e5866a2f096af71333e77b368d806327f97db410a3b9435ea4b507268b114764

Analysis

max time kernel
147s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
04/04/2024, 08:25

Target
2984-17-0x0000000000400000-0x00000000004A2000-memory.exe
Size 648KB
Sample240404-kbk4aaag94
SHA256 e5866a2f096af71333e77b368d806327f97db410a3b9435ea4b507268b114764
MD5 2f51199ea55eef669bec01ffc7df9c86
SHA1 40bb184c9d1b7b2b1e6f36b5f31ae29d948d7ea1
SHA512 5986900b6f17a4013070da02a5be6c6ece2cbb4d0efe3d4b0fbc8081c06803addd3c0819de03c348659d46f37aa704dda7dabaf65a37edb10eebc63c756aacc7
SSDEEP 1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
888	3308	WerFault.exe	83

C:\Users\Admin\AppData\Local\Temp\2984-17-0x0000000000400000-0x00000000004A2000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2984-17-0x0000000000400000-0x00000000004A2000-memory.exe"
1⤵
PID:3308
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3308 -s 216
  2⤵
  - Program crash
  PID:888

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 3308 -ip 3308
1⤵
PID:4232