81827b4f6ab557996002ace608476e13bf4e5ac64619992dd3a1eb48d90721c5

Analysis

max time kernel
149s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
26/03/2024, 11:43

Target

df14b90af4515bc5420e53fe83e5ae79.exe
Size

11KB
MD5

df14b90af4515bc5420e53fe83e5ae79
SHA1

af5fc62bbf4f22561f9126511fd038866831d117
SHA256

81827b4f6ab557996002ace608476e13bf4e5ac64619992dd3a1eb48d90721c5
SHA512

9224141b53b6152357388aeac08acd6959618d682d97dcf31b7c75b808714fd9e719e12471efb09b2bbb616275ab25ded7e7b6f227bb2e2963491c5018339c75
SSDEEP

96:g/kkd3Gf5Aesj1HiWD4AnBq3JJVQa7NObQ0wdZSbrQDgFgpKXGenkiTiaxjIPmiT:1nPGliWyJJV4Q1S/qJaxcPHn14wMiKL6

Score

8^/10

Drops file in Drivers directory 1 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\DRIVERS\NET110.sys	df14b90af4515bc5420e53fe83e5ae79.exe

Drops file in System32 directory 1 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\NET110.dll	df14b90af4515bc5420e53fe83e5ae79.exe

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1760	4208	WerFault.exe	94

C:\Users\Admin\AppData\Local\Temp\df14b90af4515bc5420e53fe83e5ae79.exe
"C:\Users\Admin\AppData\Local\Temp\df14b90af4515bc5420e53fe83e5ae79.exe"
1⤵
- Drops file in Drivers directory
- Drops file in System32 directory
PID:4208
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4208 -s 292
  2⤵
  - Program crash
  PID:1760

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4208 -ip 4208
1⤵
PID:3012

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3428 --field-trial-handle=3488,i,1267426273081718772,6254127258555406296,262144 --variations-seed-version /prefetch:8
1⤵
PID:2240