33bd16a6afea9bdf5d34e73bb93396222cdeb7e03234a313d0ddba1ca9b7ec0d

Analysis

max time kernel
163s
max time network
178s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
11-10-2023 10:58

Target

3024-2-0x0000000000400000-0x000000000228F000-memory.exe
Size

30.6MB
MD5

9aa481da17e22ac32315c06aacdd8977
SHA1

e6145fe8776f249efa2ef6276f6363759a7ea504
SHA256

33bd16a6afea9bdf5d34e73bb93396222cdeb7e03234a313d0ddba1ca9b7ec0d
SHA512

3fbf0ccf87485f8ea80dbeaa66cdd8c626186d19b0439644b4387bb4349bb5311d69eaa5cdca0acd9b8042f2d2ec5d5c63b8fac17fc2f73505c561ad46f0fd9f
SSDEEP

6144:mu1kkLU7VYnuFi+3ILEyM9KcA8rRm/H7xo:/XLYVXQ+4wocA8rRM

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1248 4180 WerFault.exe 3024-2-0x0000000000400000-0x000000000228F000-memory.exe

pid	pid_target	process	target process
1248	4180	WerFault.exe	3024-2-0x0000000000400000-0x000000000228F000-memory.exe

C:\Users\Admin\AppData\Local\Temp\3024-2-0x0000000000400000-0x000000000228F000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\3024-2-0x0000000000400000-0x000000000228F000-memory.exe"
1⤵
PID:4180

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4180 -s 228
2⤵
- Program crash
PID:1248

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4180 -ip 4180
1⤵
PID:3876