c03b2d7a55291616e1f298f2fc3097573fe7cdc481b7426ade84e3f8b307c1ff

Analysis

max time kernel
143s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
09/10/2023, 10:08

Target

2200-3-0x0000000000400000-0x00000000005AA000-memory.exe
Size

1.7MB
MD5

0dc54cb334e0332ebb021c8589dfb6db
SHA1

7c20646f0a72fe2ee2d75c1f1d8eed59b45e583f
SHA256

c03b2d7a55291616e1f298f2fc3097573fe7cdc481b7426ade84e3f8b307c1ff
SHA512

69b7192f30ad178698c2c4746ddcbc9018c4d5688518d10dacfdf0bca1b556c5ee698d6dfa0178a106fc3aee1776980c236f628c93d555c590cfeb8be0340944
SSDEEP

3072:6DVCyFxSYACXFppI/oETMy5g59k9hzzzUdr5Gmm5:6DVCynACXFppIAE4ye54wLe

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
3064	4616	WerFault.exe	84
1236	4616	WerFault.exe	84

C:\Users\Admin\AppData\Local\Temp\2200-3-0x0000000000400000-0x00000000005AA000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2200-3-0x0000000000400000-0x00000000005AA000-memory.exe"
1⤵
PID:4616
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4616 -s 216
  2⤵
  - Program crash
  PID:3064
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4616 -s 220
  2⤵
  - Program crash
  PID:1236

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4616 -ip 4616
1⤵
PID:2304

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 512 -p 4616 -ip 4616
1⤵
PID:4208