3a32c03b231691ec8dbd193505116515c7a38c4ffdb9e5f3b7a6e87a5a54fca8

Analysis

user interaction
yes
max time kernel
149s
max time network
136s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/07/2026, 12:59

Target
wparser.exe
Size 10.6MB
Sample260706-p8kagafw21
SHA256 3a32c03b231691ec8dbd193505116515c7a38c4ffdb9e5f3b7a6e87a5a54fca8
MD5 0e50b1b7920f84eb3eb39a3cc2f51ee2
SHA1 797e546a7c31c46cb420ffb0fdc3ea8994607cc7
SHA512 c4ea786c9175ce7042f7d2a5bde9d153412cc92b5e0697815fca34a3388bb20e47210b1a1e8b57346bf52064eece9e961c496dce87c02935eaa11e7c8f250883
SSDEEP 98304:MmqKzLzr4cL5p8xTvjNVGs4CxCNnC/Q+kv5g8:M9KqN/Q5v5g8
TLSH
T137B6F85BEB7600D2D4BAC1398653A236FD71385A837467DF9B409A561F22BF0AE3D340
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 2220 wrote to memory of 4320	2220	wparser.exe	86

C:\Users\Admin\AppData\Local\Temp\wparser.exe
"C:\Users\Admin\AppData\Local\Temp\wparser.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2220
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cls
  2⤵
  PID:4320