9a0b39a4eb47d15e46031e040734c18255860e746789eb3cad3ce1a7d0cc43c4

Analysis

max time kernel
111s
max time network
129s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
15-05-2023 00:42

Target

1764-174-0x0000000000400000-0x000000000042A000-memory.exe
Size

168KB
MD5

2135c311645a7b6a87fe20115328050f
SHA1

e5b4a955bc5284889bb79499846b8604360b1eb6
SHA256

9a0b39a4eb47d15e46031e040734c18255860e746789eb3cad3ce1a7d0cc43c4
SHA512

341cf0e2250d358d54938be4b2b3de6ff90dacf56d4fb0450e07c21d73ef2f8ba8264258a9cfc49bc495ac477f3d027af498ec2cb0f01f3f41248e34fa2f05f1
SSDEEP

3072:OV+m5cVQmRSx0xlR5B2j5wMeoDChYZV8e8hh:Oj4plRExNChYf

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

5084 4112 WerFault.exe 1764-174-0x0000000000400000-0x000000000042A000-memory.exe

pid	pid_target	process	target process
5084	4112	WerFault.exe	1764-174-0x0000000000400000-0x000000000042A000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1764-174-0x0000000000400000-0x000000000042A000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1764-174-0x0000000000400000-0x000000000042A000-memory.exe"
1⤵
PID:4112

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4112 -s 224
2⤵
- Program crash
PID:5084

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4112 -ip 4112
1⤵
PID:4772