Suspicious
Suspect

2b6ad464936ba2d3a32e9efb46ef8e0e

MS Office Document
|
MD5: 2b6ad464936ba2d3a32e9efb46ef8e0e
|
Size: 5.11 MB
|
application/vnd.ms-office

Print
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
2b6ad464936ba2d3a32e9efb46ef8e0e
Sha1
d296fed4ffcb4dc59634e02f25d4f027fb6b7686
Sha256
a56748f7eaa9aaf8ea137eb4442f908429573bb86c1fcd7b0e8844b4aab34134
Sha384
4b0c99313578db51dc99f6ef53aa452ddf464fbaa42b5842cf0a0f5bd3829d00b242457949c73188733e59d1adc3f964
Sha512
5109bd05a00aac7c4ee1e858ae004ea18407151837d79d4f936905f2c8479766f32ead7050b39fa051b23d057c5cb49750bb3e5cef6e2a869d48d7bb6cbb9bea
SSDeep
98304:3XAaFvtlLgiu+/OrIG9Ba4BNEb0y9LtluAa6s2FykXc:HnvZqIV4MlvmNGyac
TLSH
A5360119B6940CADD8E64235842EF115AE71780D273C85DB0F7A3DF97E2AAD0633A7C1
File Structure
2b6ad464936ba2d3a32e9efb46ef8e0e
Root Entry
䡀䆒䑲
䡀䌏䈯
䡀䈖䌧䠤
䡀䌋䄱䜵
䡀䕎䒵䠵
䡀㬿䏲䐸䖱
䡀㽿䅤䈯䠶
䡀䈏䗤䕸䠨
䡀䓞䕪䇤䠨
䡀䕙䓲䕨䜷
䡀䆊䌷䑲䈝䗻
䡀䈛䒰䈹䌏䈯
䡀䌍䈵䗦䕲䠼
䡀䒌䓰䑲䑨䠷
䡀㼿䕷䑬㭪䗤䠤
䡀㼿䕷䑬㹪䒲䠯
䡀㿿䏤䇬䗤䒬䠱
䡀䕌䄨䈷䒏䇯䕨
䡀䖖㯬䏬㱨䖤䠫
䡀䘌䗶䐲䆊䌷䑲
䡀䈜䙵䆬㬨䑲䕷䏲
䡀䈜䙵䆬㲨䖱䄷䏯
䆒䑲䄾䓳䌿䒦䞱䆬䠲
䡀䄕䑸䋦䒌䇱䗬䒬䠱
䡀䇊䌰㾱㼒䔨䈸䆱䠨
䡀䌠㤻䈜䘦䈵䅘䈭䗦
䡀䖖㼬䕨䌹䈦䒌䉱䊬
㭙㬚䑲䈱䗦䊊䑨䞷䄦䠥
䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
䡀䌠㤻䈜䙵䆬㬨䑲䌩䠪
䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
䌋䄱䜵䀾䛬㾄䌷㬯䟊㦡䠄
[Authenticode]_01c785c2.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
_RDATA
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0002
ID:1033
䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
䌋䄱䜵㭾䏨䗨㮨䈹䗱㯿䏬䠨
Overlay_4f78d0a0.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
ID:1033
䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
DigitalSignature
SummaryInformation
䌋䄱䜵䀾䛬䋜䕤䟳䑒䗬䘛䗱䐬䟨䆊䌷䑲㯿䏬䠨
Overlay_dca76cf3.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
LICENSE.html
pdqconnectagent
[Authenticode]_585dc3f5.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_MESSAGETABLE
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
pdqconnectagent-setup.exe
[Authenticode]_6624326d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0001
ID:0
CustomAction.config
pdqconnectagent-setup.pdb
WixSharp.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
WixSharp.Nsis.macros.nsh
WixSharp.Bootstrapper.runtime.win_x86.mbanative.dll
[Authenticode]_4888d895.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
WixToolset.Dtf.WindowsInstaller.dll
[Authenticode]_ccc9b5c1.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
WixToolset.Dtf.WindowsInstaller.Errors.resources
2b6ad464936ba2d3a32e9efb46ef8e0e (5.11 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙