80dad53ad936232fb3ae5a1c6938300f6c6b1bb6d5622fee23bca08f2c8e0294

Analysis

max time kernel
142s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
11-10-2023 11:57

Target

2344-2-0x0000000000400000-0x000000000044A000-memory.exe
Size

296KB
MD5

b4cf4f8b3eb3f3b5e8976264cb052df9
SHA1

65e309e158fd6cd68ea33b4c29d8561dc11d0cae
SHA256

80dad53ad936232fb3ae5a1c6938300f6c6b1bb6d5622fee23bca08f2c8e0294
SHA512

20e4c0e64e924cb7bd823d2e533a74c78d2ab1622f1390950170db8b9e5b268d72fb5b9152b25a17c100e3d12dc48c582683089aef0894ba1130f31d916fa067
SSDEEP

3072:KrPI5jSu11UtEPrYLubTtT+MXpZSylO6d1v01wtialvaTAIns5c9ZTrbp:iu11UtEPr7ftznPO6dVQWIBXTJ

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

5116 3840 WerFault.exe 2344-2-0x0000000000400000-0x000000000044A000-memory.exe

pid	pid_target	process	target process
5116	3840	WerFault.exe	2344-2-0x0000000000400000-0x000000000044A000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2344-2-0x0000000000400000-0x000000000044A000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2344-2-0x0000000000400000-0x000000000044A000-memory.exe"
1⤵
PID:3840
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3840 -s 224
  2⤵
  - Program crash
  PID:5116

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 3840 -ip 3840
1⤵
PID:4596