Suspicious
Suspect

1db8b9fa0bdcbfaab807f715c288c19a

PE Executable
MD5: 1db8b9fa0bdcbfaab807f715c288c19a
Size: 550.91 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Low
MD5 1db8b9fa0bdcbfaab807f715c288c19a
Sha1 fde73710ce063bbf1e377c02a1a8615cf4da1c08
Sha256 b8100e5ab07983cbf82d721cf719576ca3f60e352628dcaabd42d428011fdedf
Sha384 85c2b42810cd0e46817a7fb6b247a72132e203cfe61cc565150c4ef2f209c9611f88d4cf0d5aff1491011e092c4882bc
Sha512 fc132764026c682e8fac1a97171731d54880c8d95566c486c731c880e750a29875ac208fb4b4dc2897dfc49beb24f77af016d846c78be75df159d3542600eb73
SSDeep 6144:SfoUrkyyvsbvpSLmwJUoqnoezGMZf1y99tg03Xdedu1h+xE5vce/6OdCatxq/trJ:SfpkywYszKoIzGafzece/6yx/Oek
TLSH 44C47D9233B48B2FCABF5B7BE42454980770E901F209EB5B1AD6D4BC5F633854E412E6
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: C:\builds\cc\cwcontrol\Product\Core\obj\Release\net20\ScreenConnect.Core.pdb
Module Name
ScreenConnect.Core.dll
Full Name
ScreenConnect.Core.dll
Scope Name
ScreenConnect.Core.dll
Scope Type
ModuleDef
Kind
Dll
Runtime Version
v2.0.50727
Tables Header Version
512
WinMD Version
<null>
Assembly Name
ScreenConnect.Core
Assembly Version
25.2.4.9229
Assembly Culture
<null>
Has PublicKey
True
PublicKey Token
4b14c015c87c1ad8
Target Framework
<null>
Total Strings
571
Main Method
Not found or no body
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙