59c2de875c225026789ad7a1cd5ffe9907ce6cc8c87ba03fe58ec496cfc1b74e

Analysis

max time kernel
66s
max time network
58s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
28-04-2024 04:26

Target

fcf64e9ed52eafbdc3f47abb46ba4606.exe
Size

455KB
MD5

fcf64e9ed52eafbdc3f47abb46ba4606
SHA1

5efbd9889f48565bfddcd27f0e760529a4ac201b
SHA256

59c2de875c225026789ad7a1cd5ffe9907ce6cc8c87ba03fe58ec496cfc1b74e
SHA512

2fb5e5efe6936b8dee1dfe69805f021e127fcd32f714cf9459f7bccf6c3c5fd41355bfcae8e6c871e89c90f2b3b85c9967d3234d8f0a05158ae16814a0b8c35f
SSDEEP

6144:dndKNo69iOHScmTvdTtWxM0xJe5oTBCLV9n7s3ODEx:dnsN9SJZTtWxM0T3cnI3wEx

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1680 1056 WerFault.exe fcf64e9ed52eafbdc3f47abb46ba4606.exe

pid	pid_target	process	target process
1680	1056	WerFault.exe	fcf64e9ed52eafbdc3f47abb46ba4606.exe

C:\Users\Admin\AppData\Local\Temp\fcf64e9ed52eafbdc3f47abb46ba4606.exe
"C:\Users\Admin\AppData\Local\Temp\fcf64e9ed52eafbdc3f47abb46ba4606.exe"
1⤵
PID:1056

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1056 -s 696
2⤵
- Program crash
PID:1680

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 1056 -ip 1056
1⤵
PID:2908

memory/1056-1-0x0000000001B00000-0x0000000001C00000-memory.dmp

Filesize
1024KB

Download
memory/1056-2-0x0000000003670000-0x00000000036DD000-memory.dmp

Filesize
436KB

Download
memory/1056-3-0x0000000000400000-0x0000000001A3D000-memory.dmp

Filesize
22.2MB

Download
memory/1056-5-0x0000000001B00000-0x0000000001C00000-memory.dmp

Filesize
1024KB

Download
memory/1056-6-0x0000000000400000-0x0000000001A3D000-memory.dmp

Filesize
22.2MB

Download
memory/1056-9-0x0000000000400000-0x0000000001A3D000-memory.dmp

Filesize
22.2MB

Download
memory/1056-11-0x0000000000400000-0x0000000001A3D000-memory.dmp

Filesize
22.2MB

Download