d1191738c3cd169b126b73da7955d554bdcbdbcf9f879dd54ef3d44355bd2500

Analysis

max time kernel
142s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
24-02-2024 01:25

Target

d1191738c3cd169b126b73da7955d554bdcbdbcf9f879dd54ef3d44355bd2500.exe
Size

2.7MB
MD5

a595e14827801c600ab105c2a12618da
SHA1

b6a306d531a3848a28bc9cf88794853eeca1e6ba
SHA256

d1191738c3cd169b126b73da7955d554bdcbdbcf9f879dd54ef3d44355bd2500
SHA512

34aeb4d98269de945d2db94f63080062e491e7565fd87660678ae9aad2ca684400d39454e951bc75b0c4bd6d7072c65c108324823aa606f35ce44c6f4af93a62
SSDEEP

24576:V/sn9+gS6uHk1U4QR+hzy3cHoORwqetii6hsuiWvIkNQIb6PXSc:WLS6uH8U5RHiohWR6a

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

5028 3640 WerFault.exe d1191738c3cd169b126b73da7955d554bdcbdbcf9f879dd54ef3d44355bd2500.exe

pid	pid_target	process	target process
5028	3640	WerFault.exe	d1191738c3cd169b126b73da7955d554bdcbdbcf9f879dd54ef3d44355bd2500.exe

C:\Users\Admin\AppData\Local\Temp\d1191738c3cd169b126b73da7955d554bdcbdbcf9f879dd54ef3d44355bd2500.exe
"C:\Users\Admin\AppData\Local\Temp\d1191738c3cd169b126b73da7955d554bdcbdbcf9f879dd54ef3d44355bd2500.exe"
1⤵
PID:3640

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3640 -s 824
2⤵
- Program crash
PID:5028

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 364 -p 3640 -ip 3640
1⤵
PID:4192

memory/3640-0-0x0000000075220000-0x00000000759D0000-memory.dmp

Filesize
7.7MB

Download
memory/3640-1-0x0000000000C70000-0x0000000000F24000-memory.dmp

Filesize
2.7MB

Download
memory/3640-2-0x0000000075220000-0x00000000759D0000-memory.dmp

Filesize
7.7MB

Download