Analysis

  • max time kernel
    150s
  • max time network
    125s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    12/10/2026, 15:00

General

  • Target
    3c1e964b64e34027781dd1c0beab3f189812b42f6fc1774583183670d8de5609.exe
  • Size 30.5MB
  • Sample261012-sdggwaxvaz
  • SHA256 3c1e964b64e34027781dd1c0beab3f189812b42f6fc1774583183670d8de5609
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\3c1e964b64e34027781dd1c0beab3f189812b42f6fc1774583183670d8de5609.exe
    "C:\Users\Admin\AppData\Local\Temp\3c1e964b64e34027781dd1c0beab3f189812b42f6fc1774583183670d8de5609.exe"
    1⤵
      PID:1488

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          show_seg001.ts

          • Path C:\Users\Admin\AppData\Local\Temp\absorb-fold-1488\show_seg001.ts
          • Size 38B
          • SHA256 99a4d3c0dc165affd193ea9438cedde3302e4ada04fe227b684edc66d6e80a80
          • MD5 SHA1 SHA512

          show_seg002.ts

          • Path C:\Users\Admin\AppData\Local\Temp\absorb-number-1488\show_seg002.ts
          • Size 19B
          • SHA256 e023d33f278f97c8a202d0ef7db1674743c07e0396905981db5e8f4381a8af85
          • MD5 SHA1 SHA512

          library.mkv

          • Path C:\Users\Admin\AppData\Local\Temp\p44-50-cancel-copy-1488\library.mkv
          • Size 12B
          • SHA256 81521bc5c6eda129a2c0b2ad7e873b3600660142258055c2d1fb882dfb1cab1f
          • MD5 SHA1 SHA512

          old_show.ts

          • Path C:\Users\Admin\AppData\Local\Temp\p44-50-p49-17-retention-1488\old_show.ts
          • Size 5B
          • SHA256 721c9525ade2ea8903d343ef25cf68b9bf4ab0aad56bb7b01fbe48d09bc7fcf4
          • MD5 SHA1 SHA512

          Show.ts

          • Path C:\Users\Admin\AppData\Local\Temp\p44-50-waiting-1488\Show.ts
          • Size 8B
          • SHA256 0682c5f2076f099c34cfdd15a9e063849ed437a49677e6fcc5b4198c76575be5
          • MD5 SHA1 SHA512

          SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS - S00E01 - ________________________________~5ccbb384.ABCDEFGHIJKLMNOP

          • Path C:\Users\Admin\AppData\Local\Temp\p44-52-library-1488\SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS\Season 00\SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS - S00E01 - ________________________________~5ccbb384.ABCDEFGHIJKLMNOP
          • Size 7B
          • SHA256 73060ad79f2c28d9235e910e8040ca93e7e6a611a3df4f0aa3d0cf3616b37ba5
          • MD5 SHA1 SHA512

          AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA.mkv

          • Path C:\Users\Admin\AppData\Local\Temp\p44-52-library-collision-1488\library\AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA.mkv
          • Size 22B
          • SHA256 d0607f8ea0cd7ad7c6b92064c8a36a21ce10247aa9c2e623bf6fab4a614eb9f9
          • MD5 SHA1 SHA512

          AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA~b3adbd81 (1).mkv

          • Path C:\Users\Admin\AppData\Local\Temp\p44-52-library-collision-1488\library\AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA~b3adbd81 (1).mkv
          • Size 21B
          • SHA256 abdfd22fbc3a8730f520e2b34c201abb80bcf492477c472ce35ea68202e5904d
          • MD5 SHA1 SHA512

          source-0.mkv

          • Path C:\Users\Admin\AppData\Local\Temp\p44-52-library-collision-1488\working\source-0.mkv
          • Size 22B
          • SHA256 c1e416df4f218a319c319c2ee4faf63592f18443b54d66719af10643525fe6d9
          • MD5 SHA1 SHA512

          film.mkv

          • Path C:\Users\Admin\AppData\Local\Temp\parked-partial-1488\film.mkv
          • Size 900B
          • SHA256 2d13b239b4ee0963dca956fd1580ff27701acba4c90f4415262011b2e5f4f20d
          • MD5 SHA1 SHA512

          film.mkv.partial

          • Path C:\Users\Admin\AppData\Local\Temp\parked-partial-1488\film.mkv.partial
          • Size 500B
          • SHA256 b4907aba80525c49b856b4007563824ed344564a6b3b5fe86a745b2fdef7bc77
          • MD5 SHA1 SHA512

          film.mkv.partial

          • Path C:\Users\Admin\AppData\Local\Temp\parked-partial-1488\film.mkv.partial
          • Size 100B
          • SHA256 d876885b7f40eae70bd1f5247a9854914fa5812ce63998e2d894a68e187967cb
          • MD5 SHA1 SHA512

          Some_Movie_12.mkv

          • Path C:\Users\Admin\AppData\Local\Temp\plex-move-base-1488\VOD\Some_Movie_12.mkv
          • Size 11B
          • SHA256 0df16be1646c42779ea6a780c042c15b0f17a210cc153136b3246deb51f138ff
          • MD5 SHA1 SHA512

          part1.mkv

          • Path C:\Users\Admin\AppData\Local\Temp\publication-collision-1488\library\part1.mkv
          • Size 21B
          • SHA256 553fa01f50eb23419a7cf406af734f62276bb87004ce5d836c1fffb485421aab
          • MD5 SHA1 SHA512

          .owned-copy.part

          • Path C:\Users\Admin\AppData\Local\Temp\publication-copy-1488\library\.owned-copy.part
          • Size 7B
          • SHA256 9834a14ab9bcaa0f6a8da71073617eac8f004e596a3fa11d807b84631b825d9d
          • MD5 SHA1 SHA512

          part1.mkv

          • Path C:\Users\Admin\AppData\Local\Temp\publication-plan-1488\work\part1.mkv
          • Size 39B
          • SHA256 bc65796b3dd10c392fda95cabd3c180d05ffb7811d7f257f4198b34dc29898af
          • MD5 SHA1 SHA512

          part2.mkv

          • Path C:\Users\Admin\AppData\Local\Temp\publication-plan-1488\work\part2.mkv
          • Size 15B
          • SHA256 161ed7bae7f087db6cb39d1068201b3af79872deff877602482dbf46518c4a46
          • MD5 SHA1 SHA512

          fake-ffmpeg-verify-exhaust-1488

          • Path C:\Users\Admin\AppData\Local\Temp\recorder-engine-tests\fake-ffmpeg-verify-exhaust-1488
          • Size 485B
          • SHA256 abd9b2b6cea903aa2b410ccf72532f7396f433475edfd2463d28a002185fce3d
          • MD5 SHA1 SHA512 TLSH

          s5

          • Path C:\Users\Admin\AppData\Local\Temp\recover-repeats-1488\s5
          • Size 2.9MB
          • SHA256 4d3870d4655ed773027a713ea136507d22e076248e0e9cc920a996039653b76f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          a.tmp

          • Path C:\Users\Admin\AppData\Local\Temp\recover-temp-1488\a.tmp
          • Size 1B
          • SHA256 2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881
          • MD5 SHA1 SHA512

          .hidden-user-file

          • Path C:\Users\Admin\AppData\Local\Temp\scratch-sweep-1488\VOD\.hidden-user-file
          • Size 4B
          • SHA256 3fd30542fe3f61b14bd4a4b2dc0b6fb30fa6f63ebce52dd1778aaa8c4dc02cff
          • MD5 SHA1 SHA512

          Film.mkv

          • Path C:\Users\Admin\AppData\Local\Temp\scratch-sweep-1488\VOD\Film.mkv
          • Size 9B
          • SHA256 b04e5ea201bb040cae53f693f6a38a3e00b62da6039ca248fecd59b7fc842894
          • MD5 SHA1 SHA512

          show_seg011.ts

          • Path C:\Users\Admin\AppData\Local\Temp\segment-highest-1488\show_seg011.ts
          • Size 3B
          • SHA256 11507a0e2f5e69d5dfa40a62a1bd7b6ee57e6bcd85c67c9b8431b36fff21c437
          • MD5 SHA1 SHA512

          verify_99_7.png

          • Path C:\Users\Admin\AppData\Local\Temp\verify-prune-1488\verify_99_7.png
          • Size 3B
          • SHA256 8f8cbb7dcf46e0bc7d53265749a6c17d116093a6ba95e442764060c76fd4a86c
          • MD5 SHA1 SHA512