a141bc7fcc7fa2631ffadbadf852d554e449f30f7d0ac282ed08932d06360a5d

Analysis

max time kernel
899s
max time network
478s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/08/2026, 13:00

Target
mpsvc.dll
Size 352KB
Sample260822-p8n9esvbpd
SHA256 a141bc7fcc7fa2631ffadbadf852d554e449f30f7d0ac282ed08932d06360a5d
MD5 b24477e3bbe52adc94e86cab196d011d
SHA1 dd0a90eb5e77c91e81d171c3753de1474f085b22
SHA512 6fa1d0b75ae6f23dd7e6b7f86313897fae57528ed5c74d8d7cc23eb922c35da173080dbd93cb2f3012eb34114b044f192c0bd7945d7593529c5256365984a78d
SSDEEP 6144:CRH9RBQtsFMIloOMLALtLLNph0lhSMXlBXBWn5ikVkgGtf:gRVFc7eBBph0lhSMXli5iT
TLSH
T184749D22FB9441BCD19B827989B74E42F772788D034297CF13A892613F676D26E3F641
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5660	rundll32.exe
5660	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\mpsvc.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5660

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5548

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:3756