81f9b5da29148f3fc0bf9d1f2c66f2149017540f7faccc0e5c249c2ce3a685c4

Analysis

max time kernel
142s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
26-01-2024 19:30

Target

2588-4-0x0000000000400000-0x0000000000425000-memory.exe
Size

148KB
MD5

bf36e2340309b57566e287bee2a37155
SHA1

83d3a06d1f8202793a639346f7d45bb88f012b85
SHA256

81f9b5da29148f3fc0bf9d1f2c66f2149017540f7faccc0e5c249c2ce3a685c4
SHA512

2d7bbe52a959e43c0a306dd3d41eeea595da35d7e5ea7b6f992459b1da76b8eb5373c7f6d76152f7622ecba59d2279f246a9b23a044010208f5df5677630bf1d
SSDEEP

3072:tuOSXpMx7ZAlHsbfUkolNGti7lfqeSxM3SpyEY3E/pxg/nPa3w:Zzx7ZApszolIo7lf/ipT/pwP/

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4412 5036 WerFault.exe 2588-4-0x0000000000400000-0x0000000000425000-memory.exe

pid	pid_target	process	target process
4412	5036	WerFault.exe	2588-4-0x0000000000400000-0x0000000000425000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2588-4-0x0000000000400000-0x0000000000425000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2588-4-0x0000000000400000-0x0000000000425000-memory.exe"
1⤵
PID:5036
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5036 -s 216
  2⤵
  - Program crash
  PID:4412

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5036 -ip 5036
1⤵
PID:2260