Suspicious
Suspect

de170ab6a07d40652a84ee6a89c0516c

MS Office Document
|
MD5: de170ab6a07d40652a84ee6a89c0516c
|
Size: 5.11 MB
|
application/vnd.ms-office

Print
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
de170ab6a07d40652a84ee6a89c0516c
Sha1
192cb273f0af0d6e3e09a2ca219bbcb028058033
Sha256
7f6dad75615565376cb447044fc93c9a9975d0e94a28a2042cbcb03f90a3accb
Sha384
0f5d5a179e4cae293fb0ec4f4a604429c7822165229be949ebe0d812c924533a539c7e829dba3b15da55e78434eac755
Sha512
1c4cc627f43438bb2de99f727fa642b763114bfae2c83bc94871d1e2c158f48e20cddb493efcb8f115078bba7fe8697d33e138d53ca25dc863f25d84bdfddb12
SSDeep
98304:BXAaFvtlLgiu+/OrIG9Ba4BNEb0y9LtluAa6s2FykX2:hnvZqIV4MlvmNGya2
TLSH
5C360119B6940CADD8E64235842EF115AE71780D273C85DB0F7A3DF97E2AAD0633A7C1
File Structure
de170ab6a07d40652a84ee6a89c0516c
Root Entry
䡀䆒䑲
䡀䌏䈯
䡀䈖䌧䠤
䡀䌋䄱䜵
䡀䕎䒵䠵
䡀㬿䏲䐸䖱
䡀㽿䅤䈯䠶
䡀䈏䗤䕸䠨
䡀䓞䕪䇤䠨
䡀䕙䓲䕨䜷
䡀䆊䌷䑲䈝䗻
䡀䈛䒰䈹䌏䈯
䡀䌍䈵䗦䕲䠼
䡀䒌䓰䑲䑨䠷
䡀㼿䕷䑬㭪䗤䠤
䡀㼿䕷䑬㹪䒲䠯
䡀㿿䏤䇬䗤䒬䠱
䡀䕌䄨䈷䒏䇯䕨
䡀䖖㯬䏬㱨䖤䠫
䡀䘌䗶䐲䆊䌷䑲
䡀䈜䙵䆬㬨䑲䕷䏲
䡀䈜䙵䆬㲨䖱䄷䏯
䆒䑲䄾䓳䌿䒦䞱䆬䠲
䡀䄕䑸䋦䒌䇱䗬䒬䠱
䡀䇊䌰㾱㼒䔨䈸䆱䠨
䡀䌠㤻䈜䘦䈵䅘䈭䗦
䡀䖖㼬䕨䌹䈦䒌䉱䊬
㭙㬚䑲䈱䗦䊊䑨䞷䄦䠥
䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
䡀䌠㤻䈜䙵䆬㬨䑲䌩䠪
䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
䌋䄱䜵䀾䛬㾄䌷㬯䟊㦡䠄
[Authenticode]_01c785c2.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
_RDATA
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
䌋䄱䜵㭾䏨䗨㮨䈹䗱㯿䏬䠨
Overlay_4f78d0a0.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
ID:1033
䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
DigitalSignature
SummaryInformation
䌋䄱䜵䀾䛬䋜䕤䟳䑒䗬䘛䗱䐬䟨䆊䌷䑲㯿䏬䠨
Overlay_dca76cf3.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
LICENSE.html
pdqconnectagent
[Authenticode]_585dc3f5.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_MESSAGETABLE
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
pdqconnectagent-setup.exe
[Authenticode]_6624326d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0001
ID:0
CustomAction.config
pdqconnectagent-setup.pdb
WixSharp.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
WixSharp.Nsis.macros.nsh
WixSharp.Bootstrapper.runtime.win_x86.mbanative.dll
[Authenticode]_4888d895.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0002
ID:1033
WixToolset.Dtf.WindowsInstaller.dll
[Authenticode]_ccc9b5c1.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
WixToolset.Dtf.WindowsInstaller.Errors.resources
de170ab6a07d40652a84ee6a89c0516c (5.11 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙