fbe0e6a14ec8395c4f6d38b3747d82a1c9a0f2957c02027f1d87aa670039f38d

Analysis

max time kernel
150s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
05-03-2024 19:16

Target

1704-55-0x0000000000400000-0x000000000043A000-memory.exe
Size

232KB
MD5

b1248a4f7a6b2a24ac616c3c59074505
SHA1

ef40db3afa63679d190573d1cdc60f6ae05de3ff
SHA256

fbe0e6a14ec8395c4f6d38b3747d82a1c9a0f2957c02027f1d87aa670039f38d
SHA512

6cd750fd58d43bcd1ac2b4d2cdbabbfdedce174692ca7d21a50357ad3b589b08e2643a7f100f194636f739df42f9f0f227c9fd1743a9cf02da5be2b1438670c5
SSDEEP

3072:KExRaX6raoCoCyz6/mqv1JR+yBtGOeaeWgiQeqKanByW/md0Cw9QwNfsGAeCox:faZ1tme++wiQR54qmdGQwpMeZ

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1812 3444 WerFault.exe 1704-55-0x0000000000400000-0x000000000043A000-memory.exe

pid	pid_target	process	target process
1812	3444	WerFault.exe	1704-55-0x0000000000400000-0x000000000043A000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1704-55-0x0000000000400000-0x000000000043A000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1704-55-0x0000000000400000-0x000000000043A000-memory.exe"
1⤵
PID:3444

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3444 -s 216
2⤵
- Program crash
PID:1812

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 3444 -ip 3444
1⤵
PID:1980