General

  • Target
    Procmon.exe
  • Size 4.0MB
  • Sample260625-gpdpkshv3t
  • SHA256 099daea82e1e5fc31f4ec6e226df85b1d56bddb126cac402c7177b4ef71d0e46
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Procmon.exe
    .exe 4.0MB

Procmon.exe

  • IMPHASH d1884ea9969657ba85852cd48ea50b14
  • SHA256 099daea82e1e5fc31f4ec6e226df85b1d56bddb126cac402c7177b4ef71d0e46
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
1b:30:49:f7:37:21:92:e1:f0:54:97:e9:fb:3a:44:1c:84:d1:aa:a1:1d:29:c7:55:97:5c:b4:fc:19:7f:74:46
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Minor OS version
0
Major OS version
6
Entry point
694224
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP IMAGE_FILE_NET_RUN_FROM_SWAP
PDB paths
C:\__w\1\s\exe\Win32\Release\Procmon.pdb