e49ec886e495c1af1ec8f3c41c5125829aebc36dd93504188811091404e3655c

Analysis

max time kernel
92s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
07-02-2024 01:13

Target

2684-32-0x00000000004A0000-0x0000000001502000-memory.exe
Size

16.4MB
MD5

2227a6c967994e6dcdbcd570e45f1794
SHA1

8a9ce886b29662607e19c4775a5904ea7dcc8349
SHA256

e49ec886e495c1af1ec8f3c41c5125829aebc36dd93504188811091404e3655c
SHA512

15298b1e6c111bbe54a9d417ef0db32b6e71001be95e7956355c10eb0a2ea8b9af2326cc2a9259e6e072ce499d0b0144426f598d668bff93864b60a1e85e859b
SSDEEP

3072:KNMJvEraycgC0K86lsSXJNh6y1ZSQsuWayMXrq:rz15sC6eWM2

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

5116 860 WerFault.exe 2684-32-0x00000000004A0000-0x0000000001502000-memory.exe

pid	pid_target	process	target process
5116	860	WerFault.exe	2684-32-0x00000000004A0000-0x0000000001502000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2684-32-0x00000000004A0000-0x0000000001502000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2684-32-0x00000000004A0000-0x0000000001502000-memory.exe"
1⤵
PID:860
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 860 -s 228
  2⤵
  - Program crash
  PID:5116

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 376 -p 860 -ip 860
1⤵
PID:2736