80b6759fa9500d449ee1e56046272b25e53a5fc8fcb5a6376348607799b809e4

Analysis

max time kernel
133s
max time network
102s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 23:41

Target

80b6759fa9500d449ee1e56046272b25e53a5fc8fcb5a6376348607799b809e4.exe
Size

14KB
MD5

668efcd327920fb9242043b01636ab58
SHA1

b8814410a0fd5e2b3047f42f7bd5316a87256896
SHA256

80b6759fa9500d449ee1e56046272b25e53a5fc8fcb5a6376348607799b809e4
SHA512

8be8c16a1d13b366ed6c5bbd13c23cc7ffffa977e40b6ec31400237e5d846b9ad3149f6f65594a8379d633dca68a7d580fb94fe500bf0a806fe00443a014fbd2
SSDEEP

384:LOOOBraIa/dohhhhhhhhhhhhhhTK0XDE045HPAsAsAsAs:LOOOBrmFohhhhhhhhhhhhhh5A

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1152 1952 WerFault.exe 80b6759fa9500d449ee1e56046272b25e53a5fc8fcb5a6376348607799b809e4.exe

pid	pid_target	process	target process
1152	1952	WerFault.exe	80b6759fa9500d449ee1e56046272b25e53a5fc8fcb5a6376348607799b809e4.exe

C:\Users\Admin\AppData\Local\Temp\80b6759fa9500d449ee1e56046272b25e53a5fc8fcb5a6376348607799b809e4.exe
"C:\Users\Admin\AppData\Local\Temp\80b6759fa9500d449ee1e56046272b25e53a5fc8fcb5a6376348607799b809e4.exe"
1⤵
PID:1952

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1952 -s 216
2⤵
- Program crash
PID:1152

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1952 -ip 1952
1⤵
PID:3184

memory/1952-0-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download