c66d63a0039e6a1ee32d6d0a2af8abb3185918c7a5a8d7af50543ade6bdb8a29

Analysis

max time kernel
142s
max time network
164s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
25-11-2022 14:24

Target

1044-58-0x0000000000400000-0x0000000000438000-memory.exe
Size

224KB
MD5

1bb62f57e9b080c314c5acd6798ec108
SHA1

5e1dfc851c1db006d856104cb6f073e79be538cd
SHA256

c66d63a0039e6a1ee32d6d0a2af8abb3185918c7a5a8d7af50543ade6bdb8a29
SHA512

e5418d348f036c785d50ad04dfc1ff93c04f077bfa7c08e4bdf52fe37f71493654855569e1a0b39688b339fb07e40f0572cfb28171da6e158ac0bbf2d30e23e8
SSDEEP

3072:C9D+ge5ExQQk6oWmXbNraGKrJ7X6yzL/S/:C9D+WxwWRY

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4960 4520 WerFault.exe 1044-58-0x0000000000400000-0x0000000000438000-memory.exe

pid	pid_target	process	target process
4960	4520	WerFault.exe	1044-58-0x0000000000400000-0x0000000000438000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1044-58-0x0000000000400000-0x0000000000438000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1044-58-0x0000000000400000-0x0000000000438000-memory.exe"
1⤵
PID:4520

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4520 -s 224
2⤵
- Program crash
PID:4960

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4520 -ip 4520
1⤵
PID:5000