YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 046c21a3425aec9bb665f52d43f48863de95dd051a77dd344fd2651ae538f611.

Scan Results

SHA256 hash: 046c21a3425aec9bb665f52d43f48863de95dd051a77dd344fd2651ae538f611
File size:38'797'312 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 9f47108d36af0667d8fcd841a80d24a8
SHA1 hash: 19cd2ca8e1eda6596f8d21efed72a0e516602303
SHA3-384 hash: fe32f00b94df5c6c4f737c729059db7df169a4a52b14006b3b692d3bd18eb478f5f39c918302d43bf3896372eaa872f9
First seen:2026-01-12 13:11:37 UTC
Last seen:Never
Sightings:1
imphash : f4d1e4cd7416ef83f79f7c6a038875b3
Create hunting rule
ssdeep : 786432:Gn0FVwAvmLqmAvdvI7BBx7p4A0/ATqmIQOMJxa:JVwAui5ItDpT/qmIQOQxa
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon : 30b2b2f069f0d48a
Create hunting rule

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:3a1c2fff-efb8-11f0-9df4-42010aa4000b
File name:9f47108d36af0667d8fcd841a80d24a8
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:Detect_NSIS_Nullsoft_Installer
Create hunting rule
Author:Obscurity Labs LLC
Description:Detects NSIS installers by .ndata section + NSIS header string
TLP:TLP:WHITE

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.