c625c12b532703808ab3027fe7998e6313b656800f326ab8e7f6732b81e03ca4

Analysis

max time kernel
143s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
15-02-2023 20:23

Target

1816-57-0x0000000000400000-0x000000000046F000-memory.exe
Size

444KB
MD5

9069666ed2feddacf9c3f7af21a9eaef
SHA1

f36d10c1c9db125d58f825f1cdca718f59155dc1
SHA256

c625c12b532703808ab3027fe7998e6313b656800f326ab8e7f6732b81e03ca4
SHA512

1ca167152b9b717577effff31a79f9f01d728d682c0a8e6d0608200e0bc5b5a75428be25a4ca0cd289a65a6c1293adf764a0fd99eae3054d270c1d42b8a20cef
SSDEEP

6144:MCqtGGvxMhI1zQcLfb/N7Qp0WMdkTINZt5:MCq8cx8IdQcLbN7QXMdk

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1360 4656 WerFault.exe 1816-57-0x0000000000400000-0x000000000046F000-memory.exe

pid	pid_target	process	target process
1360	4656	WerFault.exe	1816-57-0x0000000000400000-0x000000000046F000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1816-57-0x0000000000400000-0x000000000046F000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1816-57-0x0000000000400000-0x000000000046F000-memory.exe"
1⤵
PID:4656

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4656 -s 216
2⤵
- Program crash
PID:1360

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4656 -ip 4656
1⤵
PID:4328