Suspicious
Suspect

d78c08c4342ed7c6b81c9a4357ff3b3e

PE Executable
|
MD5: d78c08c4342ed7c6b81c9a4357ff3b3e
|
Size: 50.69 KB
|
application/x-dosexec

Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Low

Hash
 Hash Value
MD5
d78c08c4342ed7c6b81c9a4357ff3b3e
Sha1
7bd6d457f956469590609f02ee4bdd7de45da5ed
Sha256
b0a669f605668d5d903f48ce0e59d1183ee36fbff55536f67c8a1b515ba59913
Sha384
e772e07d182d552b06f22144d3e5ea9e6a8757b810d6bd8aa6e9b1675c3b5e3a049dad8effa2230f7c9b2878eefaf626
Sha512
133495fe508dd5eb5c2fad70a5554e8d82df930e13178048f78f0a8ea67fd1e1899bb3596a8823fda9d029382c3796feb20ac0a32f46573d12e23060b0a5ab73
SSDeep
768:LmsEeeIWw0wGaV/mcZaq/wV8vcYoTByAcEYWd49crg+:isLMwfGa4yAcEL49cf
TLSH
3D333F0237ED1114F7FB6B74AABA16118B3BBE6B6839D51C09A4108D0D7AB01DDA1F73

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
d78c08c4342ed7c6b81c9a4357ff3b3e
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Informations
Name
 Value
Module Name

SharpWSUS.exe
Full Name

SharpWSUS.exe
EntryPoint

System.Void SharpWSUS.Program::Main(System.String[])
Scope Name

SharpWSUS.exe
Scope Type

ModuleDef
Kind

Console
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

SharpWSUS
Assembly Version

1.0.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.8
Total Strings

421
Main Method

System.Void SharpWSUS.Program::Main(System.String[])
Main IL Instruction Count

32
Main IL

nop <null> ldarg.0 <null> call SharpWSUS.Args.ArgumentParserResult SharpWSUS.Args.ArgumentParser::Parse(System.Collections.Generic.IEnumerable`1<System.String>) stloc.0 <null> ldloc.0 <null> callvirt System.Boolean SharpWSUS.Args.ArgumentParserResult::get_ParsedOk() ldc.i4.0 <null> ceq <null> stloc.2 <null> ldloc.2 <null> brfalse.s IL_0024: ldarg.0 nop <null> call System.Void SharpWSUS.Args.Info::ShowLogo() nop <null> call System.Void SharpWSUS.Args.Info::ShowUsage() nop <null> br.s IL_0040: ret ldarg.0 <null> ldlen <null> brtrue.s IL_002F: ldarg.0 ldstr br.s IL_0032: stloc.1 ldarg.0 <null> ldc.i4.0 <null> ldelem.ref <null> stloc.1 <null> ldloc.1 <null> ldloc.0 <null> callvirt System.Collections.Generic.Dictionary`2<System.String,System.String> SharpWSUS.Args.ArgumentParserResult::get_Arguments() call System.Void SharpWSUS.Program::MainExecute(System.String,System.Collections.Generic.Dictionary`2<System.String,System.String>) nop <null> ret <null>
Module Name

SharpWSUS.exe
Full Name

SharpWSUS.exe
EntryPoint

System.Void SharpWSUS.Program::Main(System.String[])
Scope Name

SharpWSUS.exe
Scope Type

ModuleDef
Kind

Console
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

SharpWSUS
Assembly Version

1.0.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.8
Total Strings

421
Main Method

System.Void SharpWSUS.Program::Main(System.String[])
Main IL Instruction Count

32
Main IL

nop <null> ldarg.0 <null> call SharpWSUS.Args.ArgumentParserResult SharpWSUS.Args.ArgumentParser::Parse(System.Collections.Generic.IEnumerable`1<System.String>) stloc.0 <null> ldloc.0 <null> callvirt System.Boolean SharpWSUS.Args.ArgumentParserResult::get_ParsedOk() ldc.i4.0 <null> ceq <null> stloc.2 <null> ldloc.2 <null> brfalse.s IL_0024: ldarg.0 nop <null> call System.Void SharpWSUS.Args.Info::ShowLogo() nop <null> call System.Void SharpWSUS.Args.Info::ShowUsage() nop <null> br.s IL_0040: ret ldarg.0 <null> ldlen <null> brtrue.s IL_002F: ldarg.0 ldstr br.s IL_0032: stloc.1 ldarg.0 <null> ldc.i4.0 <null> ldelem.ref <null> stloc.1 <null> ldloc.1 <null> ldloc.0 <null> callvirt System.Collections.Generic.Dictionary`2<System.String,System.String> SharpWSUS.Args.ArgumentParserResult::get_Arguments() call System.Void SharpWSUS.Program::MainExecute(System.String,System.Collections.Generic.Dictionary`2<System.String,System.String>) nop <null> ret <null>
Artefacts
Name
 Value
PDB Path

C:\Users\s.ksenofontov\Documents\shared_folder\exception\SharpWSUS\SharpWSUS\obj\Debug\SharpWSUS.pdb
d78c08c4342ed7c6b81c9a4357ff3b3e (50.69 KB)
File Structure
d78c08c4342ed7c6b81c9a4357ff3b3e
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Characteristics
No malware configuration were found at this point.
Artefacts
Name
 Value Location
PDB Path

C:\Users\s.ksenofontov\Documents\shared_folder\exception\SharpWSUS\SharpWSUS\obj\Debug\SharpWSUS.pdb

d78c08c4342ed7c6b81c9a4357ff3b3e
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙