468d99ebb7dc2e10bfec80b8636513e8e3513c235e8810b1e6b810369b08893b

Analysis

max time kernel
117s
max time network
138s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
07/11/2023, 14:06

Target

reactos/bin/ps.exe
Size

28KB
MD5

3489d26c86a3c2c9a41b225d81a8fb69
SHA1

78156be5e94cbe81311ccb8f77acdf4c184274e1
SHA256

63aff64dd4c437e75542adccb02bc7c673dbb374e7cd75ea78d9b23335d54911
SHA512

2cbf034e21a4aea41621393f4b30e415318da99a5a184a409bd1e9a8b2eddea74985d068c37e46bc2be879f7332e9c5ad4a9e7640bc4c0e71a85ab2e4f9c6c7a
SSDEEP

192:uXDqF4RbxbZor+LnMYRdLTX/dgkeJaCIYva4nU0p1NYwUl4uEoTV4c0ls2:KDqFwbxVsHYRRTPgvvnUO1Ju4uHH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2044	ps.exe

C:\Users\Admin\AppData\Local\Temp\reactos\bin\ps.exe
"C:\Users\Admin\AppData\Local\Temp\reactos\bin\ps.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2044

memory/2044-0-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download