1d2fb3885e22a2852b8e18a9337bb1f7de986c19f6f2c5b5067c4ce5023fb041

Analysis

max time kernel
150s
max time network
132s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/08/2026, 16:24

Target
AllServices_module_v2.0.1.exe
Size 34.1MB
Sample260823-twvynaybmg
SHA256 1d2fb3885e22a2852b8e18a9337bb1f7de986c19f6f2c5b5067c4ce5023fb041
MD5 87ed2118ce7591847c9fe270ad690add
SHA1 3ee345ee8230170aecd66861d44d34344b336f72
SHA512 0a19f6284142f250dc17d623c01c68598cb0a2800aeeddce9f1a7ef96de9aafbcd20e956411e29ec733ffb1cd588d76920e9c278b6fc798e66b0d235a5495d7d
SSDEEP 786432:pFqyuMARGZWEGSwRHrSpMbxsRqE4y6fSUxGqB:3qyDAgWvSwRHeCE6fSUxG
TLSH
T10D77239364D453E8C6C34900928E13DA52D1A57E8DDF591D2BC73C026A31EF39A89FBB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
4940	AllServices_module_v2.0.1.exe
4940	AllServices_module_v2.0.1.exe

C:\Users\Admin\AppData\Local\Temp\AllServices_module_v2.0.1.exe
"C:\Users\Admin\AppData\Local\Temp\AllServices_module_v2.0.1.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:4940