d1902b23490bc819c1ac0653b140eb4961f4ad15674676d7ae52c583d08c186c

Analysis

max time kernel
136s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
11-10-2023 04:54

Target

2792-2-0x0000000000400000-0x000000000044A000-memory.exe
Size

296KB
MD5

035318cc8710b893e2e017dd180c1393
SHA1

5a55a225fe6cdc98b17964484c6160c5e3f2f10a
SHA256

d1902b23490bc819c1ac0653b140eb4961f4ad15674676d7ae52c583d08c186c
SHA512

c9b4a295acdc771a28fadd76c0807c26c0cda376d54e753f0e98bbc0be526802fbfca9e8e959ed3f2f84801737292e149c809a11482425cd30d996b4d116cfbb
SSDEEP

3072:erPI5jSu1325RgfA4D3xM4d76cPMjbz9nEDL2kYAs5cvWChTrDP:uu1m5RGJrxMo76cPM2DL2t+vWSTH

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2260 436 WerFault.exe 2792-2-0x0000000000400000-0x000000000044A000-memory.exe

pid	pid_target	process	target process
2260	436	WerFault.exe	2792-2-0x0000000000400000-0x000000000044A000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2792-2-0x0000000000400000-0x000000000044A000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2792-2-0x0000000000400000-0x000000000044A000-memory.exe"
1⤵
PID:436

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 436 -s 216
2⤵
- Program crash
PID:2260

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 436 -ip 436
1⤵
PID:2248