Suspicious
Suspect

44a9e7c7a7b6c9201ba778b2bbeb715c

PE Executable
|
MD5: 44a9e7c7a7b6c9201ba778b2bbeb715c
|
Size: 3.03 MB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
44a9e7c7a7b6c9201ba778b2bbeb715c
Sha1
5add80b96599f6b093005c8297ee22686ed52ae1
Sha256
45c65a6042ee5774c61ce1c0924b0939e1d9b56f18490798271186634a1a8211
Sha384
cb70dc303c7a7ed6b63279b8ba3d7ba188a14432184bc605620406ba2f26652a871598b3519e8a1a3c8b2593b447af41
Sha512
b6ff974870d0f9566a8141f2c0ccb7f087634ad5481a534a205b6458d19d5d43e891e558e399db08fcc81a6e0c62d642f1db4ec2a1b007d1ee360a827390c516
SSDeep
49152:tABgsBErzCs5mcnh8qpRmA8GQEwLaOnXvMUS1Cu0BmXwgS+RGYk0U5PfMk0H7wj2:SBgsBErzxmehx+A8DaQPtBFgS+RK5eNb
TLSH
62E5E021B9418073E2A20231DDBDAB7A49BDB6303B3541DBB3D40E6D5EB05D2663973B

PeID

Armadillo v4.x
Microsoft Visual C++ 6.0 DLL (Debug)
Microsoft Visual C++ 7.0 - 8.0
Microsoft Visual C++ 8
Microsoft Visual C++ 8
Microsoft Visual C++ v6.0 DLL
VC8 -> Microsoft Corporation
File Structure
44a9e7c7a7b6c9201ba778b2bbeb715c
Overlay_504a1872.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.gfids
.tls
.rsrc
.reloc
Resources
ZIPRES
ID:008A
ID:2052
configure
configure.xml
font.xml
InstallCustom.xml
InstallFinished.xml
InstallMainLayout.xml
InstallMainWnd.xml
InstallRunning.xml
InstallSetting.xml
language
language_arabic.xml
language_chinese.xml
language_chinesetrad.xml
language_czech.xml
language_english.xml
language_french.xml
language_german.xml
language_hindi.xml
language_indonesian.xml
language_italiano.xml
language_japanese.xml
language_korean.xml
language_malay.xml
language_nederland.xml
language_portuguese.xml
language_russian.xml
language_spanish.xml
language_swedish.xml
language_thai.xml
language_turkish.xml
License.xml
MessageBox.xml
MessageBox_down.xml
scrollbar.bmp
scrollbar.xml
skin
anima
1.png
1.png-preview.png
2.png
2.png-preview.png
3.png
3.png-preview.png
4.png
4.png-preview.png
backgroud.png
backgroud.png-preview.png
backgroud_nologo.png
backgroud_nologo.png-preview.png
bar.png
bar.png-preview.png
bg_bottom.png
bg_bottom.png-preview.png
bg_message.png
bg_message.png-preview.png
bg_setting.png
bg_setting.png-preview.png
bkprogress.png
bkprogress.png-preview.png
btn_browse.png
btn_browse.png-preview.png
btn_install.png
btn_install.png-preview.png
btn_yes.png
btn_yes.png-preview.png
button_close.png
button_close.png-preview.png
button_min.png
button_min.png-preview.png
checkbox_h.png
checkbox_h.png-preview.png
checkbox_normal.png
checkbox_normal.png-preview.png
checkbox_p.png
checkbox_p.png-preview.png
checkbox_selected.png
checkbox_selected.png-preview.png
Combo_nor.png
Combo_nor.png-preview.png
combo_over.png
combo_over.png-preview.png
gif
bg00.png
bg00.png-preview.png
bg01.png
bg01.png-preview.png
bg02.png
bg02.png-preview.png
bg03.png
bg03.png-preview.png
bg04.png
bg04.png-preview.png
bg05.png
bg05.png-preview.png
bg06.png
bg06.png-preview.png
bg07.png
bg07.png-preview.png
bg08.png
bg08.png-preview.png
bg09.png
bg09.png-preview.png
bg10.png
bg10.png-preview.png
bg11.png
bg11.png-preview.png
bg12.png
bg12.png-preview.png
bg13.png
bg13.png-preview.png
bg14.png
bg14.png-preview.png
bg15.png
bg15.png-preview.png
bg16.png
bg16.png-preview.png
bg17.png
bg17.png-preview.png
bg18.png
bg18.png-preview.png
bg19.png
bg19.png-preview.png
bg20.png
bg20.png-preview.png
logo.png
logo.png-preview.png
logo_left_top.png
logo_left_top.png-preview.png
logo_running.png
logo_running.png-preview.png
message_exclamation.png
message_exclamation.png-preview.png
message_help.png
message_help.png-preview.png
message_warn.png
message_warn.png-preview.png
OptionNormal.png
OptionNormal.png-preview.png
OptionSelected.png
OptionSelected.png-preview.png
progress.png
progress.png-preview.png
waiting.png
waiting.png-preview.png
warning.png
warning.png-preview.png
transWnd.xml
RT_ICON
ID:0001
ID:2052
ID:2052-preview.png
RT_GROUP_CURSOR4
ID:008F
ID:2052
RT_VERSION
ID:0001
ID:2052
RT_MANIFEST
ID:0001
ID:1033
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Info

Overlay extracted: Overlay_504a1872.bin (10296 bytes)
44a9e7c7a7b6c9201ba778b2bbeb715c (3.03 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙