245d1c5983ab9373384f9b24f737f92f4428c2f761fd494cae5399ff07e98818

Analysis

max time kernel
143s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
11-10-2023 05:00

Target

3064-2-0x0000000000400000-0x000000000044A000-memory.exe
Size

296KB
MD5

ab71c2c94dbff6152db4c5e51bc1c4d2
SHA1

a0f23b74f563d998d1dfce9893492683907250a8
SHA256

245d1c5983ab9373384f9b24f737f92f4428c2f761fd494cae5399ff07e98818
SHA512

38361485c02413dfabddd4be549cc5ed619eaeb88063a5e127139538b35a3e3437ec73e25d4b050dd3e6de91420c6fd6ca25544056b1f3e52627317c25d6fd42
SSDEEP

3072:erPI5jSu1b5RgfA4D3tACX/VIlBuPMVEOqFo67UFMQBzttxq8i7u5s5cWBSPTrbp:uu1b5RGJrtAOVAEPUEOq5UqCwyo0TJ

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1832 3592 WerFault.exe 3064-2-0x0000000000400000-0x000000000044A000-memory.exe

pid	pid_target	process	target process
1832	3592	WerFault.exe	3064-2-0x0000000000400000-0x000000000044A000-memory.exe

C:\Users\Admin\AppData\Local\Temp\3064-2-0x0000000000400000-0x000000000044A000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\3064-2-0x0000000000400000-0x000000000044A000-memory.exe"
1⤵
PID:3592
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3592 -s 228
  2⤵
  - Program crash
  PID:1832

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3592 -ip 3592
1⤵
PID:3220