Suspicious
Suspect

91fc722b2802baa21de11ca6060077f9

PE Executable
|
MD5: 91fc722b2802baa21de11ca6060077f9
|
Size: 4.14 MB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
91fc722b2802baa21de11ca6060077f9
Sha1
6338aaa133a97bed77b35b98973e318e0f68b349
Sha256
924c0c5ec0abae51e9a3d42dfaed4ad6aab0bfaee85563bb5144c3bdc4ae1c6c
Sha384
bd0844080aa180f5d0f12f73ca6d3f1ea6cd42a688a054b9576aae72bd6b79842e5a5b93b2c6184a41feb8aa7a7387ea
Sha512
4a7f9d875eac021b8cf96b464f071955949df551d408a5ba975139358f6c3a8e6197db356af4d0af4f57572604651398a7b439443686bd5d6d07ade58da65df6
SSDeep
49152:0Jdmi/Gdt0efuCsOXdFpjqI6rWLLP1pzRdHnPypZPYFhYV/SmUgmG8wQEFGJm+V:0NwePahYF7mAF4V
TLSH
5B167C136C904A9CC4BEE27BA4A3918277BE7D904B3336D32B40B27D2E776C425B5749

PeID

HQR data file
Microsoft Visual C++ v6.0 DLL
tElock 1.0 (private) -> tE!
tElock 1.0 (private) -> tE!
File Structure
91fc722b2802baa21de11ca6060077f9
[Authenticode]_9bd2b84f.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
.rsrc
Resources
RT_BITMAP
ID:006E
ID:1033
RT_ICON
ID:0001
ID:0
ID:0-preview.png
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0006
ID:0
ID:0007
ID:0
ID:0008
ID:0
ID:0-preview.png
ID:0009
ID:0
ID:000A
ID:0
ID:000B
ID:0
RT_DIALOG
ID:0067
ID:1033
ID:0068
ID:1033
ID:0069
ID:1033
ID:006A
ID:1033
ID:006B
ID:1033
ID:006D
ID:1033
ID:006F
ID:1033
RT_GROUP_CURSOR4
ID:0000
ID:0
ID:0067
ID:0
RT_VERSION
ID:0001
ID:1033
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Info

Authenticode present at 0x3EFA00 size 11904 bytes
91fc722b2802baa21de11ca6060077f9 (4.14 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙