949c6fb84b0540a3728e441aa1b4bb8fa6fe788eca80a8196a115d67ba9ca794

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
20-05-2024 11:08

Target

949c6fb84b0540a3728e441aa1b4bb8fa6fe788eca80a8196a115d67ba9ca794.exe
Size

648KB
MD5

1535c2329fcf976015e98f0ba2c9d585
SHA1

ef5fb3178b1eefc1b4da588aa7a9488d4759cd06
SHA256

949c6fb84b0540a3728e441aa1b4bb8fa6fe788eca80a8196a115d67ba9ca794
SHA512

26c3f79ab540cc5ee06b9083608e0d7bb366c0dfd5a58095f219348f11e8801aa4197ca504ee8cf73bf6abcfc3db183c2d06ff0b9f98acbaba384d57608f1e78
SSDEEP

1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqxIzmd:nSHIG6mQwGmfOQd8YhY0/E0UG

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4808 1228 WerFault.exe 949c6fb84b0540a3728e441aa1b4bb8fa6fe788eca80a8196a115d67ba9ca794.exe

pid	pid_target	process	target process
4808	1228	WerFault.exe	949c6fb84b0540a3728e441aa1b4bb8fa6fe788eca80a8196a115d67ba9ca794.exe

C:\Users\Admin\AppData\Local\Temp\949c6fb84b0540a3728e441aa1b4bb8fa6fe788eca80a8196a115d67ba9ca794.exe
"C:\Users\Admin\AppData\Local\Temp\949c6fb84b0540a3728e441aa1b4bb8fa6fe788eca80a8196a115d67ba9ca794.exe"
1⤵
PID:1228

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1228 -s 192
2⤵
- Program crash
PID:4808

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1228 -ip 1228
1⤵
PID:2584