949c6fb84b0540a3728e441aa1b4bb8fa6fe788eca80a8196a115d67ba9ca794

Analysis

max time kernel
137s
max time network
107s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
20-05-2024 11:01

Target

2352-19-0x0000000000400000-0x00000000004A2000-memory.exe
Size

648KB
MD5

1535c2329fcf976015e98f0ba2c9d585
SHA1

ef5fb3178b1eefc1b4da588aa7a9488d4759cd06
SHA256

949c6fb84b0540a3728e441aa1b4bb8fa6fe788eca80a8196a115d67ba9ca794
SHA512

26c3f79ab540cc5ee06b9083608e0d7bb366c0dfd5a58095f219348f11e8801aa4197ca504ee8cf73bf6abcfc3db183c2d06ff0b9f98acbaba384d57608f1e78
SSDEEP

1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqxIzmd:nSHIG6mQwGmfOQd8YhY0/E0UG

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2488 4836 WerFault.exe 2352-19-0x0000000000400000-0x00000000004A2000-memory.exe

pid	pid_target	process	target process
2488	4836	WerFault.exe	2352-19-0x0000000000400000-0x00000000004A2000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2352-19-0x0000000000400000-0x00000000004A2000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2352-19-0x0000000000400000-0x00000000004A2000-memory.exe"
1⤵
PID:4836

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4836 -s 216
2⤵
- Program crash
PID:2488

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4836 -ip 4836
1⤵
PID:1032