a705e7288421bdc09aee2358a50b9c2a4fd7946d409006e44b349be3ff80fe9b

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
06-03-2024 17:30

Target

3756-2543-0x0000000000400000-0x0000000000421000-memory.exe
Size

132KB
MD5

109b243f3fdef1b0b5fe24685d9b6d16
SHA1

43f50c17b11cd8ceb9f022622c8bc33d943a6fb4
SHA256

a705e7288421bdc09aee2358a50b9c2a4fd7946d409006e44b349be3ff80fe9b
SHA512

e05ec2a6c05d2acc86f991d4fc6e09040c3e732ee150e309322abeddc9af4159cb942a4898e012c4fc4db489d327c7f5ab3b563a342b60e01c43651b37bcd498
SSDEEP

3072:aixRaX6raoCoCyz6/mqv1JR+yBtGOeheWgiy6q:laZ1tme+1wiy1

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3324 5328 WerFault.exe 3756-2543-0x0000000000400000-0x0000000000421000-memory.exe

pid	pid_target	process	target process
3324	5328	WerFault.exe	3756-2543-0x0000000000400000-0x0000000000421000-memory.exe

C:\Users\Admin\AppData\Local\Temp\3756-2543-0x0000000000400000-0x0000000000421000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\3756-2543-0x0000000000400000-0x0000000000421000-memory.exe"
1⤵
PID:5328

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5328 -s 216
2⤵
- Program crash
PID:3324

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 5328 -ip 5328
1⤵
PID:436