Suspicious
Suspect

4fd7da886ec5687497dbd3cc9184d0f4

GZIP Archive
MD5: 4fd7da886ec5687497dbd3cc9184d0f4
Size: 977.4 KB
application/gzip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 4fd7da886ec5687497dbd3cc9184d0f4
Sha1 5a005d65303aaa1ffb813c76126a8df887c98813
Sha256 deb64bf0edd1bee39cb1691cc99eefeca7a493316a316f79447edaa09c290d43
Sha384 1cefaa5c2a140d2f7f10ecaf8ff57d161b48fac7c0671f85e4bb55eaf6b0f9a6ad6c23b47766aee08133bb66d10da249
Sha512 98d610841f1ab7d9b9258d893db0e08e3a4156d41c4842312dbeb6a9fc79991dfc0cfdb3832f2a38981f0843f1b6d8a087707d9dedefb69ab6b967c28b510062
SSDeep 24576:GDtQHk/AjgIqeiHcQcTApBtPWKbNSOj5rzQxujB:GWHhjJJiVcTA3g8NFJx
TLSH 2E25333D03293ED3B549C5B4278B9C4923A8C6F65C950FD84AAC62FCA8A250E771F5C7
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
PegSolitaire.StartMenuFormular.resources
PegSolitaire.Properties.Resources.resources
V6
[NBF]root.Data
ywDu
[NBF]root.Data
[NBF]root.Data-preview.png
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
PegSolitaire.StartMenuFormular.resources
PegSolitaire.Properties.Resources.resources
V6
[NBF]root.Data
ywDu
[NBF]root.Data
[NBF]root.Data-preview.png
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙