cade322bf1c5f58f44d8970de70ca83cf53d2d6ab5e43f53a8ed26a343c95309

Resubmissions

17/04/2024, 17:04

17/04/2024, 16:36

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
17/04/2024, 16:36

Target
npp.8.6.3.portable.x64/updater/GUP.exe
Size 818KB
Sample240417-t384vsfe75
SHA256 d056ae6e45a62a86199dcc7d0c696469374253fba05a45c877caf28b0b897df3
MD5 fabdd8cc1e50874481688659ea63b7ec
SHA1 d498dc918010810822902df29ce54ac1766fb446
SHA512 1bda8cd73f00f0e7fd6a924ad6234dc47a183f3f4c5a40d5ca6cc0cdd116ee07fce7a1b744cba31ab2a491e89b23f653b5d38a74eaf5138e3289c799f99b7450
SSDEEP 12288:PySK0M5qRxaBr5wFNbgpA0WUVzOR63AczZXBS3CNmBDIOh68ADKbp34zZZ6dNNoQ:qqMo2aWqT2KbpIFZ6PNeTwt
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2164	GUP.exe

C:\Users\Admin\AppData\Local\Temp\npp.8.6.3.portable.x64\updater\GUP.exe
"C:\Users\Admin\AppData\Local\Temp\npp.8.6.3.portable.x64\updater\GUP.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2164