e298442b620d79b4ede733d838806e6d59f1868782903df2967ad60c323aa768

Analysis

max time kernel
147s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
23-12-2023 08:46

Target

e298442b620d79b4ede733d838806e6d59f1868782903df2967ad60c323aa768.exe
Size

108KB
MD5

53c3ea0166a63c40bf75334602529980
SHA1

b3139ded9daf0d648695cb16f5dc6531c88fcfa6
SHA256

e298442b620d79b4ede733d838806e6d59f1868782903df2967ad60c323aa768
SHA512

d92941eca282c4f7196680199818c27dea9253dfc80076859b276a48dda3cab9d78a3bf7d937baf1e8ffdd8623be4f96a36124082bdbf3d8b52abafe8574234e
SSDEEP

3072:4mwV00uF0TKNxQhHJPaFimKxydvGPgzfaKahb2IfZ:mVoFX7QhmiaohaIfZ

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3816	e298442b620d79b4ede733d838806e6d59f1868782903df2967ad60c323aa768.exe

C:\Users\Admin\AppData\Local\Temp\e298442b620d79b4ede733d838806e6d59f1868782903df2967ad60c323aa768.exe
"C:\Users\Admin\AppData\Local\Temp\e298442b620d79b4ede733d838806e6d59f1868782903df2967ad60c323aa768.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:3816