22815762e75ccc92f83b68a72e2891199dac28d6cf5252f3bffcf4789456775c

Analysis

max time kernel
119s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
06/06/2023, 08:06

Target

22815762e75ccc92f83b68a72e2891199dac28d6cf5252f3bffcf4789456775c.exe
Size

460KB
MD5

d50a3718d78ca1fe2f21f12269f12e70
SHA1

ba3dccad1e55e5180e82e4e5488076a8f84676f2
SHA256

22815762e75ccc92f83b68a72e2891199dac28d6cf5252f3bffcf4789456775c
SHA512

8164c09be119f66ed0278fc5973a3b777072bcf95829701088de0eff1dd2ad842ef956da6acd588382be8cde5e6a43ab57b1d0cd653a0e6f27bbed695cff02cc
SSDEEP

6144:s59oxARHqL1eH7CgvHWYMK+tiD0hUitATIZlDSwBVs00zlHTj9sQvKV6fuc5Hr:s5CxARksSGqvATmA+Czj9sQysfZL

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4304	2136	WerFault.exe	82

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2136	22815762e75ccc92f83b68a72e2891199dac28d6cf5252f3bffcf4789456775c.exe
2136	22815762e75ccc92f83b68a72e2891199dac28d6cf5252f3bffcf4789456775c.exe

C:\Users\Admin\AppData\Local\Temp\22815762e75ccc92f83b68a72e2891199dac28d6cf5252f3bffcf4789456775c.exe
"C:\Users\Admin\AppData\Local\Temp\22815762e75ccc92f83b68a72e2891199dac28d6cf5252f3bffcf4789456775c.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2136
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2136 -s 472
  2⤵
  - Program crash
  PID:4304

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 2136 -ip 2136
1⤵
PID:2520

memory/2136-134-0x0000000004AA0000-0x0000000004B10000-memory.dmp

Filesize
448KB

Download
memory/2136-135-0x0000000000400000-0x0000000002D1A000-memory.dmp

Filesize
41.1MB

Download
memory/2136-140-0x0000000002ED0000-0x0000000002ED7000-memory.dmp

Filesize
28KB

Download
memory/2136-141-0x0000000004DD0000-0x00000000051D0000-memory.dmp

Filesize
4.0MB

Download
memory/2136-142-0x0000000004DD0000-0x00000000051D0000-memory.dmp

Filesize
4.0MB

Download
memory/2136-144-0x0000000000400000-0x0000000002D1A000-memory.dmp

Filesize
41.1MB

Download