f032e5729cc021f2d05673334958dec33318f985f8c8ac2b22fac1caa9f9b6e7

Analysis

max time kernel
96s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20230221-en
resource tags

arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
submitted
21-02-2023 07:18

Target

932-55-0x0000000000150000-0x0000000000157000-memory.exe
Size

28KB
MD5

5af5ee143fd9ef8a7dc17c9756efe4a3
SHA1

bfb983649297b601428e533397bf2eff8c164d27
SHA256

f032e5729cc021f2d05673334958dec33318f985f8c8ac2b22fac1caa9f9b6e7
SHA512

befee9598756894b9f2931b79225c8878e477dfa380312039c6baf34ffd5922753fdce8357f50e790e7831be3b6da9fd2293bc03c1f6aad090fb5484f9f475f8
SSDEEP

192:ucDfLATpjZ1e6Ws1RQTCPE5+jpupT2taABHg29AwSjtrrnJuy:hDkTpjZ06fRkCc5G0t2c29AwCrnYy

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1772 4728 WerFault.exe 932-55-0x0000000000150000-0x0000000000157000-memory.exe

pid	pid_target	process	target process
1772	4728	WerFault.exe	932-55-0x0000000000150000-0x0000000000157000-memory.exe

C:\Users\Admin\AppData\Local\Temp\932-55-0x0000000000150000-0x0000000000157000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\932-55-0x0000000000150000-0x0000000000157000-memory.exe"
1⤵
PID:4728

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4728 -s 216
2⤵
- Program crash
PID:1772

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 368 -p 4728 -ip 4728
1⤵
PID:4700