30bd59d717356c72008e748c988b6c52de104bb67e72a5a01db05ee30e76d88b

Analysis

max time kernel
135s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
05-05-2023 16:44

Target

292-173-0x0000000000830000-0x0000000001052000-memory.exe
Size

8.1MB
MD5

98ca1f8c9533bd316f455239305b3030
SHA1

bcd2d1f4e6999cb65c95798d6a9542fff1a57ca5
SHA256

30bd59d717356c72008e748c988b6c52de104bb67e72a5a01db05ee30e76d88b
SHA512

c6627cdd4f12e3c95e9ec1ea3c0a56c90088ab5081734c28d54313ad854e78c1fe91c51711a04c273b7bca85407c26493767a8e0e503a37d2f6cfc638ed17691
SSDEEP

98304:Giy+j3/y+SE5USLbS3k3fI2CKd0nlgHPv2qmxqt5YhtRFXSYweFsWxVTqPkuUXqm:1rj3KuC0teqHt5kvXoeFv3qcMm

Score

3^/10

Program crash 2 IoCs

Processes:

WerFault.exeWerFault.exe

pid	pid_target	process	target process
5004	4032	WerFault.exe	292-173-0x0000000000830000-0x0000000001052000-memory.exe
2280	4032	WerFault.exe	292-173-0x0000000000830000-0x0000000001052000-memory.exe

C:\Users\Admin\AppData\Local\Temp\292-173-0x0000000000830000-0x0000000001052000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\292-173-0x0000000000830000-0x0000000001052000-memory.exe"
1⤵
PID:4032

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4032 -s 220
2⤵
- Program crash
PID:5004

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4032 -s 224
2⤵
- Program crash
PID:2280

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4032 -ip 4032
1⤵
PID:4700

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 4032 -ip 4032
1⤵
PID:4336