c7851fbc13eee867c939b47b5b618e467c748c1e2ce200450cb7dde8da88001f

Analysis

max time kernel
141s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
10-10-2023 18:22

Target

2600-19-0x0000000000400000-0x000000000228F000-memory.exe
Size

30.6MB
MD5

fcfdd5335ff299856bc1470b997d391f
SHA1

d0749c03790f11f6a8dcbc180b33a03c260f03e0
SHA256

c7851fbc13eee867c939b47b5b618e467c748c1e2ce200450cb7dde8da88001f
SHA512

edc56cc0b7adc72506d1a2ddf7fa55daeef2fe57a88a6123ae8ab29950b70f77121420576d0c4d0fd39596395cdc1a735911d1ba312bcb3cf3f02409ece95224
SSDEEP

3072:WrPI5jSu10ZLaHZ5VYnurTt/nZAsaA6eRESzHxHH3zt8l7Mjd1s0ot:mu10ZLU7VYnuF/ZdaAnEqHxn3R82s0o

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

448 2172 WerFault.exe 2600-19-0x0000000000400000-0x000000000228F000-memory.exe

pid	pid_target	process	target process
448	2172	WerFault.exe	2600-19-0x0000000000400000-0x000000000228F000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2600-19-0x0000000000400000-0x000000000228F000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2600-19-0x0000000000400000-0x000000000228F000-memory.exe"
1⤵
PID:2172

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2172 -s 224
2⤵
- Program crash
PID:448

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 2172 -ip 2172
1⤵
PID:3676