bbc3521fc489abf0b62621adcc8d34b86d6a06c8668719ca6394f703432cbe01

Analysis

max time kernel
130s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
11-10-2023 09:23

Target

320-2-0x0000000000400000-0x000000000228F000-memory.exe
Size

30.6MB
MD5

2b630efbe7c14b5cfc89b4863fef2459
SHA1

cfb48661b8bdfbc0ee9b6490ed436bc8e64e6010
SHA256

bbc3521fc489abf0b62621adcc8d34b86d6a06c8668719ca6394f703432cbe01
SHA512

788c5a5c81d5068af8f3fe1adaa0e0fe28f878940da86e7c880753961922404680e631e762de9ef94fd7ee419b9a3b48d02593a234c11255e4f2ca75b3e7524b
SSDEEP

3072:WrPI5jSu1kZLaHZ5VYnurTt9epeDNbuSTTNG9AMY8q4LCvr4cot:mu1kZLU7VYnuF9epeZTNG+MTasco

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2008 4272 WerFault.exe 320-2-0x0000000000400000-0x000000000228F000-memory.exe

pid	pid_target	process	target process
2008	4272	WerFault.exe	320-2-0x0000000000400000-0x000000000228F000-memory.exe

C:\Users\Admin\AppData\Local\Temp\320-2-0x0000000000400000-0x000000000228F000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\320-2-0x0000000000400000-0x000000000228F000-memory.exe"
1⤵
PID:4272

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4272 -s 216
2⤵
- Program crash
PID:2008

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4272 -ip 4272
1⤵
PID:3052