8acf8d73168aace011054d12273362baf2a08412ee0ccf933b1640849d641811

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/11/2026, 03:54

Target
opencode-config-gui.exe
Size 17.6MB
Sample261113-ef91bazv7l
SHA256 8acf8d73168aace011054d12273362baf2a08412ee0ccf933b1640849d641811
MD5 7d49b5ee9ae63f7876e7013a1abe0aad
SHA1 b3aef9f192fb8410fa00e012ca6d24964190ee61
SHA512 03f0280969fa37e87ad2d650bc5b5fc1137e5b24c015b4afbbb96ea97be7a9e541561c0b34afa53d7bb5a1e9ce45422964b904a30232ef706ce74fc73446fbe5
SSDEEP 196608:5nbJGtY50/IgZoJdwo92SF9Wwv5o18BA:5nbJEY4IrJdwo92SF9Wq5o18B
TLSH
T1230749117B8A99EDC06AC87083468A735A6170CB0B35BAFF45C846393F69AF55F3C358
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4992	opencode-config-gui.exe

C:\Users\Admin\AppData\Local\Temp\opencode-config-gui.exe
"C:\Users\Admin\AppData\Local\Temp\opencode-config-gui.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:4992