3b6b1c3f1ee533d1ec79cd8d30307b66

PE Executable
|
MD5: 3b6b1c3f1ee533d1ec79cd8d30307b66
|
Size: 9.84 MB
|
application/x-dosexec

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	3b6b1c3f1ee533d1ec79cd8d30307b66
Sha1	bbb3743ad6c0094ff7d2875b8904220f07bb4f49
Sha256	82122b18d10214149197264e486929ce6f38eaeb17058c8bd3b16b0133c7efc4
Sha384	12b163ab82d85a2c2c557304af59832a93f858736de55257e4e39a0aaea36372d84f9a29f00b5d57f25eb13c5dc6351f
Sha512	42368f1c955f495863cf84a58acc154565b1f04d99a8a69a217704fcf4f1a55bda5ab51cb532edec0e9c10d781223def79b8fbcef85249b135e254a3c16dece1
SSDeep	196608:avqeoea/g/3NHO0N+GXNjWLZ0UAKaFayXq3o4SS06FumvhrLLSnz:avqyL/3NHOjojPfHq3oq0ktvhrL8z
TLSH	B1A63376D5808026E3F212B3A954E230BEB9E2287F54855AE3D49CAD28F84D577F3353

PeID

Armadillo v4.x

MASM/TASM - sig4 (h)

Microsoft Visual C++ 6.0 DLL (Debug)

Microsoft Visual C++ 7.0 - 8.0

Microsoft Visual C++ 8

Microsoft Visual C++ v6.0 DLL

VC8 -> Microsoft Corporation

File Structure

Informations

Name0	Value
Info	PE Detect: PeReader OK (file layout)
Info	Overlay extracted: Overlay_55c5bc9f.bin (9453504 bytes)
Info	PDB Path: C:\src\wix38\build\ship\x86\burn.pdb

Artefacts

Name0	Value
URLs in VB Code - #1	http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_2010-07-06.crl0Z
URLs in VB Code - #2	http://www.microsoft.com/pki/certs/MicCodSigPCA_2010-07-06.crt0
URLs in VB Code - #3	http://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z
URLs in VB Code - #4	http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
URLs in VB Code - #5	http://www.microsoft.com/PKI/docs/CPS/default.htm0@
URLs in VB Code - #6	http://www.microsoft.com/windows0
URLs in VB Code - #7	http://www.microsoft.com/pkiops/crl/Microsoft%20Time-Stamp%20PCA%202010(1).crl0l
URLs in VB Code - #8	http://www.microsoft.com/pkiops/certs/Microsoft%20Time-Stamp%20PCA%202010(1).crt0
URLs in VB Code - #9	http://www.microsoft.com/pkiops/Docs/Repository.htm0

3b6b1c3f1ee533d1ec79cd8d30307b66 (9.84 MB)