d66895d8da6d5eb1d8658647c80f66dce40236c06bb600f1c62a44a657f923b3 | Triage™

Login
Reports

Overview

overview

4

Static

static

3

VFS/AppDat...ch.exe

windows11-21h2-x64

4

Sharing

Copy URL Twitter E-mail

General

Target
SafeWatch.msix
Size 140.9MB
Sample260624-x8ap2ae12x
SHA256 d66895d8da6d5eb1d8658647c80f66dce40236c06bb600f1c62a44a657f923b3
MD5 e15214cda228ab5c255a8a683b04bdf1
SHA1 6ddd7814b479b4373d44ac12e8c7b4181ecbce8b
SHA512 10e2b2220b44db215b12dcbe8ab98542100adb3f33ca851ebac68edc7dd5d29c7fd2c518e15e2295ef5c7cc4c888e256d8cec516ad397dbdbb7ed49acd1a5754
SSDEEP 3145728:lHGbWo2eTzb9Nmo7WryQ5hzM007Wf4oUIEiNN9Uw:AbOGPXiZIP7Wfw6T
TLSH
T15468336D1DEA9825EC2436367BD680A1861773F209C12DD9B73C018FB859A7D2B43CDB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

VFS/AppData/SafeWatch/SafeWatch.exe

Resource

win11-20260513-en

windows11-21h2-x64

10 signatures

300 seconds

Malware Config

Targets

- Target
  VFS/AppData/SafeWatch/SafeWatch.exe
- Size 2.0MB
- SHA256 e0b54f6586f85d2902fde5b052e6591f6f5a9fd70319d82483e6656bf3466124
- MD5 e7e021be599fd55b7b716b8bd9157596
- SHA1 5a0584b92da42bbcb9f86838f1a505eaa3c7c6c2
- SHA512 09e2c4ecffe6c589829ef0163a48c832d8aae9186a694323f6dee5c814ecf1225e64f10bcce4a0b8c73d095b8471a69a244f67d4fa219d9d486d9401768b6d0c
- SSDEEP 24576:8YCumRfyxHZtceUWzoEfbVxBq1epwjsdUfFhKliS208iwOrsYz4:8Yz5ti5VepRoKlihswOrN
- TLSH
  T115A5AE11B962A0F8D8533071701CEB3A2D245E264B628ED3D7D8BDE57EF22C2153676B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

© 2018-2026

Terms | Privacy