c088456634fe07e0f6c6c530583ba50b07664a55019573315cd78e2968a20207

Analysis

max time kernel
94s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
17-02-2023 18:42

Target

2016-170-0x00000000004D0000-0x00000000004DE000-memory.exe
Size

56KB
MD5

4072a197aae8eaddc1625796a4d3eb60
SHA1

4f2e7869bafa869a43157d9d3b665a49a6e3d9a6
SHA256

c088456634fe07e0f6c6c530583ba50b07664a55019573315cd78e2968a20207
SHA512

0c703fdb924ea31a0e1aba27b485aebf8ce70893d12882a3bedea247887296ecbd25858fff1e4b3c04111e0c706c90e9fe1b254d939a55198314f283636aaf4c
SSDEEP

768:lTaPcXu2KoR4jInhpp55dWSlkiidEfUPJqBQPt04:lePcewR4jaDtmiuqURq

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

536 4980 WerFault.exe 2016-170-0x00000000004D0000-0x00000000004DE000-memory.exe

pid	pid_target	process	target process
536	4980	WerFault.exe	2016-170-0x00000000004D0000-0x00000000004DE000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2016-170-0x00000000004D0000-0x00000000004DE000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2016-170-0x00000000004D0000-0x00000000004DE000-memory.exe"
1⤵
PID:4980

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4980 -s 216
2⤵
- Program crash
PID:536

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4980 -ip 4980
1⤵
PID:1072