ddeb8ece5713aae5d633f91f7df83b5df0f9c19c58d7d31fb4b4f6e14c33312b

Analysis

max time kernel
139s
max time network
122s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
29-04-2024 17:21

Target

1356-11-0x0000000000400000-0x0000000000442000-memory.exe
Size

264KB
MD5

fb1eb8a9d943af740778f57797ba229a
SHA1

c9b5ce8722b08243b7dd8a557bddd9f6f35439ed
SHA256

ddeb8ece5713aae5d633f91f7df83b5df0f9c19c58d7d31fb4b4f6e14c33312b
SHA512

4ff10e1f9ac29355938537037e18aef4c08947c4f1d8df84cd7d369abfbd4d59c3cb8d7729d36a38b444c761fda5f7d67fe64ee9b989e48c80f382bb3d4042b3
SSDEEP

3072:YNLlFU/Xqe81YrKnyWUKfaPIh0cK5KIip95qJH:yLlFU/Xqe8WrKyWnGIh0caiz

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

64 2808 WerFault.exe 1356-11-0x0000000000400000-0x0000000000442000-memory.exe

pid	pid_target	process	target process
64	2808	WerFault.exe	1356-11-0x0000000000400000-0x0000000000442000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1356-11-0x0000000000400000-0x0000000000442000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1356-11-0x0000000000400000-0x0000000000442000-memory.exe"
1⤵
PID:2808

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2808 -s 224
2⤵
- Program crash
PID:64

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2808 -ip 2808
1⤵
PID:4548