32cca5b5e9e4ac5dcfda34e8aa95bed1f721fa72b13fb8793c5e22eff6197b24

Analysis

geolocation tags

asiadelhiinindia
user interaction
yes
max time kernel
148s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/10/2026, 09:27

Target
ProjectZomboid64.exe
Size 967KB
Sample261024-le9fqaay9r
SHA256 32cca5b5e9e4ac5dcfda34e8aa95bed1f721fa72b13fb8793c5e22eff6197b24
MD5 a1beb417163f8bcf9ae279621b541f37
SHA1 81ce0d550431456c92ea587642f6ffc4ea8e62bb
SHA512 1a14caf9fb908d30e63e39993b7fb47f817f76baba98b289d01c5e39ace829bafd00764409e8c11fac637d4517f5734f48eaff85e9fb03177e4c34ff3f01de20
SSDEEP 12288:7PLtNYxprjaXdDT/Ps9C1z9Jvyap03nUOa62CXAsgngd3KVfT93YC5:DLt6xprONoaJCNXXAsj3KZT9oO
TLSH
T16A258CD967F284E6E021473CAE1DF92099276F680E24CE972EB036DD6F77550E936302
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: LoadsDriver 6 IoCs

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1488	ShellHost.exe

C:\Users\Admin\AppData\Local\Temp\ProjectZomboid64.exe
"C:\Users\Admin\AppData\Local\Temp\ProjectZomboid64.exe"
1⤵
PID:4588

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:2604

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004EC 0x0000000000000508
1⤵
PID:1576

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k DevicesFlow -s DevicesFlowUserSvc
1⤵
PID:5808

C:\Windows\System32\ShellHost.exe
"C:\Windows\System32\ShellHost.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1488

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:3600