b23cb04afe59fee16c95ef5d24a67cb493d4ea88b62f6996e54493548acad6c2

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
01-01-2024 15:27

Target

3643464a225aa2ad5c9c9657d4fd05b943fdd9c04ca36b9d3610a04332909d19.exe
Size

187KB
MD5

5239186df089b14d776b1438bc495878
SHA1

40a0689b89576ce865f3b5eddb18acb679219704
SHA256

3643464a225aa2ad5c9c9657d4fd05b943fdd9c04ca36b9d3610a04332909d19
SHA512

eb235607d70e70cc5eea1102582b599ec483aee5b8fdb8dd6524952230746bfefa5316bf31c78eee43e9d61bd6736cc973f8c45cbd175ae93bc960f10cb2a3da
SSDEEP

1536:giTQB4GEf+C6P7Pr/yIcavDI47BHs7E5FGcAfKYelzgvf5nBbN+JRiHZ/niduyZx:g3B4/WC6P77yIlJdR20UBY5duyKp5c

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4316 4724 WerFault.exe 3643464a225aa2ad5c9c9657d4fd05b943fdd9c04ca36b9d3610a04332909d19.exe

pid	pid_target	process	target process
4316	4724	WerFault.exe	3643464a225aa2ad5c9c9657d4fd05b943fdd9c04ca36b9d3610a04332909d19.exe

C:\Users\Admin\AppData\Local\Temp\3643464a225aa2ad5c9c9657d4fd05b943fdd9c04ca36b9d3610a04332909d19.exe
"C:\Users\Admin\AppData\Local\Temp\3643464a225aa2ad5c9c9657d4fd05b943fdd9c04ca36b9d3610a04332909d19.exe"
1⤵
PID:4724

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4724 -s 1048
2⤵
- Program crash
PID:4316

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4724 -ip 4724
1⤵
PID:3360

memory/4724-1-0x00000000744A0000-0x0000000074C50000-memory.dmp

Filesize
7.7MB

Download
memory/4724-0-0x0000000000750000-0x0000000000784000-memory.dmp

Filesize
208KB

Download
memory/4724-2-0x00000000056D0000-0x0000000005C74000-memory.dmp

Filesize
5.6MB

Download
memory/4724-3-0x00000000051C0000-0x0000000005252000-memory.dmp

Filesize
584KB

Download
memory/4724-4-0x0000000005410000-0x0000000005420000-memory.dmp

Filesize
64KB

Download
memory/4724-5-0x0000000005190000-0x000000000519A000-memory.dmp

Filesize
40KB

Download
memory/4724-6-0x00000000744A0000-0x0000000074C50000-memory.dmp

Filesize
7.7MB

Download