ff63b0463666abe8bc40c3cff4fc0c43f0de62b847592ff7ad6a6c9f5c854943

Analysis

max time kernel
135s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
16-06-2023 12:44

Target

4444-145-0x0000000000400000-0x0000000000430000-memory.exe
Size

192KB
MD5

703f3216cba8ac4cb5f453e96cf207b1
SHA1

005d22655fb14231567fc6d9bc576cb4366b9940
SHA256

ff63b0463666abe8bc40c3cff4fc0c43f0de62b847592ff7ad6a6c9f5c854943
SHA512

3921d22d1bf2d045cb680a973d58449e20fe66b8dee3d57073af4854eb05d5b7f414e37cb278dc39f45cd75f32f85fe4ff86f1781d27063552d6a55c0ec4ffb8
SSDEEP

3072:omM6LOe+6rxaofZJxNa6QGmiG82308e8h6:oVerbfZwAG8230

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2520 1284 WerFault.exe 4444-145-0x0000000000400000-0x0000000000430000-memory.exe

pid	pid_target	process	target process
2520	1284	WerFault.exe	4444-145-0x0000000000400000-0x0000000000430000-memory.exe

C:\Users\Admin\AppData\Local\Temp\4444-145-0x0000000000400000-0x0000000000430000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\4444-145-0x0000000000400000-0x0000000000430000-memory.exe"
1⤵
PID:1284

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1284 -s 232
2⤵
- Program crash
PID:2520

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 1284 -ip 1284
1⤵
PID:4324