13037eedd91f9313ec0d807947db65c639642e5ae6497e87d12fa6d19951f78e

Analysis

max time kernel
900s
max time network
480s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/08/2026, 07:55

Target
TraceX Final/tools/AMIDEWINx64.exe
Size 455KB
Sample260816-jsc9bsshpa
SHA256 13037eedd91f9313ec0d807947db65c639642e5ae6497e87d12fa6d19951f78e
MD5 9adfcdac59db3286690c7eede8da2528
SHA1 0b54d251438a634bd13b49a1f20587cf03d4598d
SHA512 fde1700cdb4212593ec2733944a169c7d02f436ca6831719a33482fbfd0be289697c9aa6ce7ddfb6c245e87952b35416929bbf69753d21a24197ac6c2d1243cc
SSDEEP 6144:PRx1SY2XTh/Fq+1VU1/SznTh8NUc9v4/nOmNAFw+lgBwFejOLlC:PR/2N/I+rUqE9inOmNAFwa/TQ
TLSH
T1B0A4084AEB5224E0D876D1B8C981521AF6B0BC7847349BDB729C41090F76AEC9E3DF58
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
816	Process not Found

C:\Users\Admin\AppData\Local\Temp\TraceX Final\tools\AMIDEWINx64.exe
"C:\Users\Admin\AppData\Local\Temp\TraceX Final\tools\AMIDEWINx64.exe"
1⤵
PID:6000

C:\Users\Admin\AppData\Local\Temp\TraceX Final\tools\amifldrv64.sys
"C:\Users\Admin\AppData\Local\Temp\TraceX Final\tools\amifldrv64.sys"
1⤵
PID:1564

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1664

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:4612

memory/1564-0-0x0000000000010000-0x0000000000017000-memory.dmp

Download