795e50213de71b8d16b5778fe8c28e36f24441665524339ea8e3516292260a40

Analysis

max time kernel
138s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 01:29

Target

795e50213de71b8d16b5778fe8c28e36f24441665524339ea8e3516292260a40.exe
Size

14KB
MD5

b3d084bd95f244a6edb733c59646fd29
SHA1

fc8638a7c5d558813252973baf818d837fdf068e
SHA256

795e50213de71b8d16b5778fe8c28e36f24441665524339ea8e3516292260a40
SHA512

d8a4b26bb0721d8d9e19f70c0a7ce8e41fb25b56ac6830a331d5f2e1a1204310a2aa3f8690c6c2f73edeb02c44c5975498082c074a873f6c6deccfdba3646edf
SSDEEP

384:T7EeWFMlU587T+v7IBZFwbKmqg9dDE045H:X1Uk/FwmezA

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3124 1196 WerFault.exe 795e50213de71b8d16b5778fe8c28e36f24441665524339ea8e3516292260a40.exe

pid	pid_target	process	target process
3124	1196	WerFault.exe	795e50213de71b8d16b5778fe8c28e36f24441665524339ea8e3516292260a40.exe

C:\Users\Admin\AppData\Local\Temp\795e50213de71b8d16b5778fe8c28e36f24441665524339ea8e3516292260a40.exe
"C:\Users\Admin\AppData\Local\Temp\795e50213de71b8d16b5778fe8c28e36f24441665524339ea8e3516292260a40.exe"
1⤵
PID:1196

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1196 -s 212
2⤵
- Program crash
PID:3124

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1196 -ip 1196
1⤵
PID:1272

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4332,i,15721081447618313297,6839074028983272033,262144 --variations-seed-version --mojo-platform-channel-handle=3976 /prefetch:8
1⤵
PID:1808

memory/1196-0-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download