60745533429d61e0f745e9316b469f12fb17bf0f9a326cd62ed458718c120ef3

Analysis

max time kernel
192s
max time network
220s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
31/10/2022, 00:59

Target

60745533429d61e0f745e9316b469f12fb17bf0f9a326cd62ed458718c120ef3.exe
Size

47KB
MD5

a0f408e5ebd7bf85b670c2634e621fa0
SHA1

ff3e44a36252b7f784407c9ae4907d100009446e
SHA256

60745533429d61e0f745e9316b469f12fb17bf0f9a326cd62ed458718c120ef3
SHA512

ee7c62aa098f4dcf78c29add75a9908bad5f07d755f55ceae20c9833278a6e5a4ff8b4fc5fe27e6d8b9d126637e1976e4157440903e49a307a6e5f5bad286bdc
SSDEEP

768:0ORCDtNInVvwCMKZkv4/AkzXS+TeUbL8raY0UoXY6GHccu9O:TCN4vwgZ64/AkzX3pX2aomY6uu9

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1108	1504	WerFault.exe	78

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1504	60745533429d61e0f745e9316b469f12fb17bf0f9a326cd62ed458718c120ef3.exe
1504	60745533429d61e0f745e9316b469f12fb17bf0f9a326cd62ed458718c120ef3.exe

C:\Users\Admin\AppData\Local\Temp\60745533429d61e0f745e9316b469f12fb17bf0f9a326cd62ed458718c120ef3.exe
"C:\Users\Admin\AppData\Local\Temp\60745533429d61e0f745e9316b469f12fb17bf0f9a326cd62ed458718c120ef3.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1504
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1504 -s 324
  2⤵
  - Program crash
  PID:1108

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1504 -ip 1504
1⤵
PID:5032

memory/1504-132-0x0000000000030000-0x0000000000036000-memory.dmp

Filesize
24KB

Download