b8775c03d87c0077ff93c209a2488e6765a95b1ec5aee069ffd0fb248d853062

Analysis

max time kernel
94s
max time network
90s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 11:54

Target
tlock.exe
Size 58.5MB
Sample260808-n2ynvaeq2s
SHA256 b8775c03d87c0077ff93c209a2488e6765a95b1ec5aee069ffd0fb248d853062
MD5 c70cb1fa11e0a6d2ff01594c0cd2a46e
SHA1 6db2a09a4b1afa0fa7fbbd572031f64b32404f62
SHA512 6b593129096546f2c58e06ce2d8513c534e61da179a91a8f435ff4ab798f0d29db864a9fbe708535ef00dd454708e533786e31c163ba61332eb87da7a0f012de
SSDEEP 393216:Jg/WkZZQ6mUh7Xp2VGYE6Au7Gi82Q5qJInkBtY5e3xXeYV2ipCmR+:Jg/WaW6mUh7Xp2VLY5e3x0
TLSH
T106D76C434F2586D1C2739A3BD8FA7926B321776DF298DBA74F044E75EE522C4AE42304
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

pid	Process
1492	tlock.exe

C:\Users\Admin\AppData\Local\Temp\tlock.exe
"C:\Users\Admin\AppData\Local\Temp\tlock.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:1492