317ce49a9dae68d96f0f6285fd2b81a516b2e5db26b8b497cbb7b0d837743034

Analysis

max time kernel
112s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
07-02-2023 08:37

Target

1964-82-0x0000000000400000-0x00000000004A2000-memory.exe
Size

648KB
MD5

8feb1e487753bcdd60b09ed5d06bc386
SHA1

3292dd2fb618bd75b604b76e830434863868808d
SHA256

317ce49a9dae68d96f0f6285fd2b81a516b2e5db26b8b497cbb7b0d837743034
SHA512

ce5041d6c37ef5291c0dce2db94380344473386cbf84d2eae07e1e22dbb0ee15e0e45791e83b0450c049a037ca690cebb7e68e1de09a83f0b0010e3e10b320d6
SSDEEP

1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1936 764 WerFault.exe 1964-82-0x0000000000400000-0x00000000004A2000-memory.exe

pid	pid_target	process	target process
1936	764	WerFault.exe	1964-82-0x0000000000400000-0x00000000004A2000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1964-82-0x0000000000400000-0x00000000004A2000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1964-82-0x0000000000400000-0x00000000004A2000-memory.exe"
1⤵
PID:764

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 764 -s 216
2⤵
- Program crash
PID:1936

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 384 -p 764 -ip 764
1⤵
PID:1420