286e67730f1101f81920f9830d85654086e6e433beb2934e152799403f73d1dd

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
15/07/2026, 12:12

Target
SteamDaddy.exe
Size 16.8MB
Sample260715-pdcxxaft21
SHA256 286e67730f1101f81920f9830d85654086e6e433beb2934e152799403f73d1dd
MD5 02f17ff04d3823c22e1f8bc64b82b9cd
SHA1 a1115bbcc78bf54a11bbdb0edcd837a035fa53a5
SHA512 b6f46a8c40a2da3cabb3913578f969b78a61f9ff22fa7f0af740ee970bf68f00bfb0dd781b913dac777e5c581398fe859e11d777c7f4112fc259c3219cf2af12
SSDEEP 196608:u6y5gjfHPQHjC4T+hQReeKL2yzaC+fptfZe1t:u6yof8wQR+RzUtxef
TLSH
T1B4078D07F26581B8C076C075C656A623FB72B84A07306AEB37EC4A353F67BE05A39715
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2488	SteamDaddy.exe

C:\Users\Admin\AppData\Local\Temp\SteamDaddy.exe
"C:\Users\Admin\AppData\Local\Temp\SteamDaddy.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:2488