035df4fa96d1650f33ff13f93be57d53ab8eccd8f84fe3ba073ffd9982691784

Analysis

max time kernel
180s
max time network
190s
platform
windows10-2004_x64
resource
win10v2004-20231023-en
resource tags

arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
submitted
19-11-2023 23:49

Target

6acb3b43d98f272ef65bd7499ebd99cc2e55b5e361cde052d0c2f49ce78d4bc4.exe
Size

395KB
MD5

27f3ee84cf6c103db746602bd309b4ae
SHA1

e7e88cff99c7fec0e8661f1066f6503a967e424d
SHA256

6acb3b43d98f272ef65bd7499ebd99cc2e55b5e361cde052d0c2f49ce78d4bc4
SHA512

bd67b9e9424c6c817c7ff0790139276155b611944243dc57bc526b1577cd195885fc87d792a455fb7a75a755e0c05e29e80739d23834b760b9f40c5db27f3745
SSDEEP

6144:fLhat7FJYk9idwSOr0TLlDtIY6wR+fjSTyHeZ:fts7FJnqZhDtr6wofjSTy

Score

3^/10

Program crash 3 IoCs

Processes:

WerFault.exeWerFault.exeWerFault.exe

pid	pid_target	process	target process
1088	868	WerFault.exe	6acb3b43d98f272ef65bd7499ebd99cc2e55b5e361cde052d0c2f49ce78d4bc4.exe
1884	868	WerFault.exe	6acb3b43d98f272ef65bd7499ebd99cc2e55b5e361cde052d0c2f49ce78d4bc4.exe
3000	868	WerFault.exe	6acb3b43d98f272ef65bd7499ebd99cc2e55b5e361cde052d0c2f49ce78d4bc4.exe

C:\Users\Admin\AppData\Local\Temp\6acb3b43d98f272ef65bd7499ebd99cc2e55b5e361cde052d0c2f49ce78d4bc4.exe
"C:\Users\Admin\AppData\Local\Temp\6acb3b43d98f272ef65bd7499ebd99cc2e55b5e361cde052d0c2f49ce78d4bc4.exe"
1⤵
PID:868

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 868 -s 584
2⤵
- Program crash
PID:1088

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 868 -s 592
2⤵
- Program crash
PID:1884

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 868 -s 652
2⤵
- Program crash
PID:3000

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 868 -ip 868
1⤵
PID:3104

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 384 -p 868 -ip 868
1⤵
PID:1032

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 512 -p 868 -ip 868
1⤵
PID:2880

memory/868-1-0x00000000007E0000-0x00000000008E0000-memory.dmp

Filesize
1024KB

Download
memory/868-2-0x0000000002180000-0x00000000021EC000-memory.dmp

Filesize
432KB

Download
memory/868-3-0x0000000000400000-0x0000000000515000-memory.dmp

Filesize
1.1MB

Download
memory/868-6-0x00000000007E0000-0x00000000008E0000-memory.dmp

Filesize
1024KB

Download
memory/868-7-0x0000000002180000-0x00000000021EC000-memory.dmp

Filesize
432KB

Download