6b01dd466e8dbb4131a45189daecbb0c18b7f95d1c6dd87028910aae0873ef48

Analysis

max time kernel
90s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
01/12/2022, 03:37

Target

6b01dd466e8dbb4131a45189daecbb0c18b7f95d1c6dd87028910aae0873ef48.exe
Size

19KB
MD5

07d410f36b29d9d5571cb4ffe54e973d
SHA1

c525296b69a114385c3173f1501e74f81da52d2b
SHA256

6b01dd466e8dbb4131a45189daecbb0c18b7f95d1c6dd87028910aae0873ef48
SHA512

1d8010f0618b86ec6f5e1c3270e60f8651f15665f52fad0faa9b09fdc07dcc64ba20e9765f3166cf88466840cbdc90a4a52f18c65746516ad7cab1d237e66d61
SSDEEP

192:oEvdNVzCmnw76e10PufcrkNzBh60UtCf/JMGxEdvwNkAXmz7DqU7PDIxPcbQtTXu:/vdNVbwnM6cE6HMyVqk7bDQPtTqn

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1912	1336	WerFault.exe	80

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1336	6b01dd466e8dbb4131a45189daecbb0c18b7f95d1c6dd87028910aae0873ef48.exe
1336	6b01dd466e8dbb4131a45189daecbb0c18b7f95d1c6dd87028910aae0873ef48.exe

C:\Users\Admin\AppData\Local\Temp\6b01dd466e8dbb4131a45189daecbb0c18b7f95d1c6dd87028910aae0873ef48.exe
"C:\Users\Admin\AppData\Local\Temp\6b01dd466e8dbb4131a45189daecbb0c18b7f95d1c6dd87028910aae0873ef48.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1336
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1336 -s 332
  2⤵
  - Program crash
  PID:1912

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 1336 -ip 1336
1⤵
PID:5024