95f0adb81ce3de9d97031455f4e898aefcd58f17b0830b87ba7e89dfe3fe9d04

Analysis

max time kernel
165s
max time network
176s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
11-10-2023 11:48

Target

2356-2-0x0000000000400000-0x000000000044A000-memory.exe
Size

296KB
MD5

77aeff9f7085a68ed356fe8583972ff7
SHA1

ae5b4f58e56cf776d5bae73949c27910d9bb8da5
SHA256

95f0adb81ce3de9d97031455f4e898aefcd58f17b0830b87ba7e89dfe3fe9d04
SHA512

a02538b66fbe56eb6fdad722216998f1501de742f4cbb471c45d58db1f0db13e1e781ef51ad2a79f517ba046a3fb4577d70978aa3cceb216bdddb71b80890b05
SSDEEP

3072:erPI5jSu1r5RgfA4D3tACX/VIlBuPMVEOqFo67UFMQBzttxq8i7u5s5cYSPTrbp:uu1r5RGJrtAOVAEPUEOq5UqCwyY0TJ

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1520 4868 WerFault.exe 2356-2-0x0000000000400000-0x000000000044A000-memory.exe

pid	pid_target	process	target process
1520	4868	WerFault.exe	2356-2-0x0000000000400000-0x000000000044A000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2356-2-0x0000000000400000-0x000000000044A000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2356-2-0x0000000000400000-0x000000000044A000-memory.exe"
1⤵
PID:4868

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4868 -s 216
2⤵
- Program crash
PID:1520

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4868 -ip 4868
1⤵
PID:3064