215060390364a50f44bb95d74d3c1b667e26d500553fecbbbd7284107e1fac0c

Analysis

user interaction
yes
max time kernel
8s
max time network
8s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 07:28

Target
skinchanger.exe
Size 26.0MB
Sample260804-jaxj9afb99
SHA256 215060390364a50f44bb95d74d3c1b667e26d500553fecbbbd7284107e1fac0c
MD5 ce230f01c07cf8ca2dd07b29c1fca1d6
SHA1 b9cfcd9d2b814235253742dffc9492ef92c81132
SHA512 c5d3166a014a22eecc57ca40a597187309bcca7fa1ae4ca4a2894d15a58f61894625ad40603a5f7b95780a016c4ae1f892dac798b23b891f99ad18ab85ad9525
SSDEEP 393216:FrUiq9RZvKkcuVjhRcOE0SBWc0FN2qDWSfR7T/rlW18tkcx/tQYc2lRPa9bJgK:FlqLcmHEwcbqDWkXY6tkc/+H8RPa9l
TLSH
T1515733DB62D9B2D8DBC54580728281CF75C0A84D90FE99787ECB5D12F918C9E019EEB3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
256	skinchanger.exe
256	skinchanger.exe

C:\Users\Admin\AppData\Local\Temp\skinchanger.exe
"C:\Users\Admin\AppData\Local\Temp\skinchanger.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:256