Deep Malware Analysis of ErmWhatsWrongWithMyPC.exe | md5: cc1de237b93bcbae465f9d3bf4df075a | Executable | PE (Portable Executable) | PE File Layout | Win 32 Exe | x86

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	cc1de237b93bcbae465f9d3bf4df075a
Sha1	72967f94fed66473027c9b36a17bb61cf8e22540
Sha256	c2e9fbca414575d5c080d97f378024a4d131d6e1262112aebaa96eafa3592381
Sha384	68b77c2c953d7d8ef3ab939f35fdc0e0c77a0b8f1c7af231769c22f66c124ee7e5800b18795b905882afcb8e618a8d7c
Sha512	adc805afbbda05794159d8c03ede6aa011f1301ffdecabd5bd36eed637b53f5799f3479fd9c35a253548b6119a90cf00d8b3dcd745d2b9ea4b0675b152123925
SSDeep	393216:NVn+SLSF5pdHn2AXUCITkkkkkrkkkkkkkkkkkk6lX0wfGtbYTZb08MQUCITkkkks:PduvnNG0shAQ31qnMb5OM9Tth
TLSH	B047C0863B60C192CDF278719473DAC016387E6DCF3255A6DBCB4A0ABC518B7051BE7A

PeID

Microsoft Visual C++ v6.0 DLLTiny C Compiler v0.9.x ( exe / dll ) ASL sign UPolyX 0.3 -> delikon

STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Overlay extracted: Overlay_155cd34b.bin (3200 bytes)