4c4e8120b3ae1bfdf0749a51b2f8347a34dea37f0b31acff90f0b13825748b31

Analysis

user interaction
yes
max time kernel
6s
max time network
8s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/05/2026, 08:09

Target
csrss.exe
Size 70.1MB
Sample260505-j16kvae13p
SHA256 4c4e8120b3ae1bfdf0749a51b2f8347a34dea37f0b31acff90f0b13825748b31
MD5 febdb33ecf933681281e6e49e05ef7e9
SHA1 3173af0bee24cacb7fb863af08ddd6e13c1908dc
SHA512 829bd540a13830f2b1762705f414698188ff5df99db68fda8ac5bb76cad65c8878876b292b76b46c9292120ae86f8ec4de86d21e7b1a78f5d3dd9540772e330b
SSDEEP 393216:8pc8wXBwy/TJnlglJUVqegIjBnS6pP1okos8/HMvSUBI/7TNuOH01YXlj5761V/M:pJwUVgIjB9pAs8/n0OH0cFG15cv90A
TLSH
T1A3F7AF15E3D84B16D67FC27DC2638113E6B1B4521361D7CF0498EE992F63BC1AB3A262
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Drops file in Program Files directory 2 IoCs

description	ioc	Process
File created	C:\Program Files\Common Files\Microsoft Shared\SteamAPIInstaller.exe	csrss.exe
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\SteamAPIInstaller.exe	csrss.exe

C:\Users\Admin\AppData\Local\Temp\csrss.exe
"C:\Users\Admin\AppData\Local\Temp\csrss.exe"
1⤵
- Drops file in Program Files directory
PID:332