Suspicious
Suspect

11a898f577ad90f815395f6bf06040e8

PE Executable
|
MD5: 11a898f577ad90f815395f6bf06040e8
|
Size: 5.7 MB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Medium

Hash
 Hash Value
MD5
11a898f577ad90f815395f6bf06040e8
Sha1
d5d6499e392fc9ae55c309d68b33da7d03d623b9
Sha256
3feb52e0d0d0de9b281f5c47e068a3559cd69da960609418b3725f2e93cfb838
Sha384
ce5ea74be6749c84ad72aa54f8d39752ad4375713b89df75228dabb8d45111f21ff2d5c1a50218744fe3ae0deb36d71f
Sha512
a7c46601ec05652fbeaf0b4a607d05973ac09ff2fc2f33c7048e745e9f7fdbd5f655fdc6e548b62b757c0631b20542bc0b696ccfc82506e93ba2fdca044c238d
SSDeep
24576:h4RmGzPYzXvL+gUCeCQJGvccJG6p0ztLH3o8Wd3BqjBUfogWWca/aWSQRAgz/Tgg:b9h/VvcARwH48g4jSfKa/53Q7sFrW
TLSH
FA46E82CB1A7E707E619027AC1E84939A1248A391F93CF37D598503E66F17FE4D4CB86

PeID

Microsoft Visual C++ v6.0 DLL
File Structure
11a898f577ad90f815395f6bf06040e8
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Microsoft.Win32.TaskScheduler.Properties.Resources.resources
Microsoft.Win32.TaskScheduler.TaskService.bmp
CQsHy
ndfpy
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Module Name

Microsoft.Win32.TaskScheduler.dll
Full Name

Microsoft.Win32.TaskScheduler.dll
Scope Name

Microsoft.Win32.TaskScheduler.dll
Scope Type

ModuleDef
Kind

Dll
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Microsoft.Win32.TaskScheduler
Assembly Version

2.11.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.5
Total Strings

52
Main Method

Not found or no body
11a898f577ad90f815395f6bf06040e8 (5.7 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙