d0dbeb70de09282e9be8dee7a08ac5b2c64d8a6d26aa38b35e606c7a96e12e03

Analysis

max time kernel
116s
max time network
101s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
08/01/2024, 04:21

Target
4a6cf461ee5cc5adf8852a6d18d502ae.exe
Size 129KB
Sample240108-eywkmscab9
SHA256 d0dbeb70de09282e9be8dee7a08ac5b2c64d8a6d26aa38b35e606c7a96e12e03
MD5 4a6cf461ee5cc5adf8852a6d18d502ae
SHA1 b3c2c99982e4ead3d89e022b518fdc8668c2ebe2
SHA512 975e3a6d12e170d1e6ee10cc7e98d1591499805be4d9238adb12e03ec94c1afeffa478b7a639fd0ad5442cc27077d568408dfe24ecc2792edd629faf4f955416
SSDEEP 3072:Ec6NFAWJ+MdHd6xpOziQFLNvXcRSWxiNF7t6+FP9j2:p6NFT+Mp4rO+iBfSSsOBt6K9j2
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3252	1128	WerFault.exe	16

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 1128 -ip 1128
1⤵
PID:1020

C:\Users\Admin\AppData\Local\Temp\4a6cf461ee5cc5adf8852a6d18d502ae.exe
"C:\Users\Admin\AppData\Local\Temp\4a6cf461ee5cc5adf8852a6d18d502ae.exe"
1⤵
PID:1128
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1128 -s 232
  2⤵
  - Program crash
  PID:3252

memory/1128-0-0x0000000000400000-0x0000000000457000-memory.dmp

Download

memory/1128-1-0x0000000000400000-0x0000000000457000-memory.dmp

Download