cee8d48ff4cdae8fd8036d2b3c6807ca97f61a503e391a5c1d87e3d701785155

Analysis

max time kernel
135s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
28-01-2023 20:22

Target

1468-69-0x0000000000400000-0x0000000000433000-memory.exe
Size

204KB
MD5

65468b580b1ada993446056aa4ff50ea
SHA1

1c843008fc6bf88ac9e9ce5764e2b609238d126c
SHA256

cee8d48ff4cdae8fd8036d2b3c6807ca97f61a503e391a5c1d87e3d701785155
SHA512

35462ed9885b03c949a4509678c7acb85b4ad63d83ccf89b2b7a0af22f9e5f7385196b43c93f3ec340151dabff3e91b19285b022504faae5971cc634a4dee15d
SSDEEP

3072:S3bwUUCZjY/UURTbaiceGUlzFr0qOnZEcsx8VLJdYMSMqqD:S3kUjJY/fRT+iceGUlzFruZdJdzxqqD

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4936 1136 WerFault.exe 1468-69-0x0000000000400000-0x0000000000433000-memory.exe

pid	pid_target	process	target process
4936	1136	WerFault.exe	1468-69-0x0000000000400000-0x0000000000433000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1468-69-0x0000000000400000-0x0000000000433000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1468-69-0x0000000000400000-0x0000000000433000-memory.exe"
1⤵
PID:1136

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1136 -s 216
2⤵
- Program crash
PID:4936

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 1136 -ip 1136
1⤵
PID:4384