aea28c2f92502c3c7c0ef95f0df76edc6433329d3bf286551ce68c8f59783e82

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/09/2026, 02:26

Target
82083-stafficonsids.png
Size 3KB
Sample260905-cwt8paverd
SHA256 aea28c2f92502c3c7c0ef95f0df76edc6433329d3bf286551ce68c8f59783e82
MD5 24cce89b603178552d61237e0cee6c0b
SHA1 29d822a8c7c3b1b44d5c5e5114c498ab1f620bb2
SHA512 ec87a1c91828256d12d57c667296fb6e7de826943ba3cec1ae61a6a49fb302d19dd664000a5733a9b13a875349d2e046855ea48c2ba09e5c3169dd0705b043dc
TLSH
T1F271D92DC9830783BA0BF61DACDE34908AB35169C4C9C31FDCD6A8071FE25855EA659A
MD5 SHA1 SHA512 TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4088	mspaint.exe
4088	mspaint.exe

Suspicious use of SetWindowsHookEx 4 IoCs

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:2492