058845d4a442ef5b14a5e810647daef316fccffbc401cc075e4a013c0596988b

Analysis

max time kernel
150s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20230221-en
resource tags

arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
submitted
07-05-2023 22:57

Target

1036-99-0x0000000000090000-0x000000000009A000-memory.exe
Size

40KB
MD5

f43a39c78c6f3e4992b86c026bbf7254
SHA1

dfe3e622375fecea316983705a567f2b819d305f
SHA256

058845d4a442ef5b14a5e810647daef316fccffbc401cc075e4a013c0596988b
SHA512

edd2cee49039f8f95975736d36cdb635c7352c62320de1b2b2c65da7e3a9da1b04f88c903c316deb1d30b56f5d58345c4d926375d2ad6af7211e6e7bbb9858a0
SSDEEP

192:h+8C+EKS0O9ejYTDG8bcp4Ll9qnieXubWyD9JEBkGxVXOlqoNxRJ:hNVjYTDG8gpwxeXTyD3EnxFoN

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2124 4472 WerFault.exe 1036-99-0x0000000000090000-0x000000000009A000-memory.exe

pid	pid_target	process	target process
2124	4472	WerFault.exe	1036-99-0x0000000000090000-0x000000000009A000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1036-99-0x0000000000090000-0x000000000009A000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1036-99-0x0000000000090000-0x000000000009A000-memory.exe"
1⤵
PID:4472
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4472 -s 224
  2⤵
  - Program crash
  PID:2124

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 4472 -ip 4472
1⤵
PID:3744