6ab5159d43644793c2b5d549ddf0c38a76146218ce6d24ce9690fa90b85255cd

Analysis

max time kernel
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/06/2026, 18:29

Target
tylow.exe
Size 160.8MB
Sample260627-w448eacx2x
SHA256 6ab5159d43644793c2b5d549ddf0c38a76146218ce6d24ce9690fa90b85255cd
MD5 1b09660f9cd50b251cb84f9274492559
SHA1 674470412b732990eb8b36eb8b5c3f58ae3bd343
SHA512 5474bcb0d74bd4a04bf174b033fedad6869bcd8a6fe6d4f36fb006a10a8605efa07d857caf6039694d5823d4234e2019c70281698a616635f60f2ad9cd717b8e
SSDEEP 786432:wgun0iOAx9EeCUV5OtsFRta9djbSsQcy7Tp5mrv4d01ok9qTrvw5:mn0iRx+TU3S3SsZyfp5OQsiW
TLSH
T1B1887D1163E81A05E27BB6789773826DE6B1BC52D311C1CF0094FA492F77BC1AA36376
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4916	tylow.exe
4916	tylow.exe

C:\Users\Admin\AppData\Local\Temp\tylow.exe
"C:\Users\Admin\AppData\Local\Temp\tylow.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4916