29d9873129a3ac257e7825057232e60ccb02f837548ee54414e7595201701916

Analysis

max time kernel
149s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/10/2026, 18:49

Target
ghost_sandbox.exe
Size 12.5MB
Sample261030-xgdbva1vb1
SHA256 29d9873129a3ac257e7825057232e60ccb02f837548ee54414e7595201701916
MD5 88dc36600f98e8699fdd729eb80fd936
SHA1 e6a338ef6c4954eba3082cd1fc13332aaf91316e
SHA512 877da38af5cf6064cc220476099d2cbb7d95430035c27661aa5505ecb70ee4f0481a82ec6bcc1e083936533fc95d0b1ff25ebaf877e4ed5d235e9f8df4f3b6ff
SSDEEP 98304:7B3pQ+vuRRsqFWSbM0zo+ZFR4he9ug5/3GapwakZv3LDY8jRoIek+u/fXYze1qFa:NNufUOwx4S
TLSH
T1ACD65B11BA5F55ACD15AC8B483078A739A2174CB0B36B9FF01C452393F6EBE05B2D71A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4348	ghost_sandbox.exe

C:\Users\Admin\AppData\Local\Temp\ghost_sandbox.exe
"C:\Users\Admin\AppData\Local\Temp\ghost_sandbox.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:4348