e40e88307364f9dedb8ada3c5016a62996913ada78581bbbbd98ba917d71ca77

Analysis

max time kernel
139s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
20-06-2024 07:05

Target

1864-0-0x0000000001520000-0x000000000152D000-memory.exe
Size

52KB
MD5

be4d2b685f7509b02d0326fc7da794c7
SHA1

f0c6b0f45ba0727e3b12ece72e335597fd8dee18
SHA256

e40e88307364f9dedb8ada3c5016a62996913ada78581bbbbd98ba917d71ca77
SHA512

348988efa5ded54319ed614da757cd78f3617f5fcb5d5c7a1d7c486edf15d8f19a9c0042fa78feb038b3b09961098da2830cbce175bdaa30ab7ef37e60439097
SSDEEP

1536:aN/KBbXcaKbNfIkb7yh9H6WPDhJ/9FPeceuJbQO:xbXc/xfVKh9H6WPFJ/9FP0uJR

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3648 3172 WerFault.exe 1864-0-0x0000000001520000-0x000000000152D000-memory.exe

pid	pid_target	process	target process
3648	3172	WerFault.exe	1864-0-0x0000000001520000-0x000000000152D000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1864-0-0x0000000001520000-0x000000000152D000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1864-0-0x0000000001520000-0x000000000152D000-memory.exe"
1⤵
PID:3172

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3172 -s 216
2⤵
- Program crash
PID:3648

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3172 -ip 3172
1⤵
PID:4756