2203a30fddc99bc2a061136458c45f8386f5582523803090c151e7b06b155ec7

Analysis

max time kernel
126s
max time network
180s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
02-09-2022 19:52

Target

1676-215-0x0000000000400000-0x000000000146C000-memory.exe
Size

16.4MB
MD5

dec289bc09b8c3f84c561784b3d008be
SHA1

29f3c13e3411189e36b79456b28141a42fb89dd1
SHA256

2203a30fddc99bc2a061136458c45f8386f5582523803090c151e7b06b155ec7
SHA512

8e59a998a86660ca2c28084ffbeae60121d2881cdeff5b6f90f13850d8d499245a4292b3b8fbc611db36f2352a2b0800c481eb23fb50e91b628abcd47842b5d2
SSDEEP

12288:CPy+9p2HD970QYzfemkdBSUjmtiV+h2CtY//7cHHlSu2XvRFjZ4xh9FaoLRm/Jzr:CPZiD9UemkeFau2gY//An4j5Fyu5B+

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4348 4756 WerFault.exe 1676-215-0x0000000000400000-0x000000000146C000-memory.exe

pid	pid_target	process	target process
4348	4756	WerFault.exe	1676-215-0x0000000000400000-0x000000000146C000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1676-215-0x0000000000400000-0x000000000146C000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1676-215-0x0000000000400000-0x000000000146C000-memory.exe"
1⤵
PID:4756

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4756 -s 180
2⤵
- Program crash
PID:4348

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4756 -ip 4756
1⤵
PID:2288