f592656f102082f16dce6cffe528aa983cc5f94ce89d0e5b9b567fc2aab8d6e4

Analysis

max time kernel
138s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231130-en
resource tags

arch:x64arch:x86image:win10v2004-20231130-enlocale:en-usos:windows10-2004-x64system
submitted
07-12-2023 16:55

Target

2492-13-0x0000000000400000-0x0000000000444000-memory.exe
Size

272KB
MD5

cce267a67f4c73450f2b0a790e26e74b
SHA1

80db6eb6d29fb012083afabae6d8aded427fe1e7
SHA256

f592656f102082f16dce6cffe528aa983cc5f94ce89d0e5b9b567fc2aab8d6e4
SHA512

8dcbe33030de79addb7eca266004ba50d71ff4182521c63c481a0595b2b6725eef31482704a3c0bda9883779d8dbbca95f9700de97915cc01350bd71889f7887
SSDEEP

3072:IzSA6i3tYgoQIS0OdEPLmUQ67tc7e4Koav5u/EO5PU6b:cSA6uYgoQIS0OWPLzD7tciTzeEOl

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3732 1368 WerFault.exe 2492-13-0x0000000000400000-0x0000000000444000-memory.exe

pid	pid_target	process	target process
3732	1368	WerFault.exe	2492-13-0x0000000000400000-0x0000000000444000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2492-13-0x0000000000400000-0x0000000000444000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2492-13-0x0000000000400000-0x0000000000444000-memory.exe"
1⤵
PID:1368

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1368 -s 200
2⤵
- Program crash
PID:3732

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1368 -ip 1368
1⤵
PID:3592