4b21157f4c46e9a02732d0bd8622454910399ff580a529b63b1d67a4145ddc32

Analysis

user interaction
yes
max time kernel
12s
max time network
7s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/09/2026, 10:24

Target
cs2_external.exe
Size 526KB
Sample260924-mfpy5ssenb
SHA256 4b21157f4c46e9a02732d0bd8622454910399ff580a529b63b1d67a4145ddc32
MD5 af4afbf4fb8f206e1e4f98babb76c204
SHA1 a29cd6a1c7b8f001356d1bc50d56527593d84ca9
SHA512 e892967d4364253af38d25aca6c6812a724a61ab2013571e5e5585e3c10160ef61c9ead01548d76dffb01ab7028630eb8eaaba296877af7d10c3323be2c774b8
SSDEEP 6144:x2FHOPru1kJ08/y+edMUFuqEdcCoKFYDWEQTr4p6vp0wVhryPkgSZMH05giNPUio:sRn6M3u3dWYrR0wASZMPiCQnhC5
TLSH
T150B49E81F1B957FCE02B9174955AB60FFA393848171099CB63D409982BF37E46AF7322
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4412	cs2_external.exe
4412	cs2_external.exe

C:\Users\Admin\AppData\Local\Temp\cs2_external.exe
"C:\Users\Admin\AppData\Local\Temp\cs2_external.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4412