c00463ec26e4b6a9207ab78336b56e0e06e9efee31923f9656687f464aed2a02

Analysis

max time kernel
145s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
15-10-2023 20:12

Target

2872-2-0x0000000000400000-0x0000000002287000-memory.exe
Size

30.5MB
MD5

c6ad2bca13ca9bd1fa186067e677786e
SHA1

935020e750e4827cf910cf554cdbb073e9b19b91
SHA256

c00463ec26e4b6a9207ab78336b56e0e06e9efee31923f9656687f464aed2a02
SHA512

605540fb8a54181b2b892299ea844965de25354d8a21a847189a4ed95132e05e33d061270f67a0889cc27b5a9f94b1f3f9f47e5f629518a1481ef7f21035195e
SSDEEP

3072:drPI5jSu1KZxv3vdZgXOayiaDoB0Jiyf2mUbC9t1EsaQw/aT:Bu1KZxdGXODfig2mP9Na

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

468 2472 WerFault.exe 2872-2-0x0000000000400000-0x0000000002287000-memory.exe

pid	pid_target	process	target process
468	2472	WerFault.exe	2872-2-0x0000000000400000-0x0000000002287000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2872-2-0x0000000000400000-0x0000000002287000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2872-2-0x0000000000400000-0x0000000002287000-memory.exe"
1⤵
PID:2472
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2472 -s 216
  2⤵
  - Program crash
  PID:468

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 2472 -ip 2472
1⤵
PID:2456