Overview

overview

7

Static

static

3

HwidSpoofer.exe

windows10-2004-x64

7

HwidSpoofer.exe

windows11-ltsc_2024-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    26s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    28/07/2026, 12:34

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    HwidSpoofer.exe
  • Size 64.4MB
  • Sample260728-prvd4swglb
  • SHA256 4108dae3ce30cce1231f88fab4b72522593b070222fb45aff76f37dfffb6a338
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 11 IoCs
  • Suspicious behavior: LoadsDriver 6 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\HwidSpoofer.exe
    "C:\Users\Admin\AppData\Local\Temp\HwidSpoofer.exe"
    1⤵
    • Loads dropped DLL
    PID:3208
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
    1⤵
      PID:4648
    • C:\Windows\system32\AUDIODG.EXE
      C:\Windows\system32\AUDIODG.EXE 0x00000000000004F4 0x00000000000004EC
      1⤵
        PID:5636
      • C:\Windows\system32\svchost.exe
        C:\Windows\system32\svchost.exe -k DevicesFlow -s DevicesFlowUserSvc
        1⤵
          PID:2580
        • C:\Windows\System32\ShellHost.exe
          "C:\Windows\System32\ShellHost.exe"
          1⤵
          • Suspicious use of SetWindowsHookEx
          PID:3304

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              HwidSpoofer.dll
              • Path C:\Users\Admin\AppData\Local\Temp\.net\HwidSpoofer\B0S1XfVRpTLl2pBt2opXhqVMbZYGxy0=\HwidSpoofer.dll
              • Size 10KB
              • SHA256 f82154c15544aa888702cd85b922294c5eed0649c3c977b699a0626f59d2576e
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              System.Collections.Immutable.dll
              • Path C:\Users\Admin\AppData\Local\Temp\.net\HwidSpoofer\B0S1XfVRpTLl2pBt2opXhqVMbZYGxy0=\System.Collections.Immutable.dll
              • Size 817KB
              • SHA256 f134239f34d90e805fd44c26d2b350f31915734b1dc1b008e5ccec89a39a90aa
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              System.Collections.dll
              • Path C:\Users\Admin\AppData\Local\Temp\.net\HwidSpoofer\B0S1XfVRpTLl2pBt2opXhqVMbZYGxy0=\System.Collections.dll
              • Size 253KB
              • SHA256 f0fe3fc9cecf713d5c29a2fecdf6aafc50b41efb8130a56af54b8c9330c1ffc1
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              System.Console.dll
              • Path C:\Users\Admin\AppData\Local\Temp\.net\HwidSpoofer\B0S1XfVRpTLl2pBt2opXhqVMbZYGxy0=\System.Console.dll
              • Size 169KB
              • SHA256 664163bfa498aa9d683039885da244717b9233fa223fb70254c910c437f362ed
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              System.Diagnostics.StackTrace.dll
              • Path C:\Users\Admin\AppData\Local\Temp\.net\HwidSpoofer\B0S1XfVRpTLl2pBt2opXhqVMbZYGxy0=\System.Diagnostics.StackTrace.dll
              • Size 45KB
              • SHA256 df1529192900355b5cbf37db6c505142570614d9ab233c2b0063ad22565bd406
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              System.Linq.dll
              • Path C:\Users\Admin\AppData\Local\Temp\.net\HwidSpoofer\B0S1XfVRpTLl2pBt2opXhqVMbZYGxy0=\System.Linq.dll
              • Size 529KB
              • SHA256 1b81642c1ee4f21ebbb57213c14e50df59aabcd7bf91de2eebdf4c0d9f32845b
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              System.Memory.dll
              • Path C:\Users\Admin\AppData\Local\Temp\.net\HwidSpoofer\B0S1XfVRpTLl2pBt2opXhqVMbZYGxy0=\System.Memory.dll
              • Size 153KB
              • SHA256 4d6fe7d23c06b4e81748d83a1314218f31bb1e4ce9b6d1ebc7ba8a78a342833c
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              System.Private.CoreLib.dll
              • Path C:\Users\Admin\AppData\Local\Temp\.net\HwidSpoofer\B0S1XfVRpTLl2pBt2opXhqVMbZYGxy0=\System.Private.CoreLib.dll
              • Size 12.6MB
              • SHA256 7f48a9493a1d9f6c64a51c3ec357cf8534874ea62240a54c2a1570a5913148a4
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              System.Reflection.Metadata.dll
              • Path C:\Users\Admin\AppData\Local\Temp\.net\HwidSpoofer\B0S1XfVRpTLl2pBt2opXhqVMbZYGxy0=\System.Reflection.Metadata.dll
              • Size 1.1MB
              • SHA256 43a726a2f631336922982352f7691cb4aa14224c8ba8805f88f3d0868d97a10f
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              System.Threading.dll
              • Path C:\Users\Admin\AppData\Local\Temp\.net\HwidSpoofer\B0S1XfVRpTLl2pBt2opXhqVMbZYGxy0=\System.Threading.dll
              • Size 81KB
              • SHA256 76900e5c96b72e6e74477a90897f86c9f8b78eb2169010298cd4aecec5466ae3
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download