f44419554da00d57830770c05b5391962670a3677e2453ed2f19d6d83a2012d2

Analysis

max time kernel
141s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
29-04-2024 21:10

Target

2664-1-0x0000000000400000-0x0000000000643000-memory.exe
Size

2.3MB
MD5

1bff837f4969fd2b4acbf2b1176d8c0d
SHA1

0d73dea5c018d3d8451e12e2a598bf3d7f4c0593
SHA256

f44419554da00d57830770c05b5391962670a3677e2453ed2f19d6d83a2012d2
SHA512

368ae078e535fda40f192deedaecad76eebd8e877a9e6f69b49d1f62db5265745eda4b57382192b9962c4e720bad1d95207328a684372b108ece20a77e3f67c9
SSDEEP

3072:y3q7IF/UM69xS9Poo9ITHLDH0zuBCznsoKGM:dEF/4TShp9ODHQKGM

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

5112 4076 WerFault.exe 2664-1-0x0000000000400000-0x0000000000643000-memory.exe

pid	pid_target	process	target process
5112	4076	WerFault.exe	2664-1-0x0000000000400000-0x0000000000643000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2664-1-0x0000000000400000-0x0000000000643000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2664-1-0x0000000000400000-0x0000000000643000-memory.exe"
1⤵
PID:4076

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4076 -s 216
2⤵
- Program crash
PID:5112

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4076 -ip 4076
1⤵
PID:5036

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4232 --field-trial-handle=2656,i,16940681401824032220,151921362336696246,262144 --variations-seed-version /prefetch:8
1⤵
PID:3556