7a109773cdd338fcf7eb020944c9dda636a725d2a1dc9768b5a81fa40192638b

Analysis

max time kernel
150s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
30-12-2023 11:46

Target

1774407b4a680a3422eefb201a5d48c7.exe
Size

3.8MB
MD5

1774407b4a680a3422eefb201a5d48c7
SHA1

fffee0efd8def6036a49a126281815942c039447
SHA256

7a109773cdd338fcf7eb020944c9dda636a725d2a1dc9768b5a81fa40192638b
SHA512

ea66a2a259c0fa941d3e9dc8e137a72020d7f9bc3f6aebd8ed783f5a32aeba2aab6c96324a81a3cef83818856694fdd580cfd20f1382e3bddc0d0927d81b22b6
SSDEEP

98304:KN3T5Vtl33Kbl4UfU1SQHyVP4W3Zkzqrq0b7FrJzBxqPGiQv4G:KNj5hKblVcKZfpQqeA7FrJlxmQv3

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
3236	2456	WerFault.exe	89
2764	2456	WerFault.exe	89

C:\Users\Admin\AppData\Local\Temp\1774407b4a680a3422eefb201a5d48c7.exe
"C:\Users\Admin\AppData\Local\Temp\1774407b4a680a3422eefb201a5d48c7.exe"
1⤵
PID:2456
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2456 -s 532
  2⤵
  - Program crash
  PID:3236
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2456 -s 620
  2⤵
  - Program crash
  PID:2764

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 2456 -ip 2456
1⤵
PID:2004

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 532 -p 2456 -ip 2456
1⤵
PID:368

memory/2456-0-0x0000000000400000-0x0000000000CF4000-memory.dmp

Filesize
9.0MB

Download
memory/2456-2-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

Filesize
368KB

Download
memory/2456-1-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

Filesize
368KB

Download
memory/2456-3-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

Filesize
368KB

Download
memory/2456-4-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

Filesize
368KB

Download
memory/2456-5-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

Filesize
368KB

Download
memory/2456-7-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

Filesize
368KB

Download
memory/2456-6-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

Filesize
368KB

Download
memory/2456-8-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

Filesize
368KB

Download
memory/2456-9-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

Filesize
368KB

Download
memory/2456-10-0x0000000000400000-0x0000000000CF4000-memory.dmp

Filesize
9.0MB

Download
memory/2456-11-0x0000000000400000-0x0000000000CF4000-memory.dmp

Filesize
9.0MB

Download
memory/2456-12-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

Filesize
368KB

Download