d2d9af1a4e1fa3d8655c3d75e7f8f89994cee010ea61a25fb820fee64af67250

Analysis

max time kernel
149s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/10/2026, 16:49

Target
prosvet-1.1.0-windows-amd64/prosvet.exe
Size 13.4MB
Sample261027-vbzlsaea86
SHA256 d2d9af1a4e1fa3d8655c3d75e7f8f89994cee010ea61a25fb820fee64af67250
MD5 2ddc118ac7220df793e836aeb58ac89f
SHA1 a1c02cbfe9999f47635d27e42e83a6233dbb2d9b
SHA512 c11c1a72f93c24633fbed6576d8865ef80d48ba98dee5f59044cc1c64b670f8a0eee9d90c0442ae2740bffd3090aec0403e3da1b34a6e6b22a2ed00f758bd461
SSDEEP 98304:vZRQ8wiK1hLa/JkcbkwUXPHSIofniGRcsVJqCmB5RMiCwDIS4TBrppUy1u7MHr4E:7yzhIIyNR3JqlMiCwMOD
TLSH
T121E64A17E9A614E8C0AEC134866792227B717C494B3127DB2B50F6383F77BD0AEB9714
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 7 IoCs

C:\Users\Admin\AppData\Local\Temp\prosvet-1.1.0-windows-amd64\prosvet.exe
"C:\Users\Admin\AppData\Local\Temp\prosvet-1.1.0-windows-amd64\prosvet.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4040