b360cdb666fcad9db10b98aba1b7073cfddd88ae9ffde8d7348da2c6edb1dcdb

Analysis

max time kernel
154s
max time network
173s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
24-11-2022 04:19

Target

1472-57-0x0000000000400000-0x000000000065B000-memory.exe
Size

2.4MB
MD5

47a75ec34dec66b5790b3798d2361085
SHA1

a3592940f43a52ded3a1a53bdbd695e6b10a1990
SHA256

b360cdb666fcad9db10b98aba1b7073cfddd88ae9ffde8d7348da2c6edb1dcdb
SHA512

cc34a3f219f4f28b5eb5072e62cef312b971491f25366afd174489877bf5a645f373216b83e300f4f12434d5a16d603e6ab92baff3415c0e749b0dcf03397e76
SSDEEP

6144:c5dzwO5jJFSIijqVSS8LfZujp8Dq1RZvufk:cZkqx8Nujp+q1Pufk

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2068 3436 WerFault.exe 1472-57-0x0000000000400000-0x000000000065B000-memory.exe

pid	pid_target	process	target process
2068	3436	WerFault.exe	1472-57-0x0000000000400000-0x000000000065B000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1472-57-0x0000000000400000-0x000000000065B000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1472-57-0x0000000000400000-0x000000000065B000-memory.exe"
1⤵
PID:3436

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3436 -s 216
2⤵
- Program crash
PID:2068

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3436 -ip 3436
1⤵
PID:4776