bdb95e23e6572c08ca3477af5fc1caf5cdaf63ea1e80a24756357ad5d74d60b8

Analysis

max time kernel
91s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
17-02-2023 01:10

Target

3492-199-0x00000000009F0000-0x00000000009FE000-memory.exe
Size

56KB
MD5

b7166e793c39a50d810e374208e88554
SHA1

e172d66ade349d1d73534cabcd644285d2a20fff
SHA256

bdb95e23e6572c08ca3477af5fc1caf5cdaf63ea1e80a24756357ad5d74d60b8
SHA512

00919f5d79b4feec92f264a34186a5f3dd9411104d1a1eb9672d98777675924108beaa848f7c26ea34828f394e784fbaff8884156d7f46820ad5006d15f43bf9
SSDEEP

768:mGlo1gW5qoR4jInhpp55dWSlkiidEfUPJqBQPt04:pK1gWBR4jaDtmiuqURq

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4848 4280 WerFault.exe 3492-199-0x00000000009F0000-0x00000000009FE000-memory.exe

pid	pid_target	process	target process
4848	4280	WerFault.exe	3492-199-0x00000000009F0000-0x00000000009FE000-memory.exe

C:\Users\Admin\AppData\Local\Temp\3492-199-0x00000000009F0000-0x00000000009FE000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\3492-199-0x00000000009F0000-0x00000000009FE000-memory.exe"
1⤵
PID:4280

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4280 -s 216
2⤵
- Program crash
PID:4848

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 4280 -ip 4280
1⤵
PID:4860