Suspect
dc8a934f4f41871768641ab0a519ba48
MS Office Document
MD5: dc8a934f4f41871768641ab0a519ba48
Size: 1.57 MB
application/vnd.ms-office
This sample is a 1.5 MB MS Office Document for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 244 embedded or derived files. It matches 14 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- d0ee8d45f788c00f47d3c448d323cadcb4c5747b763f0cb0c8f85a4036818775
- MD5
- dc8a934f4f41871768641ab0a519ba48
- Verdict
- Inconclusive
- File type
- MS Office Document · 1.5 MB
Cite this report: https://app.malva.re/sha256/d0ee8d45f788c00f47d3c448d323cadcb4c5747b763f0cb0c8f85a4036818775
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Microsoft Office Document
Size
1.57 MB · 1,568,768 B
First seen
2026-10-12 18:30 · 13 days ago
Last seen
2026-10-12 18:30 · 13 days ago
Last analysis
2026-10-12 18:30 · 13 days ago
Hashes
MD5
dc8a934f4f41871768641ab0a519ba48
Sha1
3f505134af294d467f8e12e3e589ef32f609364d
Sha256
d0ee8d45f788c00f47d3c448d323cadcb4c5747b763f0cb0c8f85a4036818775
Sha384
9e8c4c35db27880027437e78f4dbae07b6ecb37318e70da8911a763561aba067cbabd3867bb6eb40ac94661fb2af129e
Sha512
73ca71f79ccf7d8a8a20b8328c28debe87cb7bd3611348dca5f13cc61f7740d360fa119fc0e925d17cbc0efa7ebbae8e202b50cedbae3e99f7657db19e4c629b
SSDeep
24576:pZPlmF0uwTKh56Z5vePu/DVeL1pVjeOLnUUGGu/aYmQurhwQUvr:dmh69eWbVypVCYgGu/aYmn1gr
TLSH
BF75012077F88439F6F62B31AE3A95609E3ABD241F71C15E8354391D0DB0A909BB6773
244 files
OFFdc8a934f4f41871768641ab0a519ba48
DLLScreenConnect.Client.dll
DLLScreenConnect.ClientService.dll
DLLScreenConnect.Core.dll
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:0
DLLScreenConnect.Windows.dll
EXEScreenConnect.WindowsClient.exe
BINScreenConnect.WindowsClient.exe.config
BINServiceExeWithoutService
DLLScreenConnect.InstallerActions.dll
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:0
DLLMicrosoft.Deployment.WindowsInstaller.dll
Structure
BIN.Net Resources
BINMicrosoft.Deployment.WindowsInstaller.Errors.resources
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BINCustomAction.config
BINRoot Entry
BIN䡀䆒䑲
BIN䡀䌏䈯
BIN䡀䈖䌧䠤
BIN䡀䌋䄱䜵
BIN䡀䕎䒵䠵
BIN䡀㬿䏲䐸䖱
BIN䡀㽿䅤䈯䠶
BIN䡀䈏䗤䕸䠨
BIN䡀䈛䌪䗶䜵
BIN䡀䓞䕪䇤䠨
BIN䡀䕙䓲䕨䜷
BIN䈍䄩䏸䞷䄦䠥
DLLScreenConnect.Client.dll
Structure
BIN.Net Resources
IMGScreenConnect.Properties.CommandSendWindowSystemCommandClose.png
IMGScreenConnect.Properties.CommandSendWindowSystemCommandClose.png-preview.png
IMGScreenConnect.Properties.CommandSendWindowSystemCommandMinimize.png
IMGScreenConnect.Properties.CommandSendWindowSystemCommandMinimize.png-preview.png
IMGScreenConnect.Properties.CommandSendWindowSystemCommandMaximize.png
IMGScreenConnect.Properties.CommandSendWindowSystemCommandMaximize.png-preview.png
IMGScreenConnect.Properties.CommandUndockControlPanel.png
IMGScreenConnect.Properties.CommandUndockControlPanel.png-preview.png
IMGScreenConnect.Properties.CommandDockControlPanel.png
IMGScreenConnect.Properties.CommandDockControlPanel.png-preview.png
IMGScreenConnect.Properties.ControlPanelView.png
IMGScreenConnect.Properties.ControlPanelView.png-preview.png
IMGScreenConnect.Properties.ControlPanelStatus.png
IMGScreenConnect.Properties.ControlPanelStatus.png-preview.png
IMGScreenConnect.Properties.ControlPanelToolbox.png
IMGScreenConnect.Properties.ControlPanelToolbox.png-preview.png
IMGScreenConnect.Properties.ControlPanelFileTransfer.png
IMGScreenConnect.Properties.ControlPanelFileTransfer.png-preview.png
IMGScreenConnect.Properties.ControlPanelScreenCapture.png
IMGScreenConnect.Properties.ControlPanelScreenCapture.png-preview.png
IMGScreenConnect.Properties.ControlPanelParticipants.png
IMGScreenConnect.Properties.ControlPanelParticipants.png-preview.png
IMGScreenConnect.Properties.ControlPanelMessages.png
IMGScreenConnect.Properties.ControlPanelMessages.png-preview.png
IMGScreenConnect.Properties.ControlPanelMiscellaneous.png
IMGScreenConnect.Properties.ControlPanelMiscellaneous.png-preview.png
IMGScreenConnect.Properties.CommandOpenFolder.png
IMGScreenConnect.Properties.CommandOpenFolder.png-preview.png
IMGScreenConnect.Properties.CommandSelectQualityMedium.png
IMGScreenConnect.Properties.CommandSelectQualityMedium.png-preview.png
IMGScreenConnect.Properties.CommandBlankGuestMonitorTrue.png
IMGScreenConnect.Properties.CommandBlankGuestMonitorTrue.png-preview.png
IMGScreenConnect.Properties.CommandBlankGuestMonitorFalse.png
IMGScreenConnect.Properties.CommandBlankGuestMonitorFalse.png-preview.png
IMGScreenConnect.Properties.CommandSendMessage.png
IMGScreenConnect.Properties.CommandSendMessage.png-preview.png
IMGScreenConnect.Properties.CommandTakeScreenshotToFile.png
IMGScreenConnect.Properties.CommandTakeScreenshotToFile.png-preview.png
IMGScreenConnect.Properties.CommandTakeScreenshotToClipboard.png
IMGScreenConnect.Properties.CommandTakeScreenshotToClipboard.png-preview.png
IMGScreenConnect.Properties.CommandVideoRecord.png
IMGScreenConnect.Properties.CommandVideoRecord.png-preview.png
IMGScreenConnect.Properties.CommandVideoPause.png
IMGScreenConnect.Properties.CommandVideoPause.png-preview.png
IMGScreenConnect.Properties.CommandSelectQualityLow.png
IMGScreenConnect.Properties.CommandSelectQualityLow.png-preview.png
IMGScreenConnect.Properties.CommandChangeFolder.png
IMGScreenConnect.Properties.CommandChangeFolder.png-preview.png
IMGScreenConnect.Properties.CommandSendSystemKeyCode.png
IMGScreenConnect.Properties.CommandSendSystemKeyCode.png-preview.png
IMGScreenConnect.Properties.CommandRebootToSafeMode.png
IMGScreenConnect.Properties.CommandRebootToSafeMode.png-preview.png
IMGScreenConnect.Properties.CommandRebootToNormalMode.png
IMGScreenConnect.Properties.CommandRebootToNormalMode.png-preview.png
IMGScreenConnect.Properties.CommandSuspendMyInputTrue.png
IMGScreenConnect.Properties.CommandSuspendMyInputTrue.png-preview.png
IMGScreenConnect.Properties.CommandSuspendMyInputFalse.png
IMGScreenConnect.Properties.CommandSuspendMyInputFalse.png-preview.png
IMGScreenConnect.Properties.CommandAcquireWakeLockTrue.png
IMGScreenConnect.Properties.CommandAcquireWakeLockTrue.png-preview.png
IMGScreenConnect.Properties.CommandSelectQualityHigh.png
IMGScreenConnect.Properties.CommandSelectQualityHigh.png-preview.png
IMGScreenConnect.Properties.CommandVideoStop.png
IMGScreenConnect.Properties.CommandVideoStop.png-preview.png
IMGScreenConnect.Properties.CommandManageSharedToolbox.png
IMGScreenConnect.Properties.CommandManageSharedToolbox.png-preview.png
IMGScreenConnect.Properties.CommandSendFiles.png
IMGScreenConnect.Properties.CommandSendFiles.png-preview.png
IMGScreenConnect.Properties.CommandReceiveFiles.png
IMGScreenConnect.Properties.CommandReceiveFiles.png-preview.png
IMGScreenConnect.Properties.CommandReceiveFolder.png
IMGScreenConnect.Properties.CommandReceiveFolder.png-preview.png
IMGScreenConnect.Properties.CommandSendFolder.png
IMGScreenConnect.Properties.CommandSendFolder.png-preview.png
IMGScreenConnect.Properties.ShareMask.png
IMGScreenConnect.Properties.ShareMask.png-preview.png
IMGScreenConnect.Properties.ShareGlyph.png
IMGScreenConnect.Properties.ShareGlyph.png-preview.png
IMGScreenConnect.Properties.DropDownGlyph.png
IMGScreenConnect.Properties.DropDownGlyph.png-preview.png
IMGScreenConnect.Properties.CommandShareMyDesktop.png
IMGScreenConnect.Properties.CommandShareMyDesktop.png-preview.png
IMGScreenConnect.Properties.ParticipantRequesting.png
IMGScreenConnect.Properties.ParticipantRequesting.png-preview.png
IMGScreenConnect.Properties.CommandDisconnectParticipant.png
IMGScreenConnect.Properties.CommandDisconnectParticipant.png-preview.png
IMGScreenConnect.Properties.CommandSendWindowSystemCommandRestore.png
IMGScreenConnect.Properties.CommandSendWindowSystemCommandRestore.png-preview.png
IMGScreenConnect.Properties.ControlPanelShare.png
IMGScreenConnect.Properties.ControlPanelShare.png-preview.png
IMGScreenConnect.Properties.ParticipantSendingInput.png
IMGScreenConnect.Properties.ParticipantSendingInput.png-preview.png
IMGScreenConnect.Properties.ParticipantGuest.png
IMGScreenConnect.Properties.ParticipantGuest.png-preview.png
IMGScreenConnect.Properties.ParticipantHost.png
IMGScreenConnect.Properties.ParticipantHost.png-preview.png
IMGScreenConnect.Properties.CommandManageCredentialsSendToScreen.png
IMGScreenConnect.Properties.CommandManageCredentialsSendToScreen.png-preview.png
IMGScreenConnect.Properties.ControlPanelSound.png
IMGScreenConnect.Properties.ControlPanelSound.png-preview.png
IMGScreenConnect.Properties.CommandSelectSoundCaptureModeSpeakers.png
IMGScreenConnect.Properties.CommandSelectSoundCaptureModeSpeakers.png-preview.png
IMGScreenConnect.Properties.CommandSelectSoundCaptureModeSilent.png
IMGScreenConnect.Properties.CommandSelectSoundCaptureModeSilent.png-preview.png
IMGScreenConnect.Properties.CommandSelectSoundCaptureModeHostMicrophone.png
IMGScreenConnect.Properties.CommandSelectSoundCaptureModeHostMicrophone.png-preview.png
IMGScreenConnect.Properties.CommandSelectSoundCaptureModeAllMicrophones.png
IMGScreenConnect.Properties.CommandSelectSoundCaptureModeAllMicrophones.png-preview.png
IMGScreenConnect.Properties.ParticipantMicrophoneSending.png
IMGScreenConnect.Properties.ParticipantMicrophoneSending.png-preview.png
IMGScreenConnect.Properties.ParticipantSpeakers.png
IMGScreenConnect.Properties.ParticipantSpeakers.png-preview.png
IMGScreenConnect.Properties.ParticipantSpeakersSending.png
IMGScreenConnect.Properties.ParticipantSpeakersSending.png-preview.png
IMGScreenConnect.Properties.CommandRegenerateParticipantColor.png
IMGScreenConnect.Properties.CommandRegenerateParticipantColor.png-preview.png
IMGScreenConnect.Properties.ControlPanelAnnotation.png
IMGScreenConnect.Properties.ControlPanelAnnotation.png-preview.png
IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessMedium.png
IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessMedium.png-preview.png
IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessThick.png
IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessThick.png-preview.png
IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessThin.png
IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessThin.png-preview.png
IMGScreenConnect.Properties.ParticipantAnnotating.png
IMGScreenConnect.Properties.ParticipantAnnotating.png-preview.png
IMGScreenConnect.Properties.CommandSelectAnnotationModeAllDraw.png
IMGScreenConnect.Properties.CommandSelectAnnotationModeAllDraw.png-preview.png
IMGScreenConnect.Properties.CommandSelectAnnotationModeHostDraw.png
IMGScreenConnect.Properties.CommandSelectAnnotationModeHostDraw.png-preview.png
IMGScreenConnect.Properties.CommandSelectAnnotationModeInvisible.png
IMGScreenConnect.Properties.CommandSelectAnnotationModeInvisible.png-preview.png
IMGScreenConnect.Properties.CommandSelectAnnotationModeViewOnly.png
IMGScreenConnect.Properties.CommandSelectAnnotationModeViewOnly.png-preview.png
IMGScreenConnect.Properties.CommandSelectAnnotationToolEllipse.png
IMGScreenConnect.Properties.CommandSelectAnnotationToolEllipse.png-preview.png
IMGScreenConnect.Properties.CommandSelectAnnotationToolLine.png
IMGScreenConnect.Properties.CommandSelectAnnotationToolLine.png-preview.png
IMGScreenConnect.Properties.CommandSelectAnnotationToolRectangle.png
IMGScreenConnect.Properties.CommandSelectAnnotationToolRectangle.png-preview.png
IMGScreenConnect.Properties.ControlPanelHelper.png
IMGScreenConnect.Properties.ControlPanelHelper.png-preview.png
IMGScreenConnect.Properties.CommandSelectHelperHighlightToolNone.png
IMGScreenConnect.Properties.CommandSelectHelperHighlightToolNone.png-preview.png
IMGScreenConnect.Properties.CommandSelectHelperHighlightToolCross.png
IMGScreenConnect.Properties.CommandSelectHelperHighlightToolCross.png-preview.png
IMGScreenConnect.Properties.CommandSelectHelperHighlightToolLasso.png
IMGScreenConnect.Properties.CommandSelectHelperHighlightToolLasso.png-preview.png
IMGScreenConnect.Properties.CommandSendClipboardKeystrokes.png
IMGScreenConnect.Properties.CommandSendClipboardKeystrokes.png-preview.png
IMGScreenConnect.Properties.NotificationOptionsIcon.png
IMGScreenConnect.Properties.NotificationOptionsIcon.png-preview.png
IMGScreenConnect.Properties.StatusGlyphGuestNotConnected.png
IMGScreenConnect.Properties.StatusGlyphGuestNotConnected.png-preview.png
IMGScreenConnect.Properties.StatusGlyphGuestAndHostConnected.png
IMGScreenConnect.Properties.StatusGlyphGuestAndHostConnected.png-preview.png
IMGScreenConnect.Properties.StatusGlyphBlankMonitor.png
IMGScreenConnect.Properties.StatusGlyphBlankMonitor.png-preview.png
IMGScreenConnect.Properties.StatusGlyphMask.png
IMGScreenConnect.Properties.StatusGlyphMask.png-preview.png
IMGScreenConnect.Properties.FeedbackBannerLogo.png
IMGScreenConnect.Properties.FeedbackBannerLogo.png-preview.png
CURScreenConnect.Properties.Lasso.cur
BINResources
BINRT_VERSION
BINID:0001
BINID:0
DLLScreenConnect.ClientService.dll
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:0
DLLScreenConnect.Windows.dll
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BIN.Net Resources
DLLScreenConnect.Properties.libz.x64.dll
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:1036
DLLScreenConnect.Properties.libz.x86.dll
Structure
DLLScreenConnect.Properties.sclzma.x64.dll
Structure
DLLScreenConnect.Properties.sclzma.x86.dll
Structure
DLLScreenConnect.Properties.libwebp.x64.dll
Structure
DLLScreenConnect.Properties.libwebp.x86.dll
Structure
EXEScreenConnect.WindowsClient.exe
Structure
P7B[Authenticode]_5d6205b9.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BINScreenConnect.WindowsClient.exe.config
BINServiceExeWithoutService
BINapp.config
BINClient.en-US.resources
BINClient.Override.en-US.resources
BINClient.Override.resources
BINClient.resources
EXE䌋䄱䜵䀾䛬㪌
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
BINRT_MANIFEST
BINID:0002
BINID:1033
BIN䡀䈛㵪䆲䗤䕲
BIN䡀䌍䈵䗦䕲䠼
BIN䡀䒌䓰䑲䑨䠷
BIN䡀䓊㼳䄨䆵䠫
BIN䡀㼿䕷䑬㭪䗤䠤
BIN䡀㼿䕷䑬㹪䒲䠯
BIN䡀㿿䏤䇬䗤䒬䠱
BIN䡀䕌䄨䈷䒏䇯䕨
BIN䡀䘌䗶䐲䆊䌷䑲
BIN䆒䑲㭾䉨䘤䗯䆒䑲
BIN䡀䈜䘦䈵䅘䈭䗦䠶
BIN䡀䈜䙵䆬㬨䑲䌩䠪
BIN䡀䈜䙵䆬㬨䑲䕷䏲
BIN䡀䈜䙵䆬㲨䖱䄷䏯
BIN䡀䄕䑸䋦䒌䇱䗬䒬䠱
BIN䡀䇊䌰㾱㼒䔨䈸䆱䠨
BIN䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
BIN䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
BIN䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
BIN䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
BIN䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
EXE䌋䄱䜵㬾䖸䒷㪰䗦䒬㵱䅬䄵䜵
Structure
DLLScreenConnect.Core.dll
BINCustomAction.config
BINOverlay_7d669e13.bin
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
BINRT_MANIFEST
BINID:0002
BINID:1033
BINSummaryInformation
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 13
STICH kept: 3secondary ignored: 10
bin
9img
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
3 / 3
Path
ole:doc>bin>pe:dll>pe:dll
Shape
ole:doc>bin>pe:dll>pe:dll
4 nodes
Path
ole:doc>pe:dll>pe:dll
Shape
ole:doc>pe:dll>pe:dll
3 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential244 files
OFFdc8a934f4f41871768641ab0a519ba48
DLLScreenConnect.Client.dll
DLLScreenConnect.ClientService.dll
DLLScreenConnect.Core.dll
DLLScreenConnect.Windows.dll
EXEScreenConnect.WindowsClient.exe
BINScreenConnect.WindowsClient.exe.config
BINServiceExeWithoutService
DLLScreenConnect.InstallerActions.dll
DLLMicrosoft.Deployment.WindowsInstaller.dll
BINCustomAction.config
BINRoot Entry
No malware configuration was found at this point.
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
dc8a934f4f41871768641ab0a519ba48 › ScreenConnect.Client.dll
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account