7b09a98397615d71b920b5b54987405f9ab6bbdb4ef0fb341d6d6bd47dfcc584

Analysis

max time kernel
143s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
27-09-2023 12:46

Target

2436-2-0x0000000000400000-0x000000000044A000-memory.exe
Size

296KB
MD5

6f50b2efe7437cc2b45dd232c0706028
SHA1

dcdec60055b4aff0a6796e62578728a3b050beaf
SHA256

7b09a98397615d71b920b5b54987405f9ab6bbdb4ef0fb341d6d6bd47dfcc584
SHA512

b219ee90327192ea84969bc54690425b3a093cd501f71e0cb05a2b066b4d5649884fd9e303258b3920d0be32b45eb4159dcc30ac02adfc7423711da67ead5663
SSDEEP

3072:erPI5jSu1M5RgfA4D3xM4d76cPMjbz9nEDL2kYAs5cpWChTrDP:uu1M5RGJrxMo76cPM2DL2t+pWSTH

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4008 8 WerFault.exe 2436-2-0x0000000000400000-0x000000000044A000-memory.exe

pid	pid_target	process	target process
4008	8	WerFault.exe	2436-2-0x0000000000400000-0x000000000044A000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2436-2-0x0000000000400000-0x000000000044A000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2436-2-0x0000000000400000-0x000000000044A000-memory.exe"
1⤵
PID:8

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 8 -s 216
2⤵
- Program crash
PID:4008

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 8 -ip 8
1⤵
PID:1416