72f4e055fe95534cc00889430edac68704ce191b1783a241e80fe52ffb09d977

Analysis

max time kernel
162s
max time network
194s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
16-01-2023 13:38

Target

1808-56-0x0000000000400000-0x000000000044B000-memory.exe
Size

300KB
MD5

791d3638f986fa43abd99e6e78323513
SHA1

ea76fc62aaca8a797c8713985371f79544411324
SHA256

72f4e055fe95534cc00889430edac68704ce191b1783a241e80fe52ffb09d977
SHA512

2f46a5b736809b9b82d397a7c75f9903e97e2c5c97b327d887033185db34b46247c07b17f849eca09720bf92c18888b03738cbe288a874d17d234f8a0dba575d
SSDEEP

6144:78AYQr7gENndg3ovRfHMSZM+HJY/oDU4zqQna:QAYK7gENnWsLZM+HJY/oDFP

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1168 1956 WerFault.exe 1808-56-0x0000000000400000-0x000000000044B000-memory.exe

pid	pid_target	process	target process
1168	1956	WerFault.exe	1808-56-0x0000000000400000-0x000000000044B000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1808-56-0x0000000000400000-0x000000000044B000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1808-56-0x0000000000400000-0x000000000044B000-memory.exe"
1⤵
PID:1956

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1956 -s 216
2⤵
- Program crash
PID:1168

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 1956 -ip 1956
1⤵
PID:1200