01aa2d75297dd4b966ebb672508abafddd3747baf2b3852f99ae1890d4be21e0

Analysis

user interaction
yes
max time kernel
148s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
11/08/2026, 12:56

Target
Installer.zip
Size 8.4MB
Sample260811-p6leraee46
SHA256 01aa2d75297dd4b966ebb672508abafddd3747baf2b3852f99ae1890d4be21e0
MD5 23968cd581ada1966ba87bbde16e7a44
SHA1 3143486ce06d957c87a722fbb9cfc622ceb823a2
SHA512 f38704bb322e35ea6de18e3a969bbb8cf10e3179d38cc94d36d0be97bd6496908e768ebe41d7bc19fdfa17d03bac8e027545e7ad7481a5effc5890229158e7fd
SSDEEP 196608:7mE7MI4tf8IKTUP6clrGgDOhbP7h+cS+vMbNmKpEs3f:7VQf82dlygE7Iv+vMhmBs3f
TLSH
T11196337E3D555143CEAE5635E9810B743F4E14BB6768ABBA51AFD000B8BC89C3C90B93
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5612	OpenWith.exe

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\Installer.zip
1⤵
PID:4932

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5636