Overview

overview

3

Static

static

3

nvidiaProf...or.zip

windows10-2004-x64

1

Reference.xml

windows10-2004-x64

1

nvidiaProf...or.exe

windows10-2004-x64

1

nvidiaProf...xe.xml

windows10-2004-x64

1

Analysis

  • max time kernel
    20s
  • max time network
    23s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240730-fr
  • resource tags

    arch:x64arch:x86image:win10v2004-20240730-frlocale:fr-fros:windows10-2004-x64systemwindows
  • submitted
    02-08-2024 10:08

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Reference.xml

  • Size

    213KB

  • MD5

    1a8493bff2d17c83e299101954dcb562

  • SHA1

    439258f42f755d40311a31b37f6d37f447d546ba

  • SHA256

    5a31c0500500713efd83160cef3db3f56b807b7c4f7a8b4ee7f4ffe05c676081

  • SHA512

    75f2383f73fd3e03fdd17e93091cca7192919cb76ff564cafa7ee8d33d50db83d94dd3905d06b67c01f52f580b73573b490beb61f9a58af3cad3c0a29ce0aa2f

  • SSDEEP

    768:4wPznLJY2cI2YDqbcSQ98orYfLERQe1jE9Vv+hpGT6yYfoBVxL0n:vLKnI2YDqSDrYxUjE7v/T6yZBVBI

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Reference.xml"
    1⤵
      PID:2536

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2536-0-0x00007FF9CE5F0000-0x00007FF9CE600000-memory.dmp

      Filesize

      64KB

      Download

    • memory/2536-1-0x00007FFA0E60D000-0x00007FFA0E60E000-memory.dmp

      Filesize

      4KB

      Download

    • memory/2536-2-0x00007FFA0E570000-0x00007FFA0E765000-memory.dmp

      Filesize

      2.0MB

      Download

    • memory/2536-3-0x00007FFA0E570000-0x00007FFA0E765000-memory.dmp

      Filesize

      2.0MB

      Download