47faf8d07e911c49575c558e3aa97d0e3074cab5d61b606336eca2898b8df17f

Analysis

max time kernel
169s
max time network
176s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
11-10-2023 12:01

Target

2532-2-0x0000000000400000-0x000000000044A000-memory.exe
Size

296KB
MD5

9f1a7a0a3cc77d12f3f9a26dfbecc728
SHA1

cdab9d3319cef220bc00ca99d4c1173d0bacbc2f
SHA256

47faf8d07e911c49575c558e3aa97d0e3074cab5d61b606336eca2898b8df17f
SHA512

8a4355f2da0a0879558765e343996e87df821c46890e179f1fa7f5b53152a41351e4a1cf19b60d1508397b4148c332e8b5be89b27e82b77063b36ec3ef1bc069
SSDEEP

3072:KrPI5jSu16tEPrYLubTXvSQjdz1dcDSQlgrrWX3Sy47n5cJgDVDopTWO:iu16tEPr7fXvSggT4C3SwJg5YTj

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2272 2988 WerFault.exe 2532-2-0x0000000000400000-0x000000000044A000-memory.exe

pid	pid_target	process	target process
2272	2988	WerFault.exe	2532-2-0x0000000000400000-0x000000000044A000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2532-2-0x0000000000400000-0x000000000044A000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2532-2-0x0000000000400000-0x000000000044A000-memory.exe"
1⤵
PID:2988

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2988 -s 216
2⤵
- Program crash
PID:2272

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 2988 -ip 2988
1⤵
PID:452