Suspicious
Suspect

6bbad86913af193dd94cdf9ad18c092d

ZIP Archive
|
MD5: 6bbad86913af193dd94cdf9ad18c092d
|
Size: 9.55 MB
|
application/zip

Print
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
6bbad86913af193dd94cdf9ad18c092d
Sha1
c64b3f44013b73c630d1023d262155f9928eb9b0
Sha256
0257d72ef185a6d18770b520cff3b203e42fd380aa809bb914a44a2821787b8e
Sha384
791cf3f41aaf5a0d04fb17983754b6a965d1311fc28f7afca24f2a6047547e7b3b6f78219f6a5515a0e3ccb0f4989606
Sha512
d204b20a2481246210f339924eefaa3fd1ad882f1e3c378c360ba61579e232b48a610c7c05a49d9de1676cddbfcbc0b8d5c5f2041a13dd3a2bb76a4bb942df40
SSDeep
196608:w9bD5+uWL63x+mb2ZYYL+IPVmzOcLqnDXBLmWUYQrpyhGpDHC0dzBGSc96PZ8ms:WML63Mmb21ChOnn7FUNyhGprLz0wh8/
TLSH
96A633E0F1846FC1E121C83153F490A5EADE1CA6B0D3ECB678131B9E6593AF3A79E445
File Structure
6bbad86913af193dd94cdf9ad18c092d
node_modules.asar
_asyncio.pyd
[Authenticode]_6a790d7a.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
AsyncioD
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0002
ID:1033
_ctypes.pyd
[Authenticode]_d4aa0651.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
_hashlib.pyd
[Authenticode]_90656dda.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
_multiprocessing.pyd
[Authenticode]_504b47a3.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
_overlapped.pyd
[Authenticode]_c39eadc1.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
_queue.pyd
[Authenticode]_eb57d206.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
libffi-8.dll
[Authenticode]_398cf2a2.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
NVDisplay.Container.exe
[Authenticode]_e372a716.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:1033-preview.png
ID:0008
ID:1033
ID:0009
ID:1033
ID:000A
ID:1033
ID:000B
ID:1033
ID:000C
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
python.cat
python3.dll
[Authenticode]_c359baad.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
Resources
RT_VERSION
ID:0001
ID:1033
python315._pth
python315.dll
[Authenticode]_ef60a8cc.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
PyRuntim
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
python315.zip
abc.pyc
annotationlib.pyc
antigravity.pyc
argparse.pyc
ast.pyc
base64.pyc
bdb.pyc
bisect.pyc
bz2.pyc
calendar.pyc
cmd.pyc
code.pyc
codecs.pyc
codeop.pyc
colorsys.pyc
compileall.pyc
configparser.pyc
contextlib.pyc
contextvars.pyc
copy.pyc
copyreg.pyc
cProfile.pyc
csv.pyc
dataclasses.pyc
datetime.pyc
decimal.pyc
difflib.pyc
dis.pyc
doctest.pyc
enum.pyc
filecmp.pyc
fileinput.pyc
fnmatch.pyc
fractions.pyc
ftplib.pyc
functools.pyc
genericpath.pyc
getopt.pyc
getpass.pyc
gettext.pyc
glob.pyc
graphlib.pyc
gzip.pyc
hashlib.pyc
heapq.pyc
hmac.pyc
imaplib.pyc
inspect.pyc
io.pyc
ipaddress.pyc
keyword.pyc
linecache.pyc
locale.pyc
lzma.pyc
mailbox.pyc
mimetypes.pyc
modulefinder.pyc
netrc.pyc
ntpath.pyc
nturl2path.pyc
numbers.pyc
opcode.pyc
operator.pyc
optparse.pyc
os.pyc
pdb.pyc
pickle.pyc
pickletools.pyc
pkgutil.pyc
platform.pyc
plistlib.pyc
poplib.pyc
posixpath.pyc
pprint.pyc
profile.pyc
pstats.pyc
pty.pyc
pyclbr.pyc
pydoc.pyc
py_compile.pyc
queue.pyc
quopri.pyc
random.pyc
reprlib.pyc
rlcompleter.pyc
runpy.pyc
sched.pyc
secrets.pyc
selectors.pyc
shelve.pyc
shlex.pyc
shutil.pyc
signal.pyc
site.pyc
smtplib.pyc
socket.pyc
socketserver.pyc
ssl.pyc
stat.pyc
statistics.pyc
stringprep.pyc
struct.pyc
subprocess.pyc
symtable.pyc
tabnanny.pyc
tarfile.pyc
tempfile.pyc
textwrap.pyc
this.pyc
threading.pyc
timeit.pyc
token.pyc
tokenize.pyc
trace.pyc
traceback.pyc
tracemalloc.pyc
tty.pyc
types.pyc
typing.pyc
uuid.pyc
warnings.pyc
wave.pyc
weakref.pyc
webbrowser.pyc
zipapp.pyc
zipimport.pyc
_aix_support.pyc
_android_support.pyc
_apple_support.pyc
_ast_unparse.pyc
_collections_abc.pyc
_colorize.pyc
_compat_pickle.pyc
_ios_support.pyc
_markupbase.pyc
_opcode_metadata.pyc
_osx_support.pyc
_pydatetime.pyc
_pydecimal.pyc
_pyio.pyc
_pylong.pyc
_py_abc.pyc
_py_warnings.pyc
_sitebuiltins.pyc
_strptime.pyc
_threading_local.pyc
_weakrefset.pyc
__future__.pyc
__hello__.pyc
asyncio
base_events.pyc
base_futures.pyc
base_subprocess.pyc
base_tasks.pyc
constants.pyc
coroutines.pyc
events.pyc
exceptions.pyc
format_helpers.pyc
futures.pyc
graph.pyc
locks.pyc
log.pyc
mixins.pyc
proactor_events.pyc
protocols.pyc
queues.pyc
runners.pyc
selector_events.pyc
sslproto.pyc
staggered.pyc
streams.pyc
subprocess.pyc
taskgroups.pyc
tasks.pyc
threads.pyc
timeouts.pyc
tools.pyc
transports.pyc
trsock.pyc
unix_events.pyc
windows_events.pyc
windows_utils.pyc
__init__.pyc
__main__.pyc
collections
__init__.pyc
compression
bz2.pyc
gzip.pyc
lzma.pyc
zlib.pyc
__init__.pyc
zstd
_zstdfile.pyc
__init__.pyc
_common
_streams.pyc
__init__.pyc
concurrent
__init__.pyc
futures
interpreter.pyc
process.pyc
thread.pyc
_base.pyc
__init__.pyc
interpreters
_crossinterp.pyc
_queues.pyc
__init__.pyc
ctypes
util.pyc
wintypes.pyc
_aix.pyc
_endian.pyc
_layout.pyc
__init__.pyc
macholib
dyld.pyc
dylib.pyc
fetch_macholib
fetch_macholib.bat
framework.pyc
README.ctypes
__init__.pyc
curses
ascii.pyc
has_key.pyc
panel.pyc
textpad.pyc
__init__.pyc
dbm
dumb.pyc
gnu.pyc
ndbm.pyc
sqlite3.pyc
__init__.pyc
email
architecture.rst
base64mime.pyc
charset.pyc
contentmanager.pyc
encoders.pyc
errors.pyc
feedparser.pyc
generator.pyc
header.pyc
headerregistry.pyc
iterators.pyc
message.pyc
parser.pyc
policy.pyc
quoprimime.pyc
utils.pyc
_encoded_words.pyc
_header_value_parser.pyc
_parseaddr.pyc
_policybase.pyc
__init__.pyc
mime
application.pyc
audio.pyc
base.pyc
image.pyc
message.pyc
multipart.pyc
nonmultipart.pyc
text.pyc
__init__.pyc
encodings
aliases.pyc
ascii.pyc
base64_codec.pyc
big5.pyc
big5hkscs.pyc
bz2_codec.pyc
charmap.pyc
cp037.pyc
cp1006.pyc
cp1026.pyc
cp1125.pyc
cp1140.pyc
cp1250.pyc
cp1251.pyc
cp1252.pyc
cp1253.pyc
cp1254.pyc
cp1255.pyc
cp1256.pyc
cp1257.pyc
cp1258.pyc
cp273.pyc
cp424.pyc
cp437.pyc
cp500.pyc
cp720.pyc
cp737.pyc
cp775.pyc
cp850.pyc
cp852.pyc
cp855.pyc
cp856.pyc
cp857.pyc
cp858.pyc
cp860.pyc
cp861.pyc
cp862.pyc
cp863.pyc
cp864.pyc
cp865.pyc
cp866.pyc
cp869.pyc
cp874.pyc
cp875.pyc
cp932.pyc
cp949.pyc
cp950.pyc
euc_jisx0213.pyc
euc_jis_2004.pyc
euc_jp.pyc
euc_kr.pyc
gb18030.pyc
gb2312.pyc
gbk.pyc
hex_codec.pyc
hp_roman8.pyc
hz.pyc
idna.pyc
iso2022_jp.pyc
iso2022_jp_1.pyc
iso2022_jp_2.pyc
iso2022_jp_2004.pyc
iso2022_jp_3.pyc
iso2022_jp_ext.pyc
iso2022_kr.pyc
iso8859_1.pyc
iso8859_10.pyc
iso8859_11.pyc
iso8859_13.pyc
iso8859_14.pyc
iso8859_15.pyc
iso8859_16.pyc
iso8859_2.pyc
iso8859_3.pyc
iso8859_4.pyc
iso8859_5.pyc
iso8859_6.pyc
iso8859_7.pyc
iso8859_8.pyc
iso8859_9.pyc
johab.pyc
koi8_r.pyc
koi8_t.pyc
koi8_u.pyc
kz1048.pyc
latin_1.pyc
mac_arabic.pyc
mac_croatian.pyc
mac_cyrillic.pyc
mac_farsi.pyc
mac_greek.pyc
mac_iceland.pyc
mac_latin2.pyc
mac_roman.pyc
mac_romanian.pyc
mac_turkish.pyc
mbcs.pyc
oem.pyc
palmos.pyc
ptcp154.pyc
punycode.pyc
quopri_codec.pyc
raw_unicode_escape.pyc
rot_13.pyc
shift_jis.pyc
shift_jisx0213.pyc
shift_jis_2004.pyc
tis_620.pyc
undefined.pyc
unicode_escape.pyc
utf_16.pyc
utf_16_be.pyc
utf_16_le.pyc
utf_32.pyc
utf_32_be.pyc
utf_32_le.pyc
utf_7.pyc
utf_8.pyc
utf_8_sig.pyc
uu_codec.pyc
zlib_codec.pyc
_win_cp_codecs.pyc
__init__.pyc
html
entities.pyc
parser.pyc
__init__.pyc
http
client.pyc
cookiejar.pyc
cookies.pyc
server.pyc
__init__.pyc
importlib
abc.pyc
machinery.pyc
readers.pyc
simple.pyc
util.pyc
_abc.pyc
_bootstrap.pyc
_bootstrap_external.pyc
__init__.pyc
metadata
diagnose.pyc
_adapters.pyc
_collections.pyc
_functools.pyc
_itertools.pyc
_meta.pyc
_text.pyc
_typing.pyc
__init__.pyc
resources
abc.pyc
readers.pyc
simple.pyc
_adapters.pyc
_common.pyc
_functional.pyc
_itertools.pyc
__init__.pyc
json
decoder.pyc
encoder.pyc
scanner.pyc
tool.pyc
__init__.pyc
__main__.pyc
logging
config.pyc
handlers.pyc
__init__.pyc
multiprocessing
connection.pyc
context.pyc
forkserver.pyc
heap.pyc
managers.pyc
pool.pyc
popen_fork.pyc
popen_forkserver.pyc
popen_spawn_posix.pyc
popen_spawn_win32.pyc
process.pyc
queues.pyc
reduction.pyc
resource_sharer.pyc
resource_tracker.pyc
sharedctypes.pyc
shared_memory.pyc
spawn.pyc
synchronize.pyc
util.pyc
__init__.pyc
dummy
connection.pyc
__init__.pyc
pathlib
types.pyc
_local.pyc
_os.pyc
__init__.pyc
profiling
__init__.pyc
sampling
binary_collector.pyc
binary_reader.pyc
cli.pyc
collector.pyc
constants.pyc
errors.pyc
gecko_collector.pyc
heatmap_collector.pyc
opcode_utils.pyc
pstats_collector.pyc
sample.pyc
stack_collector.pyc
string_table.pyc
_child_monitor.pyc
_css_utils.pyc
_format_utils.pyc
_sync_coordinator.pyc
__init__.pyc
__main__.pyc
live_collector
collector.pyc
constants.pyc
display.pyc
trend_tracker.pyc
widgets.pyc
__init__.pyc
_assets
python-logo-only.png
python-logo-only.png-preview.png
tachyon-logo.png
tachyon-logo.png-preview.png
_flamegraph_assets
flamegraph.css
flamegraph.js
flamegraph_template.html
flamegraph_template.html
0x00000563.svg
0x00000563.svg-preview.jpg
0x000007AF.svg
0x000007AF.svg-preview.jpg
0x00000A58.svg
0x00000A58.svg-preview.jpg
0x00000E30.svg
0x0000108D.svg
0x00001566.svg
0x00001566.svg-preview.jpg
0x000018A4.svg
0x000018A4.svg-preview.jpg
_heatmap_assets
heatmap.css
heatmap.js
heatmap_index.js
heatmap_index_template.html
heatmap_pyfile_template.html
heatmap_pyfile_template.html
0x0000037A.svg
0x00000661.svg
0x00000AAC.svg
0x00000AAC.svg-preview.jpg
0x00000D1B.svg
0x00000D1B.svg-preview.jpg
heatmap_shared.js
_shared_assets
base.css
_vendor
d3
7.8.5
d3.min.js
d3-flame-graph
4.1.3
d3-flamegraph-tooltip.min.js
d3-flamegraph.css
d3-flamegraph.min.js
tracing
_utils.pyc
__init__.pyc
__main__.pyc
pydoc_data
module_docs.pyc
topics.pyc
_pydoc.css
__init__.pyc
re
_casefix.pyc
_compiler.pyc
_constants.pyc
_parser.pyc
__init__.pyc
site-packages
README.txt
sqlite3
dbapi2.pyc
dump.pyc
_completer.pyc
__init__.pyc
__main__.pyc
string
templatelib.pyc
__init__.pyc
sysconfig
__init__.pyc
__main__.pyc
tomllib
mypy.ini
_parser.pyc
_re.pyc
_types.pyc
__init__.pyc
unittest
async_case.pyc
case.pyc
loader.pyc
main.pyc
mock.pyc
result.pyc
runner.pyc
signals.pyc
suite.pyc
util.pyc
_log.pyc
__init__.pyc
__main__.pyc
urllib
error.pyc
parse.pyc
request.pyc
response.pyc
robotparser.pyc
__init__.pyc
wsgiref
handlers.pyc
headers.pyc
simple_server.pyc
types.pyc
util.pyc
validate.pyc
__init__.pyc
xml
__init__.pyc
dom
domreg.pyc
expatbuilder.pyc
minicompat.pyc
minidom.pyc
NodeFilter.pyc
pulldom.pyc
xmlbuilder.pyc
__init__.pyc
etree
cElementTree.pyc
ElementInclude.pyc
ElementPath.pyc
ElementTree.pyc
__init__.pyc
parsers
expat.pyc
__init__.pyc
sax
expatreader.pyc
handler.pyc
saxutils.pyc
xmlreader.pyc
_exceptions.pyc
__init__.pyc
xmlrpc
client.pyc
server.pyc
__init__.pyc
zipfile
__init__.pyc
__main__.pyc
_path
glob.pyc
_functools.pyc
__init__.pyc
zoneinfo
_common.pyc
_tzpath.pyc
_zoneinfo.pyc
__init__.pyc
_pyrepl
base_eventqueue.pyc
commands.pyc
completing_reader.pyc
console.pyc
fancy_termios.pyc
historical_reader.pyc
input.pyc
keymap.pyc
main.pyc
mypy.ini
pager.pyc
reader.pyc
readline.pyc
simple_interact.pyc
terminfo.pyc
trace.pyc
types.pyc
unix_console.pyc
unix_eventqueue.pyc
utils.pyc
windows_console.pyc
windows_eventqueue.pyc
_module_completer.pyc
_threading_handler.pyc
__init__.pyc
__main__.pyc
__phello__
spam.pyc
__init__.pyc
ham
eggs.pyc
__init__.pyc
select.pyd
[Authenticode]_f6a96bbf.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
sqlite3.dll
[Authenticode]_d3fea338.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
unicodedata.pyd
[Authenticode]_406e214d.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
vcruntime140.dll
[Authenticode]_87ed8b9b.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
fothk
.rdata
.data
.pdata
_RDATA
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
vcruntime140_1.dll
[Authenticode]_abae8cb4.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
Artefacts
Name
 Value
URLs in VB Code - #1

https://docs.python.org/3/library/datetime.html#format-codes
URLs in VB Code - #2

https://www.python.org/psf/license/
URLs in VB Code - #3

https://peps.python.org/pep-0263/
URLs in VB Code - #4

http://schemas.microsoft.com/SMI/2016/WindowsSettings
URLs in VB Code - #5

http://www.microsoft.com/pkiops/crl/Microsoft%20ID%20Verified%20CS%20EOC%20CA%2001.crl0
URLs in VB Code - #6

http://www.microsoft.com/pkiops/certs/Microsoft%20ID%20Verified%20CS%20EOC%20CA%2001.crt0
URLs in VB Code - #7

http://oneocsp.microsoft.com/ocsp0f
URLs in VB Code - #8

http://www.microsoft.com/pkiops/Docs/Repository.htm0
URLs in VB Code - #9

http://www.microsoft.com/pkiops/crl/Microsoft%20ID%20Verified%20Code%20Signing%20PCA%202021.crl0
URLs in VB Code - #10

http://www.microsoft.com/pkiops/certs/Microsoft%20ID%20Verified%20Code%20Signing%20PCA%202021.crt0
URLs in VB Code - #11

http://oneocsp.microsoft.com/ocsp0
URLs in VB Code - #12

http://www.microsoft.com/pkiops/crl/Microsoft%20Identity%20Verification%20Root%20Certificate%20Authority%202020.crl0
URLs in VB Code - #13

http://www.microsoft.com/pkiops/certs/Microsoft%20Identity%20Verification%20Root%20Certificate%20Authority%202020.crt0
URLs in VB Code - #14

http://www.microsoft.com/pkiops/crl/Microsoft%20Public%20RSA%20Timestamping%20CA%202020.crl0y
URLs in VB Code - #15

http://www.microsoft.com/pkiops/certs/Microsoft%20Public%20RSA%20Timestamping%20CA%202020.crt0
URLs in VB Code - #1

http://ocert.org/advisories/ocert-2011-003.html
6bbad86913af193dd94cdf9ad18c092d (9.55 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙