bffa1c785fab0914dd9b8b4fbdb7faa3a34ea4e5352e0c94fc29e1d72c1bba8e

Analysis

max time kernel
94s
max time network
113s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
01-03-2024 17:46

Target

2044-59-0x00000000031D0000-0x00000000035D3000-memory.exe
Size

4.0MB
MD5

b3ea9c9cb9ff74d397b62fb89b161613
SHA1

adc069a9bffcb1c178d026bcb408bd326b7bc393
SHA256

bffa1c785fab0914dd9b8b4fbdb7faa3a34ea4e5352e0c94fc29e1d72c1bba8e
SHA512

bf4586170e2cad217942e48799ffa63a70d57a11372849d1d45c098e664f3cb80c96b948fd14c236c6f56665c5c72c5df8d655b01e92a8ab0dc1fb25502f34d7
SSDEEP

49152:56N8BICR7NWm8qpHXALjaQjiBDo+IPF5pDRXEmb0VF1BL:56NB/aa+upDRXOL

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4820 3644 WerFault.exe 2044-59-0x00000000031D0000-0x00000000035D3000-memory.exe

pid	pid_target	process	target process
4820	3644	WerFault.exe	2044-59-0x00000000031D0000-0x00000000035D3000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2044-59-0x00000000031D0000-0x00000000035D3000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2044-59-0x00000000031D0000-0x00000000035D3000-memory.exe"
1⤵
PID:3644
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3644 -s 216
  2⤵
  - Program crash
  PID:4820

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 3644 -ip 3644
1⤵
PID:4528