1a0d322293a688adc93885e1c588694598f66c66ee68caf7abd6b0efeba5fcab

Analysis

max time kernel
91s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
31-01-2023 12:26

Target

1120-61-0x0000000000400000-0x000000000041E000-memory.exe
Size

120KB
MD5

a55ebd6fa9e578fa36a9f29e36300c17
SHA1

03aaa895abf53d348fdce78369a5a8ef2e0b9e80
SHA256

1a0d322293a688adc93885e1c588694598f66c66ee68caf7abd6b0efeba5fcab
SHA512

72d0faeceef4d7dad8e5ceb6d692bed7709779faed3c32a4be3b6e9aed6f2e3dd1cc9a071073d53c64353b15530777f13ee2acfe808b9719a5a42a6dd052d47b
SSDEEP

1536:d0jcjzCB6WeKjhKY/hINnAsmLps3K6iAGuSayJCPieRMRGpq5:QcjzCB6WfhK4IULps3K6RbSlCPiSE75

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3912 2112 WerFault.exe 1120-61-0x0000000000400000-0x000000000041E000-memory.exe

pid	pid_target	process	target process
3912	2112	WerFault.exe	1120-61-0x0000000000400000-0x000000000041E000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1120-61-0x0000000000400000-0x000000000041E000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1120-61-0x0000000000400000-0x000000000041E000-memory.exe"
1⤵
PID:2112

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2112 -s 216
2⤵
- Program crash
PID:3912

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 2112 -ip 2112
1⤵
PID:440