4552e84edd73799b3a6e8e6d8ad0cb231d44241748ecb072c82ee9211728236c

Resubmissions

26/02/2024, 07:27

23/02/2024, 05:04

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
23/02/2024, 05:04

Target

npp.8.6.3.portable.x64/contextModel.exe
Size

2.6MB
MD5

8f28087d8d0e716368314c2f1a159280
SHA1

7e383ae0f632c02ef98168b6c1a33fd449d6c393
SHA256

0b3731c524e6ba716f15087d85eae7e6225b6b51d4ae2fa6c142ff1523f57046
SHA512

aa21ab18a12a69ff25b24b1c255b0bdc7961985150b07a7f3f4b0909e212295bd781548cd8ea817f3144dfad845aff93df40a513bdb637db7b89bb08fff01eab
SSDEEP

49152:C+sGc1TASKVbmYIBotpg0TunuNeeigv0XIMw4h2pk4PxKS5VinRfepLm7j5:WTAfVbwotpgruNeW0VHhL3S5VicLaj5

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1712	contextModel.exe

C:\Users\Admin\AppData\Local\Temp\npp.8.6.3.portable.x64\contextModel.exe
"C:\Users\Admin\AppData\Local\Temp\npp.8.6.3.portable.x64\contextModel.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:1712