6a66e5ace7bb68c66354f2b799778819602959f6397e694fdeb4689c11226871

Analysis

max time kernel
138s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
16-02-2023 15:23

Target

3436-225-0x00000000001E0000-0x00000000001EE000-memory.exe
Size

56KB
MD5

c673e2d4e2134d2c53064c35d23e195a
SHA1

114b3e976b90e1eaa141474bd109d94363ef7ec3
SHA256

6a66e5ace7bb68c66354f2b799778819602959f6397e694fdeb4689c11226871
SHA512

a47c1be1893e992bb0a0c9ee7bb794ee2c09101d66b1f95efe014c295882c80a7221287e18d8da75cd6b2dda42f706ae0e62552e49edf82ed5d040b5498d6b39
SSDEEP

768:9wlQajsPEoR4jInhpp55dWSlkiidEfUPJqBQPt04:92QaAlR4jaDtmiuqURq

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4976 4196 WerFault.exe 3436-225-0x00000000001E0000-0x00000000001EE000-memory.exe

pid	pid_target	process	target process
4976	4196	WerFault.exe	3436-225-0x00000000001E0000-0x00000000001EE000-memory.exe

C:\Users\Admin\AppData\Local\Temp\3436-225-0x00000000001E0000-0x00000000001EE000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\3436-225-0x00000000001E0000-0x00000000001EE000-memory.exe"
1⤵
PID:4196

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4196 -s 188
2⤵
- Program crash
PID:4976

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4196 -ip 4196
1⤵
PID:748