59892e92d254d44ef270fe8cb023a6903aa37c05606040d89f2e2792fe8a673a

Analysis

max time kernel
137s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
31-01-2024 11:12

Target

3048-68-0x00000000004E0000-0x0000000001542000-memory.exe
Size

16.4MB
MD5

42d570839b04330ad4c54738e7614bcb
SHA1

dbb33fe7391849aae1d525a23b0df80c9715aa42
SHA256

59892e92d254d44ef270fe8cb023a6903aa37c05606040d89f2e2792fe8a673a
SHA512

3f63a2a177f1f68d47cee0921203222a0d1293ac210b9c78848c3fb4c3057118bb150ee3c9081425515cc75a40ff3d7378a618cedd3ccfa4ec904f7b43ad3716
SSDEEP

3072:KKnlBBgLak/62uZo6AT6z9QyfJlxKyJrRqcIue6+Ybq:dlTN79QKKWSY2

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4736 4148 WerFault.exe 3048-68-0x00000000004E0000-0x0000000001542000-memory.exe

pid	pid_target	process	target process
4736	4148	WerFault.exe	3048-68-0x00000000004E0000-0x0000000001542000-memory.exe

C:\Users\Admin\AppData\Local\Temp\3048-68-0x00000000004E0000-0x0000000001542000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\3048-68-0x00000000004E0000-0x0000000001542000-memory.exe"
1⤵
PID:4148

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4148 -s 216
2⤵
- Program crash
PID:4736

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4148 -ip 4148
1⤵
PID:2464