fafb86da35b52f0375f724c2e955902daff69080b7877fa532338846be43f522

Analysis

max time kernel
135s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20230221-en
resource tags

arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
submitted
11/06/2023, 19:43

Target

fafb86da35b52f0375f724c2e955902daff69080b7877fa532338846be43f522.exe
Size

3.8MB
MD5

3e3f7bb5eb4e513e58f2e3c63b315d99
SHA1

53777f52df4f3bed263a67089d8ca1b7b43dbc65
SHA256

fafb86da35b52f0375f724c2e955902daff69080b7877fa532338846be43f522
SHA512

bb1877f74c324053fa0ad33c3849f3822de8e986b1d9ef8f9bcc56a0df838a1687250ec9a8bdba19e680e111aec889f722873b4b2528abe317dbf4a8fd600709
SSDEEP

98304:P9vmVqrGCxq4x495Tc5u8ZeILALlfgpLDGg8hhVaokq:PRmQrzx4auSDLAxgJDGgrod

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4980	fafb86da35b52f0375f724c2e955902daff69080b7877fa532338846be43f522.exe

C:\Users\Admin\AppData\Local\Temp\fafb86da35b52f0375f724c2e955902daff69080b7877fa532338846be43f522.exe
"C:\Users\Admin\AppData\Local\Temp\fafb86da35b52f0375f724c2e955902daff69080b7877fa532338846be43f522.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:4980