9fcfdd95318e435a67dea8b96db585460c045a50156a8c4e88f4babf777c6f9b

Analysis

max time kernel
91s
max time network
115s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
04-03-2024 09:20

Target

308-3062-0x0000000000250000-0x0000000000280000-memory.exe
Size

192KB
MD5

51f3831b44e00312edfbc57e3d1f5658
SHA1

54c31c1f6d93b765af4b0f79b9a10b931b3de746
SHA256

9fcfdd95318e435a67dea8b96db585460c045a50156a8c4e88f4babf777c6f9b
SHA512

8e7d9c6756bec218a9ba9a3336034421a0ba829e17d5b9c8f9915f128b0c12779b4b1ecbac7b745d61158f0b0a194d3711257ca9f87e353e745db52b81187260
SSDEEP

3072:Obo2i9G9tCQUqVY+FRV1Qw88GjEoy8e8hb:Obo2ik9E+F9Qw88GjEoy

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3152 4820 WerFault.exe 308-3062-0x0000000000250000-0x0000000000280000-memory.exe

pid	pid_target	process	target process
3152	4820	WerFault.exe	308-3062-0x0000000000250000-0x0000000000280000-memory.exe

C:\Users\Admin\AppData\Local\Temp\308-3062-0x0000000000250000-0x0000000000280000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\308-3062-0x0000000000250000-0x0000000000280000-memory.exe"
1⤵
PID:4820

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4820 -s 224
2⤵
- Program crash
PID:3152

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4820 -ip 4820
1⤵
PID:2496