6cc0505bc3d39f9806d605ba115dd302da1f485554ec44c9c96286f5ea34d909

Analysis

max time kernel
44s
max time network
48s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
05-02-2023 01:36

Target

Srenshare tool/Tools/RegScanner.exe
Size

59KB
MD5

2e998efadda38ea838d22354d7f335b9
SHA1

bc2cc88ba637eb84a70eb79a710313926f9056c1
SHA256

a4fdda53e3bcd4e369baec3436e06acd6c210b8de950f439cf425db37c66e897
SHA512

935757530f51e8d79da06070140e4fdf950be9411ca401333d3cdb15485d7ebaf61c577c9d467c22b78b18b8d0fa22d66d438ca3ba3630f8d4af448fa2eff75e
SSDEEP

768:82dfLRvCbvubjBpiZrH6ENDk9fWcofmDybxH0mSJIVFh5rbipGeiWwQ:82NRv2aniZrNBVcof8qxH0RID7bipG6v

Score

9^/10

upx

Nirsoft 1 IoCs

Processes:

resource	yara_rule
behavioral27/memory/872-55-0x0000000000400000-0x000000000041D000-memory.dmp	Nirsoft

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
behavioral27/memory/872-55-0x0000000000400000-0x000000000041D000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\Srenshare tool\Tools\RegScanner.exe
"C:\Users\Admin\AppData\Local\Temp\Srenshare tool\Tools\RegScanner.exe"
1⤵
PID:872

memory/872-54-0x0000000076181000-0x0000000076183000-memory.dmp

Filesize
8KB

Download
memory/872-55-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download