b85a31aae65327e922aaccceaed47102196909def808aea17295c7e725083669

Analysis

max time kernel
142s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
03-03-2024 07:36

Target

920-311-0x0000000000400000-0x000000000046C000-memory.exe
Size

432KB
MD5

4ce1bc26453a17bdbb9c1bbc6248d89f
SHA1

2add6ef7e60c2fe7159e13915d9b16d4ff2eece1
SHA256

b85a31aae65327e922aaccceaed47102196909def808aea17295c7e725083669
SHA512

e56e52eb786dadcf783bc12b870c7e5aa15b586294f8ec8dd6390aa6050999e1206982a009ef0fc93556b62b447aced9e2ff048b6330adf5aea109bc342db057
SSDEEP

6144:cuQRHexo0nwlQvG4IyynVKzVKJ5/eRFHVmGi9/9o0wVEhKhGUha:cuQRHexo0n24zVK32RRVmGiXwVbhh

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

5100 1640 WerFault.exe 920-311-0x0000000000400000-0x000000000046C000-memory.exe

pid	pid_target	process	target process
5100	1640	WerFault.exe	920-311-0x0000000000400000-0x000000000046C000-memory.exe

C:\Users\Admin\AppData\Local\Temp\920-311-0x0000000000400000-0x000000000046C000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\920-311-0x0000000000400000-0x000000000046C000-memory.exe"
1⤵
PID:1640

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1640 -s 216
2⤵
- Program crash
PID:5100

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1640 -ip 1640
1⤵
PID:3664

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=2180 --field-trial-handle=2284,i,15722001240173834669,15048020084704567542,262144 --variations-seed-version /prefetch:8
1⤵
PID:1796