0482eb4e004b89930aa8c9b7cdff80dc3c587804318943d8e7b14f8bc7664ff2

Analysis

max time kernel
150s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
11-10-2023 12:11

Target

2208-2-0x0000000000400000-0x000000000044A000-memory.exe
Size

296KB
MD5

9bd06516d10888af5534ea79bd503f3b
SHA1

f6e07434b045517463dbd196cfe55ccf2ae46c87
SHA256

0482eb4e004b89930aa8c9b7cdff80dc3c587804318943d8e7b14f8bc7664ff2
SHA512

eed42ab1d51fc25c13519ca1560b78f9b970008fa5eb60c57ba2e81048256e83ed81e9aafa49c4c8ac5dceb67fe5005418d41abe7f0b5c2c725bc07a7ffcda53
SSDEEP

3072:KrPI5jSu1htEPrYLubT19V3A/zwsWPAwyPa5KQJVvZkShn5cbrXzTLLm:iu1htEPr7f1XmzYAwyPaocRkSQb3TO

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2004 4392 WerFault.exe 2208-2-0x0000000000400000-0x000000000044A000-memory.exe

pid	pid_target	process	target process
2004	4392	WerFault.exe	2208-2-0x0000000000400000-0x000000000044A000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2208-2-0x0000000000400000-0x000000000044A000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2208-2-0x0000000000400000-0x000000000044A000-memory.exe"
1⤵
PID:4392

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4392 -s 216
2⤵
- Program crash
PID:2004

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4392 -ip 4392
1⤵
PID:4960