28a62b0135f98b1fffaa52a990b95082036880fe8ac7fa5833ccbd829c31a2a4

Analysis

max time kernel
150s
max time network
130s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/08/2026, 14:17

Target
gs-autopsy.exe
Size 2.5MB
Sample260807-rl5c8sfl8t
SHA256 28a62b0135f98b1fffaa52a990b95082036880fe8ac7fa5833ccbd829c31a2a4
MD5 20e90e1c2e3fe0705d4eb37db942d703
SHA1 fc0d766f7022757646f305750d74cf04816d9971
SHA512 0280ed1f7465ebd7324ff122d13cb668e3560077a95b815c847a42313648410679e26f26096027240520b3e94c53214a37109f3df065f50717de823a43121245
SSDEEP 24576:/oWaK0GH2hd9bHozOLOxLEqZIeJqzMKLQ0tI67puYlSrJC8z0i/nWZeIHtZn9aFe:/olGWINYqZIeEwe7zlSfzB/nIW6l
TLSH
T120C5B5B1F31101EEC917ADBE450F4FAF5AF236A30E2C49C7B1E4E5A4A5721908764DE2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 64 IoCs

C:\Users\Admin\AppData\Local\Temp\gs-autopsy.exe
"C:\Users\Admin\AppData\Local\Temp\gs-autopsy.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3312