3b8808f7e81360a454a5070e5ba8b54174e873f3da0974a13afbef1af5016470

Analysis

max time kernel
191s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20231023-en
resource tags

arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
submitted
19-11-2023 23:49

Target

ca3cc0a015ed43a1441a993097ec2e774ad3823d372fe2a78ef2c42ecf7eb7fe.exe
Size

386KB
MD5

3e368055148cb6a46d2c37c22e7b6d7c
SHA1

5ff4a741c50a7ba749db056f6c8576e1c9f07a93
SHA256

ca3cc0a015ed43a1441a993097ec2e774ad3823d372fe2a78ef2c42ecf7eb7fe
SHA512

82445e8c8409817dfa3ffa699a42a0f6449c0377d7729238a86f4d3fe86fc60da2d34c80d720b86dab20f072281a0ad52b159335d33fb9e893fbf37000b06429
SSDEEP

6144:CoLwV/vaoA4iuDorUhN0cTV06WCKRkqGxT68JmFc56:Co0V/ziMLhNZ6kiFGE8JmFS

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4676 4864 WerFault.exe ca3cc0a015ed43a1441a993097ec2e774ad3823d372fe2a78ef2c42ecf7eb7fe.exe

pid	pid_target	process	target process
4676	4864	WerFault.exe	ca3cc0a015ed43a1441a993097ec2e774ad3823d372fe2a78ef2c42ecf7eb7fe.exe

C:\Users\Admin\AppData\Local\Temp\ca3cc0a015ed43a1441a993097ec2e774ad3823d372fe2a78ef2c42ecf7eb7fe.exe
"C:\Users\Admin\AppData\Local\Temp\ca3cc0a015ed43a1441a993097ec2e774ad3823d372fe2a78ef2c42ecf7eb7fe.exe"
1⤵
PID:4864

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4864 -s 568
2⤵
- Program crash
PID:4676

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4864 -ip 4864
1⤵
PID:4328

memory/4864-2-0x0000000002140000-0x00000000021AC000-memory.dmp

Filesize
432KB

Download
memory/4864-1-0x00000000006A0000-0x00000000007A0000-memory.dmp

Filesize
1024KB

Download
memory/4864-3-0x0000000000400000-0x0000000000513000-memory.dmp

Filesize
1.1MB

Download
memory/4864-6-0x00000000006A0000-0x00000000007A0000-memory.dmp

Filesize
1024KB

Download
memory/4864-7-0x0000000002140000-0x00000000021AC000-memory.dmp

Filesize
432KB

Download