5d399e82d649b16c9fbeecb00a55d8ec9912e75f8c672e521541acc7a5f85e3e

Analysis

max time kernel
115s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
20/10/2022, 13:54

Target

5d399e82d649b16c9fbeecb00a55d8ec9912e75f8c672e521541acc7a5f85e3e.exe
Size

47KB
MD5

a06a6f99776ef40f80f15a72908d3d50
SHA1

2b7551db4c52557d243f8fc9ad51ed468b787afc
SHA256

5d399e82d649b16c9fbeecb00a55d8ec9912e75f8c672e521541acc7a5f85e3e
SHA512

d487d8042a1c967c84ee11fb69bdcf51c9c8de7a5f3b9e19563fd2e726cd97247bc6a2e08d73a11a8728d935c504854a08468735a1947f0b82826fa3fcc78221
SSDEEP

768:0ORCDt6NFyyNbnXPt+qM/WgTb1hgcsQKj47FeeRtisXpZj4O2eflJULSIkAK+eqO:TCm9xlmeglScDpRzpd4O2eLULx5K+D

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4552	5024	WerFault.exe	81

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5024	5d399e82d649b16c9fbeecb00a55d8ec9912e75f8c672e521541acc7a5f85e3e.exe
5024	5d399e82d649b16c9fbeecb00a55d8ec9912e75f8c672e521541acc7a5f85e3e.exe

C:\Users\Admin\AppData\Local\Temp\5d399e82d649b16c9fbeecb00a55d8ec9912e75f8c672e521541acc7a5f85e3e.exe
"C:\Users\Admin\AppData\Local\Temp\5d399e82d649b16c9fbeecb00a55d8ec9912e75f8c672e521541acc7a5f85e3e.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5024
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5024 -s 340
  2⤵
  - Program crash
  PID:4552

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 376 -p 5024 -ip 5024
1⤵
PID:4276

memory/5024-132-0x0000000000030000-0x0000000000036000-memory.dmp

Filesize
24KB

Download
memory/5024-133-0x0000000000030000-0x0000000000036000-memory.dmp

Filesize
24KB

Download