d508f444542b2d7ac44a6e3c9a7a144ce7601bdaa5fbfd2de4de0e41efc50e99

Analysis

user interaction
yes
max time kernel
150s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/07/2026, 12:42

Target
SynInstallerV2.exe
Size 11.8MB
Sample260727-pxcfgsself
SHA256 d508f444542b2d7ac44a6e3c9a7a144ce7601bdaa5fbfd2de4de0e41efc50e99
MD5 eb7600eada6f5fd145bc30c704907de6
SHA1 39a4a41ac8145536ed4150bf588ae1c3a1195101
SHA512 7e6bf9a65897405c22be2f8827d275430d81ae19715a383d86dae7a96e23fa1d6a09ef30e4e4a18b8deb8cd510a04df5df7b4fa2463b7765f31c986924ed57c6
SSDEEP 196608:gPurUNhLfJ/SNwxaZ1FOcWujU6Gfys1hEsDCtlnf5y6OkGT1T158:wBhTJ/SNwKFO7ujU6G6ghEs2vOR8
TLSH
T1CBC6022ABFC0DE44EFE693FE1C09688BBDC2111CA75E5212E5D91D381345B28A27D7D8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

pid	Process
5000	SynInstallerV2.exe

C:\Users\Admin\AppData\Local\Temp\SynInstallerV2.exe
"C:\Users\Admin\AppData\Local\Temp\SynInstallerV2.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:5000

memory/5000-0-0x0000000002C60000-0x0000000002C61000-memory.dmp

Download