12517eaa3f5193fd8a3cf8adb9cbda90096c9dd7f27ef24d298d1a5939f27479

Resubmissions

31/05/2026, 04:19

31/05/2026, 04:17

max time kernel
14s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
31/05/2026, 04:19

Target
NFA_tool_fix.exe
Size 6.4MB
Sample260531-exldaabv3m
SHA256 12517eaa3f5193fd8a3cf8adb9cbda90096c9dd7f27ef24d298d1a5939f27479
MD5 86cbdd99b36ed076859c8073880456fd
SHA1 e34c1e37aaaa16d89add4e24ec30edfb822cee19
SHA512 8a5544e185b0c228de51290116d12fd0ad3385029a70234a5f05d76524fc00fd45e806a7be98d7ba9769aa127ecba93ffa862c67155a0790d716d39a46df3898
SSDEEP 49152:Ux87sI/SsQ2s8984pUo71CZ3pNu4u4gsxLebOiOfZ7cfQEuIy9Yswd3eqh+Dl0pt:ELM4T7Z77Ezswdpz1AqawKXfbStOq
TLSH
T154667B03F76799ACC45AC4B0836647335A72B4CB0B35A9FF45C85538AE69AF01F38B19
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1404	NFA_tool_fix.exe

C:\Users\Admin\AppData\Local\Temp\NFA_tool_fix.exe
"C:\Users\Admin\AppData\Local\Temp\NFA_tool_fix.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:1404