c5da7c20ea6c6d18e8adcd3daf88f552dbf5398e387079b742f25b333a7177f1

Resubmissions

30/07/2026, 14:00

30/07/2026, 13:57

30/07/2026, 13:56

user interaction
yes
max time kernel
16s
max time network
21s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 13:56

Target
Saarandsky FFlag Launcer.exe
Size 536KB
Sample260730-q84jsabl81
SHA256 c5da7c20ea6c6d18e8adcd3daf88f552dbf5398e387079b742f25b333a7177f1
MD5 82c263203f9d308ba61f30bc5f06a662
SHA1 81fab17d8ccf4495218c4459c2aff1a74da6a529
SHA512 49d71b88b4a55fb6d33b06f1841a2b7d759630866c94d242d5d9feb7b88533933ad1d4fda4269655a41d346a34d62862aa72ebba64a9e13ea43f0c38c82b4510
SSDEEP 6144:Ms54E1/6mZsmXg5ORbrc6e0xzhSURvvMXYEUfwOWb+URUTeoEaQrP9RsInH4qgnN:MrEktgo6pxUqEUnabXL7sOgpg2
TLSH
T1F0C47DA9A66407F5D1A7C138CA824507F7B27C5A0761DADF03E04AB61F276E24E3F721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3912	Saarandsky FFlag Launcer.exe

C:\Users\Admin\AppData\Local\Temp\Saarandsky FFlag Launcer.exe
"C:\Users\Admin\AppData\Local\Temp\Saarandsky FFlag Launcer.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3912