05123f52aad13045dcdbf259d1641737

PE Executable
|
MD5: 05123f52aad13045dcdbf259d1641737
|
Size: 5.67 MB
|
application/x-dosexec

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	05123f52aad13045dcdbf259d1641737
Sha1	1247e92e838a898b5dfa263ff22f9c6993d541ec
Sha256	89fdd3ee17e4586eb5cb9612828d98001160b97bad2fa6ae8452b897005b5352
Sha384	5dae81dd4a3c548968e60bd375eeccb9e51382907fee1c8967b7dc7f67c7ccc5d37ae2c3f4a294844fc4dc718ae5f312
Sha512	741b6fcd7a7846ad0301fca55518a2d8dd70368a3e575429efc2dc8f4757620620dd89f82efef8fd9d20d8d0d1cdca427481bbdbb2665f36f866dda4e5707801
SSDeep	98304:RzIus6efPUIdoaxcp8wy5c3trGOlkQ5DUOgJ9zl/:RhfefPtHxcp9ym3nltDUJVd
TLSH	B646E101B3D695B6D1BF1638D87A56696734BC049312CBBF5394BD392E32BC04E323A6

PeID

Microsoft Visual C++ 6.0 DLL (Debug)

Microsoft Visual C++ 7.0 - 8.0

Microsoft Visual C++ 8

Microsoft Visual C++ v6.0 DLL

Pe123 v2006.4.4-4.12

Private EXE Protector V2.30-V2.3X -> SetiSoft Team

VC8 -> Microsoft Corporation

File Structure

Artefacts

Name0	Value
PDB Path	C:\Users\jmorgan\Source\cwcontrol\Custom\DotNetRunner\Release\DotNetRunner.pdb
PDB Path	C:\build\work\eca3d12b\wix3\build\obj\ship\x86\Compression.Cab\Microsoft.Deployment.Compression.Cab.pdb
Embedded Resources	1
Suspicious Type Names (1-2 chars)	0
PDB Path	C:\build\work\eca3d12b\wix3\build\obj\ship\x86\Compression\Microsoft.Deployment.Compression.pdb
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0
PDB Path	C:\build\work\eca3d12b\wix3\build\obj\ship\x86\WindowsInstaller.Package\Microsoft.Deployment.WindowsInstaller.Package.pdb
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0
PDB Path	C:\build\work\eca3d12b\wix3\build\obj\ship\x86\WindowsInstaller\Microsoft.Deployment.WindowsInstaller.pdb
Embedded Resources	1
Suspicious Type Names (1-2 chars)	0
PDB Path	C:\builds\cc\cwcontrol\Product\InstallerActions\obj\Release\net20\ScreenConnect.InstallerActions.pdb
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0
PDB Path	C:\builds\cc\cwcontrol\Product\Core\obj\Release\net20\ScreenConnect.Core.pdb
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0
PDB Path	C:\builds\cc\cwcontrol\Product\Windows\obj\Release\net20\ScreenConnect.Windows.pdb
Embedded Resources	6
PDB Path	C:\builds\cc\cwcontrol\Product\WindowsInstaller\obj\Release\net20\ScreenConnect.WindowsInstaller.pdb
PDB Path	t$mn
PDB Path	t$mn
PDB Path	t$mn
PDB Path	t$mn
PDB Path	C:\builds\cc\cwcontrol\Product\ClientInstallerRunner\obj\Release\ScreenConnect.ClientInstallerRunner.pdb
Embedded Resources	1
PDB Path	C:\Users\jmorgan\Source\cwcontrol\Custom\DotNetRunner\DotNetResolver\obj\Debug\DotNetResolver.pdb
PDB Path	C:\builds\cc\cwcontrol\Product\Client\obj\Release\net20\ScreenConnect.Client.pdb
Embedded Resources	102
Suspicious Type Names (1-2 chars)	0
PDB Path	C:\builds\cc\cwcontrol\Product\ClientService\obj\Release\ScreenConnect.ClientService.pdb
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0
PDB Path	C:\Compile\screenconnect\Product\WindowsAuthenticationPackage\bin\Release\ScreenConnect.WindowsAuthenticationPackage.pdb
PDB Path	C:\builds\cc\cwcontrol\Product\WindowsBackstageShell\obj\Release\ScreenConnect.WindowsBackstageShell.pdb
Embedded Resources	0
Suspicious Type Names (1-2 chars)	0
PDB Path	C:\build\work\eca3d12b\wix3\build\ship\x86\wixca.pdb
PDB Path	E:\delivery\Dev\wix37_public\build\ship\x86\SfxCA.pdb

05123f52aad13045dcdbf259d1641737 (5.67 MB)

File Structure

Characteristics

No malware configuration were found at this point.

Artefacts

Name0	Value	Location
PDB Path	C:\Users\jmorgan\Source\cwcontrol\Custom\DotNetRunner\Release\DotNetRunner.pdb	05123f52aad13045dcdbf259d1641737
PDB Path	C:\build\work\eca3d12b\wix3\build\obj\ship\x86\Compression.Cab\Microsoft.Deployment.Compression.Cab.pdb	05123f52aad13045dcdbf259d1641737 > Microsoft.Deployment.Compression.Cab.dll
Embedded Resources	1	05123f52aad13045dcdbf259d1641737 > Microsoft.Deployment.Compression.Cab.dll
Suspicious Type Names (1-2 chars)	0	05123f52aad13045dcdbf259d1641737 > Microsoft.Deployment.Compression.Cab.dll
PDB Path	C:\build\work\eca3d12b\wix3\build\obj\ship\x86\Compression\Microsoft.Deployment.Compression.pdb	05123f52aad13045dcdbf259d1641737 > Microsoft.Deployment.Compression.dll
Embedded Resources	0	05123f52aad13045dcdbf259d1641737 > Microsoft.Deployment.Compression.dll
Suspicious Type Names (1-2 chars)	0	05123f52aad13045dcdbf259d1641737 > Microsoft.Deployment.Compression.dll
PDB Path	C:\build\work\eca3d12b\wix3\build\obj\ship\x86\WindowsInstaller.Package\Microsoft.Deployment.WindowsInstaller.Package.pdb	05123f52aad13045dcdbf259d1641737 > Microsoft.Deployment.WindowsInstaller.Package.dll
Embedded Resources	0	05123f52aad13045dcdbf259d1641737 > Microsoft.Deployment.WindowsInstaller.Package.dll
Suspicious Type Names (1-2 chars)	0	05123f52aad13045dcdbf259d1641737 > Microsoft.Deployment.WindowsInstaller.Package.dll
PDB Path	C:\build\work\eca3d12b\wix3\build\obj\ship\x86\WindowsInstaller\Microsoft.Deployment.WindowsInstaller.pdb	05123f52aad13045dcdbf259d1641737 > Microsoft.Deployment.WindowsInstaller.dll
Embedded Resources	1	05123f52aad13045dcdbf259d1641737 > Microsoft.Deployment.WindowsInstaller.dll
Suspicious Type Names (1-2 chars)	0	05123f52aad13045dcdbf259d1641737 > Microsoft.Deployment.WindowsInstaller.dll
PDB Path	C:\builds\cc\cwcontrol\Product\InstallerActions\obj\Release\net20\ScreenConnect.InstallerActions.pdb	05123f52aad13045dcdbf259d1641737 > ScreenConnect.InstallerActions.dll
Embedded Resources	0	05123f52aad13045dcdbf259d1641737 > ScreenConnect.InstallerActions.dll
Suspicious Type Names (1-2 chars)	0	05123f52aad13045dcdbf259d1641737 > ScreenConnect.InstallerActions.dll
PDB Path	C:\builds\cc\cwcontrol\Product\Core\obj\Release\net20\ScreenConnect.Core.pdb	05123f52aad13045dcdbf259d1641737 > Resources > FILES > ID:0000 > ID:0
Embedded Resources	0	05123f52aad13045dcdbf259d1641737 > Resources > FILES > ID:0000 > ID:0
Suspicious Type Names (1-2 chars)	0	05123f52aad13045dcdbf259d1641737 > Resources > FILES > ID:0000 > ID:0
PDB Path	C:\builds\cc\cwcontrol\Product\Windows\obj\Release\net20\ScreenConnect.Windows.pdb	05123f52aad13045dcdbf259d1641737 > Resources > FILES > ID:0000 > ID:0
Embedded Resources	6	05123f52aad13045dcdbf259d1641737 > Resources > FILES > ID:0000 > ID:0
PDB Path	C:\builds\cc\cwcontrol\Product\WindowsInstaller\obj\Release\net20\ScreenConnect.WindowsInstaller.pdb	05123f52aad13045dcdbf259d1641737 > Resources > FILES > ID:0000 > ID:0
PDB Path	t$mn	05123f52aad13045dcdbf259d1641737 > Resources > FILES > ID:0000 > ID:0 > .Net Resources > ScreenConnect.Properties.libwebp.x64.dll
PDB Path	t$mn	05123f52aad13045dcdbf259d1641737 > Resources > FILES > ID:0000 > ID:0 > .Net Resources > ScreenConnect.Properties.libwebp.x86.dll
PDB Path	t$mn	05123f52aad13045dcdbf259d1641737 > Resources > FILES > ID:0000 > ID:0 > .Net Resources > ScreenConnect.Properties.libzstd.x64.dll
PDB Path	t$mn	05123f52aad13045dcdbf259d1641737 > Resources > FILES > ID:0000 > ID:0 > .Net Resources > ScreenConnect.Properties.libzstd.x86.dll
PDB Path	C:\builds\cc\cwcontrol\Product\ClientInstallerRunner\obj\Release\ScreenConnect.ClientInstallerRunner.pdb	05123f52aad13045dcdbf259d1641737 > Resources > FILES > ID:0000 > ID:0
Embedded Resources	1	05123f52aad13045dcdbf259d1641737 > Resources > FILES > ID:0000 > ID:0
PDB Path	C:\Users\jmorgan\Source\cwcontrol\Custom\DotNetRunner\DotNetResolver\obj\Debug\DotNetResolver.pdb	05123f52aad13045dcdbf259d1641737 > Resources > FILES > ID:0000 > ID:0
PDB Path	C:\builds\cc\cwcontrol\Product\Client\obj\Release\net20\ScreenConnect.Client.pdb	05123f52aad13045dcdbf259d1641737 > Resources > FILES > ID:0000 > ID:0 > .Net Resources > ScreenConnect.ScreenConnect.ClientSetup.msi > . > Root Entry > 䈍䄩䏸䞷䄦䠥 > ScreenConnect.Client.dll
Embedded Resources	102	05123f52aad13045dcdbf259d1641737 > Resources > FILES > ID:0000 > ID:0 > .Net Resources > ScreenConnect.ScreenConnect.ClientSetup.msi > . > Root Entry > 䈍䄩䏸䞷䄦䠥 > ScreenConnect.Client.dll
Suspicious Type Names (1-2 chars)	0	05123f52aad13045dcdbf259d1641737 > Resources > FILES > ID:0000 > ID:0 > .Net Resources > ScreenConnect.ScreenConnect.ClientSetup.msi > . > Root Entry > 䈍䄩䏸䞷䄦䠥 > ScreenConnect.Client.dll
PDB Path	C:\builds\cc\cwcontrol\Product\ClientService\obj\Release\ScreenConnect.ClientService.pdb	05123f52aad13045dcdbf259d1641737 > Resources > FILES > ID:0000 > ID:0 > .Net Resources > ScreenConnect.ScreenConnect.ClientSetup.msi > . > Root Entry > 䈍䄩䏸䞷䄦䠥 > ScreenConnect.ClientService.dll
Embedded Resources	0	05123f52aad13045dcdbf259d1641737 > Resources > FILES > ID:0000 > ID:0 > .Net Resources > ScreenConnect.ScreenConnect.ClientSetup.msi > . > Root Entry > 䈍䄩䏸䞷䄦䠥 > ScreenConnect.ClientService.dll
Suspicious Type Names (1-2 chars)	0	05123f52aad13045dcdbf259d1641737 > Resources > FILES > ID:0000 > ID:0 > .Net Resources > ScreenConnect.ScreenConnect.ClientSetup.msi > . > Root Entry > 䈍䄩䏸䞷䄦䠥 > ScreenConnect.ClientService.dll
PDB Path	C:\Compile\screenconnect\Product\WindowsAuthenticationPackage\bin\Release\ScreenConnect.WindowsAuthenticationPackage.pdb	05123f52aad13045dcdbf259d1641737 > Resources > FILES > ID:0000 > ID:0 > .Net Resources > ScreenConnect.ScreenConnect.ClientSetup.msi > . > Root Entry > 䈍䄩䏸䞷䄦䠥 > ScreenConnect.WindowsAuthenticationPackage.dll
PDB Path	C:\builds\cc\cwcontrol\Product\WindowsBackstageShell\obj\Release\ScreenConnect.WindowsBackstageShell.pdb	05123f52aad13045dcdbf259d1641737 > Resources > FILES > ID:0000 > ID:0 > .Net Resources > ScreenConnect.ScreenConnect.ClientSetup.msi > . > Root Entry > 䈍䄩䏸䞷䄦䠥 > ScreenConnect.WindowsBackstageShell.exe
Embedded Resources	0	05123f52aad13045dcdbf259d1641737 > Resources > FILES > ID:0000 > ID:0 > .Net Resources > ScreenConnect.ScreenConnect.ClientSetup.msi > . > Root Entry > 䈍䄩䏸䞷䄦䠥 > ScreenConnect.WindowsBackstageShell.exe
Suspicious Type Names (1-2 chars)	0	05123f52aad13045dcdbf259d1641737 > Resources > FILES > ID:0000 > ID:0 > .Net Resources > ScreenConnect.ScreenConnect.ClientSetup.msi > . > Root Entry > 䈍䄩䏸䞷䄦䠥 > ScreenConnect.WindowsBackstageShell.exe
PDB Path	C:\build\work\eca3d12b\wix3\build\ship\x86\wixca.pdb	05123f52aad13045dcdbf259d1641737 > Resources > FILES > ID:0000 > ID:0 > .Net Resources > ScreenConnect.ScreenConnect.ClientSetup.msi > . > Root Entry > 䌋䄱䜵䀾䛬㪌
PDB Path	E:\delivery\Dev\wix37_public\build\ship\x86\SfxCA.pdb	05123f52aad13045dcdbf259d1641737 > Resources > FILES > ID:0000 > ID:0 > .Net Resources > ScreenConnect.ScreenConnect.ClientSetup.msi > . > Root Entry > 䌋䄱䜵㬾䖸䒷㪰䗦䒬㵱䅬䄵䜵

You must be signed in to post a comment.

05123f52aad13045dcdbf259d1641737

PE Executable | MD5: 05123f52aad13045dcdbf259d1641737 | Size: 5.67 MB | application/x-dosexec

PE Executable
|
MD5: 05123f52aad13045dcdbf259d1641737
|
Size: 5.67 MB
|
application/x-dosexec