12e49cc112a90fff9daff634e52f6b61ae5e64b212821d39b309e89a4bf46abb

Analysis

max time kernel
133s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
23-05-2024 01:07

Target

12e49cc112a90fff9daff634e52f6b61ae5e64b212821d39b309e89a4bf46abb.exe
Size

771KB
MD5

a2922022070dbb7a436653386ab18968
SHA1

b567533b55e0cbd76128ffbb38071ffa6af91a11
SHA256

12e49cc112a90fff9daff634e52f6b61ae5e64b212821d39b309e89a4bf46abb
SHA512

9d50129de7313aa64c0550dee0fa8d1f1548f68d684bd2b37055671384b7e964b898d20d73feb56dd796ed068f76aa4e7e2181ec5faa035d24ad31fff9ba56d3
SSDEEP

12288:tW6Yma8p5EL2cJtvn89qyOVJ3yYs31HlpsxXivzN1/n1voqpcKyzPxkR:IZmaYi2mvn8rOVJ3bKiivz7P1vJcKyQ

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4728 224 WerFault.exe 12e49cc112a90fff9daff634e52f6b61ae5e64b212821d39b309e89a4bf46abb.exe

pid	pid_target	process	target process
4728	224	WerFault.exe	12e49cc112a90fff9daff634e52f6b61ae5e64b212821d39b309e89a4bf46abb.exe

C:\Users\Admin\AppData\Local\Temp\12e49cc112a90fff9daff634e52f6b61ae5e64b212821d39b309e89a4bf46abb.exe
"C:\Users\Admin\AppData\Local\Temp\12e49cc112a90fff9daff634e52f6b61ae5e64b212821d39b309e89a4bf46abb.exe"
1⤵
PID:224

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 224 -s 1132
2⤵
- Program crash
PID:4728

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 224 -ip 224
1⤵
PID:4948

memory/224-0-0x0000000074AEE000-0x0000000074AEF000-memory.dmp

Filesize
4KB

Download
memory/224-1-0x0000000000160000-0x0000000000224000-memory.dmp

Filesize
784KB

Download
memory/224-2-0x00000000052A0000-0x0000000005844000-memory.dmp

Filesize
5.6MB

Download
memory/224-3-0x0000000004CF0000-0x0000000004D82000-memory.dmp

Filesize
584KB

Download
memory/224-4-0x0000000004C20000-0x0000000004C2A000-memory.dmp

Filesize
40KB

Download
memory/224-5-0x0000000074AE0000-0x0000000075290000-memory.dmp

Filesize
7.7MB

Download
memory/224-6-0x0000000007520000-0x00000000075E0000-memory.dmp

Filesize
768KB

Download
memory/224-7-0x0000000074AE0000-0x0000000075290000-memory.dmp

Filesize
7.7MB

Download