b088e82d4176f4c07a9acbf131c07e9c30e0d9e3d5fc0c1dc1f7328ca20212b8

Analysis

max time kernel
143s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
24-01-2023 07:44

Target

2044-154-0x0000000000040000-0x00000000004C9000-memory.exe
Size

4.5MB
MD5

f34a4ed050cff937350b6cfef0350d62
SHA1

534b0c9e11d84ac62805dd3eaad4845b9d5e970d
SHA256

b088e82d4176f4c07a9acbf131c07e9c30e0d9e3d5fc0c1dc1f7328ca20212b8
SHA512

39c7735003127d776dd00b87c2041721780a631f84a453a2028699af44ab47ecb9f031a71ef4621d705728d613e95b78d831d3043df0d0176abf3de74f59befd
SSDEEP

49152:mKkG9GTxy5q8PKasLksEsCV+83uj+hH5Uz1Ov2FpK:mKu14GL3EFV+v+x5URvv

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4356 4516 WerFault.exe 2044-154-0x0000000000040000-0x00000000004C9000-memory.exe

pid	pid_target	process	target process
4356	4516	WerFault.exe	2044-154-0x0000000000040000-0x00000000004C9000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2044-154-0x0000000000040000-0x00000000004C9000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2044-154-0x0000000000040000-0x00000000004C9000-memory.exe"
1⤵
PID:4516

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4516 -s 216
2⤵
- Program crash
PID:4356

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4516 -ip 4516
1⤵
PID:4740