fc90b489a6851daea8af101a3905fc8e7d6b985b93627916c0791b00f58cdbc8

Analysis

max time kernel
147s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
03-03-2024 09:56

Target

1432-85-0x0000000000400000-0x0000000001462000-memory.exe
Size

16.4MB
MD5

a71feba9753c068c6632fed450bfe821
SHA1

c10df7a7146e89746cd00b70e8c10d78f9c518f1
SHA256

fc90b489a6851daea8af101a3905fc8e7d6b985b93627916c0791b00f58cdbc8
SHA512

a8bd20b5ac415e2c6c40721f8792b978dae4de03c11994b572c9666ba48ebb5a955f99f1d5dd0b7770dbca4fe2750a4927ce196d3e8c5d694b133c08118a30fc
SSDEEP

3072:KExRaQ6raoCoCyz6/mqv1JR+yBtGOeaeWgi4q:faO1tme++wiH

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2628 2684 WerFault.exe 1432-85-0x0000000000400000-0x0000000001462000-memory.exe

pid	pid_target	process	target process
2628	2684	WerFault.exe	1432-85-0x0000000000400000-0x0000000001462000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1432-85-0x0000000000400000-0x0000000001462000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1432-85-0x0000000000400000-0x0000000001462000-memory.exe"
1⤵
PID:2684
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2684 -s 216
  2⤵
  - Program crash
  PID:2628

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 2684 -ip 2684
1⤵
PID:216