Suspicious
Suspect

baf0f734720bf4af69911e517a8a0d3d

PE Executable
|
MD5: baf0f734720bf4af69911e517a8a0d3d
|
Size: 442.37 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics
Hash
Hash Value
MD5
baf0f734720bf4af69911e517a8a0d3d
Sha1
24dad1b4df1186319426b1435c6e1065b5074b2a
Sha256
9b9fcb296cd4e5539ae24d88a44d1269ab4eafaecf7b4677537f2896527eb840
Sha384
2343e0047170309ba0b79113bc1a93dfd3693ab17914ab4f8174b4af7ddf6031df9a5ccd2090092969a20e2a9c56cbe5
Sha512
e8ba8383d0bc1e519012241ba8b341b4de1d50f839870ab05e0d6d62af0ccc265e9dc1201f114df2492acf018653a46fe301178aab1a4cd64c5fd12a0240aea1
SSDeep
6144:4+MvoJieOERiY++3+NLOVJ5kpkk8xU/dICZCLDonZd6I0YDWLTbDJJTG:4+msD++uA64EOWj6t3LTfTG
TLSH
0F94E0A4F38AC8A6DCA503759837EC3720F3BD7A94B4461E162E3638BE73283555B507

PeID

Microsoft Visual C++ v6.0 DLL
File Structure
[NSIS Installer] @ #00025408
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.reloc
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_DIALOG
ID:0065
ID:1033
Alarmklokkerne.Len
Bidirectionally168.orc
Spekulatives.Out
Busforbindelsers.for
Ceylonteen.buf
Figlike.dep
Herrefrisrer.dec
Stasima.sol
amounter.cre
elektricitetsforsyningerne.ten
forrentning.vap
fussbudget.rud
pljemark.udk
saarbar.emo
sagsbehandlerens.led
spiniest.sup
stivrygget.arr
[SETUP_DECOMPILED.NSI]
[Authenticode]_f40b5fc0.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.ndata
.rsrc
Resources
RT_BITMAP
ID:006E
ID:1033
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:1033-preview.png
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
RT_DIALOG
ID:0068
ID:1033
ID:0069
ID:1033
ID:006A
ID:1033
ID:006F
ID:1033
RT_GROUP_CURSOR4
ID:0067
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

Authenticode present at 0x6AD58 size 4776 bytes

baf0f734720bf4af69911e517a8a0d3d (442.37 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙