5dcaa8302fb8e61f3cfb98d3cfbc316d8f42b5607d768f45f1a81e99edc6eedc

Analysis

max time kernel
130s
max time network
131s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
12-03-2023 01:04

Target

672-69-0x0000000000400000-0x0000000000420000-memory.exe
Size

128KB
MD5

eef96efbb781ec4d751fa1488fa8f87c
SHA1

7cd6f92530990c4a0c35ef65a6acde8b2912efdd
SHA256

5dcaa8302fb8e61f3cfb98d3cfbc316d8f42b5607d768f45f1a81e99edc6eedc
SHA512

7e8c9ea26cae7754ec92053e492ba31193c1b39e9f8b778f3d7f576fbb374d67726420b2d4ef54274b083eed25cf5319d4ba3819182758aa321a7d1a9cd73c6a
SSDEEP

3072:KExRaQ6raoCoCyz6/mqv1JR+yBtGOeaeWgiGq:faO1tme++wi5

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1964 4116 WerFault.exe 672-69-0x0000000000400000-0x0000000000420000-memory.exe

pid	pid_target	process	target process
1964	4116	WerFault.exe	672-69-0x0000000000400000-0x0000000000420000-memory.exe

C:\Users\Admin\AppData\Local\Temp\672-69-0x0000000000400000-0x0000000000420000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\672-69-0x0000000000400000-0x0000000000420000-memory.exe"
1⤵
PID:4116

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4116 -s 216
2⤵
- Program crash
PID:1964

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 4116 -ip 4116
1⤵
PID:1276