Suspicious
Suspect
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
cfda340fa82d1b5f33cf82ae5070fbf4
Sha1
1702b75976ef12eca324e341f91d90643bb3568e
Sha256
37f2c4607a1fad32eda76af2514588cd704b5d5ee83ceb93c14bf10b33c1c8f3
Sha384
08e4d1a9d41b79927b9f3db88eb09ea2dade65127fa755da175dba7cd392bab011fb9892ccd5c75d65920127285e62d5
Sha512
39d973a72c97eee42d14f603b4f22a593fa647a24389c7025624d58ffc079d40676c0a41d6191531c6acd72af0a86f6402eb3a898a60ef56d3ce6548585ae17c
SSDeep
98304:iaI+R+g7rDoHeQufnPW/X423wED86HWKFIIKU5ctwAnlOAs2s6:iArDo+pfe/o2CKWKFRl5MW/6
TLSH
BD360115B6940CADD8E64235846EF115AE32380D273C86DB4E767DF83E26ED0A37A7C1
File Structure
cfda340fa82d1b5f33cf82ae5070fbf4
Root Entry
䡀䆒䑲
䡀䌏䈯
䡀䈖䌧䠤
䡀䌋䄱䜵
䡀䕎䒵䠵
䡀㬿䏲䐸䖱
䡀㽿䅤䈯䠶
䡀䈏䗤䕸䠨
䡀䓞䕪䇤䠨
䡀䕙䓲䕨䜷
䡀䆊䌷䑲䈝䗻
䡀䈛䒰䈹䌏䈯
䡀䌍䈵䗦䕲䠼
䡀䒌䓰䑲䑨䠷
䡀㼿䕷䑬㭪䗤䠤
䡀㼿䕷䑬㹪䒲䠯
䡀㿿䏤䇬䗤䒬䠱
䡀䕌䄨䈷䒏䇯䕨
䡀䖖㯬䏬㱨䖤䠫
䡀䘌䗶䐲䆊䌷䑲
䡀䈜䙵䆬㬨䑲䕷䏲
䡀䈜䙵䆬㲨䖱䄷䏯
䆒䑲䄾䓳䌿䒦䞱䆬䠲
䡀䄕䑸䋦䒌䇱䗬䒬䠱
䡀䇊䌰㾱㼒䔨䈸䆱䠨
䡀䌠㤻䈜䘦䈵䅘䈭䗦
䡀䖖㼬䕨䌹䈦䒌䉱䊬
㭙㬚䑲䈱䗦䊊䑨䞷䄦䠥
pdqconnectagent
[Authenticode]_10d56499.p7b
䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
䡀䌠㤻䈜䙵䆬㬨䑲䌩䠪
䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
䌋䄱䜵䀾䛬㾄䌷㬯䟊㦡䠄
[Authenticode]_01c785c2.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
_RDATA
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0002
ID:1033
䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
䌋䄱䜵㭾䏨䗨㮨䈹䗱㯿䏬䠨
Overlay_ab461878.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
ID:1033
䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
DigitalSignature
SummaryInformation
䌋䄱䜵䀾䛬䋜䕤䟳䑒䗬䘛䗱䐬䟨䆊䌷䑲㯿䏬䠨
Overlay_1017173f.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
LICENSE.html
pdqconnectagent
[Authenticode]_03d267de.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_MESSAGETABLE
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
pdqconnectagent-setup.exe
[Authenticode]_a04b381f.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0001
ID:0
CustomAction.config
pdqconnectagent-setup.pdb
WixSharp.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
WixSharp.Nsis.macros.nsh
WixSharp.Bootstrapper.runtime.win_x86.mbanative.dll
[Authenticode]_4888d895.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
WixToolset.Dtf.WindowsInstaller.dll
[Authenticode]_ccc9b5c1.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
WixToolset.Dtf.WindowsInstaller.Errors.resources
Artefacts
Name
 Value
PE Layout

MemoryMapped (process dump suspected)
cfda340fa82d1b5f33cf82ae5070fbf4 (5.11 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙