089851b535ff2639acfa0468706814f3575956c5b8afd064adbe52cbf5bd87b8

Analysis

max time kernel
93s
max time network
113s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
17-04-2024 00:11

Target

2524-20-0x0000000000400000-0x00000000004A2000-memory.exe
Size

648KB
MD5

e19dcd15dc1ace182ad6b1a652d2fd21
SHA1

b104a2d482fc51b2b2581d39734d359405770b46
SHA256

089851b535ff2639acfa0468706814f3575956c5b8afd064adbe52cbf5bd87b8
SHA512

4f1b8c52fb66545f45f417175d7fb979c83df6d7400224011a20efd9dd2d1cc55aace67d4d14a902cb6d8668e4ce8a6067bae354f926eb7d7800d2b51a43788b
SSDEEP

1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2168 1468 WerFault.exe 2524-20-0x0000000000400000-0x00000000004A2000-memory.exe

pid	pid_target	process	target process
2168	1468	WerFault.exe	2524-20-0x0000000000400000-0x00000000004A2000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2524-20-0x0000000000400000-0x00000000004A2000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2524-20-0x0000000000400000-0x00000000004A2000-memory.exe"
1⤵
PID:1468
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1468 -s 216
  2⤵
  - Program crash
  PID:2168

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1468 -ip 1468
1⤵
PID:4928