0e56a3b073bb2a8fae5d4732d40c6e93b5507fb6ba321322f34f99f5b2155f12

Resubmissions

10/09/2026, 17:17

10/09/2026, 17:13

10/09/2026, 17:09

user interaction
yes
max time kernel
148s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 17:09

Target
temp.exe
Size 712KB
Sample260910-vpmt5sem4t
SHA256 0e56a3b073bb2a8fae5d4732d40c6e93b5507fb6ba321322f34f99f5b2155f12
MD5 a63bd3f75f1afdfd071870591d520e16
SHA1 5c970871fbc0be941c3db26fc5173da859b969e2
SHA512 b18a7fdf6afa7dcba261e904f1ef80b0b7bd9ebbee0214ae221d06bafabc5eef7b785249c749891f348db15e55ccd84671c313e0641de7f649b3fd6daca605a1
SSDEEP 12288:I2BdjAPAVPG1xeGG+soG3aj8YzRMuQ8drtD55sh:Rj+AxVn3aj87uP755s
TLSH
T156F4E2526463506CF275A13397A64AB372ED703BCA595FCAC0440C410BDF1B99BEEBB8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3196	OpenWith.exe

C:\Users\Admin\AppData\Local\Temp\temp.exe
"C:\Users\Admin\AppData\Local\Temp\temp.exe"
1⤵
PID:1300

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2548