d6d693b52d897b8d6081858eead5a9e0d7e107cda14be964f79ff5881b9e7877

Analysis

max time kernel
150s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/09/2026, 02:26

Target
73113-staff-management.png
Size 177KB
Sample260905-cwt8paverd
SHA256 d6d693b52d897b8d6081858eead5a9e0d7e107cda14be964f79ff5881b9e7877
MD5 cc6e5c8675867ae12a9b84562311492c
SHA1 c931bcf9931ba26753f4fa46edbdc1049d049a34
SHA512 4ae271237a4bb8f436dc9b1150d4849338fa5dbf7d2af84f9df5f7ffa9317561c548a74971c75bf4d575af33ac890781685a2fb9dc15c3695bad14a4d6854850
SSDEEP 3072:u2L69woFhhd/ZmJMuosZsBBrOdim0FQtThBj/+GxbeqFxq04aJEUU4OOeVj:uf9Jdhpu5YidnfdBjmGxD4gEUU4OJl
TLSH
T1200422A48392D77B6E79D21AB6510B8CC05BF69B6C04E04346A386110CE8AFF455CFFE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4632	mspaint.exe
4632	mspaint.exe

Suspicious use of SetWindowsHookEx 4 IoCs

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:3360