f31beac2faf9eb670029592d32ed288305c81eade38c1a6c4f54e57ae89143d1

Analysis

max time kernel
135s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
29-01-2024 11:31

Target

2828-71-0x00000000004E0000-0x0000000001542000-memory.exe
Size

16.4MB
MD5

ef1664bffd3ec327cefd97bd75b8629d
SHA1

863bdc2a5e9e4d08757be4d55939c8a33775caf6
SHA256

f31beac2faf9eb670029592d32ed288305c81eade38c1a6c4f54e57ae89143d1
SHA512

94d49b8bfd6f4aae21c74520737c9f0aacfe28c9d77af5d27233088ab033c85c43ddc3088f56dffb1ddbf430191560ad2b22121f6e3fbdd67531b95f82c033a7
SSDEEP

3072:KKnlBBgLak/62uZo6AT6z9QyfJlxKyJrRqcIue6+YLq:dlTN79QKKWSYG

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1600 3856 WerFault.exe 2828-71-0x00000000004E0000-0x0000000001542000-memory.exe

pid	pid_target	process	target process
1600	3856	WerFault.exe	2828-71-0x00000000004E0000-0x0000000001542000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2828-71-0x00000000004E0000-0x0000000001542000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2828-71-0x00000000004E0000-0x0000000001542000-memory.exe"
1⤵
PID:3856

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3856 -s 216
2⤵
- Program crash
PID:1600

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 3856 -ip 3856
1⤵
PID:4560