1268adb1454784beec49ee0f81168f5794828d1d4ba45d460df7a8979a32b877

Analysis

max time kernel
138s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
26-04-2024 02:58

Target

1920-21-0x0000000000400000-0x00000000004A2000-memory.exe
Size

648KB
MD5

288b6c6250fe98f09c0ed10b43de93eb
SHA1

8539b8fe44f6309b0073cc6c62c6a4a054486a37
SHA256

1268adb1454784beec49ee0f81168f5794828d1d4ba45d460df7a8979a32b877
SHA512

7bf4a12fb3235dd53d1b5218fc791821afbb9923f392556937809b9fcf12872ba665814e233054bc7a13d3749f1a48368e790a0c3a54a35001dd4dc4a60b974c
SSDEEP

1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4756 4900 WerFault.exe 1920-21-0x0000000000400000-0x00000000004A2000-memory.exe

pid	pid_target	process	target process
4756	4900	WerFault.exe	1920-21-0x0000000000400000-0x00000000004A2000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1920-21-0x0000000000400000-0x00000000004A2000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1920-21-0x0000000000400000-0x00000000004A2000-memory.exe"
1⤵
PID:4900

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4900 -s 216
2⤵
- Program crash
PID:4756

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4900 -ip 4900
1⤵
PID:1104