1c7cd7008c95284bc7f349e13afcc2650ecfb90d84291257492c63337e8c9a64

Analysis

max time kernel
143s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
26-01-2023 20:40

Target

936-65-0x0000000000400000-0x00000000004A2000-memory.exe
Size

648KB
MD5

86d09cc89c3a8c1ee59ea0207b8e2ac8
SHA1

cb569632f63bc127df32d04e8cea9604cb278e1e
SHA256

1c7cd7008c95284bc7f349e13afcc2650ecfb90d84291257492c63337e8c9a64
SHA512

3436f1a103399634410f5e868c44bdfc97768506a4c6658dc582a9c2d5a62eaddd568bf46d91bd4a9a4a8866a171a25029a0a7efb778724eebe4dbabf24e7ed1
SSDEEP

1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1756 808 WerFault.exe 936-65-0x0000000000400000-0x00000000004A2000-memory.exe

pid	pid_target	process	target process
1756	808	WerFault.exe	936-65-0x0000000000400000-0x00000000004A2000-memory.exe

C:\Users\Admin\AppData\Local\Temp\936-65-0x0000000000400000-0x00000000004A2000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\936-65-0x0000000000400000-0x00000000004A2000-memory.exe"
1⤵
PID:808

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 808 -s 216
2⤵
- Program crash
PID:1756

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 808 -ip 808
1⤵
PID:4540