843404a4561936b04d58f8c4892cb226ee8b5589c5a872b7eb47bf8f0eb6d6cd

Analysis

max time kernel
899s
max time network
325s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/07/2026, 22:41

Target
WannaCry/Windows/Engine/Binaries/ThirdParty/NVIDIA/GeForceNOW/Win64/GfnRuntimeSdk.dll
Size 3.1MB
Sample260706-2mkqbscz8x
SHA256 843404a4561936b04d58f8c4892cb226ee8b5589c5a872b7eb47bf8f0eb6d6cd
MD5 53d448e4a7b8c5442f5c80188a58cfd6
SHA1 20aa8ad2962828dfb8a17de7639deaae070add8f
SHA512 c1e131ca6b921661003712fbd90512b00d9c15b6a0cfa85affffaaf090bc890d50e3c0524438769f52bd46cf8bd50f8e4cf7641b4c379553a5805162d08706b7
SSDEEP 49152:BUbYoO/osV4DsUn3wXJ/eJ/nMEXL+9mg/nv1:BUEV4Dt3hMEM9
TLSH
T15AE59D56B7984195E177D13CD99F8B1BC6B1B0089B2297CB209487AE2F27FE54C3E720
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\WannaCry\Windows\Engine\Binaries\ThirdParty\NVIDIA\GeForceNOW\Win64\GfnRuntimeSdk.dll,#1
1⤵
PID:3652

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5764

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:5652