c44b15e4a7a7fbd09a5d7e90b7113767

PE Executable
|
MD5: c44b15e4a7a7fbd09a5d7e90b7113767
|
Size: 2 MB
|
application/x-dosexec

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	c44b15e4a7a7fbd09a5d7e90b7113767
Sha1	b1325e21264daa038ce90721bef4b9b03b8d6927
Sha256	eb72d6dd2158ce9ad453f8ecfd5d6900cce588c196ae5806268cbaf3475848da
Sha384	96659940f1106627eda49eb5cfb73ce1ad83b07385e198e79de49692b0c3df865c37e271933ed6534031ef9270c5e404
Sha512	04128bbc7cb1596d2a69756dcfe67909a1c602eb87adeef4e343decb5cebef1621b79e87cffee4370be7eb70e33960228d538dac6648296c4de1afd7a373a78b
SSDeep	24576:9E2SWeWBRYRR1qJvHIPbcNE0KKSb7yviUSQaBaOwIRxl2S62/9RwDtGk/DaY8Wc8:X7YReEwKKSb7L3wip6mwBG
TLSH	6C95AF2039EA401AF1B7AF75D7E0B5DA4B7EF223760A965D249503460E23B41EDC723B

PeID

.NET executable

HQR data file

Microsoft Visual C# / Basic .NET

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL

Microsoft Visual C# v7.0 / Basic .NET

Microsoft Visual Studio .NET

File Structure

Informations

Name0	Value
Module Name	Client.exe
Full Name	Client.exe
EntryPoint	System.Void zvnwrzptjgg.2fUTdZTK1t4xJFoSa2CcG5v::Main()
Scope Name	Client.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Client
Assembly Version	1.6.4.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.7.2
Total Strings	4875
Main Method	System.Void zvnwrzptjgg.2fUTdZTK1t4xJFoSa2CcG5v::Main()
Main IL Instruction Count	11
Main IL	ldc.i4 3072 call System.Void System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType) ldc.i4.2 <null> call System.Void System.Windows.Forms.Application::SetUnhandledExceptionMode(System.Windows.Forms.UnhandledExceptionMode) call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) call System.Void zvnwrzptjgg.2fUTdZTK1t4xJFoSa2CcG5v::ztdoXEueKq9Wgv() newobj System.Void zvnwrzptjgg.udd3WhfIUG0JBF6P::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>
Module Name	Client.exe
Full Name	Client.exe
EntryPoint	System.Void zvnwrzptjgg.2fUTdZTK1t4xJFoSa2CcG5v::Main()
Scope Name	Client.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Client
Assembly Version	1.6.4.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.7.2
Total Strings	4875
Main Method	System.Void zvnwrzptjgg.2fUTdZTK1t4xJFoSa2CcG5v::Main()
Main IL Instruction Count	11
Main IL	ldc.i4 3072 call System.Void System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType) ldc.i4.2 <null> call System.Void System.Windows.Forms.Application::SetUnhandledExceptionMode(System.Windows.Forms.UnhandledExceptionMode) call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) call System.Void zvnwrzptjgg.2fUTdZTK1t4xJFoSa2CcG5v::ztdoXEueKq9Wgv() newobj System.Void zvnwrzptjgg.udd3WhfIUG0JBF6P::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>

Artefacts

Name0	Value
Embedded Resources	25
Suspicious Type Names (1-2 chars)	0
PDB Path	D:\Andrew\AForge.NET\trunk\Sources\Core\obj\Release\AForge.pdb
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0
PDB Path	D:\Andrew\AForge.NET\trunk\Sources\Video\obj\Release\AForge.Video.pdb
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0
PDB Path	D:\Andrew\AForge.NET\trunk\Sources\Video.DirectShow\obj\Release\AForge.Video.DirectShow.pdb
Embedded Resources	2
Suspicious Type Names (1-2 chars)	0
PDB Path	?
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0
PDB Path	C:\Users\markh\code\mygithub\NAudio\NAudio.Core\obj\Release\netstandard2.0\NAudio.Core.pdb
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0
PDB Path	C:\Users\markh\code\mygithub\NAudio\NAudio.Wasapi\obj\Release\netstandard2.0\NAudio.Wasapi.pdb
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0
PDB Path	C:\Users\markh\code\mygithub\NAudio\NAudio.WinForms\obj\Release\net472\NAudio.WinForms.pdb
Embedded Resources	6
Suspicious Type Names (1-2 chars)	0
PDB Path	C:\Users\markh\code\mygithub\NAudio\NAudio.WinMM\obj\Release\netstandard2.0\NAudio.WinMM.pdb
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0
PDB Path	protobuf-net.pdb
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0
PDB Path	SharpDX.pdb
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0
PDB Path	SharpDX.D3DCompiler.pdb
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0
PDB Path	SharpDX.Direct2D1.pdb
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0
PDB Path	SharpDX.Direct3D11.pdb
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0
PDB Path	SharpDX.DXGI.pdb
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0
PDB Path	SharpDX.Mathematics.pdb
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0
PDB Path	?
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0

c44b15e4a7a7fbd09a5d7e90b7113767 (2 MB)

c44b15e4a7a7fbd09a5d7e90b7113767

PE Executable | MD5: c44b15e4a7a7fbd09a5d7e90b7113767 | Size: 2 MB | application/x-dosexec

PE Executable
|
MD5: c44b15e4a7a7fbd09a5d7e90b7113767
|
Size: 2 MB
|
application/x-dosexec