2278f5c657b036e07e47e821dede5357c16bb720f66bcb5d8685319db960202e

Analysis

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
13-06-2024 20:28

Target

2278f5c657b036e07e47e821dede5357c16bb720f66bcb5d8685319db960202e.exe
Size

3.7MB
MD5

ed138594792289b6f68c55a398597af8
SHA1

36353ffb437db153df37ef3ff5134e3db9733056
SHA256

2278f5c657b036e07e47e821dede5357c16bb720f66bcb5d8685319db960202e
SHA512

ea305c31cd9e038c60a02b478246ce742d5e9949ae0bf91c62a45e7f5d29dabb9a2f1065376419171818bff3d8699b54063eb009fc719c2930ae368a50a57710
SSDEEP

49152:95MWiEY3dE3NR1Jot9rSzFeetLsQw2QSzKzQUshVUDEMiFnuxQobLEf:XYgNNojSzQep7w25G8UW5xFnCQff

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3384 1244 WerFault.exe 2278f5c657b036e07e47e821dede5357c16bb720f66bcb5d8685319db960202e.exe

pid	pid_target	process	target process
3384	1244	WerFault.exe	2278f5c657b036e07e47e821dede5357c16bb720f66bcb5d8685319db960202e.exe

C:\Users\Admin\AppData\Local\Temp\2278f5c657b036e07e47e821dede5357c16bb720f66bcb5d8685319db960202e.exe
"C:\Users\Admin\AppData\Local\Temp\2278f5c657b036e07e47e821dede5357c16bb720f66bcb5d8685319db960202e.exe"
1⤵
PID:1244

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1244 -s 1212
2⤵
- Program crash
PID:3384

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 1244 -ip 1244
1⤵
PID:3784

memory/1244-0-0x0000000074C7E000-0x0000000074C7F000-memory.dmp

Filesize
4KB

Download
memory/1244-1-0x0000000000B40000-0x0000000000F00000-memory.dmp

Filesize
3.8MB

Download
memory/1244-2-0x0000000005EF0000-0x0000000006494000-memory.dmp

Filesize
5.6MB

Download
memory/1244-3-0x0000000005940000-0x00000000059D2000-memory.dmp

Filesize
584KB

Download
memory/1244-4-0x0000000005E30000-0x0000000005E3A000-memory.dmp

Filesize
40KB

Download
memory/1244-5-0x0000000074C70000-0x0000000075420000-memory.dmp

Filesize
7.7MB

Download
memory/1244-6-0x0000000006650000-0x00000000067F6000-memory.dmp

Filesize
1.6MB

Download
memory/1244-7-0x0000000074C70000-0x0000000075420000-memory.dmp

Filesize
7.7MB

Download