3ecd8b23fd7a59c8ba2e7aa42f9046bb096e24ee47903c35032cbe01bdb5b487

Analysis

max time kernel
76s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
15-09-2022 23:31

Target

832-58-0x0000000000070000-0x0000000000098000-memory.exe
Size

160KB
MD5

9b9d3f26aa3a1bea994a1c70e03d5c06
SHA1

29543524ab7af241df3e85fa7b849f336a91d09c
SHA256

3ecd8b23fd7a59c8ba2e7aa42f9046bb096e24ee47903c35032cbe01bdb5b487
SHA512

ac846e9381259c4e7d7c5cd4b9c68b0e1930d39abdeb4860ebb49f268aa35522ef10686473e56e7b57ea60541aaf1fa93beae751e8a8964094170ab9b4c2ea9d
SSDEEP

3072:ZYO/ZMTFgnAILj04cuRFcDrrrrc/VitDFzyRXlhfSS:ZYMZMBgnAI8zuRFcvtUBlh

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3676 2976 WerFault.exe 832-58-0x0000000000070000-0x0000000000098000-memory.exe

pid	pid_target	process	target process
3676	2976	WerFault.exe	832-58-0x0000000000070000-0x0000000000098000-memory.exe

C:\Users\Admin\AppData\Local\Temp\832-58-0x0000000000070000-0x0000000000098000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\832-58-0x0000000000070000-0x0000000000098000-memory.exe"
1⤵
PID:2976
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2976 -s 224
  2⤵
  - Program crash
  PID:3676

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 2976 -ip 2976
1⤵
PID:4168