f49599f50808edbc18908015fd19f19184491e54576069254dfe2c2cf8ece147

Analysis

max time kernel
150s
max time network
136s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 04:26

Target
8fba5553.exe
Size 1.3MB
Sample261102-e2wptaey6s
SHA256 f49599f50808edbc18908015fd19f19184491e54576069254dfe2c2cf8ece147
MD5 6ac4bfc2f92f485b6e9e20d0e01c0a5c
SHA1 90cb10017a83b43b17197944b3f3681e5df67d66
SHA512 db67e25ee20c58804cc3ac66d6bb16e264faaeaac23e9618e684dcc8b9af636f921e4e66a425d6f47ed2bbf043e2d3bab3d9dd4661334177042bdf0818ec69c2
SSDEEP 24576:t5xNTQZUgRRrcfyFLh/LDqSGep9oAdU/8ZfiTnG30xs8nKvG1Z7:t5xNTyUgDcfWLh//qspav/hTnJs8QG1d
TLSH
T1E055AE46F3B642ECC2678238C766931BEB75B81913204BCB63D05A56BF53AE19F79310
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4480	8fba5553.exe

C:\Users\Admin\AppData\Local\Temp\8fba5553.exe
"C:\Users\Admin\AppData\Local\Temp\8fba5553.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4480

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4476