e35f36cf75c0cf10db721205a6af40e13447371851de169d796ecdda70fa2ed0

Analysis

max time kernel
898s
max time network
416s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
05/05/2026, 03:07

Target
WinSparkle.dll
Size 2.4MB
Sample260505-dmaclabw8j
SHA256 e35f36cf75c0cf10db721205a6af40e13447371851de169d796ecdda70fa2ed0
MD5 250f4cb584c1e0f832312a2b7a5fe3c9
SHA1 77bcbe283ac309a3c1171e14e3f8323e6108d3b1
SHA512 97db30734931e6db8caab947703cdd6ec04131b25023dd4aa25362148c443a6978eb6601db4d5de7caa0d633370a26a061257920bbd057512043e11deb36a14d
SSDEEP 49152:gXfRcalA7wchHjSjSrb3cAAutEWWP6QzylkwA:ocaPS/ZltEf45
TLSH
T1ABB58E0BF6A441BEE4ABD27CC917AA06E7B2B8570270E34F11D049AE5F533654EDE321
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1412	rundll32.exe
1412	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\WinSparkle.dll,#1
1⤵
- Suspicious use of SetWindowsHookEx
PID:1412