d149497daadfa63ae54a3bc43c494471cd80a8f8fe1dfac9f4bc6ec96bacb6ce

Analysis

max time kernel
143s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
18/01/2024, 12:56

Target
656d6b4e50f57218412e8fcfa340c8c5.exe
Size 231KB
Sample240118-p6nvwacff7
SHA256 d149497daadfa63ae54a3bc43c494471cd80a8f8fe1dfac9f4bc6ec96bacb6ce
MD5 656d6b4e50f57218412e8fcfa340c8c5
SHA1 72a5c368aafbf8738e314d3788b0690f658a61ac
SHA512 0efa0fea294197bfd803a9a42af0958dc73e431a3b9d729448dd38602e75e2d43ff61f8c4b3cb663633c9ccc3ba89b8f4267771dab237e4914ead44202f61ba4
SSDEEP 3072:ack4sHDj+8L5cTMOdi5/TYSPXXUv4G4Y8oQIN3C9ISE0qJiNlUdpiw:z6r5cTfS/ZPHUWoQISzqJBpiw
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
4540	4160	WerFault.exe	85
3956	4160	WerFault.exe	85

C:\Users\Admin\AppData\Local\Temp\656d6b4e50f57218412e8fcfa340c8c5.exe
"C:\Users\Admin\AppData\Local\Temp\656d6b4e50f57218412e8fcfa340c8c5.exe"
1⤵
PID:4160
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4160 -s 228
  2⤵
  - Program crash
  PID:4540
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4160 -s 264
  2⤵
  - Program crash
  PID:3956

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4160 -ip 4160
1⤵
PID:3352

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 516 -p 4160 -ip 4160
1⤵
PID:4840

memory/4160-0-0x0000000000570000-0x0000000000623000-memory.dmp

Download

memory/4160-1-0x0000000000570000-0x0000000000623000-memory.dmp

Download