4423693e8b8a26a3096c64522b0eb2d8b24845f1737ad98879cdc301c8f5ed01

Analysis

max time kernel
151s
max time network
164s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
28-09-2023 19:15

Target

LANC v2.exe
Size

321KB
MD5

f594847c2e806183624275d877acf069
SHA1

f5a547ec6dc47fb2e297539a6d6ec55e4c9bd87b
SHA256

5d600c4a17065f936875f00cfddf0f04b78ca49d68596025bb9512d81bcbc766
SHA512

7b768def9bd6de863f3b7361ca8339b2dda9619dc4953f39b0cf7a2add017ceed164d430ae6ff274f6125b072cd020687329e1bcb3bee8f886fb72b4f1dd5e1c
SSDEEP

6144:ar11SDM1s5hc0DQPDeyUYbG2SlL8sWyEnh1SDM1s5hc0DQPDeyUYbG2Sl:41R1eyDeDdlQnhR1eyDeDdl

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1020 208 WerFault.exe LANC v2.exe

pid	pid_target	process	target process
1020	208	WerFault.exe	LANC v2.exe

C:\Users\Admin\AppData\Local\Temp\LANC v2.exe
"C:\Users\Admin\AppData\Local\Temp\LANC v2.exe"
1⤵
PID:208

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 208 -s 932
2⤵
- Program crash
PID:1020

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 208 -ip 208
1⤵
PID:3360

memory/208-0-0x00000000009A0000-0x00000000009F6000-memory.dmp

Filesize
344KB

Download
memory/208-1-0x0000000074470000-0x0000000074C20000-memory.dmp

Filesize
7.7MB

Download
memory/208-2-0x00000000058C0000-0x0000000005E64000-memory.dmp

Filesize
5.6MB

Download
memory/208-3-0x00000000053F0000-0x0000000005482000-memory.dmp

Filesize
584KB

Download
memory/208-4-0x0000000005370000-0x0000000005385000-memory.dmp

Filesize
84KB

Download
memory/208-5-0x0000000074470000-0x0000000074C20000-memory.dmp

Filesize
7.7MB

Download