47e4448d4dcf73dcd3a99b356a0a9d8162f596f9fa3cf88b0da553dd6ffa7666

Analysis

max time kernel
106s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
17-02-2023 06:06

Target

968-191-0x0000000001230000-0x000000000123E000-memory.exe
Size

56KB
MD5

4c18a5cea07083b6c8f29b980a0a0815
SHA1

90c0fb94b61c265b7040212710aafd1756f68f69
SHA256

47e4448d4dcf73dcd3a99b356a0a9d8162f596f9fa3cf88b0da553dd6ffa7666
SHA512

041b55c3cd76243a452a44a9f18fd71a2b157a3f5360b3b9df063caceba2a50f97286a96c70c41539454fe5bc4e592fb9878bb2204a102536e83a4bae42ffdab
SSDEEP

768:V6bSqEwtER4jInhpp55dWSlkiidEfUPJqBQPt04:VGSqEwqR4jaDtmiuqURq

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4676 3388 WerFault.exe 968-191-0x0000000001230000-0x000000000123E000-memory.exe

pid	pid_target	process	target process
4676	3388	WerFault.exe	968-191-0x0000000001230000-0x000000000123E000-memory.exe

C:\Users\Admin\AppData\Local\Temp\968-191-0x0000000001230000-0x000000000123E000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\968-191-0x0000000001230000-0x000000000123E000-memory.exe"
1⤵
PID:3388

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3388 -s 216
2⤵
- Program crash
PID:4676

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3388 -ip 3388
1⤵
PID:4232