3a95da66f48c034a56ec39d61de11a4c033828c03ae37b06c9cfc90643ce9506

Analysis

max time kernel
298s
max time network
282s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/07/2026, 02:50

Target
Bid.vbs
Size 2KB
Sample260716-dbqv7se18x
SHA256 3a95da66f48c034a56ec39d61de11a4c033828c03ae37b06c9cfc90643ce9506
MD5 6a7d6649848394c29cfabdd55c2d3dd9
SHA1 f65a3d571382f97e6fad19ae5e3347a151b57930
SHA512 00fff78e1829d2c7f5d9541daf31b991cb39c06e4fd2667c1ae6e44865a40fb9392752ecaf922440c71db7d1a4e20decde24a38c1481b8f3e44e12ef4c874fcd
TLSH
T18C51A85F384BA2704975063BE6255970F7EB849F10664018B84EC44F0F761AAD7E60FA
MD5 SHA1 SHA512 TLSH

Score

8^/10

Badlisted process makes network request 1 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
2	2712	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Bid.vbs"
1⤵
- Badlisted process makes network request
PID:2712

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:2504