f25a9d98c26930beeda3cf692ce18ea201414b4c4cc3094bd844470f91c797d7

Analysis

max time kernel
150s
max time network
114s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 02:22

Target
ram_ui.exe
Size 13.6MB
Sample260730-ctv27sae72
SHA256 f25a9d98c26930beeda3cf692ce18ea201414b4c4cc3094bd844470f91c797d7
MD5 e373182679d2ffbad015f122978271a5
SHA1 4f4500df40b52b62e8d80b0251177f55f319bf2a
SHA512 0de51f6e0b6ef55cd3ca7f9619d656e48af90c7866b2c0f0647dcd0e15c6fca55bcbfb12d165e1f025b5610d1d0ce63cb341a0f741052a613d785cc4d6eb209a
SSDEEP 98304:7niG9D9VmhTyl5YuD0dApvLUwEcz4/JaT+SsydAC+bytw+2wxx:7t9JVwdcLUwzgy+Cftn
TLSH
T131E65A22BB8A99ACC05AC47483468A735A3170CB0B35B9FF45D456393F6AAF45F3C358
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5108	ram_ui.exe

C:\Users\Admin\AppData\Local\Temp\ram_ui.exe
"C:\Users\Admin\AppData\Local\Temp\ram_ui.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:5108