89fcc7166dfd903f4304d00137f06461b19c98977200451ddf4adf8e58e4fc43

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
03-03-2024 12:03

Target

2680-391-0x0000000000400000-0x000000000046C000-memory.exe
Size

432KB
MD5

fffbfb7e1dfa76394b74beeb58e7820f
SHA1

a370c0acbfcb582c8ad1b8275062e290f72bdf79
SHA256

89fcc7166dfd903f4304d00137f06461b19c98977200451ddf4adf8e58e4fc43
SHA512

536eb1e86911d1e8e35eca012245c11e0873eda7c35095de690c583d2758720bcf8dcfd479f7312251aae4b47454aeec305ac15415f5b81c4dc822d0c3551e14
SSDEEP

6144:cuQRHexo0nwlQvG4IyynVKzVKJ5/eRFHVmGit/9o0wVEhKh+/a:cuQRHexo0n24zVK32RRVmGiHwVbho

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4320 5004 WerFault.exe 2680-391-0x0000000000400000-0x000000000046C000-memory.exe

pid	pid_target	process	target process
4320	5004	WerFault.exe	2680-391-0x0000000000400000-0x000000000046C000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2680-391-0x0000000000400000-0x000000000046C000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2680-391-0x0000000000400000-0x000000000046C000-memory.exe"
1⤵
PID:5004

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5004 -s 216
2⤵
- Program crash
PID:4320

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5004 -ip 5004
1⤵
PID:4992