e4b9e72a34275209d85ed6b7caf1c3215ffec38a059059b30c91b67178d15eaf

Analysis

max time kernel
90s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
17-02-2023 07:43

Target

1476-175-0x00000000007F0000-0x00000000007FE000-memory.exe
Size

56KB
MD5

5bd62e5885e8399dcbad3dedde07a7ec
SHA1

b323d3a063f01c26770fb95b9d422f60e0103dc2
SHA256

e4b9e72a34275209d85ed6b7caf1c3215ffec38a059059b30c91b67178d15eaf
SHA512

0baa3a6746398540bb238543e787e306a605c12f778a7fddf8a23c59961c0860b3d2d977bf7da1edbe40e0d1e5f1b92dd40d18e12a68c27846c57e3a7308bd92
SSDEEP

768:pFIVgW9QoR4jInhpp55dWSlkiidEfUPJqBQPt04:pKVgWPR4jaDtmiuqURq

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2460 4088 WerFault.exe 1476-175-0x00000000007F0000-0x00000000007FE000-memory.exe

pid	pid_target	process	target process
2460	4088	WerFault.exe	1476-175-0x00000000007F0000-0x00000000007FE000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1476-175-0x00000000007F0000-0x00000000007FE000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1476-175-0x00000000007F0000-0x00000000007FE000-memory.exe"
1⤵
PID:4088

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4088 -s 216
2⤵
- Program crash
PID:2460

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 196 -p 4088 -ip 4088
1⤵
PID:2260