24f2bafb788eab2ace8621eacd69ead2162b5308ab24576ae86c45239279ea3b

Analysis

max time kernel
90s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
24-01-2023 08:26

Target

1516-69-0x0000000000400000-0x0000000000433000-memory.exe
Size

204KB
MD5

424ad5fe27281ab62b6724a638cfbcc7
SHA1

0bcace635f4f873998dfa10e34de12485f9b1f64
SHA256

24f2bafb788eab2ace8621eacd69ead2162b5308ab24576ae86c45239279ea3b
SHA512

40113d1a63b618d82b3472cce3117c554e5aa9c1f29c8649b5f63d00e046982f252ccdcbcf231ec74fe672a9a500f32ba4e90e017509a878b862917772cd32f0
SSDEEP

3072:S3bwUUCZjY/UURTbaiceGUlzFr0qOnZEcsx8VLJDYMSMqqD:S3kUjJY/fRT+iceGUlzFruZdJDzxqqD

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4304 3944 WerFault.exe 1516-69-0x0000000000400000-0x0000000000433000-memory.exe

pid	pid_target	process	target process
4304	3944	WerFault.exe	1516-69-0x0000000000400000-0x0000000000433000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1516-69-0x0000000000400000-0x0000000000433000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1516-69-0x0000000000400000-0x0000000000433000-memory.exe"
1⤵
PID:3944

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3944 -s 216
2⤵
- Program crash
PID:4304

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3944 -ip 3944
1⤵
PID:4504