e48300027b87ccf15d1322ca4b6fc1c5fdf41a40e256745bbf12e182fef1704a

Analysis

user interaction
yes
max time kernel
149s
max time network
134s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/10/2026, 17:52

Target
ZyroExternal.exe
Size 1.1MB
Sample261014-wfrbmsgx2x
SHA256 e48300027b87ccf15d1322ca4b6fc1c5fdf41a40e256745bbf12e182fef1704a
MD5 d5e3bcfd897b36c7031b1c0d69e77e17
SHA1 3d31f8621d523616b45b9b080d12789fcabb56f4
SHA512 770cacdaff866134e1d45cc8febfc83f9bfc6208f984b6f33501394f6b14b0103244a452032875b6aabb20fef9eb0918b8518a6c9fb6a361e1c2cfb9ca18a6a8
SSDEEP 24576:zBc7SVWknV0exdy7bz+nM5durHlNIi3WnkuO:dMkeW5M5oHlL3Wnl
TLSH
T16745AE45B2F900E8E47B9174DAB4A11BEA7278541B309ADF13D0065D2F737E05BBBB22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
3932	inpoutx64.sys

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
656	Process not Found

C:\Users\Admin\AppData\Local\Temp\ZyroExternal.exe
"C:\Users\Admin\AppData\Local\Temp\ZyroExternal.exe"
1⤵
PID:2268

C:\Users\Admin\AppData\Local\Temp\inpoutx64.sys
C:\Users\Admin\AppData\Local\Temp\inpoutx64.sys
1⤵
- Executes dropped EXE
PID:3932

inpoutx64.sys

Path C:\Users\Admin\AppData\Local\Temp\inpoutx64.sys
Size 14KB
SHA256 f8965fdce668692c3785afa3559159f9a18287bc0d53abb21902895a8ecf221b
MD5 9321a61a25c7961d9f36852ecaa86f55
SHA1 6afc6b04cf73dd461e4a4956365f25c1f1162387
SHA512 16443809a625bc9ce70cb1b993e14a621fd10355075390d2f924dbe2e46dae82751d8fbca9d916420c062a4ac4c7f10b517b9affbff8323582f601c824ea4d08
SSDEEP 192:31Hhhh0mwRJnyowJL/aMjGwP7HM3UM+ebMPkuZgjlBME:lH90mwRJnYJLWZLbkku6j
TLSH
T15762F8D307622155EC968F31D1EAD7B3AD72F5846FD691CB103088AA1E46BF02F7C61A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/3932-2-0x0000000000010000-0x0000000000017000-memory.dmp

Download