Analysis
- user interaction
yes - max time kernel
149s - max time network
151s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
25/04/2026, 10:36
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
WinMerge/WinMergeU.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
WinMerge/WinMergeU.exe
Resource
win11-20260130-en
2 signatures
150 seconds
General
- Target WinMerge/WinMergeU.exe
- Size 6.0MB
- Sample260425-mnmtrafv2w
- SHA256 e2676d78744f9731c17abb612c1e1834b5351001a7e31784174f569df8c79893
- MD5 7b688d2b288d522708347594af1eac0d
- SHA1 16bf0b1619bda250e07c52da23e432882aeacec2
- SHA512 421dba8fa9f4b1949f333c85c33fb993f506917849165ab1c41fc3181ec485d63eaa18b687b66ed17da2ed02e0e7c0de6a01317bc83bae0143d9060086908d41
- SSDEEP 49152:Y5ysyramYVJ9RUrxBgUDCql4aiOU3Q9Ud2cTLvL3j6VT09741+s7pZ/SgJL4Pylb:KOMha4yBbWGtbPDwvf5pR+Fxk8
- TLSH T166566B4A72EA45E5D0B6D178CE1645AFD6B2BC154B3187CF0170BA1A6F3B2D08E39732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 460 WinMergeU.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 460 WinMergeU.exe 460 WinMergeU.exe 460 WinMergeU.exe