4eda7c46ebe2f83e2cbc790f810351515c5b204a6cae2ea73c174afd5ab61825

Analysis

max time kernel
150s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
12/03/2024, 09:17

Target

c3005965e0d208edaf9cb7c3b8be78ef.exe
Size

48KB
MD5

c3005965e0d208edaf9cb7c3b8be78ef
SHA1

c0b860ff8c0b2723a608e4009ecfb345d2afa598
SHA256

4eda7c46ebe2f83e2cbc790f810351515c5b204a6cae2ea73c174afd5ab61825
SHA512

f1df722524329a3d715302fa661fc97a6c0494ca19bd756a8c3f17132649327446e3ee4287e7a4ff0470d80639399a66875cd05a035c5357c822886b859ead04
SSDEEP

1536:OwriRego999999b6m99999DM999tZD1F753DCSkD26MvoBM:O4OD1RZCSky5oBM

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2736 set thread context of 1252	2736	c3005965e0d208edaf9cb7c3b8be78ef.exe	96

Suspicious behavior: EnumeratesProcesses 4 IoCs

Suspicious use of WriteProcessMemory 13 IoCs

description	pid	Process	procid_target
PID 2736 wrote to memory of 1252	2736	c3005965e0d208edaf9cb7c3b8be78ef.exe	96
PID 2736 wrote to memory of 1252	2736	c3005965e0d208edaf9cb7c3b8be78ef.exe	96
PID 2736 wrote to memory of 1252	2736	c3005965e0d208edaf9cb7c3b8be78ef.exe	96
PID 2736 wrote to memory of 1252	2736	c3005965e0d208edaf9cb7c3b8be78ef.exe	96
PID 2736 wrote to memory of 1252	2736	c3005965e0d208edaf9cb7c3b8be78ef.exe	96
PID 2736 wrote to memory of 1252	2736	c3005965e0d208edaf9cb7c3b8be78ef.exe	96
PID 2736 wrote to memory of 1252	2736	c3005965e0d208edaf9cb7c3b8be78ef.exe	96
PID 1252 wrote to memory of 3512	1252	c3005965e0d208edaf9cb7c3b8be78ef.exe	57
PID 1252 wrote to memory of 3512	1252	c3005965e0d208edaf9cb7c3b8be78ef.exe	57
PID 1252 wrote to memory of 3512	1252	c3005965e0d208edaf9cb7c3b8be78ef.exe	57
PID 1252 wrote to memory of 3512	1252	c3005965e0d208edaf9cb7c3b8be78ef.exe	57
PID 1252 wrote to memory of 3512	1252	c3005965e0d208edaf9cb7c3b8be78ef.exe	57
PID 1252 wrote to memory of 3512	1252	c3005965e0d208edaf9cb7c3b8be78ef.exe	57

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1412 --field-trial-handle=2276,i,5697607538120380977,9987005253899555344,262144 --variations-seed-version /prefetch:8
1⤵
PID:4956

memory/1252-2-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1252-5-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1252-6-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1252-8-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/1252-15-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download
memory/2736-0-0x0000000000400000-0x000000000040E000-memory.dmp

Filesize
56KB

Download
memory/2736-1-0x0000000000400000-0x000000000040E000-memory.dmp

Filesize
56KB

Download
memory/2736-7-0x0000000000400000-0x000000000040E000-memory.dmp

Filesize
56KB

Download
memory/3512-9-0x000000007FFF0000-0x000000007FFF1000-memory.dmp

Filesize
4KB

Download
memory/3512-11-0x000000007FFC0000-0x000000007FFC6000-memory.dmp

Filesize
24KB

Download