04b9882f5ea3410da0eee11a49eeabff6c25dada6aecd7daffb4c3ab63e10632

Analysis

max time kernel
298s
max time network
262s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/04/2026, 07:15

Target
183819.exe
Size 71KB
Sample260424-h29s8aay2t
SHA256 04b9882f5ea3410da0eee11a49eeabff6c25dada6aecd7daffb4c3ab63e10632
MD5 1cd2f4a74ad6ac2de5ecf8bb9f12c723
SHA1 da225edd4a72f2283343ccb593e5867d75db8f04
SHA512 93b999c0b79af73c60deb10ef32b0dae1b7eeb13aea99ee9342b891a06c69d19164315f254a1e36738ef961e0c7dbdf64959ec969a07ecc95181737c1e36181c
SSDEEP 1536:xCYRJq11cYZ8sNQCFWJsSEH2VmFgme40IXf:Y8JuXnFcJsSc2Vma94tf
TLSH
T13C635C6E2B5900E5F13A803DC9A3421AE3B1B8601B325BDF5A64835F1F67EE55E3A311
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4756	183819.exe

C:\Users\Admin\AppData\Local\Temp\183819.exe
"C:\Users\Admin\AppData\Local\Temp\183819.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:4756