73157200729985f161a2bf9f6f7b55201f0cf21ac61721eca29d68d219301b22

Analysis

max time kernel
150s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
25-04-2024 12:44

Target

4156-4898-0x0000000000400000-0x0000000000648000-memory.exe
Size

2.3MB
MD5

87b2be0fb14e380f78cb21a87cf6ca0f
SHA1

8ff98c0ec3f59f4ded11adbea7a03aca897f006d
SHA256

73157200729985f161a2bf9f6f7b55201f0cf21ac61721eca29d68d219301b22
SHA512

fce2d3f8b00cf6b45ab9297e231563838816e198dfb7dc22ec5d6eaf1fb3c58258cecc085160a9c5bc7e12c30f8d72451539d2d0a4543cbd494a53b10d20795a
SSDEEP

3072:HDFbaT8zJWxoVOaLOE73cFnOzN3xzeLHR7uXGsocOHA8cs5qOllPKUU:5XJhVNaEgFn5l7uJW5Ll4UU

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4636 1228 WerFault.exe 4156-4898-0x0000000000400000-0x0000000000648000-memory.exe

pid	pid_target	process	target process
4636	1228	WerFault.exe	4156-4898-0x0000000000400000-0x0000000000648000-memory.exe

C:\Users\Admin\AppData\Local\Temp\4156-4898-0x0000000000400000-0x0000000000648000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\4156-4898-0x0000000000400000-0x0000000000648000-memory.exe"
1⤵
PID:1228
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1228 -s 224
  2⤵
  - Program crash
  PID:4636

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1228 -ip 1228
1⤵
PID:3832