d3874df3530f290394d4e73e194e16e02665cd7aa47f084cc8be30a0a4ee3c66

Analysis

max time kernel
71s
max time network
18s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
19-08-2024 12:11

Target

Vex cleaner/Cleaner src/packages/Fody.6.5.5/netclassictask/FodyCommon.dll
Size

16KB
MD5

02b4adaa2495e04ab3a6fd03f0468efb
SHA1

bebbfceec09b37e7fceaa0a5867563396fae0afb
SHA256

04f9116467f2f894d48f0033c39a36a6813a37d4784a6d7a4d2df925511d51e0
SHA512

95a673973c91f472b714eeac74d94053ce717052118fc6e1cdb5bb27c4fefe380697ad5fcac6d132915420a1dcdd1829386b33e8888558d53b0e167727f658e7
SSDEEP

384:jeiGwElUsXsVJlFmd89kMLCLcfKy0K13DBnZYVhB:jeiGwElUsXsVJl8QvCIPxrnZYDB

Score

1^/10

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
2964	vlc.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2964	vlc.exe

Suspicious use of FindShellTrayWindow 15 IoCs

Suspicious use of SendNotifyMessage 14 IoCs

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2964	vlc.exe

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Vex cleaner\Cleaner src\packages\Fody.6.5.5\netclassictask\FodyCommon.dll",#1
1⤵
PID:3068

memory/2964-23-0x000007FEFACD0000-0x000007FEFAD04000-memory.dmp

Filesize
208KB

Download
memory/2964-22-0x000000013F590000-0x000000013F688000-memory.dmp

Filesize
992KB

Download
memory/2964-24-0x000007FEF7BB0000-0x000007FEF7E66000-memory.dmp

Filesize
2.7MB

Download
memory/2964-25-0x000007FEF59F0000-0x000007FEF6AA0000-memory.dmp

Filesize
16.7MB

Download