57809cbc4f5ab49a341fa7817e45de3a6f7c481d469fc45bd39cc1c0568a7ddd

Analysis

max time kernel
92s
max time network
97s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
09/07/2024, 07:31

Target
2512-3-0x0000000000400000-0x0000000000415000-memory.exe
Size 84KB
Sample240709-jcf1aavfre
SHA256 57809cbc4f5ab49a341fa7817e45de3a6f7c481d469fc45bd39cc1c0568a7ddd
MD5 4b38e32b37a3bf0f2a62755648aacb27
SHA1 72d2e541bc57ca43919d0db33122e2b6385c1b1a
SHA512 578109ea7c46e191dc0bdbc2318f0b630be1e31c78968b79180893f2f10bb93bab6e69850b5b6a2ea855417432827dd0d95115770b06869d6aac6fa0c632074b
SSDEEP 1536:6kes21VCy1nTxSYg3CXTjFWL9xdpIIFUc:6DVCyFxSYACXFUpII6
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
4732	5028	WerFault.exe	81
896	5028	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\2512-3-0x0000000000400000-0x0000000000415000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2512-3-0x0000000000400000-0x0000000000415000-memory.exe"
1⤵
PID:5028
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5028 -s 216
  2⤵
  - Program crash
  PID:4732
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5028 -s 240
  2⤵
  - Program crash
  PID:896

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 5028 -ip 5028
1⤵
PID:4340

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 488 -p 5028 -ip 5028
1⤵
PID:1020