0c58dfe15d7f62621b234aa816de7e9e6e819afaab4ec0d430f142535b35ca8a

Analysis

max time kernel
126s
max time network
129s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
17-11-2022 08:09

Target

4916-295-0x0000000000400000-0x0000000000854000-memory.exe
Size

4.3MB
MD5

b9ce729e25e6733cd9844847b235931d
SHA1

9b4e78aa357d7a80849ec5d419360ea644251ea7
SHA256

0c58dfe15d7f62621b234aa816de7e9e6e819afaab4ec0d430f142535b35ca8a
SHA512

eb8b6159582fb3f1f1ce35da5de68b574a1e19368a92fee827e0ac5560cacaef866a624b24b0fd00c13b7748abda97edfbb2dd27faad7c775c0fa0dc691f0a49
SSDEEP

6144:unf2sFRhQCdhcUoSSwu5To9EPD2W7/4l4l7p0zhsU8AtIiy:uhFJcUoSSwu5To9EKW7/4l4lNEhT7y

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

852 4100 WerFault.exe 4916-295-0x0000000000400000-0x0000000000854000-memory.exe

pid	pid_target	process	target process
852	4100	WerFault.exe	4916-295-0x0000000000400000-0x0000000000854000-memory.exe

C:\Users\Admin\AppData\Local\Temp\4916-295-0x0000000000400000-0x0000000000854000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\4916-295-0x0000000000400000-0x0000000000854000-memory.exe"
1⤵
PID:4100

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4100 -s 140
2⤵
- Program crash
PID:852

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4100 -ip 4100
1⤵
PID:5116