c62a0077a7148ff74491708bccd41dd596fc8386079dae98cc7975946f2487be

Analysis

max time kernel
133s
max time network
102s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
05/05/2024, 11:58

Target

SpaceInfo.exe
Size

18KB
MD5

9ec347d430191a37aab0b36ab8ae047d
SHA1

a18f44a6c0e1f1f8d53ff7d4b9f8328729705f48
SHA256

c62a0077a7148ff74491708bccd41dd596fc8386079dae98cc7975946f2487be
SHA512

539be93eef23a3a470bad789ad45f5c76bd969f9c29d5330a8f0c8c9e69b070ea5fafe80dcc17581b91ad471ca55d30b846152b51ec8e6bff99a990c9f68c511
SSDEEP

384:KRZorWMCvINo6uNysLaau6udj4L3LKLswgIB0ffa0:KRZorWhvgo6KltXbWUIBSF

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3372	1820	WerFault.exe	83

C:\Users\Admin\AppData\Local\Temp\SpaceInfo.exe
"C:\Users\Admin\AppData\Local\Temp\SpaceInfo.exe"
1⤵
PID:1820
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1820 -s 1012
  2⤵
  - Program crash
  PID:3372

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1820 -ip 1820
1⤵
PID:1120

memory/1820-0-0x000000007523E000-0x000000007523F000-memory.dmp

Filesize
4KB

Download
memory/1820-1-0x0000000000650000-0x000000000065C000-memory.dmp

Filesize
48KB

Download
memory/1820-2-0x00000000055F0000-0x0000000005B94000-memory.dmp

Filesize
5.6MB

Download
memory/1820-3-0x0000000005040000-0x00000000050D2000-memory.dmp

Filesize
584KB

Download
memory/1820-4-0x0000000075230000-0x00000000759E0000-memory.dmp

Filesize
7.7MB

Download
memory/1820-5-0x0000000075230000-0x00000000759E0000-memory.dmp

Filesize
7.7MB

Download