Suspicious
Suspect

e3d1a79ca8eec63f6a475e3afd51c9ce

PE Executable
|
MD5: e3d1a79ca8eec63f6a475e3afd51c9ce
|
Size: 1.6 MB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
e3d1a79ca8eec63f6a475e3afd51c9ce
Sha1
6f419d6667b961bb55034b15058ac7f0950cddeb
Sha256
f2e7ee35b011435008e0f8c57989888c69a361238e7e25e0681dc652555355b3
Sha384
566992b8c8fd5d4b7f28e17421275f06dcfa85d2ad2dee4004dc6142adbee8c31601a38530c640d7b6b1c19ad76bc2f9
Sha512
e00e6b8792cdedb600a762f63f166c5e6e2c47a6578382156b8ca432df8c92d3b87db1957b99e254a9b0ad74d2a009fc9ed652e50808125aa20c8e5b64eb52f5
SSDeep
24576:rjZhmWcUs8EnqneJqexPvAzoCeCJBTvNu/3fzFfv0bG+:r5pAnqnewedhUBrNunpfZ
TLSH
0D75AE42B3E6D1F4CE7B80B7C461862AE771B8A01B248BDF51A5891EEF63FC05935B11

PeID

Microsoft Visual C++ 8.0 (DLL)
Microsoft Visual C++ v6.0 DLL
Pe123 v2006.4.4-4.12
File Structure
e3d1a79ca8eec63f6a475e3afd51c9ce
[Authenticode]_5685bba4.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
_RDATA
.rsrc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:0008
ID:1033
ID:0009
ID:1033
ID:1033-preview.png
ID:000A
ID:1033
ID:1033-preview.png
ID:000B
ID:1033
ID:1033-preview.png
ID:000C
ID:1033
ID:1033-preview.png
ID:000D
ID:1033
ID:1033-preview.png
ID:000E
ID:1033
ID:1033-preview.png
ID:000F
ID:1033
ID:1033-preview.png
ID:0010
ID:1033
ID:1033-preview.png
ID:0011
ID:1033
ID:1033-preview.png
ID:0012
ID:1033
ID:1033-preview.png
ID:0013
ID:1033
ID:1033-preview.png
ID:0014
ID:1033
ID:1033-preview.png
ID:0015
ID:1033
ID:1033-preview.png
ID:0016
ID:1033
ID:1033-preview.png
ID:0017
ID:1033
ID:1033-preview.png
ID:0018
ID:1033
ID:0019
ID:1033
ID:001A
ID:1033
ID:001B
ID:1033
RT_MENU
ID:00D3
ID:1033
RT_DIALOG
ID:00CD
ID:1033
ID:01F4
ID:1033
RT_ACCELERATOR
ID:00D4
ID:1033
RT_RCDATA
ID:0001
ID:1033
RT_GROUP_CURSOR4
ID:009F
ID:1033
ID:00A0
ID:1033
ID:00CE
ID:1033
ID:00CF
ID:1033
ID:00D0
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Info

Authenticode present at 0x185C00 size 1400 bytes
Info

PDB Path: t$di
Artefacts
Name
 Value
URLs in VB Code - #1

http://www.w3.org/2001/XMLSchema-instance
URLs in VB Code - #2

http://www.w3.org/2001/XMLSchema
URLs in VB Code - #3

file:///
URLs in VB Code - #4

http://schemas.microsoft.com/SMI/2005/WindowsSettings
URLs in VB Code - #5

http://schemas.microsoft.com/SMI/2016/WindowsSettings
e3d1a79ca8eec63f6a475e3afd51c9ce (1.6 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙