home

resolver.exe

Resolver

ACT

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from portal.actcorp.in and multiple other hosts.
Publisher:
ACT

Product:
Resolver

Description:
Resolver Setup

MD5:
2df2087daa555f23fd550917ba542ccb

SHA-1:
51593a4b8f886ee53b506d1fd9e4e6734e418cb2

SHA-256:
739e33a907c0524d59c13096473d28be56410596ac940b6357ea5681cc2fefa9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/19/2024 10:38:27 AM UTC  (today)

File size:
3.9 MB (4,058,216 bytes)

Product version:
2.2

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\resolver.exe

File PE Metadata
Compilation timestamp:
6/20/1992 3:52:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:IFgTZGBBc8loamv+XIdi9RoGxpKKlR/a25C:9YBBXWi9RBkCJ5C

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.8691

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file resolver.exe has been seen being distributed by the following 50 URLs.

http://portal.actcorp.in/web/.../home?p_auth=pgI0XXkM&p_p_id=selfhelpresolver_WAR_BeamPromotionalNDownloadsportlet&p_p_lifecycle=1&p_p_state=normal&p_p_mode=view&p_p_col_id=column-2&p_p_col_pos=2&p_p_col_count=4&_selfhelpresolver_WAR_BeamPromotionalNDownloadsportlet_javax.portlet.action=resolverFromPopup

http://portal.actcorp.in/BeamTools-portlet/.../c2FuZ2VldGhkMTk2OEBnbWFpbC5jb20=

http://portal.actcorp.in/web/.../customercare?p_p_id=selfhelpresolver_WAR_BeamPromotionalNDownloadsportlet&p_p_lifecycle=2&p_p_state=normal&p_p_mode=view&p_p_cacheability=cacheLevelPage&p_p_col_id=column-2&p_p_col_pos=1&p_p_col_count=2&_selfhelpresolver_WAR_BeamPromotionalNDownloadsportlet_param=resolvertool

http://portal.actcorp.in/group/.../myaccount?p_p_id=selfhelpresolver_WAR_BeamPromotionalNDownloadsportlet&p_p_lifecycle=2&p_p_state=normal&p_p_mode=view&p_p_cacheability=cacheLevelPage&p_p_col_id=column-2&p_p_col_count=1&_selfhelpresolver_WAR_BeamPromotionalNDownloadsportlet_param=resolvertool

http://portal.actcorp.in/BeamTools-portlet/.../YXVnc3RpbmVzcHNAeWFob28uY28uaW4=

http://portal.actcorp.in/BeamTools-portlet/.../c2Ftb2VlZF9qQHlhaG9vLmNvbQ==

http://portal.actcorp.in/BeamTools-portlet/.../c2lkZGhhcnRoYWF2aWxpZ3VuZGFAZ21haWwuY29t

http://portal.actcorp.in/BeamTools-portlet/.../amFuZGh5YWxhYmhhcmFkd2FqQGdtYWlsLmNvbQ==

http://portal.actcorp.in/web/.../home?p_auth=CxqV4x0S&p_p_id=selfhelpresolver_WAR_BeamPromotionalNDownloadsportlet&p_p_lifecycle=1&p_p_state=normal&p_p_mode=view&p_p_col_id=column-2&p_p_col_pos=2&p_p_col_count=4&_selfhelpresolver_WAR_BeamPromotionalNDownloadsportlet_javax.portlet.action=resolverFromPopup

http://portal.actcorp.in/BeamTools-portlet/.../Z2lyaXNoa3VtYXI2QHlhaG9vLmNvbQ==

http://portal.actcorp.in/BeamTools-portlet/.../YWtldGlfc2FnYXJAeWFob28uY29t

http://portal.actcorp.in/BeamTools-portlet/.../dnBwYWRtYW5hYmhAZ21haWwuY29t

http://portal.actcorp.in/BeamTools-portlet/.../c3dlZXR5czE2NEBnbWFpbC5jb20=

http://portal.actcorp.in/web/.../home?p_auth=ZQs2DCfn&p_p_id=selfhelpresolver_WAR_BeamPromotionalNDownloadsportlet&p_p_lifecycle=1&p_p_state=normal&p_p_mode=view&p_p_col_id=column-2&p_p_col_pos=2&p_p_col_count=4&_selfhelpresolver_WAR_BeamPromotionalNDownloadsportlet_javax.portlet.action=resolverFromPopup

http://portal.actcorp.in/BeamTools-portlet/.../aW5kdS5zdXJhcGFuZW5pQGdtYWlsLmNvbQ==

http://portal.actcorp.in/web/.../home?p_auth=J52S39rI&p_p_id=selfhelpresolver_WAR_BeamPromotionalNDownloadsportlet&p_p_lifecycle=1&p_p_state=normal&p_p_mode=view&p_p_col_id=column-2&p_p_col_pos=2&p_p_col_count=4&_selfhelpresolver_WAR_BeamPromotionalNDownloadsportlet_javax.portlet.action=resolverFromPopup

http://portal.actcorp.in/web/.../home?p_auth=pEk61T5S&p_p_id=selfhelpresolver_WAR_BeamPromotionalNDownloadsportlet&p_p_lifecycle=1&p_p_state=normal&p_p_mode=view&p_p_col_id=column-2&p_p_col_pos=2&p_p_col_count=4&_selfhelpresolver_WAR_BeamPromotionalNDownloadsportlet_javax.portlet.action=resolverFromPopup

http://portal.actcorp.in/BeamTools-portlet/.../cmFuaml0aGhyckB5YWhvby5jb20=

http://portal.actcorp.in/web/.../home?p_auth=69an9b7X&p_p_id=selfhelpresolver_WAR_BeamPromotionalNDownloadsportlet&p_p_lifecycle=1&p_p_state=normal&p_p_mode=view&p_p_col_id=column-2&p_p_col_pos=2&p_p_col_count=4&_selfhelpresolver_WAR_BeamPromotionalNDownloadsportlet_javax.portlet.action=resolverFromPopup

http://portal.actcorp.in/BeamTools-portlet/.../YXNob2ttaWNyb0ByZWRpZmZtYWlsLmNvbQ==

http://portal.actcorp.in/web/.../customercare?p_auth=IR5UcpYM&p_p_id=selfhelpresolver_WAR_BeamPromotionalNDownloadsportlet&p_p_lifecycle=1&p_p_state=normal&p_p_mode=view&p_p_col_id=column-2&p_p_col_pos=1&p_p_col_count=2&_selfhelpresolver_WAR_BeamPromotionalNDownloadsportlet_javax.portlet.action=resolverFromPopup

http://portal.actcorp.in/BeamTools-portlet/.../YWpheV9jb29sbmhvdEB5YWhvby5jb20=

http://portal.actcorp.in/BeamTools-portlet/.../c2tqaXBzQHlhaG9vLmNvLmlu

http://portal.actcorp.in/BeamTools-portlet/.../c3VpdGVzQG95c3Rlcmdyb3VwLmlu

http://portal.actcorp.in/BeamTools-portlet/.../c3llZGlicmFoaW1xYWRyaUBnbWFpbC5jb20=

http://portal.actcorp.in/BeamTools-portlet/.../Y2hlcnVrdXBhbGxpcGF3YW5AZ21haWwuY29t

http://portal.actcorp.in/web/.../home?p_auth=KJjYGGn6&p_p_id=selfhelpresolver_WAR_BeamPromotionalNDownloadsportlet&p_p_lifecycle=1&p_p_state=normal&p_p_mode=view&p_p_col_id=column-2&p_p_col_pos=2&p_p_col_count=4&_selfhelpresolver_WAR_BeamPromotionalNDownloadsportlet_javax.portlet.action=resolverFromPopup

http://portal.actcorp.in/BeamTools-portlet/.../a3Jpc2huYXN1ZGhhbkBnbWFpbC5jb20=

http://portal.actcorp.in/group/.../tools?p_p_id=selfhelpresolver_WAR_BeamPromotionalNDownloadsportlet&p_p_lifecycle=2&p_p_state=normal&p_p_mode=view&p_p_cacheability=cacheLevelPage&p_p_col_id=column-2&p_p_col_pos=1&p_p_col_count=2&_selfhelpresolver_WAR_BeamPromotionalNDownloadsportlet_param=resolvertool

http://portal.actcorp.in/web/.../home?p_auth=oRSNMV79&p_p_id=selfhelpresolver_WAR_BeamPromotionalNDownloadsportlet&p_p_lifecycle=1&p_p_state=normal&p_p_mode=view&p_p_col_id=column-2&p_p_col_pos=2&p_p_col_count=4&_selfhelpresolver_WAR_BeamPromotionalNDownloadsportlet_javax.portlet.action=resolverFromPopup

Latest 30 of 69 download URLs

Scan resolver.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.