Suspicious

eb44cde6d96243886fd748c68350fb8e

PE Executable
|
MD5: eb44cde6d96243886fd748c68350fb8e
|
Size: 706.56 KB
|
application/x-dosexec

Print

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	eb44cde6d96243886fd748c68350fb8e
Sha1	22c8e7129f4e346c9735675967426314b00b05b9
Sha256	2b490323c0ada15eabc14db8d80d575d5277c170c989e2b3f53be403e6f90478
Sha384	7bca580bad10b324a1f03c569d47bc847e777b1d7dd5f8ba8bdb0fbc1b0b3eb9b4159d88c08e327214f6329b5ff912bf
Sha512	76f6ff9fe443aadaf22264b51781090a5a37f580f67f39c5c403556f4cd9dda4f8a4659d1f6a0ba4f5deb3b7e2ec0d62e5aae233c6daaf08fc74021c591d0fd7
SSDeep	12288:Cx/g6G/4XHWYk9+MkTwioHRgoOSRPDThZp5XLQFaUF+k+3ec10HpG3HjbmM:CxI6GwX2b+NwnxgUrL3LQFZF+k+3ecYF
TLSH	65E4018139259C23D5AA0AF50C50D27843FA8DDDB922E7C71FCA6DEB75E2B111882F53

File Structure

Informations

Name0	Value
Module Name	QpSl.exe
Full Name	QpSl.exe
EntryPoint	System.Void StreamlinedHelper.Program::Main()
Scope Name	QpSl.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	QpSl
Assembly Version	7.0.0.2
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	560
Main Method	System.Void StreamlinedHelper.Program::Main()
Main IL Instruction Count	7
Main IL	call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) call System.Void StreamlinedHelper.Program::InitializeApplication() newobj System.Void StreamlinedHelper.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>

Artefacts

Name0	Value
PDB Path	QpSl.pdb
Embedded Resources	9
Suspicious Type Names (1-2 chars)	0

eb44cde6d96243886fd748c68350fb8e (706.56 KB)

An error has occurred. This application may no longer respond until reloaded. Reload 🗙