e7867ea29e09c8ba5a71ba9c546b868c6484b5df809e9483b104f7bbc7d73701

Analysis

user interaction
yes
max time kernel
38s
max time network
39s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 15:41

Target
FFlagTool.exe
Size 158KB
Sample260804-s4xa1stdqe
SHA256 e7867ea29e09c8ba5a71ba9c546b868c6484b5df809e9483b104f7bbc7d73701
MD5 bc04bee9e81d0ebbfc84059be8cb0b8c
SHA1 92df520079f77486b5cdf28fff6a6e834342d4f6
SHA512 c536940d1c7944d5e21142074a8c31b098bdf88778a7729ffc956b711ea9d3343828cf54a7f84cdae9f764553e46fb6fb4cb55d5acc1a6ff54168bc215d9b989
SSDEEP 3072:mXwANETcQt1Onb5RHrfqDQXFn4dPPYseJwmm82jT6nbu:clxnlRLfyQXN42DCG
TLSH
T1A1F33B13A6AC11FEE1B7D678C9924941FB7278594B71A6CF03504EBA0F76BD09E39302
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

C:\Users\Admin\AppData\Local\Temp\FFlagTool.exe
"C:\Users\Admin\AppData\Local\Temp\FFlagTool.exe"
1⤵
PID:4828

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2228

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s fdPHost
1⤵
PID:4264