Analysis
- user interaction
yes - max time kernel
12s - max time network
14s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
11/05/2026, 00:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ExpectionalLauncher.exe
Resource
win11-20260130-en
2 signatures
150 seconds
General
- Target ExpectionalLauncher.exe
- Size 677KB
- Sample260511-aea3dagv5s
- SHA256 c57ca2dad496561629610518d9b6ea287441334fe071fad98bb6d0f14758203e
- MD5 390bfb9e6fd9c338831f68e602c09086
- SHA1 df9881dc56a0acddb4f56c8aafcacfda224230cd
- SHA512 ace703f2c4b8b1168367572e78d6fedd0581cf3d5a3180b99485c81bbdbd992ca572cf27a1701d2185fa43f5e82378847bb8b6ad7915fac00189c013072b5703
- SSDEEP 6144:MgQcqHyUqsI54jGpLT8fg5K3weGfXdXVUjz4S7O1Un07nBnHfWWaBrvBdqdPte54:L6HKvJQwRfX7pSpDTjCnA+QI
- TLSH T149E4074AEA7191E5D4BAC07D9253B62BFC71381D833467D79B908B522B627D0FA3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1383858298-2057492509-1726743289-1000_Classes\Local Settings\MuiCache MiniSearchHost.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2108 MiniSearchHost.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\ExpectionalLauncher.exe"C:\Users\Admin\AppData\Local\Temp\ExpectionalLauncher.exe"1⤵PID:3236
-
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2108