76b2e6d5ffb34e1f7b9c16e84b675e900d23ddc975ad9fd845ac0e9008961bcc

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 11:12

Target
FireResolve/FireResolve.exe
Size 5.7MB
Sample260930-na7gnssepg
SHA256 76b2e6d5ffb34e1f7b9c16e84b675e900d23ddc975ad9fd845ac0e9008961bcc
MD5 5af9302bedd9b44f5777c2e56c7aa8d2
SHA1 08a6a2256be35781af360fbe46467a1c4d666189
SHA512 2053af819d9ae39f42c61891f9d189490bf042cd968ff3842efd2c4821574489c1e785966fdf5d1efa7c6d0fa45ef75ce7efa43fae597467bb763378a9485aaa
SSDEEP 49152:bZPKFYXbZqSCdCMzSRZqFkfIknyfv9dS8T5HedUH8oG68x8Cq368AO3G2hwU1i8D:b9K3SCdynsaM/wU1i8WdEUzA0tb1
TLSH
T14F569F87E2E2C2FFD14EC5706153B133E523B446062DB26B7BC55F106E91FA08B4A76A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1392	FireResolve.exe

C:\Users\Admin\AppData\Local\Temp\FireResolve\FireResolve.exe
"C:\Users\Admin\AppData\Local\Temp\FireResolve\FireResolve.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:1392