

PE Executable
MD5: ab589067a6a2c25307f25f2e3ce8cf71
Size: 119.3 KB
application/x-dosexec
Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Low

Hash
Hash Value
MD5
ab589067a6a2c25307f25f2e3ce8cf71
Sha1
a19549b19b964e48f5886ab71f66ccc5f71532b1
Sha256
7212509bf08daa26e936de56ddd4d513dc5f18660cd303cf3e05dbb91fdade72
Sha384
b024983ed4edfa947a766a747180cf4c9875daef8b6afc5ea4e5a031b6a1d6bbf6aae1b9839e947d352b4efc9cf4f878
Sha512
70c0a083055e9344d0388737080bd328dd25d739fb10bc5c63d3c7baa360c4419b91e374a9f2c35c8ee82ee12006ac70d5861e36d3cb60f40785188d4ffbdf62
SSDeep
3072:FYRAs27aOhVf5w/oV90RKyfKW63beFEKyhFfau:SmZuMKRPfKWybi5
TLSH
ECC3E51277EC5C69E0BDDBB4AB724680C7B5FC164A23DA6C4CC160AD16F6742B901BE3

PeID

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0006
ID:0
ID:0-preview.png
ID:0007
ID:0
ID:0008
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
svchost.MainController.resources
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.sdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
svchost.Resources.resources
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

svchost.exe

Full Name

svchost.exe

EntryPoint

System.Void svchost.My.MyApplication::Main(System.String[])

Scope Name

svchost.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

svchost

Assembly Version

10.0.18362.1

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

928

Main Method

System.Void svchost.My.MyApplication::Main(System.String[])

Main IL Instruction Count

8

Main IL

call System.Boolean Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase::get_UseCompatibleTextRendering() call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) leave.s IL_000D: call svchost.My.MyApplication svchost.My.MyProject::get_Application() endfinally <null> call svchost.My.MyApplication svchost.My.MyProject::get_Application() ldarg.0 <null> callvirt System.Void Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase::Run(System.String[]) ret <null>

Module Name

svchost.exe

Full Name

svchost.exe

EntryPoint

System.Void svchost.My.MyApplication::Main(System.String[])

Scope Name

svchost.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

svchost

Assembly Version

10.0.18362.1

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

928

Main Method

System.Void svchost.My.MyApplication::Main(System.String[])

Main IL Instruction Count

8

Main IL

call System.Boolean Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase::get_UseCompatibleTextRendering() call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) leave.s IL_000D: call svchost.My.MyApplication svchost.My.MyProject::get_Application() endfinally <null> call svchost.My.MyApplication svchost.My.MyProject::get_Application() ldarg.0 <null> callvirt System.Void Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase::Run(System.String[]) ret <null>

ab589067a6a2c25307f25f2e3ce8cf71 (119.3 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙