ff923c051ae380bf30d749ebe9cf310ccab6572d84eb81b76fb1012bcbdf557f

Analysis

max time kernel
149s
max time network
153s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-es
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-eslocale:es-esos:windows10-ltsc_2021-x64systemwindows
submitted
08/07/2026, 05:35

Target
Win7 en-US/mspaint.exe
Size 6.4MB
Sample260708-gaapdact3q
SHA256 ff923c051ae380bf30d749ebe9cf310ccab6572d84eb81b76fb1012bcbdf557f
MD5 458f4590f80563eb2a0a72709bfc2bd9
SHA1 3f97dc3bd1467c710c6a8d26b97bb6cf47deb4c6
SHA512 e34500658dbe105a704fff6988b75d13aa9931adfd585b8ce1f023c61abd573d58067ee1f43e80076729ba99c9a00c17eb8cfcfac9c3d271d76bd251ccab1681
SSDEEP 98304:fQm2u7InCEE+wysPM4mlaw0LI60GBGrGrGWAuU7jPLQ:Z6nTE+wBMHlaw0/U7jPL
TLSH
T1F1664B82E1308CDFE82581749C2FDB756E527F63F8A406961799FE1E29F32421127E4B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 4 IoCs

C:\Users\Admin\AppData\Local\Temp\Win7 en-US\mspaint.exe
"C:\Users\Admin\AppData\Local\Temp\Win7 en-US\mspaint.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4600

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:5116