Analysis
- max time kernel
148s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
07/11/2026, 12:48
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
PEIMH.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
PEIMH.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
General
- Target PEIMH.exe
- Size 78KB
- Sample261107-p17e2ab131
- SHA256 7cb948d80b87550d1631a2d72f387cde91e2f9941c4ec7696057367c465f5fb5
- MD5 4b4926f0f7e4b7c33aa7f67e1f3ef78f
- SHA1 a8f422e45ff1c9c55981d601d02a761d8e89d33b
- SHA512 bdffa2bb55e19d120f29242f97d50db983af6e2fd78898871fa431148322e789e92646746abd77c391cbed04775f827964aecb99b265995674e85bdd561922e8
- SSDEEP 1536:8my/kPAOaU6HivixfIGHmX7KvLwixriYu7oBFX/cwksB/EO:8my/kPAFzCvENHUCLwixriToP/cwXR
- TLSH T103736C46E393D0FCC6CBC1B482E2577DBA317C750524BF3B5298EA701E15C506AAD93A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 3352 PEIMH.exe 3352 PEIMH.exe - Suspicious use of SendNotifyMessage 2 IoCs
pid Process 3352 PEIMH.exe 3352 PEIMH.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3352 PEIMH.exe