de36e0af9cd7e32d781be2ab937a7dca33a9f93dcbecd06ff944641e5196c51f

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 02:28

Target

de36e0af9cd7e32d781be2ab937a7dca33a9f93dcbecd06ff944641e5196c51f.exe
Size

5.5MB
MD5

461e951ba79964b681e9a8bc9d61a92c
SHA1

c860285cc237d35022fea21eba03c82e86ea3d1e
SHA256

de36e0af9cd7e32d781be2ab937a7dca33a9f93dcbecd06ff944641e5196c51f
SHA512

b85af74593267854a24d9a03a046c3d00cfd25401a9b304061f508d46c559e4773801dda28c0a54c15b2c9334fbfa2f391be9194828334cbe4be50811ed0c19f
SSDEEP

98304:28DaacSl8Gb4CieDNDQfCmzgHCS5nidPDjJ4zfm4xrXEkuJTQS383:28eacSl8Gb4CieDNDcCoynQPDyZxcTr3

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

732 2356 WerFault.exe de36e0af9cd7e32d781be2ab937a7dca33a9f93dcbecd06ff944641e5196c51f.exe

pid	pid_target	process	target process
732	2356	WerFault.exe	de36e0af9cd7e32d781be2ab937a7dca33a9f93dcbecd06ff944641e5196c51f.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

de36e0af9cd7e32d781be2ab937a7dca33a9f93dcbecd06ff944641e5196c51f.exe

pid	process
2356	de36e0af9cd7e32d781be2ab937a7dca33a9f93dcbecd06ff944641e5196c51f.exe
2356	de36e0af9cd7e32d781be2ab937a7dca33a9f93dcbecd06ff944641e5196c51f.exe

C:\Users\Admin\AppData\Local\Temp\de36e0af9cd7e32d781be2ab937a7dca33a9f93dcbecd06ff944641e5196c51f.exe
"C:\Users\Admin\AppData\Local\Temp\de36e0af9cd7e32d781be2ab937a7dca33a9f93dcbecd06ff944641e5196c51f.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2356

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2356 -s 544
2⤵
- Program crash
PID:732

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2356 -ip 2356
1⤵
PID:944