a9366c1d8aa913f90906c31d2573cc6458e91912a9617bce0df90df8b7c2f813

Analysis

max time kernel
151s
max time network
162s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
16-10-2023 02:00

Target

2024-3-0x0000000000400000-0x0000000002287000-memory.exe
Size

30.5MB
MD5

14d06a844ae536e9ba6b8653349ba6c5
SHA1

7931c57b345fddc1b295924eeb7269b11b1a5225
SHA256

a9366c1d8aa913f90906c31d2573cc6458e91912a9617bce0df90df8b7c2f813
SHA512

bb5c65479d756a9a6e2afc6ea551918f4079056536c8f6eae64d13ffb1d8ee302eb98e8a51c2466c1965cd52eb24d78424b08457ee1698db1c8cea062fc6af6e
SSDEEP

6144:Ou1RqPr7UdTRN0W24TYYV27nbLfgBWHvM:XOPruRmqYk28BWH

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4124 3552 WerFault.exe 2024-3-0x0000000000400000-0x0000000002287000-memory.exe

pid	pid_target	process	target process
4124	3552	WerFault.exe	2024-3-0x0000000000400000-0x0000000002287000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2024-3-0x0000000000400000-0x0000000002287000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2024-3-0x0000000000400000-0x0000000002287000-memory.exe"
1⤵
PID:3552

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3552 -s 216
2⤵
- Program crash
PID:4124

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3552 -ip 3552
1⤵
PID:4928