9 antivirus venders flagged
this file as malicious

Signature

File is not signed

Last scanned

2 years ago

undefined

exe

CRC32	0xf403216c
MD5	78443725cc29df0e081c484e510b833d
Magic	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
SHA1	3e7a689375c16775db86d4fc63e9ca81668ff1a7
SHA256	6b1302a29c942a7b5db7c39e73b8fd07e6f4f9462a1888d94075d5ae30a590d8
SHA512	3a93628f9243b28029aceb5640eda00161b5160168e460e97b189c2836a324af3f701ca68102de32c0bb64d6f2110e6d15c460e9570f4ee9127fe2b80b7ceb64
SSDeep	12288:5pLuB3JJBv3VwgvcoP6i4/P3d+wQfOPDp571yecHiYj26/jO0TUx6oBEfTby:qFjvsi4Xd+wwO7p57ZYj2o6moBEfTb
Size	830.50KB
Packer	PE: library: .NET(v4.0.30319)[-] PE: compiler: VB.NET(-)[-] PE: linker: Microsoft Linker(80.0)[EXE32]
TrID	71.1% (.EXE) Generic CIL Executable (.NET, Mono, etc.) (73123/4/13) 10.2% (.EXE) Win64 Executable (generic) (10523/12/4) 6.3% (.DLL) Win32 Dynamic Link Library (generic) (6578/25/2) 4.3% (.EXE) Win32 Executable (generic) (4505/5/1) 2.0% (.ICL) Windows Icons Library (generic) (2059/9)
Tags	Kryptik exe AgentTesla

AssemblyVersion	5.11.0.0
CharacterSet	Unicode
CodeSize	669.00KB
Comments
CompanyName	Price's Electronics
EntryPoint	0xa9376
ExifToolVersionNumber	12.49
FileDescription	FormsPrintScalingBlurryIssue
FileFlags	(none)
FileFlagsMask	0x003f
FileOs	Win32
FileSize	850 kB
FileSubtype	0
FileType	Win32 EXE
FileTypeExtension	exe
FileVersion	5.11.0.0
FileVersionNumber	5.11.0.0
ImageFileCharacteristics	Executable, 32-bit
ImageVersion	0.0
InitializedDataSize	161.00KB
InternalName	IComparable.exe
LanguageCode	Neutral
LegalCopyright	Price's Electronics
LegalTrademarks
LinkerVersion	80.0
MachineType	Intel 386 or later, and compatibles
MimeType	application/octet-stream
ObjectFileType	Executable application
OriginalFileName	IComparable.exe
OsVersion	4.0
PeType	PE32
ProductName	FormsPrintScalingBlurryIssue
ProductVersion	5.11.0.0
ProductVersionNumber	5.11.0.0
Subsystem	Windows GUI
SubsystemVersion	4.0
UninitializedDataSize	0

Published	Name	Source	Country
2021-03-19 07:45:02	1505.bin	web	Sweden