747d5d46573a230dcfa133331752e42badf85a5d02905bc1cb5e1eb89a199cd4

Analysis

max time kernel
91s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
08-10-2022 05:30

Target

PDFShaper_v11.3+_x64_Patch.exe
Size

62KB
MD5

b8f56f46ce06691167c05e91315ba81b
SHA1

bf86d8a39b25a187c4cbf04b0d0974ef64e3a24a
SHA256

846a896c1a5d231530932cd9c2b72fe6ac946d4908beb9baf477cfe75ff8035a
SHA512

e6e310502779f5991faa9ee150e3a78b56c52d58e3d4aedd5e88a36ae7b80e1e994cdcabbb5f6bf967c4fe37fe920fa7b21163a1dfb02b3bc7befb689fe6a017
SSDEEP

768:WazXfCRFMhxnDl+W9z0SMU4Vs+gB6yS9r7oBorgqvUQcFmHOpbWFG/M3jdHj1AbN:BhtlhB0ljVz9vvBybWFHBHRAbhGls7

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
1260	PDFShaper_v11.3+_x64_Patch.exe

C:\Users\Admin\AppData\Local\Temp\PDFShaper_v11.3+_x64_Patch.exe
"C:\Users\Admin\AppData\Local\Temp\PDFShaper_v11.3+_x64_Patch.exe"
1⤵
- Loads dropped DLL
PID:1260

C:\Users\Admin\AppData\Local\Temp\dup2patcher.dll

Filesize
56KB

MD5
fb6380badae4b7b593db92d1fd388386

SHA1
c7610338a18fba87bafa7dbc2004bec9dfb887c2

SHA256
1e02729edb15955ec04a5be0dde9083bbb4120482be3bc4136d11a54c8a3c6eb

SHA512
431dd9dda6cf2a03c12b673ad63bc1eb337bfcf51474477f8e68e057e6591001de351108723f96c55060219e2e2bdb44c00b69875641d91c48af8da4ccf8102e

Download Submit
memory/1260-133-0x0000000075150000-0x0000000075176000-memory.dmp

Filesize
152KB

Download