blackguard | fe4707f9d354f7208c00ef1d7ffdf3174c46ffc69d7903b8c2e574c00046933e

Analysis

max time kernel
55s
max time network
56s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
27-04-2024 01:07

Target

fe4707f9d354f7208c00ef1d7ffdf3174c46ffc69d7903b8c2e574c00046933e.exe
Size

1.3MB
MD5

ae4c118fc729e17bffd7b8778e737c16
SHA1

7cae52380984614ba9e39d7da732608273f3d3e9
SHA256

fe4707f9d354f7208c00ef1d7ffdf3174c46ffc69d7903b8c2e574c00046933e
SHA512

08937b06c973b0fd9346f27fea5ec48b05ea4367f311d0f0b29f9c6378aa8ca9fc148933db40dab5116d89f6ef297106d59be3fcebe37d20b564bac757059d9e
SSDEEP

12288:rmEuIKCCPQWcNeM/Fwx3PC9rDdI3QT9qCacBO71ET3hg2C2CE1wZN9RYVS:CnIjCPQWcN6PkX/LhEt3RYVS

Score

10^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1832	5096	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\fe4707f9d354f7208c00ef1d7ffdf3174c46ffc69d7903b8c2e574c00046933e.exe
"C:\Users\Admin\AppData\Local\Temp\fe4707f9d354f7208c00ef1d7ffdf3174c46ffc69d7903b8c2e574c00046933e.exe"
1⤵
PID:5096
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5096 -s 804
  2⤵
  - Program crash
  PID:1832

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5096 -ip 5096
1⤵
PID:4740

memory/5096-0-0x0000000000520000-0x0000000000674000-memory.dmp

Filesize
1.3MB

Download
memory/5096-1-0x0000000074740000-0x0000000074EF0000-memory.dmp

Filesize
7.7MB

Download
memory/5096-2-0x0000000074740000-0x0000000074EF0000-memory.dmp

Filesize
7.7MB

Download