Analysis
- user interaction
yes - max time kernel
10s - max time network
9s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
24/08/2026, 03:30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
tfloader.exe
Resource
win10ltsc2021-20260513-en
3 signatures
150 seconds
General
- Target tfloader.exe
- Size 207KB
- Sample260824-d2hyaaxygs
- SHA256 93190dd0a4fa15221de72b739581ec953b6fab27ae2ba3b8989ce169f0a57cf2
- MD5 f1ed8947bf917eafcba7695001cdbe4a
- SHA1 c5d2cb6fe15175a06695b0926e3a29c7371462ea
- SHA512 3bea278c80457335414cc01df7cc485260a6711467ec4ba461aebcee570e673bf01f8b07a11462bbbe1eef06f0ab5af78c85c23389e0c17714eedf4673ea178e
- SSDEEP 6144:EHGFBZpomWakbc8HY65AfETC9WkXdBQuHKN1sgHCrgH8:l+PHESLAgHC
- TLSH T1B7244B06A7D501FDE1B7C579CD815901EB727C0A4BB0EADF079049A29E73AA0AE3D713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4592 tfloader.exe 4592 tfloader.exe - Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 4592 tfloader.exe 4592 tfloader.exe - Suspicious use of SendNotifyMessage 2 IoCs
pid Process 4592 tfloader.exe 4592 tfloader.exe