Analysis
- user interaction
yes - max time kernel
12s - max time network
16s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
10/09/2026, 16:45
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
vgcemulator.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
vgcemulator.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target vgcemulator.exe
- Size 14.0MB
- Sample260910-t9rhdsvwcy
- SHA256 018c47628f00c4a473024d37fdc05c7646a34397b5f52a7a71a0cdaab68d9842
- MD5 3add43d538a1ad23dbd7ef4e8d72f226
- SHA1 212be5c207b94140cf9a417f38002d9e79a2ccfc
- SHA512 c7e4ca2f0d54a9caeb24ce105704c8947ea48f82bff21a6a454134bf11363099a55ff35cf95089c654e2f0915e179826d2cb4318e3f64c782555769f2a42c5ca
- SSDEEP 393216:7DGY0dd1+BBSOAMvltamPG5bW1z3bBemwZpgCC+:7DG9D+eqrasU2CC
- TLSH T1EDE623D13EC5A2ACC0A7CE35A5C7535DB0F223CAC2FE5A0F37C58C023A90E569E5A556
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 4932 vgcemulator.exe 4932 vgcemulator.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4932 vgcemulator.exe 4932 vgcemulator.exe