c163251d656e0676e5129bdffe3b517048562c4eb1df6324d9872ffd62560fe1

Analysis

max time kernel
112s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
07-02-2023 17:24

Target

1504-66-0x0000000000400000-0x00000000004A2000-memory.exe
Size

648KB
MD5

958d064268a9c317c5d393cda3560357
SHA1

3ef1e9549cfdb3cabf6a788510307a9b5d1b8c56
SHA256

c163251d656e0676e5129bdffe3b517048562c4eb1df6324d9872ffd62560fe1
SHA512

59d35add612148ecaf85ee0dc2e6777260f4d7c04395efd1da344b6c143453c3e3d102fd56ca10375fa830e4fd16522aafda47722e0ffef0352010175bf8e6ff
SSDEEP

1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqZIzmd:nSHIG6mQwGmfOQd8YhY0/E8UG

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4780 4916 WerFault.exe 1504-66-0x0000000000400000-0x00000000004A2000-memory.exe

pid	pid_target	process	target process
4780	4916	WerFault.exe	1504-66-0x0000000000400000-0x00000000004A2000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1504-66-0x0000000000400000-0x00000000004A2000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1504-66-0x0000000000400000-0x00000000004A2000-memory.exe"
1⤵
PID:4916

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4916 -s 204
2⤵
- Program crash
PID:4780

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 208 -p 4916 -ip 4916
1⤵
PID:3104