f19b37a0b9f1bcd0be91ebf40321dd3eb257d7375bf1031b49017a57d09a6ffd

Analysis

max time kernel
136s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
07-02-2023 19:40

Target

1580-66-0x0000000000400000-0x00000000004A2000-memory.exe
Size

648KB
MD5

2aa750024c665159c0643c34986af491
SHA1

d7e93999195f0c2ebc6ca5ed30ba6913921f613d
SHA256

f19b37a0b9f1bcd0be91ebf40321dd3eb257d7375bf1031b49017a57d09a6ffd
SHA512

4b95ff9521d3b69691711fa6fb0d9794b707dd69c0e834d0fe5fe1b115a845cfb341ea9adf62d2777275ff36815fa672d2de4f640b0634dbda20bb3ec0ef59b3
SSDEEP

1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/Eq7Izmd:nSHIG6mQwGmfOQd8YhY0/E+UG

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1204 424 WerFault.exe 1580-66-0x0000000000400000-0x00000000004A2000-memory.exe

pid	pid_target	process	target process
1204	424	WerFault.exe	1580-66-0x0000000000400000-0x00000000004A2000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1580-66-0x0000000000400000-0x00000000004A2000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1580-66-0x0000000000400000-0x00000000004A2000-memory.exe"
1⤵
PID:424

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 424 -s 216
2⤵
- Program crash
PID:1204

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 424 -ip 424
1⤵
PID:1052