ab7ef836e52bda5433e014057e88a57def522ef7e225a1a406208b19ac75e9a9

Resubmissions

16-03-2024 00:38

16-03-2024 00:34

max time kernel
32s
max time network
17s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
16-03-2024 00:34

Target

csgo-cs2-spoofer-main.zip
Size

786KB
MD5

5736b68420da285f96af9d380840f14f
SHA1

bb32f696d327065feb501bd6728455c4de25959a
SHA256

ab7ef836e52bda5433e014057e88a57def522ef7e225a1a406208b19ac75e9a9
SHA512

7f059b111289f34d673d53e13d0f4d3f0d1824d4f55c62f12c43564bed40b1af08f458149e39dd0b71ecfef489d9f5270fec4ef28216bc968f6219b88033f62f
SSDEEP

12288:wzLV1pnjxB+GUNDISzPntD37aBhH04dsq570Jr8IA0xTCxJNuSPSBFSolanND9+:CpjP+GAcSzlb7adKj6ITC5MBs2aNx+

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2756	rundll32.exe

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\csgo-cs2-spoofer-main.zip
1⤵
PID:1668

C:\Windows\SysWOW64\DllHost.exe
C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}
1⤵
PID:2540

C:\Windows\system32\rundll32.exe
"C:\Windows\system32\rundll32.exe" pnidui.dll,NwCategoryWiz {0b5deec5-0fd5-4419-86c2-4339d59d2c08} 0
1⤵
- Suspicious use of FindShellTrayWindow
PID:2756

C:\Program Files\Windows Media Player\wmpnscfg.exe
"C:\Program Files\Windows Media Player\wmpnscfg.exe"
1⤵
PID:2624

memory/2756-0-0x0000000001E80000-0x0000000001E81000-memory.dmp

Filesize
4KB

Download