Suspicious
Suspect

27aa01115d2abaed4c832ab9cdf02863

MS Office Document
|
MD5: 27aa01115d2abaed4c832ab9cdf02863
|
Size: 24.56 MB
|
application/vnd.ms-office


Print
Summary by MalvaGPT
Characteristics
Hash
Hash Value
MD5
27aa01115d2abaed4c832ab9cdf02863
Sha1
c5a911399a81a99dcfe510cfa0a3ece6e3b36124
Sha256
96f4c0e85a1911ebad908fe91ef8de34f0b7cb122847129fb2c4ada944b2c2df
Sha384
a572adbb296332634238a2dbf21c72d5e76d2abab867ad8c99e37ae50f8495cdd8f34b287d3b61968c62d67d8fa56c84
Sha512
294b10ec20206b1e322b45a083fca73fb883ffd161676b76503820986070bed728a1185e7e0d62d43c1a6a89f511c6d2cdd73c1a200f91fe3682b6475cea76d1
SSDeep
393216:0hYATjU5HvQzvAc9jG/lwN6EOBcKY2hAOVozyAshV1zTd5oW/hylj2:0mj5HvQdjG/MOBcn27oEhV1d5Wlj2
TLSH
A2373321B2CBC432C59E007AEDA9FE5D14BABE730B3150D7A3E5BD9E84B08C15274B56
File Structure
Root Entry
䡀䌏䈯
䡀㲞䈝䗻
䡀䈖䌧䠤
䡀䌋䄱䜵
䡀䌍䏤䊲
䡀䕎䒵䠵
䌋䄱䜵㷾䚨
䌋䄱䜵㾾䠳
䌧䎶䞁䄦䠥
䡀㬿䏲䐸䖱
䡀㽿䅤䈯䠶
䡀䈏䗤䕸䠨
䡀䈛䌪䗶䜵
䡀䋌䆨㫮䛲
䡀䒌䗱䒵䠯
䡀䓞䕪䇤䠨
䡀䕙䓲䕨䜷
䌋䄱䜵䌾䉱䠲
䡀䆊䌷䑲䈝䗻
䡀䈝䗻䗜䏼䠨
䡀䌍䈵䗦䕲䠼
䡀䒌䓰䑲䑨䠷
䌋䄱䜵䗾䅤䄥䎦
䡀㼿䕷䑬㭪䗤䠤
䡀㼿䕷䑬㹪䒲䠯
䡀㿿䏤䇬䗤䒬䠱
䡀䄛䌧㫲䗸䒷䠱
䡀䒌䗱䒵㮯䈹䗱
䡀䕌䄨䈷䒏䇯䕨
䡀䘌䗶䐲䆊䌷䑲
䡀䙎䑨㶷䓤䌳䊱
䌋䄱䜵䆾䐲䏳䗨䠬
䌋䄱䜵䆾䖸䌷䒦䠱
䌋䄱䜵䈾䆻䄯䌰䠦
䌋䄱䜵䌾䖱䌷䒦䠱
䌋䄱䜵䕾䐨䙲䆬䠲
䌋䄱䜵䕾䓨䌤䌵䠦
䌋䄱䜵䅾䑤䈱䞵䓭䠪
䌋䄱䜵䅾䑤䈱䞵䓭䠪-preview.png
䌋䄱䜵䅾䑤䈱䞵䙶䠪
䌋䄱䜵䅾䑤䈱䞵䙶䠪-preview.jpg
䌋䄱䜵䇾䄬䒯䞪䓭䠪
䌋䄱䜵䇾䄬䒯䞪䓭䠪-preview.png
䌋䄱䜵䇾䄬䒯䞪䙶䠪
䌋䄱䜵䇾䄬䒯䞪䙶䠪-preview.jpg
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
䡀䄕䑸䋦䒌䇱䗬䒬䠱
䡀䇊䌰㾱㼒䔨䈸䆱䠨
䡀䒌䗱䒵㬯䑲䌧䌷䑲
[Authenticode]_e87d8e7a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
REGISTRY
ID:27DA
ID:1033
RT_DIALOG
ID:2AB7
ID:1033
RT_STRING
ID:09C5
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0002
ID:1033
䌋䄱䜵䆾䇰䌯䎱䕤䒵䠺
䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
䡀䒋䗲䗶䄵䓳䕨㲞䈜䘴䑨䈦
䌋䄱䜵䅾䑤䈱䞵䆶䏤㡨㠅䍾䊳
䌋䄱䜵䅾䑤䈱䞵䆶䏤㡨㠅䍾䊳-preview.png
䌋䄱䜵䅾䑤䈱䞵䆶䏤㡨㥂䍾䊳
䌋䄱䜵䅾䑤䈱䞵䆶䏤㡨㥂䍾䊳-preview.png
䌋䄱䜵䅾䑤䈱䞵䆶䏤㢨㠀䍾䊳
䌋䄱䜵䅾䑤䈱䞵䆶䏤㢨㠀䍾䊳-preview.png
䌋䄱䜵䇾䄬䒯䞪䆶䏤㡨㠅䍾䊳
䌋䄱䜵䇾䄬䒯䞪䆶䏤㡨㠅䍾䊳-preview.png
䌋䄱䜵䇾䄬䒯䞪䆶䏤㡨㥂䍾䊳
䌋䄱䜵䇾䄬䒯䞪䆶䏤㡨㥂䍾䊳-preview.png
䌋䄱䜵䇾䄬䒯䞪䆶䏤㢨㠀䍾䊳
䌋䄱䜵䇾䄬䒯䞪䆶䏤㢨㠀䍾䊳-preview.png
SummaryInformation
27aa01115d2abaed4c832ab9cdf02863
0x000238EA.svg
0x000BD2CC.svg
[Authenticode]_7070e6df.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
DATA
ID:0083
background.gif
background.gif-preview.png
downloading.gif
downloading.gif-preview.png
endpoint.json
[Authenticode]_d1e6b7ff.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
ILRepack.List
Microsoft.Web.XmlTransform.SR.resources
NuGet.CommonResources.resources
NuGet.Resources.AnalysisResources.resources
NuGet.Resources.NuGetResources.resources
NuGet.Authoring.nuspec.xsd
FxResources.System.ValueTuple.SR.resources
Squirrel.Update.Properties.Resources.resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:1033-preview.png
ID:0008
ID:1033
ID:0009
ID:1033
ID:000A
ID:1033
ID:000B
ID:1033
ID:000C
ID:1033
ID:000D
ID:1033
ID:000E
ID:1033
ID:000F
ID:1033
ID:0010
ID:1033
ID:0011
ID:1033
ID:0012
ID:1033
RT_STRING
ID:0007
ID:1033
RT_GROUP_CURSOR4
ID:006B
ID:1033
ID:006C
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Overlay_d5bc5826.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.itext
.data
.bss
.idata
.didata
.edata
.tls
.rdata
.reloc
.rsrc
Resources
RT_ICON
ID:0064
ID:1033
ID:1033-preview.png
ID:0065
ID:1033
ID:0066
ID:1033
ID:0067
ID:1033
ID:0068
ID:1033
ID:0069
ID:1033
ID:006A
ID:1033
ID:006B
ID:1033
ID:006C
ID:1033
ID:1033-preview.png
ID:006D
ID:1033
ID:006E
ID:1033
ID:006F
ID:1033
ID:0070
ID:1033
ID:0071
ID:1033
ID:0072
ID:1033
ID:0073
ID:1033
RT_STRING
ID:0FF5
ID:0
ID:0FF6
ID:0
ID:0FF7
ID:0
ID:0FF8
ID:0
ID:0FF9
ID:0
ID:0FFA
ID:0
ID:0FFB
ID:0
ID:0FFC
ID:0
ID:0FFD
ID:0
ID:0FFE
ID:0
ID:0FFF
ID:0
ID:1000
ID:0
RT_RCDATA
ID:0000
ID:0
ID:2B67
ID:1033
RT_GROUP_CURSOR4
ID:0000
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Artefacts
Name
Value
URLs in VB Code - #1

http://ns.adobe.com/xap/1.0/

URLs in VB Code - #2

http://www.w3.org/1999/02/22-rdf-syntax-ns#

URLs in VB Code - #3

http://ns.adobe.com/xap/1.0/mm/

URLs in VB Code - #4

http://ns.adobe.com/xap/1.0/sType/ResourceRef#

URLs in VB Code - #5

http://www.w3.org/2000/svg

URLs in VB Code - #6

http://www.w3.org/1999/xlink

URLs in VB Code - #7

http://schemas.microsoft.com/SMI/2005/WindowsSettings

URLs in VB Code - #8

http://www.microsoft.com/pkiops/crl/Microsoft%20ID%20Verified%20CS%20EOC%20CA%2001.crl0

URLs in VB Code - #9

http://www.microsoft.com/pkiops/certs/Microsoft%20ID%20Verified%20CS%20EOC%20CA%2001.crt0

URLs in VB Code - #10

http://oneocsp.microsoft.com/ocsp0f

URLs in VB Code - #11

http://www.microsoft.com/pkiops/Docs/Repository.htm0

URLs in VB Code - #12

http://www.microsoft.com/pkiops/crl/Microsoft%20ID%20Verified%20Code%20Signing%20PCA%202021.crl0

URLs in VB Code - #13

http://www.microsoft.com/pkiops/certs/Microsoft%20ID%20Verified%20Code%20Signing%20PCA%202021.crt0

URLs in VB Code - #14

http://oneocsp.microsoft.com/ocsp0

URLs in VB Code - #15

http://www.microsoft.com/pkiops/crl/Microsoft%20Identity%20Verification%20Root%20Certificate%20Authority%202020.crl0

URLs in VB Code - #16

http://www.microsoft.com/pkiops/certs/Microsoft%20Identity%20Verification%20Root%20Certificate%20Authority%202020.crt0

URLs in VB Code - #17

http://www.microsoft.com/pkiops/crl/Microsoft%20Public%20RSA%20Timestamping%20CA%202020.crl0y

URLs in VB Code - #18

http://www.microsoft.com/pkiops/certs/Microsoft%20Public%20RSA%20Timestamping%20CA%202020.crt0

URLs in VB Code - #1

http://www.microsoft.com/pkiops/crl/Microsoft%20ID%20Verified%20CS%20EOC%20CA%2001.crl0

URLs in VB Code - #2

http://www.microsoft.com/pkiops/certs/Microsoft%20ID%20Verified%20CS%20EOC%20CA%2001.crt0

URLs in VB Code - #3

http://oneocsp.microsoft.com/ocsp0f

URLs in VB Code - #4

http://www.microsoft.com/pkiops/Docs/Repository.htm0

URLs in VB Code - #5

http://www.microsoft.com/pkiops/crl/Microsoft%20ID%20Verified%20Code%20Signing%20PCA%202021.crl0

URLs in VB Code - #6

http://www.microsoft.com/pkiops/certs/Microsoft%20ID%20Verified%20Code%20Signing%20PCA%202021.crt0

URLs in VB Code - #7

http://oneocsp.microsoft.com/ocsp0

URLs in VB Code - #8

http://www.microsoft.com/pkiops/crl/Microsoft%20Identity%20Verification%20Root%20Certificate%20Authority%202020.crl0

URLs in VB Code - #9

http://www.microsoft.com/pkiops/certs/Microsoft%20Identity%20Verification%20Root%20Certificate%20Authority%202020.crt0

URLs in VB Code - #10

http://www.microsoft.com/pkiops/crl/Microsoft%20Public%20RSA%20Timestamping%20CA%202020.crl0y

URLs in VB Code - #11

http://www.microsoft.com/pkiops/certs/Microsoft%20Public%20RSA%20Timestamping%20CA%202020.crt0

27aa01115d2abaed4c832ab9cdf02863 (24.56 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙