Managed XDR

svchost.exe — malware analysis report

File info

Filename: svchost.exe
File type: PE32 executable (GUI) Intel 80386, for MS Windows
File size: 324 KB
First seen: 2024-11-13 02:02
Last seen: 2024-11-13 02:02

Environment

win7/x86 en

Hashes

SHA1: 1fe3236a0ca2804b58a0a08417db28bc6fda3121
SHA256: 9c0a6d102a09042dd1a0e766a1c5fad6fa24d71e8acd1c7dbec6b3ab76007499
MD5: b94f7cce6b2e81c065fb0c60b3447d4d

Signatures

Defense Evasion

T1027.002 packer_entropy: Probably contains compressed or encrypted data

Other

yara_rules: Static rules

no_graphical_activity: No graphic activity

pe_overlay: PE file contains overlay