General

  • Target

    testdisk-7.2.win64.zip

  • Size

    26.1MB

  • MD5

    5bc6bd82a34beadf36a1fe0c171373f9

  • SHA1

    1cb280c43f6382fed8e1e450b6d8fee6d15f84f1

  • SHA256

    e97e203ce77b6b1a3a37d01beccf069dc6c4632b579ffbb82ae739cdda229f38

  • SHA512

    eea07c023800d713326630667329e6f33d1fa899007d88c65c10f7beea3c710f0b5e0b062bbb2bdac0253cbb333426157b48dd16ccafe5efe53389c045d2a221

  • SSDEEP

    786432:6/ZY2zpe+L1Pagq55n0LElB4FHOUozNTNAtvtj:6hO8dagqsLElEuUozQvtj

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 27 IoCs

    Checks for missing Authenticode signature.

Files

  • testdisk-7.2.win64.zip
    .zip
  • testdisk-7.2/63/cygwin
  • testdisk-7.2/AUTHORS.txt
  • testdisk-7.2/COPYING.txt
  • testdisk-7.2/INFO
  • testdisk-7.2/NEWS.txt
  • testdisk-7.2/Qt5Core.dll
    .dll windows:4 windows x64 arch:x64

    02fa32bb0983d249e90c3ee413910206


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.2/Qt5Gui.dll
    .dll windows:4 windows x64 arch:x64

    8ffb652006b724e4cff70c0ef8a0f400


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.2/Qt5Widgets.dll
    .dll windows:4 windows x64 arch:x64

    0b2c4644527cf9f3c473fc73cee28b2f


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.2/THANKS.txt
  • testdisk-7.2/VERSION.txt
  • testdisk-7.2/cygewf-2.dll
    .dll windows:4 windows x64 arch:x64

    b7651137fc13d26d6b1b52e461d68d88


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.2/cyggcc_s-seh-1.dll
    .dll windows:4 windows x64 arch:x64

    8e356075d060c5e5f4c13595dea04218


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.2/cygiconv-2.dll
    .dll windows:4 windows x64 arch:x64

    10c4cd73be2f0f38c431cd7779baa35f


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.2/cygjpeg-8.dll
    .dll windows:4 windows x64 arch:x64

    220ecebe67e6646a6df3a45462f6db9f


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.2/cygncursesw-10.dll
    .dll windows:4 windows x64 arch:x64

    eb38e9d51720f588a8c4dea35b978d0c


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.2/cygwin1.dll
    .dll windows:4 windows x64 arch:x64

    e49f2e55576255ce2892923d44184fd5


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.2/cygz.dll
    .dll windows:4 windows x64 arch:x64

    3e89575bc8c202a99ac79b26c908bab1


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.2/documentation.html
    .html
  • testdisk-7.2/fidentify_win.exe
    .exe windows:4 windows x64 arch:x64

    08da1a48e725cb12383b28b61f5227e4


    Code Sign

    Headers

    Imports

    Sections

  • testdisk-7.2/iconv.dll
    .dll windows:4 windows x64 arch:x64

    a5280e4a2245ac03fddcd435aa4b7984


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.2/libbz2-1.dll
    .dll windows:4 windows x64 arch:x64

    5d4fd98d8e5620edde85a71313bffed7


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.2/libewf-2.dll
    .dll windows:4 windows x64 arch:x64

    10a0d5a7b7193a0998b1fe8801ec7f6b


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.2/libfreetype-6.dll
    .dll windows:4 windows x64 arch:x64

    fe6c44ab7e692441e9abf18abf9870c0


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.2/libgcc_s_seh-1.dll
    .dll windows:4 windows x64 arch:x64

    8142ee0f45e10ebbff675b18dc67c93c


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.2/libglib-2.0-0.dll
    .dll windows:4 windows x64 arch:x64

    5f0b0608f4eacd0ac56a0eaa26ac9794


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.2/libharfbuzz-0.dll
    .dll windows:4 windows x64 arch:x64

    cc8fbcbeb94e0acdfa6448f3a9bf03cf


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.2/libintl-8.dll
    .dll windows:4 windows x64 arch:x64

    30c05e71c58ce9ab97aed3cc31fadcf0


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.2/libjpeg-62.dll
    .dll windows:4 windows x64 arch:x64

    b6b805151d8389ad4af952faeee2b9ca


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.2/libpcre-1.dll
    .dll windows:4 windows x64 arch:x64

    de38a8c16c87cb57e416d53f63d47052


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.2/libpcre2-16-0.dll
    .dll windows:4 windows x64 arch:x64

    dbf3945532fea8bdcba03b2a0f1a85b1


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.2/libpng16-16.dll
    .dll windows:4 windows x64 arch:x64

    3ee7b9d880503ee2cd1e68cb0354c4d2


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.2/libssp-0.dll
    .dll windows:4 windows x64 arch:x64

    550703e32944da81749eeb979a022099


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.2/libstdc++-6.dll
    .dll windows:4 windows x64 arch:x64

    1502d122aa46b1c8f4061b780639bd84


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.2/libwinpthread-1.dll
    .dll windows:4 windows x64 arch:x64

    ad63c28b7065dcd7cda5cb0e6db790c4


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.2/photorec_win.exe
    .exe windows:4 windows x64 arch:x64

    e561d49441762dcb3275ad5585f7c5c2


    Code Sign

    Headers

    Imports

    Sections

  • testdisk-7.2/platforms/qwindows.dll
    .dll windows:4 windows x64 arch:x64

    4b7449851a10988d7b091a610280c8b4


    Headers

    Imports

    Exports

    Sections

  • testdisk-7.2/qphotorec_win.exe
    .exe windows:4 windows x64 arch:x64

    5e3db230c59e9a1a9427bb59b55c3d30


    Code Sign

    Headers

    Imports

    Sections

  • testdisk-7.2/qt.conf
  • testdisk-7.2/readme.txt
  • testdisk-7.2/testdisk.pdf
    .pdf
    • http://021toactivateit.6.4RunningQPhotoRecunderLinuxX.org

    • http://034x_copy.zip

    • http://036cialLinuxbinariesfromwww.cgsecurity.org

    • http://050.mov/.mp4

    • http://051tarxzfe2fsprogs-1.46.2.tar.gztarxzfntfs-3g_ntfsprogs-2017.3.23.tgztarxzftestdisk-7.2-WIP.tar.bz

    • http://PhotoRecunderLinux................................206.4RunningQPhotoRecunderLinuxX.org

    • http://Playtheresultingtest.mov

    • http://andruncatfile2_ftyp.movfile1_mdat.mov

    • http://andruntypefile2_ftyp.movfile1_mdat.mov

    • Show all
  • testdisk-7.2/testdisk_win.exe
    .exe windows:4 windows x64 arch:x64

    14bb56eef602d517a4f92465a0632380


    Code Sign

    Headers

    Imports

    Sections

  • testdisk-7.2/zlib1.dll
    .dll windows:4 windows x64 arch:x64

    1e18b7614b7cab80770d4b3d44a2dcbd


    Headers

    Imports

    Exports

    Sections