e03d9756c29c3b0a4e2807e6f150f6b2bb1f98b7a1d5430e629548cef58bc96d

Analysis

max time kernel
90s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
05-02-2023 03:43

Target

1796-197-0x0000000000400000-0x00000000032A0000-memory.exe
Size

46.6MB
MD5

2c4ebf54e54b2616364482f9f2b15d75
SHA1

f460183206f819eae8404cf9b4df831889817609
SHA256

e03d9756c29c3b0a4e2807e6f150f6b2bb1f98b7a1d5430e629548cef58bc96d
SHA512

cd7e26fab47219e18e9b6e3314eafb1a96e9e3237d6b0e05d43fb21262ff6268350b993f5c5c929beeb180fa17c20180d40dbd41a45f16b1b1ac6f3dbf8a7386
SSDEEP

12288:CPy+9p2HD970QYzfemkdBSUjmtiV+h2CtY//7cHHlSu2XvRFjb4xh9FaoLRm/Jzo:CPZiD9UemkeFau2gY//An4j5FQu5Bv

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2220 4020 WerFault.exe 1796-197-0x0000000000400000-0x00000000032A0000-memory.exe

pid	pid_target	process	target process
2220	4020	WerFault.exe	1796-197-0x0000000000400000-0x00000000032A0000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1796-197-0x0000000000400000-0x00000000032A0000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1796-197-0x0000000000400000-0x00000000032A0000-memory.exe"
1⤵
PID:4020

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4020 -s 216
2⤵
- Program crash
PID:2220

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4020 -ip 4020
1⤵
PID:2240