f6d3740b9f54fa33e9ef573c8d6551454801a8d6b8b7db1722a76fa038f6dbfa

Analysis

max time kernel
1355s
max time network
1178s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
01/06/2024, 21:23

Target

updater.vmp.exe
Size

14KB
MD5

dfd8722af9c8ea4119f528b54721df09
SHA1

092db11cb8ec8d23be08a31cfceaf09a5bb12eac
SHA256

f6d3740b9f54fa33e9ef573c8d6551454801a8d6b8b7db1722a76fa038f6dbfa
SHA512

c20635e4c937436dcdd2042ef9de5f9c44bcd5a2ef298d9c4247d2799d7ce08a4870ffb2622a5b20f8c2eb708cc212ddcdb11c3b9bd4431a1749e2d25adbee67
SSDEEP

192:5X1C8JkA/awQ6Ie4SD8pCzYwbeGsdG/OC2Ici8ODeOaxEFmBeJZiXP9ucDyPKq0:5X1CbEX4waChbp0riHDeOUbBGM1q

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3560	944	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\updater.vmp.exe
"C:\Users\Admin\AppData\Local\Temp\updater.vmp.exe"
1⤵
PID:944
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 944 -s 872
  2⤵
  - Program crash
  PID:3560

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 944 -ip 944
1⤵
PID:1480

memory/944-0-0x000000007514E000-0x000000007514F000-memory.dmp

Filesize
4KB

Download
memory/944-1-0x0000000000670000-0x000000000067A000-memory.dmp

Filesize
40KB

Download
memory/944-2-0x0000000005790000-0x00000000057AA000-memory.dmp

Filesize
104KB

Download
memory/944-3-0x0000000075140000-0x00000000758F0000-memory.dmp

Filesize
7.7MB

Download
memory/944-4-0x0000000075140000-0x00000000758F0000-memory.dmp

Filesize
7.7MB

Download