af039178352ab8ac432ef829940240a30cfcce248e6988e9c5749f96d36669ca

Analysis

max time kernel
143s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20231127-en
resource tags

arch:x64arch:x86image:win10v2004-20231127-enlocale:en-usos:windows10-2004-x64system
submitted
01-12-2023 07:32

Target

2316-10-0x0000000000400000-0x0000000000444000-memory.exe
Size

272KB
MD5

5c592bc5425b82e03806169afeaceac8
SHA1

360ec04cd4cef8694f4d332bcc1c0723bc40228a
SHA256

af039178352ab8ac432ef829940240a30cfcce248e6988e9c5749f96d36669ca
SHA512

fe4af6334da7a8ad146cb9f7c65e99b3c7b78b93f20edd3d1eb7dd831d3344639009814cb3ec2f97e8477b21c06853a7071e4d2127aaa4362ae115038d6da40f
SSDEEP

3072:9eMWGALKGaeqt8TVBAnMtxyfjCZOY+kHDd8Wbmu58RXufX:9NALKGaeqt8TVBECZNaWiLXm

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

488 880 WerFault.exe 2316-10-0x0000000000400000-0x0000000000444000-memory.exe

pid	pid_target	process	target process
488	880	WerFault.exe	2316-10-0x0000000000400000-0x0000000000444000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2316-10-0x0000000000400000-0x0000000000444000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2316-10-0x0000000000400000-0x0000000000444000-memory.exe"
1⤵
PID:880

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 880 -s 224
2⤵
- Program crash
PID:488

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 364 -p 880 -ip 880
1⤵
PID:4264