d8c19d81cc9cdea0808326b11a7d6bda0502accb25316495fa9a7996dc22d90d

Analysis

max time kernel
150s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
14-03-2024 01:22

Target

2988-47-0x0000000000400000-0x000000000040A000-memory.exe
Size

40KB
MD5

af5f62b63fafb03eb74c565ba1429773
SHA1

fa960412a80a17b8b02b8d3e740d709c0b1d4bce
SHA256

d8c19d81cc9cdea0808326b11a7d6bda0502accb25316495fa9a7996dc22d90d
SHA512

451b41dde76d8335b5590be38eb29c3e7f1a6893760370ba6cd3d2e734f046d303a4eff216b55d6744d356d38a1557b415f4468f906f7e1965de46479553df80
SSDEEP

192:V+8C+EKS0O9ejYTDG8bcp4Ll9unieXubWyD9JEBkGxVX7qoNFDRJ:VNVjYTDG8gpgNeXTyD3EnxgoN

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

956 3312 WerFault.exe 2988-47-0x0000000000400000-0x000000000040A000-memory.exe

pid	pid_target	process	target process
956	3312	WerFault.exe	2988-47-0x0000000000400000-0x000000000040A000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2988-47-0x0000000000400000-0x000000000040A000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2988-47-0x0000000000400000-0x000000000040A000-memory.exe"
1⤵
PID:3312

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3312 -s 224
2⤵
- Program crash
PID:956

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 3312 -ip 3312
1⤵
PID:3092