Suspicious
Suspect

163ae6c0a6285f984c7d727bede6b048

MS Office Document
|
MD5: 163ae6c0a6285f984c7d727bede6b048
|
Size: 5.11 MB
|
application/vnd.ms-office

Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
163ae6c0a6285f984c7d727bede6b048
Sha1
bfc0ccabd747d9da1fb391892c1443932a3422ab
Sha256
a9fa3370a9dca78b29ec466e7f3875f914f92c67a7effbf4b7f97e472bfe33db
Sha384
df4a9bf7b241ff1ba85f462499e894384262dfd6704c8e59a60555c72337e98783d705f2dda2cb8bc614daf3a7390593
Sha512
948a3335fe8072f8561c18d8e322239e134b629776e662cfb10f32fc8239ae493469d64a2a24461c263e66dc02c6a4e44992d020c16801995ee40e785a34a37b
SSDeep
98304:VXAaFvtlLgiu+/OrIG9Ba4BNEb0y9LtluAa6s2FykX2:tnvZqIV4MlvmNGya2
TLSH
60360119B6940CADD8E64235842EF115AE71780D273C85DB0F7A3DF97E2AAD0633A7C1
File Structure
163ae6c0a6285f984c7d727bede6b048
Root Entry
䡀䆒䑲
䡀䌏䈯
䡀䈖䌧䠤
䡀䌋䄱䜵
䡀䕎䒵䠵
䡀㬿䏲䐸䖱
䡀㽿䅤䈯䠶
䡀䈏䗤䕸䠨
䡀䓞䕪䇤䠨
䡀䕙䓲䕨䜷
䡀䆊䌷䑲䈝䗻
䡀䈛䒰䈹䌏䈯
䡀䌍䈵䗦䕲䠼
䡀䒌䓰䑲䑨䠷
䡀㼿䕷䑬㭪䗤䠤
䡀㼿䕷䑬㹪䒲䠯
䡀㿿䏤䇬䗤䒬䠱
䡀䕌䄨䈷䒏䇯䕨
䡀䖖㯬䏬㱨䖤䠫
䡀䘌䗶䐲䆊䌷䑲
䡀䈜䙵䆬㬨䑲䕷䏲
䡀䈜䙵䆬㲨䖱䄷䏯
䆒䑲䄾䓳䌿䒦䞱䆬䠲
䡀䄕䑸䋦䒌䇱䗬䒬䠱
䡀䇊䌰㾱㼒䔨䈸䆱䠨
䡀䌠㤻䈜䘦䈵䅘䈭䗦
䡀䖖㼬䕨䌹䈦䒌䉱䊬
㭙㬚䑲䈱䗦䊊䑨䞷䄦䠥
䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
䡀䌠㤻䈜䙵䆬㬨䑲䌩䠪
䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
䌋䄱䜵䀾䛬㾄䌷㬯䟊㦡䠄
[Authenticode]_01c785c2.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
_RDATA
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
䌋䄱䜵㭾䏨䗨㮨䈹䗱㯿䏬䠨
Overlay_4f78d0a0.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
ID:1033
䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
DigitalSignature
SummaryInformation
䌋䄱䜵䀾䛬䋜䕤䟳䑒䗬䘛䗱䐬䟨䆊䌷䑲㯿䏬䠨
Overlay_dca76cf3.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
LICENSE.html
pdqconnectagent
[Authenticode]_585dc3f5.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_MESSAGETABLE
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
pdqconnectagent-setup.exe
[Authenticode]_6624326d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0001
ID:0
CustomAction.config
pdqconnectagent-setup.pdb
WixSharp.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
WixSharp.Nsis.macros.nsh
WixSharp.Bootstrapper.runtime.win_x86.mbanative.dll
[Authenticode]_4888d895.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0002
ID:1033
WixToolset.Dtf.WindowsInstaller.dll
[Authenticode]_ccc9b5c1.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
WixToolset.Dtf.WindowsInstaller.Errors.resources
163ae6c0a6285f984c7d727bede6b048 (5.11 MB)
File Structure
163ae6c0a6285f984c7d727bede6b048
Root Entry
䡀䆒䑲
䡀䌏䈯
䡀䈖䌧䠤
䡀䌋䄱䜵
䡀䕎䒵䠵
䡀㬿䏲䐸䖱
䡀㽿䅤䈯䠶
䡀䈏䗤䕸䠨
䡀䓞䕪䇤䠨
䡀䕙䓲䕨䜷
䡀䆊䌷䑲䈝䗻
䡀䈛䒰䈹䌏䈯
䡀䌍䈵䗦䕲䠼
䡀䒌䓰䑲䑨䠷
䡀㼿䕷䑬㭪䗤䠤
䡀㼿䕷䑬㹪䒲䠯
䡀㿿䏤䇬䗤䒬䠱
䡀䕌䄨䈷䒏䇯䕨
䡀䖖㯬䏬㱨䖤䠫
䡀䘌䗶䐲䆊䌷䑲
䡀䈜䙵䆬㬨䑲䕷䏲
䡀䈜䙵䆬㲨䖱䄷䏯
䆒䑲䄾䓳䌿䒦䞱䆬䠲
䡀䄕䑸䋦䒌䇱䗬䒬䠱
䡀䇊䌰㾱㼒䔨䈸䆱䠨
䡀䌠㤻䈜䘦䈵䅘䈭䗦
䡀䖖㼬䕨䌹䈦䒌䉱䊬
㭙㬚䑲䈱䗦䊊䑨䞷䄦䠥
䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
䡀䌠㤻䈜䙵䆬㬨䑲䌩䠪
䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
䌋䄱䜵䀾䛬㾄䌷㬯䟊㦡䠄
[Authenticode]_01c785c2.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
_RDATA
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
䌋䄱䜵㭾䏨䗨㮨䈹䗱㯿䏬䠨
Overlay_4f78d0a0.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
ID:1033
䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
DigitalSignature
SummaryInformation
䌋䄱䜵䀾䛬䋜䕤䟳䑒䗬䘛䗱䐬䟨䆊䌷䑲㯿䏬䠨
Overlay_dca76cf3.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
LICENSE.html
pdqconnectagent
[Authenticode]_585dc3f5.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_MESSAGETABLE
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
pdqconnectagent-setup.exe
[Authenticode]_6624326d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0001
ID:0
CustomAction.config
pdqconnectagent-setup.pdb
WixSharp.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
WixSharp.Nsis.macros.nsh
WixSharp.Bootstrapper.runtime.win_x86.mbanative.dll
[Authenticode]_4888d895.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0002
ID:1033
WixToolset.Dtf.WindowsInstaller.dll
[Authenticode]_ccc9b5c1.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
WixToolset.Dtf.WindowsInstaller.Errors.resources
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙