f034c8be9ec62d768d0b363cd53df696a63958b9ea8f9191eaf9d08f084fd8f3

Analysis

max time kernel
149s
max time network
117s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
17/05/2026, 09:15

Target
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/sai2.exe
Size 5.4MB
Sample260517-k71tlset3z
SHA256 f034c8be9ec62d768d0b363cd53df696a63958b9ea8f9191eaf9d08f084fd8f3
MD5 bd60d6750ef57668f9bc44eb98d992c4
SHA1 f23d3d7ee1d358a7495a8bb42206b732487d14b9
SHA512 5060917c7afed420d1358a75016b90c1cf5c7099c98109e4a2fd8f7b1a5ce8ab415fff79f8ea620acf0dac10882606e817d11a93f5c45fc9ac5691a5a9c334e4
SSDEEP 49152:ulsjbSFcuzEflm9Xs4QsG1TxK1eQiLqBGoTt29aTIpA9Ut+ZTbd6ct:ulsv2rXPiL9a1hd6C
TLSH
T1A346A541665888C6E0276130F55C676E6BB07C890351D2CB2765BF09BEF3AD0AE76FB0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5056	sai2.exe

C:\Users\Admin\AppData\Local\Temp\Easy Paint Tool SAI 2\Paint Tool SAI 2 (64bit)\sai2.exe
"C:\Users\Admin\AppData\Local\Temp\Easy Paint Tool SAI 2\Paint Tool SAI 2 (64bit)\sai2.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:5056