3ea46452697b0c836ee15434b6ec2cef94e15e5e2b88815e0ef092403e2d81ca

Analysis

max time kernel
141s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
13-07-2023 13:45

Target

Device/HarddiskVolume9/UB_DASMAN_AG/Regi/AdwCleaner/Quarantine/C/Program Files (x86)/AskPartnerNetwo.exe
Size

153KB
MD5

3c687dd6308fc92be60b3e366308f98b
SHA1

54d55c1aa53d0867391fe88a9138f5d7ce0ccdb4
SHA256

2654cc10fb84e2dc56dd7d57b52f79ae1b84cbaff0f281ec418e77da5a8cea94
SHA512

6af0bc8efe56943aceb8dec546772f34a3a56d9414a41ec70d607924cefdb5be0bd8345541ea3ad4968de6b15dff671f834a660cc24ff3ea9eedc295ecaa2643
SSDEEP

1536:0GHJdQS8KcRj/ZL8JaaDuLqaGy8EKNXEGf6kJzEvXPnxBrv4rA1wwuuEUpzMX:XSSo/ZdaDxieXE0uXrv4rA1wwuuXpzU

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4976	AskPartnerNetwo.exe
4976	AskPartnerNetwo.exe

C:\Users\Admin\AppData\Local\Temp\Device\HarddiskVolume9\UB_DASMAN_AG\Regi\AdwCleaner\Quarantine\C\Program Files (x86)\AskPartnerNetwo.exe
"C:\Users\Admin\AppData\Local\Temp\Device\HarddiskVolume9\UB_DASMAN_AG\Regi\AdwCleaner\Quarantine\C\Program Files (x86)\AskPartnerNetwo.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4976