f253ae260088a6cdd3168de2dc49f7cc5d6078944db4294be0e556a73e80f737

Analysis

max time kernel
143s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
12-07-2023 15:33

Target

2948-93-0x0000000000400000-0x000000000040F000-memory.exe
Size

60KB
MD5

311aa7f397c7f544c328b1b94eda1481
SHA1

7e81a3a991a4d9eb0f2491c1214ac33f4c882f00
SHA256

f253ae260088a6cdd3168de2dc49f7cc5d6078944db4294be0e556a73e80f737
SHA512

3324b45c2df3ba67b85cb69d984475243bd48df08f5a291400d54d2862c38ad5b82e204d142e890a8317aa5172a44b2058827fad8243b4606d8448faca8641b3
SSDEEP

768:TVcCo1dt4cybqx7P9vm9Rg6+E7apmW8msk:T2t4cybq56O84

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

336 4344 WerFault.exe 2948-93-0x0000000000400000-0x000000000040F000-memory.exe

pid	pid_target	process	target process
336	4344	WerFault.exe	2948-93-0x0000000000400000-0x000000000040F000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2948-93-0x0000000000400000-0x000000000040F000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2948-93-0x0000000000400000-0x000000000040F000-memory.exe"
1⤵
PID:4344
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4344 -s 216
  2⤵
  - Program crash
  PID:336

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4344 -ip 4344
1⤵
PID:3748