5586c5e1a139fffc4c11136a6d371a6173f363a46ee9f2b46e8fb9e7df363b74

Analysis

max time kernel
2s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
06-11-2022 08:10

Sharing

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\printerfix\旧文件归档\spoolsv.exe command="C:\Users\Admin\AppData\Local\Temp\printerfix\旧文件归档\spoolsv.exe" wdir=C:\Users\Admin\AppData\Local\Temp\printerfix\旧文件归档 Payload error: %1 is not a valid Win32 application.

Report Analysis Logs

General

Target

printerfix/旧文件归档/spoolsv.exe
Size

527KB
MD5

a250292a645bc628531b0645e174e847
SHA1

c324c1ea99538d9f21b8c4eb450eeed9a3c030e7
SHA256

4092f47050b49dd4d8ea8a343cbd057387974089c0ea326fd7e43090cb913d56
SHA512

5aa49c3a93c1a0b2e5079bb60b1da999afd09225fd65c113c9cb82e361af50a8a474703d05a170198dcbd54f3edd45d59a8abfe200843c46fa871c0a2955d6eb
SSDEEP

12288:PZFo6UKqV2r2CTAj6xqMF7Nd4UdsR75KCdZ2FXG:3PMV2qCA6xqMF7NezR75K5G

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\printerfix\旧文件归档\spoolsv.exe
"C:\Users\Admin\AppData\Local\Temp\printerfix\旧文件归档\spoolsv.exe"
1⤵
PID:1488

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads