Suspicious
Suspect

f20f78febd6f609b6af98be2359e0002

PE Executable
|
MD5: f20f78febd6f609b6af98be2359e0002
|
Size: 725.5 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Low

Hash
Hash Value
MD5
f20f78febd6f609b6af98be2359e0002
Sha1
4b08227aea85931c63c7d66776da47c4be2b35e6
Sha256
3837602761789d5b258bbe4dbd66c19de4e60e3ec4809049d2f52269b948f079
Sha384
ce2c00fa5ad42ecaa76328fd3c78bbd66612d6c1daa62aca3b373750d705e7e28bf68c4b71d920adc68a5ad234127c8d
Sha512
b813500936d614d360b9dccbe3881db0ac4a3d5d19cdaafd4338900da1283c4c9166adaaa914d575bd84e6743710ccebf14b2131814be0b7b09b5eff093c1c9e
SSDeep
12288:SNsBULYHrGWudHLsl8OGFifBxYPovHcmi9GVyExR5qi+HNg5o1eW7:+6WEPulq8FiJxYQvHFxR1Uq6eW
TLSH
55F412252606DA17D5F217B49DB0D3B412B65EC9B422D313EEEABDEB3C3520A2684391

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
SmartNotesApp.Properties.Resources.resources
ZiKY
[NBF]root.Data
[NBF]root.Data-preview.png
htta
[NBF]root.Data
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: sXqb.pdb

Module Name

sXqb.exe

Full Name

sXqb.exe

EntryPoint

System.Void SmartNotesApp.Program::Main()

Scope Name

sXqb.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

sXqb

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

76

Main Method

System.Void SmartNotesApp.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void SmartNotesApp.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

Module Name

sXqb.exe

Full Name

sXqb.exe

EntryPoint

System.Void SmartNotesApp.Program::Main()

Scope Name

sXqb.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

sXqb

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

76

Main Method

System.Void SmartNotesApp.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void SmartNotesApp.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

f20f78febd6f609b6af98be2359e0002 (725.5 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙