9b37aa242c069f24788ee142660c68d6bab913316588b545384bebed9e3735bf

Analysis

max time kernel
132s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
24-01-2023 12:55

Target

1092-65-0x0000000000400000-0x00000000004A2000-memory.exe
Size

648KB
MD5

1534b883fbdcb5b1a0cd03dd18914765
SHA1

e6a666abd3d360c6b874ca25124325a3285cb103
SHA256

9b37aa242c069f24788ee142660c68d6bab913316588b545384bebed9e3735bf
SHA512

9be1df3ca4e240dc914c41ba46218de5e60c0f7973b568b830d7da9f89c94ca05a933713b5bea5c0ad4ee9f3f04edbdc9f43f69c43672a76fbbadc6d62d982e4
SSDEEP

1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/Eq3Izmd:nSHIG6mQwGmfOQd8YhY0/ESUG

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2732 4244 WerFault.exe 1092-65-0x0000000000400000-0x00000000004A2000-memory.exe

pid	pid_target	process	target process
2732	4244	WerFault.exe	1092-65-0x0000000000400000-0x00000000004A2000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1092-65-0x0000000000400000-0x00000000004A2000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1092-65-0x0000000000400000-0x00000000004A2000-memory.exe"
1⤵
PID:4244

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4244 -s 216
2⤵
- Program crash
PID:2732

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4244 -ip 4244
1⤵
PID:4616