Suspicious
Suspect

f506667101d873be53042492bc457970

PE Executable
|
MD5: f506667101d873be53042492bc457970
|
Size: 517.12 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very low

Hash
Hash Value
MD5
f506667101d873be53042492bc457970
Sha1
32ac75ffce9c1281d0473c9c452e8c4c6be4dcab
Sha256
72c406958787379b86d56874bfb0ffa1b4feb65ef34280a2dce6477c33fb6f86
Sha384
f8e86d2e2ba4c5d41fe8e24652846d14ba4e2c20e534ca1128ba11b9a0ab720d80c22bbbd1f9ad165f15331b5567ab4e
Sha512
584d54bbb67a6977394ea18ecf5150a9512f83347e4c0c71c3cb8c8a06b440790c50ae3187b6d8af3da3b39a3659857debfd90661bc9e8fad9a8df5e82974e21
SSDeep
12288:8YHKr1Qza2scoQLlfII4VHAnOkzloxt/jb:pHK58oQLlfIfVHAnhloT/jb
TLSH
08B401453A269823C6AE47F60D20D27943F94DCEB621E6C66FC52DEF34E27152982F43

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
StreamlinedHelper.MainForm.resources
StreamlinedHelper.Properties.Resources.resources
bZhI
xsh
Informations
Name
Value
Module Name

dRje.exe

Full Name

dRje.exe

EntryPoint

System.Void StreamlinedHelper.Program::Main()

Scope Name

dRje.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

dRje

Assembly Version

7.0.0.2

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0

Total Strings

560

Main Method

System.Void StreamlinedHelper.Program::Main()

Main IL Instruction Count

7

Main IL

call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) call System.Void StreamlinedHelper.Program::InitializeApplication() newobj System.Void StreamlinedHelper.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>

Module Name

dRje.exe

Full Name

dRje.exe

EntryPoint

System.Void StreamlinedHelper.Program::Main()

Scope Name

dRje.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

dRje

Assembly Version

7.0.0.2

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0

Total Strings

560

Main Method

System.Void StreamlinedHelper.Program::Main()

Main IL Instruction Count

7

Main IL

call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) call System.Void StreamlinedHelper.Program::InitializeApplication() newobj System.Void StreamlinedHelper.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>

Artefacts
Name
Value
PDB Path

dRje.pdb

Embedded Resources

9

Suspicious Type Names (1-2 chars)

0

f506667101d873be53042492bc457970 (517.12 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙