217f1534ce8c4b3cfc6e00dfb03c3ab0eb79883bc2a9da60cf270a6792049aaf

Analysis

max time kernel
133s
max time network
104s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
16-05-2024 15:33

Target

1092-66-0x0000000000400000-0x00000000004A2000-memory.exe
Size

648KB
MD5

864d5aa45d7a4f48b4cffd773b944266
SHA1

d783883580d245d40b54940c714a2560478e0ef6
SHA256

217f1534ce8c4b3cfc6e00dfb03c3ab0eb79883bc2a9da60cf270a6792049aaf
SHA512

ec6c7f5cde08794ca755ba0a2954365b99146570ceaeba3c7c3a9a0df287795327c230e827598259f764da9b1f98576322e26f276df21cd0b088f02de639d71a
SSDEEP

1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqNIzmd:nSHIG6mQwGmfOQd8YhY0/EQUG

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4772 2884 WerFault.exe 1092-66-0x0000000000400000-0x00000000004A2000-memory.exe

pid	pid_target	process	target process
4772	2884	WerFault.exe	1092-66-0x0000000000400000-0x00000000004A2000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1092-66-0x0000000000400000-0x00000000004A2000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1092-66-0x0000000000400000-0x00000000004A2000-memory.exe"
1⤵
PID:2884

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2884 -s 192
2⤵
- Program crash
PID:4772

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2884 -ip 2884
1⤵
PID:2472