cf1998277019ef3f480806d97938885bab65302b17b360eb1807dc859447094b

Analysis

max time kernel
141s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
14/03/2024, 23:36

Target

cf1998277019ef3f480806d97938885bab65302b17b360eb1807dc859447094b.exe
Size

6.8MB
MD5

d2798b9f8f9c6d1e60b9f13f1fefb9b5
SHA1

c55fa36b2985a3bbd48d5106ace682ed68a191a9
SHA256

cf1998277019ef3f480806d97938885bab65302b17b360eb1807dc859447094b
SHA512

b794ba049524910f14e4f61544700e20689eff0f89b704352dc051e8a84ddbe3b8836b5c0e9025a4706a83e8a7f5733b135ae1ebb97d97dd52cf7fa19ec505da
SSDEEP

196608:71PlRLuvflbJT/Fr8UDJCM4D2xcBVrx00Ku:F+bTF7JCMlcVm0K

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1092	1160	WerFault.exe	96

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1160	cf1998277019ef3f480806d97938885bab65302b17b360eb1807dc859447094b.exe
1160	cf1998277019ef3f480806d97938885bab65302b17b360eb1807dc859447094b.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1160	cf1998277019ef3f480806d97938885bab65302b17b360eb1807dc859447094b.exe

C:\Users\Admin\AppData\Local\Temp\cf1998277019ef3f480806d97938885bab65302b17b360eb1807dc859447094b.exe
"C:\Users\Admin\AppData\Local\Temp\cf1998277019ef3f480806d97938885bab65302b17b360eb1807dc859447094b.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
PID:1160
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1160 -s 420
  2⤵
  - Program crash
  PID:1092

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 1160 -ip 1160
1⤵
PID:2668

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4032 --field-trial-handle=2900,i,14549994492153927475,12895178890800740987,262144 --variations-seed-version /prefetch:8
1⤵
PID:3160

memory/1160-0-0x0000000003000000-0x0000000003B38000-memory.dmp

Filesize
11.2MB

Download
memory/1160-1-0x0000000003000000-0x0000000003B38000-memory.dmp

Filesize
11.2MB

Download
memory/1160-2-0x00000000005A0000-0x00000000005A1000-memory.dmp

Filesize
4KB

Download
memory/1160-3-0x00000000005B0000-0x00000000005B1000-memory.dmp

Filesize
4KB

Download
memory/1160-4-0x00000000005C0000-0x00000000005C1000-memory.dmp

Filesize
4KB

Download
memory/1160-5-0x00000000005D0000-0x00000000005D1000-memory.dmp

Filesize
4KB

Download
memory/1160-6-0x00000000021A0000-0x00000000021A1000-memory.dmp

Filesize
4KB

Download
memory/1160-7-0x00000000021B0000-0x00000000021B1000-memory.dmp

Filesize
4KB

Download
memory/1160-8-0x00000000021C0000-0x00000000021C1000-memory.dmp

Filesize
4KB

Download
memory/1160-9-0x0000000003000000-0x0000000003B38000-memory.dmp

Filesize
11.2MB

Download
memory/1160-13-0x0000000003000000-0x0000000003B38000-memory.dmp

Filesize
11.2MB

Download
memory/1160-14-0x00000000026A0000-0x0000000002776000-memory.dmp

Filesize
856KB

Download
memory/1160-15-0x0000000003000000-0x0000000003B38000-memory.dmp

Filesize
11.2MB

Download