36cdb655c5d72951364f538cd1b01bf39a28b48079dcf592217175273a9bfe3a

Analysis

max time kernel
90s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
24-01-2023 12:20

Target

4016-153-0x0000000000830000-0x0000000000CB9000-memory.exe
Size

4.5MB
MD5

db9e57edc9d6150b3b66b79c44cfe3b7
SHA1

e084e7172bcc41ab1504e50486760e8d7cafa861
SHA256

36cdb655c5d72951364f538cd1b01bf39a28b48079dcf592217175273a9bfe3a
SHA512

9cef6622ca27b9420c56b69c1ef080ec0edfbd572b94075cf25ea7fcbc4d15b926f30802b0f29ca76fa834ef3fd482ee70531044b82f14058492f2eadebc62dd
SSDEEP

49152:dI9/ZchnEZyy5q7e2ElLkVEsCV+83uj+hH5Uz1OvCFpK:kZRwXKLiEFV+v+x5URfv

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1316 1724 WerFault.exe 4016-153-0x0000000000830000-0x0000000000CB9000-memory.exe

pid	pid_target	process	target process
1316	1724	WerFault.exe	4016-153-0x0000000000830000-0x0000000000CB9000-memory.exe

C:\Users\Admin\AppData\Local\Temp\4016-153-0x0000000000830000-0x0000000000CB9000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\4016-153-0x0000000000830000-0x0000000000CB9000-memory.exe"
1⤵
PID:1724

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1724 -s 216
2⤵
- Program crash
PID:1316

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 372 -p 1724 -ip 1724
1⤵
PID:4160