c2c15b14d41b315e1052fdb05579c9c72abc30800163da6537f894bd4eaaa601

Analysis

user interaction
yes
max time kernel
20s
max time network
19s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/08/2026, 04:06

Target
ArgoCheatosu!FREEv2.exe
Size 746KB
Sample260806-epln3sff66
SHA256 c2c15b14d41b315e1052fdb05579c9c72abc30800163da6537f894bd4eaaa601
MD5 59f4e9d73a6c7f978b3aaf50f01d4c73
SHA1 17a24ac8582047b2d941b8689785944eb3e8adf3
SHA512 90ca248834fad06a6a2b278ca04130d376ceebdc05e30273ce5f12e2b552974880162c723b9e4c084ad7fc6a1cb54e3125a3748250bf97d2af582c1aa2e2e52a
SSDEEP 12288:AFNgF3WP8+5VrrhPYFHmZ9vUMaGmDpoQFr1UBy3cNiZnoVironitdhm38:AFSUbVXhJUMyDpoEr1My3oiZn/hm
TLSH
T1F2F49E4DB1BC51F9C07AD17DD687551BFA36380407309AEB23E45A642FA7BE09B7A302
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 3 IoCs

C:\Users\Admin\AppData\Local\Temp\ArgoCheatosu!FREEv2.exe
"C:\Users\Admin\AppData\Local\Temp\ArgoCheatosu!FREEv2.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2476

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1708