0e112eb0b3855e87bd77f405d4e022cb5b18367e806690c7050cd3e290462923

Analysis

max time kernel
147s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
15-03-2024 05:51

Target

2980-1035-0x0000000000400000-0x0000000001462000-memory.exe
Size

16.4MB
MD5

47415d258ce5a1bfa25392be7f95fde2
SHA1

aa36a9fb31a58b99116f0ef2fe558d0dee4d8d72
SHA256

0e112eb0b3855e87bd77f405d4e022cb5b18367e806690c7050cd3e290462923
SHA512

380dfbe75cd2ef0f4580983ddd513620869c40d1287b8e882af2196d771d2bacdf43ef60dd404e11f340dfd5c3de53843427625beb359cf51067fad49d3ccb15
SSDEEP

3072:KExRaQ6raoCoCyz6/mqv1JR+yBtGOeaeWgilq:faO1tme++wi8

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4456 5024 WerFault.exe 2980-1035-0x0000000000400000-0x0000000001462000-memory.exe

pid	pid_target	process	target process
4456	5024	WerFault.exe	2980-1035-0x0000000000400000-0x0000000001462000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2980-1035-0x0000000000400000-0x0000000001462000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2980-1035-0x0000000000400000-0x0000000001462000-memory.exe"
1⤵
PID:5024

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5024 -s 192
2⤵
- Program crash
PID:4456

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 5024 -ip 5024
1⤵
PID:2356