7486f8fe9e34ffca3f0e3a846cffbf35eca07bd860274d5502e612b9af5e76eb

Analysis

user interaction
yes
max time kernel
8s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
20/08/2026, 03:09

Target
Free Internal_Protected (2).exe
Size 14.2MB
Sample260820-dnv1payfja
SHA256 7486f8fe9e34ffca3f0e3a846cffbf35eca07bd860274d5502e612b9af5e76eb
MD5 6336d4cb14ffd39635ad7be7d23a24c6
SHA1 f70173f0b46f1fb5d163766929f768c45c870c61
SHA512 3435cc1d1ccb6e3b62ff4e01695027f48f3eb681b113e51812b9b7bf9984ec13e47cc1b327de3d13cc9cf2451dde85d7be67e4176a5f38c5c00dda9d6c08b515
SSDEEP 393216:tDBk3w2n51NkFTp+FqnxMkxMN9Sqw53EtdT6:tF0DuTdn5xk941E
TLSH
T1FBE623EE84C622E4C9D75B80524E1BCE71E0F11E46ADAC2D37C62C826536F97558EE33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
4900	Free Internal_Protected (2).exe
4900	Free Internal_Protected (2).exe

C:\Users\Admin\AppData\Local\Temp\Free Internal_Protected (2).exe
"C:\Users\Admin\AppData\Local\Temp\Free Internal_Protected (2).exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:4900