13ae3b84782f7ec7a03b3b6ee1ed806791ca14df3b0111b78313ca3cfb65a33a

Analysis

max time kernel
122s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
09/03/2024, 16:22

Target

bc41f23267dbb026d814f5835fab3fba.exe
Size

257KB
MD5

bc41f23267dbb026d814f5835fab3fba
SHA1

8cf7cdc7c617634f91d43cde43b77ba32815dd8b
SHA256

13ae3b84782f7ec7a03b3b6ee1ed806791ca14df3b0111b78313ca3cfb65a33a
SHA512

66ae5d23e146b20ff0c62fe60b71895e0bfdef6bae14697706d218b6f35f425130efdc80c3d571f6b7c3c722711e4602c03d6f6bd795f38714c4fd2f970c6d5d
SSDEEP

6144:Q3cJl+I0vI7Mdhdm3FF8PFLXvXY42CzyzcD9T9b:x0HLfXY4jzyID9T9b

Score

4^/10

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\PocketNotes.job	bc41f23267dbb026d814f5835fab3fba.exe

C:\Users\Admin\AppData\Local\Temp\bc41f23267dbb026d814f5835fab3fba.exe
"C:\Users\Admin\AppData\Local\Temp\bc41f23267dbb026d814f5835fab3fba.exe"
1⤵
- Drops file in Windows directory
PID:2752

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4048 --field-trial-handle=2244,i,11878111470816612087,2265290141962607370,262144 --variations-seed-version /prefetch:8
1⤵
PID:2932

memory/2752-0-0x0000000000B70000-0x0000000000B71000-memory.dmp

Filesize
4KB

Download
memory/2752-2-0x0000000000B80000-0x0000000000B81000-memory.dmp

Filesize
4KB

Download
memory/2752-1-0x0000000000B90000-0x0000000000B91000-memory.dmp

Filesize
4KB

Download
memory/2752-3-0x0000000000BA0000-0x0000000000BA1000-memory.dmp

Filesize
4KB

Download
memory/2752-4-0x0000000000C00000-0x0000000000C29000-memory.dmp

Filesize
164KB

Download
memory/2752-5-0x0000000000D60000-0x0000000000D8F000-memory.dmp

Filesize
188KB

Download
memory/2752-9-0x0000000000C00000-0x0000000000C29000-memory.dmp

Filesize
164KB

Download
memory/2752-12-0x0000000000E00000-0x0000000000E27000-memory.dmp

Filesize
156KB

Download
memory/2752-16-0x0000000000C00000-0x0000000000C29000-memory.dmp

Filesize
164KB

Download
memory/2752-18-0x0000000000C00000-0x0000000000C29000-memory.dmp

Filesize
164KB

Download