0b45242fa21ad4e5ee8821e73cdbef0b4419a123240f5e469ebc6f776b70ee7c

Analysis

max time kernel
150s
max time network
191s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
11-10-2023 00:52

Target

2744-22-0x0000000000400000-0x000000000228B000-memory.exe
Size

30.5MB
MD5

6d9ef1fa6d64fd6133fc0a162e5d46b3
SHA1

1b6e2e2af466f82d0a1b1046b2da607a0f2bcf3d
SHA256

0b45242fa21ad4e5ee8821e73cdbef0b4419a123240f5e469ebc6f776b70ee7c
SHA512

6299e2194a6e1e4177f01334ee7b39a35bfa5c0225d1f9e72741ee21bfe10ca71dc0be5145065d80e324dd283a36e610d75967f61f88293d39efe4e26949222b
SSDEEP

3072:WrPI5jSu1VZLaHZ5VYnurTtMjH4wjyIphvo3ZDivScpBaa4l76U:mu1VZLU7VYnuFTwuIphg3ZDi6cnA76

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4740 4872 WerFault.exe 2744-22-0x0000000000400000-0x000000000228B000-memory.exe

pid	pid_target	process	target process
4740	4872	WerFault.exe	2744-22-0x0000000000400000-0x000000000228B000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2744-22-0x0000000000400000-0x000000000228B000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2744-22-0x0000000000400000-0x000000000228B000-memory.exe"
1⤵
PID:4872

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4872 -s 216
2⤵
- Program crash
PID:4740

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4872 -ip 4872
1⤵
PID:1764