c82a18867ae0b3b750a2bc4cb988c338acc74ef229859974008f78e04cdeea78

Analysis

max time kernel
96s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
26-04-2023 15:48

Target

2008-133-0x0000000000400000-0x0000000000406000-memory.exe
Size

24KB
MD5

402263188e8b6331dbf8af7172a8b4ce
SHA1

1fda9fd0e31871b937557b1b0afc1c91c85c7285
SHA256

c82a18867ae0b3b750a2bc4cb988c338acc74ef229859974008f78e04cdeea78
SHA512

9aeb23c37c1838f81ba30fda3bb57417418b8e728aff5f6e05450fecb1d55e76e5ad7e66d95abbecbbec6659264444f00ba2af870ff9e1021f80fe285d82bc6d
SSDEEP

96:kjcmO8QYts4D6x7Aa4Gn8Vk/MM4odWLqJBDeoUy7fZd9y:kAT8tdOxMa4a/Zbdfrdf

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1332 1928 WerFault.exe 2008-133-0x0000000000400000-0x0000000000406000-memory.exe

pid	pid_target	process	target process
1332	1928	WerFault.exe	2008-133-0x0000000000400000-0x0000000000406000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2008-133-0x0000000000400000-0x0000000000406000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2008-133-0x0000000000400000-0x0000000000406000-memory.exe"
1⤵
PID:1928

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1928 -s 216
2⤵
- Program crash
PID:1332

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 1928 -ip 1928
1⤵
PID:3060