3481141184d21bf6a3166c9287c44b0feab512a1079faf15196a5330ac3363af

Analysis

max time kernel
91s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
23-01-2023 19:26

Target

4896-150-0x00000000001D0000-0x0000000000659000-memory.exe
Size

4.5MB
MD5

3884f5c941a07afbe0a39cffd222b455
SHA1

030664b5f1456359e2562d38e38e6ef961f42572
SHA256

3481141184d21bf6a3166c9287c44b0feab512a1079faf15196a5330ac3363af
SHA512

8f0ef66f75cb456d643da9ab4dfa804472be111ab5a10755a24c9c89e0bf44eaafbc5d10a9993f91c5d2ed4e4111d608e4bbeaea0869625e1eb8c09c2f988f0e
SSDEEP

49152:87ETPvUAUy5qoFSUBLkXEsCV+83uj+hH5Uz1OvWFpK:87+8Tk3LMEFV+v+x5URzv

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2724 384 WerFault.exe 4896-150-0x00000000001D0000-0x0000000000659000-memory.exe

pid	pid_target	process	target process
2724	384	WerFault.exe	4896-150-0x00000000001D0000-0x0000000000659000-memory.exe

C:\Users\Admin\AppData\Local\Temp\4896-150-0x00000000001D0000-0x0000000000659000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\4896-150-0x00000000001D0000-0x0000000000659000-memory.exe"
1⤵
PID:384

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 384 -s 216
2⤵
- Program crash
PID:2724

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 384 -ip 384
1⤵
PID:4828