ea438ee8311007930673336654fac2a0698687217b8444c8c00dd0109c4dae64

Analysis

max time kernel
150s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 15:45

Target
鼠标屏幕助手.exe
Size 2.8MB
Sample260804-s7kfmadb49
SHA256 ea438ee8311007930673336654fac2a0698687217b8444c8c00dd0109c4dae64
MD5 9741ef9a5bf575f2b242d3fb1535f16c
SHA1 05424cd76587f0a4a0f74f7ff7f642fa795ead9a
SHA512 5e0672ca9df01c728a6e55f509ad3cb7fe566054cf98d4e2321ecf80d33b8696d4199414720c5afbfbdc6f5f12b449e78dbd292f4fa5e15da9764ce47abf3c2d
SSDEEP 24576:bdjZVzsOj+dHSyjHb4GcilUbQhAc6PI7t7UDW6i+Ec0xMkl81sU3AofYon7Aq34t:bdjZKOjsHndPUbQhAeVUTTYon7Aq34t
TLSH
T12DD5D64369DB0DE9CED26BB861C75335A778FD71CE291F2BAA04D2212D536C46D2EB00
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4864	鼠标屏幕助手.exe

C:\Users\Admin\AppData\Local\Temp\鼠标屏幕助手.exe
"C:\Users\Admin\AppData\Local\Temp\鼠标屏幕助手.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4864

memory/4864-0-0x00007FF784180000-0x00007FF7842AA000-memory.dmp

Download