f5a20c971ccbb4c9cf26cd33bda2d32e3ce7d05813b1b5542a57a6d9d9cfe38e

Analysis

max time kernel
83s
max time network
103s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
31-05-2023 07:50

Target

2008-57-0x0000000000400000-0x0000000000419000-memory.exe
Size

100KB
MD5

c110bc496a3572b8eb24c3d284d42ed8
SHA1

662fdf0e8596b5803ac68e5226f43898a7e5c664
SHA256

f5a20c971ccbb4c9cf26cd33bda2d32e3ce7d05813b1b5542a57a6d9d9cfe38e
SHA512

20e791bd8108e57ee9a8a3083573d50615074b21c807d550b911426ab8ee78186c402c2dc0fb40b318020dbfbcde94832f40bd4c0fdcda1e271b299f7f49463b
SSDEEP

1536:5HeWbamqT+4lTHNadT9Fq+lRsJLnFj/AOhppWTvTEamkzmOuFRuFa:9eTMK4nc+lbOraEa2VCa

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2388 1764 WerFault.exe 2008-57-0x0000000000400000-0x0000000000419000-memory.exe

pid	pid_target	process	target process
2388	1764	WerFault.exe	2008-57-0x0000000000400000-0x0000000000419000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2008-57-0x0000000000400000-0x0000000000419000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2008-57-0x0000000000400000-0x0000000000419000-memory.exe"
1⤵
PID:1764

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1764 -s 216
2⤵
- Program crash
PID:2388

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 1764 -ip 1764
1⤵
PID:1296