6c689ea9e85e7398a9fe29b370a27c704eee2d2cf5a7759b105093a864d8447d

Analysis

max time kernel
61s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
24-01-2023 02:13

Target

1380-153-0x0000000000270000-0x00000000006F9000-memory.exe
Size

4.5MB
MD5

9f631e3b9d45ccd8c8039e10c01ae0a6
SHA1

a3b27a9450f20745b6ac0d5fd86959daad8284a1
SHA256

6c689ea9e85e7398a9fe29b370a27c704eee2d2cf5a7759b105093a864d8447d
SHA512

5c50d670da2e24efa0b952129d9314ea60f290ea9cba7cfb7bb77d3992ec87fac500e4d8e8de82c78e208137f90e6507ac21df82ee247ab1cb7fa22f8747c285
SSDEEP

49152:E1kl5l81Wy5qZw20oLkBEsCV+83uj+hH5Uz1OvZFpK:E1qm4l1LuEFV+v+x5URIv

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1728 3272 WerFault.exe 1380-153-0x0000000000270000-0x00000000006F9000-memory.exe

pid	pid_target	process	target process
1728	3272	WerFault.exe	1380-153-0x0000000000270000-0x00000000006F9000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1380-153-0x0000000000270000-0x00000000006F9000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1380-153-0x0000000000270000-0x00000000006F9000-memory.exe"
1⤵
PID:3272

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3272 -s 184
2⤵
- Program crash
PID:1728

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 3272 -ip 3272
1⤵
PID:4872