Suspicious
Suspect

e4b9d11dffc72628afa8355176c38482

PE Executable
|
MD5: e4b9d11dffc72628afa8355176c38482
|
Size: 867.85 KB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very low

Hash
 Hash Value
MD5
e4b9d11dffc72628afa8355176c38482
Sha1
053401a0af54219dd5d422c7bd9734480093764f
Sha256
aed46d063084b9a653d25095dc8b3fffe4f741c0d1248ff54b7c2dca83ce89ab
Sha384
18e01c433afae65efe6c49fde8ac4222fce58e4988cf41db60b3ac217dc52f9a86c823d4b98c964b493e5f06a0b4ed65
Sha512
b97c2cc77877c91229ed493c3015541acd138c7b32dde554f17d17cd02b5f8493fafc80b2c70e021ea809b50826714982eb902e29a234c65cc0b6092f79fc940
SSDeep
24576:KJvM/02q9/H6s6lasy+54SR9dVvcFIHkmMmMT:KxM/056sG6MnVtHw9
TLSH
F105E0016264D63FD8910BBCAC30D1726B75AF8F5418E18B5DF92C9B74BEBD335102AA
File Structure
e4b9d11dffc72628afa8355176c38482
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
.Net Resources
UPA_HELPER.AboutBox1.resources
UPE_HELPER.tela_login.resources
$this.Icon
zipa
UPA_HELPER.CadastroPaciente.resources
UPA_HELPER.Properties.Resources.resources
Concluir-Atendimento
Concluir-Atendimento3
cYkm
covid-print
covid-x
covid-xtrans
icon
UPE_HELPER.TelaUPA.resources
$this.Icon
timer1.TrayLocation
Informations
Name
 Value
Module Name

AVZc.exe
Full Name

AVZc.exe
EntryPoint

System.Void UPE_HELPER.Program::Main()
Scope Name

AVZc.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

AVZc
Assembly Version

0.0.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.5
Total Strings

641
Main Method

System.Void UPE_HELPER.Program::Main()
Main IL Instruction Count

10
Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void UPE_HELPER.tela_login::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>
Artefacts
Name
 Value
Embedded Resources

8
Suspicious Type Names (1-2 chars)

0
e4b9d11dffc72628afa8355176c38482 (867.85 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙