9cb6fde1a4fd7dfbb72a87f2bf809d7ff8b255483a192b4e368ada84af376685

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/08/2026, 16:59

Target
rewind-87b54581aed6d510.exe
Size 484KB
Sample260814-vhgpjsah39
SHA256 9cb6fde1a4fd7dfbb72a87f2bf809d7ff8b255483a192b4e368ada84af376685
MD5 d024c27b8403467a7cc1994ff76475c9
SHA1 de59e361902157a128081045a2353ab51a619799
SHA512 1232949343d588e9d3beb046768570e9463555945ffd3685ed562dd72c2f10f56de32f03fd40f93cd72a4a2ef62db946ed2cf49224c3a933459f87ff550ea6a6
SSDEEP 12288:x0kZk4mdQ3Oantgh8SdXVgr/SnYiXnC88R:xVxmctghHLgraYiXnC88R
TLSH
T1B7B4BF47F2BE97E4C02BD034E556AA0BFE32385C075059DB63E449A41BE77E097BB242
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1048	rewind-87b54581aed6d510.exe
1048	rewind-87b54581aed6d510.exe

C:\Users\Admin\AppData\Local\Temp\rewind-87b54581aed6d510.exe
"C:\Users\Admin\AppData\Local\Temp\rewind-87b54581aed6d510.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1048