e237e23494d04bd21697237036b5c8be2d40a76bf5ef91f924aa503c1cd3bb05

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/08/2026, 03:09

Target
overstats-agent.exe
Size 760KB
Sample260806-dnghasfe57
SHA256 e237e23494d04bd21697237036b5c8be2d40a76bf5ef91f924aa503c1cd3bb05
MD5 b0dc636bf35744274e7d6640473af699
SHA1 a42389754b6982a9b5584b48e2bac40a7e496678
SHA512 68a19fec04672ef91fb964df506b50e623e9b0ec5e108c1a5206f38931a0b8c82199502763b9364e063af98fefc64b02171c56f2e9ca17763bc45844dce50a9f
SSDEEP 12288:tiE1J0ql9iDTtJP4/NyW206P7Y6ceME5UGeK/IJdrGc6:tRRl9iXtel526ebipQ
TLSH
T16FF46E2A66AC01F8E0BBD279CE5B5906F3B6781A03709ADF13D047672E175E45E3E720
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5056	overstats-agent.exe
5056	overstats-agent.exe

C:\Users\Admin\AppData\Local\Temp\overstats-agent.exe
"C:\Users\Admin\AppData\Local\Temp\overstats-agent.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5056