b10b0d3a8c8f5a33567c8e0cd012d659b59064d440ecfab5eee0f26f70a84d68

Analysis

max time kernel
146s
max time network
162s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
07-03-2024 01:02

Target

1872-70-0x0000000000400000-0x0000000001462000-memory.exe
Size

14.1MB
MD5

c64a48a2c0ad8762187567e733f54a30
SHA1

926d9e7d57d84788f96eb54fab46851437ad3c99
SHA256

b10b0d3a8c8f5a33567c8e0cd012d659b59064d440ecfab5eee0f26f70a84d68
SHA512

2218290fdfd7f558e78faa3ced59265de1b5c040f5ed69c24fcf9297ecaa7cc4f7d567776d6af08868fce878c857fd96a698b99c03c59225c0cff83f3ce91353
SSDEEP

3072:KExRaQ6raoCoCyz6/mqv1JR+yBtGOeaeWgisq:faO1tme++wiz

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3136 216 WerFault.exe 1872-70-0x0000000000400000-0x0000000001462000-memory.exe

pid	pid_target	process	target process
3136	216	WerFault.exe	1872-70-0x0000000000400000-0x0000000001462000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1872-70-0x0000000000400000-0x0000000001462000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1872-70-0x0000000000400000-0x0000000001462000-memory.exe"
1⤵
PID:216

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 216 -s 216
2⤵
- Program crash
PID:3136

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 216 -ip 216
1⤵
PID:4708