0f9ff9981dca95a05ed1175c668eb0b40a7a994818ac15644ae0f6aa7783ffe0

Analysis

max time kernel
67s
max time network
59s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
28-04-2024 01:05

Target

0f9ff9981dca95a05ed1175c668eb0b40a7a994818ac15644ae0f6aa7783ffe0.exe
Size

347KB
MD5

d77e47afa9745c340bc9503535afcd8e
SHA1

a2e802b8a569c984ab63ba1c6d7ef84fec43c7ec
SHA256

0f9ff9981dca95a05ed1175c668eb0b40a7a994818ac15644ae0f6aa7783ffe0
SHA512

d914d952d6dc55dfcfcfd6efdfaeed289640923c57503c1f4c3c4ddc05fffece43d3afdb1588f00e2a2cf19692c92da2aee91dc4452b97d96a4ff16d2ea422fe
SSDEEP

6144:ToBqFgnH6oK/xcYNKD8r+syjBJw45rtMLYC43J9fa7nxNHnKTf:EawahCYgD8CsKJw4/MchjCnMf

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1248 2916 WerFault.exe 0f9ff9981dca95a05ed1175c668eb0b40a7a994818ac15644ae0f6aa7783ffe0.exe

pid	pid_target	process	target process
1248	2916	WerFault.exe	0f9ff9981dca95a05ed1175c668eb0b40a7a994818ac15644ae0f6aa7783ffe0.exe

C:\Users\Admin\AppData\Local\Temp\0f9ff9981dca95a05ed1175c668eb0b40a7a994818ac15644ae0f6aa7783ffe0.exe
"C:\Users\Admin\AppData\Local\Temp\0f9ff9981dca95a05ed1175c668eb0b40a7a994818ac15644ae0f6aa7783ffe0.exe"
1⤵
PID:2916

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2916 -s 696
2⤵
- Program crash
PID:1248

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 2916 -ip 2916
1⤵
PID:5064

memory/2916-1-0x0000000002CA0000-0x0000000002DA0000-memory.dmp

Filesize
1024KB

Download
memory/2916-2-0x00000000047C0000-0x000000000482D000-memory.dmp

Filesize
436KB

Download
memory/2916-3-0x0000000000400000-0x0000000002B15000-memory.dmp

Filesize
39.1MB

Download
memory/2916-6-0x0000000002CA0000-0x0000000002DA0000-memory.dmp

Filesize
1024KB

Download
memory/2916-7-0x00000000047C0000-0x000000000482D000-memory.dmp

Filesize
436KB

Download
memory/2916-8-0x0000000000400000-0x0000000002B15000-memory.dmp

Filesize
39.1MB

Download
memory/2916-11-0x0000000000400000-0x0000000002B15000-memory.dmp

Filesize
39.1MB

Download
memory/2916-13-0x0000000000400000-0x0000000002B15000-memory.dmp

Filesize
39.1MB

Download