5fb6dabd42c6e4b5c142d2bb3d6e3cf9ed3fef693ffba907c18e1a70ecd114ab

Analysis

max time kernel
91s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
24-01-2023 06:55

Target

3528-153-0x0000000000CC0000-0x0000000001149000-memory.exe
Size

4.5MB
MD5

b7657ead46e4b5805c476c6a3105e01b
SHA1

843e9eb757ce3e9d62609e6f71083c5e0a449048
SHA256

5fb6dabd42c6e4b5c142d2bb3d6e3cf9ed3fef693ffba907c18e1a70ecd114ab
SHA512

9b336f28f39e4cb07c0a45443e9748256bac1248689509ad94c1012329a6b2d911d847479c40d11e715da999633862247d0de20847ddc6bdea8a9b377c17fee3
SSDEEP

49152:mi0eNG8py5qwPKpWLkvEsCV+83uj+hH5Uz1OvpFpK:miWaMjL0EFV+v+x5URcv

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4860 1508 WerFault.exe 3528-153-0x0000000000CC0000-0x0000000001149000-memory.exe

pid	pid_target	process	target process
4860	1508	WerFault.exe	3528-153-0x0000000000CC0000-0x0000000001149000-memory.exe

C:\Users\Admin\AppData\Local\Temp\3528-153-0x0000000000CC0000-0x0000000001149000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\3528-153-0x0000000000CC0000-0x0000000001149000-memory.exe"
1⤵
PID:1508

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1508 -s 216
2⤵
- Program crash
PID:4860

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 1508 -ip 1508
1⤵
PID:752