295a9bbda4bf42c7ff93001b7f3f5d9e346931b0092b3133468df348f8efe3c7

Analysis

max time kernel
91s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
04-10-2022 02:23

Target

295a9bbda4bf42c7ff93001b7f3f5d9e346931b0092b3133468df348f8efe3c7.exe
Size

282KB
MD5

38d5ee6f7e7c11bb2765f3ab22248720
SHA1

d04ca57a4ccc231fcfa82b5592b801183fb63259
SHA256

295a9bbda4bf42c7ff93001b7f3f5d9e346931b0092b3133468df348f8efe3c7
SHA512

03bf54248f49222ee9dcaafd132f7ec43ad9f6184ef278889b7989c1b92ab5374b7c7cb72ae1955ca36ce146722df95f268c614880aeaced5d3cdb7389089dfe
SSDEEP

6144:bze6eOWxZvOewqe9tBIexqbjFOtXBRRM24yRZt0jPIM:bS6lofwf3ZEfA5nRt4yRUv

Score

4^/10

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\b	295a9bbda4bf42c7ff93001b7f3f5d9e346931b0092b3133468df348f8efe3c7.exe

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1676	4800	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\295a9bbda4bf42c7ff93001b7f3f5d9e346931b0092b3133468df348f8efe3c7.exe
"C:\Users\Admin\AppData\Local\Temp\295a9bbda4bf42c7ff93001b7f3f5d9e346931b0092b3133468df348f8efe3c7.exe"
1⤵
- Drops file in Windows directory
PID:4800
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4800 -s 408
  2⤵
  - Program crash
  PID:1676

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4800 -ip 4800
1⤵
PID:4660