e04d466c109e04eb53e82e7517d5916b8decf5b31ff9e9ab481fbbdda4735b9e

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/08/2026, 17:14

Target
pixgrep-mcp.exe
Size 4.6MB
Sample260815-vr2fbagh42
SHA256 e04d466c109e04eb53e82e7517d5916b8decf5b31ff9e9ab481fbbdda4735b9e
MD5 6046f9fcb28d3642fdb240b3521d0c24
SHA1 9b42db2c4b6fa44c143b6fb912276ce62f3408f0
SHA512 ac1a721c9a245446583777739327b06c428bbbadeb2148d431348de40cbf4af387bc0fdd77c8d8e1c5b5f12e28a4d12ea2e08e6c6d8dfb91fa752c7aabb72211
SSDEEP 49152:6bRc0eR+y8rcx2/p4Lzvp+YS1eKrIQ/6tC6Q1ZylRGupv/oTGK8dUSCOScU6JKKu:nY3/pOS1eKEQ/6W6Rg8SSCp
TLSH
T1FD266B03F7F540DCC8AAC2B4D7BA9323F7727C890620A36B5BD456216E2AF506E5DB05
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Drops desktop.ini file(s) 3 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Pictures\desktop.ini	pixgrep-mcp.exe
File opened for modification	C:\Users\Public\desktop.ini	pixgrep-mcp.exe
File opened for modification	C:\Users\Public\Pictures\desktop.ini	pixgrep-mcp.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}\Instance\	pixgrep-mcp.exe

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact