24aa4d34d2eab7e7a718f715576263d5eb0a8cde42d6320e28fe09ee44891543

Analysis

max time kernel
143s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20230831-en
resource tags

arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system
submitted
01-09-2023 20:23

Target

368-419-0x0000000000400000-0x0000000000430000-memory.exe
Size

192KB
MD5

d1e6658e8f158d5d5006f48d761045e3
SHA1

4b9973fd40f6afc2f5f7b84f26f6db510ce300f5
SHA256

24aa4d34d2eab7e7a718f715576263d5eb0a8cde42d6320e28fe09ee44891543
SHA512

a41dcfd0ea29aea26efb3d61f755684ae03a1f818412b14dec785c75f6a4813a91661d091f49cf42996f777934d2413fcea6f66c10b214d79317b3ac213db92c
SSDEEP

3072:VIsoX4oBpI0/bGdkBORITkZevXTE0MIzlbuqDcJo8e8hl:VIDpI0/bGdATE0BzkqDcO

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3736 3252 WerFault.exe 368-419-0x0000000000400000-0x0000000000430000-memory.exe

pid	pid_target	process	target process
3736	3252	WerFault.exe	368-419-0x0000000000400000-0x0000000000430000-memory.exe

C:\Users\Admin\AppData\Local\Temp\368-419-0x0000000000400000-0x0000000000430000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\368-419-0x0000000000400000-0x0000000000430000-memory.exe"
1⤵
PID:3252

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3252 -s 224
2⤵
- Program crash
PID:3736

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3252 -ip 3252
1⤵
PID:1920