8ed766606f8f3f5c11c1a3030f9968f64b3c06d3cf842c0f4ebbe64b61d1f294

Analysis

max time kernel
112s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
06-02-2023 08:59

Target

108-55-0x0000000000400000-0x00000000004FA000-memory.exe
Size

1000KB
MD5

a3aa591bad9249a21d1197cda09d8471
SHA1

b6126fb5e03653ce88a46a6eb5bea20c11ee3ccb
SHA256

8ed766606f8f3f5c11c1a3030f9968f64b3c06d3cf842c0f4ebbe64b61d1f294
SHA512

1ff52cc3a2bd69b3d406f91967f687592387ff02ebed3f6ccd7af02c97168d10e9829a6a020ba0d0cb3717e987d6c3c49781b0e53ad8b39eee7b3645320e950f
SSDEEP

24576:R+sDeo9XTGzDNvUrCH1tJa3dLqdTOPgqClXpsOf3wpV:Lep5WZQVqK6g3wp

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1748 4740 WerFault.exe 108-55-0x0000000000400000-0x00000000004FA000-memory.exe

pid	pid_target	process	target process
1748	4740	WerFault.exe	108-55-0x0000000000400000-0x00000000004FA000-memory.exe

C:\Users\Admin\AppData\Local\Temp\108-55-0x0000000000400000-0x00000000004FA000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\108-55-0x0000000000400000-0x00000000004FA000-memory.exe"
1⤵
PID:4740

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4740 -s 216
2⤵
- Program crash
PID:1748

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4740 -ip 4740
1⤵
PID:4632