a3b3c9e9c1c68df7a1902750cef695b9b5518f19c5ecbb8e3796f5b80468e361
This file seems to be a .NET executable.
Sadly, Manalyzer's analysis techniques were designed for native code, so it's likely that this report won't tell you much.
Sorry!
Sadly, Manalyzer's analysis techniques were designed for native code, so it's likely that this report won't tell you much.
Sorry!
Summary
| Architecture |
IMAGE_FILE_MACHINE_I386
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2026-May-24 19:03:05 |
| Comments | Important System Files |
| CompanyName | Utility Application |
| FileDescription | Server Dev Bty |
| FileVersion | 2.3.8.5 |
| InternalName | server1.exe |
| LegalCopyright | Copyright © 2026 Utility Application |
| LegalTrademarks | All right Reserved. |
| OriginalFilename | server1.exe |
| ProductName | Server Development Bty |
| ProductVersion | 2.3.8.5 |
| Assembly Version | 2.2.8.2 |
Plugin Output
| Info | Matching compiler(s): |
Microsoft Visual C# v7.0 / Basic .NET
.NET executable -> Microsoft |
| Malicious | VirusTotal score: 53/69 (Scanned on 2026-05-26 19:01:39) |
ALYac:
Gen:Variant.Application.Tedy.28594
APEX: Malicious AVG: MSIL:GenMalicious-R [Trj] AhnLab-V3: Trojan/Win.Generic.C5448890 Alibaba: Trojan:MSIL/Kryptik.cecb3516 Antiy-AVL: Trojan[Spy]/MSIL.Quasar Arcabit: Trojan.Application.Tedy.D6FB2 Avast: MSIL:GenMalicious-R [Trj] Avira: TR/Dropper.Gen BitDefender: Gen:Variant.Application.Tedy.28594 Bkav: W32.Malware.46A60562 CAT-QuickHeal: Trojan.YakbeexMSIL.ZZ4 CTX: exe.trojan.msil CrowdStrike: win/malicious_confidence_100% (W) Cylance: Unsafe DeepInstinct: MALICIOUS DrWeb: BackDoor.Quasar.277 ESET-NOD32: MSIL/Kryptik.AHOV trojan Elastic: malicious (high confidence) Emsisoft: Gen:Variant.Application.Tedy.28594 (B) F-Secure: Trojan.TR/Dropper.Gen Fortinet: PossibleThreat.MU GData: Gen:Variant.Application.Tedy.28594 Google: Detected Gridinsoft: Trojan.Win32.Kryptik.sa Ikarus: Trojan-Spy.MSIL.Agent K7AntiVirus: Trojan ( 005d2bd61 ) K7GW: Trojan ( 005d2bd61 ) Kaspersky: HEUR:Trojan-Spy.MSIL.Quasar.gen Kingsoft: MSIL.Backdoor.Quasar.gen Lionic: Trojan.Win32.Quasar.m!c Malwarebytes: Malware.AI.2936412639 MaxSecure: Trojan.Malware.300983.susgen McAfeeD: Real Protect-LS!99AD21828B37 MicroWorld-eScan: Gen:Variant.Application.Tedy.28594 Microsoft: Trojan:Win32/Malgent!MSR Paloalto: generic.ml Rising: Malware.Obfus/MSIL@AI.95 (RDM.MSIL2:jA7DqYmIFyGqthmuyM35Uw) Sangfor: Trojan.Win32.Save.a SentinelOne: Static AI - Malicious PE Sophos: Mal/Generic-S Tencent: Msil.Trojan-Spy.Quasar.Fflw Trapmine: suspicious.low.ml.score TrellixENS: Artemis!99AD21828B37 TrendMicro: Backdoor.Win32.QUASARRAT.YXGEXZ TrendMicro-HouseCall: Trojan.Win32.VSX.PE04CA3 VBA32: CIL.HeapOverride.Heur VIPRE: Gen:Variant.Application.Tedy.28594 Varist: W32/MSIL_Kryptik.NBM.gen!Eldorado VirIT: Trojan.Win32.MSIL_Heur.A Yandex: Trojan.Igent.b6BxmK.3 alibabacloud: Trojan[downloader]:MSIL/Injector.CRI huorong: Trojan/Injector.ayu |
Hashes
DOS Header
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x80 |
PE Header
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_I386
|
| NumberofSections | 3 |
| TimeDateStamp | 2026-May-24 19:03:05 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xe0 |
| Characteristics |
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
|
Image Optional Header
| Magic | PE32 |
|---|---|
| LinkerVersion | 80.0 |
| SizeOfCode | 0xb8c00 |
| SizeOfInitializedData | 0x19600 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x000BAB8E (Section: .text) |
| BaseOfCode | 0x2000 |
| BaseOfData | 0xbc000 |
| ImageBase | 0x400000 |
| SectionAlignment | 0x2000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 4.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 6.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0xd8000 |
| SizeOfHeaders | 0x200 |
| Checksum | 0 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
.text
.rsrc
.reloc
Imports
| mscoree.dll |
_CorExeMain
|
|---|
Delayed Imports
1
2
3
4
5
32512
1 (#2)
1 (#3)
Version Info
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 2.3.8.5 |
| ProductVersion | 2.3.8.5 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language | UNKNOWN |
| Comments | Important System Files |
| CompanyName | Utility Application |
| FileDescription | Server Dev Bty |
| FileVersion (#2) | 2.3.8.5 |
| InternalName | server1.exe |
| LegalCopyright | Copyright © 2026 Utility Application |
| LegalTrademarks | All right Reserved. |
| OriginalFilename | server1.exe |
| ProductName | Server Development Bty |
| ProductVersion (#2) | 2.3.8.5 |
| Assembly Version | 2.2.8.2 |
| Resource LangID | UNKNOWN |
|---|
TLS Callbacks
Load Configuration
RICH Header
Errors
Leave a comment
No comments yet.