d048206ab60e33b1ed50cdf8a37328ac915b88ad100ba3ab8307a93c2df1ae2b

Analysis

user interaction
yes
max time kernel
600s
max time network
592s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 18:01

Target
kris.exe
Size 104.0MB
Sample260808-wl9eeabm3x
SHA256 d048206ab60e33b1ed50cdf8a37328ac915b88ad100ba3ab8307a93c2df1ae2b
MD5 00b364f1ebb5e6cf75207d886a57759e
SHA1 dd802c364a5860ecf96465e683ed9eecd673f917
SHA512 c4f564880612ecdd49adeb51e012f59dc58291c5656354cc20b5cab29dc0d77876285a9d4827b62ac8339afda70ae10654ab4ae640255040b7ca77ce8a9dfe26
SSDEEP 1572864:BZThOhc7T7P+77xAQyuJUgm0A8S3MDMsM7:0rAQlm0a8ID7
TLSH
T1FB383B53F27370ECC467C23492D7A633BA73B85951386E6AD6A4CB742F21E50632DE24
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5908	kris.exe

C:\Users\Admin\AppData\Local\Temp\kris.exe
"C:\Users\Admin\AppData\Local\Temp\kris.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:5908

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4924

memory/5908-0-0x00007FF616600000-0x00007FF617600000-memory.dmp

Download