Suspicious
Suspect

f2d61d819dcc4148aa900ff299947a4a

PE Executable
|
MD5: f2d61d819dcc4148aa900ff299947a4a
|
Size: 1.22 MB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Medium

Hash
 Hash Value
MD5
f2d61d819dcc4148aa900ff299947a4a
Sha1
015bd5caf462600d3ceb7e6624b116a34913454a
Sha256
030e28b8e4a701de5854149a82398d15c8dbd52ac7479883d085d52a1ba8fbb6
Sha384
02f906061159e9ed47e62337ed2dd68480bca4ee248a18b2103178623e58abcf2e3ac601c6a1f8374e310f891ab833ae
Sha512
0d62cee22aef29359b51882c96728a132e42495c942167830aea5eb819687bf6df226f3fe42ef9be0f8fbc74c8a588a21ac20927a8a42ffc95a0c8e9d8fee1de
SSDeep
24576:wnnf4icFi/JvIAYzfwcfImpLHL8J4Ccrh82uWaEI:Yf9cFalIAYzwcfIE8JYVpucI
TLSH
1645BFC3B044644DF8DE4277659ACAB9E1D51D8E3802DD01A2F53F83BFAEA8293C155B
File Structure
f2d61d819dcc4148aa900ff299947a4a
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0006
ID:0
ID:0007
ID:0
ID:0008
ID:0
ID:0009
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Calculator_Project.Calculator.resources
$this.Icon
[NBF]root.IconData
greyder
[NBF]root.Data
Login_And_Register_Form.registerForm.resources
pictureBox1.Image
[NBF]root.Data
[NBF]root.Data-preview.png
pictureBox2.Image
[NBF]root.Data
[NBF]root.Data-preview.png
Login_And_Register_Form.frmLogin.resources
Login_And_Register_Form.Properties.Resources.resources
LVB
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
Name
 Value
Module Name

YLF.exe
Full Name

YLF.exe
EntryPoint

System.Void Login_And_Register_Form.Program::Main()
Scope Name

YLF.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

YLF
Assembly Version

6.3.1.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.5
Total Strings

174
Main Method

System.Void Login_And_Register_Form.Program::Main()
Main IL Instruction Count

10
Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void Login_And_Register_Form.registerForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>
Artefacts
Name
 Value
PDB Path

YLF.pdb
f2d61d819dcc4148aa900ff299947a4a (1.22 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙