TgWsProxy_windows_10_64bit[.]exe

Resubmissions

09/07/2026, 04:07

09/07/2026, 03:57

Target
TgWsProxy_windows_10_64bit.exe
Size 3.4MB
Sample260709-epp2hacv6r
SHA256 d4d8f9d25375b02c0bf756f3d9adc3a8ed2170fcfb88d44979400d4d1eecf88d
MD5 3f2f2f591fb3dfc0ac6b5dbb793ffb73
SHA1 bbf2a67ab5f845e68b266b561b31627edda83ea7
SHA512 0d671fb568955a13e68dca58476eaf07735b1e6e93958f349e19a9f5da2807cbf1c0aa9a4ebe6e34a81808222128944a015a93bed2c1372eec50166f6b844b1f
SSDEEP 98304:s66HgsWpF6ANjcp/f86v9toDTL2l2vHvjqW7ZpzK:sfIpBNqf3ETLrmW7m
TLSH
T10CF5333710289CADD5B50CB3A33489BE6349DD76CF308EB2363996D10A868095DBDD9F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TgWsProxy_windows_10_64bit.exe

SHA256 d4d8f9d25375b02c0bf756f3d9adc3a8ed2170fcfb88d44979400d4d1eecf88d
MD5 3f2f2f591fb3dfc0ac6b5dbb793ffb73
SHA1 bbf2a67ab5f845e68b266b561b31627edda83ea7
SHA512 0d671fb568955a13e68dca58476eaf07735b1e6e93958f349e19a9f5da2807cbf1c0aa9a4ebe6e34a81808222128944a015a93bed2c1372eec50166f6b844b1f
SSDEEP 98304:s66HgsWpF6ANjcp/f86v9toDTL2l2vHvjqW7ZpzK:sfIpBNqf3ETLrmW7m
TLSH
T10CF5333710289CADD5B50CB3A33489BE6349DD76CF308EB2363996D10A868095DBDD9F
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

12927856

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths