32267256e10a8e86466f141eb085ca07153a744c778028c0ab1c939607493cdb

Analysis

user interaction
yes
max time kernel
328s
max time network
302s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/06/2026, 03:10

Target
RzChromaSDK64 (1).dll
Size 2.2MB
Sample260623-dn7dqaav2x
SHA256 32267256e10a8e86466f141eb085ca07153a744c778028c0ab1c939607493cdb
MD5 b7ae805b28c5c8d608e2b40553aa642b
SHA1 efc38c9ab98ffff53c6291c4bcaebdd87ab75717
SHA512 0369379fdd5613053d952f59438a03640ecbd15ef0676f828ba58933791ea6dfb67544772a59f3dc8b92f26a6c69ef77358726046ac6c583a77786ce6f70ea97
SSDEEP 49152:rY4f/Y91q9fDGjJD0/lyOC7gEOnmzMAZ6JDCVE88oBKREF8emeN9+JzifB1mJB:rr/Y91q9RlyOUimzMbJDCV0M8he4iGj
TLSH
T1A4B5BF0BF35446EAC076C178DDA2EF07E3B23C051A50978B17E95ADD9F6B6A01ADE310
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
820	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\RzChromaSDK64 (1).dll",#1
1⤵
- Suspicious use of FindShellTrayWindow
PID:820