dfd258ea7cae1263a4991f194f2c65a89b3bb08db317a3881cbb6c9021328e0b

Analysis

user interaction
yes
max time kernel
0s
max time network
280s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20260127-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20260127-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
04/08/2026, 18:51

Target
gog_com-Hollow_Knight_1.desktop
Size 309B
Sample260804-xhzapscl2w
SHA256 dfd258ea7cae1263a4991f194f2c65a89b3bb08db317a3881cbb6c9021328e0b
MD5 4ed0be51f537a190efad6ad01da96071
SHA1 ddc95fc5145e9ef7bf030861597ee7cf43972881
SHA512 57ebf7390d45e953a8b1e45cc74e1c6df5a6ed4b6aa8d956f68d84b7f42b38eced31f5009b5e60fb4466b243a5c200c0a1292256c1d6a8ae0c454f33820a160f
TLSH
T174E0CD5DEE1FA01980CD7023AD40D4395AC41C14E74144C1BE4B0D566023DAC5660E39
MD5 SHA1 SHA512 TLSH

Score

4^/10

discovery

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	gmain	2045	gtk-launch

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/filesystems	gtk-launch