dc8a45d8f09dd0bf3ca3a6fec5b0d606639bdd80e3949cdff0564b38db8f2928

Analysis

max time kernel
99s
max time network
142s
platform
windows10-ltsc 2021_x64
resource
win10ltsc2021-20241023-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20241023-enlocale:en-usos:windows10-ltsc 2021-x64system
submitted
19/11/2024, 13:06

Target

SakuraaModLoader2.dll
Size

12.7MB
MD5

d5797be7c95059877837efe7b1fb0074
SHA1

f575862c80616af6006264d91ca92669a785bd0b
SHA256

dc8a45d8f09dd0bf3ca3a6fec5b0d606639bdd80e3949cdff0564b38db8f2928
SHA512

bb2f2b9a763e523cda513df87c2e241c9c1ead7236fff9c9d7546780a3e98a7fae5b11780f2527410cf82cedf187bad98c1860ef956beba585e67492778702b9
SSDEEP

196608:nhjcPCbE9eFxg1q7jG4VP5uM2ykool86BNUQsWP+r+HNX2Hwmqcf5:nppE9oa1qe4VP5d2D8ORsqkf5

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3148	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\SakuraaModLoader2.dll,#1
1⤵
- Suspicious use of FindShellTrayWindow
PID:3148