2c67fb6eb81630c917f08295e4ff3b5f777cb41b26f7b09dc36d79f089e61bc4

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/10/2026, 10:32

Target
AMIDEWINx64.exe
Size 377KB
Sample261029-mk17zaa18w
SHA256 2c67fb6eb81630c917f08295e4ff3b5f777cb41b26f7b09dc36d79f089e61bc4
MD5 64ae4aa4904d3b259dda8cc53769064f
SHA1 24be8fb54afd8182652819b9a307b6f66f3fc58d
SHA512 6c16d2bc23c20a7456b4db7136e1bb5fcee9cbf83a73d8de507b7b3ffc618f81f020cde638d2cd1ef5f154541b745a2a0e27b4c654683a21571183f7a1bffd16
SSDEEP 6144:4NFU+vVycygjjsp5dcAONdA22xVK8LRPo4WBIeX+oD9/nwbr9W9v6i:4bygjjsrdcAONdA22xVK8LRPo4WGkD90
TLSH
T1ED84296AEBA620E4EC7791BC84912302F7A1B4644731D7E7B3AD451A4F33BE4A93D710
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
812	Process not Found

C:\Users\Admin\AppData\Local\Temp\AMIDEWINx64.exe
"C:\Users\Admin\AppData\Local\Temp\AMIDEWINx64.exe"
1⤵
PID:2636

C:\Users\Admin\AppData\Local\Temp\amigendrv64.sys
C:\Users\Admin\AppData\Local\Temp\amigendrv64.sys
1⤵
PID:1932