Suspicious
Suspect

210c35202bc5e9aceaaaa99ff4fe2360

Share on LinkedIn Add to favorites
Re-Scan
Delete
MS Office Document
MD5: 210c35202bc5e9aceaaaa99ff4fe2360
Size: 2.79 MB
application/vnd.ms-office
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
210c35202bc5e9aceaaaa99ff4fe2360
Sha1
91f9f768cf7c37c2647d6b8afb2a48078a780834
Sha256
0f1dc290dc20f3eefb0f6cb4d965e437f207484151f57d0fe3b58b33565e99bc
Sha384
1e620c2d4df2b2cec0d6c90874a388fd4b46ca6fa441db904e04b6d093a253369e130e4b144d698881361e46a72a440d
Sha512
e074e9e7578a73ab09b16237b795403b0c3af410f8cda95fa532d450ac75e0fd38a493d47197c84c7ab6d312090f6e73d6bee4fcdf8445098060c69e6e669655
SSDeep
49152:HarHYkZKumZr7ACI1KfJekyt1Gwhf6nYIfreI07VoP7qsNR+d7o2qM0+Hs:cYuK/ACI+1yt0wR6XTqCP+sSd7otM0+M
TLSH
F9D501217386C637C96E0270392996AB146DFDA34B7180DBA3CC2C2E5DB51C16739FA7
File Structure
210c35202bc5e9aceaaaa99ff4fe2360
Root Entry
䡀䌏䈯
䡀㲞䈝䗻
䡀䈖䌧䠤
䡀䌋䄱䜵
䡀䌍䏤䊲
䡀䕎䒵䠵
䌋䄱䜵㷾䚨
䌋䄱䜵㾾䠳
䌧䎶䞁䄦䠥
䡀㬿䏲䐸䖱
䡀㽿䅤䈯䠶
䡀䈏䗤䕸䠨
䡀䈛䌪䗶䜵
䡀䋌䆨㫮䛲
䡀䒌䗱䒵䠯
䡀䓞䕪䇤䠨
䡀䕙䓲䕨䜷
䌋䄱䜵䌾䉱䠲
䡀䆊䌷䑲䈝䗻
䡀䈝䗻䗜䏼䠨
䡀䌍䈵䗦䕲䠼
䡀䒌䓰䑲䑨䠷
䌋䄱䜵䗾䅤䄥䎦
䡀㼿䕷䑬㭪䗤䠤
䡀㼿䕷䑬㹪䒲䠯
䡀㿿䏤䇬䗤䒬䠱
䡀䄛䌧㫲䗸䒷䠱
䡀䒌䗱䒵㮯䈹䗱
䡀䕌䄨䈷䒏䇯䕨
䡀䘌䗶䐲䆊䌷䑲
䡀䙎䑨㶷䓤䌳䊱
䌋䄱䜵䆾䐲䏳䗨䠬
䌋䄱䜵䆾䖸䌷䒦䠱
䌋䄱䜵䈾䆻䄯䌰䠦
䌋䄱䜵䌾䖱䌷䒦䠱
䌋䄱䜵䕾䐨䙲䆬䠲
䌋䄱䜵䕾䓨䌤䌵䠦
䌋䄱䜵䅾䑤䈱䞵䙶䠪
䌋䄱䜵䅾䑤䈱䞵䙶䠪-preview.jpg
䌋䄱䜵䇾䄬䒯䞪䙶䠪
䌋䄱䜵䇾䄬䒯䞪䙶䠪-preview.jpg
䡀䄕䑸䋦䒌䇱䗬䒬䠱
䡀䇊䌰㾱㼒䔨䈸䆱䠨
䡀䒌䗱䒵㬯䑲䌧䌷䑲
䌋䄱䜵䄾䆬䖸䄷䗦䇾䏯
[Authenticode]_f8aa47d3.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
䌋䄱䜵䆾䇰䌯䎱䕤䒵䠺
䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
䌋䄱䜵㭾䗤㾤䏳䄲䈧䞵䏧䠯
[Authenticode]_1b0ce425.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_STRING
ID:0FDF
ID:1033
ID:0FE0
ID:1033
ID:0FE1
ID:1033
ID:0FE2
ID:1033
RT_VERSION
ID:0001
ID:1033
䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
䡀䒋䗲䗶䄵䓳䕨㲞䈜䘴䑨䈦
䌋䄱䜵䅾䑤䈱䞵䆶䏤㡨㠅䍾䊳
䌋䄱䜵䅾䑤䈱䞵䆶䏤㡨㠅䍾䊳-preview.png
䌋䄱䜵䅾䑤䈱䞵䆶䏤㡨㥂䍾䊳
䌋䄱䜵䅾䑤䈱䞵䆶䏤㡨㥂䍾䊳-preview.png
䌋䄱䜵䅾䑤䈱䞵䆶䏤㢨㠀䍾䊳
䌋䄱䜵䅾䑤䈱䞵䆶䏤㢨㠀䍾䊳-preview.png
䌋䄱䜵䇾䄬䒯䞪䆶䏤㡨㠅䍾䊳
䌋䄱䜵䇾䄬䒯䞪䆶䏤㡨㠅䍾䊳-preview.png
䌋䄱䜵䇾䄬䒯䞪䆶䏤㡨㥂䍾䊳
䌋䄱䜵䇾䄬䒯䞪䆶䏤㡨㥂䍾䊳-preview.png
䌋䄱䜵䇾䄬䒯䞪䆶䏤㢨㠀䍾䊳
䌋䄱䜵䇾䄬䒯䞪䆶䏤㢨㠀䍾䊳-preview.png
DigitalSignature
SummaryInformation
210c35202bc5e9aceaaaa99ff4fe2360
0x00023E19.svg
0x0003693E.svg
igfxSDK.exe
[Authenticode]_1920eb2d.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
REGISTRY
ID:0065
ID:1033
ID:006C
ID:1033
ID:006D
ID:16393
ID:006E
ID:1033
ID:006F
ID:1033
ID:0070
ID:1033
ID:0071
ID:1033
ID:0073
ID:1033
ID:0074
ID:1033
ID:0075
ID:16393
ID:0076
ID:16393
ID:0077
ID:16393
ID:0078
ID:16393
ID:0079
ID:16393
ID:007A
ID:16393
ID:007B
ID:16393
ID:007C
ID:1033
ID:007D
ID:1033
ID:007E
ID:1033
ID:007F
ID:16393
ID:0080
ID:1033
ID:0081
ID:16393
ID:0083
ID:16393
ID:0084
ID:16393
ID:0086
ID:1033
ID:0087
ID:16393
ID:0088
ID:16393
ID:0089
ID:16393
ID:008A
ID:16393
ID:008B
ID:1033
ID:008C
ID:1033
ID:008D
ID:1033
ID:008E
ID:1033
ID:008F
ID:1033
ID:0090
ID:1033
ID:0091
ID:1033
ID:0092
ID:1033
ID:0093
ID:1033
ID:0094
ID:1033
ID:0095
ID:16393
ID:0097
ID:1033
ID:0098
ID:1033
ID:0099
ID:1033
ID:009A
ID:1033
ID:009B
ID:1033
ID:009C
ID:1033
ID:009D
ID:1033
ID:009E
ID:1033
ID:009F
ID:1033
ID:00A0
ID:1033
ID:00A1
ID:1033
ID:00A2
ID:1033
ID:00A3
ID:1033
ID:00A4
ID:1033
ID:00A5
ID:16393
ID:00A7
ID:16393
ID:00A8
ID:16393
ID:00A9
ID:16393
ID:00AA
ID:16393
ID:00AB
ID:16393
ID:00AC
ID:1033
ID:00AD
ID:16393
ID:00AE
ID:1033
ID:00AF
ID:1033
ID:00B0
ID:1033
ID:00B1
ID:1033
ID:00B2
ID:16393
ID:00B3
ID:16393
ID:00B4
ID:16393
ID:00B5
ID:16393
ID:00B6
ID:1033
ID:00B7
ID:1033
ID:00B8
ID:1033
ID:00B9
ID:1033
ID:00BA
ID:1033
ID:00BB
ID:1033
ID:00BC
ID:1033
ID:00BD
ID:1033
ID:00BE
ID:1033
ID:00BF
ID:1033
ID:00C0
ID:1033
ID:00C1
ID:1033
ID:00C2
ID:1033
ID:00C3
ID:1033
TYPELIB
ID:0001
ID:16393
RT_DIALOG
ID:006B
ID:1033
RT_STRING
ID:0007
ID:1033
RT_MANIFEST
ID:0001
ID:1033
wtsapi32.dll
[Authenticode]_b201aaba.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
_RDATA
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
RT_HTML
ID:0378
ID:1024
RT_MANIFEST
ID:0002
ID:1033
version.dll
[Authenticode]_4611e0ce.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
Artefacts
Name
 Value
URLs in VB Code - #1

https://intel.com/contact/ARPCONTACTig@intel.comWindowsTypeNT40DisplayWindows
URLs in VB Code - #2

http://ns.adobe.com/xap/1.0/
URLs in VB Code - #3

http://www.w3.org/1999/02/22-rdf-syntax-ns#
URLs in VB Code - #4

http://ns.adobe.com/xap/1.0/mm/
URLs in VB Code - #5

http://ns.adobe.com/xap/1.0/sType/ResourceRef#
URLs in VB Code - #6

http://www.w3.org/2000/svg
URLs in VB Code - #7

http://www.w3.org/1999/xlink
URLs in VB Code - #8

http://t2.symcb.com0
URLs in VB Code - #9

http://t1.symcb.com/ThawtePCA.crl0
URLs in VB Code - #10

http://tl.symcb.com/tl.crl0
URLs in VB Code - #11

https://www.thawte.com/cps0/
URLs in VB Code - #12

https://www.thawte.com/repository0W
URLs in VB Code - #13

http://tl.symcb.com/tl.crt0
URLs in VB Code - #14

https://www.advancedinstaller.com
URLs in VB Code - #15

http://www.digicert.com/CPS0
URLs in VB Code - #16

http://crl3.digicert.com/sha2-assured-ts.crl02
URLs in VB Code - #17

http://crl4.digicert.com/sha2-assured-ts.crl0
URLs in VB Code - #18

http://ocsp.digicert.com0O
URLs in VB Code - #19

http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
URLs in VB Code - #20

http://ocsp.digicert.com0C
URLs in VB Code - #21

http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
URLs in VB Code - #22

http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0
URLs in VB Code - #23

http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
URLs in VB Code - #24

https://www.digicert.com/CPS0
URLs in VB Code - #25

https://aqjyw.com/j
URLs in VB Code - #26

http://cert.ssl.com/SSLcom-SubCA-EV-CodeSigning-RSA-4096-R3.cer0
URLs in VB Code - #27

http://ocsps.ssl.com0P
URLs in VB Code - #28

https://www.ssl.com/repository0
URLs in VB Code - #29

http://crls.ssl.com/SSLcom-SubCA-EV-CodeSigning-RSA-4096-R3.crl0
URLs in VB Code - #30

http://www.ssl.com/repository/SSLcom-RootCA-EV-RSA-4096-R2.crt0
URLs in VB Code - #31

http://ocsps.ssl.com0
URLs in VB Code - #32

http://crls.ssl.com/SSLcom-RootCA-EV-RSA-4096-R2.crl0
URLs in VB Code - #33

http://cert.ssl.com/SSL.com-timeStamping-I-RSA-R1.cer0Q
URLs in VB Code - #34

http://crls.ssl.com/SSL.com-timeStamping-I-RSA-R1.crl0
URLs in VB Code - #35

http://www.ssl.com/repository/SSLcomRootCertificationAuthorityRSA.crt0
URLs in VB Code - #36

http://crls.ssl.com/ssl.com-rsa-RootCA.crl0
URLs in VB Code - #1

http://t2.symcb.com0
URLs in VB Code - #2

http://t1.symcb.com/ThawtePCA.crl0
URLs in VB Code - #3

http://tl.symcb.com/tl.crl0
URLs in VB Code - #4

https://www.thawte.com/cps0/
URLs in VB Code - #5

https://www.thawte.com/repository0W
URLs in VB Code - #6

http://tl.symcb.com/tl.crt0
URLs in VB Code - #7

https://www.advancedinstaller.com
URLs in VB Code - #8

http://www.digicert.com/CPS0
URLs in VB Code - #9

http://crl3.digicert.com/sha2-assured-ts.crl02
URLs in VB Code - #10

http://crl4.digicert.com/sha2-assured-ts.crl0
URLs in VB Code - #11

http://ocsp.digicert.com0O
URLs in VB Code - #12

http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
URLs in VB Code - #13

http://ocsp.digicert.com0C
URLs in VB Code - #14

http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
URLs in VB Code - #15

http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0
URLs in VB Code - #16

http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
URLs in VB Code - #17

https://www.digicert.com/CPS0
210c35202bc5e9aceaaaa99ff4fe2360 (2.79 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙