1abb0d661ef469b57359522c3198ed0f99a6c5d229db538ae0c604209cabea6f

Analysis

user interaction
yes
max time kernel
54s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
05/09/2026, 17:50

Target
Frostveil 1.3.2/Frostveil.exe
Size 107.7MB
Sample260905-wer7jszaqf
SHA256 1abb0d661ef469b57359522c3198ed0f99a6c5d229db538ae0c604209cabea6f
MD5 67b48bc7f837c90e5c8aa0c6bfc5e977
SHA1 79f75680d0f54f4978f04abec708122b592b2161
SHA512 a352985b447f31cbf096d5ab0a14faa588bf7da7df98af7ec0227e2b0e6877e7d679327e21d8cb975ccb0d78b830e190b4fa3e7209cda5696121803e68b349e2
SSDEEP 3145728:kKHWKU4xcwnKWK9NOcsrnq5NV43s2vbTIZ04N4IZQ:kKHPxLK1+nqqf49JQ
TLSH
T1D3483365D4B6AC09CC3F2174C32B829A55195E1EC921F06B65D07F38783FDCB2723AA6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3308	Frostveil.exe

C:\Users\Admin\AppData\Local\Temp\Frostveil 1.3.2\Frostveil.exe
"C:\Users\Admin\AppData\Local\Temp\Frostveil 1.3.2\Frostveil.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3308

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:3132