2b2858e74b9bd22f59f81f112093add994ae593775c292ac049a28b4578f3356

Analysis

max time kernel
78s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20230221-en
resource tags

arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
submitted
19-03-2023 19:42

Target

1272-54-0x0000000000400000-0x0000000000432000-memory.exe
Size

200KB
MD5

4ddbf73971ce04bf8bdad5a98a132f60
SHA1

f6642bcbc4987bf85180b6925845633e54b9c973
SHA256

2b2858e74b9bd22f59f81f112093add994ae593775c292ac049a28b4578f3356
SHA512

74491abe565bbf074a067b3c01d61da4ea8aecc065eb9f711d77eefa5975040939aca8d9f8b3c84a3f1f03cbe70ec24c148bf54382a6b2f270da6e0757b3e439
SSDEEP

3072:TxqZWnja1ggWPaFEaGlSAec8FnhcjxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jc:lqZGaFEaYSnh

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1940 2500 WerFault.exe 1272-54-0x0000000000400000-0x0000000000432000-memory.exe

pid	pid_target	process	target process
1940	2500	WerFault.exe	1272-54-0x0000000000400000-0x0000000000432000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1272-54-0x0000000000400000-0x0000000000432000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1272-54-0x0000000000400000-0x0000000000432000-memory.exe"
1⤵
PID:2500

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2500 -s 224
2⤵
- Program crash
PID:1940

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 2500 -ip 2500
1⤵
PID:2072