59d0faa87a026e8d815640f93ee23438bd30c635d024a121ef743ccf751c8bb3

Analysis

max time kernel
141s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
11-10-2023 07:00

Target

2672-11-0x0000000000400000-0x0000000000437000-memory.exe
Size

220KB
MD5

9d29cf3acb2263e3bd8fb54f7b33424a
SHA1

6ce7019c6ce877cc0c0037501170e246986e9f87
SHA256

59d0faa87a026e8d815640f93ee23438bd30c635d024a121ef743ccf751c8bb3
SHA512

b4078d7e3558ffec27bf5748ec478205978c1c5418c242e7aef9034ef8d2fb0a60783d8ed4bcdf614bc9802508760c83dd308dd90b5ac62c985f0b004b42ea4f
SSDEEP

3072:8mCTc970E3iKeHrSei1V/XbKjvo18FrR7+IWPvXrRX8+jFdb7IHwBgxFgbY:FTt0/HgVzKVYHTRdbsxmb

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2032 4984 WerFault.exe 2672-11-0x0000000000400000-0x0000000000437000-memory.exe

pid	pid_target	process	target process
2032	4984	WerFault.exe	2672-11-0x0000000000400000-0x0000000000437000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2672-11-0x0000000000400000-0x0000000000437000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2672-11-0x0000000000400000-0x0000000000437000-memory.exe"
1⤵
PID:4984

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4984 -s 84
2⤵
- Program crash
PID:2032

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4984 -ip 4984
1⤵
PID:4520