c15fd8976b8992fd004dbc681435564fd16f2cec96a4676dcdbec5b8e2883886

Analysis

max time kernel
89s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
16-02-2023 13:38

Target

3396-232-0x00000000011A0000-0x00000000011AE000-memory.exe
Size

56KB
MD5

09a06e905041433e8336e074be7c91f0
SHA1

4b42ca7ce4b68ff2ba46b2899b935c4c65b0d046
SHA256

c15fd8976b8992fd004dbc681435564fd16f2cec96a4676dcdbec5b8e2883886
SHA512

f409092ee7a91ac008b47464c33c5394eb216a30813c2db91140968ee5810c82c9f5c30841d12dc38d55a5c262d5365036ff054176f4a18b283f7b70b95043bd
SSDEEP

768:G8XKrY6iwgoR4jInhpp55dWSlkiidEfUPJqBQPt04:G86rY69R4jaDtmiuqURq

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4976 5056 WerFault.exe 3396-232-0x00000000011A0000-0x00000000011AE000-memory.exe

pid	pid_target	process	target process
4976	5056	WerFault.exe	3396-232-0x00000000011A0000-0x00000000011AE000-memory.exe

C:\Users\Admin\AppData\Local\Temp\3396-232-0x00000000011A0000-0x00000000011AE000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\3396-232-0x00000000011A0000-0x00000000011AE000-memory.exe"
1⤵
PID:5056

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5056 -s 216
2⤵
- Program crash
PID:4976

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 5056 -ip 5056
1⤵
PID:5016