4a49b4c6d3a9c981e824c3dc24f4882fb004a3cbd4643adf662391b4b3bf4a88

Analysis

max time kernel
136s
max time network
100s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 09:13

Target

2868-31-0x0000000000400000-0x00000000004A2000-memory.exe
Size

648KB
MD5

1d51dc650003278cd2f280dfc821c63b
SHA1

f982f62294f478623c21a20b07b4ffeec1e1b3a7
SHA256

4a49b4c6d3a9c981e824c3dc24f4882fb004a3cbd4643adf662391b4b3bf4a88
SHA512

47139f1c51481248495278b1080241327ca643916903c07ccb03ea6c7ff4480ca8988ccd8c733f9d1ba3b0847fbf9cbdf3197d24a149fd5d2b6c438e6b03e2ad
SSDEEP

1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/Eq+Izmd:nSHIG6mQwGmfOQd8YhY0/EfUG

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1804 1708 WerFault.exe 2868-31-0x0000000000400000-0x00000000004A2000-memory.exe

pid	pid_target	process	target process
1804	1708	WerFault.exe	2868-31-0x0000000000400000-0x00000000004A2000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2868-31-0x0000000000400000-0x00000000004A2000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2868-31-0x0000000000400000-0x00000000004A2000-memory.exe"
1⤵
PID:1708

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1708 -s 216
2⤵
- Program crash
PID:1804

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1708 -ip 1708
1⤵
PID:1652