Kerish_Disk_Health_1.00 - Podejrzany program ?

Sorgi · Wczoraj o 17:08

Panowie u mnie Kerish_Disk_Health_1.00 kwalifikowany jest jako podejrzany program.

OPSWAT Metadefender Aether po analizie wyświetla :

Kerish_Disk_Health_1.00.exe
SHA-256
4a8b40589d3550104d44688249a189e2de7e4a0a85c9685d93ec29463ebc7737
Confirmed Threat

Zaloguj lub Zarejestruj się aby zobaczyć!

Zero-Day Detection

1
Threat Reputation
verified .

2
Sandbox Analysis
detected Confirmed and extracted files.

3
Threat Scoring
aggregated evidence. Final verdict is .

4
Threat Hunting
matched similar .
Threat Indicators

Confirmed Threat
1
Low Risk
20
No Threat Detected
24
other
1
Top Threat Indicators

HYBRID ANALISYS :

Analysis Overview

Submission name:
Kerish_Disk_Health_1.00.exe
Size:
12MiB
Type:

Zaloguj lub Zarejestruj się aby zobaczyć!

Mime:
application/vnd.microsoft.portable-executable
SHA256:

Zaloguj lub Zarejestruj się aby zobaczyć!

Submitted At:
2026-05-18 09:00:23 (UTC)
Last Anti-Virus Scan:
2026-05-18 09:00:27 (UTC)
Last Sandbox Report:
2026-05-18 09:00:23 (UTC)
malicious
Threat Score: 100/100
AV Detection: 3%
Labeled As:

Zaloguj lub Zarejestruj się aby zobaczyć!

-

0
Community Score
0

Anti-Virus Results

MetaDefender

Multi Scan Analysis

Malicious (1/26)

What customers are saying about CrowdStrike Falcon Endpoint Protection:
"The best product on the market for in term of balance in ease of use, functionality, and effectiveness. The interface is intuitive and well designed"

"Overall this has been a great product and one of the easiest deployments I’ve been through"

Zaloguj lub Zarejestruj się aby zobaczyć!

Zaloguj lub Zarejestruj się aby zobaczyć!

Zaloguj lub Zarejestruj się aby zobaczyć!

Falcon Sandbox Reports (1)

Windows 11 64 bit

Kerish_Disk_Health_1.00.exe

May 18th 2026 09:00:23 (UTC)

Malicious

Threat Score:100/100 Indicators:
7
63
188
Labeled As:TrojanDldr.OffLoader.genCharacteristics:

Relations

Zaloguj lub Zarejestruj się aby zobaczyć!

Input	Threat Level	Actions
is-HQ7SJ0I3KY.tmp 118fa6562dea0e4bd7a329e95038cca85da6fbe03b6160c516100fe39fec6e18	no specific threat
is-VX9KOLNUZ1.tmp 88034a11f5993fc705ba4b8c7ca32c9b4111dd7b039a759b28b236382feb7e29	no specific threat
is-D985NY0O86.tmp 8fffe8c4f4e035767e18cddd3c451c9ed2eaea4016618d26ac4ff826c192d73d	no specific threat
is-45CJJ7AFSL.tmp ab765dd819f157b4a9fb4eb102ba3624f70cfac4cc09679fb46b2084e30ed30b	no specific threat
ISTask.dll e916bdf232744e00cbd8d608168a019c9f41a68a7e8390aa48cfb525276c483d	no specific threat
78297d55d3976aab58c36544c56748afc8d11fcd1dd7a8e6def939db3a2f34c9 78297d55d3976aab58c36544c56748afc8d11fcd1dd7a8e6def939db3a2f34c9	suspicious
7f6f8beb11a80c2df908454a77218e145326e961cfd9152295a708b15122022f 7f6f8beb11a80c2df908454a77218e145326e961cfd9152295a708b15122022f	suspicious
_setup64.tmp 388a796580234efc95f3b1c70ad4cb44bfddc7ba0f9203bf4902b9929b136f95	whitelisted

Previous
Zaloguj lub Zarejestruj się aby zobaczyć!
Next

Incident Response

Risk Assessment

Remote Access Reads terminal service related keys (often RDP related)Spyware Found a string that may be used as part of an injection method
POSTs data to a web serverPersistence Creates new processes
Drops executable files to the application program directory (%ProgramData%)
Modifies auto-execute functionality by setting/creating a value in the registry
Spawns many processes
Writes data to a remote processFingerprint Queries kernel debugger information
Queries sensitive IE security settings
Queries the display settings of system associated file extensions
Stops or deletes service using sc.exeEvasive Executes WMI queries known to be used for VM detection
Found a reference to a WMI query string known to be used for VM detection
Reads VM-specific registry key
Sets the 'ThreadHideFromDebugger' thread data structureNetwork Behavior Contacts 2 domains and 1 host.

MITRE ATT&CK™ Techniques Detection

We found MITRE ATT&CK™ data in one report, this report has 246 mapped indicators.

Community

There are no community comments.
You must be

Zaloguj lub Zarejestruj się aby zobaczyć!

to submit a comment.

Zaloguj lub Zarejestruj się aby zobaczyć!
Zaloguj lub Zarejestruj się aby zobaczyć!
Zaloguj lub Zarejestruj się aby zobaczyć!
Zaloguj lub Zarejestruj się aby zobaczyć!
Zaloguj lub Zarejestruj się aby zobaczyć!
Zaloguj lub Zarejestruj się aby zobaczyć!

Zaloguj lub Zarejestruj się aby zobaczyć!

OXYGEN THIEF · Wczoraj o 18:07

Fałszywy alarm, program jest nowy, SPokojnie możecie go używać.

Kerish_Disk_Health_1.00 - Podejrzany program ?

Sorgi

Bardzo aktywny

Analysis Overview

Anti-Virus Results

MetaDefender

Multi Scan Analysis

Malicious (1/26)

Falcon Sandbox Reports (1)

Kerish_Disk_Health_1.00.exe

May 18th 2026 09:00:23 (UTC)

Malicious

Relations

Incident Response

Risk Assessment

MITRE ATT&CK™ Techniques Detection

Community

OXYGEN THIEF

Bardzo aktywny

Podobne tematy:

Kerish_Disk_Health_1.00 - Podejrzany program ?

Sorgi

Bardzo aktywny

Analysis Overview​

Anti-Virus Results​

MetaDefender​

Multi Scan Analysis​

Malicious (1/26)​

Falcon Sandbox Reports (1)​

Kerish_Disk_Health_1.00.exe​

May 18th 2026 09:00:23 (UTC)​

Malicious​

Relations​

Incident Response​

Risk Assessment​

MITRE ATT&CK™ Techniques Detection​

Community​

OXYGEN THIEF

Bardzo aktywny

Podobne tematy:

Analysis Overview

Anti-Virus Results

MetaDefender

Multi Scan Analysis

Malicious (1/26)

Falcon Sandbox Reports (1)

Kerish_Disk_Health_1.00.exe

May 18th 2026 09:00:23 (UTC)

Malicious

Relations

Incident Response

Risk Assessment

MITRE ATT&CK™ Techniques Detection

Community