c8304d58d5d33e3db29027eff32a0a5c6929a31fe6ec573b93c2491403998d9e

Analysis

max time kernel
145s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
16-05-2023 17:24

Target

1572-188-0x0000000000400000-0x000000000042A000-memory.exe
Size

168KB
MD5

cbc6145ae500e33f01db0d2a9356e0e5
SHA1

e2b2b06387eaa501293c086f9491aa6ce781462b
SHA256

c8304d58d5d33e3db29027eff32a0a5c6929a31fe6ec573b93c2491403998d9e
SHA512

3bd94946f8567656bf879e2a7c971df895830d7880b72816f9c55fff291db33d9b39a35df624f7b1c2fe2199bae043f6ffe51dc6588605367ae450cf1c8320d2
SSDEEP

3072:8V+m5cVQmRSxHBIvBIDNmggk29/rh2Z18e8hI:8j4lBIDoJhrh2f

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2600 2296 WerFault.exe 1572-188-0x0000000000400000-0x000000000042A000-memory.exe

pid	pid_target	process	target process
2600	2296	WerFault.exe	1572-188-0x0000000000400000-0x000000000042A000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1572-188-0x0000000000400000-0x000000000042A000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1572-188-0x0000000000400000-0x000000000042A000-memory.exe"
1⤵
PID:2296

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2296 -s 224
2⤵
- Program crash
PID:2600

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 2296 -ip 2296
1⤵
PID:2696