ec09b8f389d8c14d05dda38d4f5a43781fe77c7cff34d704dbbd6d71b9b26d72

Analysis

max time kernel
139s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 09:46

Target

ec09b8f389d8c14d05dda38d4f5a43781fe77c7cff34d704dbbd6d71b9b26d72.exe
Size

14KB
MD5

8f36595c3bcc2e85a712b98f367967c0
SHA1

e7af0a6e07238cc2d0dbc63bc9cafcb1071b087d
SHA256

ec09b8f389d8c14d05dda38d4f5a43781fe77c7cff34d704dbbd6d71b9b26d72
SHA512

853a2f09618687407acb786d0c239132e838f001232b0d0990d87dbb28d2a21816d6101ba251ac7f68d3133833ddbe3a1b6c5443b45e80bbc661cae221efcdd4
SSDEEP

192:PcY2GhdysHUThoJr5pdPzzzzzzzzzzzzzz9ThIe6g4qDE045HQoo7o7o7o7o:PRNdysHUFoxdMIXDE045H

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2720 4252 WerFault.exe ec09b8f389d8c14d05dda38d4f5a43781fe77c7cff34d704dbbd6d71b9b26d72.exe

pid	pid_target	process	target process
2720	4252	WerFault.exe	ec09b8f389d8c14d05dda38d4f5a43781fe77c7cff34d704dbbd6d71b9b26d72.exe

C:\Users\Admin\AppData\Local\Temp\ec09b8f389d8c14d05dda38d4f5a43781fe77c7cff34d704dbbd6d71b9b26d72.exe
"C:\Users\Admin\AppData\Local\Temp\ec09b8f389d8c14d05dda38d4f5a43781fe77c7cff34d704dbbd6d71b9b26d72.exe"
1⤵
PID:4252
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4252 -s 236
  2⤵
  - Program crash
  PID:2720

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4252 -ip 4252
1⤵
PID:4840

memory/4252-0-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download