5ee3347fbd5ee37ef346aff0bbc5814c53fe1fb843fa60df5b391df3f3bb4552

Analysis

max time kernel
96s
max time network
161s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
31-01-2024 11:10

Target

2660-120-0x00000000004E0000-0x0000000001542000-memory.exe
Size

16.4MB
MD5

613665095e42f568869b50a3b2999f2b
SHA1

eb51831e74ef2ce42f6b74632e3ee227920fe66e
SHA256

5ee3347fbd5ee37ef346aff0bbc5814c53fe1fb843fa60df5b391df3f3bb4552
SHA512

973f29ebbb0036e229abde30a6c753da16e3d889ee32b53cb7139472d847497efce0ac9f98e9f25e4348894d1f5e2b23fd412363dce99a7083c2fbaada58de18
SSDEEP

3072:KKnlBBgLak/62uZo6AT6z9QyfJlxKyJrRqcIue6+Yyq:dlTN79QKKWSYt

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4728 2836 WerFault.exe 2660-120-0x00000000004E0000-0x0000000001542000-memory.exe

pid	pid_target	process	target process
4728	2836	WerFault.exe	2660-120-0x00000000004E0000-0x0000000001542000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2660-120-0x00000000004E0000-0x0000000001542000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2660-120-0x00000000004E0000-0x0000000001542000-memory.exe"
1⤵
PID:2836

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2836 -s 216
2⤵
- Program crash
PID:4728

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 2836 -ip 2836
1⤵
PID:4756