YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 4554af0718410b30d3397d1c28eb208a1621c677e904866d4ceb308a951b207f.

Scan Results

SHA256 hash: 4554af0718410b30d3397d1c28eb208a1621c677e904866d4ceb308a951b207f
File size:61'440 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 0ce42d070131ef466ec10d67c1091709
SHA1 hash: 45c7baa1276804a01d78055dcd6fcb41dbd5c59e
SHA3-384 hash: bbf9360e722372e37b8f2192876fcb1502310c556b5eb9d810e2e581e253595b0819ee9983e6e44348fbc6d23e6df582
First seen:2026-01-19 18:09:46 UTC
Last seen:Never
Sightings:1
imphash : ea3bc3b13a494dfa363d1e6266adbf3f
Create hunting rule
ssdeep : 1536:HR9+C+hxhRw0fgwN+SfF9Us0zcz3Qu3/TwX:D+rhxU0f/vfF9Us0Yzgu3/8
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:09e5c639-f562-11f0-9df4-42010aa4000b
File name:72af0000.amsi.dll
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:DebuggerCheck__API
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE
Rule name:DebuggerCheck__QueryInfo
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.