2c18079eaa642d58fc3b902d07025cba5933e346c16f33b068f1cb2a3919cdd8

Analysis

max time kernel
134s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
24-09-2022 01:42

Target

1916-198-0x0000000000400000-0x000000000094A000-memory.exe
Size

5.3MB
MD5

2abec25f56e7bfe9d9f920b5a6108a5f
SHA1

e08bc9e25cb0440b5adf7758e5d557b15ea927ff
SHA256

2c18079eaa642d58fc3b902d07025cba5933e346c16f33b068f1cb2a3919cdd8
SHA512

84c0e8b190ce023d8e0dfb45c8a4fdbeb70b82de669c1f5f1e3dc787ff03befa35e328b4fdad2fef849fa7cb78f7493382ceb012365c99ce8effec66bbd1bdeb
SSDEEP

24576:lP/k69a/bcq76tndALvBDXrBVKIOzRVz+:2Ea/bcq7EOLZLrBC9V6

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4368 2228 WerFault.exe 1916-198-0x0000000000400000-0x000000000094A000-memory.exe

pid	pid_target	process	target process
4368	2228	WerFault.exe	1916-198-0x0000000000400000-0x000000000094A000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1916-198-0x0000000000400000-0x000000000094A000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1916-198-0x0000000000400000-0x000000000094A000-memory.exe"
1⤵
PID:2228

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2228 -s 216
2⤵
- Program crash
PID:4368

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 2228 -ip 2228
1⤵
PID:3276