da446be37db2ec3f63ab2c53dffcb1cf005abb91df858da8197e026604e77789

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/07/2026, 03:48

Target
Maxey's Visuals 2.6 new/NewInjector.exe
Size 55KB
Sample260705-ecwzaacy8k
SHA256 da446be37db2ec3f63ab2c53dffcb1cf005abb91df858da8197e026604e77789
MD5 e6f1c3d010a72e683dce8ff750cc6880
SHA1 d9625ad5ca092aadd0dc4302e9b40505cdbc97df
SHA512 2e5a2cb45f57c6b3588080f7d316cf89fedf9f9f9a36c6631847c147d39be83e89290be42ba2aa67317eebbe38e69ed7b76e9d13382cd41824475183c53273ed
SSDEEP 768:e2U4shP6Ox1o8ZpsqFdFbywgx+1J0p8/crb/NvbO2a4a0pOPCq3xt:e2U4sDXo8UqF7iL8cNTOqa0pObt
TLSH
T118435C6BB72900E8D0A7C3B8D9934A17E7B6B8050723A3DF53E192460F276D5693FB11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 5808 wrote to memory of 5612	5808	NewInjector.exe	87

C:\Users\Admin\AppData\Local\Temp\Maxey's Visuals 2.6 new\NewInjector.exe
"C:\Users\Admin\AppData\Local\Temp\Maxey's Visuals 2.6 new\NewInjector.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5808
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c pause
  2⤵
  PID:5612