ea07459dd59a8aee34070c73177c61b0a8a4e8ed763238a6b1fad5f41e3fba3d

Analysis

max time kernel
114s
max time network
120s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
02-10-2024 02:53

Target

ea07459dd59a8aee34070c73177c61b0a8a4e8ed763238a6b1fad5f41e3fba3dN.dll
Size

3.5MB
MD5

a14ea07c729783f2406634a19e6cde20
SHA1

b8c64e9d04e6959aa043ae88495e00fc719f20e8
SHA256

ea07459dd59a8aee34070c73177c61b0a8a4e8ed763238a6b1fad5f41e3fba3d
SHA512

b4e45d474f2a36e22935bcbeed9c76ed43e8777f795751c235910237b5ca10756f4e1850f44eb9f394034a9b88b2a1821c28dfb79c1c2e098314499bf2898d22
SSDEEP

49152:WwApIj2UwOmhJfOkNqZbPxrH4jP/A7+Lc37acfmWd/5gPzpuOEeMzj+TALICmwdF:Wrmj3EA6qNJ7F7yTWnRYEeMzj7BxMxq

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\ea07459dd59a8aee34070c73177c61b0a8a4e8ed763238a6b1fad5f41e3fba3dN.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1104

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4048,i,10597648459838880772,16562651767759956329,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:8
1⤵
PID:2684

memory/1104-0-0x00007FF965843000-0x00007FF965A3F000-memory.dmp

Filesize
2.0MB

Download
memory/1104-1-0x00007FF983A30000-0x00007FF983A32000-memory.dmp

Filesize
8KB

Download
memory/1104-2-0x00007FF965820000-0x00007FF965DBD000-memory.dmp

Filesize
5.6MB

Download
memory/1104-5-0x00007FF965820000-0x00007FF965DBD000-memory.dmp

Filesize
5.6MB

Download
memory/1104-6-0x00007FF965820000-0x00007FF965DBD000-memory.dmp

Filesize
5.6MB

Download