81f44271a3f4a3303569a07d74c447ddd8ea1c60bdd2f4ea26cddc36d1bda62a

Analysis

max time kernel
143s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
13-07-2023 15:35

Target

2196-56-0x0000000000400000-0x0000000001B40000-memory.exe
Size

23.2MB
MD5

880ff4bea37bc7362676eabd54238942
SHA1

73ed708695b4612edaad99aaf108c021219603d3
SHA256

81f44271a3f4a3303569a07d74c447ddd8ea1c60bdd2f4ea26cddc36d1bda62a
SHA512

c6be1c807444491a66c3c005cf52913f04ed38b208e94075a5fbce16f061d25a0bdb4d8dc63e37647502ade0d7898af95afed6662b8013fb1a642f4a51d6e812
SSDEEP

6144:YZ6FhFSvGpDbnD6suIhfQFTlPPpMsTwUA:Y6vFzpH7Ns9t

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3472 2056 WerFault.exe 2196-56-0x0000000000400000-0x0000000001B40000-memory.exe

pid	pid_target	process	target process
3472	2056	WerFault.exe	2196-56-0x0000000000400000-0x0000000001B40000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2196-56-0x0000000000400000-0x0000000001B40000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2196-56-0x0000000000400000-0x0000000001B40000-memory.exe"
1⤵
PID:2056
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2056 -s 220
  2⤵
  - Program crash
  PID:3472

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 2056 -ip 2056
1⤵
PID:4368