05a272a13049cc743c2590119818da98386b2abb93ad07f30d79df6067e12a0f

Analysis

max time kernel
149s
max time network
98s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
01/06/2026, 17:32

Target
05a272a13049cc743c2590119818da98386b2abb93ad07f30d79df6067e12a0f.exe
Size 33KB
Sample260601-v4knbsds7m
SHA256 05a272a13049cc743c2590119818da98386b2abb93ad07f30d79df6067e12a0f
MD5 aea7b5e58c58f37fe1898b1d13e897c9
SHA1 0f805d9eabcb8628ae63fea2ee2814c2daf9866d
SHA512 a94d0d80c7c0dc9ef89fcbd2ac9a4227010f039441226e75e4112d2dd111a0c0e1c852db808f1f0e5712731b11eb75bcebe9c4b3688f24c88f7c2a3b0a0b1d58
SSDEEP 384:lBulenZUCNW5prvQtu2bfKTzcXjeEfwT6FfpEwvINK3HplH8sJBPHCW8:2leZ8Pr4tHHSEfwT6FhRvVplH8svPiW
TLSH
T103E20905A2AB69FCCE87D339D1938630E471FCB74536C76D9B89E6281D619C1FE38602
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
5032	05a272a13049cc743c2590119818da98386b2abb93ad07f30d79df6067e12a0f.exe

C:\Users\Admin\AppData\Local\Temp\05a272a13049cc743c2590119818da98386b2abb93ad07f30d79df6067e12a0f.exe
"C:\Users\Admin\AppData\Local\Temp\05a272a13049cc743c2590119818da98386b2abb93ad07f30d79df6067e12a0f.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5032

memory/5032-0-0x0000021E5BDE0000-0x0000021E5BDE1000-memory.dmp

Download

memory/5032-2-0x0000021E5BDE0000-0x0000021E5BDE1000-memory.dmp

Download

memory/5032-4-0x00007FF6E5C10000-0x00007FF6E5C20000-memory.dmp

Download