8750be58787e6a700acc82438200aacbae89d50af5249126af1a5fa4cae7c052

Analysis

max time kernel
146s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
01-02-2024 08:39

Target

2792-118-0x0000000000400000-0x0000000000643000-memory.exe
Size

2.3MB
MD5

ff7f031607b0878d2ca90fe405bed912
SHA1

2d84b7efa444be23108b39fdfcff44e6f1d20004
SHA256

8750be58787e6a700acc82438200aacbae89d50af5249126af1a5fa4cae7c052
SHA512

a0a0b2fe65f31ee4bbe05da25c918525140cb29eb466a400289ca5688bb77fcda6ea1e697d1488aea41db644229ebe78c0d77921a900ee2d23fd93e40f2dfbd7
SSDEEP

6144:TsHPY7hsyvEBr3cQEKmnMGbv6j6zISI7xU2S:TszysqFnMx6zmS

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

5004 4192 WerFault.exe 2792-118-0x0000000000400000-0x0000000000643000-memory.exe

pid	pid_target	process	target process
5004	4192	WerFault.exe	2792-118-0x0000000000400000-0x0000000000643000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2792-118-0x0000000000400000-0x0000000000643000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2792-118-0x0000000000400000-0x0000000000643000-memory.exe"
1⤵
PID:4192

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4192 -s 216
2⤵
- Program crash
PID:5004

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4192 -ip 4192
1⤵
PID:216