27e5f1f8bbcdc94f3bd98949a54fea4249def0404cbfd92f1ddc5091a9b0d98f

Analysis

max time kernel
78s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
02-02-2023 18:56

Target

1044-68-0x0000000000400000-0x00000000004A2000-memory.exe
Size

648KB
MD5

ef6cd28f01abe6036f9789a008af6002
SHA1

e8b88e559bfd25c89f41931c9a50f24fe2fde39e
SHA256

27e5f1f8bbcdc94f3bd98949a54fea4249def0404cbfd92f1ddc5091a9b0d98f
SHA512

d01fe1c7fcaa83f86c461bc6c2940410aa28d6f05cc8239cf87f00935e1b8be924185c460cae80882a1bc194c6448cc9659f7c8b438ac29beed82ce69715fe67
SSDEEP

1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2984 1436 WerFault.exe 1044-68-0x0000000000400000-0x00000000004A2000-memory.exe

pid	pid_target	process	target process
2984	1436	WerFault.exe	1044-68-0x0000000000400000-0x00000000004A2000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1044-68-0x0000000000400000-0x00000000004A2000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1044-68-0x0000000000400000-0x00000000004A2000-memory.exe"
1⤵
PID:1436

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1436 -s 216
2⤵
- Program crash
PID:2984

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1436 -ip 1436
1⤵
PID:4088