454d9fce9dd96b6adcc7e4e9e85b75128b805521d7faa5da86836970d5c2f17b

Analysis

max time kernel
112s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
15-02-2023 20:29

Target

1132-57-0x0000000000400000-0x000000000046F000-memory.exe
Size

444KB
MD5

84ee75fa200d5e9ada88b538de0f320d
SHA1

bd100c14f99fdf130806dc2c3d2b0c77ee1d477e
SHA256

454d9fce9dd96b6adcc7e4e9e85b75128b805521d7faa5da86836970d5c2f17b
SHA512

26cbd82980f1058d6a2aaef011c407e37530ca32a2c4641a787b0f9755d9db4bef98b2c1fa8f2d6d866dd54f3417657e5e56da022bdd06728e8cb6685c8212c8
SSDEEP

6144:MCqQOGvxMhI1zQcLfb/N7Qp0+MdkTINZt5:MCqvcx8IdQcLbN7QPMdk

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3012 944 WerFault.exe 1132-57-0x0000000000400000-0x000000000046F000-memory.exe

pid	pid_target	process	target process
3012	944	WerFault.exe	1132-57-0x0000000000400000-0x000000000046F000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1132-57-0x0000000000400000-0x000000000046F000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1132-57-0x0000000000400000-0x000000000046F000-memory.exe"
1⤵
PID:944

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 944 -s 216
2⤵
- Program crash
PID:3012

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 944 -ip 944
1⤵
PID:1884