81d82170e2e3dd3b9e3015fbf285f858ace06f6a18d9e373c2dd156421fffd75

Analysis

max time kernel
93s
max time network
113s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
02-03-2024 23:13

Target

1472-1173-0x00000000012A0000-0x00000000012D2000-memory.exe
Size

200KB
MD5

917be1a61c2c0df3dedd38ea657ad09f
SHA1

01314bbb397808f22330042481b411c9ce91ecab
SHA256

81d82170e2e3dd3b9e3015fbf285f858ace06f6a18d9e373c2dd156421fffd75
SHA512

33acaf1a48bab7f79cb5a811aa3fba3b662d24e81494aa624ee4c0de7eeadd4794c22626dbe8eddf0ef2fcd344635b3c67f4bfc5b4d898678b2cfd5b17efecff
SSDEEP

3072:oxqZWpZaPkOQ3xxW3l0weBFFuh/WxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOi:WqZwxxW1Cuh

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3864 864 WerFault.exe 1472-1173-0x00000000012A0000-0x00000000012D2000-memory.exe

pid	pid_target	process	target process
3864	864	WerFault.exe	1472-1173-0x00000000012A0000-0x00000000012D2000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1472-1173-0x00000000012A0000-0x00000000012D2000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1472-1173-0x00000000012A0000-0x00000000012D2000-memory.exe"
1⤵
PID:864

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 864 -s 224
2⤵
- Program crash
PID:3864

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 864 -ip 864
1⤵
PID:4912