Suspicious
Suspect

4ed661ba6d558fbc7f37fc96762a6be2

PE Executable
|
MD5: 4ed661ba6d558fbc7f37fc96762a6be2
|
Size: 878.59 KB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
4ed661ba6d558fbc7f37fc96762a6be2
Sha1
e47f7acf40087e210998e500a4df0c8e96d3fc60
Sha256
a193b9010ae51ca97aaeb7a82ec5433ce8f79549cd3c1d48e4b6308fea98f449
Sha384
4e9c39a6ad231b28be40e1541bc5eeb059035c73876647bf90f916334a2f5c87f80b2021266116c0ef3d7faf843515b1
Sha512
0cd5810a19ab86dfdcb101a4c499bcb2be0166f85842117ecd0595e66db6e85e62c18573e9ebd1320bd08b16ee153ce5617d2e57047f0e1f03aae4ba015b0159
SSDeep
24576:dXjqzdW/4ucX5cQJ+9/x/xp/DvHKXRC3CXe+zmFdyuQsqTom7p0DvM8:ljSdWAzq8+1xTbqXQaec7uQ+m7648
TLSH
331523B23BB8CD17F6A25B300BB197867BE3C5505C52895F3BF0E18E9826DD9101E927

PeID

Microsoft Visual C++ v6.0 DLL
File Structure
4ed661ba6d558fbc7f37fc96762a6be2
[NSIS Installer] @ #0000EE08
$PLUGINSDIR
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_DIALOG
ID:0001
ID:1033
[SETUP_DECOMPILED.NSI]
[Authenticode]_aca67abe.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.ndata
.rsrc
Resources
RT_BITMAP
ID:006E
ID:1033
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
RT_DIALOG
ID:0066
ID:1033
ID:0068
ID:1033
ID:0069
ID:1033
ID:006A
ID:1033
ID:006B
ID:1033
ID:006F
ID:1033
RT_GROUP_CURSOR4
ID:0067
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Info

Authenticode present at 0xD54F8 size 4872 bytes
4ed661ba6d558fbc7f37fc96762a6be2 (878.59 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙