a4d4968f41d56cbf275d35e68e856f97397a0bb6b5096336357ab1b9be8719c0

Analysis

max time kernel
86s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
28-03-2023 02:25

Target

432-366-0x0000000000400000-0x000000000046C000-memory.exe
Size

432KB
MD5

fc450195638a8a38071519f4647fb668
SHA1

2a80fb416e75e746663e4857f15f936d04198890
SHA256

a4d4968f41d56cbf275d35e68e856f97397a0bb6b5096336357ab1b9be8719c0
SHA512

55d821462813359f15c286387eb25d4ca7b921974b8d89c0b0e3325f73594469131abee5e4feca4181aa7d7246982d65f554fc52f79b300959ddbd50eccaa972
SSDEEP

6144:cuQRHexo0nwlQvG4IyynVKzVKJ5/eRFHVmGii/9o0wVEhKh+4a:cuQRHexo0n24zVK32RRVmGikwVbhn

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4596 1432 WerFault.exe 432-366-0x0000000000400000-0x000000000046C000-memory.exe

pid	pid_target	process	target process
4596	1432	WerFault.exe	432-366-0x0000000000400000-0x000000000046C000-memory.exe

C:\Users\Admin\AppData\Local\Temp\432-366-0x0000000000400000-0x000000000046C000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\432-366-0x0000000000400000-0x000000000046C000-memory.exe"
1⤵
PID:1432
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1432 -s 216
  2⤵
  - Program crash
  PID:4596

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 176 -p 1432 -ip 1432
1⤵
PID:2680