1ad96a0eb0c0d8b8005efc045ba5686fa30c3ba0b9a6123ca25eac97df79c99d

Analysis

max time kernel
132s
max time network
101s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 19:12

Target

1ad96a0eb0c0d8b8005efc045ba5686fa30c3ba0b9a6123ca25eac97df79c99d.exe
Size

14KB
MD5

a59cb7bf3c3942f9b8a032295bc92c81
SHA1

68d4b3910ea06d29cfc25c1e455883cd74dcbc8d
SHA256

1ad96a0eb0c0d8b8005efc045ba5686fa30c3ba0b9a6123ca25eac97df79c99d
SHA512

5aee0bd8f3cd731de1b9c866b2ebc9872c12eadd8bb23b5c7c25231874380db600c1dd881f42137f343050be3eb04c2e0cc4504f257a10a1fe7b91049639ca06
SSDEEP

384:nR2qMtLqdQ5QUzI6wgAFao4EUQr3uinDE045Hbenenenen:RRMc65xkCUUQZDAFYYYY

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3552 4784 WerFault.exe 1ad96a0eb0c0d8b8005efc045ba5686fa30c3ba0b9a6123ca25eac97df79c99d.exe

pid	pid_target	process	target process
3552	4784	WerFault.exe	1ad96a0eb0c0d8b8005efc045ba5686fa30c3ba0b9a6123ca25eac97df79c99d.exe

C:\Users\Admin\AppData\Local\Temp\1ad96a0eb0c0d8b8005efc045ba5686fa30c3ba0b9a6123ca25eac97df79c99d.exe
"C:\Users\Admin\AppData\Local\Temp\1ad96a0eb0c0d8b8005efc045ba5686fa30c3ba0b9a6123ca25eac97df79c99d.exe"
1⤵
PID:4784
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4784 -s 212
  2⤵
  - Program crash
  PID:3552

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 4784 -ip 4784
1⤵
PID:3024

memory/4784-0-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download