bf2f27646a00de630bd90297c9d2c7bc0fcbbf0810f96b45a375ad7cb6ce0257

Analysis

user interaction
yes
max time kernel
82s
max time network
84s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
24/05/2026, 18:42

Target
Xeno Mapper 2.exe
Size 150KB
Sample260524-xcrcxagy6t
SHA256 bf2f27646a00de630bd90297c9d2c7bc0fcbbf0810f96b45a375ad7cb6ce0257
MD5 c46d0d2ebcc9ba0925e6f2361b8a33c3
SHA1 9157d4c59c4716a0f8d9d501e5e234dd67b219f9
SHA512 36419a10a14c3ac264e40521b4af2b1aea42fde532f60e344e88962c92ef8e564905370e121d907035627a4afa89e67cdf7a9a4e0d21aedc7e1659bbb78f834e
SSDEEP 3072:/dbUjZEYLIDfVEDykwUmJTQSaMm5/6oSTxIh+z:9UZEYLqf4jcWlTC
TLSH
T12AE32A1797A5106EF1B7D6B9CAB24A11EB717C550B74D2CF135048BA0F22BD0BA3EB12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1496	Xeno Mapper 2.exe
1496	Xeno Mapper 2.exe

C:\Users\Admin\AppData\Local\Temp\Xeno Mapper 2.exe
"C:\Users\Admin\AppData\Local\Temp\Xeno Mapper 2.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1496