cf0b47eafa7787a698bc8dbb62d18f1d16d0659ff7bd7e6312ccb50b08b754b6

Analysis

max time kernel
850s
max time network
900s
platform
windows11-21h2_x64
resource
win11-20250218-en
resource tags

arch:x64arch:x86image:win11-20250218-enlocale:en-usos:windows11-21h2-x64system
submitted
28/02/2025, 17:50

Target

net8.0-windows/Astral_assets/upx/upx.exe
Size

525KB
MD5

8a98406e32ed6139bd9e75342d452948
SHA1

ed77737b88a7351d0bc5f542ddb7ce84f8f95588
SHA256

a4240ea0e8a916d15f8391edef9705ab4de1f516dd360f0a336c5358686d434b
SHA512

f5b17975560d97308a6ee66845225715e82bade9df7bc36821c76fe67fcf8d22929bf21b85e28dd11b7399d0109ab1f3786fd2010c2e5023d3a93d2bd5cf678b
SSDEEP

12288:fOHsWPQsJdQmiR0eYG16fyP8RHzS75CaNgMYqIW7I2:2QmiWK16rRHzS7U6ip2

Score

5^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral5/memory/4676-0-0x0000000000400000-0x0000000000603000-memory.dmp	upx
behavioral5/memory/4676-2-0x0000000000400000-0x0000000000603000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\net8.0-windows\Astral_assets\upx\upx.exe
"C:\Users\Admin\AppData\Local\Temp\net8.0-windows\Astral_assets\upx\upx.exe"
1⤵
PID:4676

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --string-annotations --always-read-main-dll --field-trial-handle=5168,i,8156301195647385391,612045039718669237,262144 --variations-seed-version --mojo-platform-channel-handle=1036 /prefetch:14
1⤵
PID:764

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --string-annotations --always-read-main-dll --field-trial-handle=4712,i,8156301195647385391,612045039718669237,262144 --variations-seed-version --mojo-platform-channel-handle=3768 /prefetch:14
1⤵
PID:1180

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --string-annotations --always-read-main-dll --field-trial-handle=4032,i,8156301195647385391,612045039718669237,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:14
1⤵
PID:2392

memory/4676-0-0x0000000000400000-0x0000000000603000-memory.dmp

Filesize
2.0MB

Download
memory/4676-2-0x0000000000400000-0x0000000000603000-memory.dmp

Filesize
2.0MB

Download