Suspect
PE Executable
MD5:
Size: 0 B
application/x-dosexec
The file 675e48419ae5fc9214ec26ee94e379e0 is a PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 295 embedded or derived files. It matches 42 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- —
- MD5
- -
- Verdict
- Inconclusive
- File type
- PE Executable
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12VC8 -> Microsoft Corporation
288 files
EXE675e48419ae5fc9214ec26ee94e379e0
Structure
P7B[Authenticode]_9dac8b3c.p7b
BINResources
DLLScreenConnect.Client.dll
DLLScreenConnect.ClientService.dll
DLLScreenConnect.Core.dll
DLLScreenConnect.Windows.dll
DLLScreenConnect.WindowsAuthenticationPackage.dll
EXEScreenConnect.WindowsBackstageShell.exe
BINScreenConnect.WindowsBackstageShell.exe.config
EXEScreenConnect.WindowsClient.exe
DLLScreenConnect.WindowsCredentialProvider.dll
EXEScreenConnect.WindowsFileManager.exe
BINServiceExeWithoutService
DLLScreenConnect.InstallerActions.dll
DLLMicrosoft.Deployment.WindowsInstaller.dll
DLLMicrosoft.Deployment.WindowsInstaller.Package.dll
DLLMicrosoft.Deployment.Compression.dll
DLLMicrosoft.Deployment.Compression.Cab.dll
BINCustomAction.config
| Name | Value |
|---|---|
| Info | Authenticode present at 0x54A600 size 96120 bytes |
| Info | PDB Path: C:\Users\jmorgan\Source\cwcontrol\Custom\DotNetRunner\Release\DotNetRunner.pdb |