d0fa8fe9470705926f4b608571f304893eb192de9ac5e916e42a3412ad024a46

Analysis

user interaction
yes
max time kernel
150s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/08/2026, 12:10

Target
ExiTrial.exe
Size 19.3MB
Sample260819-pcfbmsap4y
SHA256 d0fa8fe9470705926f4b608571f304893eb192de9ac5e916e42a3412ad024a46
MD5 7879ca6ff13297b3094548f971a60eb9
SHA1 d084f504ae7d65efefec3393e38248c5869e426a
SHA512 bc41869d69559c93df37b1efd33e89c4ed64eff7f837a2f00b9b716eaf63276d1ad1b953b0b3ad67ae62c20bfd7d136de9043591567a54ab996605131da28dc5
SSDEEP 393216:o7TysgyuqPj7TZ7urxC1vU18M14c5S9zClCgfcGk571EPol:X1s7EdC1cyMvS9KnmEQl
TLSH
T1DE1733A7D8C007F0D7E38B0191DB029FB3D17215D5A90E192689B8436BA3D1B674BE7E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
628	ExiTrial.exe
628	ExiTrial.exe

C:\Users\Admin\AppData\Local\Temp\ExiTrial.exe
"C:\Users\Admin\AppData\Local\Temp\ExiTrial.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:628