8f62e8e5b2b63f8daca2ff04da4041612504c55aba5817a6363c4409411a8ca9

Analysis

max time kernel
99s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
03-03-2023 20:19

Target

568-64-0x0000000000400000-0x0000000000432000-memory.exe
Size

200KB
MD5

87ac0318e08b8ed955386ee9439f93f5
SHA1

402c89ba18f98cc3a6b82fca9621f29b9409ba13
SHA256

8f62e8e5b2b63f8daca2ff04da4041612504c55aba5817a6363c4409411a8ca9
SHA512

5f6c526fde675c4c3f03857302071d2b2c43e326c10fa7743e621ac88df20ff72f8e5c5a18f9eed4f40cfeb40ceedbc91bd7dffe7c9f9b9e94372934919206d1
SSDEEP

1536:zvZi55zWawDfjto9lFUCp9kRFMAjUqOJbu3zhgYFz0wuei+pnYcPs:zxqZWVNaDUSkPZ+el5Fzhzv

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4192 4676 WerFault.exe 568-64-0x0000000000400000-0x0000000000432000-memory.exe

pid	pid_target	process	target process
4192	4676	WerFault.exe	568-64-0x0000000000400000-0x0000000000432000-memory.exe

C:\Users\Admin\AppData\Local\Temp\568-64-0x0000000000400000-0x0000000000432000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\568-64-0x0000000000400000-0x0000000000432000-memory.exe"
1⤵
PID:4676

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4676 -s 224
2⤵
- Program crash
PID:4192

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4676 -ip 4676
1⤵
PID:1576