Analysis
- max time kernel
150s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
12/10/2026, 15:00
Static task
static1
Behavioral task
behavioral1
Sample
3c1e964b64e34027781dd1c0beab3f189812b42f6fc1774583183670d8de5609.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
3c1e964b64e34027781dd1c0beab3f189812b42f6fc1774583183670d8de5609.exe
Resource
win11ltsc2024-20260911-en
General
- Target 3c1e964b64e34027781dd1c0beab3f189812b42f6fc1774583183670d8de5609.exe
- Size 30.5MB
- Sample261012-sdggwaxvaz
- SHA256 3c1e964b64e34027781dd1c0beab3f189812b42f6fc1774583183670d8de5609
- MD5 22965ad5c97f494b4b326774be6a3d2d
- SHA1 dd914008acaefd3733b15d427e3d2afc2db473d9
- SHA512 7fae340f27177aca4208cc3ec11bca81e60a3614c7292ff034b4f46b09054c7e2b91d2ca4dcef25668f0d72e1e32dbde2346f679a22eb91b3689ccd7b426e694
- SSDEEP 196608:yz2dhenmZavqUzOH/LGj918hMAcPoCxpkO6:yzmhemFUzOiuhfcPoC8O
- TLSH T15167D726767964D9D1BBC0B892838F22AE2174E907392BF745D182762F34EF86D3C354
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\absorb-fold-1488\show_seg001.ts
- Size 38B
- SHA256 99a4d3c0dc165affd193ea9438cedde3302e4ada04fe227b684edc66d6e80a80
- MD5 4cd4304f32424bac93083184058dd995
- SHA1 ce0b0738a713b621250d7061899601106863143d
- SHA512 cb5fa8f727d56bbf552cc4d120685cd25d8bf9d65818a84fdd4dc8d197cdf347af470616d10a7123fe8d9df629fd77b4d5539ade73d4853edf7c629242888649
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\absorb-number-1488\show_seg002.ts
- Size 19B
- SHA256 e023d33f278f97c8a202d0ef7db1674743c07e0396905981db5e8f4381a8af85
- MD5 f11e8a49c6ffd3892524138ca8e87b0e
- SHA1 22771796b563c6b0b56d9fb5e9bb2ec56ec88c73
- SHA512 0997713415993828fbf78e48f1bfd6109c5c7387b59994dc02f42f1bc9847bb5b38d025a936061418ecdcdbcda555637d73b5870a85cae8c04c9c56e123e4bab
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\p44-50-cancel-copy-1488\library.mkv
- Size 12B
- SHA256 81521bc5c6eda129a2c0b2ad7e873b3600660142258055c2d1fb882dfb1cab1f
- MD5 7d7d983705b65d7e37fc0b6c1044f642
- SHA1 bfe9f49f09125f3dd39c665296385aa2825efb3c
- SHA512 28d71a16611b56a8562121c8490b30097204608ddb9b39ec54b45ede0d458edab4012e2c9b17e6ac1ebd1604c45190eaec96547cf12aa35ae3b355a1174a69e7
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\p44-50-p49-17-retention-1488\old_show.ts
- Size 5B
- SHA256 721c9525ade2ea8903d343ef25cf68b9bf4ab0aad56bb7b01fbe48d09bc7fcf4
- MD5 62933a2951ef01f4eafd9bdf4d3cd2f0
- SHA1 bb362a46a483f3f8c993ec45978ae24e60b1ea4e
- SHA512 9b1daa940e84689fa9001d569fe58352c48670d2878f897fba413b406765ead922baa219ce283d0fffb54c7989fa6587aaac91a87fa75ac3a0a494c0187f70c6
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\p44-50-waiting-1488\Show.ts
- Size 8B
- SHA256 0682c5f2076f099c34cfdd15a9e063849ed437a49677e6fcc5b4198c76575be5
- MD5 919c8b643b7133116b02fc0d9bb7df3f
- SHA1 d73ef92426f2b11dfc4aed4d4bfc41c49ee1087c
- SHA512 c5ee067fb433795d5c8efeca78623791dc6ce524198b7223fe8310f81a38c9105da8a61714dd5a633e52dac7b57b33948afd94cb37c522f89781c9c25471a9c3
- MD5 SHA1 SHA512
SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS - S00E01 - ________________________________~5ccbb384.ABCDEFGHIJKLMNOP
- Path C:\Users\Admin\AppData\Local\Temp\p44-52-library-1488\SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS\Season 00\SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS - S00E01 - ________________________________~5ccbb384.ABCDEFGHIJKLMNOP
- Size 7B
- SHA256 73060ad79f2c28d9235e910e8040ca93e7e6a611a3df4f0aa3d0cf3616b37ba5
- MD5 5bd3307450f87ef12930e238afe9c7c5
- SHA1 c072e8329e3edd769ab66ffdf955e16fa1749cb4
- SHA512 002cf16dc8c2b7b313081b13b9a9d3dbd5e305f5a1902f7f114ced03e9d9115ae22b248f9478d64010497fa2fb9ef970b3f8a2fa6fc8a03aaaab9312c0ec6c22
- MD5 SHA1 SHA512
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA.mkv
- Path C:\Users\Admin\AppData\Local\Temp\p44-52-library-collision-1488\library\AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA.mkv
- Size 22B
- SHA256 d0607f8ea0cd7ad7c6b92064c8a36a21ce10247aa9c2e623bf6fab4a614eb9f9
- MD5 4f1070c2e99c18c05c00e6b3c234e812
- SHA1 baad393bb292352d6efd39848ef36aebd897cd30
- SHA512 517dd3d3753fe2989cc06f31244a2403e11ffb204d1312df76a4f7637de9bf1e439316bbb4592d63b7d6b1ff2eacc3dd006d26f0848a89cf335fa99e680589fa
- MD5 SHA1 SHA512
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA~b3adbd81 (1).mkv
- Path C:\Users\Admin\AppData\Local\Temp\p44-52-library-collision-1488\library\AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA~b3adbd81 (1).mkv
- Size 21B
- SHA256 abdfd22fbc3a8730f520e2b34c201abb80bcf492477c472ce35ea68202e5904d
- MD5 2e7c260a99c6476014f3d70de3155455
- SHA1 377cfafd40528b7738e4e4157b5afbc1e41422b5
- SHA512 783f568794936376ef93f22641d12dfb9d32d6a0aad6ea6c2fbaff4cf026fa8e4fe8b5870758ae66fbd14823ca904753cb19043b5fd01cf682a47fe36fda4bd5
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\p44-52-library-collision-1488\working\source-0.mkv
- Size 22B
- SHA256 c1e416df4f218a319c319c2ee4faf63592f18443b54d66719af10643525fe6d9
- MD5 294cd5d0a944be8276b5c46fbd0791ab
- SHA1 117b3c081a4ee9e4093a942122c3313073820d83
- SHA512 348428f8f2b36d77084b46e5bcf4a2a09b8d21c00ba26a99b2a30c1377d407ef9097a67a4e336fba33d8053ce81a158c5490164cab8cd035741bdcc56462edfb
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\parked-partial-1488\film.mkv
- Size 900B
- SHA256 2d13b239b4ee0963dca956fd1580ff27701acba4c90f4415262011b2e5f4f20d
- MD5 f615a89bd55e484a6fa520c317bd2ece
- SHA1 0431b203fd74fdd5c665b27cf9beb34497ace233
- SHA512 95b2d0ad0f597370bdeafa8eb50cc7b9ae270521f2d73ae7039569dbb2d86ed1745e7b1a7d8db4e496b57c15a57d3e1c748abd90e52aaef8b3ddfce4837d2672
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\parked-partial-1488\film.mkv.partial
- Size 500B
- SHA256 b4907aba80525c49b856b4007563824ed344564a6b3b5fe86a745b2fdef7bc77
- MD5 6723598f7d887de94d5800b1e64dfc74
- SHA1 a52a9fe508e38971de29e85de3b5812ad5a3788b
- SHA512 085ec3d251aa4abdd925fea2cea15410a6c5a5274ef942137ae6896128e9716067d4c8e4e510abf442a77e762d070dc0472fe6a09efabfedf9bc84c54648489b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\parked-partial-1488\film.mkv.partial
- Size 100B
- SHA256 d876885b7f40eae70bd1f5247a9854914fa5812ce63998e2d894a68e187967cb
- MD5 35ecc674664ca9947268988e99ea7c7d
- SHA1 f0768288b8897f1bdf5334eaa4efcec854cbf9de
- SHA512 f8a0f1dcd80f2fb9221111266841a8405110291c646fdce75c8174b4bb95cc807033a3cf4ee786bccefa03713e72ec78ad4cb38259a692de0249dcd3530e32c4
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\plex-move-base-1488\VOD\Some_Movie_12.mkv
- Size 11B
- SHA256 0df16be1646c42779ea6a780c042c15b0f17a210cc153136b3246deb51f138ff
- MD5 c1dc7b4d8d8793436ba019b2dcdf3bf9
- SHA1 6561fe8af2631a8bc5cc0c232e1dd9a5f465b191
- SHA512 15b7ab557d8083c7dbff110cebdb5850d836c60656ceef840e907bcb0469b29bbbdfcc9fa71bb1e26f5140f29bc9d953d93777c79b0852bfa6f150da6ca9c347
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\publication-collision-1488\library\part1.mkv
- Size 21B
- SHA256 553fa01f50eb23419a7cf406af734f62276bb87004ce5d836c1fffb485421aab
- MD5 486db9e1d1a7b1c8e511613b2699743f
- SHA1 bae8c94be02eb0505e5442541a232e10624532cc
- SHA512 d1d7827ebfbab84d0ab49f726d2c935467c25e39c029934ef384248fc2b36e6132af669eff95a83988fbf17ab992376b611997afa3dc6dfe45830746c0d7b7eb
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\publication-copy-1488\library\.owned-copy.part
- Size 7B
- SHA256 9834a14ab9bcaa0f6a8da71073617eac8f004e596a3fa11d807b84631b825d9d
- MD5 0e87c1212a698494dcdb198af3e0eb2f
- SHA1 355705cf62a56669303d2561f29e0620a676c36e
- SHA512 daa24d46a692e003e2831946f423821436dc1fd10c9992e9258ca63fa9c862bbd467bce80e953095fc004e70b30e903c0d55b6724898dc218764440c43052dfc
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\publication-plan-1488\work\part1.mkv
- Size 39B
- SHA256 bc65796b3dd10c392fda95cabd3c180d05ffb7811d7f257f4198b34dc29898af
- MD5 dca32fe0d7fe53089f9da472e1b17f0f
- SHA1 07392fcafb706bb23388c993b567ccb3076350f9
- SHA512 c7486ce3465431db4716783d487ff3b97bded60f1f77948947d157adde0cfb38e50798fdfe40482e7b8b23460c2e9ff362449cc0da54525581af3ee0edb0c568
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\publication-plan-1488\work\part2.mkv
- Size 15B
- SHA256 161ed7bae7f087db6cb39d1068201b3af79872deff877602482dbf46518c4a46
- MD5 312e0bcd9ff967c6d67f1401fe86b047
- SHA1 3a06f5b396534274c21d23aa8e5e2a45333c82a9
- SHA512 7a2f15a61edbac3dd7f7d2714bf3ff78adcb6214dd5dbd173b697631b74456a392b6c7a7e06d89a15a7e8c6d1d779efd27a214d1f72149f60933e24cbe1d202b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\recorder-engine-tests\fake-ffmpeg-verify-exhaust-1488
- Size 485B
- SHA256 abd9b2b6cea903aa2b410ccf72532f7396f433475edfd2463d28a002185fce3d
- MD5 88d824e9984da1d301bb0da321b33514
- SHA1 babb98c06057c1da40977ceca68e8c42f52ed66b
- SHA512 c3d7ad14477d03219a2d99335486dc775e1737bbf9d2a969f46f0ead135c38c904d79257e86b2bafbfb1e0d9785251120e0b29654b87c033dcb20b5e258c5d67
- TLSH T1A8F0AB1DA799D736378B75383B9B34E3C10A2237D2A06D90F2CF46943F0C221A0895AA
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\recover-repeats-1488\s5
- Size 2.9MB
- SHA256 4d3870d4655ed773027a713ea136507d22e076248e0e9cc920a996039653b76f
- MD5 d85bc23258cf4ec207963f9f2f02c38d
- SHA1 4aff3cc3812c535c3026504a756e78332356dd3e
- SHA512 b81a798b45fb1a363cae101abc7af6eced12d0ec26fcb5b4b5780594e69c84275858d5db532af73a9a40c34cba35454814f451e2b10304ef551f4b4742d772c3
- SSDEEP 192:znnnknnnknnnknnnknnnknnnknnnknnnknnnknnnknnnknnnknnnknnnknnnknnU:H
- TLSH T19DD59564E7A14E7E1F176ACCE08E58EF6A8FCEF301C9003517F146C2CA102A4840ED2D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\recover-temp-1488\a.tmp
- Size 1B
- SHA256 2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881
- MD5 9dd4e461268c8034f5c8564e155c67a6
- SHA1 11f6ad8ec52a2984abaafd7c3b516503785c2072
- SHA512 a4abd4448c49562d828115d13a1fccea927f52b4d5459297f8b43e42da89238bc13626e43dcb38ddb082488927ec904fb42057443983e88585179d50551afe62
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\scratch-sweep-1488\VOD\.hidden-user-file
- Size 4B
- SHA256 3fd30542fe3f61b14bd4a4b2dc0b6fb30fa6f63ebce52dd1778aaa8c4dc02cff
- MD5 918b81db5e91d031548b963c93845e5b
- SHA1 8034c43d15bb7ef42e2cc24255217acfc5f4b2f4
- SHA512 d27274ae7483dba0b59b5457792368578804905f96c2068cb8484d865b2d066caa99095853cc66d3805cef662c8668edb10194d64865c769cab10e97461664d3
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\scratch-sweep-1488\VOD\Film.mkv
- Size 9B
- SHA256 b04e5ea201bb040cae53f693f6a38a3e00b62da6039ca248fecd59b7fc842894
- MD5 8f888fedf6bd5ff7c93c6d76bb8dc21c
- SHA1 c2807535f28e44fe6c7375dcf90518115529a8fa
- SHA512 1eb9471b65d326a5358d285d6778f590ab34397a53f7e457611bf7420cd9f6df8d34087b40caf277e37ebd4a795fd2a3410ecb5a464d06917307e77ecda03006
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\segment-highest-1488\show_seg011.ts
- Size 3B
- SHA256 11507a0e2f5e69d5dfa40a62a1bd7b6ee57e6bcd85c67c9b8431b36fff21c437
- MD5 22af645d1859cb5ca6da0c484f1f37ea
- SHA1 c2a6b03f190dfb2b4aa91f8af8d477a9bc3401dc
- SHA512 aa54def9e0bb11c1ebbfc97a9ee63af9e95c4fdf1d032b1ddcc0f21661f748651d2b2b8fb94e9ae041780554db29815daa1c0fe991ddae54eff0c4c28cd9d20c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\verify-prune-1488\verify_99_7.png
- Size 3B
- SHA256 8f8cbb7dcf46e0bc7d53265749a6c17d116093a6ba95e442764060c76fd4a86c
- MD5 bff139fa05ac583f685a523ab3d110a0
- SHA1 9040a7d6cdf7a0d6cab1823831c6ceb7d01af97f
- SHA512 a3ef22235351b8a90cbdeb9ca6c8ae4cf95992464be95d89cc7fd1c5cd18967336073a1bc9fcc6a8c84c4297c7f5d747d778960cd520f65ec261b8ca02aada9f
- MD5 SHA1 SHA512