2049758df263b57307a47e3efb99745050afb2de9f7d01fe6c853ce68f0e4717

Analysis

max time kernel
121s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
11/10/2022, 02:58

Target

2049758df263b57307a47e3efb99745050afb2de9f7d01fe6c853ce68f0e4717.exe
Size

1015KB
MD5

6929a4207a3170650201dbd213d3f1b2
SHA1

8a67bd41dda885a94088e3c154eb5b580e85fe44
SHA256

2049758df263b57307a47e3efb99745050afb2de9f7d01fe6c853ce68f0e4717
SHA512

6e89d76862af5aa390d6224e633e7bcafa9dbb6f12012e4cf43e890b60a6fbbeca281af28f6939271cda0ff098d836e48cd2a846078651a9238262930cb9615a
SSDEEP

24576:UxxCAIXYQyjB/hVDYd6liKao6n+RIgxZ/:YPQ+VGVcHRIuZ/

Score

8^/10

Drops file in Drivers directory 2 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\drivers\UMDF\tr-KL\smrt\{msdt-9er-45fr-gthb89}_4592.log	2049758df263b57307a47e3efb99745050afb2de9f7d01fe6c853ce68f0e4717.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\tr-KL\smrt\{msdt-9er-45fr-gthb89}_4590.log	2049758df263b57307a47e3efb99745050afb2de9f7d01fe6c853ce68f0e4717.exe

Drops file in System32 directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\System32\LogFiles\Dwm\{msdt-9er-45fr-gthb89}_4590.log	2049758df263b57307a47e3efb99745050afb2de9f7d01fe6c853ce68f0e4717.exe

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4860	4712	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2049758df263b57307a47e3efb99745050afb2de9f7d01fe6c853ce68f0e4717.exe
"C:\Users\Admin\AppData\Local\Temp\2049758df263b57307a47e3efb99745050afb2de9f7d01fe6c853ce68f0e4717.exe"
1⤵
- Drops file in Drivers directory
- Drops file in System32 directory
PID:4712
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4712 -s 472
  2⤵
  - Program crash
  PID:4860

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4712 -ip 4712
1⤵
PID:2040

memory/4712-132-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download
memory/4712-133-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download