e928abe5f1e7d4ae56cfa401499717311062cf1808c9cc522a6012af7fac87e7

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 03:44

Target
sai2-20241123-64bit-en - Copy/sai2.exe
Size 5.3MB
Sample260804-ea1vfsvwc1
SHA256 e928abe5f1e7d4ae56cfa401499717311062cf1808c9cc522a6012af7fac87e7
MD5 f479481188ccc01b969d24e4dd5f279d
SHA1 0aa13ae137f76755dcd36b4e10ef06cc20c998c3
SHA512 dd13147c314f65924bf9dae8faa21fd1aa132ce7ba25541fb8fe9a350668406958950e2972d6911cb8e59d0428a3ec7a7960f999f5267821bdb16e40cece761c
SSDEEP 49152:HJiov6u4+IV7mzsahyVLWu0Rj7JQSm40ejsP303Sz33sT5N8r9G:HJiN8r7OSmWsxS
TLSH
T1B446B541A65888C6E0176030F55C676E6BB07C894351D2CB2B75BF09BEF3A90ED76EB0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1696	sai2.exe

C:\Users\Admin\AppData\Local\Temp\sai2-20241123-64bit-en - Copy\sai2.exe
"C:\Users\Admin\AppData\Local\Temp\sai2-20241123-64bit-en - Copy\sai2.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:1696