8d2cd80ccb194f221f4eecd3860100703bbacc1536ec754583525464f0f1ce38

Analysis

max time kernel
149s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
17/10/2026, 04:26

Target
bs/x64/Release/external-base.exe
Size 710KB
Sample261017-e2gwnadb29
SHA256 8d2cd80ccb194f221f4eecd3860100703bbacc1536ec754583525464f0f1ce38
MD5 c900b4fec3ac36cff289e067362040c5
SHA1 dac4f598ab6676704d2d4f003fc3b6344134c524
SHA512 b394b9e8935333c5b55ba25f2b333f6b95a70a8f5d2216daa52968d3dbf2aedcc6a2cb55167e784ef374ef418d382d3a919f26deb54b7d27c477872c06915de5
SSDEEP 12288:wpD97LH2EqxZAH1QdlmTg9+NpEMJph0lhSMXlitia33W1nNe:wpZLWE4ZQBg9epvh0lhSMXlgij1nN
TLSH
T153F4AF41F6F541FCD02B91349AAA6A0FFA363448071059CF63E849982FF37E55ABB712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4124	external-base.exe
4124	external-base.exe

C:\Users\Admin\AppData\Local\Temp\bs\x64\Release\external-base.exe
"C:\Users\Admin\AppData\Local\Temp\bs\x64\Release\external-base.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4124