Suspicious
Suspect

70db7b3876f7d7853718b7d39936b434

PE Executable
|
MD5: 70db7b3876f7d7853718b7d39936b434
|
Size: 132.61 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Medium

Hash
Hash Value
MD5
70db7b3876f7d7853718b7d39936b434
Sha1
bc471bc0934a19bedf3b0952f9b097766d7147ae
Sha256
7971da4b5b58fc85a6fb0917d7cf5b439e120486ddeb34c54fc772d86b7dea57
Sha384
1260217e2ef02e31f142ee24a5fb59e5c4874b34e25324422b29ee2c9b280f3fc3574a1592520936713af3b574a5ab01
Sha512
8b599de78d9c9ab1e6a5a67108808518cb116762b436d8b9a6e09469fa84739f67dabffe53e7635fca5b1735940e18dae186a679c63a063c960bb37339bec434
SSDeep
3072:hjMI9v4UpqVr14qqnMXuJy9b7eslDY+fV:Rfi4LnMb9biyf
TLSH
92D3C49433FC6B05F7BFABB5AAB021508B36FD725E11D64D0C8561CC2A32B949A15B33

PeID

Microsoft Visual C++ DLL
Microsoft Visual C++ v6.0
File Structure
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rsrc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Module Name

Paramount.Agent.tmp.d5c479e01af142cc88e8c75813b4e285.exe

Full Name

Paramount.Agent.tmp.d5c479e01af142cc88e8c75813b4e285.exe

EntryPoint

System.Int32 Paramount.Agent.Program::Main(System.String[])

Scope Name

Paramount.Agent.tmp.d5c479e01af142cc88e8c75813b4e285.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

Paramount.Agent.tmp.d5c479e01af142cc88e8c75813b4e285

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

<null>

Total Strings

1527

Main Method

System.Int32 Paramount.Agent.Program::Main(System.String[])

Main IL Instruction Count

6

Main IL

call System.Threading.Tasks.Task`1<System.Int32> Paramount.Agent.Program::MainAsync() callvirt System.Runtime.CompilerServices.TaskAwaiter`1<System.Int32> System.Threading.Tasks.Task`1<System.Int32>::GetAwaiter() stloc.0 <null> ldloca.s V_0 call System.Int32 System.Runtime.CompilerServices.TaskAwaiter`1<System.Int32>::GetResult() ret <null>

70db7b3876f7d7853718b7d39936b434 (132.61 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙