d138acd63ef7ea0b13fd999dbda417eb7ee3f1e4e869b79f773c5eef57d12a22

Analysis

max time kernel
149s
max time network
131s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/09/2026, 02:26

Target
40963-staff-administrator.png
Size 176KB
Sample260905-cwt8paverd
SHA256 d138acd63ef7ea0b13fd999dbda417eb7ee3f1e4e869b79f773c5eef57d12a22
MD5 49389ba878f863b2b1ccae851f107307
SHA1 e7cd081f7d045304be4d258a8767398ec7ec86e4
SHA512 634bc855351e19f65be09cb0e4308e7e2e70935a4f44c8046048b944cc1e5579908a9c015092fef266fbf0b08c5c5224c5b67fa53623fba9e959e05f05b8d212
SSDEEP 3072:fveuITDlF8dSixVUqqRpPRMB91gO1EZw7t7DIthHL7M3TXEjazmfPsYEFnNpGxMS:3qv8dSsUzXPRQ91gOqI7DI7rEXEjalr8
TLSH
T1B50412DBC60DC41DEA5CF299E1C0861BFB60933B04AFC4549D607D65B6386BF7886C8A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4416	mspaint.exe
4416	mspaint.exe

Suspicious use of SetWindowsHookEx 4 IoCs

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:3364