0ee0ced6340747c08b04bafea4ee0206407b1ba6741ec93ea1cbb0c338c1fd9b

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 17:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
HistorySenseLoader.exe
Size 20.1MB
Sample261102-whtjsaby6x
SHA256 0ee0ced6340747c08b04bafea4ee0206407b1ba6741ec93ea1cbb0c338c1fd9b
MD5 a3e32f45dbabb2dceb6439a72047b5ea
SHA1 97285579bd1c4e4afe51ae544fae9595160d68bc
SHA512 2fd8a9e5259710209ea19611ad934603aac1435481ba605705ab916ebde2bb414f31e38cf0e001c5698cccdffee36faef9f8e4ad036db49010134f5eb447dd4c
SSDEEP 196608:4z2wb3O8c0A6uXns6Fgb931GU6AY2ezECOI:4zf+8c03GsP6asrO
TLSH
T119273A12E6058C61D05DA1F8E05D2D9924A98C13CF552EC3731CB94EBFBE1CE2A7E4AD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	HistorySenseLoader.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4828	HistorySenseLoader.exe

C:\Users\Admin\AppData\Local\Temp\HistorySenseLoader.exe
"C:\Users\Admin\AppData\Local\Temp\HistorySenseLoader.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
PID:4828

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

skeet.dll

Path C:\Users\Admin\AppData\Local\HistorySense\releases\eb6743716effe0e346f15ee282233016ae34ecfbada5da96a4ec20b052a8c5fc\skeet.dll
Size 14.0MB
SHA256 eb6743716effe0e346f15ee282233016ae34ecfbada5da96a4ec20b052a8c5fc
MD5 3849a8c8f8f4002e800cdcd3a00cc361
SHA1 081253a795a1930aa54553a1561f04b6442bace2
SHA512 2c719a009eacc363e930fd19b59e1a8977e804329a2cd74da940b63b284e377434429cab8c60fc31c1da4391a52747d2719d01d33165811e0874dccff76b4127
SSDEEP 98304:Kaz0PwC4UZu6mnMoKZ5KhikO4b462SDGTb931GdTgCGberJIQsY2e+w3dqipTOf:L0A6uXns6Fgb931GU6AY2ezECO
TLSH
T173E61912E6059C61D06DA2F8E05E2D9924994C13CC956EC3731DB90FBFBE18E2A3E47D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download