6f03f6e52cc713d0a14b82789393eac661927ac6b4c8b22e561c6b5c042e8b72

Analysis

max time kernel
144s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
03/07/2024, 20:54

Target

6f03f6e52cc713d0a14b82789393eac661927ac6b4c8b22e561c6b5c042e8b72.exe
Size

9.2MB
MD5

cf10575456e85485385c29848b0ace6a
SHA1

f23103f1b2733a3ea6ecdbe71678780667bd60fd
SHA256

6f03f6e52cc713d0a14b82789393eac661927ac6b4c8b22e561c6b5c042e8b72
SHA512

cabf5228f5b17f65ebec06a004a2b405b06ad7adfceb387c7474bc1c974d9eb47023e77e291eefbfc4c4d77118c4b06974fd5f00966aa57ec58819d88f743cf8
SSDEEP

196608:7EpPqitlegevcAbzxWUklvT4EeRDc6aFiL6ABJJ/ZF6lPE54w:YciCguXkt4EeRHWiLz/Fqdw

Score

1^/10

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4972	6f03f6e52cc713d0a14b82789393eac661927ac6b4c8b22e561c6b5c042e8b72.exe
4972	6f03f6e52cc713d0a14b82789393eac661927ac6b4c8b22e561c6b5c042e8b72.exe
4972	6f03f6e52cc713d0a14b82789393eac661927ac6b4c8b22e561c6b5c042e8b72.exe
4972	6f03f6e52cc713d0a14b82789393eac661927ac6b4c8b22e561c6b5c042e8b72.exe
4972	6f03f6e52cc713d0a14b82789393eac661927ac6b4c8b22e561c6b5c042e8b72.exe
4972	6f03f6e52cc713d0a14b82789393eac661927ac6b4c8b22e561c6b5c042e8b72.exe

C:\Users\Admin\AppData\Local\Temp\6f03f6e52cc713d0a14b82789393eac661927ac6b4c8b22e561c6b5c042e8b72.exe
"C:\Users\Admin\AppData\Local\Temp\6f03f6e52cc713d0a14b82789393eac661927ac6b4c8b22e561c6b5c042e8b72.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4972

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4344,i,11049150160560877369,2866371920339304689,262144 --variations-seed-version --mojo-platform-channel-handle=3376 /prefetch:8
1⤵
PID:1220