2443b12c9ee32855178e1251bcdf60001fa26cb52e03beca17b44a03c6f01c0f

Analysis

max time kernel
147s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
19-04-2024 19:50

Target

4820-0-0x0000000000500000-0x0000000000549000-memory.exe
Size

292KB
MD5

27cc54c99f245cf568743d41669add58
SHA1

3946b2dda919d9a11c9ff499296167bbd4773601
SHA256

2443b12c9ee32855178e1251bcdf60001fa26cb52e03beca17b44a03c6f01c0f
SHA512

428c69612ffd62fd9539dabb6e9550401da1e3f0bf42ad9f8c7bd419fdc6426fbefba0dc9a5336b13c4eb82678f7302888256b04ce880efdbb60245e4281ebbd
SSDEEP

6144:9A4n3InIR5hcpjGPZ1ItuzHf64YEKP+iEIvCoCe:64n3InIj+tUFoCe

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4532 2324 WerFault.exe 4820-0-0x0000000000500000-0x0000000000549000-memory.exe

pid	pid_target	process	target process
4532	2324	WerFault.exe	4820-0-0x0000000000500000-0x0000000000549000-memory.exe

C:\Users\Admin\AppData\Local\Temp\4820-0-0x0000000000500000-0x0000000000549000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\4820-0-0x0000000000500000-0x0000000000549000-memory.exe"
1⤵
PID:2324
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2324 -s 212
  2⤵
  - Program crash
  PID:4532

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 2324 -ip 2324
1⤵
PID:716