990bcaf138c29483b5573089b243cc6f4751ccd521148297130e3e36aa70e9f8

Analysis

max time kernel
502s
max time network
482s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
30-09-2022 14:44

Target

读写器API接口开发包/API函数调用示例程序/C#环境调用示例/源代码/CSharpRFIDDemo/bin/CSharpRFIDDemo.exe
Size

40KB
MD5

17cd1c79a68f961c82c3a670f87aec62
SHA1

1c168e0036cd7517a74d04b9c246ab314098b69f
SHA256

739bd859be45e4e29c1b3c4f00ccd0f59b58fedb98c10f4825e47b849fd6d6e9
SHA512

fdd45cefc75a255ade4d3bc11a212930f02b010141d1c9bdf3a8fc954af04178f3dadbbe9d49034d750b063e86c4fba64374226cca9043bbc3d6a41bc5d9fca0
SSDEEP

768:IXmzojYOO7/sGmeOxfx9gXhSPX3bMK2jkUIA:IXmzoj7efoX3bTuVIA

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

CSharpRFIDDemo.exe

pid process

4980 CSharpRFIDDemo.exe

pid	process
4980	CSharpRFIDDemo.exe

C:\Users\Admin\AppData\Local\Temp\读写器API接口开发包\API函数调用示例程序\C#环境调用示例\源代码\CSharpRFIDDemo\bin\CSharpRFIDDemo.exe
"C:\Users\Admin\AppData\Local\Temp\读写器API接口开发包\API函数调用示例程序\C#环境调用示例\源代码\CSharpRFIDDemo\bin\CSharpRFIDDemo.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:4980

memory/4980-132-0x0000000074AD0000-0x0000000075081000-memory.dmp

Filesize
5.7MB

Download
memory/4980-133-0x0000000074AD0000-0x0000000075081000-memory.dmp

Filesize
5.7MB

Download