02622938f682f6475e23e170673fabd2e42b0b8c5dc8d8d3a6e42468088318ed

Analysis

max time kernel
119s
max time network
121s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
03-06-2023 02:54

Target

1740-56-0x0000000000400000-0x0000000000415000-memory.exe
Size

84KB
MD5

df8753f9b6e94cf53da38d60f74c5877
SHA1

49f826275b705046806e74fc85020a882c616afc
SHA256

02622938f682f6475e23e170673fabd2e42b0b8c5dc8d8d3a6e42468088318ed
SHA512

450b08243c77b744586e579acb3cd7a0b35c05319fb79e8a50fe4ce853fa50843c6d1df8c73b8c8ce68528d6bf8f5360bb8d9ef15bc85dab7e6f8682a37393b9
SSDEEP

1536:6kes21VCy1nTxSYg3CXTjFWL9ydpIHUc:6DVCyFxSYACXF3pI0

Score

3^/10

Program crash 2 IoCs

Processes:

WerFault.exeWerFault.exe

pid	pid_target	process	target process
2900	1500	WerFault.exe	1740-56-0x0000000000400000-0x0000000000415000-memory.exe
2244	1500	WerFault.exe	1740-56-0x0000000000400000-0x0000000000415000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1740-56-0x0000000000400000-0x0000000000415000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1740-56-0x0000000000400000-0x0000000000415000-memory.exe"
1⤵
PID:1500

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1500 -s 216
2⤵
- Program crash
PID:2900

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1500 -s 224
2⤵
- Program crash
PID:2244

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1500 -ip 1500
1⤵
PID:212

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 488 -p 1500 -ip 1500
1⤵
PID:1836