5e733a4eb4803fe1225c98a9e5a143ff9bb55d41e13831b7297dd1ea83009a70

Analysis

max time kernel
144s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
01-03-2024 08:42

Target

2660-31-0x00000000004A0000-0x0000000001502000-memory.exe
Size

16.4MB
MD5

79331fb1e4247988f84af3ed0222caf8
SHA1

d0688e82e3f3c47712923d448fc459b5228c2f39
SHA256

5e733a4eb4803fe1225c98a9e5a143ff9bb55d41e13831b7297dd1ea83009a70
SHA512

9cd9aff57eeee7f663bf78c68f6e0fd6c5950ad00fa5ff5d5b715da90b01770764ad92fb12b3abda5b89d2c1005709d61600f891f7b97a48bc2ad6159f00f33c
SSDEEP

3072:KNMJvEraycgC0K86lsSXJNh6y1ZSQsuWayMXKq:rz15sC6eWM1

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2992 3132 WerFault.exe 2660-31-0x00000000004A0000-0x0000000001502000-memory.exe

pid	pid_target	process	target process
2992	3132	WerFault.exe	2660-31-0x00000000004A0000-0x0000000001502000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2660-31-0x00000000004A0000-0x0000000001502000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2660-31-0x00000000004A0000-0x0000000001502000-memory.exe"
1⤵
PID:3132

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3132 -s 192
2⤵
- Program crash
PID:2992

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 3132 -ip 3132
1⤵
PID:1292

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4140 --field-trial-handle=2692,i,8678872182442199182,12502579059484928042,262144 --variations-seed-version /prefetch:8
1⤵
PID:1444