c7d0e64fdd8a817c1181a80c81a80d1a62943efaa6f951a000544d1bdc27dfff

Analysis

max time kernel
147s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
08-03-2024 04:06

Target

932-2616-0x0000000000400000-0x0000000000420000-memory.exe
Size

128KB
MD5

2b62f0e2bee63062ad089f49ee09de55
SHA1

62bdf8b3c9b8fec1d8706699d8b6f2e078ae35e3
SHA256

c7d0e64fdd8a817c1181a80c81a80d1a62943efaa6f951a000544d1bdc27dfff
SHA512

5d90b6e14503cc6014e44a5590356efc402ea1a3794eb43ba8d98878a3fb964ccda690395740a7a60bdd160c83b5aeff555b8d399624883110a9c53abb15fbb4
SSDEEP

3072:KExRaX6raoCoCyz6/mqv1JR+yBtGOeheWgiemq:faZ1tme+1wieZ

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4680 4812 WerFault.exe 932-2616-0x0000000000400000-0x0000000000420000-memory.exe

pid	pid_target	process	target process
4680	4812	WerFault.exe	932-2616-0x0000000000400000-0x0000000000420000-memory.exe

C:\Users\Admin\AppData\Local\Temp\932-2616-0x0000000000400000-0x0000000000420000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\932-2616-0x0000000000400000-0x0000000000420000-memory.exe"
1⤵
PID:4812

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4812 -s 216
2⤵
- Program crash
PID:4680

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4812 -ip 4812
1⤵
PID:208