Suspicious
Suspect

c350bcacbf085d7d857514b2b2864f4e

PE Executable
|
MD5: c350bcacbf085d7d857514b2b2864f4e
|
Size: 914.43 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very low

Hash
Hash Value
MD5
c350bcacbf085d7d857514b2b2864f4e
Sha1
b2bb1521d75a3bafbca91790df739d8fae288026
Sha256
203e8e937149c92740b6fc6293ee458aa431ff4c4ca81539e7b91adff659c7a5
Sha384
17e31537670f7f91b12f5f50da3e035a0a967a8a2b30222ebe53823d2030a155772f14409585d942e0167e6753a23cf0
Sha512
674c97be76583b4b5d3aa11a886a9f208febd88354f09220651de266796f9ed78b5ad39ff2b7b695a150053c30fefefd93b59bd843382dc89f7ce688ab2be6ae
SSDeep
24576:gPX97gN5LykrwPitz+w5J0T9jA7AzHu1B2s:cX9ECiZx5K5GAzuf2
TLSH
E515D05032A99D07E0B64AF546B1E2B10BB5AE59B966D2CF8DC23CCF79F2F410642707

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
.Net Resources
Assignment_2.ClassBooking.resources
bindingNavigatorAddNewItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
bindingNavigatorDeleteItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
bindingNavigatorMoveFirstItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
bindingNavigatorMoveLastItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
bindingNavigatorMoveNextItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
bindingNavigatorMovePreviousItem.Image
[NBF]root.Data
[NBF]root.Data-preview.png
memberBindingNavigatorSaveItem.Image
Assignment_2.MainMenu.resources
$this.Icon
[NBF]root.IconData
SHT
[NBF]root.Data
Assignment_2.Properties.Resources.resources
AunT
[NBF]root.Data
[NBF]root.Data-preview.png
CityGymLogo
[NBF]root.Data
[NBF]root.Data-preview.png
ContactDetails
[NBF]root.Data
[NBF]root.Data-preview.png
Extras
[NBF]root.Data
[NBF]root.Data-preview.png
Help
[NBF]root.Data
[NBF]root.Data-preview.png
Membership Durationb
[NBF]root.Data
[NBF]root.Data-preview.png
Membership settings
[NBF]root.Data
[NBF]root.Data-preview.png
PaymentOptions
[NBF]root.Data
[NBF]root.Data-preview.png
PersonalGoals
[NBF]root.Data
[NBF]root.Data-preview.png
Special
[NBF]root.Data
[NBF]root.Data-preview.png
Start date
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: C:\Users\Administrator\Desktop\Client\Temp\unTGnyeIqT\src\obj\Debug\mzoI.pdb

Module Name

mzoI.exe

Full Name

mzoI.exe

EntryPoint

System.Void Assignment_2.Program::Main()

Scope Name

mzoI.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

mzoI

Assembly Version

0.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

1482

Main Method

System.Void Assignment_2.Program::Main()

Main IL Instruction Count

6

Main IL

call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void Assignment_2.MainMenu::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>

Module Name

mzoI.exe

Full Name

mzoI.exe

EntryPoint

System.Void Assignment_2.Program::Main()

Scope Name

mzoI.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

mzoI

Assembly Version

0.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

1482

Main Method

System.Void Assignment_2.Program::Main()

Main IL Instruction Count

6

Main IL

call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void Assignment_2.MainMenu::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>

c350bcacbf085d7d857514b2b2864f4e (914.43 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙