3d035df335a847457592eee363f630138981201f2c957b6a7e7d7ae73b5472f3

Analysis

max time kernel
105s
max time network
115s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
01-05-2023 22:20

Target

468-62-0x0000000000400000-0x0000000000419000-memory.exe
Size

100KB
MD5

d2491d4bf957ca60839f2ae6ce65e97a
SHA1

4cb17b51f420f5026ea6beec9a9df91126d79441
SHA256

3d035df335a847457592eee363f630138981201f2c957b6a7e7d7ae73b5472f3
SHA512

a91202701ce58f2b34c82153e90334598daf328edfa61236943d0f16e3ebaae6d229ac20deeb4c0b642ea139915f8fbedf38034651941c349d6a9b0ec60e781e
SSDEEP

1536:YmH4TPtqqTlgS+qShDOoeIxMovs5dmo02qOPL+p2TvLETePxkzm+:Z4pszqS1bdxFbOj+yETePt+

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2664 716 WerFault.exe 468-62-0x0000000000400000-0x0000000000419000-memory.exe

pid	pid_target	process	target process
2664	716	WerFault.exe	468-62-0x0000000000400000-0x0000000000419000-memory.exe

C:\Users\Admin\AppData\Local\Temp\468-62-0x0000000000400000-0x0000000000419000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\468-62-0x0000000000400000-0x0000000000419000-memory.exe"
1⤵
PID:716

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 716 -s 216
2⤵
- Program crash
PID:2664

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 716 -ip 716
1⤵
PID:1284