9417d739f580365b5ce0646c47786a5cba1dd4ea2f0270a4bba17ec86df49954

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/09/2026, 02:26

Target
15560-staff-purpleia.png
Size 199KB
Sample260905-cwt8paverd
SHA256 9417d739f580365b5ce0646c47786a5cba1dd4ea2f0270a4bba17ec86df49954
MD5 04b79ad4bd408d1051543eea1fb94de3
SHA1 69d02527e83d7091e17b9c6dc57c2f2d82441e39
SHA512 f24148e5e2002861345578f480cba789073e90d53944287b58848e9475e7d8a8a595ac228ed8a1106aff7df64a1ccfdf57777004513a867234c3fdbf48eacfc1
SSDEEP 6144:mESZm4V456HxMhf47rS75psd2s5yCaKBxeG1v:IZnY6+hg7Wsd2DCaKBxfv
TLSH
T1DA14236EBF94D0B3E7010AF52AB377274940ED1183E02FC5A46205D909D27C9AEDA3ED
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4368	mspaint.exe
4368	mspaint.exe

Suspicious use of SetWindowsHookEx 4 IoCs

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:1876