CefSharp[.]BrowserSubprocess[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CefSharp.BrowserSubprocess.exe
Size

6KB
MD5

1951870e337dd30281900119ea7563da
SHA1

d8a4cfc3ba6facf1f3b9af480b7bc40c388855cc
SHA256

32e2dc7532614a85403d693e42367f8ce147f17734817cca8bf71e516e35e152
SHA512

de32988e2cc4fe4154559839ce2380acdeb12d8fc51141917be68e8fefca8058f1e7405da5c5cd7bfc557ad3b96568fbb261a908618fab443fee970d85b4952b
SSDEEP

96:r6ZxxI7kLmQBDvTBqkHAeFZZetmArNt61OYcXe5U:4xIUmQBHBPHAeFZKsAYcXeS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CefSharp.BrowserSubprocess.exe

Files

CefSharp.BrowserSubprocess.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\projects\cefsharp\CefSharp.BrowserSubprocess\obj\x64\Release\CefSharp.BrowserSubprocess.pdb

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ