Analysis
- user interaction
yes - max time kernel
60s - max time network
47s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
27/10/2026, 00:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Central Arquivista - WinPort.exe
Resource
win10v2004-20260911-en
0 signatures
60 seconds
Behavioral task
behavioral2
Sample
Central Arquivista - WinPort.exe
Resource
win11ltsc2024-20260911-en
0 signatures
60 seconds
General
- Target Central Arquivista - WinPort.exe
- Size 62KB
- Sample261027-aalnbaxt5m
- SHA256 b865b43d7d61a9c637386611021b3bb9301c19df0cc87f3a085535e29f40b29e
- MD5 86680e5a9488967ea9607c412193bbde
- SHA1 72e464678ad5d3fc6f87720ee4ae4fbc5730760f
- SHA512 004d473e852bb2e7225c45f8f7e663b74475e1992aef67e9530517ec093049aedb3491921b61ee9044052773a206b081c350de4fc9598b6a82de182bd897347a
- SSDEEP 1536:JRuJ8HYOLgLMK/B+7UY37XsR7FgQ2lroWpjBD:JRuJ84OLgLMsGUY3gRBFwdpjp
- TLSH T1AC53F1632BD58A3AD06B97B24F73F2283BA0B484567B1B0B55865F1D0E11716C73CAA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\Central Arquivista - WinPort.exe"C:\Users\Admin\AppData\Local\Temp\Central Arquivista - WinPort.exe"1⤵PID:5060
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:6104
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:2300