516a7c4f089b81be1ac4c0515d92b7005de25b003407bb588902885de7d9a442

Analysis

max time kernel
91s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
25-01-2023 05:26

Target

1212-191-0x0000000000400000-0x00000000008F9000-memory.exe
Size

5.0MB
MD5

eace4d3278b56e772fd3a4849fe48998
SHA1

efbea5fa71d9075788dacf7fe912589148c91984
SHA256

516a7c4f089b81be1ac4c0515d92b7005de25b003407bb588902885de7d9a442
SHA512

36603627424378159515f137ba23b72f41cc89767235275fa4e1296112226935af10bf5cee85bae9847dd72a214133c9417916510cf465e786fa9430866d3f22
SSDEEP

24576:GPhjj9qhlkNkpOonmG/AnVj5FPm54PyNL:KpqhlkNkRmGIVj5NQ4Pg

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3352 4416 WerFault.exe 1212-191-0x0000000000400000-0x00000000008F9000-memory.exe

pid	pid_target	process	target process
3352	4416	WerFault.exe	1212-191-0x0000000000400000-0x00000000008F9000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1212-191-0x0000000000400000-0x00000000008F9000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1212-191-0x0000000000400000-0x00000000008F9000-memory.exe"
1⤵
PID:4416

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4416 -s 216
2⤵
- Program crash
PID:3352

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 4416 -ip 4416
1⤵
PID:808