fefb9e499b41f77e72dfae5fa0479417d57bc9a46662af10473b83aa9a2010f1

Analysis

max time kernel
145s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
24-03-2023 13:09

Target

1136-69-0x0000000000400000-0x000000000044A000-memory.exe
Size

296KB
MD5

cf01e0246d4b89be1ce9cae8d004b297
SHA1

908de07d1ba30b227b9853f55af350e934cfe3c0
SHA256

fefb9e499b41f77e72dfae5fa0479417d57bc9a46662af10473b83aa9a2010f1
SHA512

aba4b039203c18b40e98129aa9b97782763ae1451c5b232a340a273b5b06d6f65bfbb78fc0e6d524b1a5c4cad062aa1db9c33e57610bae8f8184e588c05c9ef4
SSDEEP

6144:aDthOzj8VzK9wLV6Bta6dtJmakIM5ntDv+1ECGhAIgeHYu:aJk8LLV6Btpmk2b+kXxHY

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4008 4692 WerFault.exe 1136-69-0x0000000000400000-0x000000000044A000-memory.exe

pid	pid_target	process	target process
4008	4692	WerFault.exe	1136-69-0x0000000000400000-0x000000000044A000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1136-69-0x0000000000400000-0x000000000044A000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1136-69-0x0000000000400000-0x000000000044A000-memory.exe"
1⤵
PID:4692

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4692 -s 88
2⤵
- Program crash
PID:4008

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4692 -ip 4692
1⤵
PID:5092