36f1a49ef15923b57db7eaa3a3190c9833352f2627bfcf3ca9d61504ecf119bb

Analysis

user interaction
yes
max time kernel
30s
max time network
33s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/08/2026, 02:56

Target
ParzPainter.exe
Size 152KB
Sample260803-de7m5abc47
SHA256 36f1a49ef15923b57db7eaa3a3190c9833352f2627bfcf3ca9d61504ecf119bb
MD5 dd6ae81861c6d1dcdb7556657d45f0a7
SHA1 efd4d053014889f9f9abc5f4b55d19c7072c5209
SHA512 89c4fbd065859333cb16ba2dc4b325cc13c97c09cc7be4808c14c91c8f713815f5e318ff2c609f8e8fb09768e74e0b28a1b84b9753e428b997cacac73359d63e
SSDEEP 3072:rkSZxwxEAhN6O2hRVybb0hH1e/XfzYJ+GtjUva:vZxwxEyNQFyb0hVZA
TLSH
T1FBE36C47B3E531F9E1B7827888611602E772B8760770AB9F07A447766F236D09D3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4616	ParzPainter.exe
4616	ParzPainter.exe

C:\Users\Admin\AppData\Local\Temp\ParzPainter.exe
"C:\Users\Admin\AppData\Local\Temp\ParzPainter.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4616