082f88237890f5aa9e679949411597fba171d25a3bb16e95cfd959ca3f13c1de

Analysis

max time kernel
1371s
max time network
1146s
platform
windows11-21h2_x64
resource
win11-20240709-en
resource tags

arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system
submitted
20/07/2024, 12:37

Target

resources/app.asar.unpacked/node_modules/ps-list/fastlist.exe
Size

44KB
MD5

bd3dcda4f57ae17150446e20a2c3a76e
SHA1

b33539c9bb20b5c68881ffdab3dc94b5a632bcd6
SHA256

071f43816861b30663b17649abfcca743f17b353786218bac1f0f92e55acb3d8
SHA512

67c7c04d99df91e54eacb32782e04858f54162d60736dd53d7ec86d0fc0b62380c56334309e49a07901c0625a15b25fb388deecbb0e65c4a19f6b574dd6ba472
SSDEEP

768:br0OSmBgpbeAorso26j3JuhXptDi5LPPkjllEDgXn2lPmT/bG:v0OSw77rTpj3U/DY7PcZ6CbG

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1016	fastlist.exe
1016	fastlist.exe

C:\Users\Admin\AppData\Local\Temp\resources\app.asar.unpacked\node_modules\ps-list\fastlist.exe
"C:\Users\Admin\AppData\Local\Temp\resources\app.asar.unpacked\node_modules\ps-list\fastlist.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1016