Suspicious
Suspect

jli.dll

PE Executable
|
MD5: 093c389c132ff135e8a427790cbc9cee
|
Size: 2.47 MB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
093c389c132ff135e8a427790cbc9cee
Sha1
6a9467b7bec6c010ee798f4440acbe86bb8df425
Sha256
da061f2bdb2a6d84d3e7d6b2045834655fe65418e9ad7281b4b689a3700dc003
Sha384
faca3814d1799ab09c07a9e1be4a74ef3b3ee0f2ec1ca2e6cf75e9d12ace40d52dbf01e2632a766616e6c101c40f9d8c
Sha512
6e805701c9c0ca8fecf05a1c7d0aa4594ea48f89c2398add84de164a3469426b0d7a1ce812aba52626539e8d439027208bc5762b647e732a277801f4f57f46ea
SSDeep
49152:ABvI/FoTrGx09mRAAB4S5grkaXSaxgJ1uyutEl:2XTrG9AHIa
TLSH
6EB59D15E3E801A8D52BDB74CA659333E77078865731D58F0A58E64A2F33EA09B3F712

PeID

MASM/TASM - sig4 (h)
Microsoft Visual C++ v6.0 DLL
Microsoft v12.00 64bit C++ DLL - sign ASL ( 64 bit )
Pe123 v2006.4.4-4.12
File Structure
jli.dll
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
_RDATA
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
ID:1033
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Info

PDB Path: C:\WINDOWS\b9f0fa9f94b794a08cde542f19afda04\lt\ArcSetup\WPF\81D109E8\Public\2.pdb
jli.dll (2.47 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙