Suspicious
Suspect

cbed8e21dc0c07068f86b1ba05e06d06

MS Office Document
|
MD5: cbed8e21dc0c07068f86b1ba05e06d06
|
Size: 9.94 MB
|
application/vnd.ms-office

Print
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
cbed8e21dc0c07068f86b1ba05e06d06
Sha1
dc032f1b6fbef21ab7a9b2c21749b96122c67a9d
Sha256
5f16ba61d384be881d409da5e63aa354c0869c3f11f5fe1386b6abb81cc45a41
Sha384
c2a2849aad675f3dffa857e22ab57b808d85f7fab4a07a201b8ec3c4321324c7f2d74a75f025ceed0308c47731e67d60
Sha512
bbe18b64d4750d7c8aa8417a5672cac39af94960db03a9086b3883cf49d4b0eac9033dfda9ee1d358d5c7a913395940296ad337bd4169b65940f98054a49439f
SSDeep
196608:A3DmbAYSBXzkn/9obSXYOBdOT9kEPaXHenuBWppNur+:A3yUbBXzC6nOBdOTPSKpc+
TLSH
08A63378EAE22AD2E947D17D83378B55CA7C4C0C9947001A26F6B0497DBF9263CF4B19
File Structure
cbed8e21dc0c07068f86b1ba05e06d06
Root Entry
䡀䌏䈯
䈯䞨䄦䠥
flskfQNnWK_OCvRcxfSqCyNnIf5LE8
[Authenticode]_813b038c.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
PyRuntim
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0002
ID:1033
fls7XYPJz9nL3UURje33FCJC8qA6SE
abc.pyc
antigravity.pyc
argparse.pyc
ast.pyc
base64.pyc
bdb.pyc
bisect.pyc
bz2.pyc
calendar.pyc
cmd.pyc
code.pyc
codecs.pyc
codeop.pyc
colorsys.pyc
compileall.pyc
configparser.pyc
contextlib.pyc
contextvars.pyc
copy.pyc
copyreg.pyc
cProfile.pyc
csv.pyc
dataclasses.pyc
datetime.pyc
decimal.pyc
difflib.pyc
dis.pyc
doctest.pyc
enum.pyc
filecmp.pyc
fileinput.pyc
fnmatch.pyc
fractions.pyc
ftplib.pyc
functools.pyc
genericpath.pyc
getopt.pyc
getpass.pyc
gettext.pyc
glob.pyc
graphlib.pyc
gzip.pyc
hashlib.pyc
heapq.pyc
hmac.pyc
imaplib.pyc
inspect.pyc
io.pyc
ipaddress.pyc
keyword.pyc
linecache.pyc
locale.pyc
lzma.pyc
mailbox.pyc
mimetypes.pyc
modulefinder.pyc
netrc.pyc
ntpath.pyc
nturl2path.pyc
numbers.pyc
opcode.pyc
operator.pyc
optparse.pyc
os.pyc
pdb.pyc
pickle.pyc
pickletools.pyc
pkgutil.pyc
platform.pyc
plistlib.pyc
poplib.pyc
posixpath.pyc
pprint.pyc
profile.pyc
pstats.pyc
pty.pyc
pyclbr.pyc
pydoc.pyc
py_compile.pyc
queue.pyc
quopri.pyc
random.pyc
reprlib.pyc
rlcompleter.pyc
runpy.pyc
sched.pyc
secrets.pyc
selectors.pyc
shelve.pyc
shlex.pyc
shutil.pyc
signal.pyc
site.pyc
smtplib.pyc
socket.pyc
socketserver.pyc
sre_compile.pyc
sre_constants.pyc
sre_parse.pyc
ssl.pyc
stat.pyc
statistics.pyc
string.pyc
stringprep.pyc
struct.pyc
subprocess.pyc
symtable.pyc
tabnanny.pyc
tarfile.pyc
tempfile.pyc
textwrap.pyc
this.pyc
threading.pyc
timeit.pyc
token.pyc
tokenize.pyc
trace.pyc
traceback.pyc
tracemalloc.pyc
tty.pyc
types.pyc
typing.pyc
uuid.pyc
warnings.pyc
wave.pyc
weakref.pyc
webbrowser.pyc
zipapp.pyc
zipimport.pyc
_aix_support.pyc
_android_support.pyc
_apple_support.pyc
_collections_abc.pyc
_colorize.pyc
_compat_pickle.pyc
_compression.pyc
_ios_support.pyc
_markupbase.pyc
_opcode_metadata.pyc
_osx_support.pyc
_pydatetime.pyc
_pydecimal.pyc
_pyio.pyc
_pylong.pyc
_py_abc.pyc
_sitebuiltins.pyc
_strptime.pyc
_threading_local.pyc
_weakrefset.pyc
__future__.pyc
__hello__.pyc
asyncio
base_events.pyc
base_futures.pyc
base_subprocess.pyc
base_tasks.pyc
constants.pyc
coroutines.pyc
events.pyc
exceptions.pyc
format_helpers.pyc
futures.pyc
locks.pyc
log.pyc
mixins.pyc
proactor_events.pyc
protocols.pyc
queues.pyc
runners.pyc
selector_events.pyc
sslproto.pyc
staggered.pyc
streams.pyc
subprocess.pyc
taskgroups.pyc
tasks.pyc
threads.pyc
timeouts.pyc
transports.pyc
trsock.pyc
unix_events.pyc
windows_events.pyc
windows_utils.pyc
__init__.pyc
__main__.pyc
collections
__init__.pyc
concurrent
__init__.pyc
futures
process.pyc
thread.pyc
_base.pyc
__init__.pyc
ctypes
util.pyc
wintypes.pyc
_aix.pyc
_endian.pyc
__init__.pyc
macholib
dyld.pyc
dylib.pyc
fetch_macholib
fetch_macholib.bat
framework.pyc
README.ctypes
__init__.pyc
curses
ascii.pyc
has_key.pyc
panel.pyc
textpad.pyc
__init__.pyc
dbm
dumb.pyc
gnu.pyc
ndbm.pyc
sqlite3.pyc
__init__.pyc
email
architecture.rst
base64mime.pyc
charset.pyc
contentmanager.pyc
encoders.pyc
errors.pyc
feedparser.pyc
generator.pyc
header.pyc
headerregistry.pyc
iterators.pyc
message.pyc
parser.pyc
policy.pyc
quoprimime.pyc
utils.pyc
_encoded_words.pyc
_header_value_parser.pyc
_parseaddr.pyc
_policybase.pyc
__init__.pyc
mime
application.pyc
audio.pyc
base.pyc
image.pyc
message.pyc
multipart.pyc
nonmultipart.pyc
text.pyc
__init__.pyc
encodings
aliases.pyc
ascii.pyc
base64_codec.pyc
big5.pyc
big5hkscs.pyc
bz2_codec.pyc
charmap.pyc
cp037.pyc
cp1006.pyc
cp1026.pyc
cp1125.pyc
cp1140.pyc
cp1250.pyc
cp1251.pyc
cp1252.pyc
cp1253.pyc
cp1254.pyc
cp1255.pyc
cp1256.pyc
cp1257.pyc
cp1258.pyc
cp273.pyc
cp424.pyc
cp437.pyc
cp500.pyc
cp720.pyc
cp737.pyc
cp775.pyc
cp850.pyc
cp852.pyc
cp855.pyc
cp856.pyc
cp857.pyc
cp858.pyc
cp860.pyc
cp861.pyc
cp862.pyc
cp863.pyc
cp864.pyc
cp865.pyc
cp866.pyc
cp869.pyc
cp874.pyc
cp875.pyc
cp932.pyc
cp949.pyc
cp950.pyc
euc_jisx0213.pyc
euc_jis_2004.pyc
euc_jp.pyc
euc_kr.pyc
gb18030.pyc
gb2312.pyc
gbk.pyc
hex_codec.pyc
hp_roman8.pyc
hz.pyc
idna.pyc
iso2022_jp.pyc
iso2022_jp_1.pyc
iso2022_jp_2.pyc
iso2022_jp_2004.pyc
iso2022_jp_3.pyc
iso2022_jp_ext.pyc
iso2022_kr.pyc
iso8859_1.pyc
iso8859_10.pyc
iso8859_11.pyc
iso8859_13.pyc
iso8859_14.pyc
iso8859_15.pyc
iso8859_16.pyc
iso8859_2.pyc
iso8859_3.pyc
iso8859_4.pyc
iso8859_5.pyc
iso8859_6.pyc
iso8859_7.pyc
iso8859_8.pyc
iso8859_9.pyc
johab.pyc
koi8_r.pyc
koi8_t.pyc
koi8_u.pyc
kz1048.pyc
latin_1.pyc
mac_arabic.pyc
mac_croatian.pyc
mac_cyrillic.pyc
mac_farsi.pyc
mac_greek.pyc
mac_iceland.pyc
mac_latin2.pyc
mac_roman.pyc
mac_romanian.pyc
mac_turkish.pyc
mbcs.pyc
oem.pyc
palmos.pyc
ptcp154.pyc
punycode.pyc
quopri_codec.pyc
raw_unicode_escape.pyc
rot_13.pyc
shift_jis.pyc
shift_jisx0213.pyc
shift_jis_2004.pyc
tis_620.pyc
undefined.pyc
unicode_escape.pyc
utf_16.pyc
utf_16_be.pyc
utf_16_le.pyc
utf_32.pyc
utf_32_be.pyc
utf_32_le.pyc
utf_7.pyc
utf_8.pyc
utf_8_sig.pyc
uu_codec.pyc
zlib_codec.pyc
__init__.pyc
html
entities.pyc
parser.pyc
__init__.pyc
http
client.pyc
cookiejar.pyc
cookies.pyc
server.pyc
__init__.pyc
importlib
abc.pyc
machinery.pyc
readers.pyc
simple.pyc
util.pyc
_abc.pyc
_bootstrap.pyc
_bootstrap_external.pyc
__init__.pyc
metadata
diagnose.pyc
_adapters.pyc
_collections.pyc
_functools.pyc
_itertools.pyc
_meta.pyc
_text.pyc
__init__.pyc
resources
abc.pyc
readers.pyc
simple.pyc
_adapters.pyc
_common.pyc
_functional.pyc
_itertools.pyc
__init__.pyc
json
decoder.pyc
encoder.pyc
scanner.pyc
tool.pyc
__init__.pyc
logging
config.pyc
handlers.pyc
__init__.pyc
multiprocessing
connection.pyc
context.pyc
forkserver.pyc
heap.pyc
managers.pyc
pool.pyc
popen_fork.pyc
popen_forkserver.pyc
popen_spawn_posix.pyc
popen_spawn_win32.pyc
process.pyc
queues.pyc
reduction.pyc
resource_sharer.pyc
resource_tracker.pyc
sharedctypes.pyc
shared_memory.pyc
spawn.pyc
synchronize.pyc
util.pyc
__init__.pyc
dummy
connection.pyc
__init__.pyc
pathlib
_abc.pyc
_local.pyc
__init__.pyc
pydoc_data
topics.pyc
_pydoc.css
__init__.pyc
re
_casefix.pyc
_compiler.pyc
_constants.pyc
_parser.pyc
__init__.pyc
site-packages
README.txt
sqlite3
dbapi2.pyc
dump.pyc
__init__.pyc
__main__.pyc
sysconfig
__init__.pyc
__main__.pyc
tomllib
mypy.ini
_parser.pyc
_re.pyc
_types.pyc
__init__.pyc
unittest
async_case.pyc
case.pyc
loader.pyc
main.pyc
mock.pyc
result.pyc
runner.pyc
signals.pyc
suite.pyc
util.pyc
_log.pyc
__init__.pyc
__main__.pyc
urllib
error.pyc
parse.pyc
request.pyc
response.pyc
robotparser.pyc
__init__.pyc
wsgiref
handlers.pyc
headers.pyc
simple_server.pyc
types.pyc
util.pyc
validate.pyc
__init__.pyc
xml
__init__.pyc
dom
domreg.pyc
expatbuilder.pyc
minicompat.pyc
minidom.pyc
NodeFilter.pyc
pulldom.pyc
xmlbuilder.pyc
__init__.pyc
etree
cElementTree.pyc
ElementInclude.pyc
ElementPath.pyc
ElementTree.pyc
__init__.pyc
parsers
expat.pyc
__init__.pyc
sax
expatreader.pyc
handler.pyc
saxutils.pyc
xmlreader.pyc
_exceptions.pyc
__init__.pyc
xmlrpc
client.pyc
server.pyc
__init__.pyc
zipfile
__init__.pyc
__main__.pyc
_path
glob.pyc
__init__.pyc
zoneinfo
_common.pyc
_tzpath.pyc
_zoneinfo.pyc
__init__.pyc
_pyrepl
base_eventqueue.pyc
commands.pyc
completing_reader.pyc
console.pyc
curses.pyc
fancy_termios.pyc
historical_reader.pyc
input.pyc
keymap.pyc
main.pyc
mypy.ini
pager.pyc
reader.pyc
readline.pyc
simple_interact.pyc
trace.pyc
types.pyc
unix_console.pyc
unix_eventqueue.pyc
utils.pyc
windows_console.pyc
windows_eventqueue.pyc
_minimal_curses.pyc
_threading_handler.pyc
__init__.pyc
__main__.pyc
__phello__
spam.pyc
__init__.pyc
ham
eggs.pyc
__init__.pyc
flsR9.4m5jN5MdjSLeEep8ASet0kIU
[Authenticode]_56613746.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:1033-preview.png
ID:0008
ID:1033
ID:0009
ID:1033
ID:000A
ID:1033
ID:000B
ID:1033
ID:000C
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
flsFGCm.uEMOfdKL95gWH_hkcFgG3s
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.gehcont
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0002
ID:1033
flsA2IIbHUsGewv6UdwlRjcHnVuqmw
[Authenticode]_41dcb56f.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
flsuescDTxDg4SWnO9MltVvfM_3R3w
[Authenticode]_9555bc52.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
flsKZoa2EBBMbD0gY_5pBD2x4NNQ9o
[Authenticode]_b97a28fa.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
flsPDpM5U3Mp.SiZf3dB3CS5ijyS8o
[Authenticode]_87ed8b9b.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
fothk
.rdata
.data
.pdata
_RDATA
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
flsvl2gv5gKsqrMebaQAyFr6KTiFy0
[Authenticode]_abae8cb4.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
flsS.mYIK_p5bq7U6t8pkwk6CL9FlQ
[Authenticode]_5ecc1644.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
flsNWmjbV7sQAluFqhCxAwUe3Cfel4
[Authenticode]_8dcbcf5c.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
flspXOk5VIF7kc25y5ueYxXEDYxe4Y
flstCyu0UCGEJd_JvAj8_beHY6_PpQ
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
flsgiJ_igZmlouph8GsF1OLMC3a7xg
flsBBODHU_FT7A30TDr2md4X9NAF6U
flsGjxU_B532H.Nh0LlcprizQ4GpI0
fls4IXRWyCmANt46ONn8UbMWmNv5sY
flsF7VRqONlADOtEg7imq8llb2VT4k
flsSCLMaxQ2r1zhnh2Z68Ssq1ebLIg
flsJWL01tHzJC5GHcymkfq3HqzJ6oY
flsTIlENKI8Ns3R_OYtrvm1cbB3wo4
flswIegB0L7I2eQa9.I82uAZSwCcS0
flswR65PFvOnVwN1o9k8ypcL8LzyXY
flseieZkIHqlhUi1i4.eHUkj0pQyRY
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
flsUC40rjP_5CWTLY5A8mKT2t.Hk_o
flsSAa4sfrPALDBcaE0u2Kjq3ht0t0
flsLLJaMSyxw20iR72ixvSEXwfcDls
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
flsoIiWrov5kZm9jvNDfFWThlBechE
䡀䈖䌧䠤
䡀㬿䏲䐸䖱
䡀㽿䅤䈯䠶
䡀䈏䗤䕸䠨
䡀䓞䕪䇤䠨
䡀䕙䓲䕨䜷
䡀䌍䈵䗦䕲䠼
䡀䒌䓰䑲䑨䠷
䡀㼿䕷䑬㭪䗤䠤
䡀㼿䕷䑬㹪䒲䠯
䡀㿿䏤䇬䗤䒬䠱
䡀䖖㯬䏬㱨䖤䠫
䡀䘌䗶䐲䆊䌷䑲
䡀䄕䑸䋦䒌䇱䗬䒬䠱
䡀䇊䌰㾱㼒䔨䈸䆱䠨
䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
SummaryInformation
flsW5U5zM8hx4v9B8FgM6ZeQul8sLI
flscsU8T846X8EHaQ.5vRoKWis34KU
[Authenticode]_5a9f4444.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
flsArNY8XbRGyQpfEJPRJ42lKxUcNA
[Authenticode]_0ce938bb.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
flshKs0m7outGfi60oB09ssaqGnH5k
[Authenticode]_53e60048.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
flsk4upmeLA3N4iSOcRC6U7g03.ptk
[Authenticode]_f735b8c8.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
flsc0JGjaTGIc.ZdCRd5kCfLVD1YyM
[Authenticode]_d3dd0c61.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
flsjsVB0b1_wTONFgAlxsegyuWMzxs
[Authenticode]_cf701282.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
flsJBfY7cmqkgEv1Gnb9wPsdHS1xao
[Authenticode]_967c266d.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
flsVFSoo_65Dt8fF9hGupRAdYc2ChY
[Authenticode]_97dbf476.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
flsBPLnEylB6udWLGQxRSCCUycFhXI
[Authenticode]_6aba68e2.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
flssS2wwgCWUjtTDyRsi0ErJArVISo
[Authenticode]_2850e49b.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
flsQErOBlu_TzmdCRsv9kYXGjr0fIU
[Authenticode]_1567503d.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
fls2JPPaqeyvL2Zti81z6ACqyXXaGM
[Authenticode]_b2fc7bcc.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
fls5gbYFGzUtF6y.bykGHEbJMNpDNQ
[Authenticode]_a4caa75d.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
flsybWjf3kSM_WT9Al2qy_qIFU_rKU
[Authenticode]_6ebdd766.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
fls1f69LsOEx6.kaPBc2z8KsCQvukI
[Authenticode]_22d40e6a.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
flsS7dEdTuKY93JPJMwymfP6GWp7y4
[Authenticode]_b2b66376.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
flsSkmFrN5UvxKEZSqKR_Ws9uyo__M
[Authenticode]_c52b50c4.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
flsVOJ02nXmY_m_kmf.fdkuC3YAweM
Xz-inflated
flsaAgIaeaGatSbqkYeI5JP2qtCAmI
[Authenticode]_80d0cb55.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.idata
.00cfg
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
flsqj0PLm8b4PO8D8ouwKsl9uhM9gg
[Authenticode]_398cf2a2.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
flsqz38adYoAfPAnBBlkvjVpef.ibQ
[Authenticode]_1fdfa05c.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.idata
.00cfg
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
flsGiOBTo865S3Pt49Z0gPQJjyTUNo
flsLgowHm3JSXcbHedpUPTq71dO4DI
[Authenticode]_3edfa74d.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
fls3EtT9I3WMuZf7oToH.lWBSzoUms
flscvGuVj7NSqH68sjC2zzYC_1xIaA
[Authenticode]_776e86d6.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:1033-preview.png
ID:0008
ID:1033
ID:0009
ID:1033
ID:000A
ID:1033
ID:000B
ID:1033
ID:000C
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
flsHPt6w62JgR0vm38_51RGiFoTdZw
[Authenticode]_a4c8ce2c.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
Resources
RT_VERSION
ID:0001
ID:1033
flsl3L.LqY.FD41Rgml1I0ue9TISec
flskfQNnWK_OCvRcxfSqCyNnIf5LE8
[Authenticode]_4c100a15.p7b
fls7XYPJz9nL3UURje33FCJC8qA6SE
flsR9.4m5jN5MdjSLeEep8ASet0kIU
flsFGCm.uEMOfdKL95gWH_hkcFgG3s
flsA2IIbHUsGewv6UdwlRjcHnVuqmw
flsuescDTxDg4SWnO9MltVvfM_3R3w
flsKZoa2EBBMbD0gY_5pBD2x4NNQ9o
flsPDpM5U3Mp.SiZf3dB3CS5ijyS8o
flsvl2gv5gKsqrMebaQAyFr6KTiFy0
flsS.mYIK_p5bq7U6t8pkwk6CL9FlQ
flsNWmjbV7sQAluFqhCxAwUe3Cfel4
flspXOk5VIF7kc25y5ueYxXEDYxe4Y
flstCyu0UCGEJd_JvAj8_beHY6_PpQ
flsgiJ_igZmlouph8GsF1OLMC3a7xg
flsBBODHU_FT7A30TDr2md4X9NAF6U
flsGjxU_B532H.Nh0LlcprizQ4GpI0
fls4IXRWyCmANt46ONn8UbMWmNv5sY
flsWfHx09FtpXkoJvsTV3jsAOXY8r4
flsF7VRqONlADOtEg7imq8llb2VT4k
flsJWL01tHzJC5GHcymkfq3HqzJ6oY
flsTIlENKI8Ns3R_OYtrvm1cbB3wo4
flswIegB0L7I2eQa9.I82uAZSwCcS0
flswR65PFvOnVwN1o9k8ypcL8LzyXY
flseieZkIHqlhUi1i4.eHUkj0pQyRY
flsUC40rjP_5CWTLY5A8mKT2t.Hk_o
flsSAa4sfrPALDBcaE0u2Kjq3ht0t0
flsLLJaMSyxw20iR72ixvSEXwfcDls
flsoIiWrov5kZm9jvNDfFWThlBechE
Artefacts
Name
 Value
URLs in VB Code - #1

https://www.python.org/psf/license/
URLs in VB Code - #2

https://peps.python.org/pep-0263/
URLs in VB Code - #3

http://schemas.microsoft.com/SMI/2016/WindowsSettings
URLs in VB Code - #4

http://www.microsoft.com/pkiops/crl/Microsoft%20ID%20Verified%20CS%20AOC%20CA%2002.crl0
URLs in VB Code - #5

http://www.microsoft.com/pkiops/certs/Microsoft%20ID%20Verified%20CS%20AOC%20CA%2002.crt0
URLs in VB Code - #6

http://oneocsp.microsoft.com/ocsp0f
URLs in VB Code - #7

http://www.microsoft.com/pkiops/Docs/Repository.htm0
URLs in VB Code - #8

http://www.microsoft.com/pkiops/crl/Microsoft%20ID%20Verified%20Code%20Signing%20PCA%202021.crl0
URLs in VB Code - #9

http://www.microsoft.com/pkiops/certs/Microsoft%20ID%20Verified%20Code%20Signing%20PCA%202021.crt0
URLs in VB Code - #10

http://oneocsp.microsoft.com/ocsp0
URLs in VB Code - #11

http://www.microsoft.com/pkiops/crl/Microsoft%20Identity%20Verification%20Root%20Certificate%20Authority%202020.crl0
URLs in VB Code - #12

http://www.microsoft.com/pkiops/certs/Microsoft%20Identity%20Verification%20Root%20Certificate%20Authority%202020.crt0
URLs in VB Code - #13

http://www.microsoft.com/pkiops/crl/Microsoft%20Public%20RSA%20Timestamping%20CA%202020.crl0y
URLs in VB Code - #14

http://www.microsoft.com/pkiops/certs/Microsoft%20Public%20RSA%20Timestamping%20CA%202020.crt0
PE Layout

MemoryMapped (process dump suspected)
URLs in VB Code - #1

http://ocert.org/advisories/ocert-2011-003.html
URLs in VB Code - #2

https://www.unicode.org/Public/15.1.0/ucd/DerivedCoreProperties.txt
cbed8e21dc0c07068f86b1ba05e06d06 (9.94 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙