FUckTentct
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
OsTentct
Static task
static1
Behavioral task
behavioral1
Sample
a6e35e125353cf3601464249be43b3e13012884b23c608aeb4c99264111ea146.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a6e35e125353cf3601464249be43b3e13012884b23c608aeb4c99264111ea146.dll
Resource
win10v2004-20220812-en
Target
a6e35e125353cf3601464249be43b3e13012884b23c608aeb4c99264111ea146
Size
1.3MB
MD5
661881101ca2644cb60045486923cb00
SHA1
100bde02292741ff5e9286b656e1860b045acc04
SHA256
a6e35e125353cf3601464249be43b3e13012884b23c608aeb4c99264111ea146
SHA512
9f942e9a30a96be23d33544559b7f0004618f03c2ef0e8c4fcb0e5d1f5290cbbe4feefaa9e39270019b44493cc8dd77216681f4939ffd3b7f34a17f1597e40f6
SSDEEP
24576:2XfkF5ESpRTf3JDNSJAgbmDGgaLoUAA/dwMJTC1MnZmSeuHphyR:2yAgGTLPAA/d+1rwhyR
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetVersionExA
WriteProcessMemory
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
PostThreadMessageA
PathFindFileNameA
strrchr
RegQueryValueExA
FUckTentct
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
OsTentct
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ