a9230633644c6caff8e1ed5248f7379dc739f081265cf6de20d6d55712302ec9

Analysis

max time kernel
90s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
24-01-2023 17:54

Target

3192-149-0x0000000000E70000-0x00000000012F9000-memory.exe
Size

4.5MB
MD5

9fc90bbf9361d57549ce6fed551047b8
SHA1

9570c40bfa13f0c371b47eba915417022217f65b
SHA256

a9230633644c6caff8e1ed5248f7379dc739f081265cf6de20d6d55712302ec9
SHA512

d8af1ca5c5ceec34c9adb317eeb852f911b71cf0637ce8060fa03a13d16c8b1062f5abf2b5813c988b542a48712c4c0fb4e50b36b695fa37d0a5bfee5155f54c
SSDEEP

49152:E1kl/89Wy5qw027MLkoEsCV+83uj+hH5Uz1OvBFpK:E19AciLDEFV+v+x5URAv

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4868 1316 WerFault.exe 3192-149-0x0000000000E70000-0x00000000012F9000-memory.exe

pid	pid_target	process	target process
4868	1316	WerFault.exe	3192-149-0x0000000000E70000-0x00000000012F9000-memory.exe

C:\Users\Admin\AppData\Local\Temp\3192-149-0x0000000000E70000-0x00000000012F9000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\3192-149-0x0000000000E70000-0x00000000012F9000-memory.exe"
1⤵
PID:1316

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1316 -s 216
2⤵
- Program crash
PID:4868

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1316 -ip 1316
1⤵
PID:4760