2f5eda0d2dab1b9bfca74fc408d61aa0a1fe71ce6f499bff216e9e22b6711c18

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
23-05-2024 13:16

Target

2144-16-0x0000000000400000-0x0000000000476000-memory.exe
Size

472KB
MD5

ba897377e883818f7429e7f12572c9a9
SHA1

b3c4e5cc6614c41bd957dfcd6a19cc7e7df5477a
SHA256

2f5eda0d2dab1b9bfca74fc408d61aa0a1fe71ce6f499bff216e9e22b6711c18
SHA512

c683cdd1c0f931fd3466b9dbbdba7108b90bf6b7641409fe0e73b54fb68ea28c0d122904dbb070dc5f04a0f029cf118c1797d28e12b0090a33ba7ac91fc7c598
SSDEEP

12288:eGOzvLvzFvHJGPN5MP7r9r/+ppppppppppppppppppppppppppppp0G:mzvLvzFQk1q

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1984 4820 WerFault.exe 2144-16-0x0000000000400000-0x0000000000476000-memory.exe

pid	pid_target	process	target process
1984	4820	WerFault.exe	2144-16-0x0000000000400000-0x0000000000476000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2144-16-0x0000000000400000-0x0000000000476000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2144-16-0x0000000000400000-0x0000000000476000-memory.exe"
1⤵
PID:4820

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4820 -s 224
2⤵
- Program crash
PID:1984

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4820 -ip 4820
1⤵
PID:4904