Suspicious
Suspect

ed661d102769ec0e8013d9f9d807843c

PE Executable
|
MD5: ed661d102769ec0e8013d9f9d807843c
|
Size: 750.59 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Low

Hash
Hash Value
MD5
ed661d102769ec0e8013d9f9d807843c
Sha1
f011378b498fc8314285affd637124ba35e3ea74
Sha256
904a3d70be9fccbd1d04cdc90d20e430351f16696d3ba2e14400f31f2437c133
Sha384
489614e17ff5986245e106b2dc33b846c2131bb67ee54bf0c8eddccf5fb57f522e8f0996f71edbc3edada3f297bac2bf
Sha512
7f3f000a0b1b468f74dc19235a8a4b9895c09d8cf44062932f14d5a1453475d3ab0f8c2cfe5cb9077258ac88482e815bbe5b1f80e785efebf2cade61b3cb0063
SSDeep
12288:k9gUY4kqjVnl36ud0zR/6CtQ9PUHIG8DXjAGq2amJYeQabh3NUW6:k9RkqjVnlqud+/2P+ATAS/JYeL3NUn
TLSH
F2F4DF5873F85A00F1FF5BB294B59D51AB35B513A962DB1E11C080D80E72B918F8AF3B

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual C++ v6.0 DLL
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Stub.Properties.Resources.resources
costura.costura.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.costura.pdb.compressed
costura.newtonsoft.json.dll.compressed
[Authenticode]_220cad77.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.icsharpcode.sharpziplib.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.icsharpcode.sharpziplib.pdb.compressed
costura.icsharpcode.sharpziplib.pdb
costura.system.diagnostics.diagnosticsource.dll.compressed
[Authenticode]_50c89911.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.metadata
Resources.ProductVersion
Resources.CompanyName
Resources.ProductName
Resources.LegalCopyright
Resources.FileDescription
Resources.OriginalFilename
Resources.InternalName
Resources.BuildVersion
Resources.PrivateBuild
Resources.SYS_SVC_START
Resources.SYS_SVC_STOP
Resources.SYS_SVC_PAUSE
Resources.SYS_SVC_RESUME
Resources.SYS_NET_CONNECT
Resources.SYS_UPDATE_CHECK
Resources.SYS_SEC_SCAN
Resources.AppIcon
Resources.AppIcon-preview.png
Resources.Manifest
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: ?

Module Name

stub.exe

Full Name

stub.exe

EntryPoint

System.Void Stub.Program::<Main>()

Scope Name

stub.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

stub

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.8

Total Strings

3177

Main Method

System.Void Stub.Program::<Main>()

Main IL Instruction Count

6

Main IL

call System.Threading.Tasks.Task Stub.Program::Main() callvirt System.Runtime.CompilerServices.TaskAwaiter System.Threading.Tasks.Task::GetAwaiter() stloc.0 <null> ldloca.s V_0 call System.Void System.Runtime.CompilerServices.TaskAwaiter::GetResult() ret <null>

Module Name

stub.exe

Full Name

stub.exe

EntryPoint

System.Void Stub.Program::<Main>()

Scope Name

stub.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

stub

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.8

Total Strings

3177

Main Method

System.Void Stub.Program::<Main>()

Main IL Instruction Count

6

Main IL

call System.Threading.Tasks.Task Stub.Program::Main() callvirt System.Runtime.CompilerServices.TaskAwaiter System.Threading.Tasks.Task::GetAwaiter() stloc.0 <null> ldloca.s V_0 call System.Void System.Runtime.CompilerServices.TaskAwaiter::GetResult() ret <null>

ed661d102769ec0e8013d9f9d807843c (750.59 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙