40caa0ff48203e121d4037c5946e6ea041a8e506943c67ab413e7107a67edb34

Analysis

max time kernel
70s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
11-11-2022 02:02

Target

1696-56-0x0000000000400000-0x0000000000436000-memory.exe
Size

216KB
MD5

9bbdc3f52788dd5fc93514a88561e4d3
SHA1

d5e94be9a2fd20c547250bce70fa01b977ecc0f2
SHA256

40caa0ff48203e121d4037c5946e6ea041a8e506943c67ab413e7107a67edb34
SHA512

65ad8ba243fb1d0ac68885343a92218ef95fd2b5ee5a6b1685e8df87329c9ef3dc0284172c782029c65d36587a2b5e737a633a55b4e130e786721ca9bfffe78f
SSDEEP

1536:dYxT6uMtVfrQISVj5CYWUhhY9zeiqbXEe6gV41pzurhtkadOUw1y/pbYY3GG:4utCP5Ikh2e01a4qkkrhpPGG

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4768 4296 WerFault.exe 1696-56-0x0000000000400000-0x0000000000436000-memory.exe

pid	pid_target	process	target process
4768	4296	WerFault.exe	1696-56-0x0000000000400000-0x0000000000436000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1696-56-0x0000000000400000-0x0000000000436000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1696-56-0x0000000000400000-0x0000000000436000-memory.exe"
1⤵
PID:4296

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4296 -s 228
2⤵
- Program crash
PID:4768

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4296 -ip 4296
1⤵
PID:1716