c061ff4b3248b44d582ac5e580576412825372b7843da8c0fc50bbef6a9302df

Analysis

max time kernel
135s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
29-05-2023 10:11

Target

920-190-0x0000000000400000-0x000000000062B000-memory.exe
Size

2.2MB
MD5

f3ca37f64c93d97bcfb38bbd17206941
SHA1

df9ad36dd8dda4ae68d93f664e7cf8b0a96bf73b
SHA256

c061ff4b3248b44d582ac5e580576412825372b7843da8c0fc50bbef6a9302df
SHA512

711a21f552d417fdbcca29cd7e26e4e54269e6aa8195088fa5f8fb89154e2e3a59f42e7455aa34d8251de09b6efc8a6590fe89464ea3ae6cfa798275587f7503
SSDEEP

12288:U406AQY5PupeoDrQ+3JJmYZHQvs/ZPv5tRq:w6A15PupeoDrQeZHQSZ3B

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1520 1644 WerFault.exe 920-190-0x0000000000400000-0x000000000062B000-memory.exe

pid	pid_target	process	target process
1520	1644	WerFault.exe	920-190-0x0000000000400000-0x000000000062B000-memory.exe

C:\Users\Admin\AppData\Local\Temp\920-190-0x0000000000400000-0x000000000062B000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\920-190-0x0000000000400000-0x000000000062B000-memory.exe"
1⤵
PID:1644

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1644 -s 124
2⤵
- Program crash
PID:1520

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1644 -ip 1644
1⤵
PID:4104