9064d68c4ee79d98144843b7e3f27fad48c68cca4cc2d090e5683b6682a878bc

Analysis

user interaction
yes
max time kernel
18s
max time network
6s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/08/2026, 16:25

Target
shadow.exe
Size 62KB
Sample260813-tw7mfstfke
SHA256 9064d68c4ee79d98144843b7e3f27fad48c68cca4cc2d090e5683b6682a878bc
MD5 11b20787be81b13a6c3ca494f81eaba2
SHA1 0c5a511ab7a506d09ca1d8a3e42ad2657b2538cd
SHA512 e04149554e785ecad39aee2d60a71968f3acd16ffbfcb03bf18a184a9bab418ad9cf75501bfdb1904c225f4cb57f5fb9a3185717199b11df202187a3749d0651
SSDEEP 768:6sFuXh2BEZ6nzcB5cCWeYwdsoc4zc5A8fZMCm50Dnj2cb3rVibVx:6s42ycn4lwwdlct4CPbsv
TLSH
T16B53F906B3E620DCD6BBC934DEFB5A72A771FC201564AF3D1290CA252C51B659E38F12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6084	shadow.exe
6084	shadow.exe

C:\Users\Admin\AppData\Local\Temp\shadow.exe
"C:\Users\Admin\AppData\Local\Temp\shadow.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:6084