a6f3385452c3e02cf67a6308113c7501ed40ad71e6009cd319c8e4689617e68a

Analysis

max time kernel
147s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
20/03/2024, 02:38

Target

d7acd0ace8c9c4edc021724d6acc9d8d.exe
Size

96KB
MD5

d7acd0ace8c9c4edc021724d6acc9d8d
SHA1

96b7b214b8eaeb0fc71bc34d4ee1f86989021d93
SHA256

a6f3385452c3e02cf67a6308113c7501ed40ad71e6009cd319c8e4689617e68a
SHA512

4ca36dde4137e4216d80f50d5aac60b6c36866c6d84918874f61b608ac57ffdef5b3971507ed8d0190ebb72beb224146984e27fb6416971b2f35f9934b51e6f5
SSDEEP

1536:dtjtioHWCnCjXY7WpATNYxluOBchSWSNtNE/uWY4njnB5:dxT23jXpw8lpWSNA//ZnX

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1844	4736	WerFault.exe	87

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4736	d7acd0ace8c9c4edc021724d6acc9d8d.exe

C:\Users\Admin\AppData\Local\Temp\d7acd0ace8c9c4edc021724d6acc9d8d.exe
"C:\Users\Admin\AppData\Local\Temp\d7acd0ace8c9c4edc021724d6acc9d8d.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:4736
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4736 -s 996
  2⤵
  - Program crash
  PID:1844

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4736 -ip 4736
1⤵
PID:3412

memory/4736-0-0x00000000021A0000-0x00000000021B3000-memory.dmp

Filesize
76KB

Download
memory/4736-1-0x0000000000400000-0x000000000041C000-memory.dmp

Filesize
112KB

Download
memory/4736-2-0x00000000021C0000-0x00000000021C1000-memory.dmp

Filesize
4KB

Download
memory/4736-3-0x00000000021C0000-0x00000000021C1000-memory.dmp

Filesize
4KB

Download
memory/4736-4-0x0000000000400000-0x000000000041C000-memory.dmp

Filesize
112KB

Download