Suspicious
Suspect

ff8505309831284bff66a1cfd5049dac

PE Executable
|
MD5: ff8505309831284bff66a1cfd5049dac
|
Size: 14.06 MB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics
Hash
Hash Value
MD5
ff8505309831284bff66a1cfd5049dac
Sha1
93aa31051cd1bac3bb2ffddb71f93330dcab9d89
Sha256
d01148808fbeefa22cd4541cdaaee8bc1f74e3045302115dc5b08b99ff93dc9c
Sha384
7cef89d0eed5a3e32ce504c777272c03a511ca25764b96cf76c6d84c9e67b74264561451f6f9a5f6eb02e5c41d897f27
Sha512
cd58c835cd7758ff7f051bdecd0aee5d94317595de08c6c9390147766287548c0deeb388a99f503f5b15e0922cb45c6f81769f40fb44b19d639f0fd33e1f9aa9
SSDeep
393216:YaJ1HSHwSmh3UhzxrY+hyBGih0bRjDHfTczLcpyPjGm6hkDf2B73v:hJ1HSHwSmC+hERffTczLc+Vj2B73v
TLSH
34E6F121325EC42BD56109B05A2C9EEA912C6E351FF168C7B3DC6E6E17764D30633E2B

PeID

Microsoft Visual C++ 6.0 DLL (Debug)
Microsoft Visual C++ 7.0 - 8.0
Microsoft Visual C++ 8
Microsoft Visual C++ 8
Microsoft Visual C++ v6.0 DLL
VC8 -> Microsoft Corporation
File Structure
[Authenticode]_86cb3a0a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.didat
.fptable
.rsrc
.reloc
Resources
RT_BITMAP
ID:00F9
ID:1033
ID:00FF
ID:1033
ID:277A
ID:1033
ID:277B
ID:1033
ID:278C
ID:1033
ID:278D
ID:1033
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:1033-preview.png
ID:0004
ID:1033
ID:1033-preview.png
ID:0005
ID:1033
ID:1033-preview.png
ID:0006
ID:1033
ID:1033-preview.png
ID:0007
ID:1033
ID:1033-preview.png
ID:0008
ID:1033
ID:1033-preview.png
RT_DIALOG
ID:00C9
ID:1033
ID:00D8
ID:1033
ID:00E1
ID:1033
ID:07D0
ID:1033
ID:278B
ID:1033
RT_STRING
ID:0009
ID:1033
ID:000A
ID:1033
ID:000B
ID:1033
ID:000C
ID:1033
ID:000D
ID:1033
ID:000E
ID:1033
ID:000F
ID:1033
ID:0010
ID:1033
ID:0011
ID:1033
ID:0012
ID:1033
ID:027A
ID:1033
ID:0FDF
ID:1033
ID:0FE0
ID:1033
ID:0FE1
ID:1033
ID:0FE2
ID:1033
RT_GROUP_CURSOR4
ID:0080
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_HTML
ID:277C
ID:1033
ID:277D
ID:1033
ID:277E
ID:1033
ID:277F
ID:1033
ID:2780
ID:1033
ID:2781
ID:1033
ID:2782
ID:1033
ID:2783
ID:1033
ID:2784
ID:1033
ID:2785
ID:1033
RT_MANIFEST
ID:0001
ID:1033
transform_that_works.mst
Root Entry
䡀㼿䕷䑬㭪䗤䠤
䡀㼿䕷䑬㹪䒲䠯
䡀䘌䗶䐲䆊䌷䑲
䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
SummaryInformation
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

Authenticode present at 0xD65D98 size 10312 bytes

Info

PDB Path: C:\ReleaseAI\win\Release\stubs\x86\ExternalUi.pdb

ff8505309831284bff66a1cfd5049dac (14.06 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙