Deep Malware Analysis of 1defb209a3dcf15a5aa40bf63f6930a7 | md5: 1defb209a3dcf15a5aa40bf63f6930a7 | Executable | PE (Portable Executable) | PE File Layout | Win 32 Exe | x86 | PDB Path | CAB:COMPRESSION:LZX | CAB:COMPRESSION:NONE | .Net | Managed .NET | SOS: 0.24 | SOS: 0.31 | SOS: 0.00 | SOS: 0.07 | SOS: 0.26 | SOS: 0.21 | SOS: 0.25 | SOS: 0.36 | SOS: 0.27 | SOS: 0.39

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

File

Type

Portable Executable file

Detection

PeID

Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12VC8 -> Microsoft Corporation

258 files

EXE1defb209a3dcf15a5aa40bf63f6930a7

Structure

P7B[Authenticode]_4df4f2bc.p7b

BINResources

DLLScreenConnect.InstallerActions.dll

DLLMicrosoft.Deployment.WindowsInstaller.dll

DLLMicrosoft.Deployment.WindowsInstaller.Package.dll

DLLMicrosoft.Deployment.Compression.dll

DLLMicrosoft.Deployment.Compression.Cab.dll

BINCustomAction.config

DLLScreenConnect.Client.dll

DLLScreenConnect.ClientService.dll

DLLScreenConnect.Core.dll

DLLScreenConnect.Windows.dll

DLLScreenConnect.WindowsAuthenticationPackage.dll

EXEScreenConnect.WindowsBackstageShell.exe

BINScreenConnect.WindowsBackstageShell.exe.config

EXEScreenConnect.WindowsClient.exe

DLLScreenConnect.WindowsCredentialProvider.arm64.dll

DLLScreenConnect.WindowsCredentialProvider.dll

EXEScreenConnect.WindowsFileManager.exe

BINServiceExeWithoutService

BINClient.en-US.resources

BINClient.resources

BINsystem.config

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0xB58E00 size 5688 bytes
Info	PDB Path: C:\Users\jmorgan\Source\cwcontrol\Custom\DotNetRunner\Release\DotNetRunner.pdb