Suspicious
Suspect

c05cce4f9f3f93d39d9042a1bd4b0014

PE Executable
|
MD5: c05cce4f9f3f93d39d9042a1bd4b0014
|
Size: 744.46 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very low

Hash
Hash Value
MD5
c05cce4f9f3f93d39d9042a1bd4b0014
Sha1
3627d0e5cd75cb681033746080ea02f3b475a7f4
Sha256
1aacbe866101eccbd0da94062494d0d5e59811fea2881b156be0b8d40545e071
Sha384
d68708117f1c878450ea8d7572a22643962bf3b3e2d96d7dd0a0de8d5d5661ac242043d9b600b45ed8ba04a7ea152b39
Sha512
2e3a1bde3ceff39575fc4167f0fb59703240ba73ed6d1f1538dd9b9cc30508fd59945dfcf6c17ac3e7a317dc0bb283b613ce979a2793ac56623156be1b8c8389
SSDeep
12288:NP2oG9mgQIV52bDMC8YbkveQUXb1LiORLyPq9mi51n7Gu77FlkR:NPk9mgN52fxbkWQgLiOpGq4i5pFY
TLSH
57F4CF5433A9990BE1B64EF446B4D2B10BB07E69B965D2CF5DC22CDF38F6B404A82707

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
[Authenticode]_a32ace3a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:0
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
.Net Resources
Assignment_2.ClassBooking.resources
bindingNavigatorAddNewItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
bindingNavigatorDeleteItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
bindingNavigatorMoveFirstItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
bindingNavigatorMoveLastItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
bindingNavigatorMoveNextItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
bindingNavigatorMovePreviousItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
memberBindingNavigatorSaveItem.Image
Assignment_2.MainMenu.resources
$this.Icon
[NBF]root.IconData
SHT
[NBF]root.Data
Assignment_2.Properties.Resources.resources
CityGymLogo
[NBF]root.Data
[NBF]root.Data-preview.png
ContactDetails
[NBF]root.Data
[NBF]root.Data-preview.png
Extras
[NBF]root.Data
[NBF]root.Data-preview.png
Help
[NBF]root.Data
[NBF]root.Data-preview.png
Membership Durationb
[NBF]root.Data
[NBF]root.Data-preview.png
Membership settings
[NBF]root.Data
[NBF]root.Data-preview.png
PaymentOptions
[NBF]root.Data
[NBF]root.Data-preview.png
PersonalGoals
[NBF]root.Data
[NBF]root.Data-preview.png
Special
[NBF]root.Data
[NBF]root.Data-preview.png
Start date
[NBF]root.Data
[NBF]root.Data-preview.png
WSpV
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

Authenticode present at 0xB2600 size 13832 bytes

Info

PDB Path: C:\Users\Administrator\Desktop\Client\Temp\nKrDqHsgGG\src\obj\Debug\xavv.pdb

Module Name

xavv.exe

Full Name

xavv.exe

EntryPoint

System.Void Assignment_2.Program::Main()

Scope Name

xavv.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

xavv

Assembly Version

0.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

1482

Main Method

System.Void Assignment_2.Program::Main()

Main IL Instruction Count

6

Main IL

call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void Assignment_2.MainMenu::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>

Module Name

xavv.exe

Full Name

xavv.exe

EntryPoint

System.Void Assignment_2.Program::Main()

Scope Name

xavv.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

xavv

Assembly Version

0.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

1482

Main Method

System.Void Assignment_2.Program::Main()

Main IL Instruction Count

6

Main IL

call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void Assignment_2.MainMenu::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>

c05cce4f9f3f93d39d9042a1bd4b0014 (744.46 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙