Suspicious
Suspect

fd6fdda8be62a95be3fe1dd45fb93a1c

PE Executable
|
MD5: fd6fdda8be62a95be3fe1dd45fb93a1c
|
Size: 839.68 KB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Very low

Hash
 Hash Value
MD5
fd6fdda8be62a95be3fe1dd45fb93a1c
Sha1
88f8f5dffd4a0a9e6dd62a0d2f7153e9fe91597e
Sha256
c9a5fff84aef8b46605c9414b3d20e1f190e902454757c1f89179c5436422109
Sha384
8b6fd86884ee9e3fbdd830184f5abfc5576daa1faa1e1b63e3cfa5ac6e00a54ab3c4f76096a3cc7867c178048c4d9129
Sha512
baee079b925b63525eeacdee217e63bb255d01ec6f3cc173618864d0a2a2bfb189c830b2bc2bceb6cd9e917f81f2713c2d20a09d51b53e48cb06ce5dac338442
SSDeep
12288:GW7hw5719aiU9RP+7ul8N+MpDJtM0WWdNu5WT8TwPmHU1juyojGYY:G0w5GTPBC+wDnMJWu5kmHG4jGYY
TLSH
C105DF1272A5AF51C5B943F81520E7710BF25DAFE43AD31A0DC6ACEF3979B814E11A83
File Structure
fd6fdda8be62a95be3fe1dd45fb93a1c
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
EczaneOtomasyon.AnaMenu.resources
EczaneOtomasyon.Hakkinda.resources
ımageList1.ImageStream
[NBF]root.Data
EczaneOtomasyon.GenelMenu.resources
ımageList1.ImageStream
[NBF]root.Data
EczaneOtomasyon.Properties.Resources.resources
NCXS
[NBF]root.Data
[NBF]root.Data-preview.png
jj
[NBF]root.Data
EczaneOtomasyon.SaglikArsiv.resources
ımageList1.TrayLocation
Informations
Name
 Value
Module Name

XWga.exe
Full Name

XWga.exe
EntryPoint

System.Void EczaneOtomasyon.Program::Main()
Scope Name

XWga.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

XWga
Assembly Version

1.0.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.0
Total Strings

1124
Main Method

System.Void EczaneOtomasyon.Program::Main()
Main IL Instruction Count

10
Main IL

nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void EczaneOtomasyon.GenelMenu::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>
Artefacts
Name
 Value
PDB Path

XWga.pdb
Embedded Resources

20
Suspicious Type Names (1-2 chars)

0
fd6fdda8be62a95be3fe1dd45fb93a1c (839.68 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙