e9e8403cbcac744e21913060cc05165fbe33a8826b6477abb896188e7115f9c1

Analysis

user interaction
yes
max time kernel
60s
max time network
63s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/08/2026, 21:41

Target
weave-free.exe
Size 2.8MB
Sample260814-1jymcaaj6v
SHA256 e9e8403cbcac744e21913060cc05165fbe33a8826b6477abb896188e7115f9c1
MD5 76d03c74ba2be6e9ab3b22a456113fcb
SHA1 d2f362bf805febc4d96206de7327456d8c29af4f
SHA512 58382486472b0ee6d006286a57237b73f4e5ede1fcd29136930a28199ab7ac98b551a68bfd83b10e427c258df269917704d1cf7390681de51443653668abf8fa
SSDEEP 24576:0yMxjZk7Ap4nEsfeLI3RQh8RAUi2mBM+BWBKh9GfzmrhOK9ZrnhKA3zVHoqg5J2C:0jZCKLsfeL/h8SUmMe9bVrfKJeq0Qt7
TLSH
T114D5AE03F386C6DDD50AC1B44651A2239A63F045073BA3FF7B881E25AE56AE08F1D75E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2168	weave-free.exe

C:\Users\Admin\AppData\Local\Temp\weave-free.exe
"C:\Users\Admin\AppData\Local\Temp\weave-free.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:2168

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1096