6d27a4abf0b2438f8d5cf4f6ada7798be1b8208d36674705252c631dd6f844e9

Analysis

max time kernel
51s
max time network
51s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
16/06/2024, 12:12

Target
PrintScreen.exe
Size 97KB
Sample240616-pdbpvasfph
SHA256 b73a30538dac24ce73e9e7baa5e6d51e92f6b70d477d7349e1c5f1d2dd3995e0
MD5 e7500f0da2dbe54afc6b55ce9cb8cbd1
SHA1 fda607e52c0f84baca873393f5c556ed4cefb388
SHA512 4009978f8ae0f06ce486413582e25169d74fc676e96fb32734751e2c7ec0cce38bb367e721884ee1d8d69f726c3f191cc5eb2ecba0b47c1cbeb763116054939c
SSDEEP 3072:+CpseI3XMsSFVPJsVnWOIkqOOgz5zBz5z+R:+KI3XMsSnPCnnXqOOb
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5076	PrintScreen.exe

C:\Users\Admin\AppData\Local\Temp\PrintScreen.exe
"C:\Users\Admin\AppData\Local\Temp\PrintScreen.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:5076

memory/5076-0-0x0000000000470000-0x0000000000471000-memory.dmp

Download