ee357a9cab17cadf8ee57319aa9b8b653439939fa7cf36d9b0063500964d3d69

Analysis

max time kernel
118s
max time network
140s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
09/04/2024, 02:36

Target
WaveTrial/CefSharp.BrowserSubprocess.exe
Size 6KB
Sample240409-c3t69sfe5w
SHA256 95dd31f11ac1317559b6eee0479739930d503a4938283f5d831ac8add92ad792
MD5 bcd22b9511d5383e23d875e2cf3c339e
SHA1 0ef86afaef536cc4b046ea2866414bb193d60702
SHA512 c4e6821858720895c0bfae797097e3307bb7ea8f03dde4fefc16cce03b2a50fecfe8ed5c3225136fcd9d74ee0ed8673f795b410cd14890d22df58c1f03b693c6
SSDEEP 96:v6ZxBI7kNmQBDvJGSkX6eFZJetmAhNt61OYcXe5U:UBIimQB9eX6eFZgsAYcXeS
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1972 wrote to memory of 2212	1972	CefSharp.BrowserSubprocess.exe	28
PID 1972 wrote to memory of 2212	1972	CefSharp.BrowserSubprocess.exe	28
PID 1972 wrote to memory of 2212	1972	CefSharp.BrowserSubprocess.exe	28

C:\Users\Admin\AppData\Local\Temp\WaveTrial\CefSharp.BrowserSubprocess.exe
"C:\Users\Admin\AppData\Local\Temp\WaveTrial\CefSharp.BrowserSubprocess.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1972
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1972 -s 528
  2⤵
  PID:2212

memory/1972-0-0x000000013F180000-0x000000013F186000-memory.dmp

Download

memory/1972-2-0x000000001C080000-0x000000001C19E000-memory.dmp

Download

memory/1972-1-0x0000000000C60000-0x0000000000CAA000-memory.dmp

Download

memory/1972-3-0x000007FEF5720000-0x000007FEF610C000-memory.dmp

Download

memory/1972-4-0x000000001CA30000-0x000000001DA30000-memory.dmp

Download

memory/1972-5-0x000007FEF5720000-0x000007FEF610C000-memory.dmp

Download