Suspicious
Suspect

84770c1ace94c4dcd1e573556e3ea4fa

PE Executable
|
MD5: 84770c1ace94c4dcd1e573556e3ea4fa
|
Size: 3.22 MB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
84770c1ace94c4dcd1e573556e3ea4fa
Sha1
ad8cd2b9b0cbbc56228362a97d80ad1cd6c7739c
Sha256
9a2476c6474745cfacee35d15a3d4034d8d254304be3fa17a170ec0af9f9077e
Sha384
eaf6051f75adea2c444cfb1bae9deba7afe2c75b450f7992ff60771bd6e2e4726be2f0b7cdb040230d61cc0d5335fb5c
Sha512
7da3582b7b5b2c35636da622d53875295d85fdc49fe9b8ae66ca351ab104d1e81a061c71d4dfc7739f47b40d506636747542a2b4ce27612a4eb2b1d9810efba7
SSDeep
49152:8DojF4Sjrsk5kLj9Zn6Ym9WvUJ+R7G+K+zsR12/PVK5XQeIG+I6:80qZpvUJSG+Kac2/9K5Aga
TLSH
EDE5230AE7E804F8E0B7E27889634A46E3767C5A1371E78F07A465561F23690DE3E721

PeID

Microsoft Visual C++ 8.0 (DLL)
Microsoft Visual C++ v6.0 DLL
Pe123 v2006.4.4-4.12
File Structure
84770c1ace94c4dcd1e573556e3ea4fa
Overlay_c100c823.bin
svchost.exe
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
_RANDOMX
_TEXT_CN
.fptable
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
RT_GROUP_CURSOR4
ID:0065
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
WinRing0x64.sys
[Authenticode]_ccc217df.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
INIT
.rsrc
Resources
RT_VERSION
ID:0001
ID:1033
xmrig-asm.lib
config.json
startup.exe
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0002
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Resources.resx
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.didat
.rsrc
.reloc
Resources
PNG
ID:0065
ID:1033
ID:1033-preview.png
ID:0066
ID:1033
ID:1033-preview.png
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:1033-preview.png
RT_DIALOG
ID:0000
ID:1033
RT_STRING
ID:0007
ID:1033
ID:0008
ID:1033
ID:0009
ID:1033
ID:000A
ID:1033
ID:000B
ID:1033
ID:000C
ID:1033
ID:000D
ID:1033
ID:000E
ID:1033
ID:000F
ID:1033
ID:0010
ID:1033
ID:0011
ID:1033
RT_GROUP_CURSOR4
ID:0064
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Info

Overlay extracted: Overlay_c100c823.bin (2759848 bytes)
Info

PDB Path: D:\Projects\WinRAR\SFX\build\sfxrar64\Release\sfxrar.pdb
84770c1ace94c4dcd1e573556e3ea4fa (3.22 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙