General

  • Target
    Procmon.exe
  • Size 4.1MB
  • Sample260910-tf2fhadp7s
  • SHA256 3b9e6cf2b37883e0329887b54b6d0b3a505ec243fefffd516104e08402bbf8f7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Procmon.exe
    .exe 4.1MB

Procmon.exe

  • IMPHASH d1884ea9969657ba85852cd48ea50b14
  • SHA256 3b9e6cf2b37883e0329887b54b6d0b3a505ec243fefffd516104e08402bbf8f7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
af:37:67:d4:11:06:e7:5c:f3:7e:4a:19:9a:60:ef:38:f7:1c:7d:0a:2d:c6:18:15:49:94:9d:c3:b2:3b:53:c3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Minor OS version
0
Major OS version
6
Entry point
695312
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP IMAGE_FILE_NET_RUN_FROM_SWAP
PDB paths
C:\__w\1\s\exe\Win32\Release\Procmon.pdb