8f6507c3bb877e85d15adb5ed62d10cac19d32a8e7960e2116a21a6f9f242c11

Analysis

max time kernel
150s
max time network
156s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
20/04/2026, 17:29

Target
bitsumsessionagent.exe
Size 180KB
Sample260420-v2verac13x
SHA256 8f6507c3bb877e85d15adb5ed62d10cac19d32a8e7960e2116a21a6f9f242c11
MD5 c3781289e5ae15bc0e3bb0dbaeeb8cd6
SHA1 a7d26d8f39b43e036f19bafe62c1d4a17bd63bfc
SHA512 0be7b041c405c63f3ada0e525f6a1f0d1985ca0e7dff58f3d232962eaf41e1ce7b458ef2aed55e63cccc932df5f14fe1a4b69c2b55482e114c549b9d95abd7e1
SSDEEP 3072:eaNn5AwjVsJu3hE38kojLVJ6DIrVHnT5xx+Xe2:eaBWJuA2hnN+5
TLSH
T1B3046C5673E510F9E1778234C9A14A05F772B82207609BEF17B08376AF276D19E3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4724	bitsumsessionagent.exe

C:\Users\Admin\AppData\Local\Temp\bitsumsessionagent.exe
"C:\Users\Admin\AppData\Local\Temp\bitsumsessionagent.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:4724