4e1f13789bc4e58f935961ec65cf79f752cf198c556de92a66f54f5e5b0c3c90

Analysis

max time kernel
150s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/08/2026, 03:35

Target
catalyst.exe
Size 1.8MB
Sample260806-d5m2eaff25
SHA256 4e1f13789bc4e58f935961ec65cf79f752cf198c556de92a66f54f5e5b0c3c90
MD5 c6d11eb901223feb34a7610e0326fe22
SHA1 f9ea90bcaba918ab7ef2d38c4dd1883a8f8ae0d0
SHA512 dba25044c42b003efd46761208f412e406518a2f329e2d7e7fefcf38ca8d5385ff795ee871857bca868675afbb4a3cef7466a21ba326b40122ebf7ccb184b0b7
SSDEEP 24576:9a1M2IOIWLnbc03nMPBJVmGWqR9OVV9Zlh0lhSMXltJAOp+mL1jJ3:9aMODPGVWE9y2PEmL
TLSH
T1FA958D11E79EC2D8C62DA4BC9652D703E33470022F1587CB5BA52D56AE27EE05FBEB10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4660	catalyst.exe
4660	catalyst.exe

C:\Users\Admin\AppData\Local\Temp\catalyst.exe
"C:\Users\Admin\AppData\Local\Temp\catalyst.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4660