237a31c5d69437f05916fc69d6e9911b9ae4cc10e7d396c05917152567263942

Analysis

max time kernel
140s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
24/12/2023, 17:19

Target

0812cf79b45da3d11efaa2ea465770dd.exe
Size

791KB
MD5

0812cf79b45da3d11efaa2ea465770dd
SHA1

b984d6ee76db253bfa0ff2b51f57256cc9a621a1
SHA256

237a31c5d69437f05916fc69d6e9911b9ae4cc10e7d396c05917152567263942
SHA512

03f2cd9463f06b8f19bf899986cf164ab68ab4d41267f372592a5ac86d4cd811de257231f9835edc7848a5ee72452a8f16be0c89999af1f59ed977e2a2030faf
SSDEEP

24576:mfnsYyMt99JBg+CjM9nPt8XWe/Gmh4um+E/hNL/8NTK:mvbyMtLqMFtOP/G64KKjAu

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2112	1900	WerFault.exe	16

C:\Users\Admin\AppData\Local\Temp\0812cf79b45da3d11efaa2ea465770dd.exe
"C:\Users\Admin\AppData\Local\Temp\0812cf79b45da3d11efaa2ea465770dd.exe"
1⤵
PID:1900
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1900 -s 484
  2⤵
  - Program crash
  PID:2112

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 1900 -ip 1900
1⤵
PID:1948

memory/1900-2-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/1900-0-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/1900-5-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download