cade322bf1c5f58f44d8970de70ca83cf53d2d6ab5e43f53a8ed26a343c95309

Resubmissions

17/04/2024, 17:04

17/04/2024, 16:36

max time kernel
190s
max time network
40s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
17/04/2024, 16:36

Target
npp.8.6.3.portable.x64/contextModel.exe
Size 2.6MB
Sample240417-t384vsfe75
SHA256 0b3731c524e6ba716f15087d85eae7e6225b6b51d4ae2fa6c142ff1523f57046
MD5 8f28087d8d0e716368314c2f1a159280
SHA1 7e383ae0f632c02ef98168b6c1a33fd449d6c393
SHA512 aa21ab18a12a69ff25b24b1c255b0bdc7961985150b07a7f3f4b0909e212295bd781548cd8ea817f3144dfad845aff93df40a513bdb637db7b89bb08fff01eab
SSDEEP 49152:C+sGc1TASKVbmYIBotpg0TunuNeeigv0XIMw4h2pk4PxKS5VinRfepLm7j5:WTAfVbwotpgruNeW0VHhL3S5VicLaj5
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1964	contextModel.exe

C:\Users\Admin\AppData\Local\Temp\npp.8.6.3.portable.x64\contextModel.exe
"C:\Users\Admin\AppData\Local\Temp\npp.8.6.3.portable.x64\contextModel.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:1964