986ac629b51ecc22b7f78ddbcd5bd8d0c6e966003ab103047fc62ad73bace796

Analysis

user interaction
yes
max time kernel
628s
max time network
284s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/10/2026, 19:29

Target
ec72ed8d.exe
Size 1.3MB
Sample261018-x7hdgstycv
SHA256 986ac629b51ecc22b7f78ddbcd5bd8d0c6e966003ab103047fc62ad73bace796
MD5 ec64e0034b71352d2ab16004db6e0bcb
SHA1 b8cbeb57044b1d4a08dc3dcb3e2c064bb0d5967c
SHA512 0838b873d9a7ff0776d03c8b1666ddf80f4c5483a50f0f0a016ffafa801101c704683834b3970aee269945d0c33635170ed345abe4b5e435c5183917ad535228
SSDEEP 24576:t5xNTQZUgRRrcfyFLh/LDqSGep9oAdU/8ZfiTnG30xs8nKvG1Z4:t5xNTyUgDcfWLh//qspav/hTnJs8QG1G
TLSH
T16855AE46F3B642ECC2678238C766931BEB75B81913204BCB63D05A56BF53AE19F79310
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3180	ec72ed8d.exe

C:\Users\Admin\AppData\Local\Temp\ec72ed8d.exe
"C:\Users\Admin\AppData\Local\Temp\ec72ed8d.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3180

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5980

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4088

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:940