efc87fd09f56be9b7a7feab90f46e5b17c80c10b2ab6091bffc8b9d5dc87f20d

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2026-Nov-06 17:26:26
Comments Instalador do AMDLSS5 MOD
CompanyName AMDLSS5 MOD
FileDescription AMDLSS5 MOD - Instalador
FileVersion 2.0.0.0
InternalName AMDLSS5-Instalador.exe
LegalCopyright Copyright (c) 2026 AMDLSS5 MOD
OriginalFilename AMDLSS5-Instalador.exe
ProductName AMDLSS5 MOD
ProductVersion 2.0.0
Assembly Version 2.0.0.0

Plugin Output

Info Matching compiler(s): Microsoft Visual C# v7.0 / Basic .NET
.NET executable -> Microsoft
Info Interesting strings found in the binary: Contains domain names:
  • Battle.net
  • a.akamaihd.net
  • akamai.steamstatic.com
  • akamaihd.net
  • apache.org
  • api.github.com
  • ascendercorp.com
  • github.com
  • http://www.apache.org
  • http://www.apache.org/licenses/LICENSE-2.0
  • http://www.ascendercorp.com
  • http://www.ascendercorp.com/http
  • http://www.ascendercorp.com/typedesigners.htmlLicensed
  • https://api.github.com
  • https://api.github.com/repos/praydog/REFramework-nightly/releases/latest
  • https://github.com
  • https://shared.akamai.steamstatic.com
  • https://shared.akamai.steamstatic.com/store_item_assets/steam/apps/
  • https://steamcdn-a.akamaihd.net
  • https://steamcdn-a.akamaihd.net/steam/apps/
  • https://store.steampowered.com
  • https://store.steampowered.com/api/appdetails?appids
  • https://store.steampowered.com/api/storesearch/?term
  • shared.akamai.steamstatic.com
  • steamcdn-a.akamaihd.net
  • steampowered.com
  • steamstatic.com
  • store.steampowered.com
  • www.apache.org
  • www.ascendercorp.com
Suspicious VirusTotal score: 2/61 (Scanned on 2026-11-07 11:52:00) APEX: Malicious
Paloalto: generic.ml

Hashes

MD5 bf50faff2d8d51210847381ad5ee1406 🔍
SHA1 a3af98fea611bda4b80275ffce33e23154d19cbb 🔍
SHA256 efc87fd09f56be9b7a7feab90f46e5b17c80c10b2ab6091bffc8b9d5dc87f20d 🔍
SHA3 019d08a74c3f1a718a287cd5f28e20294a26203345e811f525b6b6210e859cf8 🔍
SSDeep 12288:pSdJvBY4XdHz3cubK6XVJqSn0lZwyvDHFb4wVzjgpFx+HrMAW:IS4XdDrKnDlbxW 🔍
Imports Hash f34d5f2d4577ed6d9ceec516c1f5a744 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x80

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 3
TimeDateStamp 2026-Nov-06 17:26:26
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE

Image Optional Header

Magic PE32
LinkerVersion 11.0
SizeOfCode 0xa1600
SizeOfInitializedData 0x5c00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x000A341E (Section: .text)
BaseOfCode 0x2000
BaseOfData 0xa4000
ImageBase 0x400000
SectionAlignment 0x2000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 4.0
Win32VersionValue 0
SizeOfImage 0xac000
SizeOfHeaders 0x200
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 84a366880770fa4105b686d343f406ed 🔍
SHA1 ddfa3e23bcc6eed637533d70603680155cc79877 🔍
SHA256 06eefb773408cd5e10f1973f068c0a53be67efa98f0bad5380e58fbdc65f7e0d 🔍
SHA3 12955315f2b2ac8d264102d6af0a0c6d96398a89e772782e421e58ce2ddbf42d 🔍
VirtualSize 0xa1424
VirtualAddress 0x2000
SizeOfRawData 0xa1600
PointerToRawData 0x200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.05486

.rsrc

MD5 0ce1ce2ddcd8cf7b5976965daccf94de 🔍
SHA1 5913c984fa4fa1bddff99edb324f7a69611097c2 🔍
SHA256 708950a99cf8531ecf5439678081fc760b9546cb82eb7a64fde9e87496c4929b 🔍
SHA3 5e457a7178ac8ae4d10a2abde47590bca236d68fac6fe1610c9b8a440723aa02 🔍
VirtualSize 0x5838
VirtualAddress 0xa4000
SizeOfRawData 0x5a00
PointerToRawData 0xa1800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.94611

.reloc

MD5 00661d9d271b5b7904a69ee61558f29f 🔍
SHA1 e5cfcffb153c82a83030abc1cbe1d7fa58155c64 🔍
SHA256 f2718157e58220fe44d4f8e418e7914619c39c4bd126b3ca0375f9c204de2292 🔍
SHA3 88535a022f2c75e1d741a3612fe24242c6ef64bd465345c904d0ba4433b15ac7 🔍
VirtualSize 0xc
VirtualAddress 0xaa000
SizeOfRawData 0x200
PointerToRawData 0xa7200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 0.10191

Imports

mscoree.dll _CorExeMain

Delayed Imports

2

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.03925
MD5 189e1d7d5b411074536d5013e691d4b4 🔍
SHA1 35a9fe66bd64c905452553f499e67ef71c354d56 🔍
SHA256 7eaed00b50154850c248cd29663f90f685c4ead4006ce3b1cac2255f21ed35a4 🔍
SHA3 5bfb6b33cb94f2e2dadb49e04d09ce0e1a619ed794d5e583c0e17fc37af0e3d7 🔍

3

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.82498
MD5 2d6be07f20f38757c5c148c1fcb872f4 🔍
SHA1 63812cdd80cb08402092f684eda24584eb9ca2e6 🔍
SHA256 66cfbc45333aa60209a9ec9ea2de376384f6dfff3c9d5cf2a09b48f4894bbff8 🔍
SHA3 2940d337ad83fbf2a065b8d0c5602741e7216dd0400986cb76b470aa3caeb88e 🔍

4

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.93175
MD5 d98c59a8a073df665acfd873d35e5f29 🔍
SHA1 92b99e36bc716cadc04df2118ad1560e66a702cb 🔍
SHA256 3f334310919390b895f85c1fcd3f2162af6214c9153bee304ba37f3d383a29e7 🔍
SHA3 435f54c4ee78abfb4a26c739ac5a8b227df73692c364557a2b8e5ce6973edd6c 🔍

5

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x136b
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.71038
Detected Filetype PNG graphic file
MD5 4ebeee773ad958665b966308c6356efb 🔍
SHA1 3899c736024d765ce0e292b752be0498d575cb50 🔍
SHA256 48b8501f112b2f4d9662980da9ee19f779000652b32f52f6d59d151860f7b56e 🔍
SHA3 b8252bf3a7fa1c3ca03c5ca4924188d38cefdd189f7412334b5d3ef3a2d3c3ac 🔍

32512

Type RT_GROUP_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x3e
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.50899
Detected Filetype Icon file
MD5 7d048bc8c788f726d8e27fe4c9f5ab1d 🔍
SHA1 4e9f86924c62022c33dff5514a5d426ec5fdc5e2 🔍
SHA256 5d67e236cb475ff0dac5a65f754bb8af51f75147bdae4a644365762792815be0 🔍
SHA3 8ce3a618bdb7e2db0a9acab92ecacdde559a5650f0dcc0102f1e0cb887e1a410 🔍

1

Type RT_VERSION
Language UNKNOWN
Codepage UNKNOWN
Size 0x398
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.39813
MD5 58a8d5414c83fa92c54bd025cc1c8224 🔍
SHA1 50dc7781f52a6440fac43c4c992e988c166b1c73 🔍
SHA256 ba0f08515d9377aa35857ed331d92d786bac0ba2b34c682e46a5414fa6a58486 🔍
SHA3 7ea651c649fc3a619a8eaf02eda31abf589cdb7d2d9792e95bf4f58e9a2619d2 🔍

1 (#2)

Type RT_MANIFEST
Language UNKNOWN
Codepage UNKNOWN
Size 0x474
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.15601
MD5 d3408729347d87177c7766f3c2e99d6e 🔍
SHA1 5ecb0e41417be575bd8b66d7c17e8eb2a3e48159 🔍
SHA256 b6731ab42fe19000adcee6d29a88fb59eab52d74524808789588c2ae6faaf044 🔍
SHA3 f6cb45f70d72fbe735a4f928245fe7d2906b86e4596784066578e23aa7e53fe6 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 2.0.0.0
ProductVersion 2.0.0.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language UNKNOWN
Comments Instalador do AMDLSS5 MOD
CompanyName AMDLSS5 MOD
FileDescription AMDLSS5 MOD - Instalador
FileVersion (#2) 2.0.0.0
InternalName AMDLSS5-Instalador.exe
LegalCopyright Copyright (c) 2026 AMDLSS5 MOD
OriginalFilename AMDLSS5-Instalador.exe
ProductName AMDLSS5 MOD
ProductVersion (#2) 2.0.0
Assembly Version 2.0.0.0
Resource LangID UNKNOWN

TLS Callbacks

Load Configuration

RICH Header

Errors

Leave a comment

No comments yet.