85bf0ee4c29fc6c506a503ee9b89d648b5069978eb48a54384f5b38e98769bd2

Analysis

user interaction
yes
max time kernel
150s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/10/2026, 15:23

Target
aircard.exe
Size 7.7MB
Sample261023-sshcqas17n
SHA256 85bf0ee4c29fc6c506a503ee9b89d648b5069978eb48a54384f5b38e98769bd2
MD5 e9dcb24a7d67df37b4715fcecda7e3d4
SHA1 b72a93f78d39407af64acda76e41ebbff9afc171
SHA512 192a8d48a6ac6087036aba209809545fbfe2ad8b33d4382d5a4815dd6ff8cb329081354ef7e96361db60189a18774947e32a137e8a66a6806ef76df23eb5e588
SSDEEP 49152:kzxlMPeMQtpOn/CKKa58baNITooMZM7VU30o/y8OaPPSffER7u7C7pbogjj3Q186:d/Cnw5PPo2v/hpSqJdfbYZU
TLSH
T1AA867D02BB5799ECD15AC8B083069A735E2174CB0B36B9FF51C455383F6ABE05F2871A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
824	aircard.exe

C:\Users\Admin\AppData\Local\Temp\aircard.exe
"C:\Users\Admin\AppData\Local\Temp\aircard.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:824