d5b41d32af3f03034712c7aca0748a52a22fea447524ccb62ce03c614baf0f80

Analysis

max time kernel
91s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
30-01-2023 18:52

Target

4324-139-0x0000000000400000-0x000000000041E000-memory.exe
Size

120KB
MD5

652d84664084dda66d3c38a92f57ee28
SHA1

0c6ab24446a21af7c525d39bf97b02069bd2a839
SHA256

d5b41d32af3f03034712c7aca0748a52a22fea447524ccb62ce03c614baf0f80
SHA512

9ebdd9686f1305a7fdbe8275fd74658b1b70b78976c118d2b596f9ca8891d42fbb4dec25837ea1a4652fb4cd613871a2fca7ea51ea7f805d238e53fd779416ff
SSDEEP

1536:d0jcjzCB6WeKjhKY/hINnAsmLps3K6iAGuSayJCPieRMRGpq5:QcjzCB6WfhK4IULps3K6RbSlCPiSE75

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3492 1632 WerFault.exe 4324-139-0x0000000000400000-0x000000000041E000-memory.exe

pid	pid_target	process	target process
3492	1632	WerFault.exe	4324-139-0x0000000000400000-0x000000000041E000-memory.exe

C:\Users\Admin\AppData\Local\Temp\4324-139-0x0000000000400000-0x000000000041E000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\4324-139-0x0000000000400000-0x000000000041E000-memory.exe"
1⤵
PID:1632

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1632 -s 216
2⤵
- Program crash
PID:3492

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1632 -ip 1632
1⤵
PID:2572