ea8c1492a9c5e9d2b28c46c72e3c71b11958bad68009480187529110a8cdc4c9

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/07/2026, 18:05

Target
VacExporterLauncher.exe
Size 458KB
Sample260719-wpdrxaay8t
SHA256 ea8c1492a9c5e9d2b28c46c72e3c71b11958bad68009480187529110a8cdc4c9
MD5 73f0f784bbed314c9b52f56d0c33afb6
SHA1 bc6251fabd061b5602d46f2ce5764966d7019541
SHA512 9ca440e8eae638662b8021bbe1bfc8fbbe03032aee85fd3b7e732effbd6ac501c95461588ac58a4c173d90cdcb7ef3e10087ffbb68882d49bc9f1df33d4e6754
SSDEEP 6144:JjG5JbCTfht4i041zCoSLUZBj+w1z6HIbYaXMnaKdJJle/IykqdKYIufQx9:6UTfQdzAZRrAH6KndJlH6d7p
TLSH
T1DAA47D15A6A900F9E077D27CCE538902EBB278560371DACF03A4E6762F276D45E3EB11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4984	VacExporterLauncher.exe
4984	VacExporterLauncher.exe

C:\Users\Admin\AppData\Local\Temp\VacExporterLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\VacExporterLauncher.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4984