dd7c23f9274c9d88215a904d98a03cd52f48d113b54a2bab8d0b7453c5cdc809

Analysis

max time kernel
120s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
06-08-2024 03:34

Target

2552-63-0x0000000000400000-0x00000000005A1000-memory.exe
Size

1.6MB
MD5

7bd91938c1dcb20263c30823ea3a07f7
SHA1

3b122da2f573ead439048997ee34e4e39ddd48b6
SHA256

dd7c23f9274c9d88215a904d98a03cd52f48d113b54a2bab8d0b7453c5cdc809
SHA512

3088866bf26972d409528939201f8ffcadebf93e2770125d68a7a9fe51a151ca6c231f5c82222e259c05aa123ff97e6a680b5fbd8b5a88e7021b260369cc42f3
SSDEEP

49152:OIgEkgiJd2wiF+/axUQzQmIEFKD3JBXktT+Lus0u+:OxpgS2wiF+/ax1UmIEcD3jH

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4376 2800 WerFault.exe 2552-63-0x0000000000400000-0x00000000005A1000-memory.exe

pid	pid_target	process	target process
4376	2800	WerFault.exe	2552-63-0x0000000000400000-0x00000000005A1000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2552-63-0x0000000000400000-0x00000000005A1000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2552-63-0x0000000000400000-0x00000000005A1000-memory.exe"
1⤵
PID:2800

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2800 -s 80
2⤵
- Program crash
PID:4376

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2800 -ip 2800
1⤵
PID:4704