c99d0e7226ee58eae7a04cb2eeb78689e2829884fe817d138f48c8ed9ab2fe9f

Analysis

max time kernel
154s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
09-02-2023 08:26

Target

1116-54-0x0000000000020000-0x0000000000026000-memory.exe
Size

24KB
MD5

ea8c451f311d79b99f21e1a883d2abe8
SHA1

dc5eeef6f8e37a76f450a291b8fb32725ab8ece0
SHA256

c99d0e7226ee58eae7a04cb2eeb78689e2829884fe817d138f48c8ed9ab2fe9f
SHA512

2902786d996ee7a16779aa708e6f3c306df08d98c6655d13fa91c9212d7996ddfb7e63c40340567a1327fc1855938748940a806749d772e82ddee70b96d83711
SSDEEP

96:icoCMNVnRhLBuANutaH/FMhh/MM4odWLwZADPFyLh/bPin4VZao2i4gh2ew:ZoLvduAsaNS/Zbdi4hNVZwi4ixw

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2428 536 WerFault.exe 1116-54-0x0000000000020000-0x0000000000026000-memory.exe

pid	pid_target	process	target process
2428	536	WerFault.exe	1116-54-0x0000000000020000-0x0000000000026000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1116-54-0x0000000000020000-0x0000000000026000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1116-54-0x0000000000020000-0x0000000000026000-memory.exe"
1⤵
PID:536
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 536 -s 216
  2⤵
  - Program crash
  PID:2428

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 536 -ip 536
1⤵
PID:4088