Suspicious
Suspect

f820481eea155ab7100f6cfd68d03784

PE Executable
MD5: f820481eea155ab7100f6cfd68d03784
Size: 560.64 KB
application/x-dosexec
Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Medium

Hash
Hash Value
MD5
f820481eea155ab7100f6cfd68d03784
Sha1
1c52b9524dd4f8365f402d4872f9358778836956
Sha256
d47d7fc15bc51aa6605752ccd218b1a5e64e6cd44dd05f13ca6525831fc37a3c
Sha384
b3864ec2438457fda1a89deed9077ea1392015d4a523db80ba9b3f2b04b2e89a90335cabcfad323dc09b6724f3074907
Sha512
26dca69fb0d401048b8b3b7c5837dd6b09ea7df1d69f80b53f60404befbd6488cd1c166b85e92493d3439e31c02b6e10ff79ced4b3d1598b33416fd68bb47a26
SSDeep
12288:3Wj+oy2QmqLd72FT3XucPVxGSAMC9ubFOh+:v3mQNkD+5SA/ush
TLSH
D9C4E0475E22FA11C558977366A4E27C076A5E9EBCE1E2478EDDBEAFF772B400800113
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
TetrominoFiller.Forms.MainMenuForm.resources
TetrominoFiller.Properties.Resources.resources
Ban_Hammer
[NBF]root.Data
[NBF]root.Data-preview.png
Blender
[NBF]root.Data
[NBF]root.Data-preview.png
Moon
[NBF]root.Data
Verspielt
[NBF]root.Data
[NBF]root.Data-preview.png
Versteckt
[NBF]root.Data
[NBF]root.Data-preview.png
nygb
[NBF]root.Data
[NBF]root.Data-preview.png
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

PDB Path: mrXs.pdb

Module Name

mrXs.exe

Full Name

mrXs.exe

EntryPoint

System.Void TetrominoFiller.Program::Main()

Scope Name

mrXs.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

mrXs

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.5

Total Strings

172

Main Method

System.Void TetrominoFiller.Program::Main()

Main IL Instruction Count

10

Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void TetrominoFiller.Forms.MainMenuForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>

f820481eea155ab7100f6cfd68d03784 (560.64 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙