db92cf037165549f00e0ab05a9ae2e7a0b720261638b84301b948209d43a8bda

Analysis

max time kernel
145s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
11-10-2023 11:56

Target

2256-3-0x0000000000400000-0x000000000228F000-memory.exe
Size

30.6MB
MD5

7f958f04b1b0ad445790386627a5ddd2
SHA1

3b694da6acabcaf29c24491d6ebeb72b275c250d
SHA256

db92cf037165549f00e0ab05a9ae2e7a0b720261638b84301b948209d43a8bda
SHA512

e81c89e85c3251e09b2e4cff8761ed5d3b834d11bc6a7b20019124293fecf91cb6c85ec10d264876244118db2fac839c5a2a8d86e383bc92be22fcbcc0a4b9cb
SSDEEP

3072:WrPI5jSu1ZZLaHZ5VYnurTt/nZAsaA6eRESzHxHH3zt8l7Mjd1X0ot:mu1ZZLU7VYnuF/ZdaAnEqHxn3R82X0o

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4992 2072 WerFault.exe 2256-3-0x0000000000400000-0x000000000228F000-memory.exe

pid	pid_target	process	target process
4992	2072	WerFault.exe	2256-3-0x0000000000400000-0x000000000228F000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2256-3-0x0000000000400000-0x000000000228F000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2256-3-0x0000000000400000-0x000000000228F000-memory.exe"
1⤵
PID:2072

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2072 -s 216
2⤵
- Program crash
PID:4992

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2072 -ip 2072
1⤵
PID:4272