Suspicious
Suspect

d3e474eba6a62040d516ae751520fc26

PE Executable
|
MD5: d3e474eba6a62040d516ae751520fc26
|
Size: 1.15 MB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
d3e474eba6a62040d516ae751520fc26
Sha1
aa32f282ba45358e212687103be6c2370d028b84
Sha256
b0b83679c21c8d254c53bef53fbd8769ce316522b14f6be20660c9435b9d8d06
Sha384
b2a291c71b1f24b974ecc0281c886890c735e50579e893fc2293754fb765e6c109009b6117953d73a14ea1932c603cc2
Sha512
f980fdf543c9fd88b99c44d5387660ade9741ea5262c87c604f967a2d5b9f7ef766eccdf6b285d46ca006323d0f75b2e620b61f0e4cdc520b28a2c6601effbec
SSDeep
24576:e9mMuNb/lJa1c7OyS8oAsPkBoslHyXCamWK78iE0w:JrNzi1AyZmWK78ew
TLSH
4535DF43F68E08F3E71B013045979616AF3AB9014796CBCF57B05E69AE333E15E3A252

PeID

Microsoft Visual C++ 7.0 - 8.0
Microsoft Visual C++ 8.0 (DLL)
Microsoft Visual C++ v6.0 DLL
Private EXE Protector V2.30-V2.3X -> SetiSoft Team
File Structure
d3e474eba6a62040d516ae751520fc26
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_RCDATA
ID:0065
ID:1033
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.CRT
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:0008
ID:1033
ID:0009
ID:1033
RT_GROUP_CURSOR4
ID:0065
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:0
ID:1033
ID:0066
ID:1033
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.reloc
Artefacts
Name
 Value
PDB Path

t$di
URLs in VB Code - #1

http://crl.verisign.com/tss-ca.crl0
URLs in VB Code - #2

http://ocsp.verisign.com0
URLs in VB Code - #3

http://crl.verisign.com/ThawteTimestampingCA.crl0
URLs in VB Code - #4

https://www.verisign.com/rpa
URLs in VB Code - #5

http://csc3-2010-crl.verisign.com/CSC3-2010.crl0D
URLs in VB Code - #6

https://www.verisign.com/cps0
URLs in VB Code - #7

http://csc3-2010-aia.verisign.com/CSC3-2010.cer0
URLs in VB Code - #8

https://www.verisign.com/rpa0
URLs in VB Code - #9

http://logo.verisign.com/vslogo.gif04
URLs in VB Code - #10

http://crl.verisign.com/pca3-g5.crl04
PDB Path

g2m.pdb
PDB Path

c:\p4builds\Products\GoToMeeting\v5.4_builds\output\G2M_Exe.pdb
d3e474eba6a62040d516ae751520fc26 (1.15 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙