db7ff37164c38743bfc7c74c04978e15aa435ca3f8f3bc31f5c671c8159d7812

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
01/03/2024, 08:17

Target
1872-958-0x0000000000400000-0x0000000000406000-memory.exe
Size 24KB
Sample240301-j66g2aee2z
SHA256 db7ff37164c38743bfc7c74c04978e15aa435ca3f8f3bc31f5c671c8159d7812
MD5 469e05b205af2dfc752310fda25de582
SHA1 7c628b0243b67e6b0970befbbd239ad40f5e9f0e
SHA512 887b3b5f13ba0f73dac10326388825ea9eb414ecb3b7f313e5dae09961f1d75ee43b8e5c0219fec15f0f964390232cb013b6a94143ca6019c583a9d0bbb58e97
SSDEEP 192:F8fzqMmTL+f6eeAY82mNZRZ1eLP/x1fkNvYlDko:F8GMmv+f6eX22RZ0LXTsNwNko
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4192	4932	WerFault.exe	89

C:\Users\Admin\AppData\Local\Temp\1872-958-0x0000000000400000-0x0000000000406000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1872-958-0x0000000000400000-0x0000000000406000-memory.exe"
1⤵
PID:4932
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4932 -s 216
  2⤵
  - Program crash
  PID:4192

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 4932 -ip 4932
1⤵
PID:3740