f03a47e4ec2d04757a09becc9a891b4e4a64aa3c520d6b01b37e8b164e208ee9

Analysis

max time kernel
150s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
11-10-2023 04:51

Target

2452-2-0x0000000000400000-0x000000000044A000-memory.exe
Size

296KB
MD5

0c321b2e4514d4bf91bb5d0f6ad0034e
SHA1

e73858eb6a6efe690d8d98abf249cd73ccc55c76
SHA256

f03a47e4ec2d04757a09becc9a891b4e4a64aa3c520d6b01b37e8b164e208ee9
SHA512

ce2c7393dc95d18c3259744bc5aad5001edb179669e04bd2c9454e18c86bd9ed057cd04c1f9a06396b74a36eb2d1d4fb2076668e8858d957284d2b8f6acb6c91
SSDEEP

3072:KrPI5jSu1DtEPrYLubTtT+MXpZSylO6d1v01wtialvaTAIns5chZTrbp:iu1DtEPr7ftznPO6dVQWIBjTJ

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4416 4944 WerFault.exe 2452-2-0x0000000000400000-0x000000000044A000-memory.exe

pid	pid_target	process	target process
4416	4944	WerFault.exe	2452-2-0x0000000000400000-0x000000000044A000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2452-2-0x0000000000400000-0x000000000044A000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2452-2-0x0000000000400000-0x000000000044A000-memory.exe"
1⤵
PID:4944

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4944 -s 216
2⤵
- Program crash
PID:4416

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4944 -ip 4944
1⤵
PID:492