08fd7e735afa2ee37d2aeddab975018491a21bad4561bc01fb2da9c9af0e5be2

Analysis

max time kernel
147s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
30-12-2023 21:07

Target

1c7d537098a54c1de9b14e7b5f18e701.exe
Size

13KB
MD5

1c7d537098a54c1de9b14e7b5f18e701
SHA1

ae0778804aacc3ae89c6205ec8214fd39ba47ad8
SHA256

08fd7e735afa2ee37d2aeddab975018491a21bad4561bc01fb2da9c9af0e5be2
SHA512

4131c7006a2618d903ee193a631710614caedd986e718e1517d7079994de9dd492b5d68649669b7f5a132231024dda63b8e19acee6b47e2cf97bcfc2e9ff67ca
SSDEEP

384:DvPSGnVaSCJt6aRrZ8EF/KVRv2eYac7TsZquX5uBUWrzIK:jRaYaRrZ/F/KVRv2eYac7TsZquX5iUYv

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3172	720	WerFault.exe	16

Suspicious behavior: EnumeratesProcesses 4 IoCs

C:\Users\Admin\AppData\Local\Temp\1c7d537098a54c1de9b14e7b5f18e701.exe
"C:\Users\Admin\AppData\Local\Temp\1c7d537098a54c1de9b14e7b5f18e701.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:720
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 720 -s 1196
  2⤵
  - Program crash
  PID:3172

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 720 -ip 720
1⤵
PID:4488