398dbf1614960506d1a891c1efcc7e41c597b71ccb9cece5c786702b48c9e571

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
11/05/2026, 14:18

Target
ghostmode.exe
Size 2.9MB
Sample260511-rmse3afw4j
SHA256 398dbf1614960506d1a891c1efcc7e41c597b71ccb9cece5c786702b48c9e571
MD5 1ea76de8bd46a5ea1fa363c6dc595d1c
SHA1 b8215c565982f43514f0aac948287620291b6383
SHA512 b22e7d2d29293d0d705aac5a49b1d2ba818c067a1bd5765533280f9fc24565746983470cc9265411ca7c619f6b01d98d45100a6b10d5ad52cc62821bd820a720
SSDEEP 49152:F8S7QiQK4Qk3FMVmtT8+HE609japlEPwMLUox6rIEKxvi+XA2d:XQqeplEPH2yJiMrd
TLSH
T10FE5DF47B3A246EDD03AD978C9429A13E3B1B8001731A1DF6BD40D9ACF976E05EBE741
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

C:\Users\Admin\AppData\Local\Temp\ghostmode.exe
"C:\Users\Admin\AppData\Local\Temp\ghostmode.exe"
1⤵
PID:3168

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2972