Suspicious
Suspect

b7380d2e9c03619246fe6b1b14f7a219

PE Executable
|
MD5: b7380d2e9c03619246fe6b1b14f7a219
|
Size: 3.01 MB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
b7380d2e9c03619246fe6b1b14f7a219
Sha1
0f668c743ae0326ccff97681e1f177b520d7813b
Sha256
65219d70f5c46785626f4bc9c88ea20ba4dd533c7e9af5cb166eeee07d4753ff
Sha384
b6a9f52b4e511ea51dc5cd3f4743266fa54febe5c3d67dfaba7db7fc9559efae8c4a05fcc76ad01094f35c48f654087d
Sha512
31c900eb55a4c73249c74ba98819818246d585ad88a0e384343859658f6152bfb505679718ccdf2149045ccdacf5a3007f4688f3ad1563664fd95204ed22785c
SSDeep
49152:cdpK1bEG3eZUoQx5nKva7M7/PiclLutfouSa6FmAfS/ix89ZEu4opa5Yw7rQcNyA:c81RH5KaM7/PPLmgfnQAfS/ix8/lVa5X
TLSH
09D52347B285C4F4E5B3A63448711D02BB73BC4A57A05BCF2788E6A63E326914D3BB71

PeID

MASM/TASM - sig4 (h)
Microsoft Visual C++ 8.0 (DLL)
Microsoft Visual C++ v6.0 DLL
Pe123 v2006.4.4-4.12
UPolyX 0.3 -> delikon
File Structure
b7380d2e9c03619246fe6b1b14f7a219
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
.rsrc
.npc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0006
ID:0
ID:0007
ID:0
ID:0008
ID:0
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Info

PDB Path: D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
b7380d2e9c03619246fe6b1b14f7a219 (3.01 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙