Suspicious
Suspect

872a137d3de73228202685c7f7192e4f

PE Executable
|
MD5: 872a137d3de73228202685c7f7192e4f
|
Size: 4.09 MB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
872a137d3de73228202685c7f7192e4f
Sha1
5c343b7e49d0ee4ed46245cdf26ec3003293fe9e
Sha256
1fc8d0798605394a2a0dbc39c80bf5221483668c22faf6782e5254cbbd90a1d3
Sha384
ce9fca929e8af9d0d365dad8db0e1d4e80ca59c95f58784e3a31e6bbc68e1b4ce3f6e3648ea58cfaa3442eef85d9d987
Sha512
04b5ae2c33f9a2aec9334aa1ed4e850d0c798f5f68c3353110f37f1846c460a2c74dd7e2ea9f1f28398d482e69d4db5d6cb2ac487a8fdafde3bdf0aa8839e807
SSDeep
49152:Wllq+b2Tzg3J0hRG18/ngSwj6AjpBBqVpzZOBVon/FdM7OViNvVxxx+d+S8BQOkn:WlZZ0XG18/ngSU6Zqa
TLSH
2A16E49A6CB8AC95CC899A30CDA3022D7633EC0E0BA792D399D0BD6C1D725D0F9F5754

PeID

HQR data file
Microsoft Visual C++ v6.0 DLL
tElock 1.0 (private) -> tE!
tElock 1.0 (private) -> tE!
File Structure
872a137d3de73228202685c7f7192e4f
[Authenticode]_b877664a.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
.rsrc
Resources
ZIPRES
ID:0000
ID:2052
bg.svg
bg.svg-preview.jpg
bgshadw.png
bgshadw.png-preview.png
blue_disable.svg
blue_disable.svg-preview.jpg
blue_hover.svg
blue_hover.svg-preview.jpg
blue_normal.svg
blue_normal.svg-preview.jpg
browse_btn_hover.svg
browse_btn_hover.svg-preview.jpg
browse_btn_normal.svg
browse_btn_normal.svg-preview.jpg
check_disable.svg
check_disable.svg-preview.jpg
check_sel.svg
check_sel.svg-preview.jpg
close_hover.svg
close_hover.svg-preview.jpg
edit_bg.svg
edit_bg.svg-preview.jpg
InstallMainWnd.xml
install_drop_down_normal.svg
install_drop_down_normal.svg-preview.jpg
install_drop_down_normal_reverse.svg
install_drop_down_normal_reverse.svg-preview.jpg
install_drop_down_select.svg
install_drop_down_select.svg-preview.jpg
install_drop_down_select_reverse.svg
install_drop_down_select_reverse.svg-preview.jpg
language
arabic.xml
de.xml
en.xml
fr.xml
it.xml
ja.xml
ko.xml
ru.xml
zh-tw.xml
zh_cn.xml
logo.svg
logo.svg-preview.jpg
progressing.png
progressing.png-preview.png
progressing@125.png
progressing@125.png-preview.png
progressing@150.png
progressing@150.png-preview.png
progressing@175.png
progressing@175.png-preview.png
progressing@200.png
progressing@200.png-preview.png
progress_normal.svg
progress_normal.svg-preview.jpg
scrollbar
scrollbar_rail.svg
scrollbar_rail.svg-preview.jpg
scrollbar_rail2.svg
scrollbar_rail2.svg-preview.jpg
scrollbar_rail_hover.svg
scrollbar_rail_hover.svg-preview.jpg
scrollbar_rail_hover2.svg
scrollbar_rail_hover2.svg-preview.jpg
scrollbar_rail_hover_small.svg
scrollbar_rail_hover_small.svg-preview.jpg
scrollbar_rail_small.svg
scrollbar_rail_small.svg-preview.jpg
success_mark.svg
success_mark.svg-preview.jpg
uncheck_normal.svg
uncheck_normal1.svg
uncheck_normal1.svg-preview.jpg
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0006
ID:0
ID:0007
ID:0
ID:0008
ID:0
RT_MENU
ID:006D
ID:2052
RT_DIALOG
ID:0067
ID:2052
RT_STRING
ID:0007
ID:2052
RT_ACCELERATOR
ID:006D
ID:2052
RT_GROUP_CURSOR4
ID:006A
ID:0
RT_VERSION
ID:0001
ID:2052
RT_MANIFEST
ID:0001
ID:1033
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Info

Authenticode present at 0x3E4000 size 10640 bytes
872a137d3de73228202685c7f7192e4f (4.09 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙