3c637c5462a2f45e003907e6755f155b3a45e440bfc32d70f55d49adb4caa53b

Analysis

max time kernel
86s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
19/09/2022, 03:24

Target

952-152-0x0000000000D70000-0x00000000015A8000-memory.exe
Size

8.2MB
MD5

af06957856231652ede91211c4e0cb68
SHA1

3189b3c01b793db8be819855be0d5a0a77db2079
SHA256

3c637c5462a2f45e003907e6755f155b3a45e440bfc32d70f55d49adb4caa53b
SHA512

e1202e605fbe3123d3f32528b3a672047320b03ea4051f53872b8fbf8f5ffc09916b43246254840df5e08319fc0e4a7aadf78b0b72e69f96db6d7a05f771b17b
SSDEEP

98304:lPaNeE7861S85ZJB7kTVfReih54ouvOxfgT4XtYjJaLFvzbP+0ko5:scEF1bkeeuigT4Xtt5A

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2988	3960	WerFault.exe	84

C:\Users\Admin\AppData\Local\Temp\952-152-0x0000000000D70000-0x00000000015A8000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\952-152-0x0000000000D70000-0x00000000015A8000-memory.exe"
1⤵
PID:3960
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3960 -s 216
  2⤵
  - Program crash
  PID:2988

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3960 -ip 3960
1⤵
PID:4128