d087123862a1a3e23468f86db271171c4902947e3c82b374b2362a9a1e00345b

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
01-03-2024 08:45

Target

2704-68-0x00000000004E0000-0x0000000001542000-memory.exe
Size

16.4MB
MD5

ee9a97e125102c7ade396ab591fb1e9d
SHA1

699cd6a43809ebb8fad41e15b72bb5a79068d318
SHA256

d087123862a1a3e23468f86db271171c4902947e3c82b374b2362a9a1e00345b
SHA512

041c49db4a1190fd36937e77ee4aa52764acef6df2e692d1b77d9541ef08460b3e6fac17bf9685da4abdb967adcab90d01ccf8c7280f5ef9de58617c787efea3
SSDEEP

3072:KKnlBBgLak/62uZo6AT6z9QyfJlxKyJrRqcIue6+YAkq:dlTN79QKKWSYC

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

212 1660 WerFault.exe 2704-68-0x00000000004E0000-0x0000000001542000-memory.exe

pid	pid_target	process	target process
212	1660	WerFault.exe	2704-68-0x00000000004E0000-0x0000000001542000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2704-68-0x00000000004E0000-0x0000000001542000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2704-68-0x00000000004E0000-0x0000000001542000-memory.exe"
1⤵
PID:1660

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1660 -s 216
2⤵
- Program crash
PID:212

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1660 -ip 1660
1⤵
PID:4260