961432a0835bb2ab9c3b30e4aaead84eaeb84795e8af81c3ef0b004c81c97a7b

Analysis

max time kernel
150s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
15-03-2024 12:40

Target

14da837bf1a2a4ac419fc317503a942a.exe
Size

422KB
MD5

14da837bf1a2a4ac419fc317503a942a
SHA1

587540bbe0d5d4551812c7fc97a38c8bf3b6c73e
SHA256

961432a0835bb2ab9c3b30e4aaead84eaeb84795e8af81c3ef0b004c81c97a7b
SHA512

f7c3e984f6bd49163670172d792bf0f5409f341d640bc0f147e88b402b72213cadc684941893ba534d2ad7196932f2faae3eeb40e7b9f0f6492da7bbe5444568
SSDEEP

6144:0X8UsUWIMr0Cbtqiwi3rJeB7u3PPwK1uliRMW2yAL1ZAuwn9:0X8Uf9HYfeo1ula2yAHwn

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2100 4160 WerFault.exe 14da837bf1a2a4ac419fc317503a942a.exe

pid	pid_target	process	target process
2100	4160	WerFault.exe	14da837bf1a2a4ac419fc317503a942a.exe

C:\Users\Admin\AppData\Local\Temp\14da837bf1a2a4ac419fc317503a942a.exe
"C:\Users\Admin\AppData\Local\Temp\14da837bf1a2a4ac419fc317503a942a.exe"
1⤵
PID:4160

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4160 -s 276
2⤵
- Program crash
PID:2100

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4160 -ip 4160
1⤵
PID:932

memory/4160-1-0x00000000007F0000-0x00000000008F0000-memory.dmp

Filesize
1024KB

Download
memory/4160-2-0x0000000000770000-0x00000000007B3000-memory.dmp

Filesize
268KB

Download
memory/4160-3-0x0000000000400000-0x00000000004A9000-memory.dmp

Filesize
676KB

Download