Malicious
Malicious

2ebd76c7d0c0ca119817183dae7c6260

PE Executable
|
MD5: 2ebd76c7d0c0ca119817183dae7c6260
|
Size: 4.72 MB
|
application/x-dosexec

Print
Infection Chain
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
2ebd76c7d0c0ca119817183dae7c6260
Sha1
0b434c181133a53e1da83891b88efef6041bc9e8
Sha256
5921b72b0b87c50ff2058c28b504276e1b0086a75d2bbd82d2ddf7f0e55457be
Sha384
e6b1da3bb294baa3399a290cd9cd45109bfa4009c119c1911f4aec167dfd5ff3b646054228213b46bad1dde54bbe4e9f
Sha512
4d45429e15e66e8696455d60a5983a6c2e8d13236bb010d687c1cfcb065eb0d6fc679e9a38a46c733780a682d79b68e8366f8f848c14b377df378a494e6c0fc3
SSDeep
49152:r1beL/xJTc6M5AhmGpLSAzqx9lBt/KrkZ3XGCziPs75xF7kwl75FZ5ShCxFP+j15:rNeNJdY6l6c
TLSH
F7262902A3E95109F9F3B7707F748142AA75BD466B38D58E328C148C0B79A78D5B27B3

PeID

Microsoft Visual C++ 6.0 DLL (Debug)
Microsoft Visual C++ 7.0 - 8.0
Microsoft Visual C++ 8
Microsoft Visual C++ 8
Microsoft Visual C++ v6.0 DLL
VC8 -> Microsoft Corporation
File Structure
2ebd76c7d0c0ca119817183dae7c6260
Malicious
[Authenticode]_55f4f35f.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
Resources
Malicious
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:0008
ID:1033
ID:0009
ID:1033
RT_MENU
ID:00D3
ID:1033
RT_DIALOG
ID:00CD
ID:1033
RT_ACCELERATOR
ID:00D4
ID:1033
RT_RCDATA
Malicious
ID:0000
Malicious
ID:1033
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
ID:1033-preview.png
ID:1033.exif
RT_GROUP_CURSOR4
ID:009F
ID:1033
ID:00A0
ID:1033
ID:00CE
ID:1033
ID:00CF
ID:1033
ID:00D0
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Info

Authenticode present at 0x47EA00 size 10296 bytes
Artefacts
Name
 Value
URLs in VB Code - #1

http://www.w3.org/1999/XSL/Transform
URLs in VB Code - #2

http://code.jeanlalonde.ca/folderspopup/
URLs in VB Code - #3

https://www.quickaccesspopup.com
URLs in VB Code - #4

https://www.quickaccesspopup.com/why-converting-the-settings-file-to-unicode-and-conversion-troubleshooting/
URLs in VB Code - #5

https://www.quickaccesspopup.com/frequently-asked-questions/
URLs in VB Code - #6

https://www.quickaccesspopup.com/what-should-i-know-about-quick-access-popup-before-starting/
URLs in VB Code - #7

https://www.youtube.com/watch?v=1AQ6sgH52fk&list=PLKvuCRHeZzOC8fP4MCClk3OsfSDRElHg_
URLs in VB Code - #8

https://www.quickaccesspopup.com/videos/
URLs in VB Code - #9

https://forum.quickaccesspopup.com
URLs in VB Code - #10

https://www.quickaccesspopup.com/tell_your_friend
URLs in VB Code - #11

https://www.quickaccesspopup.com/can-i-use-my-own-documents-icons-instead-of-those-configured-in-windows/
URLs in VB Code - #12

https://www.quickaccesspopup.com/can-i-replace-the-qap-standard-icons-with-my-own-custom-icons/
URLs in VB Code - #13

https://www.quickaccesspopup.com/can-i-block-the-qap-menu-hotkeys-if-they-interfere-with-one-of-my-other-apps/
URLs in VB Code - #14

https://www.quickaccesspopup.com/can-i-filter-out-items-in-current-windows-recent-or-frequent-menus/#folders
URLs in VB Code - #15

https://www.quickaccesspopup.com/can-i-filter-out-items-in-current-windows-recent-or-frequent-menus/#files
URLs in VB Code - #16

https://www.quickaccesspopup.com/can-i-filter-out-items-in-current-windows-recent-or-frequent-menus/#applications
URLs in VB Code - #17

https://www.quickaccesspopup.com/can-i-launch-alternative-menu-features-directly-from-the-regular-popup-menu/
URLs in VB Code - #18

https://www.quickaccesspopup.com/what-are-snippets/
URLs in VB Code - #19

https://www.quickaccesspopup.com/can-i-create-custom-user-variables-and-use-them-in-file-paths-or-snippets/
URLs in VB Code - #20

https://www.quickaccesspopup.com/can-i-create-favorites-on-network-drives/
URLs in VB Code - #21

https://www.quickaccesspopup.com/can-i-block-the-qap-keyboard-shortcuts-if-they-interfere-with-one-of-my-apps/
URLs in VB Code - #22

https://www.quickaccesspopup.com/shared-menu-catalogue/
URLs in VB Code - #23

https://www.quickaccesspopup.com/how-to-i-enable-directory-opus-support-in-quick-access-popup/
URLs in VB Code - #24

https://www.quickaccesspopup.com/how-do-i-enable-total-commander-support-in-quick-access-popup/
URLs in VB Code - #25

https://www.quickaccesspopup.com/what-file-managers-are-supported-in-addition-to-windows-explorer/
URLs in VB Code - #26

https://www.quickaccesspopup.com/how-does-qap-work-on-multi-monitor-systems/
URLs in VB Code - #27

https://www.quickaccesspopup.com/what-else-should-i-know-about-explorer-context-menus/
URLs in VB Code - #28

https://www.quickaccesspopup.com/what-are-hotstrings/
URLs in VB Code - #29

https://www.quickaccesspopup.com/can-i-insert-values-in-favorites-location-or-parameters-using-placeholders
URLs in VB Code - #30

https://www.quickaccesspopup.com/can-a-submenu-be-shared-on-different-pcs-or-by-different-users/
URLs in VB Code - #31

https://www.quickaccesspopup.com/qce
URLs in VB Code - #32

https://www.quickaccesspopup.com/can-i-launch-my-favorites-with-keyboard-or-mouse-shortcuts/
URLs in VB Code - #33

https://www.quickaccesspopup.com/can-i-play-a-sound-when-i-launch-a-favorite/
URLs in VB Code - #34

https://www.quickaccesspopup.com/
URLs in VB Code - #35

https://clipboard.quickaccesspopup.com/download-quick-clipboard-editor/
URLs in VB Code - #36

https://www.quickaccesspopup.com/qce/
URLs in VB Code - #37

https://www.autohotkey.com/docs/KeyList.htm
URLs in VB Code - #38

https://www.quickaccesspopup.com/latest/latest-version-4.php
URLs in VB Code - #39

https://www.quickaccesspopup.com/latest/check4update-beta-redirect.html
URLs in VB Code - #40

https://www.quickaccesspopup.com/changelog/changelog
URLs in VB Code - #41

https://www.quickaccesspopup.com/change-log
URLs in VB Code - #42

https://www.quickaccesspopup.com/latest/check4update-download-setup-redirect.html
URLs in VB Code - #43

https://www.quickaccesspopup.com/latest/check4update-download-portable-redirect.html
URLs in VB Code - #44

https://forum.quickaccesspopup.com/forumdisplay.php?fid=11
URLs in VB Code - #45

https://www.quickaccesspopup.com/license/
URLs in VB Code - #46

https://www.autohotkey.com/boards/
URLs in VB Code - #47

https://www.paypal.com/donate?hosted_button_id=MKS3LBZSUGT6N
URLs in VB Code - #48

https://www.quickaccesspopup.com/qap-welcome-first-steps-video
URLs in VB Code - #49

file:///
URLs in VB Code - #50

http://ahkscript.org/
URLs in VB Code - #51

https://icons8.com/
URLs in VB Code - #52

http://www.jrsoftware.org/isinfo.php
URLs in VB Code - #53

http://www.quickaccesspopup.com
URLs in VB Code - #54

http://www.w3.org/1999/02/22-rdf-syntax-ns#
URLs in VB Code - #55

http://ns.adobe.com/xap/1.0/
URLs in VB Code - #56

http://purl.org/dc/elements/1.1/
URLs in VB Code - #57

http://ns.adobe.com/photoshop/1.0/
URLs in VB Code - #58

http://ns.adobe.com/xap/1.0/mm/
URLs in VB Code - #59

http://ns.adobe.com/xap/1.0/sType/ResourceEvent#
URLs in VB Code - #60

http://ns.adobe.com/tiff/1.0/
URLs in VB Code - #61

http://ns.adobe.com/exif/1.0/
URLs in VB Code - #62

http://ns.adobe.com/xap/1.0/sType/ResourceRef#
URLs in VB Code - #63

https://github.com/rolandtoth
URLs in VB Code - #64

http://www.softpedia.com/get/File-managers/A43.shtml
URLs in VB Code - #65

http://www.altap.cz/
URLs in VB Code - #66

http://www.cubicreality.com/
URLs in VB Code - #67

http://doublecmd.sourceforge.net/
URLs in VB Code - #68

http://www.softpedia.com/get/File-managers/EF-Commander-Free.shtml
URLs in VB Code - #69

http://www.voidtools.com/
URLs in VB Code - #70

https://explorerplusplus.com/
URLs in VB Code - #71

http://www.explorerxp.com/
URLs in VB Code - #72

http://www.farmanager.com/
URLs in VB Code - #73

https://filepilot.tech/
URLs in VB Code - #74

http://www.freecommander.com/
URLs in VB Code - #75

http://www.irfanview.com/
URLs in VB Code - #76

http://justmanager.ru/
URLs in VB Code - #77

http://multicommander.com/
URLs in VB Code - #78

http://www.nomad-net.info/
URLs in VB Code - #79

https://onecommander.com/
URLs in VB Code - #80

http://www.softpedia.com/get/System/File-Management/Snowbird-Search.shtml
URLs in VB Code - #81

http://www.speedproject.de/
URLs in VB Code - #82

http://www.eonet.ne.jp/~gakana/tablacus/explorer_en.html
URLs in VB Code - #83

http://www.softpedia.com/get/File-managers/UltraExplorer.shtml
URLs in VB Code - #84

https://x-diesel.com/
URLs in VB Code - #85

http://www.winnc.com/
URLs in VB Code - #86

http://www.xnview.com/
URLs in VB Code - #87

http://zabkat.com/
URLs in VB Code - #88

http://www.xyplorer.com/free.php
URLs in VB Code - #89

http://www.xyplorer.com/
URLs in VB Code - #90

http://www.xyplorer.com/free
URLs in VB Code - #91

http://www.iec.ch
URLs in VB Code - #92

http://icons8.com
URLs in VB Code - #93

http://www.icons8.com
URLs in VB Code - #94

http://schemas.microsoft.com/SMI/2005/WindowsSettings
URLs in VB Code - #95

http://schemas.microsoft.com/SMI/2016/WindowsSettings
URLs in VB Code - #96

http://ccsca2021.crl.certum.pl/ccsca2021.crl0s
URLs in VB Code - #97

http://ccsca2021.ocsp-certum.com05
URLs in VB Code - #98

http://repository.certum.pl/ccsca2021.cer0
URLs in VB Code - #99

https://www.certum.pl/CPS0
URLs in VB Code - #100

http://crl.certum.pl/ctnca2.crl0l
URLs in VB Code - #101

http://subca.ocsp-certum.com02
URLs in VB Code - #102

http://repository.certum.pl/ctnca2.cer09
URLs in VB Code - #103

http://www.certum.pl/CPS0
URLs in VB Code - #104

http://subca.repository.certum.pl/ctsca2021.cer0
URLs in VB Code - #105

http://subca.ocsp-certum.com0
URLs in VB Code - #106

http://subca.crl.certum.pl/ctsca2021.crl0
URLs in VB Code - #107

http://crl.certum.pl/ctnca.crl0k
URLs in VB Code - #108

http://subca.ocsp-certum.com01
URLs in VB Code - #109

http://repository.certum.pl/ctnca.cer09
2ebd76c7d0c0ca119817183dae7c6260 (4.72 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙