57809cbc4f5ab49a341fa7817e45de3a6f7c481d469fc45bd39cc1c0568a7ddd

Analysis

max time kernel
92s
max time network
97s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
09-07-2024 07:31

Target

2512-3-0x0000000000400000-0x0000000000415000-memory.exe
Size

84KB
MD5

4b38e32b37a3bf0f2a62755648aacb27
SHA1

72d2e541bc57ca43919d0db33122e2b6385c1b1a
SHA256

57809cbc4f5ab49a341fa7817e45de3a6f7c481d469fc45bd39cc1c0568a7ddd
SHA512

578109ea7c46e191dc0bdbc2318f0b630be1e31c78968b79180893f2f10bb93bab6e69850b5b6a2ea855417432827dd0d95115770b06869d6aac6fa0c632074b
SSDEEP

1536:6kes21VCy1nTxSYg3CXTjFWL9xdpIIFUc:6DVCyFxSYACXFUpII6

Score

3^/10

Program crash 2 IoCs

Processes:

WerFault.exeWerFault.exe

pid	pid_target	process	target process
4732	5028	WerFault.exe	2512-3-0x0000000000400000-0x0000000000415000-memory.exe
896	5028	WerFault.exe	2512-3-0x0000000000400000-0x0000000000415000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2512-3-0x0000000000400000-0x0000000000415000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2512-3-0x0000000000400000-0x0000000000415000-memory.exe"
1⤵
PID:5028

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5028 -s 216
2⤵
- Program crash
PID:4732

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5028 -s 240
2⤵
- Program crash
PID:896

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 5028 -ip 5028
1⤵
PID:4340

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 488 -p 5028 -ip 5028
1⤵
PID:1020