0c835a306c7273dd86aa76ccdd89ffd952b49d6c019feafdbf04140492267f63

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
03-03-2024 07:03

Target

1904-68-0x0000000000400000-0x000000000046C000-memory.exe
Size

432KB
MD5

4661e0da42811fc5ae5e320b650e8352
SHA1

21faf9646411e185b0f25267ad5b5b94be0db5a8
SHA256

0c835a306c7273dd86aa76ccdd89ffd952b49d6c019feafdbf04140492267f63
SHA512

44223a8bf242dd0a320e8e7c8362c30cfa2ede10a5bbfaeb1481aa18f928316f5b034b698164c9da6bab0334159cef54602cfe55cb9b851ce95a926a6ef27a24
SSDEEP

6144:cuQRHexo0nwlQvG4IyynVKzVKJ5/eRFHVmGiZ/9o0wVEhKhLPa:cuQRHexo0n24zVK32RRVmGijwVbh7

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1848 4796 WerFault.exe 1904-68-0x0000000000400000-0x000000000046C000-memory.exe

pid	pid_target	process	target process
1848	4796	WerFault.exe	1904-68-0x0000000000400000-0x000000000046C000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1904-68-0x0000000000400000-0x000000000046C000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1904-68-0x0000000000400000-0x000000000046C000-memory.exe"
1⤵
PID:4796

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4796 -s 216
2⤵
- Program crash
PID:1848

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4796 -ip 4796
1⤵
PID:3040