a51f2352423b0717ceafb5f1e2443b8fded4c89481193540111b7a5f69f39bae

Analysis

max time kernel
152s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
25/03/2024, 12:57

Target

a51f2352423b0717ceafb5f1e2443b8fded4c89481193540111b7a5f69f39bae.dll
Size

2.2MB
MD5

954d45f42f4fa80c06a5ec22dce61998
SHA1

3b8c07fd9d01c1fcb82445d330e44172305bf98a
SHA256

a51f2352423b0717ceafb5f1e2443b8fded4c89481193540111b7a5f69f39bae
SHA512

a943b0dfe6a7c528a6c17ce5294b19cd46ed8120c9c92be27dd36631bdf35d0f5c11ec9a4081e9e61f8f8d014582ac584c1342b3604eee99e35599a423e50c4c
SSDEEP

49152:qyWBpH+20sIOq2o7JKDFMoL2CBxvfolODVhn3Vxco:qyWBhxLPfowDvj

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2768	rundll32.exe
2768	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\a51f2352423b0717ceafb5f1e2443b8fded4c89481193540111b7a5f69f39bae.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2768

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3808 --field-trial-handle=3240,i,13319578961094268484,16557498665191861597,262144 --variations-seed-version /prefetch:8
1⤵
PID:3656