4cfd2ac6ffff2030542290fe6547ad494c29412b891c8c8ed7af6355763f5300

Analysis

max time kernel
149s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/09/2026, 02:26

Target
26091-stafficonids.png
Size 3KB
Sample260905-cwt8paverd
SHA256 4cfd2ac6ffff2030542290fe6547ad494c29412b891c8c8ed7af6355763f5300
MD5 23dd84438ed6a8f70c1477274b55c962
SHA1 e562b26f8806156bc5fe3b916b13c4e630b754f2
SHA512 028318b6b9dfe7531fcdda7d3e7facddcd434d01553338a25fb435dcd3bda05107b042217ecb86b6b2e4ecbba89718d63b9c1dbe60292427ecb648cf7263b0ad
TLSH
T14D81095C1C5193E2969E7B450DC57580AFB7C4A64885F1D868EFB8130EC2E92FEA313E
MD5 SHA1 SHA512 TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3284	mspaint.exe
3284	mspaint.exe

Suspicious use of SetWindowsHookEx 4 IoCs

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:4860