1b841c6798646c3564bf6f3c7b7033d7a17298028fccb6e8a720cd62842af3b2

Analysis

max time kernel
84s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
08-09-2022 11:11

Target

1520-69-0x0000000000400000-0x000000000042B000-memory.exe
Size

172KB
MD5

80f06b427808b2e6c7748f44d45cda7b
SHA1

d4ae1a84e9f1ab48caec98fd09b63d3be8e4bd4f
SHA256

1b841c6798646c3564bf6f3c7b7033d7a17298028fccb6e8a720cd62842af3b2
SHA512

ea1382a86e98362a504e93635d3b182284aa1a4e95a83685edadf315a9d7ae582b840f004e821c4ff4e46f5a516a227cb9b3d66d2705f1eef67ef988b86cd0c9
SSDEEP

3072:Uq3E2BfBSbEsz7nCAFVNNvBGvdO5gPaEjep8Fe7Z1iO7Zbvb54:BRBfBSosz7nCA3NHCdXaEj7Fe7Z1iOF+

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4824 4108 WerFault.exe 1520-69-0x0000000000400000-0x000000000042B000-memory.exe

pid	pid_target	process	target process
4824	4108	WerFault.exe	1520-69-0x0000000000400000-0x000000000042B000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1520-69-0x0000000000400000-0x000000000042B000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1520-69-0x0000000000400000-0x000000000042B000-memory.exe"
1⤵
PID:4108

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4108 -s 216
2⤵
- Program crash
PID:4824

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4108 -ip 4108
1⤵
PID:1004