The OVRDTH SELECTOR 4 5 0 exe (OVRDTH'S SELECTION Setup) OVRDTH File Malware Analysis

The OVRDTH SELECTOR 4.5.0.exe (OVRDTH'S SELECTION Setup) File Analysis

Updated 1 month ago

Checked by Malware Check

OVRDTH SELECTOR 4.5.0.exe

Hash Type	Value	Action
MD5	b2c046d6671b113fb2d9bbc3ac5f89da
SHA1	95e4abde66114521b275636c8b945b6a3604257b
SHA256	a14162eca2a20a6ace9dd8d73e499fc640858f6b0af4e8067466cf36e9f0c062
SHA512	100270049a7c8f194acdf30af9f14d5f4f8f0bfc87b75d58bc27b90e62a329454f3d4219762df7f6b5493e49d443cd739915d325320183c9f64926da4e41da92
ImpHash	40ab50289f7ef5fae60801f88d4541fc

Hash Type

Value

Action

MD5

b2c046d6671b113fb2d9bbc3ac5f89da

SHA1

95e4abde66114521b275636c8b945b6a3604257b

SHA256

a14162eca2a20a6ace9dd8d73e499fc640858f6b0af4e8067466cf36e9f0c062

SHA512

100270049a7c8f194acdf30af9f14d5f4f8f0bfc87b75d58bc27b90e62a329454f3d4219762df7f6b5493e49d443cd739915d325320183c9f64926da4e41da92

ImpHash

40ab50289f7ef5fae60801f88d4541fc

PE Analysis

Basic Information

▼

Icon	Hash: c8eb41eed0b19877d4ff4b5b527feba8 Fuzzy: 11dfced9e83793161b3caf08458715e5 dHash: 0a76b46949dc6860
Image Base	`0x00400000`
Entry Point	`0x004a83bc`
Compilation Time	2024-07-12 07:26:53
Checksum	0x00000000 (Actual: 0x012e67af)
OS Version	6.1
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows`
Digital Signature	No valid SignedData structure was found.
Imports	5 libraries kernel32, comctl32, user32, oleaut32, advapi32
Exports	2 functions
Resources	22 Resources
Sections	11 Sections

Version Information

▼

Comments	This installation was built with Inno Setup.
CompanyName	OVRDTH
FileDescription	OVRDTH'S SELECTION Setup
FileVersion
LegalCopyright
OriginalFileName
ProductName	OVRDTH'S SELECTION
ProductVersion	4.5.0
Translation	0x0000 0x04b0

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	677,516 bytes	677,888 bytes	6.38 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`B889D302F6FC48A904DE33D8D947AE80`
`.itext`	`0x000a7000`	7,012 bytes	7,168 bytes	6.11 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`588DD0A8AB499300D3701CBD11B017D9`
`.data`	`0x000a9000`	14,392 bytes	14,848 bytes	4.96 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`5C0C76E77AEF52EBC6702430837CCB6E`
`.bss`	`0x000ad000`	29,272 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x000b5000`	4,076 bytes	4,096 bytes	5.02 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`627340DFF539EF99048969AA4824FB2D`
`.didata`	`0x000b6000`	420 bytes	512 bytes	2.73 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`FD11C1109737963CC6CB7258063ABFD6`
`.edata`	`0x000b7000`	113 bytes	512 bytes	1.31 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`7DE8CA0C7A61668A728FD3A88DC0942D`
`.tls`	`0x000b8000`	24 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x000b9000`	93 bytes	512 bytes	1.39 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`D84006640084DC9F74A07C2FF9C7D656`
`.reloc`	`0x000ba000`	69,544 bytes	69,632 bytes	6.71 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`A85FDA2741BD9417695DAA5FC5A9D7A5`
`.rsrc`	`0x000cb000`	78,524 bytes	78,848 bytes	6.96 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`09EFFCD4B8BA79E39734846BC67234D1`

Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 22 (77,250 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	5	64,622 bytes	83.7%
RT_STRING	11	8,336 bytes	10.8%
RT_RCDATA	3	844 bytes	1.1%
RT_GROUP_ICON	1	76 bytes	0.1%
RT_VERSION	1	1,412 bytes	1.8%
RT_MANIFEST	1	1,960 bytes	2.5%

Certificate Chain Analysis

▼

Certificate Information

Product	OVRDTH'S SELECTION
Description	OVRDTH'S SELECTION Setup

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

File Name	OVRDTH SELECTOR 4.5.0.exe
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version	1.0.230.174
Database Version	2025-12-06 15:00:18 UTC

The OVRDTH SELECTOR 4.5.0.exe (OVRDTH'S SELECTION Setup) File Analysis

Technical Analysis

Clean File

Scan Another File

File Identification