Overview
overview
7Static
static
3Popstar-CLEAN.zip
windows10-2004-x64
1Popstar-CLEAN.zip
windows11-ltsc_2024-x64
11h32pzt/li...lt.css
windows10-2004-x64
71h32pzt/li...lt.css
windows11-ltsc_2024-x64
31h32pzt/li...nt.png
windows10-2004-x64
11h32pzt/li...nt.png
windows11-ltsc_2024-x64
11h32pzt/li...ll.png
windows10-2004-x64
11h32pzt/li...ll.png
windows11-ltsc_2024-x64
11h32pzt/li...nu.css
windows10-2004-x64
71h32pzt/li...nu.css
windows11-ltsc_2024-x64
31h32pzt/li...lt.css
windows10-2004-x64
71h32pzt/li...lt.css
windows11-ltsc_2024-x64
31h32pzt/li...DME.md
windows10-2004-x64
31h32pzt/li...DME.md
windows11-ltsc_2024-x64
31h32pzt/li...es.txt
windows10-2004-x64
11h32pzt/li...es.txt
windows11-ltsc_2024-x64
11h32pzt/li...ts.txt
windows10-2004-x64
11h32pzt/li...ts.txt
windows11-ltsc_2024-x64
11h32pzt/li...ns.txt
windows10-2004-x64
11h32pzt/li...ns.txt
windows11-ltsc_2024-x64
11h32pzt/li...er.txt
windows10-2004-x64
11h32pzt/li...er.txt
windows11-ltsc_2024-x64
11h32pzt/li...r2.txt
windows10-2004-x64
11h32pzt/li...r2.txt
windows11-ltsc_2024-x64
11h32pzt/li...or.cpp
windows10-2004-x64
31h32pzt/li...or.cpp
windows11-ltsc_2024-x64
31h32pzt/li...itor.h
windows10-2004-x64
31h32pzt/li...itor.h
windows11-ltsc_2024-x64
31h32pzt/li...ns.cpp
windows10-2004-x64
31h32pzt/li...ns.cpp
windows11-ltsc_2024-x64
31h32pzt/li...dons.h
windows10-2004-x64
31h32pzt/li...dons.h
windows11-ltsc_2024-x64
3Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
05/08/2026, 03:58
Static task
static1
Behavioral task
behavioral1
Sample
Popstar-CLEAN.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Popstar-CLEAN.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
1h32pzt/libs/Clipper2/Documentation/CodeScripts/SyntaxHighlighter/styles/shCoreDefault.css
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
1h32pzt/libs/Clipper2/Documentation/CodeScripts/SyntaxHighlighter/styles/shCoreDefault.css
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
1h32pzt/libs/Clipper2/Documentation/Images/int.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
1h32pzt/libs/Clipper2/Documentation/Images/int.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
1h32pzt/libs/Clipper2/Documentation/Images/kangaroo_small.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
1h32pzt/libs/Clipper2/Documentation/Images/kangaroo_small.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
1h32pzt/libs/Clipper2/Documentation/Menu/menu.css
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
1h32pzt/libs/Clipper2/Documentation/Menu/menu.css
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
1h32pzt/libs/Clipper2/Documentation/Styles/default.css
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
1h32pzt/libs/Clipper2/Documentation/Styles/default.css
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
1h32pzt/libs/Clipper2/README.md
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
1h32pzt/libs/Clipper2/README.md
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral15
Sample
1h32pzt/libs/Clipper2/Tests/Lines.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
1h32pzt/libs/Clipper2/Tests/Lines.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
1h32pzt/libs/Clipper2/Tests/Offsets.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
1h32pzt/libs/Clipper2/Tests/Offsets.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
1h32pzt/libs/Clipper2/Tests/Polygons.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
1h32pzt/libs/Clipper2/Tests/Polygons.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
1h32pzt/libs/Clipper2/Tests/PolytreeHoleOwner.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
1h32pzt/libs/Clipper2/Tests/PolytreeHoleOwner.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
1h32pzt/libs/Clipper2/Tests/PolytreeHoleOwner2.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
1h32pzt/libs/Clipper2/Tests/PolytreeHoleOwner2.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
1h32pzt/libs/imgui/TextEditor.cpp
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
1h32pzt/libs/imgui/TextEditor.cpp
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
1h32pzt/libs/imgui/TextEditor.h
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
1h32pzt/libs/imgui/TextEditor.h
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
1h32pzt/libs/imgui/addons/imgui_addons.cpp
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
1h32pzt/libs/imgui/addons/imgui_addons.cpp
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
1h32pzt/libs/imgui/addons/imgui_addons.h
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
1h32pzt/libs/imgui/addons/imgui_addons.h
Resource
win11ltsc2024-20260709-en
General
- Target 1h32pzt/libs/Clipper2/Documentation/Images/kangaroo_small.png
- Size 43KB
- Sample260805-ejyfpada69
- SHA256 b37c36987b4346257d6a7e16c6fcf8ae809203a9d69a33572ac23f1e69241017
- MD5 38f35543c9c281ba6df230db9a3d3fe6
- SHA1 e89112d77832ecb6d52a6ee9ca11bb7a80b014c8
- SHA512 bc0d53ff1f8429723af2b3fe9509748d9a9ee746784ee45f4c1a836bba3846b8fd74e31d1884d8db872b517f9deccb08331c9a455649fd6f204ec75af5186f9b
- SSDEEP 768:UOEOwSCo1RRdOcuLYiGMUqWJpmy/oBXL6QNw3go5/raMI3zdFfJS0KJ/irtJv:UawSCo1RvOcKYirUsygBbf6l5jaMI3zf
- TLSH T143130289A409DC5560A3C14F33387FA78B368BE875194A0AD063BD7CF76168CDB06B56
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4676 mspaint.exe 4676 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4676 mspaint.exe 4676 mspaint.exe 4676 mspaint.exe 4676 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\1h32pzt\libs\Clipper2\Documentation\Images\kangaroo_small.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4676
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:2964