6b1332ed243dc0d540a7997ded8180b0a2629335f37b804c908f514ef4ad0d87

Analysis

user interaction
yes
max time kernel
38s
max time network
39s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
18/07/2026, 18:43

Target
nsWscSvc.exe
Size 1.0MB
Sample260718-xc2tmsdv2x
SHA256 6b1332ed243dc0d540a7997ded8180b0a2629335f37b804c908f514ef4ad0d87
MD5 d24ad24072fb293979224e86a03f71d9
SHA1 da1e6f6e3e4df03075c5edcd858d9879d61ece4c
SHA512 aa4e65e15f022c56d8860f0f63e73f13e252f0b8fac0a4526a7f1f6bca9cb20b22d11368f291a80394e1f8568e883a1874d9a855474e9fc4ab65d63e7b8b4d56
SSDEEP 12288:KJp4vnjMXKZiWbyKAhdOsXI6XMeyx7e0SVdyjhpcqPPaaKkU6mICIbm4:KJqvnjCCiqAPOS1yx79S0bRKhIja4
TLSH
T1BD355B29EB7840E0C0A2D5B485515B2AFBB27C9A2F6196CB5070A56D3F33AF0DD38717
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: LoadsDriver 6 IoCs

C:\Users\Admin\AppData\Local\Temp\nsWscSvc.exe
"C:\Users\Admin\AppData\Local\Temp\nsWscSvc.exe"
1⤵
PID:2628

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3132