477cb83fd991d5267507f61b98b7f7523a2ae79bcb1f2e52a71d9daa20b0b93e

Analysis

max time kernel
142s
max time network
172s
platform
windows10-2004_x64
resource
win10v2004-20231127-en
resource tags

arch:x64arch:x86image:win10v2004-20231127-enlocale:en-usos:windows10-2004-x64system
submitted
09-12-2023 20:58

Target

1.exe
Size

582KB
MD5

5bbe49ada7ef535b87bd1e3c3d2b42c3
SHA1

1e94057198bdf893683d30591601aa88f51eed49
SHA256

7be2a5923ba5e4acb9f1e5eee42c04b2b6620c82efe013e751415a495590895d
SHA512

f859b1efc80ddcfe3f54aae4ebb4a3f4612a8a4b1ecd0b965f1e65f8decf8018999ce48e32a71515f78bc223c24815aa8bd645b517947d65227e083d0ff9c45d
SSDEEP

12288:S1lqDbsmSxn3Iv9XyePFQkLkRvJSA5V40mjz5Auz6r0Sn:i4Db7Sxn3IvrRgRRSwL4tz6rd

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3144 3248 WerFault.exe 1.exe

pid	pid_target	process	target process
3144	3248	WerFault.exe	1.exe

C:\Users\Admin\AppData\Local\Temp\1.exe
"C:\Users\Admin\AppData\Local\Temp\1.exe"
1⤵
PID:3248

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3248 -s 876
2⤵
- Program crash
PID:3144

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 3248 -ip 3248
1⤵
PID:1316

memory/3248-0-0x00000000747E0000-0x0000000074F90000-memory.dmp

Filesize
7.7MB

Download
memory/3248-1-0x00000000004E0000-0x0000000000520000-memory.dmp

Filesize
256KB

Download
memory/3248-2-0x0000000004F80000-0x000000000501C000-memory.dmp

Filesize
624KB

Download
memory/3248-3-0x0000000005120000-0x0000000005130000-memory.dmp

Filesize
64KB

Download
memory/3248-4-0x00000000747E0000-0x0000000074F90000-memory.dmp

Filesize
7.7MB

Download