03f7302160c84701b2beb7319a433c1917bcf3d00a2ccd3877fd70c15bfb36e9

Analysis

max time kernel
147s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
24-02-2024 20:20

Target

a2aa44e3c69d02db2795dbe662e885e9.exe
Size

3.5MB
MD5

a2aa44e3c69d02db2795dbe662e885e9
SHA1

f09493a1416d1f2870ae0b8d7bcb7a77ad0c075a
SHA256

03f7302160c84701b2beb7319a433c1917bcf3d00a2ccd3877fd70c15bfb36e9
SHA512

9c043fc06a28b3ab1c5693e94554272dc205d5bdc9fa23c7f6f0cc670b7942462f4824b5b62d62de61f93b6a97673bdc36d0b629e5a55bc789d55c05a679908f
SSDEEP

98304:B73wRd3LDOMS7SGkb7JlMaTIV1smifm8mNarUb81iuf5aapOEW:hi32HRmNlMakVmmom6UY0uxaaIEW

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
3584	648	WerFault.exe	86
2836	648	WerFault.exe	86

C:\Users\Admin\AppData\Local\Temp\a2aa44e3c69d02db2795dbe662e885e9.exe
"C:\Users\Admin\AppData\Local\Temp\a2aa44e3c69d02db2795dbe662e885e9.exe"
1⤵
PID:648
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 648 -s 544
  2⤵
  - Program crash
  PID:3584
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 648 -s 544
  2⤵
  - Program crash
  PID:2836

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 368 -p 648 -ip 648
1⤵
PID:232

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 512 -p 648 -ip 648
1⤵
PID:5072

memory/648-0-0x0000000000400000-0x00000000013FA000-memory.dmp

Filesize
16.0MB

Download
memory/648-1-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

Filesize
368KB

Download
memory/648-2-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

Filesize
368KB

Download
memory/648-3-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

Filesize
368KB

Download
memory/648-4-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

Filesize
368KB

Download
memory/648-5-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

Filesize
368KB

Download
memory/648-6-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

Filesize
368KB

Download
memory/648-7-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

Filesize
368KB

Download
memory/648-8-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

Filesize
368KB

Download
memory/648-9-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

Filesize
368KB

Download
memory/648-10-0x0000000000400000-0x00000000013FA000-memory.dmp

Filesize
16.0MB

Download
memory/648-11-0x0000000000400000-0x00000000013FA000-memory.dmp

Filesize
16.0MB

Download
memory/648-12-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

Filesize
368KB

Download