6461a9175988063c952749c1854129dd453eca66bb33930a379d0e7ee1fe3ea7

Analysis

max time kernel
148s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
16/05/2024, 15:50

Target
2580-31-0x0000000000400000-0x00000000004A2000-memory.exe
Size 648KB
Sample240516-taaetscc42
SHA256 6461a9175988063c952749c1854129dd453eca66bb33930a379d0e7ee1fe3ea7
MD5 d92755cc5def0f084810e5a540624aac
SHA1 c49786d2b10e67e0c3b0e2561f701a3dabd5b147
SHA512 85497128fa5facf9e7723ecba8e0828f0834b2143fb7e0feb795adb57843d8e94c6b1ac9cf186894f1d54a44e2ff8c469e76c35d8a7d488d81c0145e9086af96
SSDEEP 1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqNIzmd:nSHIG6mQwGmfOQd8YhY0/EsUG
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
552	5088	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\2580-31-0x0000000000400000-0x00000000004A2000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2580-31-0x0000000000400000-0x00000000004A2000-memory.exe"
1⤵
PID:5088
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5088 -s 216
  2⤵
  - Program crash
  PID:552

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5088 -ip 5088
1⤵
PID:3952