8ce8f48a10c8be226da5c5820188d574b16ba26e3b824cbef3894916c68255a4

Analysis

max time kernel
95s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
27-03-2023 23:18

Target

1932-68-0x0000000000400000-0x000000000042F000-memory.exe
Size

188KB
MD5

34451990546464d2d718054589b64b52
SHA1

e2fc2d3ad43f1c10ff16eebb25ff9d1f09d8523c
SHA256

8ce8f48a10c8be226da5c5820188d574b16ba26e3b824cbef3894916c68255a4
SHA512

f4d8f60ee1b2687c4717e56998c4fc0346204059d019b10d5385e126bd1d33ac7b3ef15b5d5db8269f23f9cce0743e29ee7ddacd4c3b12b9a00d0b1409168113
SSDEEP

3072:zGybM97hOQ/iK2jrOyipV/XbKjvx18llvpVYH+zi0ZbYe1g0ujyzdeIC:yDthOzj8VzKilRVYeG0Lahy0F

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4160 2680 WerFault.exe 1932-68-0x0000000000400000-0x000000000042F000-memory.exe

pid	pid_target	process	target process
4160	2680	WerFault.exe	1932-68-0x0000000000400000-0x000000000042F000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1932-68-0x0000000000400000-0x000000000042F000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1932-68-0x0000000000400000-0x000000000042F000-memory.exe"
1⤵
PID:2680
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2680 -s 84
  2⤵
  - Program crash
  PID:4160

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 2680 -ip 2680
1⤵
PID:3096