6461a9175988063c952749c1854129dd453eca66bb33930a379d0e7ee1fe3ea7

Analysis

max time kernel
148s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
16-05-2024 15:50

Target

2580-31-0x0000000000400000-0x00000000004A2000-memory.exe
Size

648KB
MD5

d92755cc5def0f084810e5a540624aac
SHA1

c49786d2b10e67e0c3b0e2561f701a3dabd5b147
SHA256

6461a9175988063c952749c1854129dd453eca66bb33930a379d0e7ee1fe3ea7
SHA512

85497128fa5facf9e7723ecba8e0828f0834b2143fb7e0feb795adb57843d8e94c6b1ac9cf186894f1d54a44e2ff8c469e76c35d8a7d488d81c0145e9086af96
SSDEEP

1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqNIzmd:nSHIG6mQwGmfOQd8YhY0/EsUG

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

552 5088 WerFault.exe 2580-31-0x0000000000400000-0x00000000004A2000-memory.exe

pid	pid_target	process	target process
552	5088	WerFault.exe	2580-31-0x0000000000400000-0x00000000004A2000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2580-31-0x0000000000400000-0x00000000004A2000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2580-31-0x0000000000400000-0x00000000004A2000-memory.exe"
1⤵
PID:5088

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5088 -s 216
2⤵
- Program crash
PID:552

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5088 -ip 5088
1⤵
PID:3952