47041d64da308764d5459db700e096a05cfc81a738327c00c8d9ec12e9a05d2e

Analysis

max time kernel
153s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
29-12-2023 02:27

Target

b6ef43a0d463f59ded49449cae2c9988.exe
Size

307KB
MD5

b6ef43a0d463f59ded49449cae2c9988
SHA1

70f17404e8b05df854a283d09d0e95818ce4e7fe
SHA256

47041d64da308764d5459db700e096a05cfc81a738327c00c8d9ec12e9a05d2e
SHA512

005a4c53513dfecf658a4b851be5643ca21e98b05bbbfe66a5d6dffc52ab345d0e19aa020ef6ff5f15e26769403534c7bf62e895060fc2eafa38c36e1ce58039
SSDEEP

6144:6iIIf6w1xsVedL1k18zbXURNq7ffgo5m1ms/l2KRJZRp7eZk5:6iIICY0ed/bX0NqEo5Ams/sKTrCk5

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3788	3672	WerFault.exe	89

C:\Users\Admin\AppData\Local\Temp\b6ef43a0d463f59ded49449cae2c9988.exe
"C:\Users\Admin\AppData\Local\Temp\b6ef43a0d463f59ded49449cae2c9988.exe"
1⤵
PID:3672
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3672 -s 504
  2⤵
  - Program crash
  PID:3788

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 3672 -ip 3672
1⤵
PID:2232

memory/3672-0-0x0000000000870000-0x0000000000871000-memory.dmp

Filesize
4KB

Download
memory/3672-1-0x0000000000400000-0x00000000004B5000-memory.dmp

Filesize
724KB

Download