5af95489c5c3c6e2643a4218543e6e39b62ed6c5b4c97cef9c812ba913d4f7f2

Resubmissions

21/03/2024, 12:27

21/03/2024, 02:23

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
21/03/2024, 02:23

Target

npp.8.6.4.portable.x64/updater/GUP.exe
Size

818KB
MD5

7073a8f48d526090a30c5c7e6191ca08
SHA1

2908951eb08202ae355a4e5a6f06076725bee725
SHA256

35663bf0e84cd3f9ba8949375fae8451263954154274ad4454b86920252424dc
SHA512

74705e6275b8a9e9e2eaf99e0c64ef041a52fc78ddf20190cfbe96a2e7412d92a90d912c17b996c3c4f7d5cb4f3f647ccfe4da56a0e592f15e7b86644e319753
SSDEEP

12288:ZySK0M5qRxaBr5wFNbgpA0WUVzOR63AczZXBS3CNmBDIOh68ADKbp34zZZ6dNNoJ:QqMo2aWqT2KbpIFZ6PNeTw

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1740	GUP.exe

C:\Users\Admin\AppData\Local\Temp\npp.8.6.4.portable.x64\updater\GUP.exe
"C:\Users\Admin\AppData\Local\Temp\npp.8.6.4.portable.x64\updater\GUP.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1740