f2b3b9f54c206233d20b5d4f9713b9f5cd51204dfe8dee426c37a4aa0b117d4f

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
01-03-2024 00:20

Target

2812-478-0x0000000000400000-0x0000000000643000-memory.exe
Size

2.3MB
MD5

07f005b352e0da7481a9ed80524b2131
SHA1

c2e2856998a0a5bd1b63be376c06da450b35539b
SHA256

f2b3b9f54c206233d20b5d4f9713b9f5cd51204dfe8dee426c37a4aa0b117d4f
SHA512

89a61f0fed00a05ed81f0061a368dca899c426ce59909f52f2d9d80d7a671dd1e650c6d2641d074786a8e15dcc1217209cf726ea230247a3fcd9e9e06f9394d0
SSDEEP

6144:TsHPY7hsyvEBr3cQEKmnMGbK6j6zISI7uU2S:TszysqFnM06zVS

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2908 4584 WerFault.exe 2812-478-0x0000000000400000-0x0000000000643000-memory.exe

pid	pid_target	process	target process
2908	4584	WerFault.exe	2812-478-0x0000000000400000-0x0000000000643000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2812-478-0x0000000000400000-0x0000000000643000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2812-478-0x0000000000400000-0x0000000000643000-memory.exe"
1⤵
PID:4584

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4584 -s 216
2⤵
- Program crash
PID:2908

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4584 -ip 4584
1⤵
PID:3612