Overview
overview
7Static
static
3gtkhash-w3...er.exe
windows10-ltsc_2021-x64
7_icons/org...sh.ico
windows10-ltsc_2021-x64
3_scripts/postinst.cmd
windows10-ltsc_2021-x64
3_scripts/postinst.sh
windows10-ltsc_2021-x64
3mingw32/bin/edit.dll
windows10-ltsc_2021-x64
3mingw32/bi...he.exe
windows10-ltsc_2021-x64
1mingw32/bi...rs.exe
windows10-ltsc_2021-x64
3mingw32/bi...as.exe
windows10-ltsc_2021-x64
1mingw32/bi...le.exe
windows10-ltsc_2021-x64
3mingw32/bi...er.exe
windows10-ltsc_2021-x64
3mingw32/bi...ch.exe
windows10-ltsc_2021-x64
3mingw32/bi....0.exe
windows10-ltsc_2021-x64
1mingw32/bi...sh.exe
windows10-ltsc_2021-x64
3mingw32/bi...-0.dll
windows10-ltsc_2021-x64
3mingw32/bi...-0.dll
windows10-ltsc_2021-x64
3mingw32/bi...-1.dll
windows10-ltsc_2021-x64
3mingw32/bi...on.dll
windows10-ltsc_2021-x64
3mingw32/bi...ec.dll
windows10-ltsc_2021-x64
3mingw32/bi...nc.dll
windows10-ltsc_2021-x64
3mingw32/bi...-1.dll
windows10-ltsc_2021-x64
3mingw32/bi...-2.dll
windows10-ltsc_2021-x64
3mingw32/bi...-2.dll
windows10-ltsc_2021-x64
3mingw32/bi...-1.dll
windows10-ltsc_2021-x64
3mingw32/bi...-1.dll
windows10-ltsc_2021-x64
3mingw32/bi...-1.dll
windows10-ltsc_2021-x64
3mingw32/bi...-0.dll
windows10-ltsc_2021-x64
3mingw32/bi...-1.dll
windows10-ltsc_2021-x64
3mingw32/bi...-0.dll
windows10-ltsc_2021-x64
3var/lib/pa...nstall
windows10-ltsc_2021-x64
1var/lib/pa...nstall
windows10-ltsc_2021-x64
1var/lib/pa...nstall
windows10-ltsc_2021-x64
1var/lib/pa...nstall
windows10-ltsc_2021-x64
1Analysis
- max time kernel
899s - max time network
432s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260130-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260130-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
29/04/2026, 11:34
Behavioral task
behavioral1
Sample
gtkhash-w32-1.4-1-installer.exe
Resource
win10ltsc2021-20260126-en
Behavioral task
behavioral2
Sample
_icons/org.gtkhash.gtkhash.ico
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral3
Sample
_scripts/postinst.cmd
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral4
Sample
_scripts/postinst.sh
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral5
Sample
mingw32/bin/edit.dll
Resource
win10ltsc2021-20260126-en
Behavioral task
behavioral6
Sample
mingw32/bin/fc-cache.exe
Resource
win10ltsc2021-20260126-en
Behavioral task
behavioral7
Sample
mingw32/bin/gdk-pixbuf-query-loaders.exe
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral8
Sample
mingw32/bin/glib-compile-schemas.exe
Resource
win10ltsc2021-20260126-en
Behavioral task
behavioral9
Sample
mingw32/bin/gspawn-win32-helper-console.exe
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral10
Sample
mingw32/bin/gspawn-win32-helper.exe
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral11
Sample
mingw32/bin/gtk-launch.exe
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral12
Sample
mingw32/bin/gtk-update-icon-cache-3.0.exe
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral13
Sample
mingw32/bin/gtkhash.exe
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral14
Sample
mingw32/bin/libasprintf-0.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral15
Sample
mingw32/bin/libatk-1.0-0.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral16
Sample
mingw32/bin/libatomic-1.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral17
Sample
mingw32/bin/libbrotlicommon.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral18
Sample
mingw32/bin/libbrotlidec.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral19
Sample
mingw32/bin/libbrotlienc.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral20
Sample
mingw32/bin/libbz2-1.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral21
Sample
mingw32/bin/libcairo-2.dll
Resource
win10ltsc2021-20260126-en
Behavioral task
behavioral22
Sample
mingw32/bin/libcairo-script-interpreter-2.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral23
Sample
mingw32/bin/libdatrie-1.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral24
Sample
mingw32/bin/libexpat-1.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral25
Sample
mingw32/bin/libfontconfig-1.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral26
Sample
mingw32/bin/libfribidi-0.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral27
Sample
mingw32/bin/libgcc_s_dw2-1.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral28
Sample
mingw32/bin/libgdk-3-0.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral29
Sample
var/lib/pacman/local/mingw-w64-i686-adwaita-icon-theme-3.36.0-1/install
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral30
Sample
var/lib/pacman/local/mingw-w64-i686-fontconfig-2.13.92-1/install
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral31
Sample
var/lib/pacman/local/mingw-w64-i686-gtkhash-1.4-1/install
Resource
win10ltsc2021-20260126-en
Behavioral task
behavioral32
Sample
var/lib/pacman/local/mingw-w64-i686-hicolor-icon-theme-0.17-1/install
Resource
win10ltsc2021-20260130-en
General
- Target mingw32/bin/gspawn-win32-helper.exe
- Size 18KB
- Sample260429-nplhrafs2p
- SHA256 489f6c28dae3a83489ee1da2a54e8ebba421e84725e8548863790a22a0bab3dd
- MD5 3fc8e6cc38ae42396b50cd2a710eae9a
- SHA1 402c7583e0108ee2f0e90088ef61a135cda7fdbf
- SHA512 d5a6bc22d0bd1137ad2d244f23006faa4f6d6adc4034d1b65e89c518012c84c4064bab331b8d7d5df52572e0a6af847cac2595efee747dc6e602842d2ef11f92
- SSDEEP 192:qnnoh/Nb2JSAi0gnd5DChyQPio5q7ZX6NO/Yl3VKAbek30GvYBCszO:QClbgSUgnHSNy7AoAbeNGABCWO
- TLSH T1E482B686F50AA4F1F750F2B4C899CB77D33ABD220972DB3AFF04F2587523985990A106
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 3732 1256 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\mingw32\bin\gspawn-win32-helper.exe"C:\Users\Admin\AppData\Local\Temp\mingw32\bin\gspawn-win32-helper.exe"1⤵PID:1256
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1256 -s 4802⤵
- Program crash
PID:3732
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1256 -ip 12561⤵PID:388