28daecaae4877d6459a3a04153ca68b4a41183f005b0c9682f6e2517c7eb8f5c

Analysis

max time kernel
149s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/09/2026, 12:40

Target
Release/DWMBlurGlassExt.dll
Size 557KB
Sample260925-pwlmrssvcw
SHA256 28daecaae4877d6459a3a04153ca68b4a41183f005b0c9682f6e2517c7eb8f5c
MD5 3be88664ce422f2b53a7a57ac0d5f2e9
SHA1 bd0e192f78a35c02bccdd02daa41a20aa593509d
SHA512 110a753b47f172515915baf87331cf42223e85e16809e3cb915c7a94607a775ebd91fbf83dc7f4fa35f09edb9834bdd98e402190834cbbb60ff3d5bcf7128d26
SSDEEP 12288:yxG7d/SkC3OU+Z5jjLfph0lhSMXlilveFu1:SYqktU+ZZhh0lhSMXl22E1
TLSH
T14BC49D2673A447FCD86AC27449970A14F773B89407A19BCF22E0826A1F67BE55E7F301
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1840	rundll32.exe
1840	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Release\DWMBlurGlassExt.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1840