3136f4d604f56a324f5874d87215d18cca20388e161ebddec0aa53dccf70c547

Analysis

max time kernel
76s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
20-02-2023 18:38

Target

3136f4d604f56a324f5874d87215d18cca20388e161ebddec0aa53dccf70c547.exe
Size

909KB
MD5

2daf9461a8bf43c241ff4259bfaee0fa
SHA1

a1250ba3ebd88591b5d9367d689a23803cf4678b
SHA256

3136f4d604f56a324f5874d87215d18cca20388e161ebddec0aa53dccf70c547
SHA512

87d0c8476e21d8871b646dd50e1e185bf16710fecf11cdda6743c050d863b36ed8999aa40c45c5a4dff89da0421af7399511c7bd7b7d86604968691ce309fd18
SSDEEP

24576:iPTCspPGwK9Ao48W6N8bsBOwxAoUSITuwR:o+yGJefLwxAoUSI

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4320 4532 WerFault.exe 3136f4d604f56a324f5874d87215d18cca20388e161ebddec0aa53dccf70c547.exe

pid	pid_target	process	target process
4320	4532	WerFault.exe	3136f4d604f56a324f5874d87215d18cca20388e161ebddec0aa53dccf70c547.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

3136f4d604f56a324f5874d87215d18cca20388e161ebddec0aa53dccf70c547.exe

pid	process
4532	3136f4d604f56a324f5874d87215d18cca20388e161ebddec0aa53dccf70c547.exe
4532	3136f4d604f56a324f5874d87215d18cca20388e161ebddec0aa53dccf70c547.exe

C:\Users\Admin\AppData\Local\Temp\3136f4d604f56a324f5874d87215d18cca20388e161ebddec0aa53dccf70c547.exe
"C:\Users\Admin\AppData\Local\Temp\3136f4d604f56a324f5874d87215d18cca20388e161ebddec0aa53dccf70c547.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4532

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4532 -s 716
2⤵
- Program crash
PID:4320

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4532 -ip 4532
1⤵
PID:320

memory/4532-132-0x0000000000400000-0x000000000088E000-memory.dmp

Filesize
4.6MB

Download
memory/4532-133-0x0000000000400000-0x000000000088E000-memory.dmp

Filesize
4.6MB

Download
memory/4532-134-0x0000000000400000-0x000000000088E000-memory.dmp

Filesize
4.6MB

Download
memory/4532-135-0x0000000000400000-0x000000000088E000-memory.dmp

Filesize
4.6MB

Download
memory/4532-136-0x0000000002810000-0x0000000002811000-memory.dmp

Filesize
4KB

Download
memory/4532-137-0x0000000000400000-0x000000000088E000-memory.dmp

Filesize
4.6MB

Download