5bd2449d67618cd909e74ed98b6318317d56ab2736374b655ad2216fcac27de1

Analysis

max time kernel
149s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/11/2026, 16:50

Target
snip.exe
Size 5.0MB
Sample261113-vb8jpady7p
SHA256 5bd2449d67618cd909e74ed98b6318317d56ab2736374b655ad2216fcac27de1
MD5 41254b42eff17601977f2200cd940a96
SHA1 ac81265ce2357cc50aa6cd3a1a2e2ca10b50bd50
SHA512 b7c67e3ef3ce888a0cf0a86545dca172ed1873c67ba836e644deccc9b8e5b350769d05645db4c77f1220edebc8bac7c988595a13233ef5bae0174a04498e89b0
SSDEEP 49152:7ca0YVi8HH5ibiQZOOpVVNcAPr+l4Vw81c0ivyD60civkrcXPQ42CnEa1wI223Q+:9TVNuDzVw8/D2Zp36+I2nwLBB7
TLSH
T17B362A16F6A654ACC496C4B4D3664673AA3178CE0B347AFF46C482343F7DBE05E28B19
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
3768	snip.exe
3768	snip.exe

C:\Users\Admin\AppData\Local\Temp\snip.exe
"C:\Users\Admin\AppData\Local\Temp\snip.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:3768