0b8be60696ad902f26c3cf723394a0ee604813f09c90f6caa665b707e8e05066

Analysis

max time kernel
92s
max time network
119s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
03-03-2024 11:41

Target

4104-400-0x0000000000400000-0x000000000046C000-memory.exe
Size

432KB
MD5

9a479a314debf4ed68533748de59106c
SHA1

b69179e855b0832abbf985d58dc4e0136f80ca7a
SHA256

0b8be60696ad902f26c3cf723394a0ee604813f09c90f6caa665b707e8e05066
SHA512

1880395b968b916025d040880579e957782c9e472e8e11ea6145c7e683aa48837d8e59eba8e402404b09659badbf55c5437236d080c7193e64978666a9e846f1
SSDEEP

6144:cuQRHexo0nwlQvG4IyynVKzVKJ5/eRFHVmGiU/9o0wVEhKh+Ea:cuQRHexo0n24zVK32RRVmGiWwVbhP

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

812 224 WerFault.exe 4104-400-0x0000000000400000-0x000000000046C000-memory.exe

pid	pid_target	process	target process
812	224	WerFault.exe	4104-400-0x0000000000400000-0x000000000046C000-memory.exe

C:\Users\Admin\AppData\Local\Temp\4104-400-0x0000000000400000-0x000000000046C000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\4104-400-0x0000000000400000-0x000000000046C000-memory.exe"
1⤵
PID:224

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 224 -s 216
2⤵
- Program crash
PID:812

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 224 -ip 224
1⤵
PID:3120