5fc785e3738bb565e0940c24bf1c522de7133aa6ede888a122ca93cac8089e6f

Analysis

user interaction
yes
max time kernel
34s
max time network
24s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/08/2026, 00:51

Target
PurgeX.exe
Size 77.8MB
Sample260819-a7yddacc87
SHA256 5fc785e3738bb565e0940c24bf1c522de7133aa6ede888a122ca93cac8089e6f
MD5 45d53832d586647e76d0e6ee6482b92f
SHA1 d9073fe5ad9686eb9b81dc278b488300257765d1
SHA512 f8d24b565e42fb960f3357b5b2ee420bffe702b694589ae556ffb68482a82812fe20860e763d54371e95b879415f84b8361bdd3e3afca6d8e5f0aa836c20a82d
SSDEEP 1572864:te9zxrVLyGf64fqTWw/UteuwAedgzHFlf6yveHr/:t+rf64fqTWwIy7mHz2L/
TLSH
T17B08128365E572E480920F05A24F01CE11D5D8F6ABB97A183FC59803DA51EA75E8FEF3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
3292	PurgeX.exe
3292	PurgeX.exe

C:\Users\Admin\AppData\Local\Temp\PurgeX.exe
"C:\Users\Admin\AppData\Local\Temp\PurgeX.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:3292

memory/3292-0-0x00007FF6747A6000-0x00007FF677744000-memory.dmp

Download