Please ensure you understand and agree with our data protection policy before using this site. Review Policy
Online Virus Checker | v.1.0.171.174 |
DB Version: | 2024-04-07 15:00:25 |
RedLine Stealer is a malicious program designed to exfiltrate users’ confidential data from browsers, systems, and installed software. It is often delivered through email attachments or compromised websites. RedLine not only steals sensitive information but also poses a significant threat by introducing other malware into the victim's operating system. This two-pronged attack approach makes RedLine a potent and dangerous cyber threat.
File | Baseball.exe |
Checked | 2024-04-07 15:27:25 |
MD5 | de3c8095b7f0e290b3ac51a8080dd8a4 |
SHA1 | b2105e6a1371fda208b6e653ffe5054fefa0c36b |
SHA256 | 40a67cd91dafa66bbc186d43a0352eee5e602f673e8eb793718011494de3de43 |
SHA512 | a0e0294c4be08644f62386571db4523e9f278a4f0fb0eeaa48482401e4300706965f485e54a42d5ec3da25bae388bb78e7e80dcbb828ad815ea3da730e33cfca |
Imphash | 646167cce332c1c252cdcb1839e0cf48 |
File Size | 11853312 bytes |
Gridinsoft has the capability to identify and eliminate Spy.Win32.Redline.lu!heur without requiring further user intervention.
CompanyName | Microsoft Corporation |
FileDescription | Win32 Cabinet Self-Extractor |
FileVersion | 11.00.22621.1 (WinBuild.160101.0800) |
InternalName | Wextract |
LegalCopyright | © Microsoft Corporation. All rights reserved. |
OriginalFilename | WEXTRACT.EXE .MUI |
ProductName | Internet Explorer |
ProductVersion | 11.00.22621.1 |
Translation | 0x0409 0x04b0 |
CompanyName | Neda Games |
FileDescription | Golpea todas las bolas que te tira el entrenad |
FileVersion | 1.0.0.0 |
InternalName | Wextract |
LegalCopyright | (c) 2023 - Baseball |
OriginalFilename | WEXTRACT.EXE .MUI |
ProductName | Baseball - Neda G |
ProductVersion | 1.0.0.0 |
Translation | 0x0c0a 0x04b0 |
3787c3aa233006d5229570934edb4cca f297074ba812c9ee2600af1503f50a35 e4b2c6e0b2c43333 |
|
Image Base: | 0x00400000 |
Entry Point: | 0x00406d50 |
Compilation: | 2059-08-08 23:27:35 |
Checksum: | 0x00b61354 (Actual: 0x00b562b0) |
OS Version: | 10.0 |
PDB Path: | wextract.pdb |
PEiD: | PE32 executable (GUI) Intel 80386, for MS Windows |
Sign: | The PE file does not contain a certificate table. |
Sections: | 5 |
Imports: | ADVAPI32, KERNEL32, GDI32, USER32, msvcrt, COMCTL32, Cabinet, VERSION, |
Exports: | 0 |
Resources: | 44 |
Name | Virtual Address | Virtual Size | Raw Size | MD5 | Entropy |
---|---|---|---|---|---|
.text | 0x00001000 | 0x0000669c | 0x00006800 | 8efccde25b9e492cde40b5ef253cf7a7 | 6.27 |
.data | 0x00008000 | 0x00001aa0 | 0x00000200 | 7b9890a93c0516bb070e1170cfde54d5 | 4.97 |
.idata | 0x0000a000 | 0x00001056 | 0x00001200 | 8fa33e292b5a9d9dcf9cf67d5c955b3d | 5.04 |
.rsrc | 0x0000c000 | 0x00b4534c | 0x00b45400 | 4759bae824c2bbdae88ff673752ab7b8 | 8.00 |
.reloc | 0x00b52000 | 0x00000888 | 0x00000a00 | 0e9fae0fc18f3412188d18fc97b6fc55 | 6.27 |