3ea276deb20297e1a16eca31f26e5777ece4529eb2ce81a459418e803ed596fc

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/09/2026, 02:26

Target
5144-trial-staff.png
Size 22KB
Sample260905-cwt8paverd
SHA256 3ea276deb20297e1a16eca31f26e5777ece4529eb2ce81a459418e803ed596fc
MD5 0ee6d6b64bd9465a189891e99041f866
SHA1 49834eafc39f05efef3937df68f8d8313f1c7458
SHA512 2d2db814fb17e16c4fcd8e2ee6dc306c7141fe8822e29a38706209faa2de8e3432d8d10268cdf474703510d993e107536d4462d2600d1f582ba7dc3e4978b1c8
SSDEEP 384:PeItdCU1g45qkYHWg+/IRVAmq3rWIYM2oogmd4uXoJkFYDX3AsV/xj:PeSddVgpHWg1RVPq3SIVmZKDHp1h
TLSH
T155A2D04BDD8193BFB0B0D06B74A01858E910BA61A6679726FC466F5BC2BF3548778B03
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2792	mspaint.exe
2792	mspaint.exe

Suspicious use of SetWindowsHookEx 4 IoCs

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:4604