a2a4b934c9ad9700300aa6ca8625564b566ddde111c24b8e121c01c459e398e2

Analysis

max time kernel
93s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
28-12-2023 02:56

Target

2860-5-0x0000000000400000-0x0000000000420000-memory.exe
Size

128KB
MD5

af89a214de08956dd0b0041719fe2148
SHA1

4e780c7d48c01985a037087debcb049430049b5d
SHA256

a2a4b934c9ad9700300aa6ca8625564b566ddde111c24b8e121c01c459e398e2
SHA512

1621c1436082b1f24786eeef63d63e05deb3938e1de9ee28f441d8d1a76c9c7bc6e199afb374ed4a69ab4691701eab53308e7de45da73c9e0a4ec0a04408e8c9
SSDEEP

3072:tuOSXpMx7ZAlHsbfUkolNGti7lfqeSxM3SpyEY3E/kxg/:Zzx7ZApszolIo7lf/ipT/k

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4104 5056 WerFault.exe 2860-5-0x0000000000400000-0x0000000000420000-memory.exe

pid	pid_target	process	target process
4104	5056	WerFault.exe	2860-5-0x0000000000400000-0x0000000000420000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2860-5-0x0000000000400000-0x0000000000420000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2860-5-0x0000000000400000-0x0000000000420000-memory.exe"
1⤵
PID:5056
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5056 -s 224
  2⤵
  - Program crash
  PID:4104

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 5056 -ip 5056
1⤵
PID:2052