ead44621ee008ec9ae3d79454f9e8970ed265b41781942a7adc5042e6d26903e

Analysis

max time kernel
0s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/10/2026, 02:50

Sharing

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\EFI\CLOVER\drivers\UEFI\FSInject.exe command="C:\Users\Admin\AppData\Local\Temp\EFI\CLOVER\drivers\UEFI\FSInject.exe" wdir=C:\Users\Admin\AppData\Local\Temp\EFI\CLOVER\drivers\UEFI Payload error: The %1 application cannot be run in Win32 mode.

General

Target
EFI/CLOVER/drivers/UEFI/FSInject.exe
Size 16KB
Sample261027-dbyaaaaz7j
SHA256 ead44621ee008ec9ae3d79454f9e8970ed265b41781942a7adc5042e6d26903e
MD5 6c3b742bb1c6a554e29c8ddb0edf86b4
SHA1 471410a1e4460021f15333637dfb67716ae46485
SHA512 aab972c15dc303ba6acbb79dfef26054cac72b6b376fb0da4d3dc8a09ecea2283f13ba9527c88c4260e1cd765b1b5660182269f42ab240f7e7e8f0bd66542e23
SSDEEP 384:+ZTf9zLKcGBNJN8fmhKg0DmG4LNpZoh5WOofTppKBPJ:MfccGBNINg0yjLNpZoh5fUfUP
TLSH
T184721C12F2A21078C19BC3716B73BEA67DB9FC8C467417FA5311B2013FA6B54D62D621
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\EFI\CLOVER\drivers\UEFI\FSInject.exe
"C:\Users\Admin\AppData\Local\Temp\EFI\CLOVER\drivers\UEFI\FSInject.exe"
1⤵
PID:4804

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads