22a48cdd402c3b03e9a211df69574a1082cfeeb3c506855c3f7691afffe915aa

Analysis

max time kernel
898s
max time network
403s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
19/05/2026, 17:29

Target
0.9.9_6f5ab33b441abb29.exe
Size 26.8MB
Sample260519-v2v2aact7q
SHA256 22a48cdd402c3b03e9a211df69574a1082cfeeb3c506855c3f7691afffe915aa
MD5 d337ccac46c244f886b9c38670480e6d
SHA1 fe9e065995bc57f7ccd7f53a916840418f2fee51
SHA512 7ae40dfe86d0f463dec3456b293394c48753f8055607aa7655fdd133186a6badf460780d54a635858577eb2ad701a11a44eca49ba9dbb97416d1ee9305bbc804
SSDEEP 393216:9X6P059ABilC3ZA7RQxlwQXVjfQ6SbM+rEbE9IKY0pp9RLtsuga8:g3W7eH9VjfQ6ZE9I10ppqNa8
TLSH
T1C95712C6A6D592F8C4C345B45A4603CBB1E0B44D83B956AF3BCB6C037921DEB0A6D772
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
5156	0.9.9_6f5ab33b441abb29.exe
5156	0.9.9_6f5ab33b441abb29.exe

C:\Users\Admin\AppData\Local\Temp\0.9.9_6f5ab33b441abb29.exe
"C:\Users\Admin\AppData\Local\Temp\0.9.9_6f5ab33b441abb29.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:5156