5fb01bfe9b0035005a8d786906ce4a0c91f7b99d8016152fb2dbca9ab00e3f6d

Analysis

max time kernel
26s
max time network
28s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 16:27

Target
win32k (1).exe
Size 14.1MB
Sample260810-tydgdssgra
SHA256 5fb01bfe9b0035005a8d786906ce4a0c91f7b99d8016152fb2dbca9ab00e3f6d
MD5 c98ba452e974165fc16286e45de16f8f
SHA1 ad4367bea19b2703b185dc17719257a338349345
SHA512 74648755817b1b5848798a6be3ea14f997466b7b1aba7dbed7aad7ec6e9eaa21500652a8a91d14eda5e5d38dec4c1042b0d684c6df55debc7b29785797bc7229
SSDEEP 196608:Y1/gAX9vwJvK9TQHzbvvHUMI0XT1gTW/GFgfx2YZje9fo+N9wFoWotjCXDjVqCjU:Y1Hz9mv/UM9Kar20Su+g+yhHr
TLSH
T1E6E623FA84D611E0D9C74680B28F47CEB1D0B05E49A96C2D3BCB1D429735E9B828DE77
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
3256	win32k (1).exe
3256	win32k (1).exe

C:\Users\Admin\AppData\Local\Temp\win32k (1).exe
"C:\Users\Admin\AppData\Local\Temp\win32k (1).exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:3256