4f071a4cfd260a369cbf19beb23e3d6955ee95e2cedd6ec41233d824d0b5cba2

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 18:51

Target

2452-31-0x0000000000400000-0x00000000004A2000-memory.exe
Size

648KB
MD5

b8caf90f706c7d2fc02ccce308dbce5c
SHA1

4430b4e63d20704d6bd8f64be6f565eb14d97aec
SHA256

4f071a4cfd260a369cbf19beb23e3d6955ee95e2cedd6ec41233d824d0b5cba2
SHA512

849ad0dafc8f926c305f1d729bb8bc47e213decff42e0daf267d3a4f329413c3467449a1003d3824bad4f94c5733e86634b7cf7fa66d299395f6c1ace9c7fefc
SSDEEP

1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqbIzmd:nSHIG6mQwGmfOQd8YhY0/E+UG

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3184 940 WerFault.exe 2452-31-0x0000000000400000-0x00000000004A2000-memory.exe

pid	pid_target	process	target process
3184	940	WerFault.exe	2452-31-0x0000000000400000-0x00000000004A2000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2452-31-0x0000000000400000-0x00000000004A2000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2452-31-0x0000000000400000-0x00000000004A2000-memory.exe"
1⤵
PID:940

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 940 -s 216
2⤵
- Program crash
PID:3184

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 940 -ip 940
1⤵
PID:2712