dab900b5af97c51bdc6677718cdcdffb09bb320f5f73b58b630a7c975f436471

Analysis

max time kernel
150s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 13:49

Target
DotaRevoice/DotaRevoice.exe
Size 12.5MB
Sample261027-q4644sdf95
SHA256 dab900b5af97c51bdc6677718cdcdffb09bb320f5f73b58b630a7c975f436471
MD5 81289a39d2e7a4b6944ee856978d23a3
SHA1 5631a5e73002d52bcdd40e6cc17059bbdd9af1cd
SHA512 4678520bda51b4de69dc51d1a54bd4cf88ff11a0eae12ca779b56b755166872209d68cddf25056e9a54aa7174c66c5955ec5ed580f6981b9e2d2cd4ac8b3749a
SSDEEP 98304:rmRW1yg5oSj+GPf+sZkVUz91zfIfcjMgTlbA+vM9:rmRW1ygv+qGVA9NfIfgTSp
TLSH
T165D66C11B79A99ACC05AC87093468633AA3174CB0B39B9FF45C455382FAABF05F3C759
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4884	DotaRevoice.exe

C:\Users\Admin\AppData\Local\Temp\DotaRevoice\DotaRevoice.exe
"C:\Users\Admin\AppData\Local\Temp\DotaRevoice\DotaRevoice.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:4884