b3cfb8fc5d35e78652c232f2e3d596d4ac7a02f05435b38b0539be316d74a3b5

Analysis

max time kernel
149s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
06-03-2024 14:32

Target

1980-1-0x00000000001E0000-0x00000000001F9000-memory.exe
Size

100KB
MD5

9c1cab642c596771ccb1a94631cf67b4
SHA1

4c089a45e239bcce3df6727d342ebb8ad1840238
SHA256

b3cfb8fc5d35e78652c232f2e3d596d4ac7a02f05435b38b0539be316d74a3b5
SHA512

5b7a9a25d658c086fb407cd8f65851db7dafd881cff60b8e8df74aaf1aee77ca5bce09e7928f0c647ecd50641d05b6afcbe6118956e712d5b2310f8fb1cd3696
SSDEEP

1536:ZRe88iq2vZOX3Eszsbt4txy3pWRUj/8IzsZp1mLhcsm9Q0C:eilvQX3EsgpowpWOb6pkLc

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3128 3676 WerFault.exe 1980-1-0x00000000001E0000-0x00000000001F9000-memory.exe

pid	pid_target	process	target process
3128	3676	WerFault.exe	1980-1-0x00000000001E0000-0x00000000001F9000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1980-1-0x00000000001E0000-0x00000000001F9000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1980-1-0x00000000001E0000-0x00000000001F9000-memory.exe"
1⤵
PID:3676

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3676 -s 216
2⤵
- Program crash
PID:3128

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3676 -ip 3676
1⤵
PID:936