78887a0e71d3a4fe25e120814a2f0b8cce405f7b423207d7adcab33ec34f0005

Analysis

max time kernel
90s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
14/03/2024, 03:32

Target

c794d4f8a7482358667abb1487e84d3e.exe
Size

920KB
MD5

c794d4f8a7482358667abb1487e84d3e
SHA1

e415c1fa9f4a486ab92d2cad90b76b5028bbedbe
SHA256

78887a0e71d3a4fe25e120814a2f0b8cce405f7b423207d7adcab33ec34f0005
SHA512

5b7230e2c25424f993f0224c7953190eba7e1d9553e6b0c07470939f1c24c0c8e0aa0ce97701f263a36cca18bec0221a94618d36baf11a354e9ac90c63d3a749
SSDEEP

12288:9bNqYk/l4tdhMkQH/yOPb+kryEf/AjNUQKTEu3kekleZrIZVBfphw:1QYbd7OPbxrbsYpEeZ0LBfpO

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4852	2516	WerFault.exe	83

C:\Users\Admin\AppData\Local\Temp\c794d4f8a7482358667abb1487e84d3e.exe
"C:\Users\Admin\AppData\Local\Temp\c794d4f8a7482358667abb1487e84d3e.exe"
1⤵
PID:2516
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2516 -s 224
  2⤵
  - Program crash
  PID:4852

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2516 -ip 2516
1⤵
PID:4240

memory/2516-0-0x0000000000400000-0x00000000004E7000-memory.dmp

Filesize
924KB

Download
memory/2516-1-0x0000000000400000-0x00000000004E7000-memory.dmp

Filesize
924KB

Download