9c6679cf48240afa4e75051042c10479f0e0dabb2ca00403ce3e0e5da36bec02

Analysis

max time kernel
93s
max time network
112s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
22-02-2024 12:34

Target

1428-1-0x0000000000310000-0x0000000000328000-memory.exe
Size

96KB
MD5

358665791ab6029cae9af9febba95685
SHA1

db9acafee39e12aa51b4147dfc2a750c29c17eb6
SHA256

9c6679cf48240afa4e75051042c10479f0e0dabb2ca00403ce3e0e5da36bec02
SHA512

548d93332c2f07323eb6ebd05c75817c3b24f8167c06fe6d332079b405af8cbf700c6eb530a655c618a2244bfd2486548e1ef18cf5137e90e8701e87dbe5b7db
SSDEEP

1536:xnNnlUZo2RwxFqd5AxgWP415DTtSix8d1CcoyLNJyX7DwN:NJlUCk8Fy5tvvtTxOdRCDe

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2180 3608 WerFault.exe 1428-1-0x0000000000310000-0x0000000000328000-memory.exe

pid	pid_target	process	target process
2180	3608	WerFault.exe	1428-1-0x0000000000310000-0x0000000000328000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1428-1-0x0000000000310000-0x0000000000328000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1428-1-0x0000000000310000-0x0000000000328000-memory.exe"
1⤵
PID:3608

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3608 -s 192
2⤵
- Program crash
PID:2180

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3608 -ip 3608
1⤵
PID:3832