99c61ed65f9a476abb290c0f25f4772f891d1c35c82385c3f3360b958da130d4

Analysis

max time kernel
88s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
31-01-2024 11:10

Target

2704-67-0x00000000004E0000-0x0000000001542000-memory.exe
Size

5.4MB
MD5

bbee4d89fee4f6b23d0b37ee691e2043
SHA1

682abf5cdfeaf694cd919f263ff61aedb78740a4
SHA256

99c61ed65f9a476abb290c0f25f4772f891d1c35c82385c3f3360b958da130d4
SHA512

f5eb87aed9cfebf767e57be25f8a143229030201ec9ae755fcf09ec2b75b124fe2034855a903047f19f0b68595529110cc363c8c6a4a01c02d7e76bf70d4757a
SSDEEP

3072:KKnlBBgLak/62uZo6AT6z9QyfJlxKyJrRqcIue6+YAeq:dlTN79QKKWSYI

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2292 1188 WerFault.exe 2704-67-0x00000000004E0000-0x0000000001542000-memory.exe

pid	pid_target	process	target process
2292	1188	WerFault.exe	2704-67-0x00000000004E0000-0x0000000001542000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2704-67-0x00000000004E0000-0x0000000001542000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2704-67-0x00000000004E0000-0x0000000001542000-memory.exe"
1⤵
PID:1188

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1188 -s 216
2⤵
- Program crash
PID:2292

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1188 -ip 1188
1⤵
PID:2380