Suspect
6a7fdfa1818951d5351f0fa21a686d67
MS Office Document
MD5: 6a7fdfa1818951d5351f0fa21a686d67
Size: 10.24 MB
application/vnd.ms-office
This sample is a 9.8 MB MS Office Document for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 320 embedded or derived files. It matches 36 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- bda6ac25a5c53bcfe69bbc6b097ac79681a83c80c7de5a5cfa75c1fd4b043ce9
- MD5
- 6a7fdfa1818951d5351f0fa21a686d67
- Verdict
- Inconclusive
- File type
- MS Office Document · 9.8 MB
Cite this report: https://app.malva.re/sha256/bda6ac25a5c53bcfe69bbc6b097ac79681a83c80c7de5a5cfa75c1fd4b043ce9
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Microsoft Office Document
Size
10.24 MB · 10,244,096 B
First seen
2026-10-30 00:30 · 3 days ago
Last seen
2026-10-30 00:30 · 3 days ago
Last analysis
2026-10-30 00:30 · 3 days ago
Hashes
MD5
6a7fdfa1818951d5351f0fa21a686d67
Sha1
26960f0c92edd507b2843858aa26dccaa022ed5c
Sha256
bda6ac25a5c53bcfe69bbc6b097ac79681a83c80c7de5a5cfa75c1fd4b043ce9
Sha384
03c7ff0f8c0af3db781540e97e21e7c33439474950ed4efff3d1f546ab5f39ad61c6772d420ee4f67b42d784f5b44528
Sha512
b1e58c2b4a2fdb4979e852948fdb4cfbea1f46b5b775e68c894638c387cdb7c9b98a8a878d66543fa100bee03005f860ee96bf2fe93f13bb121878bbbb877a38
SSDeep
98304:cMn1Giy8E1PqhPG6ztZNK9aNGPMn1Giy8E1PqhAMn1Giy8E1PqhjMn1Giy8E1Pqh:vZWiDz3I967ZWijZWiCZWi
TLSH
99A6232123FAC168F1B61B35D93965B56936BD12DA22C04F1364BE6E3C31F949A72333
319 files
OFF6a7fdfa1818951d5351f0fa21a686d67
BINRoot Entry
BIN䡀䆒䑲
BIN䡀䌏䈯
BIN䡀䈖䌧䠤
BIN䡀䌋䄱䜵
BIN䡀㬿䏲䐸䖱
BIN䡀㽿䅤䈯䠶
BIN䡀䈏䗤䕸䠨
BIN䡀䈛䌪䗶䜵
BIN䡀䓞䕪䇤䠨
BIN䡀䕙䓲䕨䜷
BIN䈍䄩䏸䞷䄦䠥
DLLScreenConnect.WindowsCredentialProvider.arm64.dll
DLLScreenConnect.WindowsCredentialProvider.dll
EXEScreenConnect.WindowsFileManager.exe
EXE䌋䄱䜵䀾䛬㪌
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
BINRT_MANIFEST
BINID:0002
BINID:1033
BIN䡀䈛㵪䆲䗤䕲
BIN䡀䌍䈵䗦䕲䠼
BIN䡀䒌䓰䑲䑨䠷
BIN䡀䓊㼳䄨䆵䠫
BIN䡀㼿䕷䑬㭪䗤䠤
BIN䡀㼿䕷䑬㹪䒲䠯
BIN䡀㿿䏤䇬䗤䒬䠱
BIN䡀䘌䗶䐲䆊䌷䑲
BIN䆒䑲㭾䉨䘤䗯䆒䑲
BIN䡀䈜䙵䆬㬨䑲䌩䠪
BIN䡀䈜䙵䆬㬨䑲䕷䏲
BIN䡀䈜䙵䆬㲨䖱䄷䏯
BIN䡀䄕䑸䋦䒌䇱䗬䒬䠱
BIN䡀䇊䌰㾱㼒䔨䈸䆱䠨
BIN䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
BIN䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
BIN䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
BIN䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
BIN䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
EXE䌋䄱䜵㬾䖸䒷㪰䗦䒬㵱䅬䄵䜵
Structure
DLLMicrosoft.Deployment.WindowsInstaller.dll
BIN.Net Resources
BINMicrosoft.Deployment.WindowsInstaller.Errors.resources
DLLMicrosoft.Deployment.WindowsInstaller.Package.dll
DLLScreenConnect.Core.dll
DLLScreenConnect.Windows.dll
DLLScreenConnect.WindowsInstaller.dll
DLLMicrosoft.Deployment.Compression.dll
DLLMicrosoft.Deployment.Compression.Cab.dll
BINCustomAction.config
P7B[Authenticode]_26fcaf39.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
BINRT_MANIFEST
BINID:0002
BINID:1033
BINDigitalSignature
BINSummaryInformation
BINMsiDigitalSignatureEx
DLLScreenConnect.InstallerActions.dll
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:0
DLLMicrosoft.Deployment.WindowsInstaller.dll
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BIN.Net Resources
BINMicrosoft.Deployment.WindowsInstaller.Errors.resources
DLLMicrosoft.Deployment.WindowsInstaller.Package.dll
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:0
DLLScreenConnect.Core.dll
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:0
P7B[Authenticode]_f82a8b94.p7b
DLLScreenConnect.Windows.dll
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BIN.Net Resources
DLLScreenConnect.Properties.libwebp.x64.dll
Structure
DLLScreenConnect.Properties.libwebp.x86.dll
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLScreenConnect.Properties.libz.x64.dll
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:1036
DLLScreenConnect.Properties.libz.x86.dll
Structure
DLLScreenConnect.Properties.libzstd.x64.dll
Structure
DLLScreenConnect.Properties.libzstd.x86.dll
Structure
P7B[Authenticode]_6e521e0c.p7b
DLLScreenConnect.WindowsInstaller.dll
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:0
DLLMicrosoft.Deployment.Compression.dll
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:0
DLLMicrosoft.Deployment.Compression.Cab.dll
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BIN.Net Resources
BINMicrosoft.Deployment.Compression.Cab.Errors.resources
BINCustomAction.config
DLLScreenConnect.Client.dll
Structure
P7B[Authenticode]_a2526362.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BIN.Net Resources
IMGScreenConnect.Properties.ApplicationIcon16.png
IMGScreenConnect.Properties.ApplicationIcon16.png-preview.png
IMGScreenConnect.Properties.ApplicationIcon256.png
IMGScreenConnect.Properties.ApplicationIcon256.png-preview.png
IMGScreenConnect.Properties.ApplicationIcon32.png
IMGScreenConnect.Properties.ApplicationIcon32.png-preview.png
IMGScreenConnect.Properties.ApplicationIcon48.png
IMGScreenConnect.Properties.ApplicationIcon48.png-preview.png
IMGScreenConnect.Properties.ApplicationIconBlank16.png
IMGScreenConnect.Properties.ApplicationIconBlank16.png-preview.png
IMGScreenConnect.Properties.ApplicationIconMac22.png
IMGScreenConnect.Properties.ApplicationIconMac22.png-preview.png
IMGScreenConnect.Properties.ApplicationIconTitle16.png
IMGScreenConnect.Properties.ApplicationIconTitle16.png-preview.png
IMGScreenConnect.Properties.BlankMonitorBackgroundImage.png
IMGScreenConnect.Properties.BlankMonitorBackgroundImage.png-preview.png
IMGScreenConnect.Properties.CommandChangeFolder.png
IMGScreenConnect.Properties.CommandChangeFolder.png-preview.png
IMGScreenConnect.Properties.CommandClearAnnotations.png
IMGScreenConnect.Properties.CommandClearAnnotations.png-preview.png
IMGScreenConnect.Properties.CommandClose.png
IMGScreenConnect.Properties.CommandClose.png-preview.png
IMGScreenConnect.Properties.CommandDisconnectParticipant.png
IMGScreenConnect.Properties.CommandDisconnectParticipant.png-preview.png
IMGScreenConnect.Properties.CommandDockControlPanel.png
IMGScreenConnect.Properties.CommandDockControlPanel.png-preview.png
IMGScreenConnect.Properties.CommandManageCredentialsClearCredentials.png
IMGScreenConnect.Properties.CommandManageCredentialsClearCredentials.png-preview.png
IMGScreenConnect.Properties.CommandManageCredentialsPromptForStorage.png
IMGScreenConnect.Properties.CommandManageCredentialsPromptForStorage.png-preview.png
IMGScreenConnect.Properties.CommandManageCredentialsSendToScreen.png
IMGScreenConnect.Properties.CommandManageCredentialsSendToScreen.png-preview.png
IMGScreenConnect.Properties.CommandManageSharedToolbox.png
IMGScreenConnect.Properties.CommandManageSharedToolbox.png-preview.png
IMGScreenConnect.Properties.CommandMaximize.png
IMGScreenConnect.Properties.CommandMaximize.png-preview.png
IMGScreenConnect.Properties.CommandMinimize.png
IMGScreenConnect.Properties.CommandMinimize.png-preview.png
IMGScreenConnect.Properties.CommandMuteMicrophoneFalse.png
IMGScreenConnect.Properties.CommandMuteMicrophoneFalse.png-preview.png
IMGScreenConnect.Properties.CommandMuteMicrophoneTrue.png
IMGScreenConnect.Properties.CommandMuteMicrophoneTrue.png-preview.png
IMGScreenConnect.Properties.CommandMuteSpeakersFalse.png
IMGScreenConnect.Properties.CommandMuteSpeakersFalse.png-preview.png
IMGScreenConnect.Properties.CommandMuteSpeakersTrue.png
IMGScreenConnect.Properties.CommandMuteSpeakersTrue.png-preview.png
IMGScreenConnect.Properties.CommandOpenFolder.png
IMGScreenConnect.Properties.CommandOpenFolder.png-preview.png
IMGScreenConnect.Properties.CommandOpenMonitor.png
IMGScreenConnect.Properties.CommandOpenMonitor.png-preview.png
IMGScreenConnect.Properties.CommandPauseSharingMyDesktopFalse.png
IMGScreenConnect.Properties.CommandPauseSharingMyDesktopFalse.png-preview.png
IMGScreenConnect.Properties.CommandPauseSharingMyDesktopTrue.png
IMGScreenConnect.Properties.CommandPauseSharingMyDesktopTrue.png-preview.png
IMGScreenConnect.Properties.CommandRebootToNormalMode.png
IMGScreenConnect.Properties.CommandRebootToNormalMode.png-preview.png
IMGScreenConnect.Properties.CommandRebootToSafeMode.png
IMGScreenConnect.Properties.CommandRebootToSafeMode.png-preview.png
IMGScreenConnect.Properties.CommandReceiveFiles.png
IMGScreenConnect.Properties.CommandReceiveFiles.png-preview.png
IMGScreenConnect.Properties.CommandReceiveFolder.png
IMGScreenConnect.Properties.CommandReceiveFolder.png-preview.png
IMGScreenConnect.Properties.CommandRegenerateParticipantColor.png
IMGScreenConnect.Properties.CommandRegenerateParticipantColor.png-preview.png
IMGScreenConnect.Properties.CommandRequestParticipantShare.png
IMGScreenConnect.Properties.CommandRequestParticipantShare.png-preview.png
IMGScreenConnect.Properties.CommandReshareMyDesktop.png
IMGScreenConnect.Properties.CommandReshareMyDesktop.png-preview.png
IMGScreenConnect.Properties.CommandRestore.png
IMGScreenConnect.Properties.CommandRestore.png-preview.png
IMGScreenConnect.Properties.CommandSelectAnnotationModeAllDraw.png
IMGScreenConnect.Properties.CommandSelectAnnotationModeAllDraw.png-preview.png
IMGScreenConnect.Properties.CommandSelectAnnotationModeHostDraw.png
IMGScreenConnect.Properties.CommandSelectAnnotationModeHostDraw.png-preview.png
IMGScreenConnect.Properties.CommandSelectAnnotationModeInvisible.png
IMGScreenConnect.Properties.CommandSelectAnnotationModeInvisible.png-preview.png
IMGScreenConnect.Properties.CommandSelectAnnotationModeViewOnly.png
IMGScreenConnect.Properties.CommandSelectAnnotationModeViewOnly.png-preview.png
IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessMedium.png
IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessMedium.png-preview.png
IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessThick.png
IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessThick.png-preview.png
IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessThin.png
IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessThin.png-preview.png
IMGScreenConnect.Properties.CommandSelectAnnotationToolEllipse.png
IMGScreenConnect.Properties.CommandSelectAnnotationToolEllipse.png-preview.png
IMGScreenConnect.Properties.CommandSelectAnnotationToolLine.png
IMGScreenConnect.Properties.CommandSelectAnnotationToolLine.png-preview.png
IMGScreenConnect.Properties.CommandSelectAnnotationToolRectangle.png
IMGScreenConnect.Properties.CommandSelectAnnotationToolRectangle.png-preview.png
IMGScreenConnect.Properties.CommandSelectHelperHighlightToolCross.png
IMGScreenConnect.Properties.CommandSelectHelperHighlightToolCross.png-preview.png
IMGScreenConnect.Properties.CommandSelectHelperHighlightToolLasso.png
IMGScreenConnect.Properties.CommandSelectHelperHighlightToolLasso.png-preview.png
IMGScreenConnect.Properties.CommandSelectHelperHighlightToolNone.png
IMGScreenConnect.Properties.CommandSelectHelperHighlightToolNone.png-preview.png
IMGScreenConnect.Properties.CommandSelectQualityHigh.png
IMGScreenConnect.Properties.CommandSelectQualityHigh.png-preview.png
IMGScreenConnect.Properties.CommandSelectQualityLow.png
IMGScreenConnect.Properties.CommandSelectQualityLow.png-preview.png
IMGScreenConnect.Properties.CommandSelectQualityMedium.png
IMGScreenConnect.Properties.CommandSelectQualityMedium.png-preview.png
IMGScreenConnect.Properties.CommandSelectSharePrinterModeAll.png
IMGScreenConnect.Properties.CommandSelectSharePrinterModeAll.png-preview.png
IMGScreenConnect.Properties.CommandSelectSharePrinterModeDefaultOnly.png
IMGScreenConnect.Properties.CommandSelectSharePrinterModeDefaultOnly.png-preview.png
IMGScreenConnect.Properties.CommandSelectSharePrinterModeNone.png
IMGScreenConnect.Properties.CommandSelectSharePrinterModeNone.png-preview.png
IMGScreenConnect.Properties.CommandSelectSoundCaptureModeAllMicrophones.png
IMGScreenConnect.Properties.CommandSelectSoundCaptureModeAllMicrophones.png-preview.png
IMGScreenConnect.Properties.CommandSelectSoundCaptureModeHostMicrophone.png
IMGScreenConnect.Properties.CommandSelectSoundCaptureModeHostMicrophone.png-preview.png
IMGScreenConnect.Properties.CommandSelectSoundCaptureModeSilent.png
IMGScreenConnect.Properties.CommandSelectSoundCaptureModeSilent.png-preview.png
IMGScreenConnect.Properties.CommandSelectSoundCaptureModeSpeakers.png
IMGScreenConnect.Properties.CommandSelectSoundCaptureModeSpeakers.png-preview.png
IMGScreenConnect.Properties.CommandSendClipboardKeystrokes.png
IMGScreenConnect.Properties.CommandSendClipboardKeystrokes.png-preview.png
IMGScreenConnect.Properties.CommandSendFiles.png
IMGScreenConnect.Properties.CommandSendFiles.png-preview.png
IMGScreenConnect.Properties.CommandSendFolder.png
IMGScreenConnect.Properties.CommandSendFolder.png-preview.png
IMGScreenConnect.Properties.CommandSendMessage.png
IMGScreenConnect.Properties.CommandSendMessage.png-preview.png
IMGScreenConnect.Properties.CommandSendSystemKeyCode.png
IMGScreenConnect.Properties.CommandSendSystemKeyCode.png-preview.png
IMGScreenConnect.Properties.CommandShareMyDesktop.png
IMGScreenConnect.Properties.CommandShareMyDesktop.png-preview.png
IMGScreenConnect.Properties.CommandSplitMonitors.png
IMGScreenConnect.Properties.CommandSplitMonitors.png-preview.png
IMGScreenConnect.Properties.CommandStopParticipantShare.png
IMGScreenConnect.Properties.CommandStopParticipantShare.png-preview.png
IMGScreenConnect.Properties.CommandTakeScreenshotToClipboard.png
IMGScreenConnect.Properties.CommandTakeScreenshotToClipboard.png-preview.png
IMGScreenConnect.Properties.CommandTakeScreenshotToFile.png
IMGScreenConnect.Properties.CommandTakeScreenshotToFile.png-preview.png
IMGScreenConnect.Properties.CommandUndockControlPanel.png
IMGScreenConnect.Properties.CommandUndockControlPanel.png-preview.png
IMGScreenConnect.Properties.CommandVideoRecord.png
IMGScreenConnect.Properties.CommandVideoRecord.png-preview.png
IMGScreenConnect.Properties.ControlPanelAnnotation.png
IMGScreenConnect.Properties.ControlPanelAnnotation.png-preview.png
IMGScreenConnect.Properties.ControlPanelEssentials.png
IMGScreenConnect.Properties.ControlPanelEssentials.png-preview.png
IMGScreenConnect.Properties.ControlPanelFileTransfer.png
IMGScreenConnect.Properties.ControlPanelFileTransfer.png-preview.png
IMGScreenConnect.Properties.ControlPanelHelper.png
IMGScreenConnect.Properties.ControlPanelHelper.png-preview.png
IMGScreenConnect.Properties.ControlPanelMessages.png
IMGScreenConnect.Properties.ControlPanelMessages.png-preview.png
IMGScreenConnect.Properties.ControlPanelParticipants.png
IMGScreenConnect.Properties.ControlPanelParticipants.png-preview.png
IMGScreenConnect.Properties.ControlPanelScreenCapture.png
IMGScreenConnect.Properties.ControlPanelScreenCapture.png-preview.png
IMGScreenConnect.Properties.ControlPanelShare.png
IMGScreenConnect.Properties.ControlPanelShare.png-preview.png
IMGScreenConnect.Properties.ControlPanelSound.png
IMGScreenConnect.Properties.ControlPanelSound.png-preview.png
IMGScreenConnect.Properties.ControlPanelStatus.png
IMGScreenConnect.Properties.ControlPanelStatus.png-preview.png
IMGScreenConnect.Properties.ControlPanelToolbox.png
IMGScreenConnect.Properties.ControlPanelToolbox.png-preview.png
IMGScreenConnect.Properties.ControlPanelView.png
IMGScreenConnect.Properties.ControlPanelView.png-preview.png
IMGScreenConnect.Properties.DropDownGlyph.png
IMGScreenConnect.Properties.DropDownGlyph.png-preview.png
IMGScreenConnect.Properties.FeedbackBannerLogo.png
IMGScreenConnect.Properties.FeedbackBannerLogo.png-preview.png
IMGScreenConnect.Properties.HostClientOptions.png
IMGScreenConnect.Properties.HostClientOptions.png-preview.png
IMGScreenConnect.Properties.MovableGrid.png
IMGScreenConnect.Properties.MovableGrid.png-preview.png
IMGScreenConnect.Properties.NotificationOptionsIcon.png
IMGScreenConnect.Properties.NotificationOptionsIcon.png-preview.png
IMGScreenConnect.Properties.ParticipantAnnotating.png
IMGScreenConnect.Properties.ParticipantAnnotating.png-preview.png
IMGScreenConnect.Properties.ParticipantCapturing.png
IMGScreenConnect.Properties.ParticipantCapturing.png-preview.png
IMGScreenConnect.Properties.ParticipantGuest.png
IMGScreenConnect.Properties.ParticipantGuest.png-preview.png
IMGScreenConnect.Properties.ParticipantHost.png
IMGScreenConnect.Properties.ParticipantHost.png-preview.png
IMGScreenConnect.Properties.ParticipantMicrophone.png
IMGScreenConnect.Properties.ParticipantMicrophone.png-preview.png
IMGScreenConnect.Properties.ParticipantMicrophoneSending.png
IMGScreenConnect.Properties.ParticipantMicrophoneSending.png-preview.png
IMGScreenConnect.Properties.ParticipantRequesting.png
IMGScreenConnect.Properties.ParticipantRequesting.png-preview.png
IMGScreenConnect.Properties.ParticipantSendingInput.png
IMGScreenConnect.Properties.ParticipantSendingInput.png-preview.png
IMGScreenConnect.Properties.ParticipantSpeakers.png
IMGScreenConnect.Properties.ParticipantSpeakers.png-preview.png
IMGScreenConnect.Properties.ParticipantSpeakersSending.png
IMGScreenConnect.Properties.ParticipantSpeakersSending.png-preview.png
IMGScreenConnect.Properties.PlaceholderImageHeadlessGuest.png
IMGScreenConnect.Properties.PlaceholderImageHeadlessGuest.png-preview.png
IMGScreenConnect.Properties.Resolutions.png
IMGScreenConnect.Properties.Resolutions.png-preview.png
IMGScreenConnect.Properties.SelectedSign.png
IMGScreenConnect.Properties.SelectedSign.png-preview.png
IMGScreenConnect.Properties.ShareGlyph.png
IMGScreenConnect.Properties.ShareGlyph.png-preview.png
IMGScreenConnect.Properties.ShareMask.png
IMGScreenConnect.Properties.ShareMask.png-preview.png
IMGScreenConnect.Properties.StatusGlyphBlankMonitor.png
IMGScreenConnect.Properties.StatusGlyphBlankMonitor.png-preview.png
IMGScreenConnect.Properties.StatusGlyphGuestAndHostConnected.png
IMGScreenConnect.Properties.StatusGlyphGuestAndHostConnected.png-preview.png
IMGScreenConnect.Properties.StatusGlyphGuestNotConnected.png
IMGScreenConnect.Properties.StatusGlyphGuestNotConnected.png-preview.png
IMGScreenConnect.Properties.StatusGlyphMask.png
IMGScreenConnect.Properties.StatusGlyphMask.png-preview.png
IMGScreenConnect.Properties.ToolTip.png
IMGScreenConnect.Properties.ToolTip.png-preview.png
CURScreenConnect.Properties.Lasso.cur
DLLScreenConnect.ClientService.dll
Structure
P7B[Authenticode]_ebb64643.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:0
DLLScreenConnect.WindowsAuthenticationPackage.dll
Structure
P7B[Authenticode]_5a461ecd.p7b
BINResources
BINRT_MANIFEST
BINID:0002
BINID:1033
EXEScreenConnect.WindowsBackstageShell.exe
Structure
P7B[Authenticode]_ac7e80bf.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BINRT_MANIFEST
BINID:0001
BINID:0
BINScreenConnect.WindowsBackstageShell.exe.config
EXEScreenConnect.WindowsClient.exe
DLLScreenConnect.WindowsCredentialProvider.arm64.dll
DLLScreenConnect.WindowsCredentialProvider.dll
EXEScreenConnect.WindowsFileManager.exe
BINServiceExeWithoutService
BINClient.en-US.resources
BINClient.resources
BINsystem.config
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 10
STICH kept: 1secondary ignored: 9
bin
8img
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
ole:doc>pe:dll>pe:dll
Shape
ole:doc>pe:dll>pe:dll
3 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential319 files
OFF6a7fdfa1818951d5351f0fa21a686d67
BINRoot Entry
DLLScreenConnect.InstallerActions.dll
DLLMicrosoft.Deployment.WindowsInstaller.dll
DLLMicrosoft.Deployment.WindowsInstaller.Package.dll
DLLScreenConnect.Core.dll
DLLScreenConnect.Windows.dll
DLLScreenConnect.WindowsInstaller.dll
DLLMicrosoft.Deployment.Compression.dll
DLLMicrosoft.Deployment.Compression.Cab.dll
BINCustomAction.config
DLLScreenConnect.Client.dll
DLLScreenConnect.ClientService.dll
DLLScreenConnect.WindowsAuthenticationPackage.dll
EXEScreenConnect.WindowsBackstageShell.exe
BINScreenConnect.WindowsBackstageShell.exe.config
EXEScreenConnect.WindowsClient.exe
DLLScreenConnect.WindowsCredentialProvider.arm64.dll
DLLScreenConnect.WindowsCredentialProvider.dll
EXEScreenConnect.WindowsFileManager.exe
BINServiceExeWithoutService
BINClient.en-US.resources
BINClient.resources
BINsystem.config
No malware configuration was found at this point.
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
6a7fdfa1818951d5351f0fa21a686d67 › Root Entry › 䌋䄱䜵㬾䖸䒷㪰䗦䒬㵱䅬䄵䜵 › Microsoft.Deployment.WindowsInstaller.dll
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account