2c36c9d7ae546eb24dc453f8eb01dc80a2646179fc288ba413456f0e8f0f5d08

Analysis

max time kernel
155s
max time network
166s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
08/03/2024, 18:24

Target

2c36c9d7ae546eb24dc453f8eb01dc80a2646179fc288ba413456f0e8f0f5d08.exe
Size

462KB
MD5

fec252e0af7ec865d0c3ed3790f98a26
SHA1

9b9628a8f34a6086e652deefef1384cd0a929478
SHA256

2c36c9d7ae546eb24dc453f8eb01dc80a2646179fc288ba413456f0e8f0f5d08
SHA512

1d38ede587d64ad1b10f42f69418a3a13512af84fc664d8f95ae63586b7feca3a380f2520407359e6fd76232b37c42d2db74e85636a290cce97fc3f260862db5
SSDEEP

6144:eo3Ducsw6/eKxSlKKZ74ueKxff0qjwszeX9z6/ojwszeXmOEgHixuqjwszeXm:Huylr54ujjgj+HiPj

Score

5^/10

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\ïs.e²e	2c36c9d7ae546eb24dc453f8eb01dc80a2646179fc288ba413456f0e8f0f5d08.exe
File opened for modification	C:\Windows\SysWOW64\ïs.e²e	2c36c9d7ae546eb24dc453f8eb01dc80a2646179fc288ba413456f0e8f0f5d08.exe

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4572	3820	WerFault.exe	94

C:\Users\Admin\AppData\Local\Temp\2c36c9d7ae546eb24dc453f8eb01dc80a2646179fc288ba413456f0e8f0f5d08.exe
"C:\Users\Admin\AppData\Local\Temp\2c36c9d7ae546eb24dc453f8eb01dc80a2646179fc288ba413456f0e8f0f5d08.exe"
1⤵
- Drops file in System32 directory
PID:3820
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3820 -s 432
  2⤵
  - Program crash
  PID:4572

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 3820 -ip 3820
1⤵
PID:5096

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1028 --field-trial-handle=3088,i,14310325015283915034,7660943942870463106,262144 --variations-seed-version /prefetch:8
1⤵
PID:3880

memory/3820-0-0x0000000000400000-0x0000000000475000-memory.dmp

Filesize
468KB

Download
memory/3820-2-0x0000000000400000-0x0000000000475000-memory.dmp

Filesize
468KB

Download
memory/3820-8-0x0000000000400000-0x0000000000475000-memory.dmp

Filesize
468KB

Download
memory/3820-9-0x0000000000400000-0x0000000000475000-memory.dmp

Filesize
468KB

Download