ac2986f07439afb474e9d11173eb9ae782bf4b09693a47b86c2e5fb3bf10c11f

Analysis

max time kernel
154s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
08-02-2023 19:42

Target

1748-57-0x0000000000400000-0x000000000044D000-memory.exe
Size

308KB
MD5

0b055fd8d0bf2f0f5faff6945c5fe1b1
SHA1

7e85e836c6c18fcfb3127bc867971bf3b190d84f
SHA256

ac2986f07439afb474e9d11173eb9ae782bf4b09693a47b86c2e5fb3bf10c11f
SHA512

292d76e1800f46e79db10a85c08efabc9da5c65c3c3971a1e33ed9ae7d477dcb09b99aaa00a1c8004c8896703224d4d237b5ddbd953e24318e357c960554af61
SSDEEP

3072:qubuo2eebuxhmUVyF0VF760B4wUbBNx36/n7MseL/TflA4ES+5JAksw:qqjhXVyF0j7644hFn3IgseL7flAEk

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3488 4300 WerFault.exe 1748-57-0x0000000000400000-0x000000000044D000-memory.exe

pid	pid_target	process	target process
3488	4300	WerFault.exe	1748-57-0x0000000000400000-0x000000000044D000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1748-57-0x0000000000400000-0x000000000044D000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1748-57-0x0000000000400000-0x000000000044D000-memory.exe"
1⤵
PID:4300

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4300 -s 216
2⤵
- Program crash
PID:3488

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 476 -p 4300 -ip 4300
1⤵
PID:2620