4b9da01a5239490adb1278ad2b2270310c1fe1db6a9995b2f801f10c2db401ef

Analysis

max time kernel
227s
max time network
293s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 08:39

Target

2020-68-0x0000000000400000-0x00000000004A2000-memory.exe
Size

648KB
MD5

ba310c741918da3a9dbdd8ab53901b27
SHA1

f848ff9dce1d11dc4abdb798236dca9f6830fe4f
SHA256

4b9da01a5239490adb1278ad2b2270310c1fe1db6a9995b2f801f10c2db401ef
SHA512

64ee1045bfe3ced7e90baf22058dcd3b567323e413b2ba607aed20904e285fc977d63520f6fad86d51c7a855579585d750e932d479b23712729e24caaf0a4d3c
SSDEEP

1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2608 4516 WerFault.exe 2020-68-0x0000000000400000-0x00000000004A2000-memory.exe

pid	pid_target	process	target process
2608	4516	WerFault.exe	2020-68-0x0000000000400000-0x00000000004A2000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2020-68-0x0000000000400000-0x00000000004A2000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2020-68-0x0000000000400000-0x00000000004A2000-memory.exe"
1⤵
PID:4516

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4516 -s 216
2⤵
- Program crash
PID:2608

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4516 -ip 4516
1⤵
PID:3724