b0efd269d32e581da747e5050ef98d2eb91e6de9080e0918f5af85b485a4bdd1

Analysis

max time kernel
126s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
05/08/2024, 18:53

Target

NPFInstall.exe
Size

252KB
MD5

2400a7e797e848b767848a1d1abdce9a
SHA1

48c5b4818bf1a349046f2066f2ace922ba7f73a8
SHA256

dd72fbc54a219d3a157001ff0cb55016296062f0505801529c243feecdebb879
SHA512

980c431685d89161fd6f8f6c459dd2f41ee79ecbb0ea48e5c29aea9763154d5685b51f9d041b2482b9636891bc1c6d6a1afffedb92364b6b09212d31a190d45d
SSDEEP

3072:beAvCRFO25maSEPJJ1SxLtfJ5OGydgzwpXzcbU0ZFoecBkB3K9GyNyOLbTOa1sfG:bTCe+bM3MEU0Tjcb9rNyh/NGv

Score

4^/10

Drops file in Program Files directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Npcap\NPFInstall.log	NPFInstall.exe

C:\Users\Admin\AppData\Local\Temp\NPFInstall.exe
"C:\Users\Admin\AppData\Local\Temp\NPFInstall.exe"
1⤵
- Drops file in Program Files directory
PID:3056

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4292,i,8548254608087149642,10333768245962368401,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:8
1⤵
PID:3540