54859c5be48f6f2e5ae894dd87dd6c9c21a345f1cb0ab327eb5c5359c441f591

Analysis

max time kernel
141s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20230824-en
resource tags

arch:x64arch:x86image:win10v2004-20230824-enlocale:en-usos:windows10-2004-x64system
submitted
26-08-2023 21:36

Target

2544-2-0x0000000000400000-0x00000000008C5000-memory.exe
Size

4.8MB
MD5

144a070986337fa6b48d7e966aca95b1
SHA1

a5c3d8454a7274a238e0faeacbdf7b250c565aeb
SHA256

54859c5be48f6f2e5ae894dd87dd6c9c21a345f1cb0ab327eb5c5359c441f591
SHA512

9dff9f092289759a13c0786cfe22646b9eef8cf063d575b1bed33cc1d54261d34e88d66855366c7b285db7751dbee913339afd3ba6c2d5f34a08f7322d6dd1f7
SSDEEP

49152:M6rEDGaDzDMux5YTVKdYWSqQmyDGrza1yCsVkSPIjZE9qLAb7/iLelie3:M6izYux5YJKC1CrPH3/iL7i

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4824 4576 WerFault.exe 2544-2-0x0000000000400000-0x00000000008C5000-memory.exe

pid	pid_target	process	target process
4824	4576	WerFault.exe	2544-2-0x0000000000400000-0x00000000008C5000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2544-2-0x0000000000400000-0x00000000008C5000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2544-2-0x0000000000400000-0x00000000008C5000-memory.exe"
1⤵
PID:4576

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4576 -s 216
2⤵
- Program crash
PID:4824

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4576 -ip 4576
1⤵
PID:1488