8b94af60bb58bc1629edb3b4f6a86ccff5769bb9b96d8826f06686af2d7fc55f

Analysis

geolocation tags

eueuropefrfrance
user interaction
yes
max time kernel
695s
max time network
692s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/04/2026, 01:27

Target
Microsoft Teams Revo Helper ZnrAq.exe
Size 51KB
Sample260423-bt45fafw3s
SHA256 8b94af60bb58bc1629edb3b4f6a86ccff5769bb9b96d8826f06686af2d7fc55f
MD5 f5116556007dbf3fef5fb13f8a0ef18d
SHA1 dae322d2c8675cb39fc96a44acf39d8f9445383c
SHA512 3e8541586719ac7eb9b7cdb7f20ae78c9637031b717fb1ecf5fc50a02c0f636f015e70dedc2ed1a95fff9b0059063d4f0f19bfbc683dcf9d4d99a8c0c1039b3b
SSDEEP 768:WnPj8ZtfjZ/26C/11BV4/eYiv37H/35o9lsEpYi6s4OYih2E4:WnQTjZI1P5LHBo9ll76sz7hO
TLSH
T1FE336C138BF40898E5AA9375AAF14D2AEEB178465B60D7CF0351C0290F717C07DBB7A6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

C:\Users\Admin\AppData\Local\Temp\Microsoft Teams Revo Helper ZnrAq.exe
"C:\Users\Admin\AppData\Local\Temp\Microsoft Teams Revo Helper ZnrAq.exe"
1⤵
PID:1512