e98830947bffaf5a8456320794c589e6e59e2797871526c23ff63d0a6685d900

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
11-03-2024 12:45

Target

c09ec616bdd3b454e607dee957243027.exe
Size

224KB
MD5

c09ec616bdd3b454e607dee957243027
SHA1

edbddf690c2eef6b8155bb2c1e4fee911f82b82d
SHA256

e98830947bffaf5a8456320794c589e6e59e2797871526c23ff63d0a6685d900
SHA512

f9d8b8dc36f91e674db95bd4f511eab8b2238251e767ed89843a75c1cc52acb876c076860148c75f4a347d6c31b3e851d0a88007ae16778fcea05aa98a652f9a
SSDEEP

3072:PZH+Nn351N+RlNkHK3w4KEJ7oc6TFbijsxKxjaR9VBi98exyNTWibSyeeXI5Xr:RHInbs173wfksKxOR5i/T04eXIZ

Score

3^/10

Program crash 2 IoCs

Processes:

WerFault.exeWerFault.exe

pid pid_target process target process

3684 2720 WerFault.exe c09ec616bdd3b454e607dee957243027.exe
3436 2720 WerFault.exe c09ec616bdd3b454e607dee957243027.exe

pid	pid_target	process	target process
3684	2720	WerFault.exe	c09ec616bdd3b454e607dee957243027.exe
3436	2720	WerFault.exe	c09ec616bdd3b454e607dee957243027.exe

C:\Users\Admin\AppData\Local\Temp\c09ec616bdd3b454e607dee957243027.exe
"C:\Users\Admin\AppData\Local\Temp\c09ec616bdd3b454e607dee957243027.exe"
1⤵
PID:2720

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2720 -s 640
2⤵
- Program crash
PID:3684

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2720 -s 676
2⤵
- Program crash
PID:3436

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 2720 -ip 2720
1⤵
PID:884

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 528 -p 2720 -ip 2720
1⤵
PID:2708

memory/2720-2-0x00000000006F0000-0x0000000000702000-memory.dmp

Filesize
72KB

Download
memory/2720-3-0x0000000000400000-0x0000000000427000-memory.dmp

Filesize
156KB

Download
memory/2720-7-0x0000000000400000-0x0000000000427000-memory.dmp

Filesize
156KB

Download