8a4959529174fdd5faaa7d2c9c6e1429ea88d722eb79e53239e048b151ba93a8

Analysis

max time kernel
134s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
27-08-2024 16:35

Target

2508-81-0x0000000000400000-0x0000000000596000-memory.exe
Size

1.6MB
MD5

97a9c097b75ccf39740cb012ad1209ba
SHA1

1ed2e9d2027cf994719ffb6dfad7da4ebadb744b
SHA256

8a4959529174fdd5faaa7d2c9c6e1429ea88d722eb79e53239e048b151ba93a8
SHA512

ba3316059fbca5b05437b92540c804166182ee7a0b9c5ef9b08a5d9f83f96a3b4f0d7c92198b629c30b6a8c8ab753bbf0589291e3f4d4e770a849a9e65c32479
SSDEEP

49152:1TbDJ4gnpFzjE0Z3Vhs1QLWLWG6dTIRs0u+:1TCgpFzjE0Z3rs1QLWCG

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1040 3836 WerFault.exe 2508-81-0x0000000000400000-0x0000000000596000-memory.exe

pid	pid_target	process	target process
1040	3836	WerFault.exe	2508-81-0x0000000000400000-0x0000000000596000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2508-81-0x0000000000400000-0x0000000000596000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2508-81-0x0000000000400000-0x0000000000596000-memory.exe"
1⤵
PID:3836
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3836 -s 80
  2⤵
  - Program crash
  PID:1040

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3836 -ip 3836
1⤵
PID:1248