Suspicious
Suspect

ed69a12592a9d8145d33a560678fed15

PE Executable
|
MD5: ed69a12592a9d8145d33a560678fed15
|
Size: 433.06 KB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
ed69a12592a9d8145d33a560678fed15
Sha1
39589b4ac082393d0c15c2ba9b9c39553c817d51
Sha256
9f4c77ecb24e86f2ac41e31e87b17fbe329e31750b1cb2fb7d514975d194d693
Sha384
37708458e61187048b772830a6d7060b1541929faa628a0ab67786899ac5a0569b1b9051c4c57fdad73528eb34995a8b
Sha512
396e815d8a37dcdfcb97ba9ea023c41e07864f73003d42730d164f2320913c14bb57f42160815be69539ddc9cac6df6303523714064b05f8b91291a665bc4ba4
SSDeep
12288:UecGGRUO0k8jY/7RSd9zIo7SFe6hOFxrs:Ue1GRUnjYId9pnxFxQ
TLSH
5994F1113386D547DEED02B144AF86EE0E72AF7BA9858B47F380F62E7DB26C57918110

PeID

Installer Nullsoft PiMP Stub v.3.0.x - A.S.L
Microsoft Visual C++ v6.0 DLL
File Structure
ed69a12592a9d8145d33a560678fed15
[NSIS Installer] @ #00031408
nsDialogs.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_DIALOG
ID:0001
ID:1033
System.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.reloc
Overblind.Dev
Rejsegodtgrelsen202.adj
Hngekjernes.Pab175
sightworthy.mis
[SETUP_DECOMPILED.NSI]
[Authenticode]_258e395d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.ndata
.rsrc
Resources
RT_BITMAP
ID:006E
ID:1033
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:0008
ID:1033
RT_DIALOG
ID:0067
ID:1033
ID:0068
ID:1033
ID:0069
ID:1033
ID:006A
ID:1033
ID:006B
ID:1033
ID:006F
ID:1033
RT_GROUP_CURSOR4
ID:0067
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Info

Authenticode present at 0x687E8 size 5048 bytes
ed69a12592a9d8145d33a560678fed15 (433.06 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙