Suspicious
Suspect

d1f9500e2bef278a6f3e9b5f3061106d

PE Executable
|
MD5: d1f9500e2bef278a6f3e9b5f3061106d
|
Size: 1.31 MB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Medium

Hash
Hash Value
MD5
d1f9500e2bef278a6f3e9b5f3061106d
Sha1
1b52bce077ab8cf4d1c3e91c05ea8cb8857a3b61
Sha256
746faa8065aaf8abe217f4ad5f1101e3220a558ca0ca74a188325c27a6b9f641
Sha384
b613d27b29cfdec3d640d824170bc03ad21e44989870a2fc8d40e0f0b58889e7cb66b5d54dc80aaef5de5002672d7f37
Sha512
6bce15abf1584e03099304720c2dfef87fe64cacb4e757c7a0123c1c4c7e182879238475ef819deee706eb029b38209f2d7fbb535c3fa51afbfaaa3d78795b72
SSDeep
24576:W9VnEMDmLEE9Pz0H91S+zmBoL8EZTjlxLfs7mslCVCJCGzDOudRER+E8ENHWPtG7:UnExL9Pz0H9U7oLtlxfgnGCJNYRV8El3
TLSH
335501403266DF02D4BA6BF44921D37517F83D496412E31AAEFEACEB722CB096950793

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
RadioactiveDater.Form1.resources
RadioactiveDater.Properties.Resources.resources
TK
[NBF]root.Data
svz
[NBF]root.Data
[NBF]root.Data-preview.png
RadioactiveDater.DatosRadiometricos.xsd
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

RestrictedErrorObj

Full Name

RestrictedErrorObj

EntryPoint

System.Void Hea.SymLanguageVen::Main()

Scope Name

RestrictedErrorObj

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

kHP

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

993

Main Method

System.Void Hea.SymLanguageVen::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void CausalitySynchronousW.OperationCanceledExcept::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Module Name

RestrictedErrorObj

Full Name

RestrictedErrorObj

EntryPoint

System.Void Hea.SymLanguageVen::Main()

Scope Name

RestrictedErrorObj

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

kHP

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

993

Main Method

System.Void Hea.SymLanguageVen::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void CausalitySynchronousW.OperationCanceledExcept::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

d1f9500e2bef278a6f3e9b5f3061106d (1.31 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙