12c9a803f8b7461260e2edc3c0ffa2542636353a9e00e7af97257ba046bdb692

Analysis

max time kernel
150s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
03-03-2024 11:56

Target

4656-492-0x0000000000400000-0x000000000046C000-memory.exe
Size

432KB
MD5

ded44641106371edd775d5f8fc78f269
SHA1

07e9260c597e00a2f20c65de9b0d5ff295d6f57a
SHA256

12c9a803f8b7461260e2edc3c0ffa2542636353a9e00e7af97257ba046bdb692
SHA512

8816547d0850bb222dc94133bb9dc4e6ab25f4028f65a07f58be4f6b5866cf9c871a3f3daf11acf951334634be5b6cac444d3c55f94355b3e15196ebb5448150
SSDEEP

6144:cuQRHexo0nwlQvG4IyynVKzVKJ5/eRFHVmGiL/9o0wVEhKh+Ra:cuQRHexo0n24zVK32RRVmGiNwVbhW

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2488 4152 WerFault.exe 4656-492-0x0000000000400000-0x000000000046C000-memory.exe

pid	pid_target	process	target process
2488	4152	WerFault.exe	4656-492-0x0000000000400000-0x000000000046C000-memory.exe

C:\Users\Admin\AppData\Local\Temp\4656-492-0x0000000000400000-0x000000000046C000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\4656-492-0x0000000000400000-0x000000000046C000-memory.exe"
1⤵
PID:4152

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4152 -s 216
2⤵
- Program crash
PID:2488

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 4152 -ip 4152
1⤵
PID:4532