702cd9cd792d35fa0cbd4e7dd3cd22acde680970384000e5c2c60f25e3fb8180

Analysis

user interaction
yes
max time kernel
150s
max time network
147s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/07/2026, 14:47

Target
gmc.exe
Size 6.4MB
Sample260722-r52fpabl7t
SHA256 702cd9cd792d35fa0cbd4e7dd3cd22acde680970384000e5c2c60f25e3fb8180
MD5 46a7306572abdeafdb4c51e89a96c869
SHA1 2f916b32a300c27b10fd5db30d880b33dac92c7b
SHA512 e34dd980c506870ded5435b9f60a3b1c34b33533f642e1c3f9a18f70f5dfb273d18a3be2ce97b6ed1afacec738dca1d6bcbe35c1e87fa69d0b46ca256696fc14
SSDEEP 98304:brRthHNd2KYkCHoJaQvqrHsXqO4jCSr013fL8xcPKqVzeHUhdzYfoXlCLMMNdEC4:btPokC766MNdSr0pfL8xpyq07z1Xg/L
TLSH
T1956633D07FCB54F6C116C3BD52E3B32EF02A3783A8A65E453388F9581A614C059BF5A6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
2716	gmc.exe
2716	gmc.exe

C:\Users\Admin\AppData\Local\Temp\gmc.exe
"C:\Users\Admin\AppData\Local\Temp\gmc.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:2716

memory/2716-0-0x00000001407E6000-0x0000000140A3F000-memory.dmp

Download