a29c00aa96d1bc406a1dd95ebd3a43c3730491c37e0abd27d6b62ac66550f73a

Analysis

max time kernel
145s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231130-en
resource tags

arch:x64arch:x86image:win10v2004-20231130-enlocale:en-usos:windows10-2004-x64system
submitted
10-12-2023 15:55

Target

2656-23-0x0000000000400000-0x000000000085E000-memory.exe
Size

4.4MB
MD5

f2e4dccadca01ba799a4ed29d36d2d65
SHA1

25d8a513955cf3488ac6bc6a68405459086c792e
SHA256

a29c00aa96d1bc406a1dd95ebd3a43c3730491c37e0abd27d6b62ac66550f73a
SHA512

e55950be6bd1abd4b1fe9655aca9a679adb23a995d0cc557836cf34a4ecc6019ee894885360fa7e9f5a48090eb21424c985608a1a488016bdd715fa979a2a8d4
SSDEEP

3072:9PI6GWpeVsXCLMrxbQ0puFqHKE2b4pFVqmkStswH9pQURRVhpHUZ5OeTC8L:9P8WwesMrJQ0pmKkmH39pQU1PHU3T

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

540 2716 WerFault.exe 2656-23-0x0000000000400000-0x000000000085E000-memory.exe

pid	pid_target	process	target process
540	2716	WerFault.exe	2656-23-0x0000000000400000-0x000000000085E000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2656-23-0x0000000000400000-0x000000000085E000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2656-23-0x0000000000400000-0x000000000085E000-memory.exe"
1⤵
PID:2716
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2716 -s 192
  2⤵
  - Program crash
  PID:540

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 2716 -ip 2716
1⤵
PID:60