2381a09a841428e3f9d7646253b7135f4091a296586b50e8d1d31f210cb19863

Analysis

max time kernel
152s
max time network
165s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
26/12/2023, 00:50

Target

478a38448eb92e625e220f364387b048.exe
Size

786KB
MD5

478a38448eb92e625e220f364387b048
SHA1

0641ac697b8ab4249fd921803b7650c652cd6119
SHA256

2381a09a841428e3f9d7646253b7135f4091a296586b50e8d1d31f210cb19863
SHA512

513417db97019f1fa9d456a6eeb6b27df29645c81a50aa4695d7c8ba4efde1d31543fef6df4aa12042959a1fc588da72af305b2472628f3d69ec4b5b5a7c10b1
SSDEEP

12288:vQWG+OqS6EzeKONq3hNjHSi7ODsRgFV0FUOdQ44YHHim9Q6RI72xFrB1vYWU:vQWnOqP3iAqZRXG44sfxeKF11vnU

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
796	1252	WerFault.exe	89

C:\Users\Admin\AppData\Local\Temp\478a38448eb92e625e220f364387b048.exe
"C:\Users\Admin\AppData\Local\Temp\478a38448eb92e625e220f364387b048.exe"
1⤵
PID:1252
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1252 -s 496
  2⤵
  - Program crash
  PID:796

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 1252 -ip 1252
1⤵
PID:2264

memory/1252-2-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download
memory/1252-0-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download
memory/1252-6-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download