1087c3e80a9403e4c62d737e7d6f9356b636d350a25a85e0c48f72d2e0cfec81

Analysis

user interaction
yes
max time kernel
148s
max time network
93s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
24/05/2026, 21:58

Target
recorder-x64 (1).exe
Size 126KB
Sample260524-1vrceags2m
SHA256 1087c3e80a9403e4c62d737e7d6f9356b636d350a25a85e0c48f72d2e0cfec81
MD5 cd8f2348a6ceb99a7591f4a4e291a13d
SHA1 acefdf0aa15d68b140dad9e54e50f298921c4605
SHA512 a187dbb47f9df1fc1a2841f8a153fcf23f0ad8f3eab398e774608d2718ca899d60e07af42fa4b59f584a86480b609e9e1ddae401e13a8b75cbefd4c8a672f8d8
SSDEEP 3072:2NQ7Sy5zBbkjKsQA67Q4aUUO37ckmRdr5qIptp:j1AmfI4aUUEf4x
TLSH
T1F1C34A5BB3E530F8E1738278C8518A05DB72B8B51B619FEF0760425A6F236D0AD3DB61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2746394149-3500112804-1243524366-1000\{CC44EB02-15D1-48BA-A47D-331814288279}	recorder-x64 (1).exe

C:\Users\Admin\AppData\Local\Temp\recorder-x64 (1).exe
"C:\Users\Admin\AppData\Local\Temp\recorder-x64 (1).exe"
1⤵
- Modifies registry class
PID:3212

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s CaptureService
1⤵
PID:5012