e4d6ff6bbb297eca38b19364dac1bfc7eed74724f5e0cd69bb9b53eefe9b9b79

Analysis

user interaction
yes
max time kernel
36s
platform
windows11-21h2_x64
resource
win11-20250610-en
resource tags

arch:x64arch:x86image:win11-20250610-enlocale:en-usos:windows11-21h2-x64system
submitted
11/05/2026, 12:32

Target
BatteryInfoView.exe
Size 112KB
Sample260511-pq2rssh16v
SHA256 e4d6ff6bbb297eca38b19364dac1bfc7eed74724f5e0cd69bb9b53eefe9b9b79
MD5 f303f50b58590489e9d776bb1c0f3f35
SHA1 83ccb6c89fef2cefe7b940a8a47c75dd2e3598d6
SHA512 d6abbab2ff388869352c1b3b13354b692e001ec29cfec4f7fea715d878a524c3fb396f81c295fcb38d77637667348f8cfebca2ef97b2a34b79fdffee96e61a4a
SSDEEP 3072:C2Nnd0yQi2t+/2jesAQewnM9n4k7NgribZINtotN+Sz7kx01:PnIjesARnL
TLSH
T183B3291663F801DCE8ABD5B6C9724623C7B1BC645834C75F4BA0B99A1F33311AE16727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1948	BatteryInfoView.exe

C:\Users\Admin\AppData\Local\Temp\BatteryInfoView.exe
"C:\Users\Admin\AppData\Local\Temp\BatteryInfoView.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:1948

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3372

BatteryInfoView.cfg

Path C:\Users\Admin\AppData\Local\Temp\BatteryInfoView.cfg
Size 746B
SHA256 83951af7e7c0de67ba40251b5275b3c6d13b26eeeb2e8db6d8f007c3eb393c9a
MD5 88f3bb8b0e819517ccb67b3fc9d9aff3
SHA1 5b048b16bbfb20df079fe46ac22513336f812641
SHA512 ef74ec426f47cc8e66cadd35dddb5f90cdebacddbb9580402596c3116c9393341da76252ea5a5e4b3e91772dc7b6e65c2692fead2187bff81006681c9ef58243
TLSH
T1A801A202940B411CC492EFAC68F9355805F92D3BBDE48CF26B9F2718CEDB9162747450
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1948-0-0x0000000000740000-0x0000000000860000-memory.dmp

Download